sessionpipe 0.12.0 → 0.13.0

package/dist/control/channel.d.ts

@@ -0,0 +1,43 @@
+import { type LocalReply, type LocalRequest } from "./local.js";
+/** Said once, in the server's MCP instructions: who writes, and how to answer. */
+export declare const CHANNEL_INSTRUCTIONS: string;
+/** Whether the Claude Code that runs this server took it as a channel: `server:<name>`,
+ *  or a plugin of that name, follows `--channels` or
+ *  `--dangerously-load-development-channels` on the command line of an interactive
+ *  session. The handshake doesn't say (2.1.312 sends a channel and a plain server the
+ *  same initialize), and Claude Code drops a notification from a server it didn't take,
+ *  in silence: parked there, this server would swallow every message sent to the
+ *  session. */
+export declare function namedAsChannel(argv: string[], name: string): boolean;
+/** The parent process's command line, word by word (a channel entry holds no space);
+ *  nothing when it can't be read, as on Windows. */
+export declare function parentArgv(ppid?: number): string[];
+/** The answer to one message from Claude Code: initialize says this server is a
+ *  channel, ping and the (empty) tool list are answered, any other request is "method
+ *  not found", and a notification, or a line that isn't a request, gets nothing.
+ *  Claude Code 2.1.312 asks `server/discover` (MCP 2026-07-28) first: "not found" keeps
+ *  it on initialize, whose stdio stream carries the notifications a channel sends
+ *  unasked. */
+export declare function answer(msg: unknown, version: string): Record<string, unknown> | null;
+/** A waiter's message as a channel notification: the person's words are the content;
+ *  where they came from and the message's id become attributes of the <channel> tag. */
+export declare function notification(text: string, id: string): Record<string, unknown>;
+export interface ChannelOptions {
+    version: string;
+    env?: NodeJS.ProcessEnv;
+    /** Whether Claude Code took this server as a channel: never park otherwise. */
+    registered: () => boolean;
+    /** Said to Claude Code's log of this server (its stderr). */
+    log?: (line: string) => void;
+    /** How long to wait before parking again, after the daemon went away or a
+     *  `sessionpipe wait` for the same session took over. */
+    retryMs?: number;
+    /** The local socket's one request, one reply (tests stand a daemon in for it). */
+    ask?: (sock: string, req: LocalRequest, timeoutMs: number) => Promise<LocalReply | null>;
+}
+/** Serve one session's channel: MCP over `input` and `write`, and the session's waiter
+ *  on the daemon's socket. Parking starts when Claude Code says the connection is
+ *  initialized, so no message goes out before the session can take it. Resolves when
+ *  `input` ends (Claude Code closed the server). */
+export declare function runChannel(session: string, input: NodeJS.ReadableStream, write: (line: string) => void, o: ChannelOptions): Promise<void>;
+//# sourceMappingURL=channel.d.ts.map

package/dist/control/channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../../src/control/channel.ts"],"names":[],"mappings":"AAeA,OAAO,EAAO,KAAK,UAAU,EAAE,KAAK,YAAY,EAAc,MAAM,YAAY,CAAC;AAGjF,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,QAGnB,CAAC;AAef;;;;;;eAMe;AACf,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAapE;AAED;oDACoD;AACpD,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAqB,GAAG,MAAM,EAAE,CAGhE;AAED;;;;;eAKe;AACf,wBAAgB,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAsBpF;AAED;wFACwF;AACxF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAO9E;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,+EAA+E;IAC/E,UAAU,EAAE,MAAM,OAAO,CAAC;IAC1B,6DAA6D;IAC7D,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;6DACyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAC1F;AAED;;;oDAGoD;AACpD,wBAAsB,UAAU,CAC9B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,CAAC,cAAc,EAC5B,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAC7B,CAAC,EAAE,cAAc,GAChB,OAAO,CAAC,IAAI,CAAC,CAyCf"}

package/dist/control/cli.d.ts

@@ -1,5 +1,5 @@
 import { type Tier } from "@sessionpipe/core";
-export declare const CONTROL_HELP = "  sessionpipe control pair <receiver> [--folder DIR]\u2026 [--mode safe|auto|inherit] [--tier 0-3] [--token T] [--name N] [--no-service]\n  sessionpipe control mode auto|safe|inherit        (how sessions run when you message them)\n  sessionpipe control folders [add|remove DIR\u2026]     (where sessions you message may run)\n  sessionpipe control status | keys [remove <id>] | off [<receiver>] | run\n  sessionpipe wait [--session <harness>:<id>]      (a session runs this in the background)";
+export declare const CONTROL_HELP = "  sessionpipe control pair <receiver> [--folder DIR]\u2026 [--mode safe|auto|inherit] [--tier 0-3] [--token T] [--name N] [--no-service]\n  sessionpipe control mode auto|safe|inherit        (how sessions run when you message them)\n  sessionpipe control folders [add|remove DIR\u2026]     (where sessions you message may run)\n  sessionpipe control status | keys [remove <id>] | off [<receiver>] | run\n  sessionpipe wait [--session <harness>:<id>]      (a session runs this in the background)\n  sessionpipe channel [--session claude-code:<id>] [--name N]  (Claude Code runs this as a channel)";
 /** `control folders add|remove`: the new list, and a line per folder saying what became
  *  of it. A folder to add must exist and be a project, never the home folder or above
  *  it (pair's rule); folders are compared as real paths, as the daemon compares them. */
@@ -17,6 +17,18 @@ export declare function enabledHarnesses(harnesses: Record<string, {
  *  real environment can send pooled requests (bearers included) anywhere else. */
 export declare function testUpstream(env: NodeJS.ProcessEnv): string | null;
 export declare function waitMain(argv: string[], out: (s?: string) => void): Promise<void>;
+/** The process as `sessionpipe channel` uses it. Stdout is the MCP connection, so
+ *  anything said to the person goes to stderr. */
+export declare const channelIo: {
+    input: () => NodeJS.ReadableStream;
+    write: (s: string) => void;
+    err: (s: string) => void;
+    exit: (code: number) => void;
+};
+/** `sessionpipe channel`. `--name` is the name the server was added under, if not
+ *  `sessionpipe`: the session's `--channels` list names it so. It ends when Claude Code
+ *  closes the server, whether or not a wait is parked on the daemon. */
+export declare function channelMain(argv: string[], io: typeof channelIo, parent?: () => string[]): Promise<void>;
 /** Give a sink the key a receiver handed over at pairing. A sink for the receiver that
  *  has a key keeps it ("kept"); one without a key gets this one ("filled"); otherwise a
  *  new sink at `tier` ("added"). */

