sessionpipe 0.1.1 → 0.2.0

package/dist/control/cli.d.ts

@@ -0,0 +1,4 @@
+export declare const CONTROL_HELP = "  sessionpipe control pair <receiver> [--folder DIR]\u2026 [--mode safe|auto] [--token T] [--name N] [--no-service]\n  sessionpipe control status | keys [remove <id>] | off [<receiver>] | run\n  sessionpipe wait [--session <harness>:<id>]      (a session runs this in the background)";
+export declare function controlMain(argv: string[], out: (s?: string) => void, distDir: string): Promise<void>;
+export declare function waitMain(argv: string[], out: (s?: string) => void): Promise<void>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/control/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/control/cli.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,YAAY,gSAEkE,CAAC;AAE5F,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyE3G;AAwCD,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CASvF"}

package/dist/control/daemon.d.ts

@@ -0,0 +1,172 @@
+import { claudeControl } from "@sessionpipe/core";
+import { type ControlConfig, type PairedReceiver } from "./store.js";
+type Caps = claudeControl.Caps;
+type RunResult = claudeControl.RunResult;
+/** The message as the receiver carried it (control.json). */
+export interface Carried {
+    id: string;
+    cmd: string;
+    csig?: string | null;
+    grant?: {
+        str: string;
+        cred: string;
+        ad: string;
+        cd: string;
+        sig: string;
+    } | null;
+    confirm?: {
+        cred: string;
+        ad: string;
+        cd: string;
+        sig: string;
+    } | null;
+    at: string;
+    expires_at: string;
+}
+/** A session the Agent SDK holds for the daemon (sdk.ts; a fake in tests). */
+export interface SdkSession {
+    /** Deliver one message; resolves with the agent's reply when the turn ends. */
+    send(text: string): Promise<{
+        reply: string;
+        error?: string;
+    }>;
+    interrupt(): Promise<void>;
+    close(): void;
+    readonly busy: boolean;
+    readonly lastUsed: number;
+}
+export interface SdkHost {
+    start(o: {
+        session: string;
+        cwd: string;
+        mode: "safe" | "auto";
+        configDir?: string;
+    }): SdkSession;
+}
+export interface DaemonDeps {
+    now: () => number;
+    fetch: typeof fetch;
+    log: (line: string) => void;
+    claudeDirs: () => string[];
+    claude: () => {
+        bin: string;
+        caps: Caps;
+    } | null;
+    run: (bin: string, args: string[], o: {
+        cwd: string;
+        env: NodeJS.ProcessEnv;
+        timeoutMs?: number;
+    }) => Promise<RunResult>;
+    sdk?: SdkHost | null;
+    /** How long to follow a live session's turn for an in-place answer (tests shorten it). */
+    answerWaitMs?: number;
+    /** Close an SDK session idle this long (a held session costs ~300 MB). */
+    sdkIdleMs?: number;
+    env?: NodeJS.ProcessEnv;
+}
+export interface Status {
+    version: string;
+    name: string;
+    receivers: {
+        url: string;
+        machine: string;
+        keys: number;
+        polling: boolean;
+        last_poll: number | null;
+        last_error: string | null;
+    }[];
+    waiting: string[];
+    mid_turn: string[];
+    attentions: {
+        session: string;
+        id: string;
+    }[];
+    sdk: string[];
+    nonces: number;
+    acks_pending: number;
+    delivered: Record<string, number>;
+}
+/** The machine's own caps (CONTROL.md §6 `start`): every command is the owner's,
+ *  signed, but a burst of them must not start a crowd of agents. A start beyond the
+ *  caps is refused `start_limit`; a headless run beyond `headless` waits its turn. */
+export declare const LIMITS: {
+    readonly startConcurrent: 2;
+    readonly startPerHour: 10;
+    readonly headless: 3;
+};
+export declare class ControlDaemon {
+    private cfg;
+    private readonly dir;
+    private readonly sock;
+    private readonly deps;
+    private server;
+    private readonly live;
+    private readonly sdkSessions;
+    private readonly nonces;
+    private readonly acks;
+    private readonly recentAcks;
+    private readonly inflight;
+    private readonly queues;
+    private readonly lastEnd;
+    private state;
+    private running;
+    private readonly polling;
+    private readonly delivered;
+    private helloTimer;
+    private helloSoon;
+    private readonly aborts;
+    private startsRunning;
+    private startTimes;
+    private procs;
+    private readonly procWaiters;
+    constructor(cfg: ControlConfig, dir: string, sock: string, deps: DaemonDeps);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    reload(cfg: ControlConfig): void;
+    status(): Status;
+    private listen;
+    private onConn;
+    private reply;
+    private liveOf;
+    private onRequest;
+    /** A queued turn message that hasn't expired. */
+    private takeTurn;
+    private onEvent;
+    private pollLoop;
+    private scheduleHello;
+    private helloAll;
+    private post;
+    private finish;
+    private flushing;
+    private flushAcks;
+    handle(r: PairedReceiver, m: Carried): Promise<void>;
+    /** Where the session lives, and whether its folder is allowed — read from the
+     *  session's own transcript (Claude Code) or the hooks' cwd, never the command. */
+    private place;
+    private allowed;
+    private permission;
+    private cancel;
+    private view;
+    private prompt;
+    /** A turn message whose Stop never took it: route again, now that it isn't mid-turn. */
+    private reroute;
+    /** Jobs for one session (and its copy) run one at a time, in order. */
+    private serial;
+    private headless;
+    private outcome;
+    /** Where the session's transcript ends right now: its answer starts after this. */
+    private answerFrom;
+    /** A message handed to a live session (a waiter, a Stop block) is `taken` now; the
+     *  session answers in its own turn, which the daemon reads from the transcript and
+     *  sends back as the final ack's `reply` — so the person sees the answer where they
+     *  asked. A turn that doesn't end within ANSWER_WAIT_MS is acked delivered without. */
+    private followAnswer;
+    private limits;
+    /** One headless Claude Code process at a time per slot; the rest wait in order. */
+    private slot;
+    private startSession;
+    private startOne;
+    private closeIdleSdk;
+}
+export {};
+//# sourceMappingURL=daemon.d.ts.map

