sessionpipe-core 0.9.0 → 0.10.0

package/dist/schema.js

@@ -1,4 +1,4 @@
-// sessionpipe-core 0.9.0 · Apache-2.0 · https://sessionpipe.org
+// sessionpipe-core 0.10.0 · Apache-2.0 · https://sessionpipe.org
 
 // schema/v1.ts
 import { z } from "zod";
@@ -84,7 +84,13 @@ var Session = z.object({
   url: z.url().max(1024).optional(),
   /** An id, never an email. */
   account_id: z.string().max(128).optional(),
-  parent_id: SessionId.nullable().optional()
+  /** Whether a person attends the session, in the harness's own word. Absent = unknown, never false. */
+  attended: z.boolean().optional(),
+  parent_id: SessionId.nullable().optional(),
+  /** `<harness>:<id>` of the session that started this one on purpose (a script running
+   *  `claude -p` for it), from the launcher's environment. Absent for a subagent, whose
+   *  launcher is its parent, and when nothing says. */
+  launched_by: z.string().regex(/^[a-z][a-z0-9-]{0,39}:[A-Za-z0-9._:-]{1,128}$/).optional()
 });
 var Privacy = z.object({
   /** The redaction rulesets that ran; `secrets@1` always above tier 0. */
@@ -111,13 +117,26 @@ var EventData = z.object({
   "session.ended": Loose.extend({ reason: z.enum(["clear", "logout", "exit", "other"]) }),
   "session.backfill": Loose.extend({ started_at: Rfc3339, last_at: Rfc3339, turns: z.int().min(0).optional() }),
   "session.forgotten": Loose,
-  "turn.started": Loose.extend({ turn_id: z.string().max(128).optional(), prompt_chars: z.int().min(0).optional() }),
+  "turn.started": Loose.extend({
+    turn_id: z.string().max(128).optional(),
+    prompt_chars: z.int().min(0).optional(),
+    /** The harness's OWN word for who submitted the prompt, forwarded verbatim; not an enum
+     *  of this spec (Claude Code: user, sdk, system, loop_wakeup, schedule_wakeup,
+     *  poll_event), and a different vocabulary from session.started.source. A bare word:
+     *  tier 0 is not redacted, so the shape is the only guard. */
+    submitted_by: z.string().regex(/^[A-Za-z0-9][A-Za-z0-9_.-]{0,39}$/, "a bare word, at most 40 characters").optional(),
+    /** True when the prompt text is a block the harness wrote rather than words a person
+     *  typed; never a claim that no person caused the turn. */
+    injected: z.boolean().optional()
+  }),
   "turn.ended": Loose.extend({
     turn_id: z.string().max(128).optional(),
     reason: z.enum(["stop", "interrupt", "error"]),
     /** The harness's error class when reason is error (rate_limit, overloaded, authentication_failed, server_error …). */
     error: z.string().max(200).optional(),
-    ms: z.int().min(0).optional()
+    ms: z.int().min(0).optional(),
+    /** Background work the harness reports still in flight as the turn ends, each of which wakes the session when it finishes (Claude Code: shell commands, monitors, subagents, workflows). Absent when the harness doesn't say. */
+    background: z.int().min(0).optional()
   }),
   "turn.transcript": Loose.extend({
     turn: z.int().min(0),
@@ -186,7 +205,12 @@ var B64Url = z.string().regex(/^[A-Za-z0-9_-]*$/, "base64url, no padding");
 var MachineId = z.string().regex(/^m_[A-Za-z0-9_-]{16,40}$/, "m_ + 16\u201340 base64url");
 var SessionRef = z.string().regex(/^[a-z][a-z0-9-]{0,39}:[A-Za-z0-9._:-]{1,128}$/, "<harness>:<session id>");
 var ControlKind = z.enum(["prompt", "permission.answer", "cancel", "start", "key.add"]);
+var KeyTypes = z.array(z.enum(["passkey", "device"])).min(1).max(2);
 var DeliveryMode = z.enum(["sdk", "waiter", "turn", "api", "resume", "fork"]);
+var StartPermission = z.enum(["read", "safe", "edits", "auto"]);
+var RunLevel = z.enum(["read", "safe", "edits", "auto", "inherit"]);
+var ModelId = z.string().min(1).max(100).regex(/^[A-Za-z0-9][A-Za-z0-9._:/@[\]-]*$/, "a model id");
+var HarnessName = z.string().regex(/^[a-z][a-z0-9-]{0,39}$/);
 var ControlFile = z.object({
   /** Written as is (NFC) into the session's folder: no slash, backslash or control
    *  character, not starting with a dot. */
@@ -215,20 +239,24 @@ var ControlCommand = z.object({
   decision: z.enum(["allow", "deny"]).optional(),
   /** Shown to the model beside a decision. */
   note: z.string().max(2e3).optional(),
-  /** start: the absolute folder the new session runs in. */
+  /** start: the folder the new session runs in: absolute, or `~` / `~/…` under the
+   *  home of the user the machine's daemon runs as, as events write it. */
   cwd: z.string().max(1024).optional(),
-  /** key.add (session `sessionpipe:keys`): the new device's passkey, which the machine
-   *  trusts once a key it already trusts signed this command. */
-  key: z.object({
-    id: z.string().regex(/^[A-Za-z0-9_-]{16,1400}$/),
-    alg: z.union([z.literal(-7), z.literal(-257)]),
-    spki: z.string().regex(/^[A-Za-z0-9_-]{40,2000}$/)
-  }).optional(),
+  /** key.add (session `sessionpipe:keys`): the new device's key (a passkey or a device
+   *  key, control-key.json), which the machine trusts once a key it already trusts
+   *  signed this command. */
+  key: z.lazy(() => ControlKey).optional(),
   /** key.add: what the person calls the device. */
   name: z.string().min(1).max(80).optional(),
-  /** start only: 1–10 files, together at most 50 MiB, downloaded and checked by hash
-   *  before the session starts. */
+  /** start, prompt: 1–10 files, together at most 50 MiB, downloaded and checked by hash
+   *  before the session starts or the message is delivered. On a prompt, only to a
+   *  machine whose hello says `prompt_files`. */
   files: z.array(ControlFile).min(1).max(10).optional(),
+  /** start only: the level the new session runs at, at most the machine's mode. Send
+   *  it only to a machine whose hello advertises it for the harness (`start`). */
+  permission: StartPermission.optional(),
+  /** start only: the model the harness runs. As `permission`: only when advertised. */
+  model: ModelId.optional(),
   /** At least 16 random bytes, base64url. */
   nonce: z.string().regex(/^[A-Za-z0-9_-]{22,64}$/),
   /** Epoch ms, the signing device's clock. */
@@ -250,11 +278,29 @@ var ControlAssertion = z.object({
   cd: B64Url.min(1),
   sig: B64Url.min(1)
 });
-var ControlKey = z.object({
-  id: B64Url.min(16).max(1400),
-  alg: z.union([z.literal(-7), z.literal(-257)]),
-  spki: B64Url.min(1)
+var ControlDeviceSignature = z.strictObject({
+  cred: B64Url.min(1),
+  /** 64 bytes r‖s, base64url without padding. */
+  sig: B64Url.min(1)
 });
+var ControlKey = z.xor([
+  z.strictObject({
+    id: B64Url.min(16).max(1400),
+    alg: z.union([z.literal(-7), z.literal(-257)]),
+    spki: B64Url.min(1)
+  }),
+  z.strictObject({
+    /** SHA-256 of the SPKI bytes, base64url without padding. */
+    id: z.string().regex(/^[A-Za-z0-9_-]{43}$/, "SHA-256 of the spki, base64url"),
+    alg: z.literal(-7),
+    spki: B64Url.min(1),
+    type: z.literal("device"),
+    /** The private key was made in a hardware key store and never leaves it. */
+    store: z.literal("hardware"),
+    /** The store will not sign without verifying the person, every time. */
+    uv: z.literal("each-use")
+  })
+]);
 var ControlMessage = z.object({
   /** The receiver's id for this message; the ack key. Not signed: the nonce inside cmd is. */
   id: Ulid,
@@ -262,10 +308,14 @@ var ControlMessage = z.object({
   cmd: z.string().min(1).max(48e3),
   /** The day key's ECDSA P-256 / SHA-256 signature over cmd: raw r‖s, base64url. */
   csig: B64Url.nullable().optional(),
-  /** The grant vouching for the day key: its string plus the passkey's assertion over sha256(str). */
-  grant: ControlAssertion.extend({ str: z.string().min(1).max(2e3) }).nullable().optional(),
-  /** Instead of csig + grant: one passkey assertion over sha256(cmd). */
-  confirm: ControlAssertion.nullable().optional(),
+  /** The grant vouching for the day key: its string plus the passkey's assertion over
+   *  sha256(str), or a device key's signature over it (CONTROL.md §3.2). */
+  grant: z.xor([
+    ControlAssertion.extend({ str: z.string().min(1).max(2e3) }),
+    ControlDeviceSignature.extend({ str: z.string().min(1).max(2e3) })
+  ]).nullable().optional(),
+  /** Instead of csig + grant: one passkey assertion (or device signature) over sha256(cmd). */
+  confirm: z.xor([ControlAssertion, ControlDeviceSignature]).nullable().optional(),
   /** The receiver's clock. */
   at: Rfc3339,
   /** After this the machine MUST NOT act and acks `expired`; at most 24 h after `at`. */
@@ -284,20 +334,27 @@ var ControlAck = z.object({
       /** The session that took it, when not the one named (a fork's copy, a started session). */
       session: SessionRef.optional(),
       /** refused: the verifier's code, or the machine's own (`folder`, `no_attention`, `busy`);
-       *  failed: `file` when a start's attachment couldn't be fetched, checked or written. */
+       *  failed: `file` when a start's attachment couldn't be fetched, checked or written,
+       *  `model` when the harness wouldn't run the start's model. */
       code: z.string().regex(/^[a-z_]{1,40}$/).optional(),
       detail: z.string().max(500).optional(),
       /** resume / fork / start: the agent's reply, redacted by the secrets ruleset. */
       reply: z.string().max(2e4).optional(),
       /** progress only: rises with every progress ack for this id; a receiver keeps the highest. */
-      seq: z.int().min(0).optional()
+      seq: z.int().min(0).optional(),
+      /** taken, delivered of a start: the options it ran with (`model` only when one was
+       *  asked for). A receiver shows this, never what was asked. */
+      applied: z.strictObject({ permission: RunLevel.optional(), model: ModelId.optional() }).optional()
     })
   ).min(1)
 });
 var HarnessAccount = z.object({
   harness: z.string().regex(/^[a-z][a-z0-9-]{0,39}$/),
   id: z.string().min(1).max(128),
-  email: z.string().max(254).optional()
+  email: z.string().max(254).optional(),
+  /** What to call an account that has no email: a Claude Code home that runs on
+   *  another API is named by its endpoint's host (`api.z.ai`). */
+  name: z.string().min(1).max(200).optional()
 });
 var ControlPairStart = z.object({
   /** Open pairing: a random secret only this terminal knows. Status polls present it
@@ -312,14 +369,18 @@ var ControlPairStart = z.object({
   /** The folders the machine lets sessions run in, for the receiver's "new session"
    *  picker. Informational: the machine checks its own list again. */
   folders: z.array(z.string().max(1024)).max(50).optional(),
-  /** safe: nothing that needs approval runs unattended; auto: the harness's auto mode. */
-  mode: z.enum(["safe", "auto"]).optional(),
+  /** safe: nothing that needs approval runs unattended; auto: the harness's auto mode;
+   *  inherit: no permission flag, each harness's own default there. Chosen at the machine. */
+  mode: z.enum(["safe", "auto", "inherit"]).optional(),
   /** The harness accounts signed in here, so the receiver's board can name each
    *  `session.account_id` (CONTROL.md §2). */
   accounts: z.array(HarnessAccount).max(20).optional(),
   /** The machine takes `files` on a start (downloads, checks and writes them). A
    *  machine that doesn't say so may ignore them: a receiver SHOULD NOT send it files. */
-  files: z.boolean().optional()
+  files: z.boolean().optional(),
+  /** The kinds of key this machine takes (unique; absent means `["passkey"]`). A
+   *  client offers a device key only to a machine that lists `device`. */
+  key_types: KeyTypes.optional()
 });
 var ControlPairStarted = z.object({
   machine: MachineId,
@@ -331,8 +392,10 @@ var ControlPairStarted = z.object({
 });
 var ControlPaired = z.object({
   status: z.enum(["pending", "paired", "expired"]),
+  /** The key approved, whole: a device key keeps its type, store and uv. */
   key: ControlKey.optional(),
-  proof: ControlAssertion.optional(),
+  /** The key's proof: a passkey assertion, or a device signature for purpose `pair`. */
+  proof: z.xor([ControlAssertion, ControlDeviceSignature]).optional(),
   /** The machine's own bearer for polls, acks and hello: opens nothing else. Minted
    *  once, at the first pairing of a machine. */
   token: z.string().min(16).max(256).optional(),
@@ -354,11 +417,32 @@ var ControlHello = z.object({
   waiting: z.array(SessionRef).max(500).optional(),
   /** As in control-pair.json: informational, re-checked on the machine. */
   folders: z.array(z.string().max(1024)).max(50).optional(),
-  mode: z.enum(["safe", "auto"]).optional(),
+  mode: z.enum(["safe", "auto", "inherit"]).optional(),
   /** As in control-pair.json: read again for every hello, so a new sign-in is named. */
   accounts: z.array(HarnessAccount).max(20).optional(),
   /** As in control-pair.json. */
-  files: z.boolean().optional()
+  files: z.boolean().optional(),
+  /** The machine takes `files` on a prompt too (CONTROL.md §6 `prompt`). One that
+   *  doesn't say so refuses them: a receiver SHOULD NOT send it a prompt with files. */
+  prompt_files: z.boolean().optional(),
+  /** Per harness in `harnesses`: the options a start may carry (CONTROL.md §2). No
+   *  entry: neither `permission` nor `model`. */
+  start: z.record(
+    HarnessName,
+    z.object({
+      /** The levels it starts at here, already capped by `mode`. */
+      permissions: z.array(StartPermission).min(1).max(4).meta({ uniqueItems: true }),
+      /** What a start that names none gets: one of `permissions`, or `inherit` on an
+       *  inherit machine. */
+      permission: RunLevel,
+      /** Model ids the harness offers here: a suggestion, not a promise. */
+      models: z.array(ModelId).max(50).optional(),
+      /** Any well-formed model is passed to the harness (which may still reject it). */
+      any_model: z.boolean().optional()
+    })
+  ).refine((o) => Object.keys(o).length <= 50, "at most 50 harnesses").meta({ maxProperties: 50 }).optional(),
+  /** As in control-pair.json. */
+  key_types: KeyTypes.optional()
 });
 var WellKnown = z.object({
   protocol: z.array(z.int().min(1)).min(1),
@@ -381,11 +465,17 @@ var WellKnown = z.object({
     /** How commands are signed: the WebAuthn rp id keys are enrolled for, and the algorithms. */
     signing: z.object({
       rp_id: z.string().min(1).max(253),
-      algs: z.array(z.union([z.literal(-7), z.literal(-257)])).min(1)
+      algs: z.array(z.union([z.literal(-7), z.literal(-257)])).min(1),
+      /** The kinds of key the receiver stores and carries whole (CONTROL.md §2).
