ssh-mcp-pro 1.5.0 → 1.6.0

package/dist/remote/agent-file-search.js

@@ -0,0 +1,243 @@
+import { lstat, opendir, realpath } from "node:fs/promises";
+import path from "node:path";
+import { isPathAllowed } from "./policy.js";
+const MAX_SCAN_ENTRIES = 2_000;
+const MAX_SCAN_DIRECTORIES = 128;
+function denied(message) {
+    return Object.assign(new Error(message), { code: "POLICY_DENIED" });
+}
+function boundedInteger(value, fallback, minimum, maximum) {
+    if (value === undefined)
+        return fallback;
+    if (typeof value !== "number" ||
+        !Number.isSafeInteger(value) ||
+        value < minimum ||
+        value > maximum) {
+        throw denied(`Expected an integer between ${minimum} and ${maximum}`);
+    }
+    return value;
+}
+function withinRoot(root, candidate) {
+    const relative = path.relative(root, candidate);
+    return (relative === "" ||
+        (relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative)));
+}
+function filenameMatcher(pattern) {
+    const query = pattern.toLocaleLowerCase();
+    if (!query.includes("*") && !query.includes("?")) {
+        return (name) => name.toLocaleLowerCase().includes(query);
+    }
+    // Linear wildcard matching prevents regex backtracking from user input.
+    return (name) => {
+        const candidate = name.toLocaleLowerCase();
+        let nameIndex = 0;
+        let patternIndex = 0;
+        let lastStar = -1;
+        let retryNameIndex = 0;
+        while (nameIndex < candidate.length) {
+            if (patternIndex < query.length &&
+                (query[patternIndex] === "?" || query[patternIndex] === candidate[nameIndex])) {
+                nameIndex += 1;
+                patternIndex += 1;
+            }
+            else if (patternIndex < query.length && query[patternIndex] === "*") {
+                lastStar = patternIndex++;
+                retryNameIndex = nameIndex;
+            }
+            else if (lastStar !== -1) {
+                patternIndex = lastStar + 1;
+                nameIndex = ++retryNameIndex;
+            }
+            else {
+                return false;
+            }
+        }
+        while (query[patternIndex] === "*")
+            patternIndex += 1;
+        return patternIndex === query.length;
+    };
+}
+function parseOptions(args) {
+    const pattern = args.name_pattern;
+    if (typeof pattern !== "string" ||
+        pattern.length < 1 ||
+        pattern.length > 100 ||
+        /[/\\]/u.test(pattern)) {
+        throw denied("name_pattern must be a filename pattern of 1-100 characters");
+    }
+    if (args.include_hidden !== undefined && typeof args.include_hidden !== "boolean") {
+        throw denied("include_hidden must be a boolean");
+    }
+    if (args.root_path !== undefined &&
+        (typeof args.root_path !== "string" ||
+            args.root_path.length < 1 ||
+            args.root_path.length > 4096)) {
+        throw denied("root_path must be a nonempty path");
+    }
+    return {
+        matchName: filenameMatcher(pattern),
+        includeHidden: args.include_hidden ?? false,
+        maxDepth: boundedInteger(args.max_depth, 3, 0, 5),
+        maxResults: boundedInteger(args.max_results, 20, 1, 50),
+    };
+}
+async function resolveRoot(policy, requested, explicit) {
+    if (!isPathAllowed(policy, requested)) {
+        if (explicit)
+            throw denied("Search root is not allowed by local policy");
+        return null;
+    }
+    try {
+        const info = await lstat(requested);
+        if (!info.isDirectory() || info.isSymbolicLink()) {
+            if (explicit)
+                throw denied("Search root must be a regular directory");
+            return null;
+        }
+        const canonical = await realpath(requested);
+        if (!isPathAllowed(policy, canonical)) {
+            if (explicit)
+                throw denied("Search root is not allowed by local policy");
+            return null;
+        }
+        return canonical;
+    }
+    catch {
+        if (explicit)
+            throw denied("Search root is unavailable under local policy");
+        return null;
+    }
+}
+function limitReached(state) {
+    return (state.scannedEntries >= MAX_SCAN_ENTRIES ||
+        state.scannedDirectories >= MAX_SCAN_DIRECTORIES ||
+        state.candidateFiles >= state.maxCandidateFiles ||
+        state.matches.length >= state.maxResults);
+}
+async function inspectEntry(state, current, entry) {
+    if (entry.name === "." ||
+        entry.name === ".." ||
+        (!state.includeHidden && entry.name.startsWith(".")) ||
+        entry.isSymbolicLink())
+        return;
+    const candidate = path.join(current.directory, entry.name);
+    if (!isPathAllowed(state.policy, candidate))
+        return;
+    try {
+        const info = await lstat(candidate);
+        if (info.isSymbolicLink())
+            return;
+        const canonical = await realpath(candidate);
+        if (!withinRoot(current.root, canonical) || !isPathAllowed(state.policy, canonical))
+            return;
+        if (info.isDirectory()) {
+            if (current.depth < state.maxDepth)
+                state.queue.push({ root: current.root, directory: canonical, depth: current.depth + 1 });
+        }
+        else if (info.isFile() && state.matchName(entry.name)) {
+            state.candidateFiles += 1;
+            const matched = await state.onMatch(entry.name, canonical);
+            if (matched !== null)
+                state.matches.push(matched);
+        }
+    }
+    catch {
+        // A directory entry may disappear while scanning; never return its path.