package/dist/control/daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../src/control/daemon.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,aAAa,EAAiB,MAAM,mBAAmB,CAAC;AAKjE,OAAO,EAGL,KAAK,aAAa,EAGlB,KAAK,cAAc,EAGpB,MAAM,YAAY,CAAC;AAapB,KAAK,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC;AAC/B,KAAK,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC;AAwBzC,6DAA6D;AAC7D,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAClF,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,+EAA+E;IAC/E,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,KAAK,IAAI,IAAI,CAAC;IACd,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AACD,MAAM,WAAW,OAAO;IACtB,KAAK,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,UAAU,CAAC;CACnG;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACjD,GAAG,EAAE,CACH,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,KAC3D,OAAO,CAAC,SAAS,CAAC,CAAC;IACxB,GAAG,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAsBD,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE;QACT,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,EAAE,CAAC;IACJ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9C,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED;;sFAEsF;AACtF,eAAO,MAAM,MAAM;;;;CAAiE,CAAC;AAErF,qBAAa,aAAa;IAuBtB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAzBvB,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA2B;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAC1E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiF;IACzG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8B;IACxD,OAAO,CAAC,UAAU,CAA+B;IACjD,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsB;gBAGxC,GAAG,EAAE,aAAa,EACT,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU;IAS7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IActB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAiB3B,MAAM,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI;IAMhC,MAAM,IAAI,MAAM;IA2BhB,OAAO,CAAC,MAAM;IAad,OAAO,CAAC,MAAM;IAqBd,OAAO,CAAC,KAAK;IAMb,OAAO,CAAC,MAAM;IAgBd,OAAO,CAAC,SAAS;IAqDjB,iDAAiD;IACjD,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,OAAO;YA6BD,QAAQ;IA+EtB,OAAO,CAAC,aAAa;YASP,QAAQ;YAkBR,IAAI;IAiBlB,OAAO,CAAC,MAAM;IAgBd,OAAO,CAAC,QAAQ,CAAS;YACX,SAAS;IA+BjB,MAAM,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAgD1D;uFACmF;IACnF,OAAO,CAAC,KAAK;IAmBb,OAAO,CAAC,OAAO;IAmBf,OAAO,CAAC,UAAU;YAwBJ,MAAM;IAYpB,OAAO,CAAC,IAAI;YAoBE,MAAM;IA0DpB,wFAAwF;YAC1E,OAAO;IAarB,uEAAuE;IACvE,OAAO,CAAC,MAAM;YAUA,QAAQ;IA6CtB,OAAO,CAAC,OAAO;IA0Bf,mFAAmF;IACnF,OAAO,CAAC,UAAU;IAOlB;;;2FAGuF;IACvF,OAAO,CAAC,YAAY;IAqBpB,OAAO,CAAC,MAAM;IAUd,mFAAmF;YACrE,IAAI;YAWJ,YAAY;YAqBZ,QAAQ;IAkDtB,OAAO,CAAC,YAAY;CAWrB"}