+       *  Absent means `["passkey"]`. */
+      key_types: KeyTypes.optional()
     }),
     /** Informational: the receiver accepts `files` on a start and serves
      *  `GET {control}/files/{sha256}`. */
-    files: z.boolean().optional()
+    files: z.boolean().optional(),
+    /** The receiver shows a machine in `inherit` mode as that, never as safe or auto.
+     *  A daemon pairs in, or switches to, `inherit` only with receivers that say so. */
+    inherit: z.boolean().optional()
   }).optional()
 });
 var SCHEMAS = {
@@ -414,6 +504,7 @@ export {
   ControlAck,
   ControlAssertion,
   ControlCommand,
+  ControlDeviceSignature,
   ControlFile,
   ControlGrant,
   ControlHello,
@@ -434,14 +525,18 @@ export {
   Harness,
   HarnessAccount,
   KNOWN_TYPES,
+  KeyTypes,
   MachineId,
+  ModelId,
   PROTOCOL,
   Privacy,
   Rfc3339,
+  RunLevel,
   SCHEMAS,
   Session,
   SessionId,
   SessionRef,
+  StartPermission,
   TYPE_TIER,
   Tier,
   ToolName,

package/dist/schema.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../schema/v1.ts"],
-  "sourcesContent": ["// SPDX-License-Identifier: Apache-2.0\n// The one source for the protocol's shapes. schemas/v1/*.json are GENERATED from\n// this file (`npm run schemas`); core's runtime types are inferred from it with\n// type-only imports, so zod never enters the zero-dependency bundle. Prose lives in\n// spec/PROTOCOL.md; a rule that is not encoded here is a MUST in words only.\nimport { z } from \"zod\";\n\nexport const PROTOCOL = 1;\n\n/** Dotted, lowercase. Unknown types MUST be accepted and stored. */\nexport const EventType = z\n  .string()\n  .regex(/^(?:native|[a-z][a-z0-9]*(?:\\.[a-z][a-z0-9_]*)+)$/, \"dotted lowercase type, or native\");\n\nexport const KNOWN_TYPES = [\n  \"session.started\",\n  \"session.heartbeat\",\n  \"session.ended\",\n  \"session.backfill\",\n  \"session.forgotten\",\n  \"turn.started\",\n  \"turn.ended\",\n  \"turn.transcript\",\n  \"turn.progress\",\n  \"tool.started\",\n  \"tool.ended\",\n  \"files.changed\",\n  \"attention.needed\",\n  \"attention.cleared\",\n  \"subagent.started\",\n  \"subagent.ended\",\n  \"context.compacted\",\n  \"native\",\n] as const;\n\n/** The lowest tier that carries each known type. */\nexport const TYPE_TIER: Record<(typeof KNOWN_TYPES)[number], 0 | 1 | 2 | 3> = {\n  \"session.started\": 0,\n  \"session.heartbeat\": 0,\n  \"session.ended\": 0,\n  \"session.backfill\": 0,\n  \"session.forgotten\": 0,\n  \"turn.started\": 0,\n  \"turn.ended\": 0,\n  \"turn.transcript\": 2,\n  \"turn.progress\": 2,\n  \"tool.started\": 1,\n  \"tool.ended\": 1,\n  \"files.changed\": 1,\n  \"attention.needed\": 0,\n  \"attention.cleared\": 0,\n  \"subagent.started\": 1,\n  \"subagent.ended\": 1,\n  \"context.compacted\": 1,\n  native: 3,\n};\n\nexport const HARNESS_NAMES = [\n  \"claude-code\",\n  \"codex\",\n  \"gemini-cli\",\n  \"antigravity\",\n  \"devin\",\n  \"cursor\",\n  \"copilot-cli\",\n  \"droid\",\n  \"kiro\",\n  \"opencode\",\n] as const;\n\nexport const Tier = z.int().min(0).max(3);\nexport const Ulid = z.string().regex(/^[0-9A-HJKMNP-TV-Z]{26}$/, \"ULID\");\nexport const Rfc3339 = z.iso.datetime({ offset: false, precision: 3 });\nexport const SessionId = z\n  .string()\n  .min(1)\n  .max(128)\n  .regex(/^[A-Za-z0-9._:-]+$/);\nexport const ToolName = z.string().regex(/^[A-Za-z0-9_.:-]{1,120}$/);\n\nexport const Harness = z.object({\n  /** From the registry in ADAPTERS.md; a name outside it is allowed ([a-z0-9-]). */\n  name: z.string().regex(/^[a-z][a-z0-9-]{0,39}$/),\n  version: z.string().max(64).optional(),\n  /** The harness's own event name (`PostToolUse`, `agentStop`). */\n  event: z.string().max(64).optional(),\n});\n\nexport const Session = z.object({\n  id: SessionId,\n  /** Monotonic per session per sender; the dedup key with harness.name and id. */\n  seq: z.int().min(0),\n  machine: z.string().max(80).optional(),\n  /** Home is written `~`. */\n  cwd: z.string().max(1024).optional(),\n  /** A remote URL with credentials stripped. */\n  repo: z.string().max(512).optional(),\n  branch: z.string().max(256).optional(),\n  model: z.string().max(128).optional(),\n  title: z.string().max(200).optional(),\n  title_source: z.enum([\"custom\", \"harness\", \"first-ask\"]).optional(),\n  url: z.url().max(1024).optional(),\n  /** An id, never an email. */\n  account_id: z.string().max(128).optional(),\n  parent_id: SessionId.nullable().optional(),\n});\n\nexport const Privacy = z.object({\n  /** The redaction rulesets that ran; `secrets@1` always above tier 0. */\n  rulesets: z.array(z.string().regex(/^[a-z][a-z0-9-]*@\\d+$/)),\n  pii: z.boolean(),\n});\n\nexport const Event = z.object({\n  protocol: z.literal(PROTOCOL),\n  id: Ulid,\n  type: EventType,\n  time: Rfc3339,\n  tier: Tier,\n  harness: Harness,\n  session: Session,\n  privacy: Privacy,\n  /** Per type (see EventData); extra keys allowed and kept. */\n  data: z.record(z.string(), z.unknown()),\n});\n\n// --- data per type --------------------------------------------------------------\n\nconst Loose = z.object({}).loose();\nexport const AttentionKind = z.enum([\"permission\", \"question\", \"elicitation\", \"idle\", \"error\"]);\n\nexport const EventData = z.object({\n  \"session.started\": Loose.extend({ source: z.enum([\"startup\", \"resume\", \"clear\", \"compact\", \"fork\", \"unknown\"]) }),\n  \"session.heartbeat\": Loose,\n  \"session.ended\": Loose.extend({ reason: z.enum([\"clear\", \"logout\", \"exit\", \"other\"]) }),\n  \"session.backfill\": Loose.extend({ started_at: Rfc3339, last_at: Rfc3339, turns: z.int().min(0).optional() }),\n  \"session.forgotten\": Loose,\n  \"turn.started\": Loose.extend({ turn_id: z.string().max(128).optional(), prompt_chars: z.int().min(0).optional() }),\n  \"turn.ended\": Loose.extend({\n    turn_id: z.string().max(128).optional(),\n    reason: z.enum([\"stop\", \"interrupt\", \"error\"]),\n    /** The harness's error class when reason is error (rate_limit, overloaded, authentication_failed, server_error \u2026). */\n    error: z.string().max(200).optional(),\n    ms: z.int().min(0).optional(),\n  }),\n  \"turn.transcript\": Loose.extend({\n    turn: z.int().min(0),\n    user: z.string().max(20_000),\n    assistant: z.string().max(20_000),\n    at: Rfc3339,\n  }),\n  /** The turn still running: its prompt and what the assistant has said so far. A\n   *  later turn.progress for the same turn replaces it; the turn.transcript with the\n   *  same number supersedes it. Over 20 000 chars, the assistant side keeps its END. */\n  \"turn.progress\": Loose.extend({\n    turn: z.int().min(0),\n    user: z.string().max(20_000),\n    assistant: z.string().max(20_000),\n    at: Rfc3339,\n  }),\n  \"tool.started\": Loose.extend({\n    tool: ToolName,\n    call_id: z.string().max(128).optional(),\n    turn_id: z.string().max(128).optional(),\n    /** Set when a subagent made the call. */\n    agent_id: z.string().max(128).optional(),\n    input: z.unknown().optional(),\n  }),\n  \"tool.ended\": Loose.extend({\n    tool: ToolName,\n    call_id: z.string().max(128).optional(),\n    turn_id: z.string().max(128).optional(),\n    agent_id: z.string().max(128).optional(),\n    ms: z.int().min(0).optional(),\n    ok: z.boolean(),\n    error: z.string().max(2000).optional(),\n    input: z.unknown().optional(),\n    output: z.unknown().optional(),\n  }),\n  \"files.changed\": Loose.extend({ paths: z.array(z.string().max(1024)).max(500) }),\n  \"attention.needed\": Loose.extend({\n    attention_id: z.string().max(128),\n    kind: AttentionKind,\n    tool: ToolName.optional(),\n    message: z.string().max(200).optional(),\n  }),\n  \"attention.cleared\": Loose.extend({\n    attention_id: z.string().max(128),\n    how: z.enum([\"answered\", \"cancelled\", \"timeout\", \"unknown\"]),\n  }),\n  \"subagent.started\": Loose.extend({ agent_id: z.string().max(128), agent_type: z.string().max(128).optional() }),\n  \"subagent.ended\": Loose.extend({ agent_id: z.string().max(128), agent_type: z.string().max(128).optional() }),\n  \"context.compacted\": Loose.extend({ trigger: z.enum([\"manual\", \"auto\"]) }),\n  native: Loose,\n});\n\n// --- wire -----------------------------------------------------------------------\n\nexport const Batch = z.object({ events: z.array(Event).min(1).max(50) });\n\nexport const BatchResponse = z.object({\n  accepted: z.int().min(0),\n  duplicates: z.int().min(0),\n  rejected: z.array(z.object({ id: Ulid, reason: z.string().max(200) })),\n  max_tier: Tier,\n});\n\nexport const ErrorResponse = z.object({\n  reason: z.string().max(200),\n  supported: z.array(z.int()).optional(),\n  max_tier: Tier.optional(),\n});\n\nexport const Capability = z.enum([\"events\", \"backfill\", \"forget\", \"control\", \"native\"]);\n\n// --- control (CONTROL.md) ---------------------------------------------------------\n\nconst B64Url = z.string().regex(/^[A-Za-z0-9_-]*$/, \"base64url, no padding\");\nexport const MachineId = z.string().regex(/^m_[A-Za-z0-9_-]{16,40}$/, \"m_ + 16\u201340 base64url\");\n/** `<harness>:<id>`; the id follows its adapter's rule (Claude Code: a UUID). */\nexport const SessionRef = z.string().regex(/^[a-z][a-z0-9-]{0,39}:[A-Za-z0-9._:-]{1,128}$/, \"<harness>:<session id>\");\nexport const ControlKind = z.enum([\"prompt\", \"permission.answer\", \"cancel\", \"start\", \"key.add\"]);\nexport const DeliveryMode = z.enum([\"sdk\", \"waiter\", \"turn\", \"api\", \"resume\", \"fork\"]);\n\n/** A file attached to a `start` (CONTROL.md \u00A73.1). The bytes wait on the receiver\n *  (`GET {control}/files/{sha256}`); the signed hash is what the machine checks.\n *  Beyond this shape the verifier also checks: the name's length after NFC, names\n *  unique case-insensitively, and the sizes adding up to at most 50 MiB. */\nexport const ControlFile = z.object({\n  /** Written as is (NFC) into the session's folder: no slash, backslash or control\n   *  character, not starting with a dot. */\n  name: z\n    .string()\n    .min(1)\n    .max(200)\n    .regex(\n      // biome-ignore lint/suspicious/noControlCharactersInRegex: control characters are what it rejects\n      /^[^./\\\\\\x00-\\x1f\\x7f][^/\\\\\\x00-\\x1f\\x7f]*$/,\n      \"a file name: no slash, backslash, control character or leading dot\",\n    ),\n  /** Media type, `type/subtype` (case-insensitive). */\n  type: z\n    .string()\n    .min(1)\n    .max(100)\n    .regex(/^[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]*\\/[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]*$/, \"type/subtype\"),\n  /** Bytes: 1 to 25 MiB. */\n  size: z.int().min(1).max(26_214_400),\n  /** SHA-256 of the bytes, base64url without padding. */\n  sha256: z.string().regex(/^[A-Za-z0-9_-]{43}$/, \"43 base64url characters\"),\n});\n\n/** The signed command, as the device writes it. The machine verifies the EXACT string\n *  it received (control.json `cmd`) and never re-serializes it. */\nexport const ControlCommand = z.object({\n  v: z.literal(1),\n  t: z.literal(\"sessionpipe.control\"),\n  machine: MachineId,\n  kind: ControlKind,\n  session: SessionRef,\n  /** prompt, start: the message for the model. */\n  text: z.string().min(1).max(20_000).optional(),\n  /** permission.answer: the attention_id being answered. */\n  for: z.string().min(1).max(128).optional(),\n  decision: z.enum([\"allow\", \"deny\"]).optional(),\n  /** Shown to the model beside a decision. */\n  note: z.string().max(2000).optional(),\n  /** start: the absolute folder the new session runs in. */\n  cwd: z.string().max(1024).optional(),\n  /** key.add (session `sessionpipe:keys`): the new device's passkey, which the machine\n   *  trusts once a key it already trusts signed this command. */\n  key: z\n    .object({\n      id: z.string().regex(/^[A-Za-z0-9_-]{16,1400}$/),\n      alg: z.union([z.literal(-7), z.literal(-257)]),\n      spki: z.string().regex(/^[A-Za-z0-9_-]{40,2000}$/),\n    })\n    .optional(),\n  /** key.add: what the person calls the device. */\n  name: z.string().min(1).max(80).optional(),\n  /** start only: 1\u201310 files, together at most 50 MiB, downloaded and checked by hash\n   *  before the session starts. */\n  files: z.array(ControlFile).min(1).max(10).optional(),\n  /** At least 16 random bytes, base64url. */\n  nonce: z.string().regex(/^[A-Za-z0-9_-]{22,64}$/),\n  /** Epoch ms, the signing device's clock. */\n  iat: z.int().min(1),\n});\n\n/** A day grant's signed string: a passkey vouches for a device key for \u2264 24 h. */\nexport const ControlGrant = z.object({\n  v: z.literal(1),\n  t: z.literal(\"sessionpipe.grant\"),\n  /** The day key: P-256 SPKI, base64url. */\n  pub: B64Url.min(1),\n  iat: z.int().min(1),\n  exp: z.int().min(1),\n  /** The receiver's WebAuthn rp id (well-known control.signing.rp_id). */\n  rp: z.string().min(1).max(253),\n});\n\n/** A WebAuthn assertion: credential id, authenticatorData, clientDataJSON, signature. */\nexport const ControlAssertion = z.object({\n  cred: B64Url.min(1),\n  ad: B64Url.min(1),\n  cd: B64Url.min(1),\n  sig: B64Url.min(1),\n});\n\n/** A key enrolled on a machine: a passkey's credential id, COSE alg, SPKI. */\nexport const ControlKey = z.object({\n  id: B64Url.min(16).max(1400),\n  alg: z.union([z.literal(-7), z.literal(-257)]),\n  spki: B64Url.min(1),\n});\n\n/** One message as a receiver carries it: its own envelope around the signed bytes. */\nexport const ControlMessage = z.object({\n  /** The receiver's id for this message; the ack key. Not signed: the nonce inside cmd is. */\n  id: Ulid,\n  /** The command string, exactly as signed (\u2264 48 000 characters). */\n  cmd: z.string().min(1).max(48_000),\n  /** The day key's ECDSA P-256 / SHA-256 signature over cmd: raw r\u2016s, base64url. */\n  csig: B64Url.nullable().optional(),\n  /** The grant vouching for the day key: its string plus the passkey's assertion over sha256(str). */\n  grant: ControlAssertion.extend({ str: z.string().min(1).max(2000) })\n    .nullable()\n    .optional(),\n  /** Instead of csig + grant: one passkey assertion over sha256(cmd). */\n  confirm: ControlAssertion.nullable().optional(),\n  /** The receiver's clock. */\n  at: Rfc3339,\n  /** After this the machine MUST NOT act and acks `expired`; at most 24 h after `at`. */\n  expires_at: Rfc3339,\n});\n\nexport const ControlPoll = z.object({ messages: z.array(ControlMessage) });\n\n/** `taken` is the one non-final outcome: the machine verified the message and is\n *  delivering it (a headless resume can take minutes); a final ack follows. */\n/** `progress` (not final): the answer so far, whole, in `reply`, with a rising `seq`.\n *  `taken` (not final): verified and being delivered. Every other outcome is final. */\nexport const ControlOutcome = z.enum([\"progress\", \"taken\", \"delivered\", \"expired\", \"unsupported\", \"failed\", \"refused\"]);\n\nexport const ControlAck = z.object({\n  acks: z\n    .array(\n      z.object({\n        id: Ulid,\n        outcome: ControlOutcome,\n        at: Rfc3339,\n        /** delivered: how it reached the session. */\n        mode: DeliveryMode.optional(),\n        /** The session that took it, when not the one named (a fork's copy, a started session). */\n        session: SessionRef.optional(),\n        /** refused: the verifier's code, or the machine's own (`folder`, `no_attention`, `busy`);\n         *  failed: `file` when a start's attachment couldn't be fetched, checked or written. */\n        code: z\n          .string()\n          .regex(/^[a-z_]{1,40}$/)\n          .optional(),\n        detail: z.string().max(500).optional(),\n        /** resume / fork / start: the agent's reply, redacted by the secrets ruleset. */\n        reply: z.string().max(20_000).optional(),\n        /** progress only: rises with every progress ack for this id; a receiver keeps the highest. */\n        seq: z.int().min(0).optional(),\n      }),\n    )\n    .min(1),\n});\n\n/** A harness account signed in on the machine: the id `session.account_id` carries,\n *  and the email it signs in with, so a receiver the person paired with can name the\n *  account rather than show an id. Only pair and hello carry it, never an event. */\nexport const HarnessAccount = z.object({\n  harness: z.string().regex(/^[a-z][a-z0-9-]{0,39}$/),\n  id: z.string().min(1).max(128),\n  email: z.string().max(254).optional(),\n});\n\n/** `POST {control}/pair`, sent with the person's sink token from their own terminal \u2014\n *  or, where the receiver declares `control.open_pairing`, with no token and a\n *  `poll_key` (CONTROL.md \u00A72). */\nexport const ControlPairStart = z.object({\n  /** Open pairing: a random secret only this terminal knows. Status polls present it\n   *  as their bearer; the receiver keeps only a hash. */\n  poll_key: z\n    .string()\n    .regex(/^[A-Za-z0-9_-]{22,128}$/)\n    .optional(),\n  /** Set when adding a key to a machine already paired. */\n  machine: MachineId.optional(),\n  name: z.string().min(1).max(80),\n  harnesses: z.array(z.string().regex(/^[a-z][a-z0-9-]{0,39}$/)).max(20),\n  modes: z.array(DeliveryMode),\n  version: z.string().max(40),\n  /** The folders the machine lets sessions run in, for the receiver's \"new session\"\n   *  picker. Informational: the machine checks its own list again. */\n  folders: z.array(z.string().max(1024)).max(50).optional(),\n  /** safe: nothing that needs approval runs unattended; auto: the harness's auto mode. */\n  mode: z.enum([\"safe\", \"auto\"]).optional(),\n  /** The harness accounts signed in here, so the receiver's board can name each\n   *  `session.account_id` (CONTROL.md \u00A72). */\n  accounts: z.array(HarnessAccount).max(20).optional(),\n  /** The machine takes `files` on a start (downloads, checks and writes them). A\n   *  machine that doesn't say so may ignore them: a receiver SHOULD NOT send it files. */\n  files: z.boolean().optional(),\n});\n\n/** The receiver's answer: where the person confirms, and the digits both screens show. */\nexport const ControlPairStarted = z.object({\n  machine: MachineId,\n  code: z.string().regex(/^[A-Za-z0-9_-]{6,32}$/),\n  url: z.url(),\n  /** Six digits the terminal and the receiver's page both show. */\n  check: z.string().regex(/^\\d{6}$/),\n  expires_at: Rfc3339,\n});\n\n/** `GET {control}/pair?code=\u2026` once the person confirmed. The machine verifies `proof`\n *  over sha256(\"sessionpipe.pair:<machine>:<code>\") before it trusts `key`. */\nexport const ControlPaired = z.object({\n  status: z.enum([\"pending\", \"paired\", \"expired\"]),\n  key: ControlKey.optional(),\n  proof: ControlAssertion.optional(),\n  /** The machine's own bearer for polls, acks and hello: opens nothing else. Minted\n   *  once, at the first pairing of a machine. */\n  token: z.string().min(16).max(256).optional(),\n  /** Optional: a key for the events lane (`sink add`), so the receiver's session board\n   *  shows this machine without a second step. Handed over once. */\n  sink_token: z.string().min(16).max(256).optional(),\n  /** Optional: who approved, in the receiver's words (a @handle), so the terminal can\n   *  say whose passkey it now trusts. */\n  account: z.string().max(200).optional(),\n});\n\n/** `POST {control}/hello`: what the machine can do right now. */\nexport const ControlHello = z.object({\n  name: z.string().min(1).max(80),\n  harnesses: z.array(z.string().regex(/^[a-z][a-z0-9-]{0,39}$/)).max(20),\n  modes: z.array(DeliveryMode),\n  /** Credential ids of the keys enrolled on the machine. */\n  keys: z.array(B64Url.min(16).max(1400)).max(50),\n  version: z.string().max(40),\n  /** Live sessions with a waiter parked on the daemon's socket. */\n  waiting: z.array(SessionRef).max(500).optional(),\n  /** As in control-pair.json: informational, re-checked on the machine. */\n  folders: z.array(z.string().max(1024)).max(50).optional(),\n  mode: z.enum([\"safe\", \"auto\"]).optional(),\n  /** As in control-pair.json: read again for every hello, so a new sign-in is named. */\n  accounts: z.array(HarnessAccount).max(20).optional(),\n  /** As in control-pair.json. */\n  files: z.boolean().optional(),\n});\n\nexport const WellKnown = z.object({\n  protocol: z.array(z.int().min(1)).min(1),\n  max_tier: Tier,\n  capabilities: z.array(z.string().regex(/^[a-z][a-z0-9-]*$/)),\n  auth: z.array(z.enum([\"bearer\"])).default([\"bearer\"]),\n  endpoints: z.object({\n    events: z.string(),\n    control: z.string().optional(),\n    native: z.string().optional(),\n  }),\n  batch: z.object({ max_events: z.int().min(1).max(50), max_bytes: z.int().min(1024).max(262_144) }),\n  control: z\n    .object({\n      wait_max_s: z.int().min(1).max(60),\n      /** Pairing may start with no token: the person approves the link signed in. */\n      open_pairing: z.boolean().optional(),\n      /** MCP servers (`mcp__<server>`) a session answering this receiver's message may\n       *  use without asking. MCP servers only: a daemon ignores anything else. */\n      session_tools: z\n        .array(z.string().regex(/^mcp__[A-Za-z0-9_-]{1,64}$/))\n        .max(8)\n        .optional(),\n      /** How commands are signed: the WebAuthn rp id keys are enrolled for, and the algorithms. */\n      signing: z.object({\n        rp_id: z.string().min(1).max(253),\n        algs: z.array(z.union([z.literal(-7), z.literal(-257)])).min(1),\n      }),\n      /** Informational: the receiver accepts `files` on a start and serves\n       *  `GET {control}/files/{sha256}`. */\n      files: z.boolean().optional(),\n    })\n    .optional(),\n});\n\n/** What `npm run schemas` writes to schemas/v1/<name>.json. */\nexport const SCHEMAS = {\n  event: Event,\n  \"event-data\": EventData,\n  batch: Batch,\n  \"batch-response\": BatchResponse,\n  error: ErrorResponse,\n  \"well-known\": WellKnown,\n  control: ControlMessage,\n  \"control-command\": ControlCommand,\n  \"control-grant\": ControlGrant,\n  \"control-key\": ControlKey,\n  \"control-poll\": ControlPoll,\n  \"control-ack\": ControlAck,\n  \"control-pair\": ControlPairStart,\n  \"control-pair-started\": ControlPairStarted,\n  \"control-paired\": ControlPaired,\n  \"control-hello\": ControlHello,\n} as const;\n"],