+    }
+}
+async function consumeEntries(state, current, directory) {
+    if (limitReached(state)) {
+        state.truncated = true;
+        return;
+    }
+    const entry = await directory.read();
+    if (!entry)
+        return;
+    state.scannedEntries += 1;
+    await inspectEntry(state, current, entry);
+    return consumeEntries(state, current, directory);
+}
+async function visitDirectory(state, current) {
+    if (!isPathAllowed(state.policy, current.directory) ||
+        !withinRoot(current.root, current.directory))
+        return;
+    let directory;
+    try {
+        const info = await lstat(current.directory);
+        if (!info.isDirectory() || info.isSymbolicLink())
+            return;
+        const canonical = await realpath(current.directory);
+        if (!withinRoot(current.root, canonical) || !isPathAllowed(state.policy, canonical))
+            return;
+        directory = await opendir(current.directory);
+    }
+    catch {
+        return;
+    }
+    state.scannedDirectories += 1;
+    try {
+        await consumeEntries(state, current, directory);
+    }
+    finally {
+        await directory.close().catch(() => undefined);
+    }
+}
+async function scanQueue(state) {
+    if (!state.queue.length)
+        return;
+    if (limitReached(state)) {
+        state.truncated = true;
+        return;
+    }
+    const current = state.queue.shift();
+    await visitDirectory(state, current);
+    return scanQueue(state);
+}
+function boundedResult(state) {
+    let result = {
+        matches: state.matches,
+        truncated: state.truncated,
+        scanned_entries: state.scannedEntries,
+    };
+    while (Buffer.byteLength(JSON.stringify(result), "utf8") > state.policy.maxOutputBytes &&
+        result.matches.length) {
+        result = { ...result, matches: result.matches.slice(0, -1), truncated: true };
+    }
+    if (Buffer.byteLength(JSON.stringify(result), "utf8") > state.policy.maxOutputBytes) {
+        throw denied("Agent output limit is too small for file search results");
+    }
+    return result;
+}
+/** Reusable bounded enumeration: callbacks only receive authorized regular files. */
+export async function scanAuthorizedFiles(policy, args, onMatch, maxCandidateFiles = MAX_SCAN_ENTRIES) {
+    const options = parseOptions(args);
+    const roots = args.root_path === undefined ? policy.allowPaths : [args.root_path];
+    if (roots.length > 32)
+        throw denied("Too many search roots configured by local policy");
+    const resolved = await Promise.all(roots.map((root) => resolveRoot(policy, root, args.root_path !== undefined)));
+    const uniqueRoots = [...new Set(resolved.filter((root) => root !== null))];
+    if (!uniqueRoots.length)
+        throw denied("No accessible search roots are configured by local policy");
+    const state = {
+        ...options,
+        policy,
+        onMatch,
+        maxCandidateFiles,
+        candidateFiles: 0,
+        queue: uniqueRoots.map((root) => ({ root, directory: root, depth: 0 })),
+        matches: [],
+        scannedEntries: 0,
+        scannedDirectories: 0,
+        truncated: false,
+    };
+    await scanQueue(state);
+    return boundedResult(state);
+}
+/** A bounded, filename-only search inside agent-local approved folders. */
+export async function searchAuthorizedFileNames(policy, args) {
+    return scanAuthorizedFiles(policy, args, (name, canonicalPath) => ({
+        name,
+        path: canonicalPath,
+    }));
+}
+//# sourceMappingURL=agent-file-search.js.map

package/dist/remote/agent-file-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-file-search.js","sourceRoot":"","sources":["../../src/remote/agent-file-search.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AA0C5C,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,eAAwB,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,cAAc,CACrB,KAAc,EACd,QAAgB,EAChB,OAAe,EACf,OAAe;IAEf,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAC5B,KAAK,GAAG,OAAO;QACf,KAAK,GAAG,OAAO,EACf,CAAC;QACD,MAAM,MAAM,CAAC,+BAA+B,OAAO,QAAQ,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,SAAiB;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IACD,wEAAwE;IACxE,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3C,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;QAClB,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,OAAO,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