@aarmos/bridge 0.1.9 → 0.1.11

package/CHANGELOG.md

@@ -0,0 +1,12 @@
+# Changelog
+
+All notable changes to this package are documented here. Format loosely follows [Keep a Changelog](https://keepachangelog.com/).
+
+## 0.1.10 — 2026-07-21
+
+- Ship `NOTICE` alongside `LICENSE` (Apache-2.0 §4(d) — propagate attribution from `@aarmos/avar-core`).
+- Add `bugs` metadata for the npm page.
+
+## 0.1.9
+
+- Prior release.

package/NOTICE

@@ -0,0 +1,12 @@
+@aarmos/bridge — Aarmos CLI bridge (local WebSocket host)
+Copyright 2026 Aarmatix LLC
+
+Licensed under the Apache License, Version 2.0 (the "License").
+You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0
+
+This product includes software developed at Aarmatix LLC.
+
+Third-party components redistributed:
+  @aarmos/avar-core — Copyright 2026 Aarmatix LLC — Apache-2.0
+    Reference implementation of the AVAR specification.
+    https://github.com/Aarmatix/avar-spec

package/dist/bridge.js

@@ -1,129 +1,7 @@
-import { WebSocketServer, WebSocket } from "ws";
-import { handleRpc } from "./rpc/router.js";
-import { startFileWatcher } from "./watchers/files.js";
-import { startGitWatcher } from "./watchers/git.js";
-import { createSession } from "./session.js";
-export async function startBridge(opts) {
-    // Process-level safety net: an unhandled socket/JSON error must never
-    // take the whole bridge down. The dev is likely mid-flow in another tab.
-    installProcessGuards();
-    const wss = new WebSocketServer({
-        host: "127.0.0.1",
-        port: opts.port,
-        // Origin check — reject anything outside the allow list.
-        verifyClient: (info, cb) => {
-            const origin = info.origin ?? "";
-            if (opts.allowedOrigins.includes(origin))
-                return cb(true);
-            // eslint-disable-next-line no-console
-            console.warn(`[aarmos] rejected origin: ${origin}`);
-            cb(false, 403, "origin not allowed");
-        },
-    });
-    wss.on("error", (err) => {
-        // eslint-disable-next-line no-console
-        console.warn(`[aarmos] server error (continuing): ${err.message}`);
-    });
-    // Track live connection so we can reject concurrent duplicates while still
-    // allowing the developer to close a tab and re-open with the same pairing
-    // (e.g. browser crash, laptop lid). Token remains the shared secret; the
-    // localhost bind + origin allow-list are the real trust boundary.
-    let activeClient = null;
-    wss.on("connection", (ws, req) => {
-        const url = new URL(req.url ?? "/", "http://127.0.0.1");
-        const token = url.searchParams.get("token");
-        if (!token || token !== opts.pairingToken) {
-            ws.close(4401, "invalid pairing token");
-            return;
-        }
-        if (activeClient && activeClient.readyState === WebSocket.OPEN) {
-            ws.close(4409, "another client is already paired");
-            return;
-        }
-        activeClient = ws;
-        const session = createSession({
-            workspace: opts.workspace,
-            extraShellAllow: opts.extraShellAllow,
-            sqlAllow: opts.sqlAllow,
-            readAllow: opts.readAllow,
-        });
-        // eslint-disable-next-line no-console
-        console.log("◆ PWA paired");
-        const send = (msg) => {
-            if (ws.readyState === WebSocket.OPEN) {
-                try {
-                    ws.send(JSON.stringify(msg));
-                }
-                catch (err) {
-                    // eslint-disable-next-line no-console
-                    console.warn(`[aarmos] send failed (client likely gone): ${err.message}`);
-                }
-            }
-        };
-        const stopFiles = startFileWatcher(session, (evt) => send({ type: "event", channel: "fs", event: evt }));
-        const stopGit = startGitWatcher(session, (evt) => send({ type: "event", channel: "git", event: evt }));
-        ws.on("message", async (raw) => {
-            let msg;
-            try {
-                msg = JSON.parse(String(raw));
-            }
-            catch {
-                return send({ type: "error", error: "invalid json" });
-            }
-            try {
-                const res = await handleRpc(session, msg);
-                send(res);
-            }
-            catch (err) {
-                // Never let an RPC handler bubble up and kill the process.
-                send({ type: "error", error: err.message });
-            }
-        });
-        // Per-socket error handler — closed lids, killed tabs, and network
-        // resets all surface here. Log softly, let 'close' run cleanup.
-        ws.on("error", (err) => {
-            // eslint-disable-next-line no-console
-            console.warn(`[aarmos] socket error: ${err.message}`);
-        });
-        ws.on("close", (code, reason) => {
-            stopFiles();
-            stopGit();
-            if (activeClient === ws)
-                activeClient = null;
-            const why = reason?.toString() || `code ${code}`;
-            // eslint-disable-next-line no-console
-            console.log(`◇ Client disconnected (${why}). Standing by on ${opts.port} — rerun pairing from the PWA to reconnect.`);
-        });
-        send({
-            type: "hello",
-            workspace: opts.workspace,
-            capabilities: session.capabilities,
-            dryRun: session.dryRun,
-            protocol: "aarmos-bridge/1",
-        });
-    });
-    await new Promise((resolve) => wss.once("listening", () => resolve()));
-    const address = wss.address();
-    const boundPort = typeof address === "object" && address ? address.port : opts.port;
-    return { port: boundPort, url: `ws://127.0.0.1:${boundPort}` };
-}
-let guardsInstalled = false;
-function installProcessGuards() {
-    if (guardsInstalled)
-        return;
-    guardsInstalled = true;
-    process.on("uncaughtException", (err) => {
-        // eslint-disable-next-line no-console
-        console.warn(`[aarmos] uncaughtException (kept alive): ${err.message}`);
-    });
-    process.on("unhandledRejection", (reason) => {
-        // eslint-disable-next-line no-console
-        console.warn(`[aarmos] unhandledRejection (kept alive): ${String(reason)}`);
-    });
-    process.on("SIGINT", () => {
-        // eslint-disable-next-line no-console
-        console.log("\n◇ Shutting down aarmos bridge. bye.");
-        process.exit(0);
-    });
-}
-//# sourceMappingURL=bridge.js.map
+#!/usr/bin/env node
+import {
+  startBridge
+} from "./chunk-GMH5B5YX.js";
+export {
+  startBridge
+};