sessionpipe-core 0.9.0 → 0.10.0

package/dist/service.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/service/index.ts"],
+  "sourcesContent": ["// SPDX-License-Identifier: Apache-2.0\n/** sessionpipe-core/service \u2014 a per-user background service for a sessionpipe process:\n *  a launchd agent on macOS, a systemd user unit on Linux. The control daemon runs\n *  under it (`org.sessionpipe.control`), and so can a receiver of the person's own (a\n *  board on their machine), with the same files and the same commands. Node only: it\n *  writes files and runs launchctl, systemctl and loginctl, so it is never part of the\n *  root export, which stays Worker- and browser-safe.\n *\n *  Both files restart the process when it exits non-zero, and when it exits\n *  UPDATE_EXIT (75, sessionpipe-core/version) to come back on new code. The process is\n *  told which manager that is in SESSIONPIPE_SERVICE (`launchd`, `systemd`). Nothing\n *  here needs root, and a dry run touches nothing: it answers the files it would write\n *  and the commands it would run. */\nimport { execFileSync } from \"node:child_process\";\nimport { existsSync, mkdirSync, unlinkSync, writeFileSync } from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\n\n/** One service, as both managers need it. */\nexport interface ServiceSpec {\n  /** The launchd label, also the plist's name: `org.sessionpipe.control`. */\n  label: string;\n  /** The systemd user unit's file name: `sessionpipe-control.service`. */\n  unit: string;\n  /** The unit's Description line. */\n  description: string;\n  /** The program and its arguments, each one argument (never through a shell). */\n  argv: string[];\n  /** More environment for the process, beside SESSIONPIPE_SERVICE. */\n  env?: Record<string, string>;\n  /** Where launchd writes its stdout and stderr (journald keeps a unit's). */\n  logPath: string;\n  /** The home the files go under; the user's own by default. */\n  home?: string;\n}\n\n/** A file the service writes, and what is in it. */\nexport interface ServiceFile {\n  path: string;\n  text: string;\n}\n\n/** Runs one command and answers its stdout; throws when it fails. */\nexport type Exec = (cmd: string, args: string[]) => string;\n\nconst execQuiet: Exec = (cmd, args) =>\n  execFileSync(cmd, args, { encoding: \"utf8\", stdio: [\"ignore\", \"pipe\", \"ignore\"], timeout: 15_000 });\n\nconst xml = (s: string) => s.replace(/&/g, \"&amp;\").replace(/</g, \"&lt;\").replace(/>/g, \"&gt;\");\n/** One systemd argument, quoted: backslashes and quotes escaped, `%` doubled (a specifier otherwise). */\nconst sd = (s: string) => `\"${s.replace(/\\\\/g, \"\\\\\\\\\").replace(/\"/g, '\\\\\"').replace(/%/g, \"%%\")}\"`;\n\n/** The plist and the unit for a service, and where each goes. */\nexport function serviceFiles(s: ServiceSpec): { plist: ServiceFile; unit: ServiceFile } {\n  const home = s.home ?? os.homedir();\n  const env = (manager: string) => ({ SESSIONPIPE_SERVICE: manager, ...s.env });\n  const plistEnv = Object.entries(env(\"launchd\"))\n    .map(([k, v]) => `<key>${xml(k)}</key><string>${xml(v)}</string>`)\n    .join(\"\");\n  const plist = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n  <key>Label</key><string>${xml(s.label)}</string>\n  <key>ProgramArguments</key>\n  <array>${s.argv.map((a) => `<string>${xml(a)}</string>`).join(\"\")}</array>\n  <key>EnvironmentVariables</key><dict>${plistEnv}</dict>\n  <key>RunAtLoad</key><true/>\n  <key>KeepAlive</key><dict><key>SuccessfulExit</key><false/></dict>\n  <key>ProcessType</key><string>Background</string>\n  <key>StandardOutPath</key><string>${xml(s.logPath)}</string>\n  <key>StandardErrorPath</key><string>${xml(s.logPath)}</string>\n</dict>\n</plist>\n`;\n  const unitEnv = Object.entries(env(\"systemd\"))\n    .map(([k, v]) => `Environment=${k === \"SESSIONPIPE_SERVICE\" ? `${k}=${v}` : sd(`${k}=${v}`)}`)\n    .join(\"\\n\");\n  const unit = `[Unit]\nDescription=${s.description.replace(/\\n/g, \" \")}\nAfter=network-online.target\n\n[Service]\nExecStart=${s.argv.map(sd).join(\" \")}\n${unitEnv}\nRestart=on-failure\nRestartForceExitStatus=75\nRestartSec=5\n\n[Install]\nWantedBy=default.target\n`;\n  return {\n    plist: { path: path.join(home, \"Library\", \"LaunchAgents\", `${s.label}.plist`), text: plist },\n    unit: { path: path.join(home, \".config\", \"systemd\", \"user\", s.unit), text: unit },\n  };\n}\n\n/** A systemd user service stops when its person's last login ends \u2014 closing the ssh\n *  session to a lab workstation or a cloud machine stopped the daemon with it \u2014 unless\n *  the user lingers. `loginctl enable-linger` for yourself needs no root on systemd's\n *  default policy; where it does, say the one command that does it. */\nexport function ensureLinger(user: string, exec: Exec = execQuiet): { on: boolean; note: string } {\n  const lingering = () => {\n    try {\n      return /^Linger=yes/m.test(exec(\"loginctl\", [\"show-user\", user, \"--property=Linger\"]));\n    } catch {\n      return false;\n    }\n  };\n  if (lingering()) return { on: true, note: \"it keeps running after you log out (linger was already on)\" };\n  try {\n    exec(\"loginctl\", [\"enable-linger\", user]);\n  } catch {}\n  if (lingering()) return { on: true, note: \"it keeps running after you log out (turned linger on)\" };\n  return {\n    on: false,\n    note: `it stops when you log out: run \\`sudo loginctl enable-linger ${user}\\` once to keep it running`,\n  };\n}\n\n/** What an install did, or would do in a dry run. */\nexport interface ServicePlan {\n  /** The files written (or that would be). */\n  files: ServiceFile[];\n  /** The commands run (or that would be), one string each, in order. */\n  commands: string[];\n  /** Which manager runs it now: null on a platform with none, or where it isn't reachable. */\n  manager: \"launchd\" | \"systemd\" | null;\n  /** launchd: `gui` when someone is at the screen, else `user` (it starts again at the next login there). */\n  domain?: \"gui\" | \"user\";\n  /** systemd: whether it outlives the login, in words. */\n  linger?: { on: boolean; note: string };\n  /** The file that was written for a manager that couldn't be reached. */\n  unreachable?: string;\n}\n\nexport interface InstallOptions extends ServiceSpec {\n  /** Answer the plan and touch nothing. */\n  dryRun?: boolean;\n  exec?: Exec;\n  platform?: NodeJS.Platform;\n  /** The user's id (launchd's domains) and name (linger); this process's by default. */\n  uid?: string;\n  user?: string;\n}\n\nconst line = (cmd: string, args: string[]) => [cmd, ...args].join(\" \");\n\n/** Write the service for this platform and start it now; a service already there is\n *  replaced (launchd: booted out first). */\nexport function installService(o: InstallOptions): ServicePlan {\n  const f = serviceFiles(o);\n  const platform = o.platform ?? process.platform;\n  const uid = o.uid ?? String(process.getuid?.() ?? \"\");\n  const commands: string[] = [];\n  const real = o.exec ?? execQuiet;\n  const run: Exec = (cmd, args) => {\n    commands.push(line(cmd, args));\n    return o.dryRun ? \"\" : real(cmd, args);\n  };\n  const write = (file: ServiceFile) => {\n    if (o.dryRun) return;\n    mkdirSync(path.dirname(file.path), { recursive: true });\n    writeFileSync(file.path, file.text);\n  };\n  if (platform === \"darwin\") {\n    write(f.plist);\n    for (const d of [\"gui\", \"user\"])\n      try {\n        run(\"launchctl\", [\"bootout\", `${d}/${uid}/${o.label}`]);\n      } catch {}\n    try {\n      run(\"launchctl\", [\"bootstrap\", `gui/${uid}`, f.plist.path]);\n      return { files: [f.plist], commands, manager: \"launchd\", domain: \"gui\" };\n    } catch {}\n    // No one logged in at the screen (an ssh session to a Mac mini): the gui domain\n    // doesn't exist. The user domain runs it now; after a restart it starts again at\n    // the next login at the screen.