@ai-codebot/daemon 0.1.0

package/dist/spawn/result-map.js

@@ -0,0 +1,68 @@
+/**
+ * Outcome → `Result` frame mapping (design §4 — DR-6, OQ-6).
+ *
+ * Maps the internal executor outcome (CLI exit code / N2 loop status) to the closed
+ * `Result.status` set `succeeded | failed | timed_out`, mirroring the Python
+ * `agentic_backend` contract (`success` → `succeeded`).
+ *
+ *   - CLI exit 0 / N2 `success`        → succeeded (text=summary, diff, files)
+ *   - N2 `no_changes`                  → succeeded (diff null)
+ *   - N2 `needs_clarification`         → succeeded (text=question)
+ *   - CLI nonzero / N2 `error`/crash   → failed (error, NO secrets)
+ *   - deadline                         → timed_out
+ *
+ * `cost_usd` is ALWAYS `null` (the tenant runs their own model — cost is unknown,
+ * NOT 0; OQ-6).
+ */
+/** Trailing chars of stderr kept on a failure result (no full dump). */
+export const ERROR_TAIL_CHARS = 4000;
+/** Map an internal outcome to the wire `Result` frame for a launch. */
+export function toResult(launchId, outcome) {
+    const base = {
+        type: "result",
+        launch_id: launchId,
+        // cost_usd is the tenant's own model — unknown, NOT 0 (OQ-6).
+        cost_usd: null,
+    };
+    switch (outcome.kind) {
+        case "success":
+            return {
+                ...base,
+                status: "succeeded",
+                text: outcome.text,
+                diff: outcome.diff,
+                files: outcome.files,
+            };
+        case "no_changes":
+            return {
+                ...base,
+                status: "succeeded",
+                text: outcome.text,
+                diff: null,
+                files: [],
+            };
+        case "needs_clarification":
+            return {
+                ...base,
+                status: "succeeded",
+                text: outcome.question,
+                diff: null,
+                files: [],
+            };
+        case "failed":
+            return {
+                ...base,
+                status: "failed",
+                error: outcome.error.slice(-ERROR_TAIL_CHARS),
+            };
+        case "timed_out":
+            return {
+                ...base,
+                status: "timed_out",
+                error: outcome.error
+                    ? outcome.error.slice(-ERROR_TAIL_CHARS)
+                    : "deadline exceeded",
+            };
+    }
+}
+//# sourceMappingURL=result-map.js.map

package/dist/spawn/result-map.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result-map.js","sourceRoot":"","sources":["../../src/spawn/result-map.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAiBH,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,uEAAuE;AACvE,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,OAAoB;IAC7D,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,QAAiB;QACvB,SAAS,EAAE,QAAQ;QACnB,8DAA8D;QAC9D,QAAQ,EAAE,IAAI;KACf,CAAC;IAEF,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,WAAW;gBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,OAAO,CAAC,KAAK;aACrB,CAAC;QACJ,KAAK,YAAY;YACf,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,WAAW;gBACnB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,KAAK,qBAAqB;YACxB,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,WAAW;gBACnB,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC;aAC9C,CAAC;QACJ,KAAK,WAAW;YACd,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,OAAO,CAAC,KAAK;oBAClB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC;oBACxC,CAAC,CAAC,mBAAmB;aACxB,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/tunnel.d.ts

