sessionpipe-core 0.9.0 → 0.11.0

package/dist/service.js

@@ -0,0 +1,155 @@
+// sessionpipe-core 0.11.0 · Apache-2.0 · https://sessionpipe.org
+
+// src/service/index.ts
+import { execFileSync } from "node:child_process";
+import { existsSync, mkdirSync, unlinkSync, writeFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+var execQuiet = (cmd, args) => execFileSync(cmd, args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 15e3 });
+var xml = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+var sd = (s) => `"${s.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/%/g, "%%")}"`;
+function serviceFiles(s) {
+  const home = s.home ?? os.homedir();
+  const env = (manager) => ({ SESSIONPIPE_SERVICE: manager, ...s.env });
+  const plistEnv = Object.entries(env("launchd")).map(([k, v]) => `<key>${xml(k)}</key><string>${xml(v)}</string>`).join("");
+  const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${xml(s.label)}</string>
+  <key>ProgramArguments</key>
+  <array>${s.argv.map((a) => `<string>${xml(a)}</string>`).join("")}</array>
+  <key>EnvironmentVariables</key><dict>${plistEnv}</dict>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><dict><key>SuccessfulExit</key><false/></dict>
+  <key>ProcessType</key><string>Background</string>
+  <key>StandardOutPath</key><string>${xml(s.logPath)}</string>
+  <key>StandardErrorPath</key><string>${xml(s.logPath)}</string>
+</dict>
+</plist>
+`;
+  const unitEnv = Object.entries(env("systemd")).map(([k, v]) => `Environment=${k === "SESSIONPIPE_SERVICE" ? `${k}=${v}` : sd(`${k}=${v}`)}`).join("\n");
+  const unit = `[Unit]
+Description=${s.description.replace(/\n/g, " ")}
+After=network-online.target
+
+[Service]
+ExecStart=${s.argv.map(sd).join(" ")}
+${unitEnv}
+Restart=on-failure
+RestartForceExitStatus=75
+RestartSec=5
+
+[Install]
+WantedBy=default.target
+`;
+  return {
+    plist: { path: path.join(home, "Library", "LaunchAgents", `${s.label}.plist`), text: plist },
+    unit: { path: path.join(home, ".config", "systemd", "user", s.unit), text: unit }
+  };
+}
+function ensureLinger(user, exec = execQuiet) {
+  const lingering = () => {
+    try {
+      return /^Linger=yes/m.test(exec("loginctl", ["show-user", user, "--property=Linger"]));
+    } catch {
+      return false;
+    }
+  };
+  if (lingering()) return { on: true, note: "it keeps running after you log out (linger was already on)" };
+  try {
+    exec("loginctl", ["enable-linger", user]);
+  } catch {
+  }
+  if (lingering()) return { on: true, note: "it keeps running after you log out (turned linger on)" };
+  return {
+    on: false,
+    note: `it stops when you log out: run \`sudo loginctl enable-linger ${user}\` once to keep it running`
+  };
+}
+var line = (cmd, args) => [cmd, ...args].join(" ");
+function installService(o) {
+  const f = serviceFiles(o);
+  const platform = o.platform ?? process.platform;
+  const uid = o.uid ?? String(process.getuid?.() ?? "");
+  const commands = [];
+  const real = o.exec ?? execQuiet;
+  const run = (cmd, args) => {
+    commands.push(line(cmd, args));
+    return o.dryRun ? "" : real(cmd, args);
+  };
+  const write = (file) => {
+    if (o.dryRun) return;
+    mkdirSync(path.dirname(file.path), { recursive: true });
+    writeFileSync(file.path, file.text);
+  };
+  if (platform === "darwin") {
+    write(f.plist);
+    for (const d of ["gui", "user"])
+      try {
+        run("launchctl", ["bootout", `${d}/${uid}/${o.label}`]);
+      } catch {
+      }
+    try {
+      run("launchctl", ["bootstrap", `gui/${uid}`, f.plist.path]);
+      return { files: [f.plist], commands, manager: "launchd", domain: "gui" };
+    } catch {
+    }
+    run("launchctl", ["bootstrap", `user/${uid}`, f.plist.path]);
+    return { files: [f.plist], commands, manager: "launchd", domain: "user" };
+  }
+  if (platform === "linux") {
+    write(f.unit);
+    try {
+      run("systemctl", ["--user", "daemon-reload"]);
+      run("systemctl", ["--user", "enable", "--now", o.unit]);
+    } catch {
+      return { files: [f.unit], commands, manager: null, unreachable: f.unit.path };
+    }
+    const user = o.user ?? os.userInfo().username;
+    if (o.dryRun) {
+      commands.push(line("loginctl", ["enable-linger", user]));
+      return { files: [f.unit], commands, manager: "systemd", linger: { on: false, note: "dry run" } };
+    }
+    return { files: [f.unit], commands, manager: "systemd", linger: ensureLinger(user, run) };
+  }
+  return { files: [], commands, manager: null };
+}
+function uninstallService(o) {
+  const f = serviceFiles({ ...o, description: "", argv: [], logPath: "" });
+  const platform = o.platform ?? process.platform;
+  const uid = o.uid ?? String(process.getuid?.() ?? "");
+  const commands = [];
+  const files = [];
+  const real = o.exec ?? execQuiet;
+  const run = (cmd, args) => {
+    commands.push(line(cmd, args));
+    if (o.dryRun) return;
+    try {
+      real(cmd, args);
+    } catch {
+    }
+  };
+  const remove = (file) => {
+    files.push(file);
+    if (!o.dryRun) unlinkSync(file);
+  };
+  if (platform === "darwin" && existsSync(f.plist.path)) {
+    run("launchctl", ["bootout", `gui/${uid}/${o.label}`]);
+    run("launchctl", ["bootout", `user/${uid}/${o.label}`]);
+    remove(f.plist.path);
+  }
+  if (platform === "linux" && existsSync(f.unit.path)) {
+    run("systemctl", ["--user", "disable", "--now", o.unit]);
+    remove(f.unit.path);
+    run("systemctl", ["--user", "daemon-reload"]);
+  }
+  return { files, commands };
+}
+export {
+  ensureLinger,
+  installService,
+  serviceFiles,
+  uninstallService
+};
+//# sourceMappingURL=service.js.map