-  "mappings": ";;;AAKA,SAAS,SAAS;AAEX,IAAM,WAAW;AAGjB,IAAM,YAAY,EACtB,OAAO,EACP,MAAM,qDAAqD,kCAAkC;AAEzF,IAAM,cAAc;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,YAAiE;AAAA,EAC5E,mBAAmB;AAAA,EACnB,qBAAqB;AAAA,EACrB,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,mBAAmB;AAAA,EACnB,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,qBAAqB;AAAA,EACrB,QAAQ;AACV;AAEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC;AACjC,IAAM,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,MAAM;AAChE,IAAM,UAAU,EAAE,IAAI,SAAS,EAAE,QAAQ,OAAO,WAAW,EAAE,CAAC;AAC9D,IAAM,YAAY,EACtB,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,oBAAoB;AACtB,IAAM,WAAW,EAAE,OAAO,EAAE,MAAM,0BAA0B;AAE5D,IAAM,UAAU,EAAE,OAAO;AAAA;AAAA,EAE9B,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB;AAAA,EAC/C,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAErC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AACrC,CAAC;AAEM,IAAM,UAAU,EAAE,OAAO;AAAA,EAC9B,IAAI;AAAA;AAAA,EAEJ,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAClB,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAErC,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA,EAEnC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACnC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,cAAc,EAAE,KAAK,CAAC,UAAU,WAAW,WAAW,CAAC,EAAE,SAAS;AAAA,EAClE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA,EAEhC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACzC,WAAW,UAAU,SAAS,EAAE,SAAS;AAC3C,CAAC;AAEM,IAAM,UAAU,EAAE,OAAO;AAAA;AAAA,EAE9B,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAAA,EAC3D,KAAK,EAAE,QAAQ;AACjB,CAAC;AAEM,IAAM,QAAQ,EAAE,OAAO;AAAA,EAC5B,UAAU,EAAE,QAAQ,QAAQ;AAAA,EAC5B,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,MAAM;AAAA,EACN,MAAM;AAAA,EACN,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA;AAAA,EAET,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AACxC,CAAC;AAID,IAAM,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM;AAC1B,IAAM,gBAAgB,EAAE,KAAK,CAAC,cAAc,YAAY,eAAe,QAAQ,OAAO,CAAC;AAEvF,IAAM,YAAY,EAAE,OAAO;AAAA,EAChC,mBAAmB,MAAM,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,UAAU,SAAS,WAAW,QAAQ,SAAS,CAAC,EAAE,CAAC;AAAA,EAChH,qBAAqB;AAAA,EACrB,iBAAiB,MAAM,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,UAAU,QAAQ,OAAO,CAAC,EAAE,CAAC;AAAA,EACtF,oBAAoB,MAAM,OAAO,EAAE,YAAY,SAAS,SAAS,SAAS,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;AAAA,EAC5G,qBAAqB;AAAA,EACrB,gBAAgB,MAAM,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,GAAG,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;AAAA,EACjH,cAAc,MAAM,OAAO;AAAA,IACzB,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ,aAAa,OAAO,CAAC;AAAA;AAAA,IAE7C,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACpC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9B,CAAC;AAAA,EACD,mBAAmB,MAAM,OAAO;AAAA,IAC9B,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,IACnB,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,IAAI,GAAM;AAAA,IAChC,IAAI;AAAA,EACN,CAAC;AAAA;AAAA;AAAA;AAAA,EAID,iBAAiB,MAAM,OAAO;AAAA,IAC5B,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,IACnB,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,IAAI,GAAM;AAAA,IAChC,IAAI;AAAA,EACN,CAAC;AAAA,EACD,gBAAgB,MAAM,OAAO;AAAA,IAC3B,MAAM;AAAA,IACN,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,IAEtC,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACvC,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,CAAC;AAAA,EACD,cAAc,MAAM,OAAO;AAAA,IACzB,MAAM;AAAA,IACN,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACvC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAC5B,IAAI,EAAE,QAAQ;AAAA,IACd,OAAO,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,IACrC,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC5B,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC/B,CAAC;AAAA,EACD,iBAAiB,MAAM,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC;AAAA,EAC/E,oBAAoB,MAAM,OAAO;AAAA,IAC/B,cAAc,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,IAChC,MAAM;AAAA,IACN,MAAM,SAAS,SAAS;AAAA,IACxB,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxC,CAAC;AAAA,EACD,qBAAqB,MAAM,OAAO;AAAA,IAChC,cAAc,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,IAChC,KAAK,EAAE,KAAK,CAAC,YAAY,aAAa,WAAW,SAAS,CAAC;AAAA,EAC7D,CAAC;AAAA,EACD,oBAAoB,MAAM,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,GAAG,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;AAAA,EAC9G,kBAAkB,MAAM,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,GAAG,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;AAAA,EAC5G,qBAAqB,MAAM,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC,EAAE,CAAC;AAAA,EACzE,QAAQ;AACV,CAAC;AAIM,IAAM,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;AAEhE,IAAM,gBAAgB,EAAE,OAAO;AAAA,EACpC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EACvB,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EACzB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,MAAM,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AAAA,EACrE,UAAU;AACZ,CAAC;AAEM,IAAM,gBAAgB,EAAE,OAAO;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EAC1B,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACrC,UAAU,KAAK,SAAS;AAC1B,CAAC;AAEM,IAAM,aAAa,EAAE,KAAK,CAAC,UAAU,YAAY,UAAU,WAAW,QAAQ,CAAC;AAItF,IAAM,SAAS,EAAE,OAAO,EAAE,MAAM,oBAAoB,uBAAuB;AACpE,IAAM,YAAY,EAAE,OAAO,EAAE,MAAM,4BAA4B,2BAAsB;AAErF,IAAM,aAAa,EAAE,OAAO,EAAE,MAAM,iDAAiD,wBAAwB;AAC7G,IAAM,cAAc,EAAE,KAAK,CAAC,UAAU,qBAAqB,UAAU,SAAS,SAAS,CAAC;AACxF,IAAM,eAAe,EAAE,KAAK,CAAC,OAAO,UAAU,QAAQ,OAAO,UAAU,MAAM,CAAC;AAM9E,IAAM,cAAc,EAAE,OAAO;AAAA;AAAA;AAAA,EAGlC,MAAM,EACH,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP;AAAA;AAAA,IAEC;AAAA,IACA;AAAA,EACF;AAAA;AAAA,EAEF,MAAM,EACH,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,wEAAwE,cAAc;AAAA;AAAA,EAE/F,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,QAAU;AAAA;AAAA,EAEnC,QAAQ,EAAE,OAAO,EAAE,MAAM,uBAAuB,yBAAyB;AAC3E,CAAC;AAIM,IAAM,iBAAiB,EAAE,OAAO;AAAA,EACrC,GAAG,EAAE,QAAQ,CAAC;AAAA,EACd,GAAG,EAAE,QAAQ,qBAAqB;AAAA,EAClC,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS;AAAA;AAAA,EAET,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA;AAAA,EAE7C,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACzC,UAAU,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC,EAAE,SAAS;AAAA;AAAA,EAE7C,MAAM,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA;AAAA,EAEpC,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA;AAAA,EAGnC,KAAK,EACF,OAAO;AAAA,IACN,IAAI,EAAE,OAAO,EAAE,MAAM,0BAA0B;AAAA,IAC/C,KAAK,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,IAC7C,MAAM,EAAE,OAAO,EAAE,MAAM,0BAA0B;AAAA,EACnD,CAAC,EACA,SAAS;AAAA;AAAA,EAEZ,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA;AAAA,EAGzC,OAAO,EAAE,MAAM,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAEpD,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB;AAAA;AAAA,EAEhD,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AACpB,CAAC;AAGM,IAAM,eAAe,EAAE,OAAO;AAAA,EACnC,GAAG,EAAE,QAAQ,CAAC;AAAA,EACd,GAAG,EAAE,QAAQ,mBAAmB;AAAA;AAAA,EAEhC,KAAK,OAAO,IAAI,CAAC;AAAA,EACjB,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAClB,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA;AAAA,EAElB,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAC/B,CAAC;AAGM,IAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,MAAM,OAAO,IAAI,CAAC;AAAA,EAClB,IAAI,OAAO,IAAI,CAAC;AAAA,EAChB,IAAI,OAAO,IAAI,CAAC;AAAA,EAChB,KAAK,OAAO,IAAI,CAAC;AACnB,CAAC;AAGM,IAAM,aAAa,EAAE,OAAO;AAAA,EACjC,IAAI,OAAO,IAAI,EAAE,EAAE,IAAI,IAAI;AAAA,EAC3B,KAAK,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,EAC7C,MAAM,OAAO,IAAI,CAAC;AACpB,CAAC;AAGM,IAAM,iBAAiB,EAAE,OAAO;AAAA;AAAA,EAErC,IAAI;AAAA;AAAA,EAEJ,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAM;AAAA;AAAA,EAEjC,MAAM,OAAO,SAAS,EAAE,SAAS;AAAA;AAAA,EAEjC,OAAO,iBAAiB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,CAAC,EAChE,SAAS,EACT,SAAS;AAAA;AAAA,EAEZ,SAAS,iBAAiB,SAAS,EAAE,SAAS;AAAA;AAAA,EAE9C,IAAI;AAAA;AAAA,EAEJ,YAAY;AACd,CAAC;AAEM,IAAM,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,EAAE,CAAC;AAMlE,IAAM,iBAAiB,EAAE,KAAK,CAAC,YAAY,SAAS,aAAa,WAAW,eAAe,UAAU,SAAS,CAAC;AAE/G,IAAM,aAAa,EAAE,OAAO;AAAA,EACjC,MAAM,EACH;AAAA,IACC,EAAE,OAAO;AAAA,MACP,IAAI;AAAA,MACJ,SAAS;AAAA,MACT,IAAI;AAAA;AAAA,MAEJ,MAAM,aAAa,SAAS;AAAA;AAAA,MAE5B,SAAS,WAAW,SAAS;AAAA;AAAA;AAAA,MAG7B,MAAM,EACH,OAAO,EACP,MAAM,gBAAgB,EACtB,SAAS;AAAA,MACZ,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,MAErC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA;AAAA,MAEvC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAC/B,CAAC;AAAA,EACH,EACC,IAAI,CAAC;AACV,CAAC;AAKM,IAAM,iBAAiB,EAAE,OAAO;AAAA,EACrC,SAAS,EAAE,OAAO,EAAE,MAAM,wBAAwB;AAAA,EAClD,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AACtC,CAAC;AAKM,IAAM,mBAAmB,EAAE,OAAO;AAAA;AAAA;AAAA,EAGvC,UAAU,EACP,OAAO,EACP,MAAM,yBAAyB,EAC/B,SAAS;AAAA;AAAA,EAEZ,SAAS,UAAU,SAAS;AAAA,EAC5B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC9B,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC,EAAE,IAAI,EAAE;AAAA,EACrE,OAAO,EAAE,MAAM,YAAY;AAAA,EAC3B,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA;AAAA;AAAA,EAG1B,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAExD,MAAM,EAAE,KAAK,CAAC,QAAQ,MAAM,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA,EAGxC,UAAU,EAAE,MAAM,cAAc,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA;AAAA,EAGnD,OAAO,EAAE,QAAQ,EAAE,SAAS;AAC9B,CAAC;AAGM,IAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,SAAS;AAAA,EACT,MAAM,EAAE,OAAO,EAAE,MAAM,uBAAuB;AAAA,EAC9C,KAAK,EAAE,IAAI;AAAA;AAAA,EAEX,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS;AAAA,EACjC,YAAY;AACd,CAAC;AAIM,IAAM,gBAAgB,EAAE,OAAO;AAAA,EACpC,QAAQ,EAAE,KAAK,CAAC,WAAW,UAAU,SAAS,CAAC;AAAA,EAC/C,KAAK,WAAW,SAAS;AAAA,EACzB,OAAO,iBAAiB,SAAS;AAAA;AAAA;AAAA,EAGjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA;AAAA,EAG5C,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA;AAAA,EAGjD,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AACxC,CAAC;AAGM,IAAM,eAAe,EAAE,OAAO;AAAA,EACnC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC9B,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC,EAAE,IAAI,EAAE;AAAA,EACrE,OAAO,EAAE,MAAM,YAAY;AAAA;AAAA,EAE3B,MAAM,EAAE,MAAM,OAAO,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC9C,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA;AAAA,EAE1B,SAAS,EAAE,MAAM,UAAU,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAE/C,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACxD,MAAM,EAAE,KAAK,CAAC,QAAQ,MAAM,CAAC,EAAE,SAAS;AAAA;AAAA,EAExC,UAAU,EAAE,MAAM,cAAc,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAEnD,OAAO,EAAE,QAAQ,EAAE,SAAS;AAC9B,CAAC;AAEM,IAAM,YAAY,EAAE,OAAO;AAAA,EAChC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC;AAAA,EACvC,UAAU;AAAA,EACV,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAAA,EAC3D,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;AAAA,EACpD,WAAW,EAAE,OAAO;AAAA,IAClB,QAAQ,EAAE,OAAO;AAAA,IACjB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,CAAC;AAAA,EACD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,MAAO,EAAE,CAAC;AAAA,EACjG,SAAS,EACN,OAAO;AAAA,IACN,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA;AAAA,IAEjC,cAAc,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA,IAGnC,eAAe,EACZ,MAAM,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC,EACpD,IAAI,CAAC,EACL,SAAS;AAAA;AAAA,IAEZ,SAAS,EAAE,OAAO;AAAA,MAChB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,MAChC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;AAAA,IAChE,CAAC;AAAA;AAAA;AAAA,IAGD,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,CAAC,EACA,SAAS;AACd,CAAC;AAGM,IAAM,UAAU;AAAA,EACrB,OAAO;AAAA,EACP,cAAc;AAAA,EACd,OAAO;AAAA,EACP,kBAAkB;AAAA,EAClB,OAAO;AAAA,EACP,cAAc;AAAA,EACd,SAAS;AAAA,EACT,mBAAmB;AAAA,EACnB,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,wBAAwB;AAAA,EACxB,kBAAkB;AAAA,EAClB,iBAAiB;AACnB;",