package/dist/control/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/control/cli.ts"],"names":[],"mappings":"AAKA,OAAO,EAWL,KAAK,IAAI,EAEV,MAAM,mBAAmB,CAAC;AA0B3B,eAAO,MAAM,YAAY,kfAIkE,CAAC;AAuD5F;;yFAEyF;AACzF,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EAAE,EACjB,EAAE,EAAE,KAAK,GAAG,QAAQ,EACpB,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,SAAe,GAClB;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAkCvC;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkK3G;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GAAG,MAAM,EAAE,CAK3F;AAuJD;;kFAEkF;AAClF,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,IAAI,CASlE;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CASvF;AAED;;oCAEoC;AACpC,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CASjH"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/control/cli.ts"],"names":[],"mappings":"AAKA,OAAO,EAWL,KAAK,IAAI,EAEV,MAAM,mBAAmB,CAAC;AA4B3B,eAAO,MAAM,YAAY,ulBAK2E,CAAC;AAuDrG;;yFAEyF;AACzF,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EAAE,EACjB,EAAE,EAAE,KAAK,GAAG,QAAQ,EACpB,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,SAAe,GAClB;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAkCvC;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqK3G;AAED,2EAA2E;AAC3E,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,GAAG,MAAM,EAAE,CAK3F;AAwKD;;kFAEkF;AAClF,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,IAAI,CASlE;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CASvF;AAED;kDACkD;AAClD,eAAO,MAAM,SAAS;IACpB,KAAK,QAAM,MAAM,CAAC,cAAc;IAChC,KAAK,MAAM,MAAM,KAAG,IAAI;IACxB,GAAG,MAAM,MAAM,KAAG,IAAI;IACtB,IAAI,SAAS,MAAM,KAAG,IAAI;CAC3B,CAAC;AAEF;;wEAEwE;AACxE,wBAAsB,WAAW,CAC/B,IAAI,EAAE,MAAM,EAAE,EACd,EAAE,EAAE,OAAO,SAAS,EACpB,MAAM,GAAE,MAAM,MAAM,EAAe,GAClC,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;oCAEoC;AACpC,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CASjH"}

package/dist/control/daemon.d.ts

@@ -1,8 +1,10 @@
 import { claudeControl, type HarnessAccount, type Login, type RunOptions, type RunResult } from "@sessionpipe/core";
 import { type RunLevel, type StartPermission } from "@sessionpipe/core/control";
 import type { Pool } from "../pool/index.js";
+import * as inbox from "./inbox.js";
+import { type AskRequest } from "./local.js";
 import { type DeliveryMode } from "./route.js";
-import { type ControlConfig, type PairedReceiver } from "./store.js";
+import { type Ack, type ControlConfig, type PairedReceiver } from "./store.js";
 type Caps = claudeControl.Caps;
 /** One harness's entry in the hello's `start` (CONTROL.md §2). */
 export interface StartEntry {
@@ -60,8 +62,38 @@ export interface SdkHost {
         model?: string;
         configDir?: string;
         allowedTools?: string[];
+        /** Over the process's own: an ask's lineage for the session's hooks (CONTROL.md §13). */
+        env?: Record<string, string>;
     }): SdkSession;
 }
+/** Where a command's acks go, besides a paired receiver (store.ts PairedReceiver: the ack
+ *  outbox, then `POST /ack`): an asker on the local socket (CONTROL.md §13) or a handoff's
+ *  relay (§6 `reply_to`), each a sink of the daemon's own. The start, prompt and headless
+ *  paths are written once, against a Caller, so a run acks the same way wherever it came
+ *  from and there is no second copy of any of them. */
+export interface AckSink {
+    /** Names it in the log and the acks' `receiver`. */
+    label: string;
+    /** The text as the session gets it: a new session's first message, or a later one. */
+    frame(text: string, first: boolean): string;
+    /** What a child the run starts gets in its environment, over the job's own. */
+    env?: Record<string, string>;
+    /** The answer so far (§10 `progress`), redacted and capped like an ack's reply. */
+    progress(text: string, seq: number): void;
+    /** `taken`, then exactly one final outcome: the acks a receiver would get. */
+    ack(a: Omit<Ack, "receiver">): void;
+    /** False when the message reaching the session is the whole job and its reply isn't
+     *  waited for (a relay). */
+    wantsReply: boolean;
+}
+/** An ask's fields as the wire has them (local.ts), checked before any rule: what is
+ *  wrong, in words, or null. The CLI builds them, but the socket takes any process of
+ *  the person's own, so nothing here is trusted by shape. */
+export declare function askProblem(req: AskRequest): string | null;
+/** A run's refusal (CONTROL.md §5, §6) in the ask's own words (§13): a session the daemon
+ *  can't deliver to falls under the `harness` rule, a level or model it won't run with is
+ *  the request's own fault; the start caps keep their name. */
+export declare const askCode: (code: string | undefined) => string;
 export interface DaemonDeps {
     now: () => number;
     fetch: typeof fetch;
@@ -93,6 +125,10 @@ export interface DaemonDeps {
     codexModels?: () => string[];
     run: (bin: string, args: string[], o: RunOptions) => Promise<RunResult>;
     sdk?: SdkHost | null;
+    /** How a message is written into a live session's own inbox (inbox.ts). A test passes
+     *  its own, to drive the one refusal that can only happen between the look and the
+     *  first byte: the session ending in between. */
+    writeInbox?: typeof inbox.writeInbox;
     /** How long to follow a live session's turn for an in-place answer (tests shorten it). */
     answerWaitMs?: number;
     /** Close an SDK session idle this long (a held session costs ~300 MB). */
@@ -158,6 +194,11 @@ export interface Status {
     delivered: Record<string, number>;
     /** What a start may carry per harness, as the last hello said (CONTROL.md §2). */
     start: Record<string, StartEntry>;
+    /** Whether a session here may ask another agent, and which agents (CONTROL.md §13). */
+    ask: {
+        on: boolean;
+        harnesses: string[];
+    };
     /** Null when the daemon could restart now (nothing in hand); otherwise what it holds. */
     busy: string | null;
     update?: unknown;
@@ -185,6 +226,7 @@ export declare const LIMITS: {
     readonly startConcurrent: 2;
     readonly startPerHour: 10;
     readonly headless: 3;
+    readonly copiesPerDay: 10;
 };
 export declare class ControlDaemon {
     private cfg;
@@ -200,6 +242,23 @@ export declare class ControlDaemon {
     private readonly inflight;
     private readonly queues;
     private readonly lastEnd;
+    /** Per session: who is waiting for its next `UserPromptSubmit` — the first half of an
+     *  in-place delivery's proof. At most ONE per session: two waiters would both be
+     *  settled by one turn, and that turn's answer acked as the answer to both. */
+    private readonly prompted;
+    /** Per session: a message written into its own inbox that it has not taken yet. The
+     *  receiving inbox parks one whose class it can't match and drops it after five
+     *  minutes, and a hold can be RELEASED later (a mode change does it), so for that long
+     *  another write would mean the person's words arriving twice (CONTROL.md §6.3). */
+    private readonly parked;
+    /** `sessionpipe channel` processes that took a message and no turn began for it:
+     *  Claude Code drops a channel's notification in silence when it didn't register the