package/dist/service.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/service/index.ts"],
+  "sourcesContent": ["// SPDX-License-Identifier: Apache-2.0\n/** sessionpipe-core/service \u2014 a per-user background service for a sessionpipe process:\n *  a launchd agent on macOS, a systemd user unit on Linux. The control daemon runs\n *  under it (`org.sessionpipe.control`), and so can a receiver of the person's own (a\n *  board on their machine), with the same files and the same commands. Node only: it\n *  writes files and runs launchctl, systemctl and loginctl, so it is never part of the\n *  root export, which stays Worker- and browser-safe.\n *\n *  Both files restart the process when it exits non-zero, and when it exits\n *  UPDATE_EXIT (75, sessionpipe-core/version) to come back on new code. The process is\n *  told which manager that is in SESSIONPIPE_SERVICE (`launchd`, `systemd`). Nothing\n *  here needs root, and a dry run touches nothing: it answers the files it would write\n *  and the commands it would run. */\nimport { execFileSync } from \"node:child_process\";\nimport { existsSync, mkdirSync, unlinkSync, writeFileSync } from \"node:fs\";\nimport os from \"node:os\";\nimport path from \"node:path\";\n\n/** One service, as both managers need it. */\nexport interface ServiceSpec {\n  /** The launchd label, also the plist's name: `org.sessionpipe.control`. */\n  label: string;\n  /** The systemd user unit's file name: `sessionpipe-control.service`. */\n  unit: string;\n  /** The unit's Description line. */\n  description: string;\n  /** The program and its arguments, each one argument (never through a shell). */\n  argv: string[];\n  /** More environment for the process, beside SESSIONPIPE_SERVICE. */\n  env?: Record<string, string>;\n  /** Where launchd writes its stdout and stderr (journald keeps a unit's). */\n  logPath: string;\n  /** The home the files go under; the user's own by default. */\n  home?: string;\n}\n\n/** A file the service writes, and what is in it. */\nexport interface ServiceFile {\n  path: string;\n  text: string;\n}\n\n/** Runs one command and answers its stdout; throws when it fails. */\nexport type Exec = (cmd: string, args: string[]) => string;\n\nconst execQuiet: Exec = (cmd, args) =>\n  execFileSync(cmd, args, { encoding: \"utf8\", stdio: [\"ignore\", \"pipe\", \"ignore\"], timeout: 15_000 });\n\nconst xml = (s: string) => s.replace(/&/g, \"&amp;\").replace(/</g, \"&lt;\").replace(/>/g, \"&gt;\");\n/** One systemd argument, quoted: backslashes and quotes escaped, `%` doubled (a specifier otherwise). */\nconst sd = (s: string) => `\"${s.replace(/\\\\/g, \"\\\\\\\\\").replace(/\"/g, '\\\\\"').replace(/%/g, \"%%\")}\"`;\n\n/** The plist and the unit for a service, and where each goes. */\nexport function serviceFiles(s: ServiceSpec): { plist: ServiceFile; unit: ServiceFile } {\n  const home = s.home ?? os.homedir();\n  const env = (manager: string) => ({ SESSIONPIPE_SERVICE: manager, ...s.env });\n  const plistEnv = Object.entries(env(\"launchd\"))\n    .map(([k, v]) => `<key>${xml(k)}</key><string>${xml(v)}</string>`)\n    .join(\"\");\n  const plist = `<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n  <key>Label</key><string>${xml(s.label)}</string>\n  <key>ProgramArguments</key>\n  <array>${s.argv.map((a) => `<string>${xml(a)}</string>`).join(\"\")}</array>\n  <key>EnvironmentVariables</key><dict>${plistEnv}</dict>\n  <key>RunAtLoad</key><true/>\n  <key>KeepAlive</key><dict><key>SuccessfulExit</key><false/></dict>\n  <key>ProcessType</key><string>Background</string>\n  <key>StandardOutPath</key><string>${xml(s.logPath)}</string>\n  <key>StandardErrorPath</key><string>${xml(s.logPath)}</string>\n</dict>\n</plist>\n`;\n  const unitEnv = Object.entries(env(\"systemd\"))\n    .map(([k, v]) => `Environment=${k === \"SESSIONPIPE_SERVICE\" ? `${k}=${v}` : sd(`${k}=${v}`)}`)\n    .join(\"\\n\");\n  const unit = `[Unit]\nDescription=${s.description.replace(/\\n/g, \" \")}\nAfter=network-online.target\n\n[Service]\nExecStart=${s.argv.map(sd).join(\" \")}\n${unitEnv}\nRestart=on-failure\nRestartForceExitStatus=75\nRestartSec=5\n\n[Install]\nWantedBy=default.target\n`;\n  return {\n    plist: { path: path.join(home, \"Library\", \"LaunchAgents\", `${s.label}.plist`), text: plist },\n    unit: { path: path.join(home, \".config\", \"systemd\", \"user\", s.unit), text: unit },\n  };\n}\n\n/** A systemd user service stops when its person's last login ends \u2014 closing the ssh\n *  session to a lab workstation or a cloud machine stopped the daemon with it \u2014 unless\n *  the user lingers. `loginctl enable-linger` for yourself needs no root on systemd's\n *  default policy; where it does, say the one command that does it. */\nexport function ensureLinger(user: string, exec: Exec = execQuiet): { on: boolean; note: string } {\n  const lingering = () => {\n    try {\n      return /^Linger=yes/m.test(exec(\"loginctl\", [\"show-user\", user, \"--property=Linger\"]));\n    } catch {\n      return false;\n    }\n  };\n  if (lingering()) return { on: true, note: \"it keeps running after you log out (linger was already on)\" };\n  try {\n    exec(\"loginctl\", [\"enable-linger\", user]);\n  } catch {}\n  if (lingering()) return { on: true, note: \"it keeps running after you log out (turned linger on)\" };\n  return {\n    on: false,\n    note: `it stops when you log out: run \\`sudo loginctl enable-linger ${user}\\` once to keep it running`,\n  };\n}\n\n/** What an install did, or would do in a dry run. */\nexport interface ServicePlan {\n  /** The files written (or that would be). */\n  files: ServiceFile[];\n  /** The commands run (or that would be), one string each, in order. */\n  commands: string[];\n  /** Which manager runs it now: null on a platform with none, or where it isn't reachable. */\n  manager: \"launchd\" | \"systemd\" | null;\n  /** launchd: `gui` when someone is at the screen, else `user` (it starts again at the next login there). */\n  domain?: \"gui\" | \"user\";\n  /** systemd: whether it outlives the login, in words. */\n  linger?: { on: boolean; note: string };\n  /** The file that was written for a manager that couldn't be reached. */\n  unreachable?: string;\n}\n\nexport interface InstallOptions extends ServiceSpec {\n  /** Answer the plan and touch nothing. */\n  dryRun?: boolean;\n  exec?: Exec;\n  platform?: NodeJS.Platform;\n  /** The user's id (launchd's domains) and name (linger); this process's by default. */\n  uid?: string;\n  user?: string;\n}\n\nconst line = (cmd: string, args: string[]) => [cmd, ...args].join(\" \");\n\n/** Write the service for this platform and start it now; a service already there is\n *  replaced (launchd: booted out first). */\nexport function installService(o: InstallOptions): ServicePlan {\n  const f = serviceFiles(o);\n  const platform = o.platform ?? process.platform;\n  const uid = o.uid ?? String(process.getuid?.() ?? \"\");\n  const commands: string[] = [];\n  const real = o.exec ?? execQuiet;\n  const run: Exec = (cmd, args) => {\n    commands.push(line(cmd, args));\n    return o.dryRun ? \"\" : real(cmd, args);\n  };\n  const write = (file: ServiceFile) => {\n    if (o.dryRun) return;\n    mkdirSync(path.dirname(file.path), { recursive: true });\n    writeFileSync(file.path, file.text);\n  };\n  if (platform === \"darwin\") {\n    write(f.plist);\n    for (const d of [\"gui\", \"user\"])\n      try {\n        run(\"launchctl\", [\"bootout\", `${d}/${uid}/${o.label}`]);\n      } catch {}\n    try {\n      run(\"launchctl\", [\"bootstrap\", `gui/${uid}`, f.plist.path]);\n      return { files: [f.plist], commands, manager: \"launchd\", domain: \"gui\" };\n    } catch {}\n    // No one logged in at the screen (an ssh session to a Mac mini): the gui domain\n    // doesn't exist. The user domain runs it now; after a restart it starts again at\n    // the next login at the screen.