sliccy 5.36.0 → 5.37.1

package/dist/node-server/_cloud_core/src/operations/resume.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../../src/operations/resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,eAAe,EAIrB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAiB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;4FAEwF;IACxF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0EAA0E;IAC1E,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;kEAC8D;IAC9D,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAsCD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,eAAe,GACrB;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CA2BxE;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,YAAY,CAAC,CAyGvB"}
+{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../../src/operations/resume.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,eAAe,EAIrB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAiB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;4FAEwF;IACxF,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,0EAA0E;IAC1E,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;kEAC8D;IAC9D,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAsCD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,eAAe,GACrB;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CA2BxE;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,YAAY,CAAC,CA+FvB"}

package/dist/node-server/_cloud_core/src/operations/resume.js

@@ -94,20 +94,8 @@ export async function resumeCone(deps, opts) {
     let resumeIndex;
     // New: coneConfigDelta takes precedence — read existing files, merge, write both.
     if (opts.coneConfigDelta) {
-        let existingConeConfig = null;
-        try {
-            existingConeConfig = await handle.readFile('/slicc/cone-config.json');
-        }
-        catch {
-            existingConeConfig = null;
-        }
-        let existingSecretsEnv = '';
-        try {
-            existingSecretsEnv = await handle.readFile('/slicc/secrets.env');
-        }
-        catch {
-            existingSecretsEnv = '';
-        }
+        const existingConeConfig = await readIfPresent(handle, '/slicc/cone-config.json');
+        const existingSecretsEnv = (await readIfPresent(handle, '/slicc/secrets.env')) ?? '';
         const applied = applyConeConfigDelta(existingConeConfig, existingSecretsEnv, opts.coneConfigDelta);
         await handle.writeFile('/slicc/secrets.env', applied.secretsEnv);
         await handle.writeFile('/slicc/cone-config.json', applied.coneConfigJson);
@@ -158,6 +146,37 @@ export async function resumeCone(deps, opts) {
 }
 const RESUME_MAX_RETRIES = 5;
 const RESUME_RETRY_DELAY_MS = 1000;
+/**
+ * Read a file if it exists; return null when the substrate reports "not found".
+ * Any OTHER error (transient e2b request timeout / 5xx, socket reset, permission
+ * glitch, filesystem-not-yet-ready) is rewrapped as a CloudError and re-thrown
+ * so the caller aborts before running destructive downstream writes. The
+ * unqualified catch this replaces silently overwrote the user's persisted
+ * cone-config.json + secrets.env with a delta-applied-to-empty base whenever
+ * readFile hit a transient fault (issue #1357).
+ */
+async function readIfPresent(handle, path) {
+    try {
+        return await handle.readFile(path);
+    }
+    catch (err) {
+        if (isNotFound(err))
+            return null;
+        const msg = err instanceof Error ? err.message : String(err);
+        throw new CloudError('INTERNAL', `Failed to read ${path}: ${msg}`);
+    }
+}
+function isNotFound(err) {
+    if (typeof err !== 'object' || err === null)
+        return false;
+    const e = err;
+    if (e.code === 'ENOENT')
+        return true;
+    if (e.name === 'NotFoundError')
+        return true;
+    const msg = typeof e.message === 'string' ? e.message : '';
+    return /ENOENT|not found/i.test(msg);
+}
 async function kickLeaderUntilReady(handle) {
     for (let i = 0; i < RESUME_MAX_RETRIES; i++) {
         const result = await handle.run(KICK_CMD);