;YACpC,IACE,YAAY,GAAG,KAAK,CAAC,MAAM;gBAC3B,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC,SAAS,CAAC,CAAC,EAC7E,CAAC;gBACD,SAAS,IAAI,CAAC,CAAC;gBACf,YAAY,IAAI,CAAC,CAAC;YACpB,CAAC;iBAAM,IAAI,YAAY,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,GAAG,EAAE,CAAC;gBACtE,QAAQ,GAAG,YAAY,EAAE,CAAC;gBAC1B,cAAc,GAAG,SAAS,CAAC;YAC7B,CAAC;iBAAM,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC3B,YAAY,GAAG,QAAQ,GAAG,CAAC,CAAC;gBAC5B,SAAS,GAAG,EAAE,cAAc,CAAC;YAC/B,CAAC;iBAAM,CAAC;gBACN,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,GAAG;YAAE,YAAY,IAAI,CAAC,CAAC;QACtD,OAAO,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC;IACvC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAqB;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC;IAClC,IACE,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,OAAO,CAAC,MAAM,GAAG,GAAG;QACpB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EACtB,CAAC;QACD,MAAM,MAAM,CAAC,6DAA6D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAClF,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;IACnD,CAAC;IACD,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;QAC5B,CAAC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YACjC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YACzB,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,EAC/B,CAAC;QACD,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO;QACL,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC;QACnC,aAAa,EAAE,IAAI,CAAC,cAAc,IAAI,KAAK;QAC3C,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,MAAmB,EACnB,SAAiB,EACjB,QAAiB;IAEjB,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QACtC,IAAI,QAAQ;YAAE,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACjD,IAAI,QAAQ;gBAAE,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YACtC,IAAI,QAAQ;gBAAE,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,QAAQ;YAAE,MAAM,MAAM,CAAC,+CAA+C,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAI,KAAmB;IAC1C,OAAO,CACL,KAAK,CAAC,cAAc,IAAI,gBAAgB;QACxC,KAAK,CAAC,kBAAkB,IAAI,oBAAoB;QAChD,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,iBAAiB;QAC/C,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CACzC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,KAAmB,EACnB,OAAmB,EACnB,KAAa;IAEb,IACE,KAAK,CAAC,IAAI,KAAK,GAAG;QAClB,KAAK,CAAC,IAAI,KAAK,IAAI;QACnB,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACpD,KAAK,CAAC,cAAc,EAAE;QAEtB,OAAO;IACT,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC;QAAE,OAAO;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO;QAClC,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC;YAAE,OAAO;QAC5F,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,IAAI,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,QAAQ;gBAChC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC3D,IAAI,OAAO,KAAK,IAAI;gBAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,KAAmB,EACnB,OAAmB,EACnB,SAAc;IAEd,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;IAC1B,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,cAAc,CAAI,KAAmB,EAAE,OAAmB;IACvE,IACE,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC;QAC/C,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC;QAE5C,OAAO;IACT,IAAI,SAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO;QACzD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC;YAAE,OAAO;QAC5F,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,CAAC,kBAAkB,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAI,KAAmB;IAC7C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAChC,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAG,CAAC;IACrC,MAAM,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAI,KAAmB;IAC3C,IAAI,MAAM,GAA4B;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,cAAc;KACtC,CAAC;IACF,OACE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc;QAC/E,MAAM,CAAC,OAAO,CAAC,MAAM,EACrB,CAAC;QACD,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACpF,MAAM,MAAM,CAAC,yDAAyD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAmB,EACnB,IAAqB,EACrB,OAA8E,EAC9E,iBAAiB,GAAG,gBAAgB;IAEpC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,MAAM,CAAC,kDAAkD,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAC7E,CAAC;IACF,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3F,IAAI,CAAC,WAAW,CAAC,MAAM;QACrB,MAAM,MAAM,CAAC,2DAA2D,CAAC,CAAC;IAE5E,MAAM,KAAK,GAAiB;QAC1B,GAAG,OAAO;QACV,MAAM;QACN,OAAO;QACP,iBAAiB;QACjB,cAAc,EAAE,CAAC;QACjB,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,CAAC;QACjB,kBAAkB,EAAE,CAAC;QACrB,SAAS,EAAE,KAAK;KACjB,CAAC;IACF,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAmB,EACnB,IAAqB;IAErB,OAAO,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI;QACJ,IAAI,EAAE,aAAa;KACpB,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/remote/agent-managed-process.d.ts