\n    run(\"launchctl\", [\"bootstrap\", `user/${uid}`, f.plist.path]);\n    return { files: [f.plist], commands, manager: \"launchd\", domain: \"user\" };\n  }\n  if (platform === \"linux\") {\n    write(f.unit);\n    try {\n      run(\"systemctl\", [\"--user\", \"daemon-reload\"]);\n      run(\"systemctl\", [\"--user\", \"enable\", \"--now\", o.unit]);\n    } catch {\n      return { files: [f.unit], commands, manager: null, unreachable: f.unit.path };\n    }\n    const user = o.user ?? os.userInfo().username;\n    if (o.dryRun) {\n      commands.push(line(\"loginctl\", [\"enable-linger\", user]));\n      return { files: [f.unit], commands, manager: \"systemd\", linger: { on: false, note: \"dry run\" } };\n    }\n    return { files: [f.unit], commands, manager: \"systemd\", linger: ensureLinger(user, run) };\n  }\n  return { files: [], commands, manager: null };\n}\n\nexport interface UninstallOptions {\n  label: string;\n  unit: string;\n  home?: string;\n  dryRun?: boolean;\n  exec?: Exec;\n  platform?: NodeJS.Platform;\n  uid?: string;\n}\n\n/** Stop the service and remove its file, where this platform has one; nothing where\n *  there is none. A manager that says it wasn't loaded is no failure. */\nexport function uninstallService(o: UninstallOptions): { files: string[]; commands: string[] } {\n  const f = serviceFiles({ ...o, description: \"\", argv: [], logPath: \"\" });\n  const platform = o.platform ?? process.platform;\n  const uid = o.uid ?? String(process.getuid?.() ?? \"\");\n  const commands: string[] = [];\n  const files: string[] = [];\n  const real = o.exec ?? execQuiet;\n  const run = (cmd: string, args: string[]) => {\n    commands.push(line(cmd, args));\n    if (o.dryRun) return;\n    try {\n      real(cmd, args);\n    } catch {}\n  };\n  const remove = (file: string) => {\n    files.push(file);\n    if (!o.dryRun) unlinkSync(file);\n  };\n  if (platform === \"darwin\" && existsSync(f.plist.path)) {\n    run(\"launchctl\", [\"bootout\", `gui/${uid}/${o.label}`]);\n    run(\"launchctl\", [\"bootout\", `user/${uid}/${o.label}`]);\n    remove(f.plist.path);\n  }\n  if (platform === \"linux\" && existsSync(f.unit.path)) {\n    run(\"systemctl\", [\"--user\", \"disable\", \"--now\", o.unit]);\n    remove(f.unit.path);\n    run(\"systemctl\", [\"--user\", \"daemon-reload\"]);\n  }\n  return { files, commands };\n}\n"],
+  "mappings": ";;;AAaA,SAAS,oBAAoB;AAC7B,SAAS,YAAY,WAAW,YAAY,qBAAqB;AACjE,OAAO,QAAQ;AACf,OAAO,UAAU;AA6BjB,IAAM,YAAkB,CAAC,KAAK,SAC5B,aAAa,KAAK,MAAM,EAAE,UAAU,QAAQ,OAAO,CAAC,UAAU,QAAQ,QAAQ,GAAG,SAAS,KAAO,CAAC;AAEpG,IAAM,MAAM,CAAC,MAAc,EAAE,QAAQ,MAAM,OAAO,EAAE,QAAQ,MAAM,MAAM,EAAE,QAAQ,MAAM,MAAM;AAE9F,IAAM,KAAK,CAAC,MAAc,IAAI,EAAE,QAAQ,OAAO,MAAM,EAAE,QAAQ,MAAM,KAAK,EAAE,QAAQ,MAAM,IAAI,CAAC;AAGxF,SAAS,aAAa,GAA2D;AACtF,QAAM,OAAO,EAAE,QAAQ,GAAG,QAAQ;AAClC,QAAM,MAAM,CAAC,aAAqB,EAAE,qBAAqB,SAAS,GAAG,EAAE,IAAI;AAC3E,QAAM,WAAW,OAAO,QAAQ,IAAI,SAAS,CAAC,EAC3C,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,QAAQ,IAAI,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,WAAW,EAChE,KAAK,EAAE;AACV,QAAM,QAAQ;AAAA;AAAA;AAAA;AAAA,4BAIY,IAAI,EAAE,KAAK,CAAC;AAAA;AAAA,WAE7B,EAAE,KAAK,IAAI,CAAC,MAAM,WAAW,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;AAAA,yCAC1B,QAAQ;AAAA;AAAA;AAAA;AAAA,sCAIX,IAAI,EAAE,OAAO,CAAC;AAAA,wCACZ,IAAI,EAAE,OAAO,CAAC;AAAA;AAAA;AAAA;AAIpD,QAAM,UAAU,OAAO,QAAQ,IAAI,SAAS,CAAC,EAC1C,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,eAAe,MAAM,wBAAwB,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAC5F,KAAK,IAAI;AACZ,QAAM,OAAO;AAAA,cACD,EAAE,YAAY,QAAQ,OAAO,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA,YAInC,EAAE,KAAK,IAAI,EAAE,EAAE,KAAK,GAAG,CAAC;AAAA,EAClC,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQP,SAAO;AAAA,IACL,OAAO,EAAE,MAAM,KAAK,KAAK,MAAM,WAAW,gBAAgB,GAAG,EAAE,KAAK,QAAQ,GAAG,MAAM,MAAM;AAAA,IAC3F,MAAM,EAAE,MAAM,KAAK,KAAK,MAAM,WAAW,WAAW,QAAQ,EAAE,IAAI,GAAG,MAAM,KAAK;AAAA,EAClF;AACF;AAMO,SAAS,aAAa,MAAc,OAAa,WAA0C;AAChG,QAAM,YAAY,MAAM;AACtB,QAAI;AACF,aAAO,eAAe,KAAK,KAAK,YAAY,CAAC,aAAa,MAAM,mBAAmB,CAAC,CAAC;AAAA,IACvF,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,MAAI,UAAU,EAAG,QAAO,EAAE,IAAI,MAAM,MAAM,6DAA6D;AACvG,MAAI;AACF,SAAK,YAAY,CAAC,iBAAiB,IAAI,CAAC;AAAA,EAC1C,QAAQ;AAAA,EAAC;AACT,MAAI,UAAU,EAAG,QAAO,EAAE,IAAI,MAAM,MAAM,wDAAwD;AAClG,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,MAAM,gEAAgE,IAAI;AAAA,EAC5E;AACF;AA4BA,IAAM,OAAO,CAAC,KAAa,SAAmB,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;AAI9D,SAAS,eAAe,GAAgC;AAC7D,QAAM,IAAI,aAAa,CAAC;AACxB,QAAM,WAAW,EAAE,YAAY,QAAQ;AACvC,QAAM,MAAM,EAAE,OAAO,OAAO,QAAQ,SAAS,KAAK,EAAE;AACpD,QAAM,WAAqB,CAAC;AAC5B,QAAM,OAAO,EAAE,QAAQ;AACvB,QAAM,MAAY,CAAC,KAAK,SAAS;AAC/B,aAAS,KAAK,KAAK,KAAK,IAAI,CAAC;AAC7B,WAAO,EAAE,SAAS,KAAK,KAAK,KAAK,IAAI;AAAA,EACvC;AACA,QAAM,QAAQ,CAAC,SAAsB;AACnC,QAAI,EAAE,OAAQ;AACd,cAAU,KAAK,QAAQ,KAAK,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AACtD,kBAAc,KAAK,MAAM,KAAK,IAAI;AAAA,EACpC;AACA,MAAI,aAAa,UAAU;AACzB,UAAM,EAAE,KAAK;AACb,eAAW,KAAK,CAAC,OAAO,MAAM;AAC5B,UAAI;AACF,YAAI,aAAa,CAAC,WAAW,GAAG,CAAC,IAAI,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;AAAA,MACxD,QAAQ;AAAA,MAAC;AACX,QAAI;AACF,UAAI,aAAa,CAAC,aAAa,OAAO,GAAG,IAAI,EAAE,MAAM,IAAI,CAAC;AAC1D,aAAO,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,UAAU,SAAS,WAAW,QAAQ,MAAM;AAAA,IACzE,QAAQ;AAAA,IAAC;AAIT,QAAI,aAAa,CAAC,aAAa,QAAQ,GAAG,IAAI,EAAE,MAAM,IAAI,CAAC;AAC3D,WAAO,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,UAAU,SAAS,WAAW,QAAQ,OAAO;AAAA,EAC1E;AACA,MAAI,aAAa,SAAS;AACxB,UAAM,EAAE,IAAI;AACZ,QAAI;AACF,UAAI,aAAa,CAAC,UAAU,eAAe,CAAC;AAC5C,UAAI,aAAa,CAAC,UAAU,UAAU,SAAS,EAAE,IAAI,CAAC;AAAA,IACxD,QAAQ;AACN,aAAO,EAAE,OAAO,CAAC,EAAE,IAAI,GAAG,UAAU,SAAS,MAAM,aAAa,EAAE,KAAK,KAAK;AAAA,IAC9E;AACA,UAAM,OAAO,EAAE,QAAQ,GAAG,SAAS,EAAE;AACrC,QAAI,EAAE,QAAQ;AACZ,eAAS,KAAK,KAAK,YAAY,CAAC,iBAAiB,IAAI,CAAC,CAAC;AACvD,aAAO,EAAE,OAAO,CAAC,EAAE,IAAI,GAAG,UAAU,SAAS,WAAW,QAAQ,EAAE,IAAI,OAAO,MAAM,UAAU,EAAE;AAAA,IACjG;AACA,WAAO,EAAE,OAAO,CAAC,EAAE,IAAI,GAAG,UAAU,SAAS,WAAW,QAAQ,aAAa,MAAM,GAAG,EAAE;AAAA,EAC1F;AACA,SAAO,EAAE,OAAO,CAAC,GAAG,UAAU,SAAS,KAAK;AAC9C;AAcO,SAAS,iBAAiB,GAA8D;AAC7F,QAAM,IAAI,aAAa,EAAE,GAAG,GAAG,aAAa,IAAI,MAAM,CAAC,GAAG,SAAS,GAAG,CAAC;AACvE,QAAM,WAAW,EAAE,YAAY,QAAQ;AACvC,QAAM,MAAM,EAAE,OAAO,OAAO,QAAQ,SAAS,KAAK,EAAE;AACpD,QAAM,WAAqB,CAAC;AAC5B,QAAM,QAAkB,CAAC;AACzB,QAAM,OAAO,EAAE,QAAQ;AACvB,QAAM,MAAM,CAAC,KAAa,SAAmB;AAC3C,aAAS,KAAK,KAAK,KAAK,IAAI,CAAC;AAC7B,QAAI,EAAE,OAAQ;AACd,QAAI;AACF,WAAK,KAAK,IAAI;AAAA,IAChB,QAAQ;AAAA,IAAC;AAAA,EACX;AACA,QAAM,SAAS,CAAC,SAAiB;AAC/B,UAAM,KAAK,IAAI;AACf,QAAI,CAAC,EAAE,OAAQ,YAAW,IAAI;AAAA,EAChC;AACA,MAAI,aAAa,YAAY,WAAW,EAAE,MAAM,IAAI,GAAG;AACrD,QAAI,aAAa,CAAC,WAAW,OAAO,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;AACrD,QAAI,aAAa,CAAC,WAAW,QAAQ,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;AACtD,WAAO,EAAE,MAAM,IAAI;AAAA,EACrB;AACA,MAAI,aAAa,WAAW,WAAW,EAAE,KAAK,IAAI,GAAG;AACnD,QAAI,aAAa,CAAC,UAAU,WAAW,SAAS,EAAE,IAAI,CAAC;AACvD,WAAO,EAAE,KAAK,IAAI;AAClB,QAAI,aAAa,CAAC,UAAU,eAAe,CAAC;AAAA,EAC9C;AACA,SAAO,EAAE,OAAO,SAAS;AAC3B;",
+  "names": []
+}