package/dist/node-server/_cloud_core/tests/resume.test.js

@@ -200,4 +200,111 @@ describe('resumeCone', () => {
             pollIntervalMs: 50,
         })).rejects.toMatchObject({ name: 'CloudError', code: 'LEADER_NOT_READY' });
     });
+    it('applies coneConfigDelta over existing files when both are present', async () => {
+        const registry = new MemRegistry();
+        await registry.append({
+            sandboxId: 'sbx-1',
+            substrate: 'e2b',
+            createdAt: '',
+            joinUrl: 'https://w/join',
+            lastSeen: '',
+            state: 'paused',
+        });
+        const existingConfig = JSON.stringify({
+            model: 'adobe:claude-opus-4-6',
+            accounts: [{ providerId: 'adobe', kind: 'oauth', accessToken: 'old' }],
+        });
+        const existingSecrets = 'ADOBE_IMS_TOKEN=old\nADOBE_IMS_TOKEN_DOMAINS=adobe-llm-proxy\n' +
+            'GITHUB_TOKEN=user-pat\nGITHUB_TOKEN_DOMAINS=github.com\n';
+        const writes = [];
+        const base = makeResumeTestHandle({ writes });
+        const handle = {
+            ...base,
+            readFile: async (path) => {
+                if (path === '/slicc/cone-config.json')
+                    return existingConfig;
+                if (path === '/slicc/secrets.env')
+                    return existingSecrets;
+                return base.readFile(path);
+            },
+        };
+        const substrate = makeFakeSubstrate({ handle });
+        await resumeCone({ substrate, registry }, {
+            query: 'sbx-1',
+            localSliccVersion: 'test',
+            coneConfigDelta: {
+                upsert: {
+                    secrets: [{ name: 'OPENAI_API_KEY', value: 'sk-new', domains: ['api.openai.com'] }],
+                },
+            },
+        });
+        const secretsWrite = writes.find((w) => w.path === '/slicc/secrets.env');
+        expect(secretsWrite).toBeDefined();
+        expect(String(secretsWrite?.contents)).toContain('GITHUB_TOKEN=user-pat');
+        expect(String(secretsWrite?.contents)).toContain('OPENAI_API_KEY=sk-new');
+        expect(String(secretsWrite?.contents)).toContain('ADOBE_IMS_TOKEN=old');
+    });
+    it('treats a missing cone-config.json / secrets.env as empty (ENOENT is a real absent-file case)', async () => {
+        const registry = new MemRegistry();
+        await registry.append({
+            sandboxId: 'sbx-1',
+            substrate: 'e2b',
+            createdAt: '',
+            joinUrl: 'https://w/join',
+            lastSeen: '',
+            state: 'paused',
+        });
+        const writes = [];
+        // Default makeResumeTestHandle throws ENOENT for anything other than
+        // /tmp/slicc-join.json — mirrors a pre-feature cone with no persisted config.
+        const substrate = makeFakeSubstrate({ handle: makeResumeTestHandle({ writes }) });
+        await resumeCone({ substrate, registry }, {
+            query: 'sbx-1',
+            localSliccVersion: 'test',
+            coneConfigDelta: {
+                upsert: { secrets: [{ name: 'OPENAI_API_KEY', value: 'sk', domains: ['x'] }] },
+            },
+        });
+        // Wrote a fresh pair (delta-applied-to-empty-base is the legitimate outcome here).
+        expect(writes.some((w) => w.path === '/slicc/secrets.env')).toBe(true);
+        expect(writes.some((w) => w.path === '/slicc/cone-config.json')).toBe(true);
+    });
+    it('aborts before writing when readFile hits a transient sandbox fault (does not wipe existing config)', async () => {
+        const registry = new MemRegistry();
+        await registry.append({
+            sandboxId: 'sbx-1',
+            substrate: 'e2b',
+            createdAt: '',
+            joinUrl: 'https://w/join',
+            lastSeen: '',
+            state: 'paused',
+        });
+        const writes = [];
+        const base = makeResumeTestHandle({ writes });
+        const handle = {
+            ...base,
+            readFile: async (path) => {
+                if (path === '/slicc/cone-config.json') {
+                    // Simulate an e2b transient error (5xx / socket reset / FS not ready).
+                    throw new Error('sandbox request failed: 503 Service Unavailable');
+                }
+                return base.readFile(path);
+            },
+        };
+        const substrate = makeFakeSubstrate({ handle });
+        await expect(resumeCone({ substrate, registry }, {
+            query: 'sbx-1',
+            localSliccVersion: 'test',
+            coneConfigDelta: {
+                upsert: { secrets: [{ name: 'OPENAI_API_KEY', value: 'sk', domains: ['x'] }] },
+            },
+        })).rejects.toMatchObject({
+            name: 'CloudError',
+            code: 'INTERNAL',
+            message: expect.stringContaining('/slicc/cone-config.json'),
+        });
+        // Critically: no writeFile ran, so the on-disk config was NOT overwritten
+        // with a delta-applied-to-empty-base (issue #1357).
+        expect(writes).toEqual([]);
+    });
 });

