@agent-link/server 0.1.0

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,125 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import { spawn } from 'child_process';
+import { openSync } from 'fs';
+import { join, dirname, resolve } from 'path';
+import { fileURLToPath } from 'url';
+import { loadServerRuntimeState, clearServerRuntimeState, getLogDir, killProcess, isProcessAlive, } from './config.js';
+const program = new Command();
+program
+    .name('agentlink-server')
+    .description('AgentLink relay server')
+    .version('0.1.0');
+program
+    .command('start')
+    .description('Start the relay server')
+    .option('-p, --port <port>', 'Server port', '3456')
+    .option('-D, --daemon', 'Run server in the background as a daemon')
+    .action(async (options) => {
+    const existing = loadServerRuntimeState();
+    if (existing && isProcessAlive(existing.pid)) {
+        console.log(`Server is already running (PID ${existing.pid}, port ${existing.port}).`);
+        console.log('Use "agentlink-server stop" to stop it first.');
+        process.exit(1);
+    }
+    if (existing)
+        clearServerRuntimeState();
+    if (!options.daemon) {
+        // Foreground mode: run server directly
+        process.env.PORT = options.port;
+        await import('./index.js');
+        return;
+    }
+    // Daemon mode: spawn detached child
+    const __filename = fileURLToPath(import.meta.url);
+    const serverScript = resolve(dirname(__filename), 'index.js');
+    const logDir = getLogDir();
+    const logFile = join(logDir, 'server.log');
+    const errFile = join(logDir, 'server.err');
+    const out = openSync(logFile, 'a');
+    const err = openSync(errFile, 'a');
+    const child = spawn(process.execPath, [serverScript], {
+        detached: true,
+        stdio: ['ignore', out, err],
+        env: { ...process.env, PORT: options.port },
+    });
+    child.unref();
+    // Wait for server to write its runtime state
+    const maxWait = 5000;
+    const interval = 300;
+    let waited = 0;
+    let state = null;
+    while (waited < maxWait) {
+        await new Promise(r => setTimeout(r, interval));
+        waited += interval;
+        state = loadServerRuntimeState();
+        if (state && state.pid !== process.pid)
+            break;
+    }
+    if (state && state.pid !== process.pid) {
+        console.log(`Server started (PID ${state.pid}, port ${state.port}).`);
+        console.log(`  URL: http://localhost:${state.port}`);
+        console.log(`  Log: ${logFile}`);
+    }
+    else {
+        console.error('Server may have failed to start. Check logs:');
+        console.error(`  ${errFile}`);
+        process.exit(1);
+    }
+});
+program
+    .command('stop')
+    .description('Stop the running relay server')
+    .action(async () => {
+    const state = loadServerRuntimeState();
+    if (!state) {
+        console.log('Server is not running (no runtime state found).');
+        return;
+    }
+    if (!isProcessAlive(state.pid)) {
+        console.log('Server is not running (process already exited).');
+        clearServerRuntimeState();
+        return;
+    }
+    console.log(`Stopping server (PID ${state.pid})...`);
+    if (!killProcess(state.pid)) {
+        console.error('Failed to stop server.');
+        process.exit(1);
+    }
+    // Wait for exit
+    const maxWait = 5000;
+    const interval = 200;
+    let waited = 0;
+    while (waited < maxWait) {
+        await new Promise(r => setTimeout(r, interval));
+        waited += interval;
+        if (!isProcessAlive(state.pid)) {