package/dist/src/adapters/acp-control.d.ts

@@ -0,0 +1,87 @@
+import { type Mode } from "./headless.js";
+export interface AcpAgent {
+    /** sessionpipe's harness name (ADAPTERS.md): the registry's id unless a hook adapter already named it. */
+    harness: string;
+    /** The registry's id. */
+    registry: string;
+    label: string;
+    /** The CLI's name on PATH. */
+    bin: string;
+    args: string[];
+}
+/** The agents the daemon can drive, with the launch line the registry publishes. */
+export declare const ACP_AGENTS: readonly AcpAgent[];
+export declare const ACP_HARNESSES: readonly string[];
+export declare const acpAgent: (harness: string) => AcpAgent | undefined;
+/** The env var that names an agent's CLI by hand: `SESSIONPIPE_ACP_GEMINI_CLI`. */
+export declare const acpOverride: (harness: string) => string;
+/** An agent's CLI on this machine: the override, else on PATH, else beside the node
+ *  running this (an `npm install -g` there) or where the installers put it. */
+export declare function findAcpAgent(harness: string, env?: NodeJS.ProcessEnv, home?: string, nodeDir?: string): {
+    bin: string;
+    args: string[];
+} | null;
+/** The ACP agents installed here, by harness name, for the daemon's hello. */
+export declare function acpHarnesses(env?: NodeJS.ProcessEnv): string[];
+type Json = Record<string, unknown>;
+interface Option {
+    optionId: string;
+    kind: string;
+}
+/** Which permission option the machine's mode picks, or null for `cancelled`: safe
+ *  refuses (once, else always), auto allows (once, else always). Inherit refuses as safe
+ *  does: the agent asked because its own settings want a person, and none is there.
+ *  Never the other way. */
+export declare function permissionChoice(options: unknown, mode: Mode): Option | null;
+/** A JSON-RPC error in words: its message, and its `data` where that says more (goose
+ *  1.55 answers session/new with "Internal error" and the reason in `data`). */
+export declare function errorWords(err: Json): string;
+/** A session the daemon holds (the shape of daemon.ts's SdkSession, plus the agent's own id). */
+export interface AcpHeld {
+    /** Deliver one message; resolves with the agent's reply when the turn ends. */
+    send(text: string): Promise<{
+        reply: string;
+        error?: string;
+    }>;
+    interrupt(): Promise<void>;
+    close(): void;
+    readonly busy: boolean;
+    readonly lastUsed: number;
+    readonly mode: "api";
+    /** The id the agent gave the session. */
+    readonly session: string;
+    /** The process is gone or was closed: nothing more can be sent. */
+    readonly closed: boolean;
+}
+export interface AcpOptions {
+    bin: string;
+    args: string[];
+    cwd: string;
+    mode: Mode;
+    label: string;
+    env?: NodeJS.ProcessEnv;
+    /** Reopen this session of the agent's (`session/load`) instead of starting a new one. */
+    load?: string;
+    /** The reply so far, each time it grows. */
+    onText?: (text: string) => void;
+    log?: (line: string) => void;
+    now?: () => number;
+    /** A turn still running after this is cancelled, then stopped. */
+    timeoutMs?: number;
+    /** How long the agent may take to answer `initialize` and open the session. */
+    openTimeoutMs?: number;
+    /** On close, how long the agent gets to leave by itself before SIGTERM (then SIGKILL). */
+    closeGraceMs?: number;
+}
+export type AcpStart = {
+    held: AcpHeld;
+} | {
+    failed: string;
+} | {
+    unsupported: string;
+};
+/** Run an ACP agent and open a session in it. Resolves once the agent has answered
+ *  `session/new` (or `session/load`); every later turn goes through `held.send`. */
+export declare function startAcp(o: AcpOptions): Promise<AcpStart>;
+export {};
+//# sourceMappingURL=acp-control.d.ts.map

package/dist/src/adapters/acp-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/acp-control.ts"],"names":[],"mappings":"AAeA,OAAO,EAAkD,KAAK,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1F,MAAM,WAAW,QAAQ;IACvB,0GAA0G;IAC1G,OAAO,EAAE,MAAM,CAAC;IAChB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,oFAAoF;AACpF,eAAO,MAAM,UAAU,EAAE,SAAS,QAAQ,EA0CzC,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAAqC,CAAC;AAEjF,eAAO,MAAM,QAAQ,YAAa,MAAM,KAAG,QAAQ,GAAG,SAA0D,CAAC;AAEjH,mFAAmF;AACnF,eAAO,MAAM,WAAW,YAAa,MAAM,KAAG,MAAuE,CAAC;AAEtH;+EAC+E;AAC/E,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,IAAI,SAAe,EACnB,OAAO,SAAiC,GACvC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAgBxC;AAED,8EAA8E;AAC9E,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE,CAE3E;AAED,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAIpC,UAAU,MAAM;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;2BAG2B;AAC3B,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAW5E;AAED;gFACgF;AAChF,wBAAgB,UAAU,CAAC,GAAG,EAAE,IAAI,GAAG,MAAM,CAI5C;AASD,iGAAiG;AACjG,MAAM,WAAW,OAAO;IACtB,+EAA+E;IAC/E,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,KAAK,IAAI,IAAI,CAAC;IACd,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,yCAAyC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAIxF;oFACoF;AACpF,wBAAgB,QAAQ,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+QzD"}