package/dist/node-server/_shared/agent-wire-types.d.ts

@@ -0,0 +1,196 @@
+/**
+ * Agent/chat wire payload types embedded in the tray sync protocol
+ * (`tray-sync-protocol.ts`) — the leader↔follower data-channel format
+ * partially mirrored by the iOS follower
+ * (`packages/ios-app/SliccFollower/Models/SyncProtocol.swift`).
+ *
+ * Types only — platform-agnostic by construction (no DOM, no Node, no
+ * imports). The behavior that produces/consumes these shapes stays in
+ * `@slicc/webapp` (`core/attachments.ts`, `core/agent-types.ts`,
+ * `scoops/chat-types.ts`, `scoops/lick-manager.ts`), which re-exports them
+ * so webapp-internal importers keep their layer-local import sites.
+ */
+export type MessageAttachmentKind = 'image' | 'text' | 'file';
+export interface MessageAttachment {
+    id: string;
+    name: string;
+    mimeType: string;
+    size: number;
+    kind: MessageAttachmentKind;
+    /** Base64 payload for LLM-supported image attachments. */
+    data?: string;
+    /** UTF-8 content for text-like file attachments. */
+    text?: string;
+    /**
+     * VFS path (e.g. `/tmp/attachment-…`) when the file was persisted to the
+     * virtual filesystem because it was too large to inline. The agent can
+     * `read_file`/`bash cat` this path to access the full content.
+     */
+    path?: string;
+    /** Human-readable reason when the payload could not be included. */
+    error?: string;
+}
+export type AgentEvent = {
+    type: 'message_start';
+    messageId: string;
+} | {
+    type: 'content_delta';
+    messageId: string;
+    text: string;
+} | {
+    type: 'content_done';
+    messageId: string;
+} | {
+    type: 'tool_use_start';
+    messageId: string;
+    toolName: string;
+    toolInput: unknown;
+} | {
+    type: 'tool_result';
+    messageId: string;
+    toolName: string;
+    result: string;
+    isError?: boolean;
+} | {
+    type: 'tool_ui';
+    messageId: string;
+    toolName: string;
+    requestId: string;
+    html: string;
+} | {
+    type: 'tool_ui_done';
+    messageId: string;
+    requestId: string;
+} | {
+    type: 'turn_end';
+    messageId: string;
+} | {
+    type: 'error';
+    error: string;
+} | {
+    type: 'screenshot';
+    base64: string;
+    url?: string;
+} | {
+    type: 'terminal_output';
+    text: string;
+};
+export type MessageRole = 'user' | 'assistant';
+/**
+ * Result state of an actionable lick card (currently scoop sudo-requests):
+ * `pending` (awaiting a decision — the default), `confirmed` (allowed), or
+ * `dismissed` (denied). Drives the `<slicc-lick-card>` `state` attribute.
+ */
+export type LickState = 'pending' | 'confirmed' | 'dismissed';
+export interface ChatMessage {
+    id: string;
+    role: MessageRole;
+    content: string;
+    timestamp: number;
+    attachments?: MessageAttachment[];
+    toolCalls?: ToolCall[];
+    isStreaming?: boolean;
+    /** Source of the message: 'cone' for main agent, scoop name for sub-agents, 'lick' for async events */
+    source?: 'cone' | 'lick' | string;
+    /** For licks: the channel type (webhook, cron, etc.) */
+    channel?: string;
+    /** Render-time collation: how many consecutive same-channel licks this row stands for. */
+    lickCount?: number;
+    /** Render-time collation: the individual lick bodies folded into this row. */
+    lickParts?: string[];
+    /**
+     * For actionable licks (sudo-request): the orchestrator-minted lick id used
+     * to locate this card when its decision settles, so the state can flip live.
+     */
+    lickId?: string;
+    /** Result state for an actionable lick: pending / confirmed / dismissed. */
+    lickState?: LickState;