@@ -0,0 +1,43 @@
+import type { AgentPolicy } from "./types.js";
+type SessionStatus = "running" | "exited" | "stopped" | "timed_out" | "failed";
+type StreamName = "stdout" | "stderr";
+interface OutputEvent {
+    cursor: number;
+    stream: StreamName;
+    text: string;
+}
+/** Agent-local bounded process registry. The control plane never owns a shell process. */
+export declare class ManagedProcessRegistry {
+    private readonly sessions;
+    private closed;
+    start(ownerId: string, agentId: string, args: Record<string, unknown>, stillAuthorized: () => boolean): Promise<{
+        process_id: string;
+        status: SessionStatus;
+        max_runtime_seconds: number;
+    }>;
+    read(ownerId: string, agentId: string, args: Record<string, unknown>, policy: AgentPolicy): {
+        process_id: string;
+        status: SessionStatus;
+        exit_code: number | null;
+        dropped_before_cursor: number;
+        next_cursor: number;
+        chunks: OutputEvent[];
+    };
+    input(ownerId: string, agentId: string, args: Record<string, unknown>): {
+        process_id: string;
+        written_bytes: number;
+        stdin_closed: boolean;
+    };
+    stop(ownerId: string, agentId: string, args: Record<string, unknown>): {
+        process_id: string;
+        status: SessionStatus;
+    };
+    stopAll(): void;
+    dispose(): void;
+    private lookup;
+    private cancel;
+    private append;
+    private pruneFinished;
+}
+export {};
+//# sourceMappingURL=agent-managed-process.d.ts.map

package/dist/remote/agent-managed-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-managed-process.d.ts","sourceRoot":"","sources":["../../src/remote/agent-managed-process.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAmB,MAAM,YAAY,CAAC;AAE/D,KAAK,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAC/E,KAAK,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AACtC,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd;AAmGD,0FAA0F;AAC1F,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqC;IAC9D,OAAO,CAAC,MAAM,CAAS;IAEjB,KAAK,CACT,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,eAAe,EAAE,MAAM,OAAO,GAC7B,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,aAAa,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAAC;IAyFtF,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW;;;;;;gBAmBvE,WAAW,EAAE;;IAgB/B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;IA8BrE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;IAMpE,OAAO,IAAI,IAAI;IAIf,OAAO,IAAI,IAAI;IAUf,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,MAAM;IAoBd,OAAO,CAAC,aAAa;CAStB"}

package/dist/remote/agent-managed-process.js

@@ -0,0 +1,291 @@
+import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { access } from "node:fs/promises";
+import path from "node:path";
+import { StringDecoder } from "node:string_decoder";
+const MAX_ACTIVE = 4;
+const MAX_RETAINED = 20;
+const MAX_BUFFER_BYTES = 64 * 1024;
+const MAX_BUFFER_EVENTS = 512;
+const MAX_INPUT_BYTES = 64 * 1024;
+const MAX_INPUT_PER_CALL = 4096;
+const MAX_RUNTIME_SECONDS = 600;
+const RETAIN_AFTER_EXIT_MS = 2 * 60 * 1000;
+function denied(message, code = "POLICY_DENIED") {
+    return Object.assign(new Error(message), { code });
+}
+function integerArg(value, fallback, min, max, name) {
+    if (value === undefined)
+        return fallback;
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < min || value > max) {
+        throw denied(name + " must be an integer between " + min + " and " + max);
+    }
+    return value;
+}
+function executableShell(command) {
+    if (process.platform === "win32") {
+        return {
+            command: "powershell.exe",
+            args: ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", command],
+        };
+    }
+    return { command: "/bin/sh", args: ["-lc", command] };
+}
+function terminateTree(child) {
+    if (!child.pid) {
+        child.kill("SIGTERM");
+        return;
+    }
+    if (process.platform === "win32") {
+        // Never resolve a privileged OS utility through a potentially writable PATH.