package/dist/src/adapters/antigravity-control.d.ts

@@ -1,14 +1,24 @@
+import type { RunLevel, StartPermission } from "../control/verify.js";
 import { type Mode, type Reading, type RunResult } from "./headless.js";
 /** The `agy` to run: SESSIONPIPE_AGY, else on PATH, else where its installer puts it. */
 export declare function findAgy(env?: NodeJS.ProcessEnv, home?: string): string | null;
-/** Permission flags for the machine's mode. Safe: none — agy denies every tool call
- *  nobody is there to approve, and says which. Auto: `--mode accept-edits`. Never
- *  `--dangerously-skip-permissions`: no path here writes it. */
-export declare function agyModeFlags(mode: Mode): string[];
+/** Permission flags for a level. Safe: none — agy denies every tool call nobody is
+ *  there to approve, and says which. Edits: `--mode accept-edits`, its widest, which is
+ *  also what an auto machine's mode means for it. Inherit: none either, so agy runs as
+ *  it would by itself. agy has no read-only mode known, so `read` is never offered and
+ *  throws rather than run at safe. Never `--dangerously-skip-permissions`: no path here
+ *  writes it. */
+export declare function agyModeFlags(level: RunLevel): string[];
+/** The levels a start may ask agy for on a machine in `mode`: safe, and edits on an
+ *  auto machine. */
+export declare const offeredLevels: (mode: Mode) => StartPermission[];
+/** What a start that names no level gets, said as what it is: edits on an auto machine,
+ *  no flag on an inherit one. */
+export declare const defaultLevel: (mode: Mode) => RunLevel;
 /** One headless turn in the folder it is spawned in. A message that starts with a dash
  *  would read as a flag after `-p`; a leading space keeps it the prompt. */
 export declare function agyArgs(o: {
-    mode: Mode;
+    permission: RunLevel;
     prompt: string;
     resume?: string;
 }): string[];

package/dist/src/adapters/antigravity-control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"antigravity-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/antigravity-control.ts"],"names":[],"mappings":"AAUA,OAAO,EAAkC,KAAK,IAAI,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAc,MAAM,eAAe,CAAC;AAIpH,yFAAyF;AACzF,wBAAgB,OAAO,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAe,GAAG,MAAM,GAAG,IAAI,CAOhG;AAED;;gEAEgE;AAChE,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,CAEjD;AAED;4EAC4E;AAC5E,wBAAgB,OAAO,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CAUpF;AAED,yCAAyC;AACzC,eAAO,MAAM,MAAM,SAAS,MAAM,CAAC,UAAU,KAAiB,MAAM,CAAC,UAAyB,CAAC;AAE/F,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,EAAE,CAAC;CACnB;AAED,8DAA8D;AAC9D,MAAM,WAAW,QAAQ;IACvB,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,0BAA0B;IAC1B,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAgCrD;AAYD,6DAA6D;AAC7D,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAU3D;AAED;yCACyC;AACzC,qBAAa,UAAW,YAAW,OAAO;IACxC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAQ;IAC9B,KAAK,SAAK;IACV,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,IAAI,CAAuB;IACnC,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,IAAI,CAAuB;IAEnC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAa1B;IAED,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAiB9D;CACF;AAED,eAAO,MAAM,OAAO,QAAO,UAA8B,CAAC"}
+{"version":3,"file":"antigravity-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/antigravity-control.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAkC,KAAK,IAAI,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAc,MAAM,eAAe,CAAC;AAIpH,yFAAyF;AACzF,wBAAgB,OAAO,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAe,GAAG,MAAM,GAAG,IAAI,CAOhG;AAED;;;;;iBAKiB;AACjB,wBAAgB,YAAY,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,EAAE,CAGtD;AAED;oBACoB;AACpB,eAAO,MAAM,aAAa,SAAU,IAAI,KAAG,eAAe,EAAsD,CAAC;AAEjH;iCACiC;AACjC,eAAO,MAAM,YAAY,SAAU,IAAI,KAAG,QAA8C,CAAC;AAEzF;4EAC4E;AAC5E,wBAAgB,OAAO,CAAC,CAAC,EAAE;IAAE,UAAU,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CAU9F;AAED,yCAAyC;AACzC,eAAO,MAAM,MAAM,SAAS,MAAM,CAAC,UAAU,KAAiB,MAAM,CAAC,UAAyB,CAAC;AAE/F,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,EAAE,CAAC;CACnB;AAED,8DAA8D;AAC9D,MAAM,WAAW,QAAQ;IACvB,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,0BAA0B;IAC1B,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAgCrD;AAYD,6DAA6D;AAC7D,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAU3D;AAED;yCACyC;AACzC,qBAAa,UAAW,YAAW,OAAO;IACxC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAQ;IAC9B,KAAK,SAAK;IACV,OAAO,CAAC,GAAG,CAAM;IACjB,OAAO,CAAC,IAAI,CAAuB;IACnC,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,IAAI,CAAuB;IAEnC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAa1B;IAED,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAiB9D;CACF;AAED,eAAO,MAAM,OAAO,QAAO,UAA8B,CAAC"}

package/dist/src/adapters/claude-code-control.d.ts

@@ -1,3 +1,4 @@
+import { type RunLevel, type StartPermission } from "../control/verify.js";
 import { JOB_TIMEOUT_MS, type Login, type Mode, type RunOptions, type RunResult } from "./headless.js";
 export { JOB_TIMEOUT_MS, type Login, type Mode, type RunResult };
 /** Dotted versions by number, a missing part as 0: 1.9.0 < 1.10 = 1.10.0. */
@@ -15,10 +16,44 @@ export interface Caps {
     stream?: boolean;
 }
 export declare function parseCaps(help: string): Caps;
-/** Permission flags for the machine's mode. Safe: `dontAsk` (nothing that needs
- *  approval runs). Auto: Claude Code's own auto mode, or a refusal. Never
- *  bypassPermissions — no path here writes it. */
-export declare function modeFlags(mode: Mode, caps: Caps): {
+/** Permission flags for a level (a machine's mode is one: safe, auto, inherit). Read:
+ *  plan mode. Safe: `dontAsk` (nothing that needs approval runs). Edits: acceptEdits.
+ *  Auto: Claude Code's own auto mode. Inherit: none, so the turn starts in the mode
+ *  Claude Code picks by itself here, its settings' `permissions.defaultMode` (a resume
+ *  too: Claude Code never restores a session's earlier mode). A level this Claude Code
+ *  has no mode for is a refusal, never another level. Never bypassPermissions — no path
+ *  here writes it. */
+export declare function modeFlags(level: RunLevel, caps: Caps): {
+    args: string[];
+} | {
+    error: string;
+};
+/** The widest level a start may name on a machine in `mode`: the mode itself, and safe
+ *  on an inherit machine, whose own default sessionpipe can't rank, so a message there may
+ *  only narrow to a level that never runs anything needing approval. */
+export declare const ceilingLevel: (mode: Mode) => StartPermission;
+/** The levels a start may ask Claude Code for on a machine in `mode`: never above its
+ *  ceiling, and each only where `claude --help` lists the mode it maps to (safe always). */
+export declare function offeredLevels(mode: Mode, caps: Caps): StartPermission[];
+/** What a start that names no level gets: what the machine's mode means for Claude Code. */
+export declare const defaultLevel: (mode: Mode) => RunLevel;
+/** How a headless run prints: streamed where this Claude Code can, else one JSON at the end. */
+export declare function outputArgs(caps: {
+    stream?: boolean;
+}): string[];
+/** One headless `claude -p` run: a new session (`session`), or the next message of one
+ *  (`resume`, optionally as a fork). The model is its own argument after `--model`, and
+ *  a prompt that starts with a dash gets a leading space, so it is never read as a flag. */
+export declare function claudeArgs(o: {
+    caps: Caps;
+    level: RunLevel;
+    prompt: string;
+    session?: string;
+    resume?: string;
+    fork?: boolean;
+    model?: string;
+    allowedTools?: string[];
+}): {
     args: string[];
 } | {
     error: string;