+  "sourcesContent": ["// SPDX-License-Identifier: Apache-2.0\n// The one source for the protocol's shapes. schemas/v1/*.json are GENERATED from\n// this file (`npm run schemas`); core's runtime types are inferred from it with\n// type-only imports, so zod never enters the zero-dependency bundle. Prose lives in\n// spec/PROTOCOL.md; a rule that is not encoded here is a MUST in words only.\nimport { z } from \"zod\";\n\nexport const PROTOCOL = 1;\n\n/** Dotted, lowercase. Unknown types MUST be accepted and stored. */\nexport const EventType = z\n  .string()\n  .regex(/^(?:native|[a-z][a-z0-9]*(?:\\.[a-z][a-z0-9_]*)+)$/, \"dotted lowercase type, or native\");\n\nexport const KNOWN_TYPES = [\n  \"session.started\",\n  \"session.heartbeat\",\n  \"session.ended\",\n  \"session.backfill\",\n  \"session.forgotten\",\n  \"turn.started\",\n  \"turn.ended\",\n  \"turn.transcript\",\n  \"turn.progress\",\n  \"tool.started\",\n  \"tool.ended\",\n  \"files.changed\",\n  \"attention.needed\",\n  \"attention.cleared\",\n  \"subagent.started\",\n  \"subagent.ended\",\n  \"context.compacted\",\n  \"native\",\n] as const;\n\n/** The lowest tier that carries each known type. */\nexport const TYPE_TIER: Record<(typeof KNOWN_TYPES)[number], 0 | 1 | 2 | 3> = {\n  \"session.started\": 0,\n  \"session.heartbeat\": 0,\n  \"session.ended\": 0,\n  \"session.backfill\": 0,\n  \"session.forgotten\": 0,\n  \"turn.started\": 0,\n  \"turn.ended\": 0,\n  \"turn.transcript\": 2,\n  \"turn.progress\": 2,\n  \"tool.started\": 1,\n  \"tool.ended\": 1,\n  \"files.changed\": 1,\n  \"attention.needed\": 0,\n  \"attention.cleared\": 0,\n  \"subagent.started\": 1,\n  \"subagent.ended\": 1,\n  \"context.compacted\": 1,\n  native: 3,\n};\n\nexport const HARNESS_NAMES = [\n  \"claude-code\",\n  \"codex\",\n  \"gemini-cli\",\n  \"antigravity\",\n  \"devin\",\n  \"cursor\",\n  \"copilot-cli\",\n  \"droid\",\n  \"kiro\",\n  \"opencode\",\n] as const;\n\nexport const Tier = z.int().min(0).max(3);\nexport const Ulid = z.string().regex(/^[0-9A-HJKMNP-TV-Z]{26}$/, \"ULID\");\nexport const Rfc3339 = z.iso.datetime({ offset: false, precision: 3 });\nexport const SessionId = z\n  .string()\n  .min(1)\n  .max(128)\n  .regex(/^[A-Za-z0-9._:-]+$/);\nexport const ToolName = z.string().regex(/^[A-Za-z0-9_.:-]{1,120}$/);\n\nexport const Harness = z.object({\n  /** From the registry in ADAPTERS.md; a name outside it is allowed ([a-z0-9-]). */\n  name: z.string().regex(/^[a-z][a-z0-9-]{0,39}$/),\n  version: z.string().max(64).optional(),\n  /** The harness's own event name (`PostToolUse`, `agentStop`). */\n  event: z.string().max(64).optional(),\n});\n\nexport const Session = z.object({\n  id: SessionId,\n  /** Monotonic per session per sender; the dedup key with harness.name and id. */\n  seq: z.int().min(0),\n  machine: z.string().max(80).optional(),\n  /** Home is written `~`. */\n  cwd: z.string().max(1024).optional(),\n  /** A remote URL with credentials stripped. */\n  repo: z.string().max(512).optional(),\n  branch: z.string().max(256).optional(),\n  model: z.string().max(128).optional(),\n  title: z.string().max(200).optional(),\n  title_source: z.enum([\"custom\", \"harness\", \"first-ask\"]).optional(),\n  url: z.url().max(1024).optional(),\n  /** An id, never an email. */\n  account_id: z.string().max(128).optional(),\n  /** Whether a person attends the session, in the harness's own word. Absent = unknown, never false. */\n  attended: z.boolean().optional(),\n  parent_id: SessionId.nullable().optional(),\n  /** `<harness>:<id>` of the session that started this one on purpose (a script running\n   *  `claude -p` for it), from the launcher's environment. Absent for a subagent, whose\n   *  launcher is its parent, and when nothing says. */\n  launched_by: z\n    .string()\n    .regex(/^[a-z][a-z0-9-]{0,39}:[A-Za-z0-9._:-]{1,128}$/)\n    .optional(),\n});\n\nexport const Privacy = z.object({\n  /** The redaction rulesets that ran; `secrets@1` always above tier 0. */\n  rulesets: z.array(z.string().regex(/^[a-z][a-z0-9-]*@\\d+$/)),\n  pii: z.boolean(),\n});\n\nexport const Event = z.object({\n  protocol: z.literal(PROTOCOL),\n  id: Ulid,\n  type: EventType,\n  time: Rfc3339,\n  tier: Tier,\n  harness: Harness,\n  session: Session,\n  privacy: Privacy,\n  /** Per type (see EventData); extra keys allowed and kept. */\n  data: z.record(z.string(), z.unknown()),\n});\n\n// --- data per type --------------------------------------------------------------\n\nconst Loose = z.object({}).loose();\nexport const AttentionKind = z.enum([\"permission\", \"question\", \"elicitation\", \"idle\", \"error\"]);\n\nexport const EventData = z.object({\n  \"session.started\": Loose.extend({ source: z.enum([\"startup\", \"resume\", \"clear\", \"compact\", \"fork\", \"unknown\"]) }),\n  \"session.heartbeat\": Loose,\n  \"session.ended\": Loose.extend({ reason: z.enum([\"clear\", \"logout\", \"exit\", \"other\"]) }),\n  \"session.backfill\": Loose.extend({ started_at: Rfc3339, last_at: Rfc3339, turns: z.int().min(0).optional() }),\n  \"session.forgotten\": Loose,\n  \"turn.started\": Loose.extend({\n    turn_id: z.string().max(128).optional(),\n    prompt_chars: z.int().min(0).optional(),\n    /** The harness's OWN word for who submitted the prompt, forwarded verbatim; not an enum\n     *  of this spec (Claude Code: user, sdk, system, loop_wakeup, schedule_wakeup,\n     *  poll_event), and a different vocabulary from session.started.source. A bare word:\n     *  tier 0 is not redacted, so the shape is the only guard. */\n    submitted_by: z\n      .string()\n      .regex(/^[A-Za-z0-9][A-Za-z0-9_.-]{0,39}$/, \"a bare word, at most 40 characters\")\n      .optional(),\n    /** True when the prompt text is a block the harness wrote rather than words a person\n     *  typed; never a claim that no person caused the turn. */\n    injected: z.boolean().optional(),\n  }),\n  \"turn.ended\": Loose.extend({\n    turn_id: z.string().max(128).optional(),\n    reason: z.enum([\"stop\", \"interrupt\", \"error\"]),\n    /** The harness's error class when reason is error (rate_limit, overloaded, authentication_failed, server_error \u2026). */\n    error: z.string().max(200).optional(),\n    ms: z.int().min(0).optional(),\n    /** Background work the harness reports still in flight as the turn ends, each of which wakes the session when it finishes (Claude Code: shell commands, monitors, subagents, workflows). Absent when the harness doesn't say. */\n    background: z.int().min(0).optional(),\n  }),\n  \"turn.transcript\": Loose.extend({\n    turn: z.int().min(0),\n    user: z.string().max(20_000),\n    assistant: z.string().max(20_000),\n    at: Rfc3339,\n  }),\n  /** The turn still running: its prompt and what the assistant has said so far. A\n   *  later turn.progress for the same turn replaces it; the turn.transcript with the\n   *  same number supersedes it. Over 20 000 chars, the assistant side keeps its END. */\n  \"turn.progress\": Loose.extend({\n    turn: z.int().min(0),\n    user: z.string().max(20_000),\n    assistant: z.string().max(20_000),\n    at: Rfc3339,\n  }),\n  \"tool.started\": Loose.extend({\n    tool: ToolName,\n    call_id: z.string().max(128).optional(),\n    turn_id: z.string().max(128).optional(),\n    /** Set when a subagent made the call. */\n    agent_id: z.string().max(128).optional(),\n    input: z.unknown().optional(),\n  }),\n  \"tool.ended\": Loose.extend({\n    tool: ToolName,\n    call_id: z.string().max(128).optional(),\n    turn_id: z.string().max(128).optional(),\n    agent_id: z.string().max(128).optional(),\n    ms: z.int().min(0).optional(),\n    ok: z.boolean(),\n    error: z.string().max(2000).optional(),\n    input: z.unknown().optional(),\n    output: z.unknown().optional(),\n  }),\n  \"files.changed\": Loose.extend({ paths: z.array(z.string().max(1024)).max(500) }),\n  \"attention.needed\": Loose.extend({\n    attention_id: z.string().max(128),\n    kind: AttentionKind,\n    tool: ToolName.optional(),\n    message: z.string().max(200).optional(),\n  }),\n  \"attention.cleared\": Loose.extend({\n    attention_id: z.string().max(128),\n    how: z.enum([\"answered\", \"cancelled\", \"timeout\", \"unknown\"]),\n  }),\n  \"subagent.started\": Loose.extend({ agent_id: z.string().max(128), agent_type: z.string().max(128).optional() }),\n  \"subagent.ended\": Loose.extend({ agent_id: z.string().max(128), agent_type: z.string().max(128).optional() }),\n  \"context.compacted\": Loose.extend({ trigger: z.enum([\"manual\", \"auto\"]) }),\n  native: Loose,\n});\n\n// --- wire -----------------------------------------------------------------------\n\nexport const Batch = z.object({ events: z.array(Event).min(1).max(50) });\n\nexport const BatchResponse = z.object({\n  accepted: z.int().min(0),\n  duplicates: z.int().min(0),\n  rejected: z.array(z.object({ id: Ulid, reason: z.string().max(200) })),\n  max_tier: Tier,\n});\n\nexport const ErrorResponse = z.object({\n  reason: z.string().max(200),\n  supported: z.array(z.int()).optional(),\n  max_tier: Tier.optional(),\n});\n\nexport const Capability = z.enum([\"events\", \"backfill\", \"forget\", \"control\", \"native\"]);\n\n// --- control (CONTROL.md) ---------------------------------------------------------\n\nconst B64Url = z.string().regex(/^[A-Za-z0-9_-]*$/, \"base64url, no padding\");\nexport const MachineId = z.string().regex(/^m_[A-Za-z0-9_-]{16,40}$/, \"m_ + 16\u201340 base64url\");\n/** `<harness>:<id>`; the id follows its adapter's rule (Claude Code: a UUID). */\nexport const SessionRef = z.string().regex(/^[a-z][a-z0-9-]{0,39}:[A-Za-z0-9._:-]{1,128}$/, \"<harness>:<session id>\");\nexport const ControlKind = z.enum([\"prompt\", \"permission.answer\", \"cancel\", \"start\", \"key.add\"]);\n/** The kinds of key a machine or a receiver handles (CONTROL.md \u00A72). Absent: passkeys only. */\nexport const KeyTypes = z\n  .array(z.enum([\"passkey\", \"device\"]))\n  .min(1)\n  .max(2);\nexport const DeliveryMode = z.enum([\"sdk\", \"waiter\", \"turn\", \"api\", \"resume\", \"fork\"]);\n/** How much a started session may do without anyone approving it (CONTROL.md \u00A73.1),\n *  narrowest first. Closed: nothing is wider than `auto`. */\nexport const StartPermission = z.enum([\"read\", \"safe\", \"edits\", \"auto\"]);\n/** What a start ran with, or gets by default: a level, or `inherit` (no permission flag,\n *  the harness's own default) on a machine the person put in inherit mode. Never a\n *  command's `permission`. */\nexport const RunLevel = z.enum([\"read\", \"safe\", \"edits\", \"auto\", \"inherit\"]);\n/** A model id as the harness names it, passed as one argument: never a leading dash. */\nexport const ModelId = z\n  .string()\n  .min(1)\n  .max(100)\n  .regex(/^[A-Za-z0-9][A-Za-z0-9._:/@[\\]-]*$/, \"a model id\");\nconst HarnessName = z.string().regex(/^[a-z][a-z0-9-]{0,39}$/);\n\n/** A file attached to a `start` (CONTROL.md \u00A73.1). The bytes wait on the receiver\n *  (`GET {control}/files/{sha256}`); the signed hash is what the machine checks.