package/dist/control/local.d.ts

@@ -0,0 +1,63 @@
+export type LocalRequest = 
+/** A waiter parks until a message for its session arrives. */
+{
+    op: "wait";
+    session: string;
+    pid?: number;
+}
+/** A Stop hook asks for a queued message (turn mode). */
+ | {
+    op: "stop";
+    session: string;
+    active: boolean;
+}
+/** A PermissionRequest hook parks until a verified answer, or until it's released. */
+ | {
+    op: "permission";
+    session: string;
+    attention: string;
+    tool?: string;
+}
+/** The worker reports a hook event: turn state and attention closure. */
+ | {
+    op: "event";
+    session: string;
+    event: string;
+    transcript?: string;
+    cwd?: string;
+}
+/** `sessionpipe control status`. */
+ | {
+    op: "status";
+};
+export type LocalReply = {
+    op: "message";
+    text: string;
+    id: string;
+} | {
+    op: "block";
+    reason: string;
+    id: string;
+} | {
+    op: "decision";
+    behavior: "allow" | "deny";
+    message?: string;
+    id: string;
+} | {
+    op: "none";
+}
+/** A newer waiter for the same session took over; this one stops. */
+ | {
+    op: "replaced";
+} | {
+    op: "ok";
+} | {
+    op: "status";
+    status: unknown;
+};
+/** Where the daemon listens. `SESSIONPIPE_SOCKET` overrides (tests). */
+export declare function socketPath(state: string, env?: NodeJS.ProcessEnv): string;
+/** One request, one reply. `timeoutMs` bounds the whole exchange; null on any
+ *  failure (no daemon, a timeout, a garbled reply) — callers treat that as "none". */
+export declare function ask(sock: string, req: LocalRequest, timeoutMs: number): Promise<LocalReply | null>;
+//# sourceMappingURL=local.d.ts.map

package/dist/control/local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/control/local.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,YAAY;AACtB,8DAA8D;AAC5D;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE;AAC/C,yDAAyD;GACvD;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE;AAClD,sFAAsF;GACpF;IAAE,EAAE,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AACzE,yEAAyE;GACvE;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE;AACpF,oCAAoC;GAClC;IAAE,EAAE,EAAE,QAAQ,CAAA;CAAE,CAAC;AAErB,MAAM,MAAM,UAAU,GAClB;IAAE,EAAE,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,EAAE,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE;AAChB,qEAAqE;GACnE;IAAE,EAAE,EAAE,UAAU,CAAA;CAAE,GAClB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtC,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAItF;AAED;sFACsF;AACtF,wBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA2BlG"}