+            clearServerRuntimeState();
+            console.log('Server stopped.');
+            return;
+        }
+    }
+    clearServerRuntimeState();
+    console.log('Server stopped.');
+});
+program
+    .command('status')
+    .description('Show server status')
+    .action(() => {
+    const state = loadServerRuntimeState();
+    if (!state) {
+        console.log('Server: not running');
+    }
+    else if (!isProcessAlive(state.pid)) {
+        console.log('Server: not running (stale state)');
+        clearServerRuntimeState();
+    }
+    else {
+        console.log('Server: running');
+        console.log(`  PID:     ${state.pid}`);
+        console.log(`  Port:    ${state.port}`);
+        console.log(`  Started: ${state.startedAt}`);
+    }
+});
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EACL,sBAAsB,EAAE,uBAAuB,EAAE,SAAS,EAC1D,WAAW,EAAE,cAAc,GAC5B,MAAM,aAAa,CAAC;AAErB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,kBAAkB,CAAC;KACxB,WAAW,CAAC,wBAAwB,CAAC;KACrC,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,wBAAwB,CAAC;KACrC,MAAM,CAAC,mBAAmB,EAAE,aAAa,EAAE,MAAM,CAAC;KAClD,MAAM,CAAC,cAAc,EAAE,0CAA0C,CAAC;KAClE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACxB,MAAM,QAAQ,GAAG,sBAAsB,EAAE,CAAC;IAC1C,IAAI,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,kCAAkC,QAAQ,CAAC,GAAG,UAAU,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,QAAQ;QAAE,uBAAuB,EAAE,CAAC;IAExC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,uCAAuC;QACvC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAChC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,oCAAoC;IACpC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAE3C,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAEnC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE;QACpD,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC;QAC3B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;KAC5C,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,6CAA6C;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC;IACrB,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,OAAO,MAAM,GAAG,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChD,MAAM,IAAI,QAAQ,CAAC;QACnB,KAAK,GAAG,sBAAsB,EAAE,CAAC;QACjC,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;YAAE,MAAM;IAChD,CAAC;IAED,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,CAAC,GAAG,UAAU,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,+BAA+B,CAAC;KAC5C,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,uBAAuB,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,gBAAgB;IAChB,MAAM,OAAO,GAAG,IAAI,CAAC;IACrB,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChD,MAAM,IAAI,QAAQ,CAAC;QACnB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,uBAAuB,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;IACH,CAAC;IAED,uBAAuB,EAAE,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,oBAAoB,CAAC;KACjC,MAAM,CAAC,GAAG,EAAE;IACX,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,uBAAuB,EAAE,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,12 @@
+export declare const CONFIG_DIR: string;
+export interface ServerRuntimeState {
+    pid: number;
+    port: number;
+    startedAt: string;
+}
+export declare function saveServerRuntimeState(state: ServerRuntimeState): void;
+export declare function loadServerRuntimeState(): ServerRuntimeState | null;
+export declare function clearServerRuntimeState(): void;
+export declare function getLogDir(): string;
+export declare function killProcess(pid: number): boolean;
+export declare function isProcessAlive(pid: number): boolean;