+        const configuredRoot = process.env.SystemRoot;
+        const windowsRoot = configuredRoot && /^[A-Z]:\\Windows$/iu.test(configuredRoot)
+            ? configuredRoot
+            : String.raw `C:\Windows`;
+        const taskkill = path.win32.join(windowsRoot, "System32", "taskkill.exe");
+        const killer = spawn(taskkill, ["/PID", String(child.pid), "/T", "/F"], {
+            windowsHide: true,
+            stdio: "ignore",
+        });
+        killer.on("error", () => {
+            child.kill("SIGTERM");
+        });
+        killer.on("close", (code) => {
+            if (code !== 0 && child.exitCode === null && child.signalCode === null) {
+                child.kill("SIGTERM");
+            }
+        });
+        killer.unref();
+        return;
+    }
+    try {
+        process.kill(-child.pid, "SIGTERM");
+    }
+    catch {
+        child.kill("SIGTERM");
+    }
+    const timer = setTimeout(() => {
+        try {
+            if (child.pid && child.exitCode === null && child.signalCode === null) {
+                process.kill(-child.pid, "SIGKILL");
+            }
+        }
+        catch {
+            child.kill("SIGKILL");
+        }
+    }, 1500);
+    timer.unref();
+}
+/** Agent-local bounded process registry. The control plane never owns a shell process. */
+export class ManagedProcessRegistry {
+    sessions = new Map();
+    closed = false;
+    async start(ownerId, agentId, args, stillAuthorized) {
+        if (this.closed)
+            throw denied("Agent process manager is closed");
+        const command = args.command;
+        if (typeof command !== "string" || !command.trim() || command.length > 4096) {
+            throw denied("command must be a nonempty string of at most 4096 characters");
+        }
+        const maxRuntime = integerArg(args.max_runtime_seconds, 300, 1, MAX_RUNTIME_SECONDS, "max_runtime_seconds");
+        const cwd = args.cwd;
+        if (cwd !== undefined && (typeof cwd !== "string" || !cwd || cwd.length > 4096)) {
+            throw denied("cwd must be a nonempty path");
+        }
+        if (cwd !== undefined) {
+            try {
+                await access(cwd);
+            }
+            catch {
+                throw denied("cwd is not accessible");
+            }
+        }
+        if (!stillAuthorized())
+            throw denied("shell.exec was revoked before process start", "CAPABILITY_DENIED");
+        this.pruneFinished();
+        const active = [...this.sessions.values()].filter((x) => x.status === "running").length;
+        if (active >= MAX_ACTIVE)
+            throw denied("Too many active managed processes on this agent");
+        const shell = executableShell(command);
+        const child = spawn(shell.command, shell.args, {
+            cwd,
+            stdio: "pipe",
+            windowsHide: true,
+            detached: process.platform !== "win32",
+        });
+        const processId = "proc_" + randomUUID().replaceAll("-", "");
+        const session = {
+            id: processId,
+            ownerId,
+            agentId,
+            child,
+            status: "running",
+            exitCode: null,
+            chunks: [],
+            nextCursor: 0,
+            droppedBeforeCursor: 0,
+            bufferedBytes: 0,
+            inputBytes: 0,
+            timeout: setTimeout(() => {
+                if (session.status === "running") {
+                    session.status = "timed_out";
+                    terminateTree(child);
+                }
+            }, maxRuntime * 1000),
+            decoders: { stdout: new StringDecoder("utf8"), stderr: new StringDecoder("utf8") },
+        };
+        session.timeout.unref();
+        this.sessions.set(processId, session);
+        for (const stream of ["stdout", "stderr"]) {
+            child[stream].on("data", (chunk) => {
+                this.append(session, stream, session.decoders[stream].write(chunk));
+            });
+        }
+        // Writing to a process that exits concurrently must not crash the agent.