+     *  channel (a `--print` session, an organization that turns channels off), so this one
+     *  would swallow every message after it too. A new channel process starts trusted. */
+    private readonly mutedChannels;
+    /** Things said once in the log however many acks carry them (a mode the settings turn
+     *  off): the person reads the ack, the machine's log doesn't need it every time. */
+    private readonly warned;
     private state;
     private running;
     private readonly polling;
@@ -237,6 +296,14 @@ export declare class ControlDaemon {
      *  for that session that came in the same poll waits for its start rather than
      *  finding no session (2026-10-04: a start and a prompt queued back to back). */
     private readonly startsPending;
+    /** Commands with `reply_to` in hand, by message id: their reply follows into that
+     *  session after their own final ack (CONTROL.md §6). */
+    private readonly handoffs;
+    /** Asks in hand, by ask id: who asked whom. The depth and loop rules (§13) count from
+     *  here as well as from the chain the caller reports, which is the caller's own to
+     *  clear: B, asked by A, can't ask A back from a clean environment, and C, asked by B
+     *  under A, can't ask on by forgetting its chain. */
+    private readonly asks;
     constructor(cfg: ControlConfig, dir: string, sock: string, deps: DaemonDeps);
     start(): Promise<void>;
     /** `leaveSocket`: the socket path is another daemon's now. Closing a Unix-socket
@@ -282,6 +349,7 @@ export declare class ControlDaemon {
     private scheduleHello;
     /** Read each receiver's well-known for its session tools (at start, then with every hello). */
     private refreshSessionTools;
+    /** A receiver's own MCP servers; an ask or a relay brings none. */
     private allowedFor;
     private helloAll;
     private post;
@@ -298,6 +366,15 @@ export declare class ControlDaemon {
      *  (the harness's id and the start's folder); one the hooks reported is Codex's
      *  rollout (its `session_meta` cwd) or, for the others, the folder its hooks gave. */
     private placeDriven;
+    /** Keep what a session's own hooks said its permission mode is (CONTROL.md §6, The
+     *  session's mode). The latest word wins, and a mode this daemon has no meaning for
+     *  is not kept at all.
+     *
+     *  The compare and the write are one step of this process's own event loop — one
+     *  daemon serves a machine, and it is the one holding the socket — so a burst of hook
+     *  events cannot interleave a read with a write; and an unchanged mode writes nothing,
+     *  which matters because a hook fires for every tool call of every session. */
+    private recordMode;
     /** The folder the worker recorded for a session from its hooks (run.ts, facts). */
     private factsCwd;
     /** A driven harness, as the person knows it. */
@@ -342,12 +419,67 @@ export declare class ControlDaemon {
     private allowed;
     private permission;
     private cancel;
+    /** The permission mode a session's own hooks last reported, or null. Keyed by the
+     *  session ref the hooks report under, which for a copy is the copy's own. */
+    private modeOf;
+    /** The permission class THIS MACHINE would declare to a session in `configDir`
+     *  (CONTROL.md §6.3) — never the target's own, which it would then be echoing back,
+     *  leaving the receiver's own check with nothing to compare.
+     *
+     *  `bypass` only where the person set this machine to `inherit`, so nothing here picks
+     *  a mode at all, and that account's own default is bypass and is allowed to be. Every
+     *  other machine is `prompting`: on `safe` and `auto` the daemon names a mode of its
+     *  own for the runs it starts, so it is not a machine that leaves sessions as it finds
+     *  them. */
+    private machineClass;
+    /** What the `inbox` lane found when it looked at this session, BEFORE anything was
+     *  written (CONTROL.md §6.3): the one process that holds it and the class to declare,
+     *  or why not. `null` means the lane does not apply at all.
+     *
+     *  EVERY reason not to write belongs here rather than at the write site: a refusal
+     *  found here leaves `inbox` out of the ladder, so the message takes the next rung,
+     *  while one found after the lane was chosen would end the message. */
+    private inboxLook;
+    /** A write into this session's inbox that it has not taken, inside the receiving
+     *  inbox's own hold window. Kept in the daemon's state, not in memory: an update
+     *  restarts the daemon, and a resend inside the window would otherwise put a second
+     *  copy of the person's words in the same inbox (CONTROL.md §6.3). */
+    private parkedFor;
+    /** How long ago that message was written. `park` writes the stamp and `readState`
+     *  admits only one that parses, so there is no third answer. */
+    private heldFor;
+    private park;
+    private unpark;
+    /** The daemon's own state, written where a restart will read it again. A failure is
+     *  logged and nothing else: it costs a record, never a delivery. */
+    private saveState;
+    /** Resolves true when this session begins a turn of its own within `ms` — the first
+     *  half of the proof that a message written to its inbox became a prompt (§6.3). Null
+     *  when one message is already waiting on this session's next turn. */
+    private awaitPrompted;
+    /** Did the session take the message that was just handed over, or only begin some
+     *  other turn? `UserPromptSubmit` says a turn began; it carries no text, so the proof
+     *  that it is OUR turn is the row the harness wrote for it — a `user` row whose origin
+     *  is a peer (the inbox) or a channel (`sessionpipe channel`), carrying this message's
+     *  own mark. Anything else (the person typing in the same second, another local
+     *  process's message) means the message is still parked, and the answer to THEIR
+     *  prompt must not be sent back as the answer to this one. */
+    private tookIt;
+    /** A parked waiter that may take a message now. `sessionpipe wait` always may: the
+     *  session asked for it. A channel only while the session is idle, and never one that
+     *  already swallowed a message (CONTROL.md §8): Claude Code folds a channel message that
+     *  arrives during a turn into that turn as a queued command, which the model need not
+     *  answer (on 2.1.314 it didn't), so a running turn takes the message at its Stop. */
+    private waiterFits;
     private view;
     private prompt;
     /** One message through a held session; one whose process left is let go of, so the
      *  next message reopens the session instead of finding it closed. */
     private sendHeld;
-    /** A turn message whose Stop never took it: route again, now that it isn't mid-turn. */
+    /** A turn message whose Stop never took it: route again, now that it isn't mid-turn.