package/dist/src/adapters/claude-code-control.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code-control.ts"],"names":[],"mappings":"AAYA,OAAO,EAEL,cAAc,EACd,KAAK,KAAK,EACV,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,SAAS,EAEf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;AAMjE,6EAA6E;AAC7E,eAAO,MAAM,UAAU,MAAO,MAAM,KAAK,MAAM,WAM9C,CAAC;AAEF;mEACmE;AACnE,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAe,GAAG,MAAM,GAAG,IAAI,CA2BnG;AAcD,MAAM,WAAW,IAAI;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;IACd;sFACkF;IAClF,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAU5C;AAED;;kDAEkD;AAClD,wBAAgB,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAexF;AAED;uFACuF;AACvF,wBAAgB,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAiBrG;AAED;;kFAEkF;AAClF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,CAexE;AAED;;;;mDAImD;AACnD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,KAAK,CAAC,CAUjH;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAIlE;AAED,8EAA8E;AAC9E,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,CAM7G;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAc5C;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,GAAG,IAAI,CAkBjF;AAID;;yEAEyE;AACzE,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,SAAkB,GAAG,MAAM,GAAG,IAAI,CA2DjF;AAYD;;yCAEyC;AACzC,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAkBvE;AAED,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO,CAS5F;AAED;oFACoF;AACpF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAExF;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CAChD;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAqBlF;AAED,eAAO,MAAM,MAAM,MAAO,OAAO,KAAG,CAAC,IAAI,MAAkD,CAAC"}
+{"version":3,"file":"claude-code-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code-control.ts"],"names":[],"mappings":"AAYA,OAAO,EAAa,KAAK,QAAQ,EAAqB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACzG,OAAO,EAEL,cAAc,EACd,KAAK,KAAK,EACV,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,SAAS,EAEf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,cAAc,EAAE,KAAK,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;AAMjE,6EAA6E;AAC7E,eAAO,MAAM,UAAU,MAAO,MAAM,KAAK,MAAM,WAM9C,CAAC;AAEF;mEACmE;AACnE,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAe,GAAG,MAAM,GAAG,IAAI,CA2BnG;AAcD,MAAM,WAAW,IAAI;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;IACd;sFACkF;IAClF,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAU5C;AASD;;;;;;sBAMsB;AACtB,wBAAgB,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAkB7F;AAED;;wEAEwE;AACxE,eAAO,MAAM,YAAY,SAAU,IAAI,KAAG,eAAuD,CAAC;AAElG;4FAC4F;AAC5F,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,eAAe,EAAE,CAIvE;AAED,4FAA4F;AAC5F,eAAO,MAAM,YAAY,SAAU,IAAI,KAAG,QAAgB,CAAC;AAE3D,gGAAgG;AAChG,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,EAAE,CAI/D;AAED;;4FAE4F;AAC5F,wBAAgB,UAAU,CAAC,CAAC,EAAE;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAiBzC;AAED;uFACuF;AACvF,wBAAgB,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAiBrG;AAED;;kFAEkF;AAClF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,CAexE;AAED;;;;mDAImD;AACnD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,KAAK,CAAC,CAUjH;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAIlE;AAED,8EAA8E;AAC9E,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,CAM7G;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAc5C;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,GAAG,IAAI,CAkBjF;AAID;;yEAEyE;AACzE,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,SAAkB,GAAG,MAAM,GAAG,IAAI,CA2DjF;AAYD;;yCAEyC;AACzC,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAkBvE;AAED,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO,CAS5F;AAED;oFACoF;AACpF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAExF;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CAChD;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAqBlF;AAED,eAAO,MAAM,MAAM,MAAO,OAAO,KAAG,CAAC,IAAI,MAAkD,CAAC"}

package/dist/src/adapters/claude-code-pool.d.ts

@@ -0,0 +1,116 @@
+import type { DataOf } from "../types.js";
+export type LimitWindow = DataOf<"limits.observed">["windows"][number];
+/** Claude Code 2.1.312's own prod endpoints. bb signs in at claude.ai/oauth/authorize with
+ *  console.anthropic.com's callback and token URL, which still answer; the paste-back code
+ *  works the same at either. */
+export declare const POOL_ENDPOINTS: {
+    readonly authorize: "https://claude.com/cai/oauth/authorize";
+    readonly token: "https://platform.claude.com/v1/oauth/token";
+    readonly callback: "https://platform.claude.com/oauth/code/callback";
+    readonly profile: "https://api.anthropic.com/api/oauth/profile";
+    readonly usage: "https://api.anthropic.com/api/oauth/usage";
+    readonly api: "https://api.anthropic.com";
+    readonly clientId: "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
+    readonly scopes: readonly ["user:inference", "user:profile", "org:create_api_key", "user:sessions:claude_code", "user:mcp_servers", "user:file_upload"];
+    readonly beta: "oauth-2025-04-20";
+};
+export interface PoolCredential {
+    access: string;
+    refresh: string;
+    /** Epoch milliseconds. */
+    expires_at: number;
+}
+export type PoolStatus = "allowed" | "allowed_warning" | "rejected";
+export interface PoolLimits {
+    windows: LimitWindow[];
+    /** The account as a whole. */
+    status?: PoolStatus;
+    /** On a refusal: the window that refused (`five_hour`, `seven_day`, …) and when it resets. */
+    claim?: string;
+    resets_at?: string;
+    observed_at: number;
+}
+export interface PoolProfile {
+    account_uuid: string;
+    email: string;
+    org?: string;
+    plan?: string;
+}
+export interface ImportableLogin {
+    /** The Claude Code config dir the login belongs to. */
+    dir: string;
+    credential: PoolCredential;
+    /** From the dir's .claude.json; absent when that file has no login (fetchProfile fills it). */
+    account_uuid?: string;
+    email?: string;
+    source: "keychain" | "file";
+}
+/** The person has to sign in (again): a refused code, a dead refresh token, a 401. */
+export declare class PoolAuthError extends Error {
+}
+/** Anthropic did not answer properly right now; the same call may work in a minute. */
+export declare class PoolUpstreamError extends Error {
+}
+type HeaderBag = Headers | Record<string, string | string[] | undefined>;
+/** The account's limits from a response's headers; null when the limiter did not run
+ *  (no `anthropic-ratelimit-unified-*` header at all). A window needs a readable
+ *  utilization; a status or a reset alone is kept on the account. */
+export declare function readLimits(headers: HeaderBag, now: number): PoolLimits | null;
+/** The usage endpoint's JSON: `{five_hour: {utilization, resets_at}, seven_day: {…},
+ *  seven_day_<model>: {…}, …}`, utilization a percent already. Any other key shaped
+ *  like a window passes through under its own id; null when none is. */
+export declare function usageLimits(json: unknown, now: number): PoolLimits | null;
+/** `metadata.user_id` of a request body (parsed, or the raw bytes): the session to pin
+ *  on and the account the body claims. null when the body carries none. */
+export declare function parseUserId(body: unknown): {
+    session?: string;
+    account?: string;
+} | null;
+/** The body with the account part of `metadata.user_id` set to `accountUuid`, the same
+ *  bytes when there is nothing to rewrite. Done on the string, not a parse/stringify
+ *  round trip: Claude Code's bodies are JSON.stringify output and would survive one, but
+ *  a body a person built by hand (an SDK, a `CLAUDE_CODE_EXTRA_BODY`) can carry number
+ *  forms and escapes a round trip rewrites, and a prompt cache is keyed on bytes. The
+ *  only change is the UUID inside that one string literal. */
+export declare function withAccount(body: Buffer, accountUuid: string): Buffer;
+/** The request's headers as they go to Anthropic: the serving account's bearer in place
+ *  of the pool's own token, the OAuth beta present, hop-by-hop and the ones the sender
+ *  sets (host, content-length) gone. Our token and any x-api-key never go through. */
+export declare function upstreamHeaders(req: Record<string, string | string[] | undefined>, access: string): Record<string, string>;
+/** PKCE, as Claude Code builds its own sign-in URL (the same parameters in the same
+ *  order; `code=true` asks for the paste-back page). 32 random bytes base64url is a
+ *  43-character verifier, inside RFC 7636's 43–128. */
+export declare function beginLogin(random?: (n: number) => Buffer): {
+    url: string;
+    verifier: string;
+    state: string;
+};
+type Fetch = typeof globalThis.fetch;
+/** Exchange the pasted code for a credential and read whose it is. */
+export declare function completeLogin(code: string, pending: {
+    verifier: string;
+    state: string;
+}, fetch: Fetch, now: () => number): Promise<{
+    credential: PoolCredential;
+    profile: PoolProfile;
+}>;
+/** A fresh access token. 400/401 means the refresh token is dead (revoked, expired,
+ *  used elsewhere): the person signs in again. Anything else is Anthropic's moment. */
+export declare function refreshCredential(cred: PoolCredential, fetch: Fetch, now: () => number): Promise<PoolCredential>;
+/** Whose token this is: `{account: {uuid, email, …}, organization: {name, …}}`. */
+export declare function fetchProfile(access: string, fetch: Fetch): Promise<PoolProfile>;
+/** The account's windows from the usage endpoint; null when it reports none. */
+export declare function fetchUsage(access: string, fetch: Fetch, now: () => number): Promise<PoolLimits | null>;
+/** The keychain service Claude Code keeps a config dir's login under: bare for the
+ *  default dir, suffixed with 8 hex of sha256(dir) when CLAUDE_CONFIG_DIR names one. */
+export declare function keychainService(dir: string, home: string, platform?: NodeJS.Platform): string;
+type ReadFile = (file: string) => string;
+/** Every Claude Code login on this machine the pool could copy, one per config dir
+ *  (claudeDirs): the credential from the keychain (macOS) or `.credentials.json`, and
+ *  who it is from the dir's .claude.json. `exec` runs `security` and returns stdout; it
+ *  is the only thing that touches the keychain, so a test hands in a fake. Returns []
+ *  on any failure and never throws: an import that finds nothing is a message, not a
+ *  crash, and a token never reaches a log through here. */
+export declare function importableLogins(env: NodeJS.ProcessEnv, exec: (cmd: string, args: string[]) => string, readFile?: ReadFile, platform?: NodeJS.Platform): ImportableLogin[];
+export {};
+//# sourceMappingURL=claude-code-pool.d.ts.map