\n    run(\"launchctl\", [\"bootstrap\", `user/${uid}`, f.plist.path]);\n    return { files: [f.plist], commands, manager: \"launchd\", domain: \"user\" };\n  }\n  if (platform === \"linux\") {\n    write(f.unit);\n    try {\n      run(\"systemctl\", [\"--user\", \"daemon-reload\"]);\n      run(\"systemctl\", [\"--user\", \"enable\", \"--now\", o.unit]);\n    } catch {\n      return { files: [f.unit], commands, manager: null, unreachable: f.unit.path };\n    }\n    const user = o.user ?? os.userInfo().username;\n    if (o.dryRun) {\n      commands.push(line(\"loginctl\", [\"enable-linger\", user]));\n      return { files: [f.unit], commands, manager: \"systemd\", linger: { on: false, note: \"dry run\" } };\n    }\n    return { files: [f.unit], commands, manager: \"systemd\", linger: ensureLinger(user, run) };\n  }\n  return { files: [], commands, manager: null };\n}\n\nexport interface UninstallOptions {\n  label: string;\n  unit: string;\n  home?: string;\n  dryRun?: boolean;\n  exec?: Exec;\n  platform?: NodeJS.Platform;\n  uid?: string;\n}\n\n/** Stop the service and remove its file, where this platform has one; nothing where\n *  there is none. A manager that says it wasn't loaded is no failure. */\nexport function uninstallService(o: UninstallOptions): { files: string[]; commands: string[] } {\n  const f = serviceFiles({ ...o, description: \"\", argv: [], logPath: \"\" });\n  const platform = o.platform ?? process.platform;\n  const uid = o.uid ?? String(process.getuid?.() ?? \"\");\n  const commands: string[] = [];\n  const files: string[] = [];\n  const real = o.exec ?? execQuiet;\n  const run = (cmd: string, args: string[]) => {\n    commands.push(line(cmd, args));\n    if (o.dryRun) return;\n    try {\n      real(cmd, args);\n    } catch {}\n  };\n  const remove = (file: string) => {\n    files.push(file);\n    if (!o.dryRun) unlinkSync(file);\n  };\n  if (platform === \"darwin\" && existsSync(f.plist.path)) {\n    run(\"launchctl\", [\"bootout\", `gui/${uid}/${o.label}`]);\n    run(\"launchctl\", [\"bootout\", `user/${uid}/${o.label}`]);\n    remove(f.plist.path);\n  }\n  if (platform === \"linux\" && existsSync(f.unit.path)) {\n    run(\"systemctl\", [\"--user\", \"disable\", \"--now\", o.unit]);\n    remove(f.unit.path);\n    run(\"systemctl\", [\"--user\", \"daemon-reload\"]);\n  }\n  return { files, commands };\n}\n"],
+  "mappings": ";;;AAaA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,WAAW,YAAY,qBAAqB;AACjE,OAAO,QAAQ;AACf,OAAO,UAAU;AA6BjB,IAAM,YAAkB,CAAC,KAAK,SAC5B,aAAa,KAAK,MAAM,EAAE,UAAU,QAAQ,OAAO,CAAC,UAAU,QAAQ,QAAQ,GAAG,SAAS,KAAO,CAAC;AAEpG,IAAM,MAAM,CAAC,MAAc,EAAE,QAAQ,MAAM,OAAO,EAAE,QAAQ,MAAM,MAAM,EAAE,QAAQ,MAAM,MAAM;AAE9F,IAAM,KAAK,CAAC,MAAc,IAAI,EAAE,QAAQ,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAK,EAAE,QAAQ,MAAM,IAAI,CAAC;AAGxF,SAAS,aAAa,GAA2D;AACtF,QAAM,OAAO,EAAE,QAAQ,GAAG,QAAQ;AAClC,QAAM,MAAM,CAAC,aAAqB,EAAE,qBAAqB,SAAS,GAAG,EAAE,IAAI;AAC3E,QAAM,WAAW,OAAO,QAAQ,IAAI,SAAS,CAAC,EAC3C,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,QAAQ,IAAI,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,WAAW,EAChE,KAAK,EAAE;AACV,QAAM,QAAQ;AAAA;AAAA;AAAA;AAAA,4BAIY,IAAI,EAAE,KAAK,CAAC;AAAA;AAAA,WAE7B,EAAE,KAAK,IAAI,CAAC,MAAM,WAAW,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;AAAA,yCAC1B,QAAQ;AAAA;AAAA;AAAA;AAAA,sCAIX,IAAI,EAAE,OAAO,CAAC;AAAA,wCACZ,IAAI,EAAE,OAAO,CAAC;AAAA;AAAA;AAAA;AAIpD,QAAM,UAAU,OAAO,QAAQ,IAAI,SAAS,CAAC,EAC1C,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,eAAe,MAAM,wBAAwB,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAC5F,KAAK,IAAI;AACZ,QAAM,OAAO;AAAA,cACD,EAAE,YAAY,QAAQ,OAAO,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA,YAInC,EAAE,KAAK,IAAI,EAAE,EAAE,KAAK,GAAG,CAAC;AAAA,EAClC,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQP,SAAO;AAAA,IACL,OAAO,EAAE,MAAM,KAAK,KAAK,MAAM,WAAW,gBAAgB,GAAG,EAAE,KAAK,QAAQ,GAAG,MAAM,MAAM;AAAA,IAC3F,MAAM,EAAE,MAAM,KAAK,KAAK,MAAM,WAAW,WAAW,QAAQ,EAAE,IAAI,GAAG,MAAM,KAAK;AAAA,EAClF;AACF;AAMO,SAAS,aAAa,MAAc,OAAa,WAA0C;AAChG,QAAM,YAAY,MAAM;AACtB,QAAI;AACF,aAAO,eAAe,KAAK,KAAK,YAAY,CAAC,aAAa,MAAM,mBAAmB,CAAC,CAAC;AAAA,IACvF,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,MAAI,UAAU,EAAG,QAAO,EAAE,IAAI,MAAM,MAAM,6DAA6D;AACvG,MAAI;AACF,SAAK,YAAY,CAAC,iBAAiB,IAAI,CAAC;AAAA,EAC1C,QAAQ;AAAA,EAAC;AACT,MAAI,UAAU,EAAG,QAAO,EAAE,IAAI,MAAM,MAAM,wDAAwD;AAClG,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,MAAM,gEAAgE,IAAI;AAAA,EAC5E;AACF;AA4BA,IAAM,OAAO,CAAC,KAAa,SAAmB,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;AAI9D,SAAS,eAAe,GAAgC;AAC7D,QAAM,IAAI,aAAa,CAAC;AACxB,QAAM,WAAW,EAAE,YAAY,QAAQ;AACvC,QAAM,MAAM,EAAE,OAAO,OAAO,QAAQ,SAAS,KAAK,EAAE;AACpD,QAAM,WAAqB,CAAC;AAC5B,QAAM,OAAO,EAAE,QAAQ;AACvB,QAAM,MAAY,CAAC,KAAK,SAAS;AAC/B,aAAS,KAAK,KAAK,KAAK,IAAI,CAAC;AAC7B,WAAO,EAAE,SAAS,KAAK,KAAK,KAAK,IAAI;AAAA,EACvC;AACA,QAAM,QAAQ,CAAC,SAAsB;AACnC,QAAI,EAAE,OAAQ;AACd,cAAU,KAAK,QAAQ,KAAK,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AACtD,kBAAc,KAAK,MAAM,KAAK,IAAI;AAAA,EACpC;AACA,MAAI,aAAa,UAAU;AACzB,UAAM,EAAE,KAAK;AACb,eAAW,KAAK,CAAC,OAAO,MAAM;AAC5B,UAAI;AACF,YAAI,aAAa,CAAC,WAAW,GAAG,CAAC,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;AAAA,MACxD,QAAQ;AAAA,MAAC;AACX,QAAI;AACF,UAAI,aAAa,CAAC,aAAa,OAAO,GAAG,IAAI,EAAE,MAAM,IAAI,CAAC;AAC1D,aAAO,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,UAAU,SAAS,WAAW,QAAQ,MAAM;AAAA,IACzE,QAAQ;AAAA,IAAC;AAIT,QAAI,aAAa,CAAC,aAAa,QAAQ,GAAG,IAAI,EAAE,MAAM,IAAI,CAAC;AAC3D,WAAO,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,UAAU,SAAS,WAAW,QAAQ,OAAO;AAAA,EAC1E;AACA,MAAI,aAAa,SAAS;AACxB,UAAM,EAAE,IAAI;AACZ,QAAI;AACF,UAAI,aAAa,CAAC,UAAU,eAAe,CAAC;AAC5C,UAAI,aAAa,CAAC,UAAU,UAAU,SAAS,EAAE,IAAI,CAAC;AAAA,IACxD,QAAQ;AACN,aAAO,EAAE,OAAO,CAAC,EAAE,IAAI,GAAG,UAAU,SAAS,MAAM,aAAa,EAAE,KAAK,KAAK;AAAA,IAC9E;AACA,UAAM,OAAO,EAAE,QAAQ,GAAG,SAAS,EAAE;AACrC,QAAI,EAAE,QAAQ;AACZ,eAAS,KAAK,KAAK,YAAY,CAAC,iBAAiB,IAAI,CAAC,CAAC;AACvD,aAAO,EAAE,OAAO,CAAC,EAAE,IAAI,GAAG,UAAU,SAAS,WAAW,QAAQ,EAAE,IAAI,OAAO,MAAM,UAAU,EAAE;AAAA,IACjG;AACA,WAAO,EAAE,OAAO,CAAC,EAAE,IAAI,GAAG,UAAU,SAAS,WAAW,QAAQ,aAAa,MAAM,GAAG,EAAE;AAAA,EAC1F;AACA,SAAO,EAAE,OAAO,CAAC,GAAG,UAAU,SAAS,KAAK;AAC9C;AAcO,SAAS,iBAAiB,GAA8D;AAC7F,QAAM,IAAI,aAAa,EAAE,GAAG,GAAG,aAAa,IAAI,MAAM,CAAC,GAAG,SAAS,GAAG,CAAC;AACvE,QAAM,WAAW,EAAE,YAAY,QAAQ;AACvC,QAAM,MAAM,EAAE,OAAO,OAAO,QAAQ,SAAS,KAAK,EAAE;AACpD,QAAM,WAAqB,CAAC;AAC5B,QAAM,QAAkB,CAAC;AACzB,QAAM,OAAO,EAAE,QAAQ;AACvB,QAAM,MAAM,CAAC,KAAa,SAAmB;AAC3C,aAAS,KAAK,KAAK,KAAK,IAAI,CAAC;AAC7B,QAAI,EAAE,OAAQ;AACd,QAAI;AACF,WAAK,KAAK,IAAI;AAAA,IAChB,QAAQ;AAAA,IAAC;AAAA,EACX;AACA,QAAM,SAAS,CAAC,SAAiB;AAC/B,UAAM,KAAK,IAAI;AACf,QAAI,CAAC,EAAE,OAAQ,YAAW,IAAI;AAAA,EAChC;AACA,MAAI,aAAa,YAAY,WAAW,EAAE,MAAM,IAAI,GAAG;AACrD,QAAI,aAAa,CAAC,WAAW,OAAO,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;AACrD,QAAI,aAAa,CAAC,WAAW,QAAQ,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;AACtD,WAAO,EAAE,MAAM,IAAI;AAAA,EACrB;AACA,MAAI,aAAa,WAAW,WAAW,EAAE,KAAK,IAAI,GAAG;AACnD,QAAI,aAAa,CAAC,UAAU,WAAW,SAAS,EAAE,IAAI,CAAC;AACvD,WAAO,EAAE,KAAK,IAAI;AAClB,QAAI,aAAa,CAAC,UAAU,eAAe,CAAC;AAAA,EAC9C;AACA,SAAO,EAAE,OAAO,SAAS;AAC3B;",
+  "names": []
+}