+     *  In the session's own delivery queue, like every other prompt — two messages
+     *  rerouted at one Stop would otherwise both take an in-place lane at once, and one
+     *  turn's answer would be acked as the answer to both. */
     private reroute;
     /** Jobs for one session (and its copy) run one at a time, in order. */
     private serial;
@@ -367,6 +499,14 @@ export declare class ControlDaemon {
      *  becomes its alias, so the next message resumes it. */
     private drive;
     private headless;
+    /** What the ack says about the mode a cold run turned out to have (CONTROL.md §6
+     *  `prompt`): what the new turn's own row recorded, which is what it ran in rather
+     *  than what was asked for — and, on a machine set to auto whose Claude Code has auto
+     *  turned off, that the turn ran in Manual mode and what fixes it. */
+    private ranNote;
+    /** Why no copy may be made right now, or null. A copy replays a whole conversation, so
+     *  the machine caps them itself whatever a receiver sends. */
+    private copyLimit;
     private outcome;
     private addKey;
     /** Where the session's transcript ends right now: its answer starts after this. */
@@ -408,6 +548,53 @@ export declare class ControlDaemon {
      *  is acked `failed` with code `file`, nothing is kept, no session starts and no
      *  message is delivered. */
     private attached;
+    /** The text as the session gets it: a receiver's framing (route.ts), or the sink's own. */
+    private framed;
+    /** What a child run gets in its environment beyond the job's: its lineage, for its
+     *  hooks to stamp `delegated_by` (§13). An ask's sink says who asked; a receiver's
+     *  command with `reply_to` was asked, as far as the child knows, by that session (§6). */
+    private childEnv;
+    /** An ask's `permission` on a prompt (CONTROL.md §13; an ask always names one, safe
+     *  unless it says read) caps the run of the session it names: narrower than the
+     *  session's own level, never wider. A receiver's prompt carries none (the verifier
+     *  refuses it), so this leaves it alone. */
+    private capped;
+    /** The agents an ask may start here: the hello's harnesses that run headlessly. */
+    private askable;
+    /** A session under the name the daemon itself knows it by: the copy a Claude Code
+     *  session's later runs moved to, the id a driven harness picked behind the daemon's
+     *  alias — so a Codex session asked under its start's name and asking under its own
+     *  rollout id is one session to the depth and loop rules. */
+    private realRef;
+    /** How many asks in hand `from` is already answering: the ask that targets it, the
+     *  one that targets that ask's asker, and so on up. Nothing for nobody's session. */
+    private askDepth;
+    /** `sessionpipe ask`: a session on this machine hands a task to another agent and gets
+     *  the answer back on this connection. The trust boundary is the socket's, the one
+     *  `wait` and the hooks cross (a process of the person's own user); nothing a receiver
+     *  sends gets here. Every rule in order, each with its own refusal; then the run goes
+     *  down the same start and prompt paths a receiver's command takes, acked to the
+     *  socket, and its events go on the asking session. */
+    private onAsk;
+    /** The asker's end of an ask: the run's acks as the wire replies (local.ts), in order
+     *  and exactly one final; the child's environment and framing; the events on the
+     *  asking session when it is known. The connection is closed after the final reply. */
+    private askSink;
+    /** A command with `reply_to`: remembered until its final ack (finish()), and announced
+     *  on the session that gets the answer, as an ask is on the session that asked. */
+    private handoff;
+    /** The reply into `reply_to`, once the command's own final ack is out: framed as a
+     *  handoff's answer and routed like any message (§6 modes, the folder rule, never a
+     *  resume of a live session), acked to a sink that only notes how it went. Then
+     *  delegation.ended on `reply_to`, `relayed` saying delivered, unsupported or failed. */
+    private relay;
+    /** delegation.started / delegation.ended (PROTOCOL.md §4) on a session here, the way a
+     *  hook's events travel (run.ts runJob): the session block the worker last saved, a seq
+     *  of its own from the outbox under the session's lock, redacted at rest, then every
+     *  sink drained from its cursor. Best effort: a lock that stays taken or a disk that
+     *  won't write is logged, never a reason to hold the ask or the relay. */
+    private emitDelegation;
+    private record;
     private closeIdleSdk;
 }
 export {};

package/dist/control/daemon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../src/control/daemon.ts"],"names":[],"mappings":"AAcA,OAAO,EAIL,aAAa,EAGb,KAAK,cAAc,EAInB,KAAK,KAAK,EAEV,KAAK,UAAU,EACf,KAAK,SAAS,EAKf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAML,KAAK,QAAQ,EACb,KAAK,eAAe,EAErB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAM7C,OAAO,EAAE,KAAK,YAAY,EAA6D,MAAM,YAAY,CAAC;AAC1G,OAAO,EAGL,KAAK,aAAa,EAIlB,KAAK,cAAc,EAMpB,MAAM,YAAY,CAAC;AAcpB,KAAK,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC;AA+B/B,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,sFAAsF;IACtF,UAAU,EAAE,QAAQ,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAsDD,6DAA6D;AAC7D,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAClF,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;0EAC0E;AAC1E,MAAM,WAAW,UAAU;IACzB,+EAA+E;IAC/E,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,KAAK,IAAI,IAAI,CAAC;IACd,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B,sFAAsF;IACtF,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