+        child.stdin.on("error", () => undefined);
+        child.on("error", () => {
+            session.status = "failed";
+            session.exitCode = 127;
+            this.append(session, "stderr", "Process could not be started");
+        });
+        child.on("close", (code) => {
+            clearTimeout(session.timeout);
+            for (const stream of ["stdout", "stderr"]) {
+                this.append(session, stream, session.decoders[stream].end());
+            }
+            if (session.status === "running")
+                session.status = "exited";
+            session.exitCode ??= code;
+            if (!this.closed) {
+                session.retention = setTimeout(() => {
+                    this.sessions.delete(session.id);
+                }, RETAIN_AFTER_EXIT_MS);
+                session.retention.unref();
+                this.pruneFinished();
+            }
+        });
+        return { process_id: processId, status: "running", max_runtime_seconds: maxRuntime };
+    }
+    read(ownerId, agentId, args, policy) {
+        const session = this.lookup(ownerId, agentId, args.process_id);
+        const cursor = integerArg(args.cursor, 0, 0, Number.MAX_SAFE_INTEGER, "cursor");
+        const maxBytes = integerArg(args.max_bytes, Math.min(8192, policy.maxOutputBytes), 1024, 32768, "max_bytes");
+        if (maxBytes > policy.maxOutputBytes)
+            throw denied("Output budget is below requested max_bytes");
+        const start = Math.max(cursor, session.droppedBeforeCursor);
+        const result = {
+            process_id: session.id,
+            status: session.status,
+            exit_code: session.exitCode,
+            dropped_before_cursor: session.droppedBeforeCursor,
+            next_cursor: start,
+            chunks: [],
+        };
+        for (const entry of session.chunks) {
+            if (entry.cursor < start)
+                continue;
+            const candidate = {
+                ...result,
+                next_cursor: entry.cursor + 1,
+                chunks: [...result.chunks, entry],
+            };
+            if (Buffer.byteLength(JSON.stringify(candidate), "utf8") > maxBytes)
+                break;
+            result.next_cursor = entry.cursor + 1;
+            result.chunks.push(entry);
+        }
+        return result;
+    }
+    input(ownerId, agentId, args) {
+        const session = this.lookup(ownerId, agentId, args.process_id);
+        const value = args.input;
+        if (typeof value !== "string" || Buffer.byteLength(value) > MAX_INPUT_PER_CALL) {
+            throw denied("input must be a string of at most 4096 bytes");
+        }
+        if (session.status !== "running" ||
+            session.child.stdin.destroyed ||
+            session.child.stdin.writableEnded) {
+            throw denied("Managed process is no longer accepting input");
+        }
+        const bytes = Buffer.byteLength(value);
+        if (session.inputBytes + bytes > MAX_INPUT_BYTES || session.child.stdin.writableLength > 8192) {
+            throw denied("Managed process input budget exceeded");
+        }
+        if (args.close_stdin !== undefined && typeof args.close_stdin !== "boolean") {
+            throw denied("close_stdin must be boolean");
+        }
+        session.inputBytes += bytes;
+        session.child.stdin.write(value);
+        if (args.close_stdin === true)
+            session.child.stdin.end();
+        return {
+            process_id: session.id,
+            written_bytes: bytes,
+            stdin_closed: args.close_stdin === true,
+        };
+    }
+    stop(ownerId, agentId, args) {
+        const session = this.lookup(ownerId, agentId, args.process_id);
+        this.cancel(session);
+        return { process_id: session.id, status: session.status };
+    }
+    stopAll() {
+        for (const session of this.sessions.values())
+            this.cancel(session);
+    }
+    dispose() {
+        this.closed = true;
+        for (const session of this.sessions.values()) {
+            clearTimeout(session.timeout);
+            if (session.retention)
+                clearTimeout(session.retention);
+            this.cancel(session);
+        }
+        this.sessions.clear();
+    }
+    lookup(ownerId, agentId, id) {
+        const item = typeof id === "string" ? this.sessions.get(id) : undefined;
+        if (item?.ownerId !== ownerId || item.agentId !== agentId) {
+            throw denied("Process not found for this agent and user");
+        }
+        return item;
+    }
+    cancel(session) {
+        if (session.status !== "running")
+            return;
+        session.status = "stopped";
+        clearTimeout(session.timeout);
+        terminateTree(session.child);
+    }
+    append(session, stream, text) {
+        if (this.closed || !text)
+            return;
+        const characters = Array.from(text);
+        for (let offset = 0; offset < characters.length; offset += 128) {
+            const part = characters.slice(offset, offset + 128).join("");
+            const entry = { cursor: session.nextCursor++, stream, text: part };
+            session.chunks.push(entry);
+            session.bufferedBytes += Buffer.byteLength(part, "utf8");
+            while (session.bufferedBytes > MAX_BUFFER_BYTES ||
+                session.chunks.length > MAX_BUFFER_EVENTS) {
+                const removed = session.chunks.shift();
+                if (!removed)
+                    break;
+                session.bufferedBytes -= Buffer.byteLength(removed.text, "utf8");