package/dist/src/adapters/acp-control.d.ts

@@ -0,0 +1,87 @@
+import { type Mode } from "./headless.js";
+export interface AcpAgent {
+    /** sessionpipe's harness name (ADAPTERS.md): the registry's id unless a hook adapter already named it. */
+    harness: string;
+    /** The registry's id. */
+    registry: string;
+    label: string;
+    /** The CLI's name on PATH. */
+    bin: string;
+    args: string[];
+}
+/** The agents the daemon can drive, with the launch line the registry publishes. */
+export declare const ACP_AGENTS: readonly AcpAgent[];
+export declare const ACP_HARNESSES: readonly string[];
+export declare const acpAgent: (harness: string) => AcpAgent | undefined;
+/** The env var that names an agent's CLI by hand: `SESSIONPIPE_ACP_GEMINI_CLI`. */
+export declare const acpOverride: (harness: string) => string;
+/** An agent's CLI on this machine: the override, else on PATH, else beside the node
+ *  running this (an `npm install -g` there) or where the installers put it. */
+export declare function findAcpAgent(harness: string, env?: NodeJS.ProcessEnv, home?: string, nodeDir?: string): {
+    bin: string;
+    args: string[];
+} | null;
+/** The ACP agents installed here, by harness name, for the daemon's hello. */
+export declare function acpHarnesses(env?: NodeJS.ProcessEnv): string[];
+type Json = Record<string, unknown>;
+interface Option {
+    optionId: string;
+    kind: string;
+}
+/** Which permission option the machine's mode picks, or null for `cancelled`: safe
+ *  refuses (once, else always), auto allows (once, else always). Inherit refuses as safe
+ *  does: the agent asked because its own settings want a person, and none is there.
+ *  Never the other way. */
+export declare function permissionChoice(options: unknown, mode: Mode): Option | null;
+/** A JSON-RPC error in words: its message, and its `data` where that says more (goose
+ *  1.55 answers session/new with "Internal error" and the reason in `data`). */
+export declare function errorWords(err: Json): string;
+/** A session the daemon holds (the shape of daemon.ts's SdkSession, plus the agent's own id). */
+export interface AcpHeld {
+    /** Deliver one message; resolves with the agent's reply when the turn ends. */
+    send(text: string): Promise<{
+        reply: string;
+        error?: string;
+    }>;
+    interrupt(): Promise<void>;
+    close(): void;
+    readonly busy: boolean;
+    readonly lastUsed: number;
+    readonly mode: "api";
+    /** The id the agent gave the session. */
+    readonly session: string;
+    /** The process is gone or was closed: nothing more can be sent. */
+    readonly closed: boolean;
+}
+export interface AcpOptions {
+    bin: string;
+    args: string[];
+    cwd: string;
+    mode: Mode;
+    label: string;
+    env?: NodeJS.ProcessEnv;
+    /** Reopen this session of the agent's (`session/load`) instead of starting a new one. */
+    load?: string;
+    /** The reply so far, each time it grows. */
+    onText?: (text: string) => void;
+    log?: (line: string) => void;
+    now?: () => number;
+    /** A turn still running after this is cancelled, then stopped. */
+    timeoutMs?: number;
+    /** How long the agent may take to answer `initialize` and open the session. */
+    openTimeoutMs?: number;
+    /** On close, how long the agent gets to leave by itself before SIGTERM (then SIGKILL). */
+    closeGraceMs?: number;
+}
+export type AcpStart = {
+    held: AcpHeld;
+} | {
+    failed: string;
+} | {
+    unsupported: string;
+};
+/** Run an ACP agent and open a session in it. Resolves once the agent has answered
+ *  `session/new` (or `session/load`); every later turn goes through `held.send`. */
+export declare function startAcp(o: AcpOptions): Promise<AcpStart>;
+export {};
+//# sourceMappingURL=acp-control.d.ts.map

package/dist/src/adapters/acp-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/acp-control.ts"],"names":[],"mappings":"AAeA,OAAO,EAAkD,KAAK,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1F,MAAM,WAAW,QAAQ;IACvB,0GAA0G;IAC1G,OAAO,EAAE,MAAM,CAAC;IAChB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,oFAAoF;AACpF,eAAO,MAAM,UAAU,EAAE,SAAS,QAAQ,EA0CzC,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAAqC,CAAC;AAEjF,eAAO,MAAM,QAAQ,YAAa,MAAM,KAAG,QAAQ,GAAG,SAA0D,CAAC;AAEjH,mFAAmF;AACnF,eAAO,MAAM,WAAW,YAAa,MAAM,KAAG,MAAuE,CAAC;AAEtH;+EAC+E;AAC/E,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,IAAI,SAAe,EACnB,OAAO,SAAiC,GACvC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAgBxC;AAED,8EAA8E;AAC9E,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE,CAE3E;AAED,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAIpC,UAAU,MAAM;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;2BAG2B;AAC3B,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAW5E;AAED;gFACgF;AAChF,wBAAgB,UAAU,CAAC,GAAG,EAAE,IAAI,GAAG,MAAM,CAI5C;AASD,iGAAiG;AACjG,MAAM,WAAW,OAAO;IACtB,+EAA+E;IAC/E,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,KAAK,IAAI,IAAI,CAAC;IACd,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,yCAAyC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAIxF;oFACoF;AACpF,wBAAgB,QAAQ,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+QzD"}

package/dist/src/adapters/antigravity-control.d.ts

@@ -1,14 +1,24 @@
+import type { RunLevel, StartPermission } from "../control/verify.js";
 import { type Mode, type Reading, type RunResult } from "./headless.js";
 /** The `agy` to run: SESSIONPIPE_AGY, else on PATH, else where its installer puts it. */
 export declare function findAgy(env?: NodeJS.ProcessEnv, home?: string): string | null;
-/** Permission flags for the machine's mode. Safe: none — agy denies every tool call
- *  nobody is there to approve, and says which. Auto: `--mode accept-edits`. Never
- *  `--dangerously-skip-permissions`: no path here writes it. */
-export declare function agyModeFlags(mode: Mode): string[];
+/** Permission flags for a level. Safe: none — agy denies every tool call nobody is
+ *  there to approve, and says which. Edits: `--mode accept-edits`, its widest, which is
+ *  also what an auto machine's mode means for it. Inherit: none either, so agy runs as
+ *  it would by itself. agy has no read-only mode known, so `read` is never offered and
+ *  throws rather than run at safe. Never `--dangerously-skip-permissions`: no path here
+ *  writes it. */
+export declare function agyModeFlags(level: RunLevel): string[];
+/** The levels a start may ask agy for on a machine in `mode`: safe, and edits on an
+ *  auto machine. */
+export declare const offeredLevels: (mode: Mode) => StartPermission[];
+/** What a start that names no level gets, said as what it is: edits on an auto machine,
+ *  no flag on an inherit one. */
+export declare const defaultLevel: (mode: Mode) => RunLevel;
 /** One headless turn in the folder it is spawned in. A message that starts with a dash
  *  would read as a flag after `-p`; a leading space keeps it the prompt. */
 export declare function agyArgs(o: {
-    mode: Mode;
+    permission: RunLevel;
     prompt: string;
     resume?: string;
 }): string[];