package/dist/config.js

@@ -0,0 +1,64 @@
+import { readFileSync, writeFileSync, mkdirSync, existsSync, unlinkSync } from 'fs';
+import { execSync } from 'child_process';
+import { join } from 'path';
+import { homedir } from 'os';
+export const CONFIG_DIR = join(homedir(), '.agentlink');
+const SERVER_RUNTIME_FILE = join(CONFIG_DIR, 'server.json');
+const LOG_DIR = join(CONFIG_DIR, 'logs');
+function ensureConfigDir() {
+    if (!existsSync(CONFIG_DIR)) {
+        mkdirSync(CONFIG_DIR, { recursive: true });
+    }
+}
+export function saveServerRuntimeState(state) {
+    ensureConfigDir();
+    writeFileSync(SERVER_RUNTIME_FILE, JSON.stringify(state, null, 2) + '\n', 'utf-8');
+}
+export function loadServerRuntimeState() {
+    try {
+        const raw = readFileSync(SERVER_RUNTIME_FILE, 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export function clearServerRuntimeState() {
+    try {
+        unlinkSync(SERVER_RUNTIME_FILE);
+    }
+    catch {
+        // file may not exist
+    }
+}
+export function getLogDir() {
+    if (!existsSync(LOG_DIR)) {
+        mkdirSync(LOG_DIR, { recursive: true });
+    }
+    return LOG_DIR;
+}
+// ── Cross-platform process management ──
+export function killProcess(pid) {
+    try {
+        if (process.platform === 'win32') {
+            execSync(`taskkill /pid ${pid} /f /t`, { stdio: 'ignore' });
+        }
+        else {
+            process.kill(pid, 'SIGTERM');
+        }
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAE7B,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AACxD,MAAM,mBAAmB,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AAEzC,SAAS,eAAe;IACtB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAUD,MAAM,UAAU,sBAAsB,CAAC,KAAyB;IAC9D,eAAe,EAAE,CAAC;IAClB,aAAa,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,IAAI,CAAC;QACH,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0CAA0C;AAE1C,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,QAAQ,CAAC,iBAAiB,GAAG,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,27 @@
+import { WebSocket } from 'ws';
+export interface AgentSession {
+    ws: WebSocket;
+    agentId: string;
+    name: string;
+    hostname: string;
+    workDir: string;
+    sessionId: string;
+    sessionKey: Uint8Array | null;
+    connectedAt: Date;
+    isAlive: boolean;
+}
+export interface WebClient {
+    ws: WebSocket;
+    clientId: string;
+    sessionId: string;
+    sessionKey: Uint8Array | null;
+    connectedAt: Date;
+    isAlive: boolean;
+}
+export declare const agents: Map<string, AgentSession>;
+export declare const sessionToAgent: Map<string, string>;
+export declare const webClients: Map<string, WebClient>;
+/**
+ * Generate a short, URL-safe session ID
+ */
+export declare function generateSessionId(): string;

package/dist/context.js

@@ -0,0 +1,14 @@
+import { randomBytes } from 'crypto';
+// Agent sessions: agentId → AgentSession
+export const agents = new Map();
+// Session ID → agentId (reverse lookup)
+export const sessionToAgent = new Map();
+// Web clients: clientId → WebClient
+export const webClients = new Map();
+/**
+ * Generate a short, URL-safe session ID
+ */
+export function generateSessionId() {
+    return randomBytes(12).toString('base64url');
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAuBrC,yCAAyC;AACzC,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;AAEtD,wCAAwC;AACxC,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;AAExD,oCAAoC;AACpC,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAqB,CAAC;AAEvD;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC"}

package/dist/encryption.d.ts

@@ -0,0 +1,23 @@
+export declare function generateSessionKey(): Uint8Array;
+export declare function encrypt(data: unknown, key: Uint8Array): Promise<{
+    n: string;
+    c: string;
+    z?: boolean;
+}>;
+export declare function decrypt(encrypted: {
+    n: string;
+    c: string;
+    z?: boolean;
+}, key: Uint8Array): Promise<unknown | null>;
+export declare function isEncrypted(msg: unknown): msg is {
+    n: string;
+    c: string;
+    z?: boolean;
+};
+export declare function encodeKey(key: Uint8Array): string;
+export declare function decodeKey(encodedKey: string): Uint8Array;
+export declare function parseMessage(data: string, sessionKey: Uint8Array | null): Promise<Record<string, unknown> | null>;
+export declare function encryptAndSend(ws: {
+    send: (data: string) => void;
+    readyState: number;
+}, msg: unknown, sessionKey: Uint8Array | null): Promise<void>;