@@ -0,0 +1,61 @@
+/**
+ * WebSocket tunnel to the cloud relay (`/daemon/connect`, design §3).
+ *
+ * - Bearer in the `Authorization` HEADER (never query — the server rejects query
+ *   keys and proxies log query strings).
+ * - `maxPayload = MAX_FRAME_BYTES` (256 KiB) — the wire-level frame ceiling.
+ * - Handshake: send `Hello` on open → recv `HelloAck` (resets backoff) → loop:
+ *   `Ping`→reply `Pong`, `Launch`→run a launch, `error`→handle.
+ * - Inbound frames are zod-validated at the boundary; a malformed frame is logged
+ *   and ignored — never crashes the loop.
+ * - Close codes: 4401 unauth → NO reconnect (exit non-zero); 4409 superseded → NO
+ *   reconnect (exit clean); 4408 / 1006 / network → reconnect with exp backoff +
+ *   FULL JITTER (base 1s, cap 30s), unbounded for transient only.
+ */
+import WebSocket from "ws";
+import { type Launch, type OutboundFrame } from "./frames.js";
+export declare const CLOSE_UNAUTH = 4401;
+export declare const CLOSE_HEARTBEAT = 4408;
+export declare const CLOSE_SUPERSEDED = 4409;
+export declare const BACKOFF_BASE_MS = 1000;
+export declare const BACKOFF_CAP_MS = 30000;
+/** Full-jitter backoff for retry `attempt` (0-based). PUBLIC for unit testing. */
+export declare function backoffDelayMs(attempt: number, random?: () => number): number;
+/**
+ * Decide the outbound HTTPS proxy for `serverUrl` from the env (DR-1). Returns the
+ * proxy URL string when `HTTPS_PROXY`/`https_proxy` is set AND the host is NOT
+ * excluded by `NO_PROXY`/`no_proxy`; otherwise `null` (direct dial). Pure + unit
+ * tested — no I/O, env injected for tests.
+ */
+export declare function resolveProxyUrl(serverUrl: string, env?: NodeJS.ProcessEnv): string | null;
+export interface TunnelOptions {
+    readonly serverUrl: string;
+    readonly apiKey: string;
+    readonly daemonVersion: string;
+    readonly advertisedTools: string[];
+    /** Handle one Launch → resolve with the outbound frames to send (Progress*, Result). */
+    readonly onLaunch: (launch: Launch, send: (frame: OutboundFrame) => void) => Promise<void>;
+    /** Stop after the first handled launch (`--once`, for CI). */
+    readonly once: boolean;
+    /** Injected for tests; defaults to the real `ws`. */
+    readonly wsFactory?: (url: string, opts: {
+        headers: Record<string, string>;
+        maxPayload: number;
+    }) => WebSocket;
+    readonly random?: () => number;
+    /** Sleep hook (injected for tests). */
+    readonly sleep?: (ms: number) => Promise<void>;
+}
+/** Why the connection loop terminated (drives exit code). */
+export type TunnelExit = {
+    kind: "unauth";
+} | {
+    kind: "superseded";
+} | {
+    kind: "once_done";
+};
+/**
+ * Run the tunnel until a terminal condition (4401 / 4409 / `--once`). Transient
+ * disconnects reconnect with backoff. Resolves with the terminal exit reason.
+ */
+export declare function runTunnel(opts: TunnelOptions): Promise<TunnelExit>;