AACD,MAAM,WAAW,OAAO;IACtB,KAAK,CAAC,CAAC,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,iGAAiG;QACjG,UAAU,EAAE,QAAQ,CAAC;QACrB,+CAA+C;QAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,GAAG,UAAU,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACjD;0DACsD;IACtD,KAAK,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC1B,sEAAsE;IACtE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C;mEAC+D;IAC/D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAClE;uCACmC;IACnC,SAAS,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAC3B;mDAC+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,cAAc,EAAE,CAAC;IAClC,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAC7B,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxE,GAAG,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB;;yFAEqF;IACrF,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C;iEAC6D;IAC7D,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,cAAc,KAAK,MAAM,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B;oCACgC;IAChC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1B,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC;IAC7B,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B;;8EAE0E;IAC1E,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED,6EAA6E;AAC7E,qBAAa,aAAc,SAAQ,KAAK;IAC1B,QAAQ,CAAC,KAAK,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE;IAA9D,YAAqB,KAAK,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAI7D;CACF;AAgCD,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE;QACT,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,gFAAgF;QAChF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,gFAAgF;QAChF,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,EAAE,CAAC;IACJ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9C,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,yFAAyF;IACzF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,6FAA6F;IAC7F,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,OAAO,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,OAAO,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,0EAA0E;QAC1E,cAAc,CAAC,EAAE,IAAI,CAAC;KACvB,CAAC;CACH;AAED;;sFAEsF;AACtF;;;8CAG8C;AAC9C,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAKrD;AAED,eAAO,MAAM,MAAM;aAAK,eAAe,EAAE,CAAC;aAAE,YAAY,EAAE,EAAE;aAAE,QAAQ,EAAE,CAAC;CAAW,CAAC;AAErF,qBAAa,aAAa;IAiDtB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAnDvB,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA2B;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAC1E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;IACxD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8B;IACxD,OAAO,CAAC,UAAU,CAA+B;IACjD,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+B;IAC5D;;;mFAG+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsB;IAClD,wFAAwF;IACxF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmD;IAC1E,yEAAyE;IACzE,OAAO,CAAC,MAAM,CAAyD;IACvE,iEAAiE;IACjE,OAAO,CAAC,SAAS,CAAK;IACtB;qEACiE;IACjE,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,QAAQ,CAA+B;IAC/C;gDAC4C;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;IAC/C,4FAA4F;IAC5F,OAAO,CAAC,OAAO,CAAU;IACzB;;qFAEiF;IACjF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoC;IAElE,YACU,GAAG,EAAE,aAAa,EACT,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAMlC;IAIK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAqB3B;IAED;;+CAE2C;IACrC,IAAI,CAAC,CAAC,GAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B3D;IAED;;2FAEuF;YACzE,QAAQ;IAmBtB;8BAC0B;IAC1B,WAAW,IAAI,IAAI,CAElB;IAED;;;;2EAIuE;IACvE,IAAI,IAAI,MAAM,GAAG,IAAI,CAcpB;IAED;mFAC+E;IAC/E,WAAW,IAAI,IAAI,CAQlB;IAED,YAAY,IAAI,IAAI,CAInB;IAED;mFAC+E;YACjE,WAAW;IAwBzB,MAAM,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAQ/B;IAED,MAAM,IAAI,MAAM,CA6Bf;IAED,OAAO,CAAC,WAAW;IAenB;0FACsF;YACxE,MAAM;IAoBpB,OAAO,CAAC,MAAM;IAuBd,OAAO,CAAC,KAAK;IAMb,OAAO,CAAC,MAAM;IAgBd,OAAO,CAAC,SAAS;IAiEjB,iDAAiD;IACjD,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,OAAO;YA+BD,QAAQ;IA6JtB,OAAO,CAAC,aAAa;IASrB,+FAA+F;YACjF,mBAAmB;IAmBjC,OAAO,CAAC,UAAU;YAIJ,QAAQ;YAgDR,IAAI;IAiBlB,OAAO,CAAC,MAAM;IAgBd,OAAO,CAAC,QAAQ,CAAS;YACX,SAAS;IA+BjB,MAAM,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAkCzD;YAEa,cAAc;IAiF5B;;6CAEyC;IACzC,OAAO,CAAC,KAAK;IAoBb;;0FAEsF;IACtF,OAAO,CAAC,WAAW;IAwBnB,mFAAmF;IACnF,OAAO,CAAC,QAAQ;IAUhB,gDAAgD;IAChD,OAAO,CAAC,KAAK;IAKb,OAAO,CAAC,OAAO;IAIf;+FAC2F;IAC3F,OAAO,CAAC,QAAQ;IAchB,gGAAgG;IAChG,OAAO,CAAC,KAAK;IAQb,OAAO,CAAC,MAAM;IA8Bd,8FAA8F;IAC9F,OAAO,CAAC,QAAQ;IAQhB;uEACmE;IACnE,OAAO,CAAC,SAAS;IAWjB;yEACqE;IACrE,OAAO,CAAC,SAAS;IAIjB;;iFAE6E;IAC7E,OAAO,CAAC,UAAU;IAqBlB,kFAAkF;IAClF,OAAO,CAAC,YAAY;IASpB;;kFAE8E;IAC9E,OAAO,CAAC,WAAW;IA2CnB,sFAAsF;IACtF,OAAO,CAAC,YAAY;IAUpB;;4FAEwF;IACxF,OAAO,CAAC,YAAY;IAWpB,+EAA+E;IAC/E,OAAO,CAAC,OAAO;IAIf,2FAA2F;IAC3F,OAAO,CAAC,SAAS;IAIjB;yFACqF;IACrF,OAAO,CAAC,OAAO;IAoBf,OAAO,CAAC,UAAU;YAwBJ,MAAM;IAYpB,OAAO,CAAC,IAAI;YA+CE,MAAM;IAsDpB;yEACqE;YACvD,QAAQ;IAStB,wFAAwF;YAC1E,OAAO;IAarB,uEAAuE;IACvE,OAAO,CAAC,MAAM;IAUd;8BAC0B;YACZ,YAAY;IAQ1B,qFAAqF;YACvE,QAAQ;IAWtB,4FAA4F;YAC9E,aAAa;IAe3B;6EACyE;YAC3D,YAAY;IAyB1B;;;6DAGyD;YAC3C,KAAK;YA+DL,QAAQ;IAoEtB,OAAO,CAAC,OAAO;IAwBf,OAAO,CAAC,MAAM;IAiCd,mFAAmF;IACnF,OAAO,CAAC,UAAU;IAOlB;;;2FAGuF;IACvF,OAAO,CAAC,YAAY;IA8BpB;6EACyE;IACzE,OAAO,CAAC,YAAY;IAgBpB,0EAA0E;YAC5D,MAAM;IAYpB,OAAO,CAAC,MAAM;IAUd,mFAAmF;YACrE,IAAI;YAWJ,YAAY;YAwBZ,QAAQ;IAoFtB,sFAAsF;IACtF,OAAO,CAAC,WAAW;IAWnB;gFAC4E;YAC9D,WAAW;IAsCzB;;;uEAGmE;YACrD,QAAQ;IA0CtB;;wFAEoF;YACtE,SAAS;IAmCvB,OAAO,CAAC,OAAO;IAqBf;;;;;gCAK4B;YACd,QAAQ;IA+BtB,OAAO,CAAC,YAAY;CAWrB"}