\n *  Beyond this shape the verifier also checks: the name's length after NFC, names\n *  unique case-insensitively, and the sizes adding up to at most 50 MiB. */\nexport const ControlFile = z.object({\n  /** Written as is (NFC) into the session's folder: no slash, backslash or control\n   *  character, not starting with a dot. */\n  name: z\n    .string()\n    .min(1)\n    .max(200)\n    .regex(\n      // biome-ignore lint/suspicious/noControlCharactersInRegex: control characters are what it rejects\n      /^[^./\\\\\\x00-\\x1f\\x7f][^/\\\\\\x00-\\x1f\\x7f]*$/,\n      \"a file name: no slash, backslash, control character or leading dot\",\n    ),\n  /** Media type, `type/subtype` (case-insensitive). */\n  type: z\n    .string()\n    .min(1)\n    .max(100)\n    .regex(/^[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]*\\/[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]*$/, \"type/subtype\"),\n  /** Bytes: 1 to 25 MiB. */\n  size: z.int().min(1).max(26_214_400),\n  /** SHA-256 of the bytes, base64url without padding. */\n  sha256: z.string().regex(/^[A-Za-z0-9_-]{43}$/, \"43 base64url characters\"),\n});\n\n/** The signed command, as the device writes it. The machine verifies the EXACT string\n *  it received (control.json `cmd`) and never re-serializes it. */\nexport const ControlCommand = z.object({\n  v: z.literal(1),\n  t: z.literal(\"sessionpipe.control\"),\n  machine: MachineId,\n  kind: ControlKind,\n  session: SessionRef,\n  /** prompt, start: the message for the model. */\n  text: z.string().min(1).max(20_000).optional(),\n  /** permission.answer: the attention_id being answered. */\n  for: z.string().min(1).max(128).optional(),\n  decision: z.enum([\"allow\", \"deny\"]).optional(),\n  /** Shown to the model beside a decision. */\n  note: z.string().max(2000).optional(),\n  /** start: the folder the new session runs in: absolute, or `~` / `~/\u2026` under the\n   *  home of the user the machine's daemon runs as, as events write it. */\n  cwd: z.string().max(1024).optional(),\n  /** key.add (session `sessionpipe:keys`): the new device's key (a passkey or a device\n   *  key, control-key.json), which the machine trusts once a key it already trusts\n   *  signed this command. */\n  key: z.lazy(() => ControlKey).optional(),\n  /** key.add: what the person calls the device. */\n  name: z.string().min(1).max(80).optional(),\n  /** start, prompt: 1\u201310 files, together at most 50 MiB, downloaded and checked by hash\n   *  before the session starts or the message is delivered. On a prompt, only to a\n   *  machine whose hello says `prompt_files`. */\n  files: z.array(ControlFile).min(1).max(10).optional(),\n  /** start only: the level the new session runs at, at most the machine's mode. Send\n   *  it only to a machine whose hello advertises it for the harness (`start`). */\n  permission: StartPermission.optional(),\n  /** start only: the model the harness runs. As `permission`: only when advertised. */\n  model: ModelId.optional(),\n  /** At least 16 random bytes, base64url. */\n  nonce: z.string().regex(/^[A-Za-z0-9_-]{22,64}$/),\n  /** Epoch ms, the signing device's clock. */\n  iat: z.int().min(1),\n});\n\n/** A day grant's signed string: a passkey vouches for a device key for \u2264 24 h. */\nexport const ControlGrant = z.object({\n  v: z.literal(1),\n  t: z.literal(\"sessionpipe.grant\"),\n  /** The day key: P-256 SPKI, base64url. */\n  pub: B64Url.min(1),\n  iat: z.int().min(1),\n  exp: z.int().min(1),\n  /** The receiver's WebAuthn rp id (well-known control.signing.rp_id). */\n  rp: z.string().min(1).max(253),\n});\n\n/** A WebAuthn assertion: credential id, authenticatorData, clientDataJSON, signature. */\nexport const ControlAssertion = z.object({\n  cred: B64Url.min(1),\n  ad: B64Url.min(1),\n  cd: B64Url.min(1),\n  sig: B64Url.min(1),\n});\n\n/** A device key's signature (CONTROL.md \u00A73.2): its id and 64 bytes r\u2016s over\n *  `sessionpipe.device.v1\u23CE<purpose>\u23CE<rp id>\u23CE<challenge>`. Nothing else. The shape\n *  only, like an assertion's: the machine reads the key from its own record and checks\n *  the rest (a 43-character id, exactly 64 bytes), so a carrier never decides a kind. */\nexport const ControlDeviceSignature = z.strictObject({\n  cred: B64Url.min(1),\n  /** 64 bytes r\u2016s, base64url without padding. */\n  sig: B64Url.min(1),\n});\n\n/** A key enrolled on a machine, closed: a passkey (credential id, COSE alg, SPKI), or a\n *  device key an app holds in hardware (CONTROL.md \u00A72 \"Device keys\"), which names\n *  itself by its SPKI's SHA-256 and says how it is held. A machine refuses any other\n *  field or value, so a kind added later is refused by every machine that predates it. */\nexport const ControlKey = z.xor([\n  z.strictObject({\n    id: B64Url.min(16).max(1400),\n    alg: z.union([z.literal(-7), z.literal(-257)]),\n    spki: B64Url.min(1),\n  }),\n  z.strictObject({\n    /** SHA-256 of the SPKI bytes, base64url without padding. */\n    id: z.string().regex(/^[A-Za-z0-9_-]{43}$/, \"SHA-256 of the spki, base64url\"),\n    alg: z.literal(-7),\n    spki: B64Url.min(1),\n    type: z.literal(\"device\"),\n    /** The private key was made in a hardware key store and never leaves it. */\n    store: z.literal(\"hardware\"),\n    /** The store will not sign without verifying the person, every time. */\n    uv: z.literal(\"each-use\"),\n  }),\n]);\n\n/** One message as a receiver carries it: its own envelope around the signed bytes. */\nexport const ControlMessage = z.object({\n  /** The receiver's id for this message; the ack key. Not signed: the nonce inside cmd is. */\n  id: Ulid,\n  /** The command string, exactly as signed (\u2264 48 000 characters). */\n  cmd: z.string().min(1).max(48_000),\n  /** The day key's ECDSA P-256 / SHA-256 signature over cmd: raw r\u2016s, base64url. */\n  csig: B64Url.nullable().optional(),\n  /** The grant vouching for the day key: its string plus the passkey's assertion over\n   *  sha256(str), or a device key's signature over it (CONTROL.md \u00A73.2). */\n  grant: z\n    .xor([\n      ControlAssertion.extend({ str: z.string().min(1).max(2000) }),\n      ControlDeviceSignature.extend({ str: z.string().min(1).max(2000) }),\n    ])\n    .nullable()\n    .optional(),\n  /** Instead of csig + grant: one passkey assertion (or device signature) over sha256(cmd). */\n  confirm: z.xor([ControlAssertion, ControlDeviceSignature]).nullable().optional(),\n  /** The receiver's clock. */\n  at: Rfc3339,\n  /** After this the machine MUST NOT act and acks `expired`; at most 24 h after `at`. */\n  expires_at: Rfc3339,\n});\n\nexport const ControlPoll = z.object({ messages: z.array(ControlMessage) });\n\n/** `taken` is the one non-final outcome: the machine verified the message and is\n *  delivering it (a headless resume can take minutes); a final ack follows. */\n/** `progress` (not final): the answer so far, whole, in `reply`, with a rising `seq`.\n *  `taken` (not final): verified and being delivered. Every other outcome is final. */\nexport const ControlOutcome = z.enum([\"progress\", \"taken\", \"delivered\", \"expired\", \"unsupported\", \"failed\", \"refused\"]);\n\nexport const ControlAck = z.object({\n  acks: z\n    .array(\n      z.object({\n        id: Ulid,\n        outcome: ControlOutcome,\n        at: Rfc3339,\n        /** delivered: how it reached the session. */\n        mode: DeliveryMode.optional(),\n        /** The session that took it, when not the one named (a fork's copy, a started session). */\n        session: SessionRef.optional(),\n        /** refused: the verifier's code, or the machine's own (`folder`, `no_attention`, `busy`);\n         *  failed: `file` when a start's attachment couldn't be fetched, checked or written,\n         *  `model` when the harness wouldn't run the start's model. */\n        code: z\n          .string()\n          .regex(/^[a-z_]{1,40}$/)\n          .optional(),\n        detail: z.string().max(500).optional(),\n        /** resume / fork / start: the agent's reply, redacted by the secrets ruleset. */\n        reply: z.string().max(20_000).optional(),\n        /** progress only: rises with every progress ack for this id; a receiver keeps the highest. */\n        seq: z.int().min(0).optional(),\n        /** taken, delivered of a start: the options it ran with (`model` only when one was\n         *  asked for). A receiver shows this, never what was asked. */\n        applied: z.strictObject({ permission: RunLevel.optional(), model: ModelId.optional() }).optional(),\n      }),\n    )\n    .min(1),\n});\n\n/** A harness account signed in on the machine: the id `session.account_id` carries,\n *  and the email it signs in with, so a receiver the person paired with can name the\n *  account rather than show an id. Only pair and hello carry it, never an event. */\nexport const HarnessAccount = z.object({\n  harness: z.string().regex(/^[a-z][a-z0-9-]{0,39}$/),\n  id: z.string().min(1).max(128),\n  email: z.string().max(254).optional(),\n  /** What to call an account that has no email: a Claude Code home that runs on\n   *  another API is named by its endpoint's host (`api.z.ai`). */\n  name: z.string().min(1).max(200).optional(),\n});\n\n/** `POST {control}/pair`, sent with the person's sink token from their own terminal \u2014\n *  or, where the receiver declares `control.open_pairing`, with no token and a\n *  `poll_key` (CONTROL.md \u00A72). */\nexport const ControlPairStart = z.object({\n  /** Open pairing: a random secret only this terminal knows. Status polls present it\n   *  as their bearer; the receiver keeps only a hash. */\n  poll_key: z\n    .string()\n    .regex(/^[A-Za-z0-9_-]{22,128}$/)\n    .optional(),\n  /** Set when adding a key to a machine already paired. */\n  machine: MachineId.optional(),\n  name: z.string().min(1).max(80),\n  harnesses: z.array(z.string().regex(/^[a-z][a-z0-9-]{0,39}$/)).max(20),\n  modes: z.array(DeliveryMode),\n  version: z.string().max(40),\n  /** The folders the machine lets sessions run in, for the receiver's \"new session\"\n   *  picker. Informational: the machine checks its own list again. */\n  folders: z.array(z.string().max(1024)).max(50).optional(),\n  /** safe: nothing that needs approval runs unattended; auto: the harness's auto mode;\n   *  inherit: no permission flag, each harness's own default there. Chosen at the machine. */\n  mode: z.enum([\"safe\", \"auto\", \"inherit\"]).optional(),\n  /** The harness accounts signed in here, so the receiver's board can name each\n   *  `session.account_id` (CONTROL.md \u00A72). */\n  accounts: z.array(HarnessAccount).max(20).optional(),\n  /** The machine takes `files` on a start (downloads, checks and writes them). A\n   *  machine that doesn't say so may ignore them: a receiver SHOULD NOT send it files. */\n  files: z.boolean().optional(),\n  /** The kinds of key this machine takes (unique; absent means `[\"passkey\"]`). A\n   *  client offers a device key only to a machine that lists `device`. */\n  key_types: KeyTypes.optional(),\n});\n\n/** The receiver's answer: where the person confirms, and the digits both screens show. */\nexport const ControlPairStarted = z.object({\n  machine: MachineId,\n  code: z.string().regex(/^[A-Za-z0-9_-]{6,32}$/),\n  url: z.url(),\n  /** Six digits the terminal and the receiver's page both show. */\n  check: z.string().regex(/^\\d{6}$/),\n  expires_at: Rfc3339,\n});\n\n/** `GET {control}/pair?code=\u2026` once the person confirmed. The machine verifies `proof`\n *  over sha256(\"sessionpipe.pair:<machine>:<code>\") before it trusts `key`. */\nexport const ControlPaired = z.object({\n  status: z.enum([\"pending\", \"paired\", \"expired\"]),\n  /** The key approved, whole: a device key keeps its type, store and uv. */\n  key: ControlKey.optional(),\n  /** The key's proof: a passkey assertion, or a device signature for purpose `pair`. */\n  proof: z.xor([ControlAssertion, ControlDeviceSignature]).optional(),\n  /** The machine's own bearer for polls, acks and hello: opens nothing else. Minted\n   *  once, at the first pairing of a machine. */\n  token: z.string().min(16).max(256).optional(),\n  /** Optional: a key for the events lane (`sink add`), so the receiver's session board\n   *  shows this machine without a second step. Handed over once. */\n  sink_token: z.string().min(16).max(256).optional(),\n  /** Optional: who approved, in the receiver's words (a @handle), so the terminal can\n   *  say whose passkey it now trusts. */\n  account: z.string().max(200).optional(),\n});\n\n/** `POST {control}/hello`: what the machine can do right now. */\nexport const ControlHello = z.object({\n  name: z.string().min(1).max(80),\n  harnesses: z.array(z.string().regex(/^[a-z][a-z0-9-]{0,39}$/)).max(20),\n  modes: z.array(DeliveryMode),\n  /** Credential ids of the keys enrolled on the machine. */\n  keys: z.array(B64Url.min(16).max(1400)).max(50),\n  version: z.string().max(40),\n  /** Live sessions with a waiter parked on the daemon's socket. */\n  waiting: z.array(SessionRef).max(500).optional(),\n  /** As in control-pair.json: informational, re-checked on the machine. */\n  folders: z.array(z.string().max(1024)).max(50).optional(),\n  mode: z.enum([\"safe\", \"auto\", \"inherit\"]).optional(),\n  /** As in