package/dist/control/pair.d.ts

@@ -0,0 +1,50 @@
+import { type ControlConfig } from "./store.js";
+export interface PairOptions {
+    url: string;
+    /** The person's sink token for this receiver (from `sink add`, or --token). */
+    token: string;
+    folders: string[];
+    mode: "safe" | "auto";
+    name: string;
+    out: (s: string) => void;
+    fetch?: typeof fetch;
+    sleep?: (ms: number) => Promise<void>;
+    env?: NodeJS.ProcessEnv;
+}
+export declare function discover(url: string, f: typeof fetch): Promise<{
+    control: string;
+    rpId: string;
+}>;
+/** Pair (or add a key to) this machine with one receiver. Returns the saved config. */
+export declare function pair(o: PairOptions): Promise<ControlConfig>;
+/** `control off [<receiver>]`: tell the receiver, forget its token and keys. */
+export declare function off(o: {
+    url?: string;
+    out: (s: string) => void;
+    fetch?: typeof fetch;
+    env?: NodeJS.ProcessEnv;
+}): Promise<void | ControlConfig>;
+export declare function removeKey(id: string, env?: NodeJS.ProcessEnv): number;
+export declare function serviceFiles(o: {
+    node: string;
+    cli: string;
+    logDir: string;
+    home?: string;
+}): {
+    plist: {
+        file: string;
+        body: string;
+    };
+    unit: {
+        file: string;
+        body: string;
+    };
+};
+/** Write and start the service for this platform. Returns what it did, in words. */
+export declare function installService(o: {
+    node: string;
+    cli: string;
+    env?: NodeJS.ProcessEnv;
+}): string;
+export declare function uninstallService(env?: NodeJS.ProcessEnv): void;
+//# sourceMappingURL=pair.d.ts.map

package/dist/control/pair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair.d.ts","sourceRoot":"","sources":["../../src/control/pair.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,KAAK,aAAa,EAAgE,MAAM,YAAY,CAAC;AAK9G,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAUD,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,KAAK,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAavG;AAED,uFAAuF;AACvF,wBAAsB,IAAI,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAkEjE;AAED,gFAAgF;AAChF,wBAAsB,GAAG,CAAC,CAAC,EAAE;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,iCAYA;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAWrE;AAOD,wBAAgB,YAAY,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;;;;;;;;;EAmC3F;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAE,GAAG,MAAM,CA2BhG;AAED,wBAAgB,gBAAgB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAgB9D"}

package/dist/control/reply.d.ts

@@ -0,0 +1,19 @@
+/** The transcript's size now: where its answer will start. */
+export declare function transcriptEnd(file: string): number;
+/** Claude Code records after the delivery → the turn's answer once the turn ended
+ *  (an assistant record with `stop_reason: "end_turn"`), else null. The answer is the
+ *  turn's assistant text, in order; sidechains (subagents) are not the session's words. */
+export declare function answerIn(lines: string[]): {
+    done: boolean;
+    text: string;
+};
+/** Wait for the turn that follows a delivery to end, reading the transcript from
+ *  `from` (its size at delivery). Resolves the answer, or null when the turn doesn't
+ *  end within `timeoutMs` (an interrupted turn, a session closed mid-answer). */
+export declare function awaitAnswer(file: string, from: number, o: {
+    timeoutMs: number;
+    pollMs?: number;
+    now?: () => number;
+    sleep?: (ms: number) => Promise<void>;
+}): Promise<string | null>;
+//# sourceMappingURL=reply.d.ts.map

package/dist/control/reply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reply.d.ts","sourceRoot":"","sources":["../../src/control/reply.ts"],"names":[],"mappings":"AASA,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED;;2FAE2F;AAC3F,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAqBzE;AAED;;iFAEiF;AACjF,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,CAAC,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,GACnG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA6BxB"}

package/dist/control/route.d.ts

@@ -0,0 +1,41 @@
+import type { ControlKind } from "@sessionpipe/core/control";
+export type DeliveryMode = "sdk" | "waiter" | "turn" | "api" | "resume" | "fork";
+export interface SessionView {
+    harness: string;
+    /** The daemon holds this session through the Agent SDK right now. */
+    sdk: boolean;
+    /** A `sessionpipe wait` for it is parked on the socket. */
+    waiter: boolean;
+    /** Between a turn's start and its Stop (the Stop hook will ask). */
+    midTurn: boolean;
+    /** A live process holds the session (registry entry or a fresh transcript write). */
+    live: boolean;
+    /** The transcript exists on this machine. */
+    known: boolean;
+    /** This Claude Code can copy a session (`--fork-session`). */
+    canFork: boolean;
+    /** The harness has an input API (OpenCode, Codex app-server) — none is wired yet. */
+    api: boolean;
+}
+export type Route = {
+    mode: DeliveryMode;
+} | {
+    unsupported: string;
+} | {
+    refused: "no_session";
+};
+/** Where a prompt (or a start) goes. Never two writers on one transcript: a live
+ *  session gets a fork, never a resume. */
+export declare function routePrompt(s: SessionView): Route;
+/** How each kind is delivered, before the session's state is looked at. */
+export declare function kindPath(kind: ControlKind, harness: string): "prompt" | "permission" | "cancel" | "start" | {
+    unsupported: string;
+};
+/** The framed text a session receives (CONTROL.md §6): the model and the person can
+ *  tell where it came from. */
+/** Said with every message that reaches a live session: the answer goes back by
+ *  itself (the daemon reads it from the transcript), so the model never invents a
+ *  command to reply with (a real session tried \`sessionpipe send\`, 2026-10-01). */
+export declare const IN_PLACE_ANSWER = "Answer it right here, as you would answer the person at the keyboard: your reply is sent back to them automatically. Don't run a command or call a tool just to send it.";
+export declare function frame(text: string, receiver: string): string;
+//# sourceMappingURL=route.d.ts.map