package/dist/src/adapters/claude-code-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-pool.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code-pool.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAG1C,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE;;gCAEgC;AAChC,eAAO,MAAM,cAAc;aACzB,SAAS,EAAE,wCAAwC;aACnD,KAAK,EAAE,4CAA4C;aACnD,QAAQ,EAAE,iDAAiD;aAC3D,OAAO,EAAE,6CAA6C;aACtD,KAAK,EAAE,2CAA2C;aAClD,GAAG,EAAE,2BAA2B;aAChC,QAAQ,EAAE,sCAAsC;aAGhD,MAAM,YACJ,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,2BAA2B,EAC3B,kBAAkB,EAClB,kBAAkB;aAEpB,IAAI,EAAE,kBAAkB;CAChB,CAAC;AAEX,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AACD,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,iBAAiB,GAAG,UAAU,CAAC;AACpE,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,8BAA8B;IAC9B,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,8FAA8F;IAC9F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,eAAe;IAC9B,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,cAAc,CAAC;IAC3B,+FAA+F;IAC/F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,GAAG,MAAM,CAAC;CAC7B;AAED,sFAAsF;AACtF,qBAAa,aAAc,SAAQ,KAAK;CAAG;AAC3C,uFAAuF;AACvF,qBAAa,iBAAkB,SAAQ,KAAK;CAAG;AAU/C,KAAK,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;AA+BzE;;qEAEqE;AACrE,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CA+C7E;AAED;;wEAEwE;AACxE,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAiBzE;AAuCD;2EAC2E;AAC3E,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAGxF;AAED;;;;;8DAK8D;AAC9D,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CA+BrE;AA6BD;;sFAEsF;AACtF,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EAClD,MAAM,EAAE,MAAM,GACb,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAexB;AAID;;uDAEuD;AACvD,wBAAgB,UAAU,CAAC,MAAM,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAoB,GAAG;IACvE,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf,CAcA;AA6BD,KAAK,KAAK,GAAG,OAAO,UAAU,CAAC,KAAK,CAAC;AAiCrC,sEAAsE;AACtE,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAC5C,KAAK,EAAE,KAAK,EACZ,GAAG,EAAE,MAAM,MAAM,GAChB,OAAO,CAAC;IAAE,UAAU,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC,CAqB/D;AAED;uFACuF;AACvF,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,KAAK,EACZ,GAAG,EAAE,MAAM,MAAM,GAChB,OAAO,CAAC,cAAc,CAAC,CAWzB;AAED,mFAAmF;AACnF,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAoBrF;AAED,gFAAgF;AAChF,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAM5G;AAKD;wFACwF;AACxF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,CAQ/G;AA+BD,KAAK,QAAQ,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;AAGzC;;;;;2DAK2D;AAC3D,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,EAC7C,QAAQ,GAAE,QAAmB,EAC7B,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,eAAe,EAAE,CA+BnB"}

package/dist/src/adapters/claude-code.d.ts

@@ -1,4 +1,4 @@
-import type { HarnessAccount } from "../types.js";
+import type { DataOf, HarnessAccount } from "../types.js";
 import type { Adapter, FactsState, SessionFacts } from "./types.js";
 export declare const CLAUDE_EVENTS: readonly ["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "PostToolUseFailure", "PermissionRequest", "Notification", "Stop", "SubagentStart", "SubagentStop", "PreCompact", "PostCompact", "SessionEnd", "StopFailure"];
 /** Every Claude Code config dir on this machine. `home` follows the env's HOME, so a
@@ -6,6 +6,11 @@ export declare const CLAUDE_EVENTS: readonly ["SessionStart", "UserPromptSubmit"
  *  once rewrote a real settings.json with its fake hook paths on every run. */
 export declare function claudeDirs(env?: NodeJS.ProcessEnv, home?: string): string[];
 export declare const claudeCode: Adapter;
+/** The status line's `rate_limits`: `five_hour`, `seven_day` and, behind a gateway,
+ *  `spend_limit`, each with `used_percentage` and `resets_at` in epoch seconds. Only
+ *  Pro and Max accounts (or a gateway) have them, and only after a session's first
+ *  response; a window drops out once it resets. */
+export declare function claudeLimits(rl: unknown): DataOf<"limits.observed"> | null;
 /** Another harness reading this settings file, not Claude Code. Several harnesses
  *  import `~/.claude/settings.json` hooks, so our entries there can be run by a tool
  *  that has its own adapter: it would arrive under the wrong name, with ids that mean
@@ -25,6 +30,20 @@ export declare function appTitle(text: string): string;
  *  name or custom-title) → Claude Code's own title (registry "auto" name or
  *  ai-title) → the first ask, marked first-ask so a real title later replaces it. */
 export declare function claudeFacts(file: string, sessionId: string, hints: Record<string, unknown>, state: FactsState): SessionFacts;
+/** claude.ai's name for a session with a claude.ai link, unless the person named it
+ *  here: `{title, title_source: "harness"}`, or nothing. */
+export declare function claudeRemoteFacts(id: string, local: SessionFacts, transcript: string | undefined, state: FactsState, env: NodeJS.ProcessEnv, now?: number): Promise<Partial<SessionFacts>>;
+/** The access token Claude Code signed in to `dir` with: from the macOS keychain, else
+ *  from `<dir>/.credentials.json`. Never written anywhere, never logged. One that has
+ *  expired is not refreshed, since that would rotate Claude Code's own login: the lookup
+ *  waits for Claude Code to refresh it. */
+export declare function claudeAiToken(dir: string, env: NodeJS.ProcessEnv, now: number): string | null;
+/** claude.ai's name for the session `bridge` (`session_…`), from the endpoint Claude Code
+ *  reads a session from: a string, null when it has none yet, undefined when it couldn't
+ *  be asked or wouldn't say (offline, a 401 or 404, an answer about another session), so
+ *  the last answer stands. The token goes to api.anthropic.com alone: a redirect is
+ *  refused, never followed. */
+export declare function claudeAiTitle(bridge: string, token: string): Promise<string | null | undefined>;
 /** For tests: each hook runs in a fresh process; a test that edits the registry mid-run clears the cache. */
 export declare const _resetClaudeCaches: () => void;
 //# sourceMappingURL=claude-code.d.ts.map