package/dist/src/adapters/antigravity-control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"antigravity-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/antigravity-control.ts"],"names":[],"mappings":"AAUA,OAAO,EAAkC,KAAK,IAAI,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAc,MAAM,eAAe,CAAC;AAIpH,yFAAyF;AACzF,wBAAgB,OAAO,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAe,GAAG,MAAM,GAAG,IAAI,CAOhG;AAED;;gEAEgE;AAChE,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,CAEjD;AAED;4EAC4E;AAC5E,wBAAgB,OAAO,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CAUpF;AAED,yCAAyC;AACzC,eAAO,MAAM,MAAM,SAAS,MAAM,CAAC,UAAU,KAAiB,MAAM,CAAC,UAAyB,CAAC;AAE/F,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,EAAE,CAAC;CACnB;AAED,8DAA8D;AAC9D,MAAM,WAAW,QAAQ;IACvB,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,0BAA0B;IAC1B,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAgCrD;AAYD,6DAA6D;AAC7D,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAU3D;AAED;yCACyC;AACzC,qBAAa,UAAW,YAAW,OAAO;IACxC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAQ;IAC9B,KAAK,SAAK;IACV,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,IAAI,CAAuB;IACnC,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,IAAI,CAAuB;IAEnC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAa1B;IAED,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAiB9D;CACF;AAED,eAAO,MAAM,OAAO,QAAO,UAA8B,CAAC"}
+{"version":3,"file":"antigravity-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/antigravity-control.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAkC,KAAK,IAAI,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAc,MAAM,eAAe,CAAC;AAIpH,yFAAyF;AACzF,wBAAgB,OAAO,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAe,GAAG,MAAM,GAAG,IAAI,CAOhG;AAED;;;;;iBAKiB;AACjB,wBAAgB,YAAY,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,EAAE,CAGtD;AAED;oBACoB;AACpB,eAAO,MAAM,aAAa,SAAU,IAAI,KAAG,eAAe,EAAsD,CAAC;AAEjH;iCACiC;AACjC,eAAO,MAAM,YAAY,SAAU,IAAI,KAAG,QAA8C,CAAC;AAEzF;4EAC4E;AAC5E,wBAAgB,OAAO,CAAC,CAAC,EAAE;IAAE,UAAU,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CAU9F;AAED,yCAAyC;AACzC,eAAO,MAAM,MAAM,SAAS,MAAM,CAAC,UAAU,KAAiB,MAAM,CAAC,UAAyB,CAAC;AAE/F,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,EAAE,CAAC;CACnB;AAED,8DAA8D;AAC9D,MAAM,WAAW,QAAQ;IACvB,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,0BAA0B;IAC1B,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAgCrD;AAYD,6DAA6D;AAC7D,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAU3D;AAED;yCACyC;AACzC,qBAAa,UAAW,YAAW,OAAO;IACxC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAQ;IAC9B,KAAK,SAAK;IACV,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,IAAI,CAAuB;IACnC,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,IAAI,CAAuB;IAEnC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAa1B;IAED,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAiB9D;CACF;AAED,eAAO,MAAM,OAAO,QAAO,UAA8B,CAAC"}

package/dist/src/adapters/claude-code-control.d.ts

@@ -1,3 +1,4 @@
+import { type RunLevel, type StartPermission } from "../control/verify.js";
 import { JOB_TIMEOUT_MS, type Login, type Mode, type RunOptions, type RunResult } from "./headless.js";
 export { JOB_TIMEOUT_MS, type Login, type Mode, type RunResult };
 /** Dotted versions by number, a missing part as 0: 1.9.0 < 1.10 = 1.10.0. */
@@ -15,10 +16,44 @@ export interface Caps {
     stream?: boolean;
 }
 export declare function parseCaps(help: string): Caps;
-/** Permission flags for the machine's mode. Safe: `dontAsk` (nothing that needs
- *  approval runs). Auto: Claude Code's own auto mode, or a refusal. Never
- *  bypassPermissions — no path here writes it. */
-export declare function modeFlags(mode: Mode, caps: Caps): {
+/** Permission flags for a level (a machine's mode is one: safe, auto, inherit). Read:
+ *  plan mode. Safe: `dontAsk` (nothing that needs approval runs). Edits: acceptEdits.
+ *  Auto: Claude Code's own auto mode. Inherit: none, so the turn starts in the mode
+ *  Claude Code picks by itself here, its settings' `permissions.defaultMode` (a resume
+ *  too: Claude Code never restores a session's earlier mode). A level this Claude Code
+ *  has no mode for is a refusal, never another level. Never bypassPermissions — no path
+ *  here writes it. */
+export declare function modeFlags(level: RunLevel, caps: Caps): {
+    args: string[];
+} | {
+    error: string;
+};
+/** The widest level a start may name on a machine in `mode`: the mode itself, and safe
+ *  on an inherit machine, whose own default sessionpipe can't rank, so a message there may
+ *  only narrow to a level that never runs anything needing approval. */
+export declare const ceilingLevel: (mode: Mode) => StartPermission;
+/** The levels a start may ask Claude Code for on a machine in `mode`: never above its
+ *  ceiling, and each only where `claude --help` lists the mode it maps to (safe always). */
+export declare function offeredLevels(mode: Mode, caps: Caps): StartPermission[];
+/** What a start that names no level gets: what the machine's mode means for Claude Code. */
+export declare const defaultLevel: (mode: Mode) => RunLevel;
+/** How a headless run prints: streamed where this Claude Code can, else one JSON at the end. */
+export declare function outputArgs(caps: {
+    stream?: boolean;
+}): string[];
+/** One headless `claude -p` run: a new session (`session`), or the next message of one
+ *  (`resume`, optionally as a fork). The model is its own argument after `--model`, and
+ *  a prompt that starts with a dash gets a leading space, so it is never read as a flag. */
+export declare function claudeArgs(o: {
+    caps: Caps;
+    level: RunLevel;
+    prompt: string;
+    session?: string;
+    resume?: string;
+    fork?: boolean;
+    model?: string;
+    allowedTools?: string[];
+}): {
     args: string[];
 } | {
     error: string;

package/dist/src/adapters/claude-code-control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code-control.ts"],"names":[],"mappings":"AAYA,OAAO,EAEL,cAAc,EACd,KAAK,KAAK,EACV,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,SAAS,EAEf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;AAMjE,6EAA6E;AAC7E,eAAO,MAAM,UAAU,MAAO,MAAM,KAAK,MAAM,WAM9C,CAAC;AAEF;mEACmE;AACnE,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAe,GAAG,MAAM,GAAG,IAAI,CA2BnG;AAcD,MAAM,WAAW,IAAI;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;IACd;sFACkF;IAClF,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAU5C;AAED;;kDAEkD;AAClD,wBAAgB,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAexF;AAED;uFACuF;AACvF,wBAAgB,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAiBrG;AAED;;kFAEkF;AAClF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,CAexE;AAED;;;;mDAImD;AACnD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,KAAK,CAAC,CAUjH;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAIlE;AAED,8EAA8E;AAC9E,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,CAM7G;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAc5C;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,GAAG,IAAI,CAkBjF;AAID;;yEAEyE;AACzE,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,SAAkB,GAAG,MAAM,GAAG,IAAI,CA2DjF;AAYD;;yCAEyC;AACzC,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAkBvE;AAED,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO,CAS5F;AAED;oFACoF;AACpF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAExF;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CAChD;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAqBlF;AAED,eAAO,MAAM,MAAM,MAAO,OAAO,KAAG,CAAC,IAAI,MAAkD,CAAC"}
+{"version":3,"file":"claude-code-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code-control.ts"],"names":[],"mappings":"AAYA,OAAO,EAAa,KAAK,QAAQ,EAAqB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACzG,OAAO,EAEL,cAAc,EACd,KAAK,KAAK,EACV,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,SAAS,EAEf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;AAMjE,6EAA6E;AAC7E,eAAO,MAAM,UAAU,MAAO,MAAM,KAAK,MAAM,WAM9C,CAAC;AAEF;mEACmE;AACnE,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAe,GAAG,MAAM,GAAG,IAAI,CA2BnG;AAcD,MAAM,WAAW,IAAI;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;IACd;sFACkF;IAClF,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAU5C;AASD;;;;;;sBAMsB;AACtB,wBAAgB,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAkB7F;AAED;;wEAEwE;AACxE,eAAO,MAAM,YAAY,SAAU,IAAI,KAAG,eAAuD,CAAC;AAElG;4FAC4F;AAC5F,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,eAAe,EAAE,CAIvE;AAED,4FAA4F;AAC5F,eAAO,MAAM,YAAY,SAAU,IAAI,KAAG,QAAgB,CAAC;AAE3D,gGAAgG;AAChG,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,EAAE,CAI/D;AAED;;4FAE4F;AAC5F,wBAAgB,UAAU,CAAC,CAAC,EAAE;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAiBzC;AAED;uFACuF;AACvF,wBAAgB,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAiBrG;AAED;;kFAEkF;AAClF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,CAexE;AAED;;;;mDAImD;AACnD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,KAAK,CAAC,CAUjH;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAIlE;AAED,8EAA8E;AAC9E,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,CAM7G;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAc5C;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,GAAG,IAAI,CAkBjF;AAID;;yEAEyE;AACzE,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,SAAkB,GAAG,MAAM,GAAG,IAAI,CA2DjF;AAYD;;yCAEyC;AACzC,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAkBvE;AAED,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO,CAS5F;AAED;oFACoF;AACpF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAExF;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CAChD;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAqBlF;AAED,eAAO,MAAM,MAAM,MAAO,OAAO,KAAG,CAAC,IAAI,MAAkD,CAAC"}

package/dist/src/adapters/claude-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,KAAK,EACV,OAAO,EAEP,UAAU,EAKV,YAAY,EACb,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,aAAa,YACxB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,MAAM,EACN,eAAe,EACf,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,aAAa,CACL,CAAC;AAaX;;+EAE+E;AAC/E,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAwB,GAAG,MAAM,EAAE,CAiBvG;AAgBD,eAAO,MAAM,UAAU,EAAE,OA8MxB,CAAC;AAOF;;;;6FAI6F;AAC7F,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAE7E;AAuED;sEACsE;AACtE,wBAAgB,SAAS,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAa7E;AAyDD;kFACkF;AAClF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,SAAY,GAAG,cAAc,EAAE,CAUjF;AAcD;yEACyE;AACzE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7C;AA2DD;;qFAEqF;AACrF,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,UAAU,GAChB,YAAY,CA6Fd;AAED,6GAA6G;AAC7G,eAAO,MAAM,kBAAkB,QAAO,IAGrC,CAAC"}
+{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,KAAK,EACV,OAAO,EAEP,UAAU,EAKV,YAAY,EACb,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,aAAa,YACxB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,MAAM,EACN,eAAe,EACf,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,aAAa,CACL,CAAC;AAaX;;+EAE+E;AAC/E,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAwB,GAAG,MAAM,EAAE,CAiBvG;AAgBD,eAAO,MAAM,UAAU,EAAE,OAgPxB,CAAC;AAOF;;;;6FAI6F;AAC7F,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAE7E;AA0FD;sEACsE;AACtE,wBAAgB,SAAS,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAa7E;AAsFD;kFACkF;AAClF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,SAAY,GAAG,cAAc,EAAE,CAUjF;AAcD;yEACyE;AACzE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7C;AA2DD;;qFAEqF;AACrF,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,UAAU,GAChB,YAAY,CA6Fd;AAED,6GAA6G;AAC7G,eAAO,MAAM,kBAAkB,QAAO,IAGrC,CAAC"}

package/dist/src/adapters/codex-control.d.ts

@@ -1,21 +1,37 @@
+import { type RunLevel, type StartPermission } from "../control/verify.js";
 import { type Login, type Mode, type Reading, type RunResult } from "./headless.js";
 export { codexFacts, findRollout } from "./codex.js";
 /** The `codex` to run: SESSIONPIPE_CODEX, else on PATH, else beside the node running
  *  this (an `npm install -g` there) or where the installers put it. */
 export declare function findCodex(env?: NodeJS.ProcessEnv, home?: string, nodeDir?: string): string | null;
-/** Sandbox flags for the machine's mode. Safe: workspace-write, and nothing escalates
- *  unattended (exec never asks). Auto: approval requests go through Codex's own
- *  automatic review. Never `--dangerously-bypass-approvals-and-sandbox` or
- *  `--dangerously-bypass-hook-trust`: no path here writes them. */
-export declare function codexModeFlags(mode: Mode, resume?: boolean): string[];
+/** Sandbox flags for a level (a machine's mode is one: safe, auto, inherit). Read: the
+ *  read-only sandbox. Safe: workspace-write, and nothing escalates unattended (exec never
+ *  asks); that sandbox already edits inside the folder, so `edits` is never offered and
+ *  means the same. Auto: approval requests go through Codex's own automatic review.
+ *  Inherit: none, so `sandbox_mode` and `approval_policy` come from the person's own
+ *  config.toml, a new session's and a resume's alike. Never
+ *  `--dangerously-bypass-approvals-and-sandbox`, `--dangerously-bypass-hook-trust` or
+ *  `danger-full-access`: no path here writes them. */
+export declare function codexModeFlags(level: RunLevel, resume?: boolean): string[];
+/** The levels a start may ask Codex for on a machine in `mode`: read and safe, and auto
+ *  on an auto machine. */
+export declare const offeredLevels: (mode: Mode) => StartPermission[];
+/** What a start that names no level gets: what the machine's mode means for Codex. */
+export declare const defaultLevel: (mode: Mode) => RunLevel;
 /** One headless turn. A new session runs in `cwd` (`-C`); a resume names the thread.
- *  The prompt goes after `--`, so a message that starts with a dash is never a flag. */
+ *  The model is its own argument after `-m`. The prompt goes after `--`, so a message
+ *  that starts with a dash is never a flag. */
 export declare function codexArgs(o: {
-    mode: Mode;
+    permission: RunLevel;
     prompt: string;
     cwd?: string;
     resume?: string;
+    model?: string;
 }): string[];
+/** The models a hello offers for Codex (CONTROL.md §2 `start`): the slugs Codex's own
+ *  picker lists, from `$CODEX_HOME/models_cache.json` (visibility `list`; hidden ones,
+ *  such as its review model, left out), at most 50. Empty when there is no cache. */
+export declare function codexModels(env?: NodeJS.ProcessEnv, home?: string): string[];
 /** The env a headless turn runs with. */
 export declare const codexEnv: (env?: NodeJS.ProcessEnv) => NodeJS.ProcessEnv;
 export declare const LOGIN_HINT = "Codex isn't signed in on this machine: run `codex login --device-auth` there.";

package/dist/src/adapters/codex-control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/codex-control.ts"],"names":[],"mappings":"AAWA,OAAO,EAGL,KAAK,KAAK,EACV,KAAK,IAAI,EACT,KAAK,OAAO,EACZ,KAAK,SAAS,EAGf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAIrD;uEACuE;AACvE,wBAAgB,SAAS,CACvB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,IAAI,SAAe,EACnB,OAAO,SAAiC,GACvC,MAAM,GAAG,IAAI,CAOf;AAED;;;mEAGmE;AACnE,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,UAAQ,GAAG,MAAM,EAAE,CAenE;AAED;wFACwF;AACxF,wBAAgB,SAAS,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CAIpG;AAED,yCAAyC;AACzC,eAAO,MAAM,QAAQ,SAAS,MAAM,CAAC,UAAU,KAAiB,MAAM,CAAC,UAAyB,CAAC;AAEjG,eAAO,MAAM,UAAU,kFAAkF,CAAC;AAE1G;;uEAEuE;AACvE,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,KAAK,CAAC,CAc5F;AAED,2DAA2D;AAC3D,MAAM,WAAW,UAAU;IACzB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qGAAqG;IACrG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qGAAqG;IACrG,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAiCzD;AAED,iFAAiF;AACjF,qBAAa,YAAa,YAAW,OAAO;IAC1C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAQ;IAC9B,KAAK,SAAK;IACV,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAM;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgB;IACzC,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,IAAI,CAAuB;IAEnC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAc1B;IAED;2EACuE;IACvE,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAQ9D;CACF;AAYD,eAAO,MAAM,OAAO,QAAO,YAAkC,CAAC"}
+{"version":3,"file":"codex-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/codex-control.ts"],"names":[],"mappings":"AAYA,OAAO,EAAY,KAAK,QAAQ,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAGL,KAAK,KAAK,EACV,KAAK,IAAI,EACT,KAAK,OAAO,EACZ,KAAK,SAAS,EAGf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAIrD;uEACuE;AACvE,wBAAgB,SAAS,CACvB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,IAAI,SAAe,EACnB,OAAO,SAAiC,GACvC,MAAM,GAAG,IAAI,CAOf;AAED;;;;;;;sDAOsD;AACtD,wBAAgB,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAQ,GAAG,MAAM,EAAE,CAiBxE;AAED;0BAC0B;AAC1B,eAAO,MAAM,aAAa,SAAU,IAAI,KAAG,eAAe,EACK,CAAC;AAEhE,sFAAsF;AACtF,eAAO,MAAM,YAAY,SAAU,IAAI,KAAG,QAAgB,CAAC;AAE3D;;+CAE+C;AAC/C,wBAAgB,SAAS,CAAC,CAAC,EAAE;IAC3B,UAAU,EAAE,QAAQ,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,EAAE,CAcX;AAED;;qFAEqF;AACrF,wBAAgB,WAAW,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAe,GAAG,MAAM,EAAE,CAa/F;AAED,yCAAyC;AACzC,eAAO,MAAM,QAAQ,SAAS,MAAM,CAAC,UAAU,KAAiB,MAAM,CAAC,UAAyB,CAAC;AAEjG,eAAO,MAAM,UAAU,kFAAkF,CAAC;AAE1G;;uEAEuE;AACvE,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,KAAK,CAAC,CAc5F;AAED,2DAA2D;AAC3D,MAAM,WAAW,UAAU;IACzB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,0BAA0B;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qGAAqG;IACrG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qGAAqG;IACrG,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAiCzD;AAED,iFAAiF;AACjF,qBAAa,YAAa,YAAW,OAAO;IAC1C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAQ;IAC9B,KAAK,SAAK;IACV,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAM;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgB;IACzC,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,IAAI,CAAuB;IAEnC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAc1B;IAED;2EACuE;IACvE,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAQ9D;CACF;AAYD,eAAO,MAAM,OAAO,QAAO,YAAkC,CAAC"}

package/dist/src/adapters/codex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../src/adapters/codex.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,OAAO,EAOP,YAAY,EACb,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,YAAY,YACvB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,MAAM,EACN,WAAW,EACX,eAAe,EACf,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,CACJ,CAAC;AAmFX;;gEAEgE;AAChE,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAwBjG;AAeD,eAAO,MAAM,KAAK,EAAE,OAsMnB,CAAC;AAOF,0FAA0F;AAC1F,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CA2DrD"}
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../../src/adapters/codex.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,OAAO,EAOP,YAAY,EACb,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,YAAY,YACvB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,MAAM,EACN,WAAW,EACX,eAAe,EACf,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,CACJ,CAAC;AAmFX;;gEAEgE;AAChE,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAwBjG;AAeD,eAAO,MAAM,KAAK,EAAE,OAwMnB,CAAC;AAOF,0FAA0F;AAC1F,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CA2DrD"}

package/dist/src/adapters/headless.d.ts

@@ -1,6 +1,9 @@
 /** A headless turn still running after this is stopped. */
 export declare const JOB_TIMEOUT_MS: number;
-export type Mode = "safe" | "auto";
+/** How a turn the daemon runs may act (spec/CONTROL.md §2), chosen at the machine's own
+ *  terminal: safe, the harness's auto mode, or inherit (no permission flag, so the
+ *  harness starts in its own default on this machine). */
+export type Mode = "safe" | "auto" | "inherit";
 export declare function isExe(p: string): boolean;
 /** A harness's CLI: the override the person set (`SESSIONPIPE_<NAME>`), else the first
  *  of `names` on PATH, else the first of `dirs` that holds one. A launchd or systemd