package/dist/control/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../src/control/route.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEjF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,GAAG,EAAE,OAAO,CAAC;IACb,2DAA2D;IAC3D,MAAM,EAAE,OAAO,CAAC;IAChB,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAC;IACjB,qFAAqF;IACrF,IAAI,EAAE,OAAO,CAAC;IACd,6CAA6C;IAC7C,KAAK,EAAE,OAAO,CAAC;IACf,8DAA8D;IAC9D,OAAO,EAAE,OAAO,CAAC;IACjB,qFAAqF;IACrF,GAAG,EAAE,OAAO,CAAC;CACd;AAED,MAAM,MAAM,KAAK,GAAG;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,YAAY,CAAA;CAAE,CAAC;AAEjG;2CAC2C;AAC3C,wBAAgB,WAAW,CAAC,CAAC,EAAE,WAAW,GAAG,KAAK,CAUjD;AAED,2EAA2E;AAC3E,wBAAgB,QAAQ,CACtB,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,MAAM,GACd,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CAaxE;AAED;+BAC+B;AAC/B;;qFAEqF;AACrF,eAAO,MAAM,eAAe,6KACgJ,CAAC;AAE7K,wBAAgB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAM5D"}

package/dist/control/sdk.d.ts

@@ -0,0 +1,7 @@
+import type { SdkHost } from "./daemon.js";
+export declare function loadSdk(o: {
+    claudeBin: string | null;
+    env?: NodeJS.ProcessEnv;
+    log: (s: string) => void;
+}): Promise<SdkHost | null>;
+//# sourceMappingURL=sdk.d.ts.map

package/dist/control/sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.d.ts","sourceRoot":"","sources":["../../src/control/sdk.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAc,MAAM,aAAa,CAAC;AAQvD,wBAAsB,OAAO,CAAC,CAAC,EAAE;IAC/B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC1B,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAwF1B"}