package/dist/src/adapters/claude-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,KAAK,EACV,OAAO,EAEP,UAAU,EAKV,YAAY,EACb,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,aAAa,YACxB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,MAAM,EACN,eAAe,EACf,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,aAAa,CACL,CAAC;AAaX;;+EAE+E;AAC/E,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAwB,GAAG,MAAM,EAAE,CAiBvG;AAgBD,eAAO,MAAM,UAAU,EAAE,OA8MxB,CAAC;AAOF;;;;6FAI6F;AAC7F,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAE7E;AAuED;sEACsE;AACtE,wBAAgB,SAAS,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAa7E;AAyDD;kFACkF;AAClF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,SAAY,GAAG,cAAc,EAAE,CAUjF;AAcD;yEACyE;AACzE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7C;AA2DD;;qFAEqF;AACrF,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,UAAU,GAChB,YAAY,CA6Fd;AAED,6GAA6G;AAC7G,eAAO,MAAM,kBAAkB,QAAO,IAGrC,CAAC"}
+{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAU1D,OAAO,KAAK,EACV,OAAO,EAEP,UAAU,EAMV,YAAY,EACb,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,aAAa,YACxB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,MAAM,EACN,eAAe,EACf,cAAc,EACd,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,aAAa,CACL,CAAC;AAaX;;+EAE+E;AAC/E,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAwB,GAAG,MAAM,EAAE,CAiBvG;AAgBD,eAAO,MAAM,UAAU,EAAE,OAoQxB,CAAC;AA+BF;;;mDAGmD;AACnD,wBAAgB,YAAY,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAe1E;AAOD;;;;6FAI6F;AAC7F,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAE7E;AA0FD;sEACsE;AACtE,wBAAgB,SAAS,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAa7E;AAgFD;kFACkF;AAClF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,SAAY,GAAG,cAAc,EAAE,CAUjF;AAcD;yEACyE;AACzE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7C;AA2DD;;qFAEqF;AACrF,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,UAAU,GAChB,YAAY,CA6Fd;AA2BD;4DAC4D;AAC5D,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,YAAY,EACnB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,KAAK,EAAE,UAAU,EACjB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,GAAG,SAAa,GACf,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAehC;AAmBD;;;2CAG2C;AAC3C,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAwC7F;AAMD;;;;+BAI+B;AAC/B,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAqBrG;AAED,6GAA6G;AAC7G,eAAO,MAAM,kBAAkB,QAAO,IAIrC,CAAC"}

package/dist/src/adapters/claude-shaped.d.ts

@@ -26,6 +26,7 @@ export type JsonFile = {
     indent: string;
     eol: string;
     finalNewline: boolean;
+    bom: boolean;
 } | {
     ok: true;
     existed: false;
@@ -34,6 +35,7 @@ export type JsonFile = {
     indent: "  ";
     eol: "\n";
     finalNewline: true;
+    bom: false;
 } | {
     ok: false;
     existed: true;
@@ -47,6 +49,7 @@ export declare function formatJson(value: unknown, f: {
     indent: string;
     eol: string;
     finalNewline: boolean;
+    bom?: boolean;
 }): string;
 /** Back-compat helper for callers that only read. */
 export declare function readJson(file: string): Record<string, unknown>;

package/dist/src/adapters/claude-shaped.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-shaped.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-shaped.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE7D,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAClD,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB;8DAC0D;IAC1D,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACnD,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;iGACiG;AACjG,eAAO,MAAM,IAAI,QAA+F,CAAC;AACjH,eAAO,MAAM,MAAM,MAAO;IAAE,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,KAAG,OACwC,CAAC;AAExG,MAAM,MAAM,QAAQ,GAChB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,IAAI,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,OAAO,CAAC;CACvB,GACD;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,GAAG,EAAE,EAAE,CAAC;IAAC,MAAM,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,IAAI,CAAA;CAAE,GAClH;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD;sDACsD;AACtD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CA4BnD;AAED,yCAAyC;AACzC,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAG5G;AAED,qDAAqD;AACrD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG9D;AAUD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,GAAG,EAAE,WAAW,EAChB,CAAC,EAAE,mBAAmB,GACrB,aAAa,CAyCf;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAO,GAC3C,aAAa,CAyBf;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,GAAG,EAAE,WAAW,EAChB,CAAC,EAAE,mBAAmB,GACrB,SAAS,GAAG,OAAO,GAAG,SAAS,CAiBjC"}
+{"version":3,"file":"claude-shaped.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-shaped.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE7D,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAClD,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB;8DAC0D;IAC1D,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACnD,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;iGACiG;AACjG,eAAO,MAAM,IAAI,QAA+F,CAAC;AACjH,eAAO,MAAM,MAAM,MAAO;IAAE,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,KAAG,OACwC,CAAC;AAExG,MAAM,MAAM,QAAQ,GAChB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,IAAI,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,OAAO,CAAC;IACtB,GAAG,EAAE,OAAO,CAAC;CACd,GACD;IACE,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,EAAE,EAAE,CAAC;IACR,MAAM,EAAE,IAAI,CAAC;IACb,GAAG,EAAE,IAAI,CAAC;IACV,YAAY,EAAE,IAAI,CAAC;IACnB,GAAG,EAAE,KAAK,CAAC;CACZ,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD;sDACsD;AACtD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAiCnD;AAED,yCAAyC;AACzC,wBAAgB,UAAU,CACxB,KAAK,EAAE,OAAO,EACd,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GACvE,MAAM,CAGR;AAED,qDAAqD;AACrD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG9D;AAUD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,GAAG,EAAE,WAAW,EAChB,CAAC,EAAE,mBAAmB,GACrB,aAAa,CAyCf;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAO,GAC3C,aAAa,CAyBf;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,GAAG,EAAE,WAAW,EAChB,CAAC,EAAE,mBAAmB,GACrB,SAAS,GAAG,OAAO,GAAG,SAAS,CAiBjC"}

package/dist/src/adapters/codex-config.d.ts

@@ -13,7 +13,8 @@ export interface Notify {
 }
 /** notify as Codex sees it; `misplaced` for a line of ours inside a table. */
 export declare function readNotify(text: string): Notify | null;
-/** Put `line` at the top level: before the first table, or at the end of a file that has none. */
+/** Put `line` at the top level: before the first table, or at the end of a file that has
+ *  none. The line takes the file's own line end, so a CRLF file stays one. */
 export declare function insertTopLevel(text: string, line: string): string;
 /** The config with `line` as its notify, for a config whose notify is ours or absent. */
 export declare function withNotify(text: string, line: string): string;