package/dist/encryption.js

@@ -0,0 +1,83 @@
+import tweetnacl from 'tweetnacl';
+import tweetnaclUtil from 'tweetnacl-util';
+import zlib from 'zlib';
+import { promisify } from 'util';
+const gzip = promisify(zlib.gzip);
+const gunzip = promisify(zlib.gunzip);
+const { encodeBase64, decodeBase64, encodeUTF8, decodeUTF8 } = tweetnaclUtil;
+const COMPRESS_THRESHOLD = 512;
+export function generateSessionKey() {
+    return tweetnacl.randomBytes(32);
+}
+export async function encrypt(data, key) {
+    const nonce = tweetnacl.randomBytes(24);
+    const jsonStr = JSON.stringify(data);
+    let message;
+    let compressed = false;
+    if (jsonStr.length > COMPRESS_THRESHOLD) {
+        const compressedBuf = await gzip(Buffer.from(jsonStr, 'utf8'));
+        message = new Uint8Array(compressedBuf);
+        compressed = true;
+    }
+    else {
+        message = decodeUTF8(jsonStr);
+    }
+    const encrypted = tweetnacl.secretbox(message, nonce, key);
+    const result = {
+        n: encodeBase64(nonce),
+        c: encodeBase64(encrypted),
+    };
+    if (compressed)
+        result.z = true;
+    return result;
+}
+export async function decrypt(encrypted, key) {
+    try {
+        const nonce = decodeBase64(encrypted.n);
+        const ciphertext = decodeBase64(encrypted.c);
+        const decrypted = tweetnacl.secretbox.open(ciphertext, nonce, key);
+        if (!decrypted)
+            return null;
+        if (encrypted.z) {
+            const decompressed = await gunzip(Buffer.from(decrypted));
+            return JSON.parse(decompressed.toString('utf8'));
+        }
+        else {
+            return JSON.parse(encodeUTF8(decrypted));
+        }
+    }
+    catch {
+        return null;
+    }
+}
+export function isEncrypted(msg) {
+    return msg !== null && typeof msg === 'object' && typeof msg.n === 'string' && typeof msg.c === 'string';
+}
+export function encodeKey(key) {
+    return encodeBase64(key);
+}
+export function decodeKey(encodedKey) {
+    return decodeBase64(encodedKey);
+}
+export async function parseMessage(data, sessionKey) {
+    try {
+        const parsed = JSON.parse(data);
+        if (sessionKey && isEncrypted(parsed)) {
+            return await decrypt(parsed, sessionKey);
+        }
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+export async function encryptAndSend(ws, msg, sessionKey) {
+    if (sessionKey) {
+        const encrypted = await encrypt(msg, sessionKey);
+        ws.send(JSON.stringify(encrypted));
+    }
+    else {
+        ws.send(JSON.stringify(msg));
+    }
+}
+//# sourceMappingURL=encryption.js.map

package/dist/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../src/encryption.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,WAAW,CAAC;AAClC,OAAO,aAAa,MAAM,gBAAgB,CAAC;AAC3C,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAEtC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,aAAa,CAAC;AAE7E,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,MAAM,UAAU,kBAAkB;IAChC,OAAO,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAa,EAAE,GAAe;IAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAErC,IAAI,OAAmB,CAAC;IACxB,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACxC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,OAAO,GAAG,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC;QACxC,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,MAAM,GAA0C;QACpD,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC;QACtB,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC;KAC3B,CAAC;IACF,IAAI,UAAU;QAAE,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,SAAgD,EAAE,GAAe;IAC7F,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,IAAI,SAAS,CAAC,CAAC,EAAE,CAAC;YAChB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,OAAO,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAQ,GAA+B,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAQ,GAA+B,CAAC,CAAC,KAAK,QAAQ,CAAC;AACrK,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAe;IACvC,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,UAAkB;IAC1C,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,UAA6B;IAC5E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,UAAU,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,OAAO,MAAM,OAAO,CAAC,MAAM,EAAE,UAAU,CAAmC,CAAC;QAC7E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAwD,EAAE,GAAY,EAAE,UAA6B;IACxI,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACjD,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/index.js