package/dist/src/adapters/headless.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"headless.d.ts","sourceRoot":"","sources":["../../../src/adapters/headless.ts"],"names":[],"mappings":"AASA,2DAA2D;AAC3D,eAAO,MAAM,cAAc,QAAc,CAAC;AAG1C,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnC,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAQxC;AAED;;0FAE0F;AAC1F,wBAAgB,UAAU,CAAC,CAAC,EAAE;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,MAAM,GAAG,IAAI,CAQhB;AAED;;0CAE0C;AAC1C,wBAAgB,MAAM,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAE9E;AAED;oEACoE;AACpE,MAAM,WAAW,KAAK;IACpB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;oFACgF;IAChF,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CAClC;AAED;4CAC4C;AAC5C,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAkG1F;AAED;yDACyD;AACzD,MAAM,WAAW,OAAO;IACtB,4DAA4D;IAC5D,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACjE;AAED,iEAAiE;AACjE,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC,SAAI,GAAG,MAAM,CAOpE;AAED,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGjE;AAED,oEAAoE;AACpE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAIvE"}
+{"version":3,"file":"headless.d.ts","sourceRoot":"","sources":["../../../src/adapters/headless.ts"],"names":[],"mappings":"AASA,2DAA2D;AAC3D,eAAO,MAAM,cAAc,QAAc,CAAC;AAG1C;;0DAE0D;AAC1D,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AAE/C,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAQxC;AAED;;0FAE0F;AAC1F,wBAAgB,UAAU,CAAC,CAAC,EAAE;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,MAAM,GAAG,IAAI,CAQhB;AAED;;0CAE0C;AAC1C,wBAAgB,MAAM,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAE9E;AAED;oEACoE;AACpE,MAAM,WAAW,KAAK;IACpB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;oFACgF;IAChF,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CAClC;AAED;4CAC4C;AAC5C,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAkG1F;AAED;yDACyD;AACzD,MAAM,WAAW,OAAO;IACtB,4DAA4D;IAC5D,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACjE;AAED,iEAAiE;AACjE,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC,SAAI,GAAG,MAAM,CAOpE;AAED,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGjE;AAED,oEAAoE;AACpE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAIvE"}

package/dist/src/adapters/index.d.ts

@@ -6,6 +6,7 @@ import { geminiCli } from "./gemini-cli.js";
 import type { Adapter } from "./types.js";
 export declare const ADAPTERS: readonly Adapter[];
 export declare const adapterByName: (name: string) => Adapter | undefined;
+export * as acpControl from "./acp-control.js";
 export { AG_STALE_PRETOOL, antigravityAnswer } from "./antigravity.js";
 export * as antigravityControl from "./antigravity-control.js";
 export { claudeAccounts, claudeDirs, notClaudeCode } from "./claude-code.js";
@@ -13,8 +14,13 @@ export * as claudeControl from "./claude-code-control.js";
 export * as codexControl from "./codex-control.js";
 export { DEVIN_EVENTS, devinConfigDir, devinDataDir, readDevinChain } from "./devin.js";
 export { deniedNote, JOB_TIMEOUT_MS, jobEnv, type Login, type Reading, type RunOptions, type RunResult, runHeadless, } from "./headless.js";
+/** How many harnesses a pairing request or a hello lists at most (control-pair.json,
+ *  control-hello.json). */
+export declare const HELLO_HARNESSES_MAX = 20;
 /** The harnesses a control daemon here can drive headlessly (CONTROL.md §6): each whose
- *  CLI is installed on this machine. What `control pair` and every hello advertise. */
+ *  CLI is installed on this machine, and every ACP agent that is. What `control pair`
+ *  and every hello advertise: the three with their own drivers first, then the ACP
+ *  agents in the registry's order, at most HELLO_HARNESSES_MAX of them. */
 export declare function drivableHarnesses(env?: NodeJS.ProcessEnv): string[];
 export type { Adapter, AdapterEvent, BackfillRow, FactsState, HookCommand, HookInput, HookResult, InstallReport, SessionFacts, TranscriptRead, Turn, } from "./types.js";
 export { antigravity, claudeCode, codex, devin, geminiCli };

package/dist/src/adapters/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,eAAO,MAAM,QAAQ,EAAE,SAAS,OAAO,EAAuD,CAAC;AAC/F,eAAO,MAAM,aAAa,SAAU,MAAM,KAAG,OAAO,GAAG,SAAkD,CAAC;AAC1G,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,kBAAkB,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,KAAK,aAAa,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,EACL,UAAU,EACV,cAAc,EACd,MAAM,EACN,KAAK,KAAK,EACV,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,SAAS,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB;uFACuF;AACvF,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE,CAMhF;AACD,YAAY,EACV,OAAO,EACP,YAAY,EACZ,WAAW,EACX,UAAU,EACV,WAAW,EACX,SAAS,EACT,UAAU,EACV,aAAa,EACb,YAAY,EACZ,cAAc,EACd,IAAI,GACL,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,eAAO,MAAM,QAAQ,EAAE,SAAS,OAAO,EAAuD,CAAC;AAC/F,eAAO,MAAM,aAAa,SAAU,MAAM,KAAG,OAAO,GAAG,SAAkD,CAAC;AAC1G,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,KAAK,kBAAkB,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,KAAK,aAAa,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,EACL,UAAU,EACV,cAAc,EACd,MAAM,EACN,KAAK,KAAK,EACV,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,SAAS,EACd,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB;2BAC2B;AAC3B,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC;;;2EAG2E;AAC3E,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE,CAOhF;AACD,YAAY,EACV,OAAO,EACP,YAAY,EACZ,WAAW,EACX,UAAU,EACV,WAAW,EACX,SAAS,EACT,UAAU,EACV,aAAa,EACb,YAAY,EACZ,cAAc,EACd,IAAI,GACL,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC"}