+    /** True when the message is queued (submitted while the agent is still processing). */
+    queued?: boolean;
+    /**
+     * Cone-error marker — set by the chat controller's `error` AgentEvent
+     * handler. The view renders this assistant message as a `slicc-error-card`
+     * with a retry affordance instead of a plain assistant bubble.
+     */
+    error?: boolean;
+}
+export interface ToolCall {
+    id: string;
+    name: string;
+    input: unknown;
+    result?: string;
+    isError?: boolean;
+    /** Transient screenshot data URL — not persisted to session store. */
+    _screenshotDataUrl?: string;
+    /** Transient tool-UI request id used by `handleToolUI` to thread the
+     *  approval/result roundtrip back to the offscreen agent. Not
+     *  persisted. */
+    _toolUIRequestId?: string;
+}
+export interface LickEvent {
+    type: 'webhook' | 'cron' | 'sprinkle' | 'fswatch' | 'session-reload' | 'navigate' | 'upgrade' | 'cherry' | 'workflow' | 'sudo-request' | 'preview';
+    webhookId?: string;
+    webhookName?: string;
+    cronId?: string;
+    cronName?: string;
+    sprinkleName?: string;
+    /** For fswatch events */
+    fswatchId?: string;
+    fswatchName?: string;
+    changes?: Array<{
+        type: string;
+        path: string;
+    }>;
+    /** For navigate events: the URL whose response advertised a SLICC handoff `Link` rel. */
+    navigateUrl?: string;
+    /** For upgrade events: the previously-seen and current bundled SLICC versions. */
+    upgradeFromVersion?: string;
+    upgradeToVersion?: string;
+    /** For cherry events: the host-page event name, owning follower runtime, and host origin. */
+    cherryName?: string;
+    cherryRuntimeId?: string;
+    cherryOrigin?: string;
+    /** For preview events: the bridge connection metadata. */
+    previewConnId?: string;
+    previewOrigin?: string;
+    previewToken?: string;
+    previewUserAgent?: string;
+    previewConnectedAt?: string;
+    previewLifecycle?: 'connected' | 'disconnected';
+    /**
+     * Stable identifier for an actionable lick — one that the cone resolves via
+     * the generic `lick_confirm` / `lick_dismiss` tools. Set by the
+     * orchestrator's actionable-lick registry (see `ConeRequestRegistry`) and
+     * carried through to the UI chip + formatter. For `sudo-request` events the
+     * remaining `sudo*` fields mirror `SudoRequest` so the cone (or the user
+     * reading the chip) can see what is being escalated. The actionable
+     * agent-facing message is still delivered by
+     * `Orchestrator.deliverSudoRequestToCone` — this lick is a UI-chip
+     * notification only (see `defaultLickEventHandler` for the non-routing
+     * branch).
+     */
+    lickId?: string;
+    sudoKind?: string;
+    sudoDetail?: string;
+    sudoScoopName?: string;
+    sudoSuggestedPattern?: string;
+    targetScoop?: string;
+    /**
+     * Set ONLY by the leader when it re-emits a lick forwarded from a
+     * follower. `originFollowerId` is the follower's bootstrapId (reserved
+     * for future per-follower response routing); `originLabel` is a
+     * human-readable source ("extension follower", "iOS follower", …)
+     * to be surfaced to the agent by `formatLickEventForCone`.
+     */
+    originFollowerId?: string;
+    originLabel?: string;
+    /** Workflow completion (SP2): set by WorkflowRunManager on cone-origin runs. */
+    workflowRunId?: string;
+    workflowName?: string;
+    resultPath?: string;
+    preview?: string;
+    timestamp: string;
+    headers?: Record<string, string>;
+    body: unknown;
+}
+//# sourceMappingURL=agent-wire-types.d.ts.map