@@ -0,0 +1,99 @@
+import express from 'express';
+import { createServer } from 'http';
+import { WebSocketServer } from 'ws';
+import { fileURLToPath } from 'url';
+import { dirname, join } from 'path';
+import { agents, webClients } from './context.js';
+import { handleAgentConnection } from './ws-agent.js';
+import { handleWebConnection } from './ws-client.js';
+import { saveServerRuntimeState, clearServerRuntimeState } from './config.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PORT = parseInt(process.env.PORT || '3456', 10);
+const app = express();
+const server = createServer(app);
+const wss = new WebSocketServer({ server });
+const webDir = join(__dirname, '../web');
+// Serve static assets from web/
+app.use(express.static(webDir));
+// SPA fallback: /s/:sessionId → serve index.html (Vue router handles the rest)
+app.get('/s/:sessionId', (_req, res) => {
+    res.sendFile(join(webDir, 'index.html'));
+});
+// Health check
+app.get('/api/health', (_req, res) => {
+    res.json({
+        status: 'ok',
+        agents: agents.size,
+        webClients: webClients.size,
+        timestamp: new Date().toISOString(),
+    });
+});
+// Session info API (web client fetches this to know agent details)
+app.get('/api/session/:sessionId', (req, res) => {
+    const { sessionId } = req.params;
+    for (const [, agent] of agents) {
+        if (agent.sessionId === sessionId) {
+            res.json({
+                sessionId,
+                agent: {
+                    name: agent.name,
+                    workDir: agent.workDir,
+                    connectedAt: agent.connectedAt,
+                },
+            });
+            return;
+        }
+    }
+    res.status(404).json({ error: 'Session not found' });
+});
+// WebSocket routing: agent or web client
+wss.on('connection', (ws, req) => {
+    const url = new URL(req.url || '/', `http://${req.headers.host}`);
+    const type = url.searchParams.get('type');
+    if (type === 'agent') {
+        handleAgentConnection(ws, req);
+    }
+    else if (type === 'web') {
+        handleWebConnection(ws, req);
+    }
+    else {
+        ws.send(JSON.stringify({ type: 'error', message: 'Unknown type. Use ?type=agent or ?type=web' }));
+        ws.close();
+    }
+});
+// Heartbeat every 30s to detect dead connections
+setInterval(() => {
+    for (const [agentId, agent] of agents) {
+        if (!agent.isAlive) {
+            console.log(`[Heartbeat] Agent ${agent.name} timed out`);
+            agent.ws.terminate();
+            return;
+        }
+        agent.isAlive = false;
+        agent.ws.ping();
+    }
+    for (const [clientId, client] of webClients) {
+        if (!client.isAlive) {
+            client.ws.terminate();
+            webClients.delete(clientId);
+            return;
+        }
+        client.isAlive = false;
+        client.ws.ping();
+    }
+}, 30_000);
+server.listen(PORT, () => {
+    console.log(`[AgentLink] Server listening on http://localhost:${PORT}`);
+    console.log(`[AgentLink] Web UI: ${webDir}`);
+    // Write server runtime state for CLI stop command
+    saveServerRuntimeState({
+        pid: process.pid,
+        port: PORT,
+        startedAt: new Date().toISOString(),
+    });
+});
+// Clean up runtime state on exit
+process.on('exit', clearServerRuntimeState);
+process.on('SIGINT', () => { clearServerRuntimeState(); process.exit(0); });
+process.on('SIGTERM', () => { clearServerRuntimeState(); process.exit(0); });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE9E,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;AAEtD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;AACtB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;AACjC,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAEzC,gCAAgC;AAChC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAEhC,+EAA+E;AAC/E,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACrC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,eAAe;AACf,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACnC,GAAG,CAAC,IAAI,CAAC;QACP,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,UAAU,EAAE,UAAU,CAAC,IAAI;QAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,mEAAmE;AACnE,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC9C,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IACjC,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC;gBACP,SAAS;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;iBAC/B;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC;AAEH,yCAAyC;AACzC,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAE1C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,qBAAqB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;SAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,mBAAmB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC,CAAC;QAClG,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,iDAAiD;AACjD,WAAW,CAAC,GAAG,EAAE;IACf,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC;YACzD,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;QACtB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC;YACtB,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IACnB,CAAC;AACH,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;IACvB,OAAO,CAAC,GAAG,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;IAE7C,kDAAkD;IAClD,sBAAsB,CAAC;QACrB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,iCAAiC;AACjC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAC5C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/ws-agent.d.ts