package/dist/src/control/verify.d.ts

@@ -18,7 +18,7 @@ export declare const TEXT_MAX = 20000;
 export declare const NOTE_MAX = 2000;
 /** A grant string. */
 export declare const GRANT_STR_MAX = 2000;
-/** Attachments on a `start` (CONTROL.md §3.1): at most this many files, */
+/** Attachments on a `start` or a `prompt` (CONTROL.md §3.1): at most this many files, */
 export declare const FILES_MAX = 10;
 /** each at most this many bytes, */
 export declare const FILE_SIZE_MAX = 26214400;
@@ -28,6 +28,23 @@ export declare const FILES_TOTAL_MAX = 52428800;
 export declare const FILE_NAME_MAX = 200;
 /** and a media type of at most this many. */
 export declare const FILE_TYPE_MAX = 100;
+/** A start's `model` (CONTROL.md §3.1): at most this many characters, */
+export declare const MODEL_MAX = 100;
+/** in this alphabet, never starting with a dash, so it can never read as a flag. */
+export declare const MODEL_RE: RegExp;
+/** The levels a start may ask for (CONTROL.md §3.1), narrowest first. Closed: no level
+ *  is wider than `auto`, and none turns a harness's approval off. */
+export declare const START_PERMISSIONS: readonly ["read", "safe", "edits", "auto"];
+export type StartPermission = (typeof START_PERMISSIONS)[number];
+/** What a run is started with: a level, or `inherit` (CONTROL.md §2) — no permission
+ *  flag at all, so the harness starts in its own default on the machine. Only a machine
+ *  the person put in inherit mode runs that way; a command never names it. */
+export type RunLevel = StartPermission | "inherit";
+/** Where a level sits, narrowest (0) to widest; -1 for anything that isn't one. */
+export declare const levelRank: (l: unknown) => number;
+/** The narrower of two levels: what a later run of a session gets, its recorded level
+ *  against what the machine's mode allows now. */
+export declare const narrower: (a: StartPermission, b: StartPermission) => StartPermission;
 export declare const COMMAND_TYPE = "sessionpipe.control";
 export declare const GRANT_TYPE = "sessionpipe.grant";
 export declare const CONTROL_KINDS: readonly ["prompt", "permission.answer", "cancel", "start", "key.add"];
@@ -37,11 +54,21 @@ export type ControlKind = (typeof CONTROL_KINDS)[number];
 /** COSE algorithm ids a trusted key may use. */
 export declare const ES256 = -7;
 export declare const RS256 = -257;
-/** A key enrolled on the machine: a passkey's credential id, COSE alg and SPKI (base64url). */
+/** The kinds of key a machine may trust (CONTROL.md §2): a WebAuthn passkey, or a
+ *  device key an app holds in hardware where it has no passkey to offer. */
+export declare const KEY_TYPES: readonly ["passkey", "device"];
+export type KeyType = (typeof KEY_TYPES)[number];
+/** A key enrolled on the machine: a passkey's credential id, COSE alg and SPKI
+ *  (base64url); a device key also says so (`type`), and what its app declared about
+ *  it (`store`, `uv`). The machine verifies by its own record, never by a message. */
 export interface TrustedKey {
     id: string;
     alg: number;
     spki: string;
+    /** Present only on a device key (CONTROL.md §2 "Device keys"). */
+    type?: "device";
+    store?: "hardware";
+    uv?: "each-use";
 }
 /** A WebAuthn assertion: credential id, authenticatorData, clientDataJSON, signature (base64url). */
 export interface Assertion {
@@ -50,16 +77,25 @@ export interface Assertion {
     cd: string;
     sig: string;
 }
+/** A device key's signature (CONTROL.md §3.2): its id and 64 bytes r‖s over deviceMessage(). */
+export interface DeviceSignature {
+    cred: string;
+    sig: string;
+}
 /** The day's grant: a passkey's assertion over sha256(str), where str names the day key. */
 export interface GrantBundle extends Assertion {
     str: string;
 }
+/** The day's grant from a device key: its signature over deviceMessage("grant", rp, sha256(str)). */
+export interface DeviceGrant extends DeviceSignature {
+    str: string;
+}
 /** What a receiver carries for one command (control.json minus the receiver's envelope). */
 export interface SignedCommand {
     cmd: string;
     csig?: string | null;
-    grant?: GrantBundle | null;
-    confirm?: Assertion | null;
+    grant?: GrantBundle | DeviceGrant | null;
+    confirm?: Assertion | DeviceSignature | null;
 }
 export interface Grant {
     v: 1;
@@ -92,16 +128,17 @@ export interface ControlCommand {
     decision?: "allow" | "deny";
     note?: string;
     cwd?: string;
-    /** key.add only: the passkey to trust from now on, as the receiver holds it. */
-    key?: {
-        id: string;
-        alg: -7 | -257;
-        spki: string;
-    };
+    /** key.add only: the key to trust from now on, as the receiver holds it (a passkey,
+     *  or a device key with its `type`, `store` and `uv`). */
+    key?: TrustedKey;
     /** key.add only: what the person calls the device ("iPhone"), for `control keys`. */
     name?: string;
-    /** start only: files to download, verify and write into the new session's folder. */
+    /** start, prompt: files to download, verify and write into the session's folder. */
     files?: ControlFile[];
+    /** start only: the level the new session runs at (never above the machine's mode). */
+    permission?: StartPermission;
+    /** start only: the model the harness runs, as the harness names it. */
+    model?: string;
     nonce: string;
     iat: number;
 }
@@ -144,7 +181,14 @@ export declare function sameBytes(a: Uint8Array, b: Uint8Array): boolean;
  *  Strict: every length must match the bytes, so one signature has one encoding (a
  *  P-256 signature is at most 72 bytes, so the short length form is the only one). */
 export declare function derToRaw(der: Uint8Array): Uint8Array | null;
-/** Can this key be enrolled at all? A machine refuses to trust a key it could never verify with. */
+/** The only fields a device signature has (`str` only in a grant). */
+export declare const DEVICE_SIG_FIELDS: readonly ["cred", "sig", "str"];
+/** A device key's id: the SHA-256 of its SPKI bytes, base64url without padding. */
+export declare function deviceKeyId(spki: string): Promise<string>;
+/** Can this key be enrolled at all? A machine refuses to trust a key it could never
+ *  verify with. The key's fields are closed: a passkey is `id`, `alg`, `spki` and
+ *  nothing else; a device key adds exactly `type`, `store` and `uv` (CONTROL.md §2),
+ *  so a kind added later is refused by every machine that predates it. */
 export declare function keyUsable(key: TrustedKey): Promise<boolean>;
 /** A WebAuthn origin a key may have been used from: https on the rp id or a subdomain;
  *  for rp id `localhost`, plain http on any port too. A bare origin, as a browser writes it. */
@@ -155,8 +199,18 @@ type Check = {
     ok: false;
     why: string;
 };
-/** One passkey assertion over `challenge`, made with `key`, by a verified person. */
-export declare function verifyAssertion(challenge: Uint8Array, a: Assertion | null | undefined, key: TrustedKey, rpId: string): Promise<Check>;
+/** The first line of every message a device key signs. */
+export declare const DEVICE_CONTEXT = "sessionpipe.device.v1";
+/** What a device signature is for: one use can never answer for another. */
+export type DevicePurpose = "grant" | "confirm" | "pair";
+/** The exact bytes a device key signs: the context, the purpose, the rp id as the
+ *  machine recorded it, and the base64url (no padding) of the 32-byte challenge a
+ *  passkey would sign for that purpose, joined by single line feeds, none at the end. */
+export declare function deviceMessage(purpose: DevicePurpose, rpId: string, challenge: Uint8Array): Uint8Array;
+/** One signature over `challenge` by `key`, chosen from the machine's own record of
+ *  the key, never from the signature: a device key's signature for `purpose`
+ *  (CONTROL.md §3.2), or a passkey assertion made by a verified person. */
+export declare function verifyAssertion(challenge: Uint8Array, a: Assertion | DeviceSignature | null | undefined, key: TrustedKey, rpId: string, purpose: DevicePurpose): Promise<Check>;
 /** What a passkey signs to enroll on a machine: bound to that machine and that pairing code. */
 export declare function pairChallenge(machine: string, code: string): Promise<Uint8Array>;
 /** The enrollment proof: the new key's assertion over pairChallenge(machine, code).
@@ -165,7 +219,7 @@ export declare function verifyEnrollment(o: {
     machine: string;
     code: string;
     key: TrustedKey;
-    proof: Assertion;
+    proof: Assertion | DeviceSignature;
     rpId: string;
 }): Promise<Check>;
 type Parsed = {
@@ -185,8 +239,10 @@ export declare function parseSessionRef(ref: unknown): {
 } | null;
 /** Read the command's fields from the exact string. Structure only; no clock, no keys. */
 export declare function parseCommand(str: unknown): Parsed;
-/** Why a start's `files` breaks the rules (CONTROL.md §3.1), or null when it doesn't. */
+/** Why a start's or a prompt's `files` breaks the rules (CONTROL.md §3.1), or null when it doesn't. */
 export declare function filesProblem(files: unknown): string | null;
+/** A `start`'s `cwd` under the machine's home: `~` alone, or `~/…` (`~\…`). Never `~user`. */
+export declare const HOME_RELATIVE_RE: RegExp;
 /** The grant's fields, read from its exact string. */
 export declare function parseGrant(str: unknown, rpId: string): {
     ok: true;