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../src/control/daemon.ts"],"names":[],"mappings":"AAsBA,OAAO,EAIL,aAAa,EAKb,KAAK,cAAc,EAInB,KAAK,KAAK,EAKV,KAAK,UAAU,EACf,KAAK,SAAS,EAWf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAQL,KAAK,QAAQ,EACb,KAAK,eAAe,EAGrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAI7C,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,KAAK,UAAU,EAA2C,MAAM,YAAY,CAAC;AAGtF,OAAO,EAGL,KAAK,YAAY,EAYlB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,GAAG,EAGR,KAAK,aAAa,EAKlB,KAAK,cAAc,EAOpB,MAAM,YAAY,CAAC;AAmBpB,KAAK,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC;AAgC/B,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,sFAAsF;IACtF,UAAU,EAAE,QAAQ,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAmFD,6DAA6D;AAC7D,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAClF,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;0EAC0E;AAC1E,MAAM,WAAW,UAAU;IACzB,+EAA+E;IAC/E,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/D,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,KAAK,IAAI,IAAI,CAAC;IACd,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAC7B,sFAAsF;IACtF,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AACD,MAAM,WAAW,OAAO;IACtB,KAAK,CAAC,CAAC,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,iGAAiG;QACjG,UAAU,EAAE,QAAQ,CAAC;QACrB,+CAA+C;QAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,yFAAyF;QACzF,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC9B,GAAG,UAAU,CAAC;CAChB;AAED;;;;uDAIuD;AACvD,MAAM,WAAW,OAAO;IACtB,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5C,+EAA+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,mFAAmF;IACnF,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,8EAA8E;IAC9E,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,IAAI,CAAC;IACpC;gCAC4B;IAC5B,UAAU,EAAE,OAAO,CAAC;CACrB;AAwBD;;6DAE6D;AAC7D,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAoBzD;AAED;;+DAE+D;AAC/D,eAAO,MAAM,OAAO,SAAU,MAAM,GAAG,SAAS,KAAG,MAKzB,CAAC;AAS3B,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,KAAK,CAAC;IACpB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,MAAM;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACjD;0DACsD;IACtD,KAAK,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC1B,sEAAsE;IACtE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C;mEAC+D;IAC/D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAClE;uCACmC;IACnC,SAAS,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAC3B;mDAC+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,cAAc,EAAE,CAAC;IAClC,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAC7B,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACxE,GAAG,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB;;qDAEiD;IACjD,UAAU,CAAC,EAAE,OAAO,KAAK,CAAC,UAAU,CAAC;IACrC,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB;;yFAEqF;IACrF,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C;iEAC6D;IAC7D,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,cAAc,KAAK,MAAM,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B;oCACgC;IAChC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1B,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC;IAC7B,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B;;8EAE0E;IAC1E,IAAI,CAAC,EAAE,IAAI,CAAC;CACb;AAED,6EAA6E;AAC7E,qBAAa,aAAc,SAAQ,KAAK;IAC1B,QAAQ,CAAC,KAAK,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE;IAA9D,YAAqB,KAAK,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAI7D;CACF;AAuCD,MAAM,WAAW,MAAM;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE;QACT,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,gFAAgF;QAChF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,gFAAgF;QAChF,gBAAgB,EAAE,MAAM,CAAC;QACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,EAAE,CAAC;IACJ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC9C,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,uFAAuF;IACvF,GAAG,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC1C,yFAAyF;IACzF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,6FAA6F;IAC7F,IAAI,CAAC,EAAE;QACL,EAAE,EAAE,OAAO,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,OAAO,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,0EAA0E;QAC1E,cAAc,CAAC,EAAE,IAAI,CAAC;KACvB,CAAC;CACH;AAED;;sFAEsF;AACtF;;;8CAG8C;AAC9C,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAKrD;AAED,eAAO,MAAM,MAAM;aAAK,eAAe,EAAE,CAAC;aAAE,YAAY,EAAE,EAAE;aAAE,QAAQ,EAAE,CAAC;aAAE,YAAY,EAAE,EAAE;CAAW,CAAC;AAEvG,qBAAa,aAAa;IA0EtB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IA5EvB,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA2B;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAiC;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+C;IAC1E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAC9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD;;mFAE+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IACrE;;;wFAGoF;IACpF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiD;IACxE;;;0FAGsF;IACtF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD;wFACoF;IACpF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;IACxD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8B;IACxD,OAAO,CAAC,UAAU,CAA+B;IACjD,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,sFAAsF;IACtF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+B;IAC5D;;;mFAG+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,UAAU,CAAgB;IAClC,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsB;IAClD,wFAAwF;IACxF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmD;IAC1E,yEAAyE;IACzE,OAAO,CAAC,MAAM,CAAyD;IACvE,iEAAiE;IACjE,OAAO,CAAC,SAAS,CAAK;IACtB;qEACiE;IACjE,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,QAAQ,CAA+B;IAC/C;gDAC4C;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;IAC/C,4FAA4F;IAC5F,OAAO,CAAC,OAAO,CAAU;IACzB;;qFAEiF;IACjF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAoC;IAClE;6DACyD;IACzD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD;;;yDAGqD;IACrD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0D;IAE/E,YACU,GAAG,EAAE,aAAa,EACT,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