package/dist/node-server/_shared/agent-wire-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-wire-types.d.ts","sourceRoot":"","sources":["../src/agent-wire-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,qBAAqB,CAAC;IAC5B,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GACnF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC/F;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAM9C,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,WAAW,CAAC;AAE/C;;;;GAIG;AACH,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;AAE9D,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,uGAAuG;IACvG,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAClC,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,uFAAuF;IACvF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sEAAsE;IACtE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;qBAEiB;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAMD,MAAM,WAAW,SAAS;IACxB,IAAI,EACA,SAAS,GACT,MAAM,GACN,UAAU,GACV,SAAS,GACT,gBAAgB,GAChB,UAAU,GACV,SAAS,GACT,QAAQ,GACR,UAAU,GACV,cAAc,GACd,SAAS,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,yFAAyF;IACzF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6FAA6F;IAC7F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,WAAW,GAAG,cAAc,CAAC;IAChD;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,EAAE,OAAO,CAAC;CACf"}

package/dist/node-server/_shared/agent-wire-types.js

@@ -0,0 +1,14 @@
+/**
+ * Agent/chat wire payload types embedded in the tray sync protocol
+ * (`tray-sync-protocol.ts`) — the leader↔follower data-channel format
+ * partially mirrored by the iOS follower
+ * (`packages/ios-app/SliccFollower/Models/SyncProtocol.swift`).
+ *
+ * Types only — platform-agnostic by construction (no DOM, no Node, no
+ * imports). The behavior that produces/consumes these shapes stays in
+ * `@slicc/webapp` (`core/attachments.ts`, `core/agent-types.ts`,
+ * `scoops/chat-types.ts`, `scoops/lick-manager.ts`), which re-exports them
+ * so webapp-internal importers keep their layer-local import sites.
+ */
+export {};
+//# sourceMappingURL=agent-wire-types.js.map

package/dist/node-server/_shared/agent-wire-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-wire-types.js","sourceRoot":"","sources":["../src/agent-wire-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/node-server/_shared/index.d.ts

@@ -1,3 +1,4 @@
+export * from './agent-wire-types.js';
 export * from './base64.js';
 export * from './bridge-protocol.js';
 export * from './cdp-frame-unmask.js';
@@ -10,4 +11,5 @@ export * from './session-secret-store.js';
 export * from './sign-and-forward.js';
 export * from './sigv4.js';
 export * from './tray-signaling.js';
+export * from './tray-sync-protocol.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/node-server/_shared/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC"}

package/dist/node-server/_shared/index.js

@@ -1,4 +1,5 @@
 // Re-exports added in Task 1.2 (secret-masking) and Task 1.3 (secrets-pipeline).
+export * from './agent-wire-types.js';
 export * from './base64.js';
 export * from './bridge-protocol.js';
 export * from './cdp-frame-unmask.js';
@@ -11,4 +12,5 @@ export * from './session-secret-store.js';
 export * from './sign-and-forward.js';
 export * from './sigv4.js';
 export * from './tray-signaling.js';
+export * from './tray-sync-protocol.js';
 //# sourceMappingURL=index.js.map

package/dist/node-server/_shared/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,uBAAuB,CAAC;AACtC,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC"}