@@ -0,0 +1,3 @@
+import { WebSocket } from 'ws';
+import { IncomingMessage } from 'http';
+export declare function handleAgentConnection(ws: WebSocket, req: IncomingMessage): void;

package/dist/ws-agent.js

@@ -0,0 +1,74 @@
+import { WebSocket } from 'ws';
+import { randomUUID } from 'crypto';
+import { agents, sessionToAgent, webClients, generateSessionId, } from './context.js';
+import { generateSessionKey, encodeKey, parseMessage, encryptAndSend } from './encryption.js';
+export function handleAgentConnection(ws, req) {
+    const url = new URL(req.url || '/', `http://${req.headers.host}`);
+    const agentId = url.searchParams.get('id') || randomUUID();
+    const name = url.searchParams.get('name') || `Agent-${agentId.slice(0, 8)}`;
+    const workDir = url.searchParams.get('workDir') || 'unknown';
+    const hostname = url.searchParams.get('hostname') || '';
+    const sessionId = generateSessionId();
+    const sessionKey = generateSessionKey();
+    const agent = {
+        ws,
+        agentId,
+        name,
+        hostname,
+        workDir,
+        sessionId,
+        sessionKey,
+        connectedAt: new Date(),
+        isAlive: true,
+    };
+    agents.set(agentId, agent);
+    sessionToAgent.set(sessionId, agentId);
+    console.log(`[Agent] Registered: ${name} (${agentId}), session: ${sessionId}`);
+    // Send registration with session key (this initial message is plain text)
+    ws.send(JSON.stringify({
+        type: 'registered',
+        agentId,
+        sessionId,
+        sessionKey: encodeKey(sessionKey),
+    }));
+    ws.on('message', (data) => {
+        handleAgentMessage(agentId, data.toString());
+    });
+    ws.on('close', () => {
+        console.log(`[Agent] Disconnected: ${name} (${agentId})`);
+        sessionToAgent.delete(sessionId);
+        agents.delete(agentId);
+        // Notify connected web clients that agent is gone
+        for (const [, client] of webClients) {
+            if (client.sessionId === sessionId && client.ws.readyState === WebSocket.OPEN) {
+                encryptAndSend(client.ws, { type: 'agent_disconnected' }, client.sessionKey);
+            }
+        }
+    });
+    ws.on('pong', () => {
+        agent.isAlive = true;
+    });
+}
+async function handleAgentMessage(agentId, raw) {
+    const agent = agents.get(agentId);
+    if (!agent)
+        return;
+    const msg = await parseMessage(raw, agent.sessionKey);
+    if (!msg) {
+        console.error(`[Agent] Failed to parse/decrypt message from ${agentId}`);
+        return;
+    }
+    // Intercept workdir_changed to keep server state in sync
+    if (msg.type === 'workdir_changed' && typeof msg.workDir === 'string') {
+        agent.workDir = msg.workDir;
+        console.log(`[Agent] ${agent.name} changed workDir to: ${msg.workDir}`);
+    }
+    // Forward agent messages to all web clients connected to this session
+    // Re-encrypt with each client's own session key
+    for (const [, client] of webClients) {
+        if (client.sessionId === agent.sessionId && client.ws.readyState === WebSocket.OPEN) {
+            encryptAndSend(client.ws, msg, client.sessionKey);
+        }
+    }
+}
+//# sourceMappingURL=ws-agent.js.map