,EAMlC;IAIK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAqB3B;IAED;;+CAE2C;IACrC,IAAI,CAAC,CAAC,GAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B3D;IAED;;2FAEuF;YACzE,QAAQ;IAmBtB;8BAC0B;IAC1B,WAAW,IAAI,IAAI,CAElB;IAED;;;;2EAIuE;IACvE,IAAI,IAAI,MAAM,GAAG,IAAI,CAcpB;IAED;mFAC+E;IAC/E,WAAW,IAAI,IAAI,CAQlB;IAED,YAAY,IAAI,IAAI,CAInB;IAED;mFAC+E;YACjE,WAAW;IAwBzB,MAAM,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CAQ/B;IAED,MAAM,IAAI,MAAM,CA8Bf;IAED,OAAO,CAAC,WAAW;IAenB;0FACsF;YACxE,MAAM;IAoBpB,OAAO,CAAC,MAAM;IAuBd,OAAO,CAAC,KAAK;IAMb,OAAO,CAAC,MAAM;IAiBd,OAAO,CAAC,SAAS;IA6EjB,iDAAiD;IACjD,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,OAAO;YA8CD,QAAQ;IA6JtB,OAAO,CAAC,aAAa;IASrB,+FAA+F;YACjF,mBAAmB;IAmBjC,mEAAmE;IACnE,OAAO,CAAC,UAAU;YAIJ,QAAQ;YAuDR,IAAI;IAiBlB,OAAO,CAAC,MAAM;IA8Bd,OAAO,CAAC,QAAQ,CAAS;YACX,SAAS;IA+BjB,MAAM,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAkCzD;YAEa,cAAc;IAqF5B;;6CAEyC;IACzC,OAAO,CAAC,KAAK;IA8Bb;;0FAEsF;IACtF,OAAO,CAAC,WAAW;IAwBnB;;;;;;;mFAO+E;IAC/E,OAAO,CAAC,UAAU;IAUlB,mFAAmF;IACnF,OAAO,CAAC,QAAQ;IAUhB,gDAAgD;IAChD,OAAO,CAAC,KAAK;IAKb,OAAO,CAAC,OAAO;IAIf;+FAC2F;IAC3F,OAAO,CAAC,QAAQ;IAchB,gGAAgG;IAChG,OAAO,CAAC,KAAK;IAQb,OAAO,CAAC,MAAM;IA8Bd,8FAA8F;IAC9F,OAAO,CAAC,QAAQ;IAQhB;uEACmE;IACnE,OAAO,CAAC,SAAS;IAWjB;yEACqE;IACrE,OAAO,CAAC,SAAS;IAIjB;;iFAE6E;IAC7E,OAAO,CAAC,UAAU;IAqBlB,kFAAkF;IAClF,OAAO,CAAC,YAAY;IASpB;;kFAE8E;IAC9E,OAAO,CAAC,WAAW;IA2CnB,sFAAsF;IACtF,OAAO,CAAC,YAAY;IAUpB;;4FAEwF;IACxF,OAAO,CAAC,YAAY;IAWpB,+EAA+E;IAC/E,OAAO,CAAC,OAAO;IAIf,2FAA2F;IAC3F,OAAO,CAAC,SAAS;IAIjB;yFACqF;IACrF,OAAO,CAAC,OAAO;IAoBf,OAAO,CAAC,UAAU;YAwBJ,MAAM;IAYpB;kFAC8E;IAC9E,OAAO,CAAC,MAAM;IAId;;;;;;;;gBAQY;IACZ,OAAO,CAAC,YAAY;IAMpB;;;;;;2EAMuE;IACvE,OAAO,CAAC,SAAS;IA6DjB;;;0EAGsE;IACtE,OAAO,CAAC,SAAS;IAQjB;oEACgE;IAChE,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,IAAI;IAKZ,OAAO,CAAC,MAAM;IAOd;wEACoE;IACpE,OAAO,CAAC,SAAS;IAUjB;;2EAEuE;IACvE,OAAO,CAAC,aAAa;IA8BrB;;;;;;kEAM8D;YAChD,MAAM;IAyBpB;;;;0FAIsF;IACtF,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,IAAI;YAsDE,MAAM;IAqJpB;yEACqE;YACvD,QAAQ;IAStB;;;8DAG0D;YAC5C,OAAO;IAerB,uEAAuE;IACvE,OAAO,CAAC,MAAM;IAUd;8BAC0B;YACZ,YAAY;IAQ1B,qFAAqF;YACvE,QAAQ;IAWtB,4FAA4F;YAC9E,aAAa;IAe3B;6EACyE;YAC3D,YAAY;IAsC1B;;;6DAGyD;YAC3C,KAAK;YAiEL,QAAQ;IAwHtB;;;0EAGsE;IACtE,OAAO,CAAC,OAAO;IAsBf;kEAC8D;IAC9D,OAAO,CAAC,SAAS;IAUjB,OAAO,CAAC,OAAO;IAwBf,OAAO,CAAC,MAAM;IAiCd,mFAAmF;IACnF,OAAO,CAAC,UAAU;IAOlB;;;2FAGuF;IACvF,OAAO,CAAC,YAAY;IAmCpB;6EACyE;IACzE,OAAO,CAAC,YAAY;IAUpB,0EAA0E;YAC5D,MAAM;IAYpB,OAAO,CAAC,MAAM;IAWd,mFAAmF;YACrE,IAAI;YAWJ,YAAY;YAwBZ,QAAQ;IA6FtB,sFAAsF;IACtF,OAAO,CAAC,WAAW;IAWnB;gFAC4E;YAC9D,WAAW;IAsCzB;;;uEAGmE;YACrD,QAAQ;IA0CtB;;wFAEoF;YACtE,SAAS;IAsCvB,OAAO,CAAC,OAAO;IAqBf;;;;;gCAK4B;YACd,QAAQ;IAmCtB,2FAA2F;IAC3F,OAAO,CAAC,MAAM;IAKd;;8FAE0F;IAC1F,OAAO,CAAC,QAAQ;IAKhB;;;gDAG4C;IAC5C,OAAO,CAAC,MAAM;IAKd,mFAAmF;IACnF,OAAO,CAAC,OAAO;IAMf;;;iEAG6D;IAC7D,OAAO,CAAC,OAAO;IAQf;yFACqF;IACrF,OAAO,CAAC,QAAQ;IAahB;;;;;2DAKuD;YACzC,KAAK;IA+HnB;;2FAEuF;IACvF,OAAO,CAAC,OAAO;IAgEf;uFACmF;IACnF,OAAO,CAAC,OAAO;IAyBf;;;6FAGyF;YAC3E,KAAK;IA4DnB;;;;8EAI0E;IAC1E,OAAO,CAAC,cAAc;YAaR,MAAM;IAwCpB,OAAO,CAAC,YAAY;CAWrB"}

package/dist/control/inbox.d.ts

@@ -0,0 +1,119 @@
+import net from "node:net";
+import type { claudeControl } from "@sessionpipe/core";
+type LiveRecord = claudeControl.LiveRecord;
+/** The only inbox protocol this code speaks. */
+export declare const PEER_PROTOCOL = 1;
+/** How long the daemon waits for the session's own turn to begin before it says the
+ *  message may be held (measured deliveries were sub-second; 340 ms end to end). */
+export declare const CONFIRM_MS = 8000;
+/** A registry row has to say this before anything is written: a message written into a
+ *  running turn joins that turn, which is the `turn` lane's job, not this one's. */
+export declare const IDLE_STATUS = "idle";
+/** What a registry row says about a session Claude Code holds open for the person. Every
+ *  row that publishes an inbox carries it — terminal windows and claude.ai bridge workers
+ *  alike, 47 of 47 measured — and a row that doesn't is not ours to write to, since a
+ *  registry row is a file any process of this uid can write. A desktop-app session
+ *  publishes no inbox at all (none in three sweeps of 47–53 rows), so it is refused here
+ *  like anything else without one. */
+export declare const INTERACTIVE_KIND = "interactive";
+export type PeerClass = "bypass" | "prompting";
+/** What an envelope says, or null when the text is not one. */
+export declare function readEnvelope(s: string): {
+    attrs: Record<string, string>;
+    body: string;
+} | null;
+/** The envelope to write, or null when this message cannot be put in one that reads
+ *  back as itself — a body that closes the tag early, say. The round trip is the check:
+ *  the receiver parses what it is sent by rebuilding it, so anything that does not
+ *  come back byte for byte would be parked unread rather than refused out loud. */
+export declare function envelope(o: {
+    fromName?: string;
+    fromMode: PeerClass;
+    body: string;
+}): string | null;
+/** Who the message is from, for `from-name`: the board the person typed it on, by the
+ *  receiver's own host. The session's window shows it, so it is cleaned to what can sit
+ *  in an attribute and read as a name — no quotes or angle brackets to break out of the
+ *  envelope, no control or formatting characters to hide what it says, and short. */
+export declare function senderName(receiver: string): string;
+export declare const cleanName: (s: string) => string;
+/** Why this live session may not be written to, or null when it may. Everything here is
+ *  read before the first byte (rule 2 above), and every refusal means the lane does not
+ *  apply — the message takes the next rung, which is not the same as failing. */