package/dist/control/store.d.ts

@@ -0,0 +1,76 @@
+import { type TrustedKey } from "@sessionpipe/core/control";
+export interface PairedReceiver {
+    /** The receiver's origin, as the person typed it. */
+    url: string;
+    /** Absolute control endpoint (from the well-known file). */
+    control: string;
+    rpId: string;
+    machine: string;
+    /** The machine's own bearer (polls, acks, hello, off): opens nothing else. */
+    token: string;
+    keys: (TrustedKey & {
+        name?: string;
+        added_at: string;
+    })[];
+    paired_at: string;
+}
+export interface ControlConfig {
+    name: string;
+    /** Folders sessions may run in; compared on whole path segments, real paths. */
+    folders: string[];
+    mode: "safe" | "auto";
+    receivers: PairedReceiver[];
+    /** Caps this machine keeps whatever a receiver sends (defaults in daemon.ts,
+     *  LIMITS): new sessions running at once and per hour, headless Claude Code runs
+     *  at once. */
+    limits?: {
+        start_concurrent?: number;
+        start_per_hour?: number;
+        headless?: number;
+    };
+}
+export declare const controlFile: (env?: NodeJS.ProcessEnv) => string;
+export declare const controlState: (env?: NodeJS.ProcessEnv) => string;
+export declare function readControl(env?: NodeJS.ProcessEnv): ControlConfig | null;
+export declare const writeControl: (c: ControlConfig, env?: NodeJS.ProcessEnv) => void;
+/** Nonces the machine has run, for NONCE_TTL_MS. `seen()` records a new nonce
+ *  durably BEFORE it answers false; a write that fails throws, and the verifier
+ *  refuses the command (`nonce_store`). */
+export declare class NonceStore {
+    private readonly file;
+    private readonly now;
+    private readonly seenAt;
+    constructor(file: string, now?: () => number);
+    seen: (nonce: string) => boolean;
+    /** Rewrite the file with only the live window (on start, and daily). */
+    compact(): void;
+    get size(): number;
+}
+export interface Ack {
+    receiver: string;
+    id: string;
+    outcome: "taken" | "delivered" | "expired" | "unsupported" | "failed" | "refused";
+    at: string;
+    mode?: string;
+    session?: string;
+    code?: string;
+    detail?: string;
+    reply?: string;
+}
+/** Acks not yet accepted: appended before they are sent, rewritten when sent, so a
+ *  daemon restart re-sends rather than forgets (every message is acked exactly once
+ *  with a final outcome; a duplicate is tolerated by the receiver). */
+export declare class AckOutbox {
+    private readonly file;
+    constructor(file: string);
+    all(): Ack[];
+    add(a: Ack): void;
+    keep(left: Ack[]): void;
+}
+export interface DaemonState {
+    /** Original session → the fork its messages go to. */
+    copies: Record<string, string>;
+}
+export declare function readState(file: string): DaemonState;
+export declare const writeState: (file: string, s: DaemonState) => void;
+//# sourceMappingURL=store.d.ts.map

package/dist/control/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/control/store.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE1E,MAAM,WAAW,cAAc;IAC7B,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,CAAC,UAAU,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAC3D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,gFAAgF;IAChF,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B;;mBAEe;IACf,MAAM,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpF;AAED,eAAO,MAAM,WAAW,GAAI,MAAK,MAAM,CAAC,UAAwB,WACN,CAAC;AAC3D,eAAO,MAAM,YAAY,GAAI,MAAK,MAAM,CAAC,UAAwB,WAAwC,CAAC;AAY1G,wBAAgB,WAAW,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,GAAG,IAAI,CAatF;AAED,eAAO,MAAM,YAAY,GAAI,GAAG,aAAa,EAAE,MAAK,MAAM,CAAC,UAAwB,SAChD,CAAC;AAEpC;;2CAE2C;AAC3C,qBAAa,UAAU;IAGnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAHtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;gBAEjC,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,MAAM,MAAiB;IAiB/C,IAAI,GAAI,OAAO,MAAM,KAAG,OAAO,CAc7B;IAEF,wEAAwE;IACxE,OAAO,IAAI,IAAI;IAUf,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF;AAED,MAAM,WAAW,GAAG;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;IAClF,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;uEAEuE;AACvE,qBAAa,SAAS;IACR,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,MAAM;IACzC,GAAG,IAAI,GAAG,EAAE;IAUZ,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,IAAI;IAIjB,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;CAOxB;AAED,MAAM,WAAW,WAAW;IAC1B,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAOnD;AACD,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,EAAE,GAAG,WAAW,SAA0B,CAAC"}

package/dist/control/wait.d.ts

@@ -0,0 +1,8 @@
+export declare const RE_ARM = "(Answer it right here, as you would answer the person at the keyboard: your reply is sent back to them automatically, so don't run a command or call a tool just to send it. Then, without mentioning it, start `sessionpipe wait` again as a background command, with the longest timeout your harness allows, to keep receiving messages.)";
+/** The session to wait for: --session, else the harness's own env. */
+export declare function waitSession(flag: string | undefined, env?: NodeJS.ProcessEnv): string | null;
+export declare function waitForMessage(session: string, o?: {
+    env?: NodeJS.ProcessEnv;
+    retryMs?: number;
+}): Promise<string>;
+//# sourceMappingURL=wait.d.ts.map

package/dist/control/wait.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wait.d.ts","sourceRoot":"","sources":["../../src/control/wait.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,MAAM,iVAC6T,CAAC;AAEjV,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAKzG;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,CAAC,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACpD,OAAO,CAAC,MAAM,CAAC,CAUjB"}