package/dist/ws-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-agent.js","sourceRoot":"","sources":["../src/ws-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAE/B,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EACL,MAAM,EACN,cAAc,EACd,UAAU,EACV,iBAAiB,GAElB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE9F,MAAM,UAAU,qBAAqB,CAAC,EAAa,EAAE,GAAoB;IACvE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;IAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAExD,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;IAExC,MAAM,KAAK,GAAiB;QAC1B,EAAE;QACF,OAAO;QACP,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,SAAS;QACT,UAAU;QACV,WAAW,EAAE,IAAI,IAAI,EAAE;QACvB,OAAO,EAAE,IAAI;KACd,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3B,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEvC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,KAAK,OAAO,eAAe,SAAS,EAAE,CAAC,CAAC;IAE/E,0EAA0E;IAC1E,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACrB,IAAI,EAAE,YAAY;QAClB,OAAO;QACP,SAAS;QACT,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC;KAClC,CAAC,CAAC,CAAC;IAEJ,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;QACxB,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAClB,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,KAAK,OAAO,GAAG,CAAC,CAAC;QAC1D,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEvB,kDAAkD;QAClD,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC9E,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACjB,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,GAAW;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO;IAEnB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,gDAAgD,OAAO,EAAE,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IAED,yDAAyD;IACzD,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACtE,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,IAAI,wBAAwB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,sEAAsE;IACtE,gDAAgD;IAChD,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACpF,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/ws-client.d.ts

@@ -0,0 +1,3 @@
+import { WebSocket } from 'ws';
+import { IncomingMessage } from 'http';
+export declare function handleWebConnection(ws: WebSocket, req: IncomingMessage): void;

package/dist/ws-client.js

@@ -0,0 +1,70 @@
+import { WebSocket } from 'ws';
+import { randomUUID } from 'crypto';
+import { agents, sessionToAgent, webClients, } from './context.js';
+import { generateSessionKey, encodeKey, parseMessage, encryptAndSend } from './encryption.js';
+export function handleWebConnection(ws, req) {
+    const url = new URL(req.url || '/', `http://${req.headers.host}`);
+    const sessionId = url.searchParams.get('sessionId');
+    const clientId = randomUUID();
+    if (!sessionId) {
+        ws.send(JSON.stringify({ type: 'error', message: 'Missing sessionId' }));
+        ws.close();
+        return;
+    }
+    // Check if agent exists for this session
+    const agentId = sessionToAgent.get(sessionId);
+    const agent = agentId ? agents.get(agentId) : undefined;
+    const sessionKey = generateSessionKey();
+    const client = {
+        ws,
+        clientId,
+        sessionId,
+        sessionKey,
+        connectedAt: new Date(),
+        isAlive: true,
+    };
+    webClients.set(clientId, client);
+    // Send connection result with agent info and session key (plain text — key exchange)
+    ws.send(JSON.stringify({
+        type: 'connected',
+        clientId,
+        sessionKey: encodeKey(sessionKey),
+        agent: agent ? {
+            agentId: agent.agentId,
+            name: agent.name,
+            hostname: agent.hostname,
+            workDir: agent.workDir,
+        } : null,
+    }));
+    console.log(`[Web] Client ${clientId.slice(0, 8)} connected to session ${sessionId}, agent: ${agent ? agent.name : 'none'}`);
+    ws.on('message', (data) => {
+        handleWebMessage(clientId, data.toString());
+    });
+    ws.on('close', () => {
+        console.log(`[Web] Client ${clientId.slice(0, 8)} disconnected`);
+        webClients.delete(clientId);
+    });
+    ws.on('pong', () => {
+        client.isAlive = true;
+    });
+}
+async function handleWebMessage(clientId, raw) {
+    const client = webClients.get(clientId);
+    if (!client)
+        return;
+    const msg = await parseMessage(raw, client.sessionKey);
+    if (!msg) {
+        console.error(`[Web] Failed to parse/decrypt message from ${clientId.slice(0, 8)}`);
+        return;
+    }
+    // Find the agent for this session and forward
+    const agentId = sessionToAgent.get(client.sessionId);
+    const agent = agentId ? agents.get(agentId) : undefined;
+    if (!agent || agent.ws.readyState !== WebSocket.OPEN) {
+        encryptAndSend(client.ws, { type: 'error', message: 'Agent not connected' }, client.sessionKey);
+        return;
+    }
+    // Forward web client message to agent, encrypted with agent's session key
+    encryptAndSend(agent.ws, msg, agent.sessionKey);
+}
+//# sourceMappingURL=ws-client.js.map