+export declare function vetInbox(rec: LiveRecord | null, o: {
+    /** The session's own permission class, from the mode its hooks reported. */
+    sessionClass: PeerClass | null;
+    /** The class this machine would declare. The two must be equal: a declaration the
+     *  receiver cannot match is parked, and one it can is still only a declaration. */
+    machineClass: PeerClass | null;
+    /** The account the session's transcript was resolved in: the lane never crosses one. */
+    configDir?: string;
+    uid?: number | undefined;
+    platform?: NodeJS.Platform;
+    /** The process's real start time, to compare with the registry's. Null when it
+     *  can't be read, which is not by itself a refusal. */
+    procStart?: string | null;
+    alive?: (pid: number) => boolean;
+    stat?: (p: string) => {
+        isSocket: boolean;
+        uid: number;
+    } | null;
+    /** The inbox's auth token, asked for only off macOS, where the inbox cannot vet a
+     *  peer by its uid. Read HERE, before the lane is chosen: no key, no lane. */
+    token?: (() => string | null) | undefined;
+}): {
+    code: string;
+    detail: string;
+} | null;
+/** The same process, as two start times that may be spelled differently. Claude Code
+ *  writes `procStart` in UTC; a `ps` reading it back says the same instant, and this
+ *  accepts that instant however it is punctuated. Only a DIFFERENT instant is a
+ *  recycled pid. */
+export declare function sameStart(a: string, b: string): boolean;
+/** The process's start time in the spelling the registry uses (`procStart`), so a
+ *  recycled pid can be told from the process that filed the row. Best effort: a `ps`
+ *  this platform spells differently is "don't know", not a refusal. */
+export declare function procStartOf(pid: number, run?: (pid: number) => string): string | null;
+/** The token that lets a line in where the inbox asks for one (`<pid>.<sha>.key`, the
+ *  same uid, 0600). macOS vets the peer's uid instead and needs none. */
+export declare function peerToken(rec: LiveRecord): string | null;
+export type WriteResult = {
+    written: true;
+    bytes: number;
+} | {
+    code: string;
+    detail: string;
+};
+/** Write ONE message into a live session's inbox and nothing else. `priority: "later"`
+ *  on purpose: the message becomes a turn of its own rather than joining one in flight.
+ *
+ *  Vetting happens here too, before the socket is opened; once a byte is written the
+ *  result is `written`, whatever the session then does with it — the caller confirms
+ *  delivery by the row the session writes for the turn, and never falls through to
+ *  another lane. No `session_id` is sent: the measured deliveries carried none, and the
+ *  one process that holds the session is already settled by the registry row and its
+ *  start time. */
+export declare function writeInbox(rec: LiveRecord | null, o: {
+    /** The text the person typed, already framed for the session (route.ts). */
+    body: string;
+    /** Who it is from, as the session's window shows it (`senderName`). */
+    fromName?: string;
+    sessionClass: PeerClass | null;
+    machineClass: PeerClass | null;
+    configDir?: string;
+    timeoutMs?: number;
+    /** Off macOS: the inbox may ask for this first. Read with `peerToken`. */
+    token?: string | null;
+    platform?: NodeJS.Platform;
+    procStart?: string | null;
+    /** Test seams. */
+    uid?: number | undefined;
+    alive?: (pid: number) => boolean;
+    stat?: (p: string) => {
+        isSocket: boolean;
+        uid: number;
+    } | null;
+    connect?: (p: string) => net.Socket;
+}): Promise<WriteResult>;
+export {};
+//# sourceMappingURL=inbox.d.ts.map

package/dist/control/inbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../../src/control/inbox.ts"],"names":[],"mappings":"AAyBA,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvD,KAAK,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC;AAE3C,gDAAgD;AAChD,eAAO,MAAM,aAAa,IAAI,CAAC;AAC/B;oFACoF;AACpF,eAAO,MAAM,UAAU,OAAQ,CAAC;AAChC;oFACoF;AACpF,eAAO,MAAM,WAAW,SAAS,CAAC;AAClC;;;;;sCAKsC;AACtC,eAAO,MAAM,gBAAgB,gBAAgB,CAAC;AAM9C,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;AAsB/C,+DAA+D;AAC/D,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAM9F;AAED;;;mFAGmF;AACnF,wBAAgB,QAAQ,CAAC,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAWnG;AAED;;;qFAGqF;AACrF,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,eAAO,MAAM,SAAS,MAAO,MAAM,KAAG,MASzB,CAAC;AAEd;;iFAEiF;AACjF,wBAAgB,QAAQ,CACtB,GAAG,EAAE,UAAU,GAAG,IAAI,EACtB,CAAC,EAAE;IACD,4EAA4E;IAC5E,YAAY,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/B;uFACmF;IACnF,YAAY,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/B,wFAAwF;IACxF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B;2DACuD;IACvD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChE;kFAC8E;IAC9E,KAAK,CAAC,EAAE,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;CAC3C,GACA;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAuDzC;AA0BD;;;oBAGoB;AACpB,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAKvD;AAED;;uEAEuE;AACvE,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAgB,GAAG,MAAM,GAAG,IAAI,CAO9F;AAcD;yEACyE;AACzE,wBAAgB,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAQxD;AAED,MAAM,MAAM,WAAW,GAAG;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAc9F;;;;;;;;kBAQkB;AAClB,wBAAsB,UAAU,CAC9B,GAAG,EAAE,UAAU,GAAG,IAAI,EACtB,CAAC,EAAE;IACD,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,SAAS,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,kBAAkB;IAClB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACjC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChE,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC;CACrC,GACA,OAAO,CAAC,WAAW,CAAC,CAgEtB"}