control-pair.json: read again for every hello, so a new sign-in is named. */\n  accounts: z.array(HarnessAccount).max(20).optional(),\n  /** As in control-pair.json. */\n  files: z.boolean().optional(),\n  /** The machine takes `files` on a prompt too (CONTROL.md \u00A76 `prompt`). One that\n   *  doesn't say so refuses them: a receiver SHOULD NOT send it a prompt with files. */\n  prompt_files: z.boolean().optional(),\n  /** Per harness in `harnesses`: the options a start may carry (CONTROL.md \u00A72). No\n   *  entry: neither `permission` nor `model`. */\n  start: z\n    .record(\n      HarnessName,\n      z.object({\n        /** The levels it starts at here, already capped by `mode`. */\n        permissions: z.array(StartPermission).min(1).max(4).meta({ uniqueItems: true }),\n        /** What a start that names none gets: one of `permissions`, or `inherit` on an\n         *  inherit machine. */\n        permission: RunLevel,\n        /** Model ids the harness offers here: a suggestion, not a promise. */\n        models: z.array(ModelId).max(50).optional(),\n        /** Any well-formed model is passed to the harness (which may still reject it). */\n        any_model: z.boolean().optional(),\n      }),\n    )\n    .refine((o) => Object.keys(o).length <= 50, \"at most 50 harnesses\")\n    .meta({ maxProperties: 50 })\n    .optional(),\n  /** As in control-pair.json. */\n  key_types: KeyTypes.optional(),\n});\n\nexport const WellKnown = z.object({\n  protocol: z.array(z.int().min(1)).min(1),\n  max_tier: Tier,\n  capabilities: z.array(z.string().regex(/^[a-z][a-z0-9-]*$/)),\n  auth: z.array(z.enum([\"bearer\"])).default([\"bearer\"]),\n  endpoints: z.object({\n    events: z.string(),\n    control: z.string().optional(),\n    native: z.string().optional(),\n  }),\n  batch: z.object({ max_events: z.int().min(1).max(50), max_bytes: z.int().min(1024).max(262_144) }),\n  control: z\n    .object({\n      wait_max_s: z.int().min(1).max(60),\n      /** Pairing may start with no token: the person approves the link signed in. */\n      open_pairing: z.boolean().optional(),\n      /** MCP servers (`mcp__<server>`) a session answering this receiver's message may\n       *  use without asking. MCP servers only: a daemon ignores anything else. */\n      session_tools: z\n        .array(z.string().regex(/^mcp__[A-Za-z0-9_-]{1,64}$/))\n        .max(8)\n        .optional(),\n      /** How commands are signed: the WebAuthn rp id keys are enrolled for, and the algorithms. */\n      signing: z.object({\n        rp_id: z.string().min(1).max(253),\n        algs: z.array(z.union([z.literal(-7), z.literal(-257)])).min(1),\n        /** The kinds of key the receiver stores and carries whole (CONTROL.md \u00A72).\n         *  Absent means `[\"passkey\"]`. */\n        key_types: KeyTypes.optional(),\n      }),\n      /** Informational: the receiver accepts `files` on a start and serves\n       *  `GET {control}/files/{sha256}`. */\n      files: z.boolean().optional(),\n      /** The receiver shows a machine in `inherit` mode as that, never as safe or auto.\n       *  A daemon pairs in, or switches to, `inherit` only with receivers that say so. */\n      inherit: z.boolean().optional(),\n    })\n    .optional(),\n});\n\n/** What `npm run schemas` writes to schemas/v1/<name>.json. */\nexport const SCHEMAS = {\n  event: Event,\n  \"event-data\": EventData,\n  batch: Batch,\n  \"batch-response\": BatchResponse,\n  error: ErrorResponse,\n  \"well-known\": WellKnown,\n  control: ControlMessage,\n  \"control-command\": ControlCommand,\n  \"control-grant\": ControlGrant,\n  \"control-key\": ControlKey,\n  \"control-poll\": ControlPoll,\n  \"control-ack\": ControlAck,\n  \"control-pair\": ControlPairStart,\n  \"control-pair-started\": ControlPairStarted,\n  \"control-paired\": ControlPaired,\n  \"control-hello\": ControlHello,\n} as const;\n"],
+  "mappings": ";;;AAKA,SAAS,SAAS;AAEX,IAAM,WAAW;AAGjB,IAAM,YAAY,EACtB,OAAO,EACP,MAAM,qDAAqD,kCAAkC;AAEzF,IAAM,cAAc;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,YAAiE;AAAA,EAC5E,mBAAmB;AAAA,EACnB,qBAAqB;AAAA,EACrB,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,mBAAmB;AAAA,EACnB,iBAAiB;AAAA,EACjB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,qBAAqB;AAAA,EACrB,QAAQ;AACV;AAEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC;AACjC,IAAM,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,MAAM;AAChE,IAAM,UAAU,EAAE,IAAI,SAAS,EAAE,QAAQ,OAAO,WAAW,EAAE,CAAC;AAC9D,IAAM,YAAY,EACtB,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,oBAAoB;AACtB,IAAM,WAAW,EAAE,OAAO,EAAE,MAAM,0BAA0B;AAE5D,IAAM,UAAU,EAAE,OAAO;AAAA;AAAA,EAE9B,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB;AAAA,EAC/C,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAErC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AACrC,CAAC;AAEM,IAAM,UAAU,EAAE,OAAO;AAAA,EAC9B,IAAI;AAAA;AAAA,EAEJ,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAClB,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAErC,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA,EAEnC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACnC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,cAAc,EAAE,KAAK,CAAC,UAAU,WAAW,WAAW,CAAC,EAAE,SAAS;AAAA,EAClE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA,EAEhC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAEzC,UAAU,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC/B,WAAW,UAAU,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAIzC,aAAa,EACV,OAAO,EACP,MAAM,+CAA+C,EACrD,SAAS;AACd,CAAC;AAEM,IAAM,UAAU,EAAE,OAAO;AAAA;AAAA,EAE9B,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAAA,EAC3D,KAAK,EAAE,QAAQ;AACjB,CAAC;AAEM,IAAM,QAAQ,EAAE,OAAO;AAAA,EAC5B,UAAU,EAAE,QAAQ,QAAQ;AAAA,EAC5B,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,MAAM;AAAA,EACN,MAAM;AAAA,EACN,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA;AAAA,EAET,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AACxC,CAAC;AAID,IAAM,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM;AAC1B,IAAM,gBAAgB,EAAE,KAAK,CAAC,cAAc,YAAY,eAAe,QAAQ,OAAO,CAAC;AAEvF,IAAM,YAAY,EAAE,OAAO;AAAA,EAChC,mBAAmB,MAAM,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,UAAU,SAAS,WAAW,QAAQ,SAAS,CAAC,EAAE,CAAC;AAAA,EAChH,qBAAqB;AAAA,EACrB,iBAAiB,MAAM,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,UAAU,QAAQ,OAAO,CAAC,EAAE,CAAC;AAAA,EACtF,oBAAoB,MAAM,OAAO,EAAE,YAAY,SAAS,SAAS,SAAS,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;AAAA,EAC5G,qBAAqB;AAAA,EACrB,gBAAgB,MAAM,OAAO;AAAA,IAC3B,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,IAKtC,cAAc,EACX,OAAO,EACP,MAAM,qCAAqC,oCAAoC,EAC/E,SAAS;AAAA;AAAA;AAAA,IAGZ,UAAU,EAAE,QAAQ,EAAE,SAAS;AAAA,EACjC,CAAC;AAAA,EACD,cAAc,MAAM,OAAO;AAAA,IACzB,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ,aAAa,OAAO,CAAC;AAAA;AAAA,IAE7C,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACpC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,IAE5B,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACtC,CAAC;AAAA,EACD,mBAAmB,MAAM,OAAO;AAAA,IAC9B,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,IACnB,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,IAAI,GAAM;AAAA,IAChC,IAAI;AAAA,EACN,CAAC;AAAA;AAAA;AAAA;AAAA,EAID,iBAAiB,MAAM,OAAO;AAAA,IAC5B,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,IACnB,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,IAAI,GAAM;AAAA,IAChC,IAAI;AAAA,EACN,CAAC;AAAA,EACD,gBAAgB,MAAM,OAAO;AAAA,IAC3B,MAAM;AAAA,IACN,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,IAEtC,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACvC,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,CAAC;AAAA,EACD,cAAc,MAAM,OAAO;AAAA,IACzB,MAAM;AAAA,IACN,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACvC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAC5B,IAAI,EAAE,QAAQ;AAAA,IACd,OAAO,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,IACrC,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC5B,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC/B,CAAC;AAAA,EACD,iBAAiB,MAAM,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC;AAAA,EAC/E,oBAAoB,MAAM,OAAO;AAAA,IAC/B,cAAc,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,IAChC,MAAM;AAAA,IACN,MAAM,SAAS,SAAS;AAAA,IACxB,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxC,CAAC;AAAA,EACD,qBAAqB,MAAM,OAAO;AAAA,IAChC,cAAc,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,IAChC,KAAK,EAAE,KAAK,CAAC,YAAY,aAAa,WAAW,SAAS,CAAC;AAAA,EAC7D,CAAC;AAAA,EACD,oBAAoB,MAAM,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,GAAG,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;AAAA,EAC9G,kBAAkB,MAAM,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,GAAG,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;AAAA,EAC5G,qBAAqB,MAAM,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC,EAAE,CAAC;AAAA,EACzE,QAAQ;AACV,CAAC;AAIM,IAAM,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;AAEhE,IAAM,gBAAgB,EAAE,OAAO;AAAA,EACpC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EACvB,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EACzB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,MAAM,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AAAA,EACrE,UAAU;AACZ,CAAC;AAEM,IAAM,gBAAgB,EAAE,OAAO;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EAC1B,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACrC,UAAU,KAAK,SAAS;AAC1B,CAAC;AAEM,IAAM,aAAa,EAAE,KAAK,CAAC,UAAU,YAAY,UAAU,WAAW,QAAQ,CAAC;AAItF,IAAM,SAAS,EAAE,OAAO,EAAE,MAAM,oBAAoB,uBAAuB;AACpE,IAAM,YAAY,EAAE,OAAO,EAAE,MAAM,4BAA4B,2BAAsB;AAErF,IAAM,aAAa,EAAE,OAAO,EAAE,MAAM,iDAAiD,wBAAwB;AAC7G,IAAM,cAAc,EAAE,KAAK,CAAC,UAAU,qBAAqB,UAAU,SAAS,SAAS,CAAC;AAExF,IAAM,WAAW,EACrB,MAAM,EAAE,KAAK,CAAC,WAAW,QAAQ,CAAC,CAAC,EACnC,IAAI,CAAC,EACL,IAAI,CAAC;AACD,IAAM,eAAe,EAAE,KAAK,CAAC,OAAO,UAAU,QAAQ,OAAO,UAAU,MAAM,CAAC;AAG9E,IAAM,kBAAkB,EAAE,KAAK,CAAC,QAAQ,QAAQ,SAAS,MAAM,CAAC;AAIhE,IAAM,WAAW,EAAE,KAAK,CAAC,QAAQ,QAAQ,SAAS,QAAQ,SAAS,CAAC;AAEpE,IAAM,UAAU,EACpB,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,sCAAsC,YAAY;AAC3D,IAAM,cAAc,EAAE,OAAO,EAAE,MAAM,wBAAwB;AAMtD,IAAM,cAAc,EAAE,OAAO;AAAA;AAAA;AAAA,EAGlC,MAAM,EACH,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP;AAAA;AAAA,IAEC;AAAA,IACA;AAAA,EACF;AAAA;AAAA,EAEF,MAAM,EACH,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,wEAAwE,cAAc;AAAA;AAAA,EAE/F,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,QAAU;AAAA;AAAA,EAEnC,QAAQ,EAAE,OAAO,EAAE,MAAM,uBAAuB,yBAAyB;AAC3E,CAAC;AAIM,IAAM,iBAAiB,EAAE,OAAO;AAAA,EACrC,GAAG,EAAE,QAAQ,CAAC;AAAA,EACd,GAAG,EAAE,QAAQ,qBAAqB;AAAA,EAClC,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS;AAAA;AAAA,EAET,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA;AAAA,EAE7C,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACzC,UAAU,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC,EAAE,SAAS;AAAA;AAAA,EAE7C,MAAM,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA;AAAA;AAAA,EAGpC,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAInC,KAAK,EAAE,KAAK,MAAM,UAAU,EAAE,SAAS;AAAA;AAAA,EAEvC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA,EAIzC,OAAO,EAAE,MAAM,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA;AAAA,EAGpD,YAAY,gBAAgB,SAAS;AAAA;AAAA,EAErC,OAAO,QAAQ,SAAS;AAAA;AAAA,EAExB,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB;AAAA;AAAA,EAEhD,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AACpB,CAAC;AAGM,IAAM,eAAe,EAAE,OAAO;AAAA,EACnC,GAAG,EAAE,QAAQ,CAAC;AAAA,EACd,GAAG,EAAE,QAAQ,mBAAmB;AAAA;AAAA,EAEhC,KAAK,OAAO,IAAI,CAAC;AAAA,EACjB,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAClB,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA;AAAA,EAElB,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAC/B,CAAC;AAGM,IAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