package/dist/src/control/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../src/control/verify.ts"],"names":[],"mappings":"AAYA,mEAAmE;AACnE,eAAO,MAAM,YAAY,QAAgB,CAAC;AAC1C,4EAA4E;AAC5E,eAAO,MAAM,OAAO,QAAa,CAAC;AAClC;qEACqE;AACrE,eAAO,MAAM,kBAAkB,QAAgB,CAAC;AAChD;mCACmC;AACnC,eAAO,MAAM,mBAAmB,QAAc,CAAC;AAC/C,sFAAsF;AACtF,eAAO,MAAM,YAAY,QAAgB,CAAC;AAC1C,6EAA6E;AAC7E,eAAO,MAAM,OAAO,QAAS,CAAC;AAC9B,sCAAsC;AACtC,eAAO,MAAM,QAAQ,QAAS,CAAC;AAC/B,kCAAkC;AAClC,eAAO,MAAM,QAAQ,OAAQ,CAAC;AAC9B,sBAAsB;AACtB,eAAO,MAAM,aAAa,OAAQ,CAAC;AACnC,2EAA2E;AAC3E,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,oCAAoC;AACpC,eAAO,MAAM,aAAa,WAAa,CAAC;AACxC,kCAAkC;AAClC,eAAO,MAAM,eAAe,WAAa,CAAC;AAC1C,8DAA8D;AAC9D,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,6CAA6C;AAC7C,eAAO,MAAM,aAAa,MAAM,CAAC;AAEjC,eAAO,MAAM,YAAY,wBAAwB,CAAC;AAClD,eAAO,MAAM,UAAU,sBAAsB,CAAC;AAC9C,eAAO,MAAM,aAAa,YAAI,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAU,CAAC;AACpG,wFAAwF;AACxF,eAAO,MAAM,iBAAiB,qBAAqB,CAAC;AACpD,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,gDAAgD;AAChD,eAAO,MAAM,KAAK,KAAK,CAAC;AACxB,eAAO,MAAM,KAAK,OAAO,CAAC;AAE1B,+FAA+F;AAC/F,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;CACd;AACD,qGAAqG;AACrG,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACb;AACD,4FAA4F;AAC5F,MAAM,WAAW,WAAY,SAAQ,SAAS;IAC5C,GAAG,EAAE,MAAM,CAAC;CACb;AACD,4FAA4F;AAC5F,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAC5B;AACD,MAAM,WAAW,KAAK;IACpB,CAAC,EAAE,CAAC,CAAC;IACL,CAAC,EAAE,OAAO,UAAU,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;CACZ;AACD,2FAA2F;AAC3F,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,aAAa;IACb,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,cAAc;IAC7B,CAAC,EAAE,CAAC,CAAC;IACL,CAAC,EAAE,OAAO,YAAY,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,WAAW,CAAC;IAClB,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,GAAG,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,kFAAkF;AAClF,MAAM,MAAM,WAAW,GACnB,WAAW,GACX,eAAe,GACf,eAAe,GACf,cAAc,GACd,aAAa,GACb,YAAY,GACZ,WAAW,GACX,SAAS,GACT,QAAQ,GACR,UAAU,GACV,eAAe,GACf,eAAe,GACf,WAAW,GACX,eAAe,GACf,UAAU,GACV,QAAQ,GACR,aAAa,CAAC;AAElB,MAAM,MAAM,OAAO,GACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,OAAO,GAAG,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACxE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,mGAAmG;IACnG,IAAI,EAAE,MAAM,CAAC;IACb,2FAA2F;IAC3F,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,gBAAgB;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;8DAG0D;IAC1D,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAoBD,wBAAgB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,MAAM,CAK9D;AAED,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI,CAUxD;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAG3E;AASD,mEAAmE;AACnE,wBAAgB,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAK/D;AAED;;sFAEsF;AACtF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAsB3D;AAuBD,oGAAoG;AACpG,wBAAsB,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAQjE;AAID;gGACgG;AAChG,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAYpE;AAED,KAAK,KAAK,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAGvD,qFAAqF;AACrF,wBAAsB,eAAe,CACnC,SAAS,EAAE,UAAU,EACrB,CAAC,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,EAC/B,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,KAAK,CAAC,CAqChB;AAED,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAEhF;AAED;+EAC+E;AAC/E,wBAAsB,gBAAgB,CAAC,CAAC,EAAE;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;IAChB,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,KAAK,CAAC,CAGjB;AAID,KAAK,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,cAAc,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAQhG,gFAAgF;AAChF,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAIhE;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAOpF;AAED,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAyEjD;AAED,yFAAyF;AACzF,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAsB1D;AAgBD,sDAAsD;AACtD,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAiB9G;AAgBD;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAAC,CAAC,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CA4C3G"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../src/control/verify.ts"],"names":[],"mappings":"AAYA,mEAAmE;AACnE,eAAO,MAAM,YAAY,QAAgB,CAAC;AAC1C,4EAA4E;AAC5E,eAAO,MAAM,OAAO,QAAa,CAAC;AAClC;qEACqE;AACrE,eAAO,MAAM,kBAAkB,QAAgB,CAAC;AAChD;mCACmC;AACnC,eAAO,MAAM,mBAAmB,QAAc,CAAC;AAC/C,sFAAsF;AACtF,eAAO,MAAM,YAAY,QAAgB,CAAC;AAC1C,6EAA6E;AAC7E,eAAO,MAAM,OAAO,QAAS,CAAC;AAC9B,sCAAsC;AACtC,eAAO,MAAM,QAAQ,QAAS,CAAC;AAC/B,kCAAkC;AAClC,eAAO,MAAM,QAAQ,OAAQ,CAAC;AAC9B,sBAAsB;AACtB,eAAO,MAAM,aAAa,OAAQ,CAAC;AACnC,yFAAyF;AACzF,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,oCAAoC;AACpC,eAAO,MAAM,aAAa,WAAa,CAAC;AACxC,kCAAkC;AAClC,eAAO,MAAM,eAAe,WAAa,CAAC;AAC1C,8DAA8D;AAC9D,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,6CAA6C;AAC7C,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,yEAAyE;AACzE,eAAO,MAAM,SAAS,MAAM,CAAC;AAC7B,oFAAoF;AACpF,eAAO,MAAM,QAAQ,QAAuC,CAAC;AAC7D;qEACqE;AACrE,eAAO,MAAM,iBAAiB,YAAI,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAU,CAAC;AAC5E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AACjE;;8EAE8E;AAC9E,MAAM,MAAM,QAAQ,GAAG,eAAe,GAAG,SAAS,CAAC;AAEnD,mFAAmF;AACnF,eAAO,MAAM,SAAS,MAAO,OAAO,KAAG,MAAyD,CAAC;AACjG;kDACkD;AAClD,eAAO,MAAM,QAAQ,MAAO,eAAe,KAAK,eAAe,KAAG,eAC5B,CAAC;AAEvC,eAAO,MAAM,YAAY,wBAAwB,CAAC;AAClD,eAAO,MAAM,UAAU,sBAAsB,CAAC;AAC9C,eAAO,MAAM,aAAa,YAAI,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAU,CAAC;AACpG,wFAAwF;AACxF,eAAO,MAAM,iBAAiB,qBAAqB,CAAC;AACpD,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,gDAAgD;AAChD,eAAO,MAAM,KAAK,KAAK,CAAC;AACxB,eAAO,MAAM,KAAK,OAAO,CAAC;AAE1B;4EAC4E;AAC5E,eAAO,MAAM,SAAS,YAAI,SAAS,EAAE,QAAQ,CAAU,CAAC;AACxD,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD;;sFAEsF;AACtF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,EAAE,CAAC,EAAE,UAAU,CAAC;CACjB;AACD,qGAAqG;AACrG,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACb;AACD,gGAAgG;AAChG,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AACD,4FAA4F;AAC5F,MAAM,WAAW,WAAY,SAAQ,SAAS;IAC5C,GAAG,EAAE,MAAM,CAAC;CACb;AACD,qGAAqG;AACrG,MAAM,WAAW,WAAY,SAAQ,eAAe;IAClD,GAAG,EAAE,MAAM,CAAC;CACb;AACD,4FAA4F;AAC5F,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,CAAC;IACzC,OAAO,CAAC,EAAE,SAAS,GAAG,eAAe,GAAG,IAAI,CAAC;CAC9C;AACD,MAAM,WAAW,KAAK;IACpB,CAAC,EAAE,CAAC,CAAC;IACL,CAAC,EAAE,OAAO,UAAU,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;CACZ;AACD,2FAA2F;AAC3F,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,aAAa;IACb,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,cAAc;IAC7B,CAAC,EAAE,CAAC,CAAC;IACL,CAAC,EAAE,OAAO,YAAY,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,WAAW,CAAC;IAClB,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;8DAC0D;IAC1D,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,qFAAqF;IACrF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oFAAoF;IACpF,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,sFAAsF;IACtF,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,kFAAkF;AAClF,MAAM,MAAM,WAAW,GACnB,WAAW,GACX,eAAe,GACf,eAAe,GACf,cAAc,GACd,aAAa,GACb,YAAY,GACZ,WAAW,GACX,SAAS,GACT,QAAQ,GACR,UAAU,GACV,eAAe,GACf,eAAe,GACf,WAAW,GACX,eAAe,GACf,UAAU,GACV,QAAQ,GACR,aAAa,CAAC;AAElB,MAAM,MAAM,OAAO,GACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,OAAO,GAAG,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACxE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD,MAAM,WAAW,aAAa;IAC5B,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,mGAAmG;IACnG,IAAI,EAAE,MAAM,CAAC;IACb,2FAA2F;IAC3F,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,gBAAgB;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;8DAG0D;IAC1D,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3D;AAgCD,wBAAgB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,MAAM,CAK9D;AAED,mEAAmE;AACnE,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI,CAUxD;AAED,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAG3E;AASD,mEAAmE;AACnE,wBAAgB,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAK/D;AAED;;sFAEsF;AACtF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAsB3D;AAyBD,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,YAAI,MAAM,EAAE,KAAK,EAAE,KAAK,CAAU,CAAC;AAEjE,mFAAmF;AACnF,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE/D;AAWD;;;0EAG0E;AAC1E,wBAAsB,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAcjE;AAID;gGACgG;AAChG,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAYpE;AAED,KAAK,KAAK,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAKvD,0DAA0D;AAC1D,eAAO,MAAM,cAAc,0BAA0B,CAAC;AACtD,4EAA4E;AAC5E,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAEzD;;yFAEyF;AACzF,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,UAAU,CAErG;AAqCD;;2EAE2E;AAC3E,wBAAsB,eAAe,CACnC,SAAS,EAAE,UAAU,EACrB,CAAC,EAAE,SAAS,GAAG,eAAe,GAAG,IAAI,GAAG,SAAS,EACjD,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,KAAK,CAAC,CAOhB;AA6CD,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAEhF;AAED;+EAC+E;AAC/E,wBAAsB,gBAAgB,CAAC,CAAC,EAAE;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;IAChB,KAAK,EAAE,SAAS,GAAG,eAAe,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,KAAK,CAAC,CAGjB;AAID,KAAK,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,cAAc,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAQhG,gFAAgF;AAChF,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAIhE;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAOpF;AAED,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAmGjD;AAED,uGAAuG;AACvG,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAsB1D;AAYD,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,QAAkB,CAAC;AAMhD,sDAAsD;AACtD,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAiB9G;AAgBD;;;;;;;GAOG;AACH,wBAAsB,aAAa,CAAC,CAAC,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAgD3G"}

package/dist/src/index.d.ts

@@ -3,8 +3,9 @@ export declare const PROTOCOL_VERSION: 1;
 export * from "./adapters/index.js";
 export { type Config, DEFAULT_CONFIG, machineName, readConfig, type SinkConfig, writeConfig } from "./config.js";
 export { type EventContext, makeEvent } from "./events.js";
+export { LAUNCHED_BY_ENV, launchedBy, readHook } from "./launched-by.js";
 export { Cursors, Outbox, type OutboxRef, processAlive, takeLock, takeNamedLock } from "./outbox.js";
-export { configFile, homeDir, safeId, stateDir, tilde } from "./paths.js";
+export { configFile, homeDir, safeId, stateDir, tilde, untilde } from "./paths.js";
 export * from "./privacy/index.js";
 export { gitFacts, stripCredentials } from "./readers/git.js";
 export { isInjected, pairTurns, readAntigravity, readClaude, readCodex, readGemini } from "./readers/transcripts.js";

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,uGAAuG;AACvG,eAAO,MAAM,gBAAgB,EAAG,CAAU,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,KAAK,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACjH,OAAO,EAAE,KAAK,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAC1E,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACrH,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,mBAAmB,YAAY,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,uGAAuG;AACvG,eAAO,MAAM,gBAAgB,EAAG,CAAU,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,KAAK,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACjH,OAAO,EAAE,KAAK,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACnF,cAAc,oBAAoB,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACrH,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,mBAAmB,YAAY,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC"}