+                session.droppedBeforeCursor = removed.cursor + 1;
+            }
+        }
+    }
+    pruneFinished() {
+        const finished = [...this.sessions.values()].filter((session) => session.status !== "running");
+        while (finished.length > MAX_RETAINED) {
+            const removed = finished.shift();
+            if (!removed)
+                break;
+            if (removed.retention)
+                clearTimeout(removed.retention);
+            this.sessions.delete(removed.id);
+        }
+    }
+}
+//# sourceMappingURL=agent-managed-process.js.map

package/dist/remote/agent-managed-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-managed-process.js","sourceRoot":"","sources":["../../src/remote/agent-managed-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AA0BpD,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,SAAS,MAAM,CAAC,OAAe,EAAE,OAAwB,eAAe;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CACjB,KAAc,EACd,QAAgB,EAChB,GAAW,EACX,GAAW,EACX,IAAY;IAEZ,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAC5F,MAAM,MAAM,CAAC,IAAI,GAAG,8BAA8B,GAAG,GAAG,GAAG,OAAO,GAAG,GAAG,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO;YACL,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,OAAO,CAAC;SACxE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,KAAqC;IAC1D,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,6EAA6E;QAC7E,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAC9C,MAAM,WAAW,GACf,cAAc,IAAI,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC;YAC1D,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAA,YAAY,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;YACtE,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACvE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBACtE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,IAAI,CAAC,CAAC;IACT,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,0FAA0F;AAC1F,MAAM,OAAO,sBAAsB;IAChB,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IACtD,MAAM,GAAG,KAAK,CAAC;IAEvB,KAAK,CAAC,KAAK,CACT,OAAe,EACf,OAAe,EACf,IAA6B,EAC7B,eAA8B;QAE9B,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YAC5E,MAAM,MAAM,CAAC,8DAA8D,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,UAAU,GAAG,UAAU,CAC3B,IAAI,CAAC,mBAAmB,EACxB,GAAG,EACH,CAAC,EACD,mBAAmB,EACnB,qBAAqB,CACtB,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;YAChF,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,eAAe,EAAE;YACpB,MAAM,MAAM,CAAC,6CAA6C,EAAE,mBAAmB,CAAC,CAAC;QACnF,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QACxF,IAAI,MAAM,IAAI,UAAU;YAAE,MAAM,MAAM,CAAC,iDAAiD,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE;YAC7C,GAAG;YACH,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACvC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,OAAO,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAmB;YAC9B,EAAE,EAAE,SAAS;YACb,OAAO;YACP,OAAO;YACP,KAAK;YACL,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,CAAC;YACb,mBAAmB,EAAE,CAAC;YACtB,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,UAAU,CAAC,GAAG,EAAE;gBACvB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACjC,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;oBAC7B,aAAa,CAAC,KAAK,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;YACrB,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE;SACnF,CAAC;QACF,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU,EAAE,CAAC;YACnD,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC;QACL,CAAC;QACD,yEAAyE;QACzE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC1B,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,8BAA8B,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU,EAAE,CAAC;gBACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC5D,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;oBAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACnC,CAAC,EAAE,oBAAoB,CAAC,CAAC;gBACzB,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC;IACvF,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAe,EAAE,IAA6B,EAAE,MAAmB;QACvF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,UAAU,CACzB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,EACrC,IAAI,EACJ,KAAK,EACL,WAAW,CACZ,CAAC;QACF,IAAI,QAAQ,GAAG,MAAM,CAAC,cAAc;YAClC,MAAM,MAAM,CAAC,4CAA4C,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG;YACb,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,QAAQ;YAC3B,qBAAqB,EAAE,OAAO,CAAC,mBAAmB;YAClD,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,EAAmB;SAC5B,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;gBAAE,SAAS;YACnC,MAAM,SAAS,GAAG;gBAChB,GAAG,MAAM;gBACT,WAAW,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;gBAC7B,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;aAClC,CAAC;YACF,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,GAAG,QAAQ;gBAAE,MAAM;YAC3E,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,OAAe,EAAE,IAA6B;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,kBAAkB,EAAE,CAAC;YAC/E,MAAM,MAAM,CAAC,8CAA8C,CAAC,CAAC;QAC/D,CAAC;QACD,IACE,OAAO,CAAC,MAAM,KAAK,SAAS;YAC5B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS;YAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EACjC,CAAC;YACD,MAAM,MAAM,CAAC,8CAA8C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,UAAU,GAAG,KAAK,GAAG,eAAe,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,GAAG,IAAI,EAAE,CAAC;YAC9F,MAAM,MAAM,CAAC,uCAAuC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5E,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACzD,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,aAAa,EAAE,KAAK;YACpB,YAAY,EAAE,IAAI,CAAC,WAAW,KAAK,IAAI;SACxC,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,OAAe,EAAE,IAA6B;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC5D,CAAC;IAED,OAAO;QACL,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,OAAO;QACL,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,OAAO,CAAC,SAAS;gBAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAEO,MAAM,CAAC,OAAe,EAAE,OAAe,EAAE,EAAW;QAC1D,MAAM,IAAI,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,IAAI,IAAI,EAAE,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC1D,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,OAAuB;QACpC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QACzC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;QAC3B,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAEO,MAAM,CAAC,OAAuB,EAAE,MAAkB,EAAE,IAAY;QACtE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;YAAE,OAAO;QACjC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,GAAG,EAAE,CAAC;YAC/D,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7D,MAAM,KAAK,GAAgB,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAChF,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzD,OACE,OAAO,CAAC,aAAa,GAAG,gBAAgB;gBACxC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,iBAAiB,EACzC,CAAC;gBACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvC,IAAI,CAAC,OAAO;oBAAE,MAAM;gBACpB,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACjE,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QAC/F,OAAO,QAAQ,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO;gBAAE,MAAM;YACpB,IAAI,OAAO,CAAC,SAAS;gBAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;CACF"}

package/dist/remote/control-plane.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../../src/remote/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAI1C,OAAO,EAWL,KAAK,UAAU,EAChB,MAAM,aAAa,CAAC;AAgBrB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAyB,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EACL,qBAAqB,EAGtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAMV,YAAY,EAKb,MAAM,YAAY,CAAC;AAKpB,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAuC;IAC7E,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsC;IACvE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0C;IAC3E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAiB;IACjD,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAa;IACjD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;gBAExC,MAAM,eAAqB;IAwCjC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,KAAK,IAAI,IAAI;IAiBb,OAAO,CAAC,qBAAqB;YAaf,yBAAyB;IASvC,4FAA4F;YAC9E,uBAAuB;YAgBvB,kBAAkB;IAmC1B,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgD/F,aAAa,CACX,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,EAC7B,QAAQ,EAAE,MAAM,GACf,OAAO;YAII,SAAS;IAoEvB;;;;OAIG;YACW,eAAe;YA8Cf,iBAAiB;YA8CjB,SAAS;YAyCT,mBAAmB;YAkCnB,iBAAiB;YAsDjB,YAAY;IAiB1B,OAAO,CAAC,gBAAgB;YAWV,cAAc;IA4D5B,OAAO,CAAC,iBAAiB;IAsDzB,OAAO,CAAC,WAAW;YAkBL,cAAc;IA4H5B,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,KAAK;IASb,OAAO,CAAC,iBAAiB;CAM1B;AAED,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAI5E;AAED,wBAAgB,uBAAuB,CAAC,mBAAmB,EAAE,UAAU,GAAG,MAAM,CAE/E"}
+{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../../src/remote/control-plane.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAI1C,OAAO,EAWL,KAAK,UAAU,EAChB,MAAM,aAAa,CAAC;AAiBrB,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAyB,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EACL,qBAAqB,EAGtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAMV,YAAY,EAKb,MAAM,YAAY,CAAC;AAKpB,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAuC;IAC7E,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAsC;IACvE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA0C;IAC3E,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAoC;IACnE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAiB;IACjD,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAa;IACjD,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;gBAExC,MAAM,eAAqB;IAwCjC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC,KAAK,IAAI,IAAI;IAiBb,OAAO,CAAC,qBAAqB;YAaf,yBAAyB;IASvC,4FAA4F;YAC9E,uBAAuB;YAgBvB,kBAAkB;IAmC1B,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgD/F,aAAa,CACX,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,EAC7B,QAAQ,EAAE,MAAM,GACf,OAAO;YAII,SAAS;IAoEvB;;;;OAIG;YACW,eAAe;YA8Cf,iBAAiB;YA8CjB,SAAS;YAyCT,mBAAmB;YAkCnB,iBAAiB;YAsDjB,YAAY;IAiB1B,OAAO,CAAC,gBAAgB;YAWV,cAAc;IA4D5B,OAAO,CAAC,iBAAiB;IAsDzB,OAAO,CAAC,WAAW;YAkBL,cAAc;IA4H5B,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,KAAK;IASb,OAAO,CAAC,iBAAiB;CAM1B;AAED,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAI5E;AAED,wBAAgB,uBAAuB,CAAC,mBAAmB,EAAE,UAAU,GAAG,MAAM,CAE/E"}

package/dist/remote/control-plane.js

@@ -6,6 +6,7 @@ import { loadRemoteConfig } from "./config.js";
 import { isRecord, asString, negotiateMcpProtocolVersion, addNoStore, safeError, isValidEd25519PublicKey, readJson, sanitizeAgent, } from "./http-util.js";
 import { listRemoteToolDescriptors } from "./mcp-tools.js";
 import { mergeCustomPolicy } from "./policy.js";
+import { safeStoredActionArgs } from "./action-record-sanitize.js";
 import { parseAgentHostMetadata } from "./schemas.js";
 import { hasCapability } from "./scopes.js";
 import { RemoteStore } from "./store.js";
@@ -597,7 +598,7 @@ export class RemoteControlPlane {
             agentId: agent.id,
             tool,
             capability,
-            args,
+            args: safeStoredActionArgs(tool, args),
             status: "sent",
             issuedAt,
             deadline,