,MAAM,OAAO,IAAI,CAAC;AAAA,EAClB,IAAI,OAAO,IAAI,CAAC;AAAA,EAChB,IAAI,OAAO,IAAI,CAAC;AAAA,EAChB,KAAK,OAAO,IAAI,CAAC;AACnB,CAAC;AAMM,IAAM,yBAAyB,EAAE,aAAa;AAAA,EACnD,MAAM,OAAO,IAAI,CAAC;AAAA;AAAA,EAElB,KAAK,OAAO,IAAI,CAAC;AACnB,CAAC;AAMM,IAAM,aAAa,EAAE,IAAI;AAAA,EAC9B,EAAE,aAAa;AAAA,IACb,IAAI,OAAO,IAAI,EAAE,EAAE,IAAI,IAAI;AAAA,IAC3B,KAAK,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,IAC7C,MAAM,OAAO,IAAI,CAAC;AAAA,EACpB,CAAC;AAAA,EACD,EAAE,aAAa;AAAA;AAAA,IAEb,IAAI,EAAE,OAAO,EAAE,MAAM,uBAAuB,gCAAgC;AAAA,IAC5E,KAAK,EAAE,QAAQ,EAAE;AAAA,IACjB,MAAM,OAAO,IAAI,CAAC;AAAA,IAClB,MAAM,EAAE,QAAQ,QAAQ;AAAA;AAAA,IAExB,OAAO,EAAE,QAAQ,UAAU;AAAA;AAAA,IAE3B,IAAI,EAAE,QAAQ,UAAU;AAAA,EAC1B,CAAC;AACH,CAAC;AAGM,IAAM,iBAAiB,EAAE,OAAO;AAAA;AAAA,EAErC,IAAI;AAAA;AAAA,EAEJ,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAM;AAAA;AAAA,EAEjC,MAAM,OAAO,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA,EAGjC,OAAO,EACJ,IAAI;AAAA,IACH,iBAAiB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,CAAC;AAAA,IAC5D,uBAAuB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,CAAC;AAAA,EACpE,CAAC,EACA,SAAS,EACT,SAAS;AAAA;AAAA,EAEZ,SAAS,EAAE,IAAI,CAAC,kBAAkB,sBAAsB,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA;AAAA,EAE/E,IAAI;AAAA;AAAA,EAEJ,YAAY;AACd,CAAC;AAEM,IAAM,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,EAAE,CAAC;AAMlE,IAAM,iBAAiB,EAAE,KAAK,CAAC,YAAY,SAAS,aAAa,WAAW,eAAe,UAAU,SAAS,CAAC;AAE/G,IAAM,aAAa,EAAE,OAAO;AAAA,EACjC,MAAM,EACH;AAAA,IACC,EAAE,OAAO;AAAA,MACP,IAAI;AAAA,MACJ,SAAS;AAAA,MACT,IAAI;AAAA;AAAA,MAEJ,MAAM,aAAa,SAAS;AAAA;AAAA,MAE5B,SAAS,WAAW,SAAS;AAAA;AAAA;AAAA;AAAA,MAI7B,MAAM,EACH,OAAO,EACP,MAAM,gBAAgB,EACtB,SAAS;AAAA,MACZ,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,MAErC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA;AAAA,MAEvC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA,MAG7B,SAAS,EAAE,aAAa,EAAE,YAAY,SAAS,SAAS,GAAG,OAAO,QAAQ,SAAS,EAAE,CAAC,EAAE,SAAS;AAAA,IACnG,CAAC;AAAA,EACH,EACC,IAAI,CAAC;AACV,CAAC;AAKM,IAAM,iBAAiB,EAAE,OAAO;AAAA,EACrC,SAAS,EAAE,OAAO,EAAE,MAAM,wBAAwB;AAAA,EAClD,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA;AAAA,EAGpC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAC5C,CAAC;AAKM,IAAM,mBAAmB,EAAE,OAAO;AAAA;AAAA;AAAA,EAGvC,UAAU,EACP,OAAO,EACP,MAAM,yBAAyB,EAC/B,SAAS;AAAA;AAAA,EAEZ,SAAS,UAAU,SAAS;AAAA,EAC5B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC9B,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC,EAAE,IAAI,EAAE;AAAA,EACrE,OAAO,EAAE,MAAM,YAAY;AAAA,EAC3B,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA;AAAA;AAAA,EAG1B,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA;AAAA,EAGxD,MAAM,EAAE,KAAK,CAAC,QAAQ,QAAQ,SAAS,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA,EAGnD,UAAU,EAAE,MAAM,cAAc,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA;AAAA,EAGnD,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA,EAG5B,WAAW,SAAS,SAAS;AAC/B,CAAC;AAGM,IAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,SAAS;AAAA,EACT,MAAM,EAAE,OAAO,EAAE,MAAM,uBAAuB;AAAA,EAC9C,KAAK,EAAE,IAAI;AAAA;AAAA,EAEX,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS;AAAA,EACjC,YAAY;AACd,CAAC;AAIM,IAAM,gBAAgB,EAAE,OAAO;AAAA,EACpC,QAAQ,EAAE,KAAK,CAAC,WAAW,UAAU,SAAS,CAAC;AAAA;AAAA,EAE/C,KAAK,WAAW,SAAS;AAAA;AAAA,EAEzB,OAAO,EAAE,IAAI,CAAC,kBAAkB,sBAAsB,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA,EAGlE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA;AAAA,EAG5C,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA;AAAA,EAGjD,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AACxC,CAAC;AAGM,IAAM,eAAe,EAAE,OAAO;AAAA,EACnC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC9B,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC,EAAE,IAAI,EAAE;AAAA,EACrE,OAAO,EAAE,MAAM,YAAY;AAAA;AAAA,EAE3B,MAAM,EAAE,MAAM,OAAO,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC9C,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA;AAAA,EAE1B,SAAS,EAAE,MAAM,UAAU,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAE/C,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACxD,MAAM,EAAE,KAAK,CAAC,QAAQ,QAAQ,SAAS,CAAC,EAAE,SAAS;AAAA;AAAA,EAEnD,UAAU,EAAE,MAAM,cAAc,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAEnD,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA,EAG5B,cAAc,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA,EAGnC,OAAO,EACJ;AAAA,IACC;AAAA,IACA,EAAE,OAAO;AAAA;AAAA,MAEP,aAAa,EAAE,MAAM,eAAe,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,KAAK,CAAC;AAAA;AAAA;AAAA,MAG9E,YAAY;AAAA;AAAA,MAEZ,QAAQ,EAAE,MAAM,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,MAE1C,WAAW,EAAE,QAAQ,EAAE,SAAS;AAAA,IAClC,CAAC;AAAA,EACH,EACC,OAAO,CAAC,MAAM,OAAO,KAAK,CAAC,EAAE,UAAU,IAAI,sBAAsB,EACjE,KAAK,EAAE,eAAe,GAAG,CAAC,EAC1B,SAAS;AAAA;AAAA,EAEZ,WAAW,SAAS,SAAS;AAC/B,CAAC;AAEM,IAAM,YAAY,EAAE,OAAO;AAAA,EAChC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC;AAAA,EACvC,UAAU;AAAA,EACV,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAAA,EAC3D,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;AAAA,EACpD,WAAW,EAAE,OAAO;AAAA,IAClB,QAAQ,EAAE,OAAO;AAAA,IACjB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,CAAC;AAAA,EACD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,MAAO,EAAE,CAAC;AAAA,EACjG,SAAS,EACN,OAAO;AAAA,IACN,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA;AAAA,IAEjC,cAAc,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA,IAGnC,eAAe,EACZ,MAAM,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC,EACpD,IAAI,CAAC,EACL,SAAS;AAAA;AAAA,IAEZ,SAAS,EAAE,OAAO;AAAA,MAChB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,MAChC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;AAAA;AAAA;AAAA,MAG9D,WAAW,SAAS,SAAS;AAAA,IAC/B,CAAC;AAAA;AAAA;AAAA,IAGD,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA,IAG5B,SAAS,EAAE,QAAQ,EAAE,SAAS;AAAA,EAChC,CAAC,EACA,SAAS;AACd,CAAC;AAGM,IAAM,UAAU;AAAA,EACrB,OAAO;AAAA,EACP,cAAc;AAAA,EACd,OAAO;AAAA,EACP,kBAAkB;AAAA,EAClB,OAAO;AAAA,EACP,cAAc;AAAA,EACd,SAAS;AAAA,EACT,mBAAmB;AAAA,EACnB,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,wBAAwB;AAAA,EACxB,kBAAkB;AAAA,EAClB,iBAAiB;AACnB;",
   "names": []
 }

package/dist/service.js

@@ -0,0 +1,155 @@
+// sessionpipe-core 0.10.0 · Apache-2.0 · https://sessionpipe.org
+
+// src/service/index.ts
+import { execFileSync } from "node:child_process";
+import { existsSync, mkdirSync, unlinkSync, writeFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+var execQuiet = (cmd, args) => execFileSync(cmd, args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 15e3 });
+var xml = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+var sd = (s) => `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/%/g, "%%")}"`;
+function serviceFiles(s) {
+  const home = s.home ?? os.homedir();
+  const env = (manager) => ({ SESSIONPIPE_SERVICE: manager, ...s.env });
+  const plistEnv = Object.entries(env("launchd")).map(([k, v]) => `<key>${xml(k)}</key><string>${xml(v)}</string>`).join("");
+  const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${xml(s.label)}</string>
+  <key>ProgramArguments</key>
+  <array>${s.argv.map((a) => `<string>${xml(a)}</string>`).join("")}</array>
+  <key>EnvironmentVariables</key><dict>${plistEnv}</dict>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><dict><key>SuccessfulExit</key><false/></dict>
+  <key>ProcessType</key><string>Background</string>
+  <key>StandardOutPath</key><string>${xml(s.logPath)}</string>
+  <key>StandardErrorPath</key><string>${xml(s.logPath)}</string>
+</dict>
+</plist>
+`;
+  const unitEnv = Object.entries(env("systemd")).map(([k, v]) => `Environment=${k === "SESSIONPIPE_SERVICE" ? `${k}=${v}` : sd(`${k}=${v}`)}`).join("\n");
+  const unit = `[Unit]
+Description=${s.description.replace(/\n/g, " ")}
+After=network-online.target
+
+[Service]
+ExecStart=${s.argv.map(sd).join(" ")}
+${unitEnv}
+Restart=on-failure
+RestartForceExitStatus=75
+RestartSec=5
+
+[Install]
+WantedBy=default.target
+`;
+  return {
+    plist: { path: path.join(home, "Library", "LaunchAgents", `${s.label}.plist`), text: plist },
+    unit: { path: path.join(home, ".config", "systemd", "user", s.unit), text: unit }
+  };
+}
+function ensureLinger(user, exec = execQuiet) {
+  const lingering = () => {
+    try {
+      return /^Linger=yes/m.test(exec("loginctl", ["show-user", user, "--property=Linger"]));
+    } catch {
+      return false;
+    }
+  };
+  if (lingering()) return { on: true, note: "it keeps running after you log out (linger was already on)" };
+  try {
+    exec("loginctl", ["enable-linger", user]);
+  } catch {
+  }
+  if (lingering()) return { on: true, note: "it keeps running after you log out (turned linger on)" };
+  return {
+    on: false,
+    note: `it stops when you log out: run \`sudo loginctl enable-linger ${user}\` once to keep it running`
+  };
+}
+var line = (cmd, args) => [cmd, ...args].join(" ");
+function installService(o) {
+  const f = serviceFiles(o);
+  const platform = o.platform ?? process.platform;
+  const uid = o.uid ?? String(process.getuid?.() ?? "");
+  const commands = [];
+  const real = o.exec ?? execQuiet;
+  const run = (cmd, args) => {
+    commands.push(line(cmd, args));
+    return o.dryRun ? "" : real(cmd, args);
+  };
+  const write = (file) => {
+    if (o.dryRun) return;
+    mkdirSync(path.dirname(file.path), { recursive: true });
+    writeFileSync(file.path, file.text);
+  };
+  if (platform === "darwin") {
+    write(f.plist);
+    for (const d of ["gui", "user"])
+      try {
+        run("launchctl", ["bootout", `${d}/${uid}/${o.label}`]);
+      } catch {
+      }
+    try {
+      run("launchctl", ["bootstrap", `gui/${uid}`, f.plist.path]);
+      return { files: [f.plist], commands, manager: "launchd", domain: "gui" };
+    } catch {
+    }
+    run("launchctl", ["bootstrap", `user/${uid}`, f.plist.path]);
+    return { files: [f.plist], commands, manager: "launchd", domain: "user" };
+  }
+  if (platform === "linux") {
+    write(f.unit);
+    try {
+      run("systemctl", ["--user", "daemon-reload"]);
+      run("systemctl", ["--user", "enable", "--now", o.unit]);
+    } catch {
+      return { files: [f.unit], commands, manager: null, unreachable: f.unit.path };
+    }
+    const user = o.user ?? os.userInfo().username;
+    if (o.dryRun) {
+      commands.push(line("loginctl", ["enable-linger", user]));
+      return { files: [f.unit], commands, manager: "systemd", linger: { on: false, note: "dry run" } };
+    }
+    return { files: [f.unit], commands, manager: "systemd", linger: ensureLinger(user, run) };
+  }
+  return { files: [], commands, manager: null };
+}
+function uninstallService(o) {
+  const f = serviceFiles({ ...o, description: "", argv: [], logPath: "" });
+  const platform = o.platform ?? process.platform;
+  const uid = o.uid ?? String(process.getuid?.() ?? "");
+  const commands = [];
+  const files = [];
+  const real = o.exec ?? execQuiet;
+  const run = (cmd, args) => {
+    commands.push(line(cmd, args));
+    if (o.dryRun) return;
+    try {
+      real(cmd, args);
+    } catch {
+    }
+  };
+  const remove = (file) => {
+    files.push(file);
+    if (!o.dryRun) unlinkSync(file);
+  };
+  if (platform === "darwin" && existsSync(f.plist.path)) {
+    run("launchctl", ["bootout", `gui/${uid}/${o.label}`]);
+    run("launchctl", ["bootout", `user/${uid}/${o.label}`]);
+    remove(f.plist.path);
+  }
+  if (platform === "linux" && existsSync(f.unit.path)) {
+    run("systemctl", ["--user", "disable", "--now", o.unit]);
+    remove(f.unit.path);
+    run("systemctl", ["--user", "daemon-reload"]);
+  }
+  return { files, commands };
+}
+export {
+  ensureLinger,
+  installService,
+  serviceFiles,
+  uninstallService
+};
+//# sourceMappingURL=service.js.map