package/dist/tunnel.js

@@ -0,0 +1,205 @@
+/**
+ * WebSocket tunnel to the cloud relay (`/daemon/connect`, design §3).
+ *
+ * - Bearer in the `Authorization` HEADER (never query — the server rejects query
+ *   keys and proxies log query strings).
+ * - `maxPayload = MAX_FRAME_BYTES` (256 KiB) — the wire-level frame ceiling.
+ * - Handshake: send `Hello` on open → recv `HelloAck` (resets backoff) → loop:
+ *   `Ping`→reply `Pong`, `Launch`→run a launch, `error`→handle.
+ * - Inbound frames are zod-validated at the boundary; a malformed frame is logged
+ *   and ignored — never crashes the loop.
+ * - Close codes: 4401 unauth → NO reconnect (exit non-zero); 4409 superseded → NO
+ *   reconnect (exit clean); 4408 / 1006 / network → reconnect with exp backoff +
+ *   FULL JITTER (base 1s, cap 30s), unbounded for transient only.
+ */
+import { HttpsProxyAgent } from "https-proxy-agent";
+import WebSocket from "ws";
+import { MAX_FRAME_BYTES, makeHello, makePong, parseInbound, } from "./frames.js";
+import { log } from "./logging.js";
+// Close codes (mirror daemon_connect.py §8.6).
+export const CLOSE_UNAUTH = 4401;
+export const CLOSE_HEARTBEAT = 4408;
+export const CLOSE_SUPERSEDED = 4409;
+// Backoff (design §3): exp base 1s, cap 30s, full jitter.
+export const BACKOFF_BASE_MS = 1000;
+export const BACKOFF_CAP_MS = 30_000;
+/** Full-jitter backoff for retry `attempt` (0-based). PUBLIC for unit testing. */
+export function backoffDelayMs(attempt, random = Math.random) {
+    const exp = Math.min(BACKOFF_CAP_MS, BACKOFF_BASE_MS * 2 ** attempt);
+    return Math.floor(random() * exp);
+}
+/** True if `host` matches any NO_PROXY entry (DR-1). `*` / empty entry = match-all. */
+function hostMatchesNoProxy(host, noProxy) {
+    const lowerHost = host.toLowerCase();
+    for (const rawEntry of noProxy.split(",")) {
+        const entry = rawEntry.trim().toLowerCase();
+        if (entry === "")
+            continue;
+        if (entry === "*")
+            return true;
+        // Leading-dot / suffix match: ".example.com" or "example.com" matches sub.example.com.
+        const suffix = entry.startsWith(".") ? entry : `.${entry}`;
+        if (lowerHost === entry || lowerHost.endsWith(suffix))
+            return true;
+    }
+    return false;
+}
+/**
+ * Decide the outbound HTTPS proxy for `serverUrl` from the env (DR-1). Returns the
+ * proxy URL string when `HTTPS_PROXY`/`https_proxy` is set AND the host is NOT
+ * excluded by `NO_PROXY`/`no_proxy`; otherwise `null` (direct dial). Pure + unit
+ * tested — no I/O, env injected for tests.
+ */
+export function resolveProxyUrl(serverUrl, env = process.env) {
+    const proxy = env["HTTPS_PROXY"] ?? env["https_proxy"] ?? null;
+    if (!proxy)
+        return null;
+    let host;
+    try {
+        host = new URL(serverUrl).hostname;
+    }
+    catch {
+        return null;
+    }
+    const noProxy = env["NO_PROXY"] ?? env["no_proxy"] ?? "";
+    if (noProxy && hostMatchesNoProxy(host, noProxy))
+        return null;
+    return proxy;
+}
+const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+function defaultWsFactory(url, opts) {
+    // DR-1: dial through HTTPS_PROXY when set and the host isn't NO_PROXY-excluded,
+    // else direct. Corporate-proxy environments need this to reach the relay at all.
+    const proxyUrl = resolveProxyUrl(url);
+    const agent = proxyUrl !== null ? new HttpsProxyAgent(proxyUrl) : undefined;
+    if (proxyUrl !== null)
+        log.info("tunnel.proxy", { proxied: true });
+    return new WebSocket(url, {
+        headers: opts.headers,
+        maxPayload: opts.maxPayload,
+        agent,
+    });
+}
+/**
+ * Run the tunnel until a terminal condition (4401 / 4409 / `--once`). Transient
+ * disconnects reconnect with backoff. Resolves with the terminal exit reason.
+ */
+export async function runTunnel(opts) {
+    const wsFactory = opts.wsFactory ?? defaultWsFactory;
+    const random = opts.random ?? Math.random;
+    const sleep = opts.sleep ?? defaultSleep;
+    let attempt = 0;
+    for (;;) {
+        const result = await connectOnce(opts, wsFactory);
+        if (result.kind === "unauth")
+            return { kind: "unauth" };
+        if (result.kind === "superseded")
+            return { kind: "superseded" };
+        if (result.kind === "once_done")
+            return { kind: "once_done" };
+        // Transient (handshakeOk resets backoff): reconnect with full jitter.
+        if (result.handshakeOk)
+            attempt = 0;
+        const delay = backoffDelayMs(attempt, random);
+        attempt += 1;
+        log.info("tunnel.reconnect", { attempt, delay_ms: delay });
+        await sleep(delay);
+    }
+}
+function connectOnce(opts, wsFactory) {
+    return new Promise((resolvePromise) => {
+        let handshakeOk = false;
+        let settled = false;
+        const settle = (r) => {
+            if (settled)
+                return;
+            settled = true;
+            resolvePromise({ ...r, handshakeOk });
+        };
+        const ws = wsFactory(opts.serverUrl, {
+            // Bearer in the HEADER, never the query string.
+            headers: { authorization: `Bearer ${opts.apiKey}` },
+            maxPayload: MAX_FRAME_BYTES,
+        });
+        const send = (frame) => {
+            if (ws.readyState === WebSocket.OPEN) {
+                ws.send(JSON.stringify(frame));
+            }
+        };
+        ws.on("open", () => {
+            log.info("tunnel.open", {});
+            send(makeHello(opts.daemonVersion, opts.advertisedTools));
+        });
+        ws.on("message", (data) => {
+            void handleMessage(data, ws, opts, send, () => {
+                handshakeOk = true;
+            }, () => settle({ kind: "once_done", handshakeOk: true }));
+        });
+        ws.on("close", (code) => {
+            log.info("tunnel.close", { code });
+            if (code === CLOSE_UNAUTH) {
+                settle({ kind: "unauth", handshakeOk });
+            }
+            else if (code === CLOSE_SUPERSEDED) {
+                settle({ kind: "superseded", handshakeOk });
+            }
+            else {
+                // 4408 / 1006 / normal / network → reconnect.
+                settle({ kind: "transient", handshakeOk });
+            }
+        });
+        ws.on("error", (err) => {
+            // Don't double-settle; the close event (1006 on a failed handshake) drives the
+            // reconnect. Log only — never crash the loop.
+            log.warn("tunnel.error", { error: err.message });
+        });
+    });
+}
+async function handleMessage(data, ws, opts, send, onHandshake, onOnceDone) {
+    let raw;
+    try {
+        raw = JSON.parse(data.toString());
+    }
+    catch {
+        log.warn("tunnel.bad_json", {});
+        return;
+    }
+    let frame;
+    try {
+        frame = parseInbound(raw);
+    }
+    catch {
+        // Unknown/malformed server frame → log + ignore, never crash the loop.
+        log.warn("tunnel.bad_frame", {});
+        return;
+    }
+    switch (frame.type) {
+        case "hello_ack":
+            onHandshake();
+            log.info("tunnel.hello_ack", { machine_id: frame.machine_id });
+            return;
+        case "ping":
+            send(makePong(frame.nonce));
+            return;
+        case "error":
+            log.warn("tunnel.server_error", {
+                code: frame.code,
+                launch_id: frame.launch_id ?? null,
+            });
+            return;
+        case "launch":
+            await opts.onLaunch(frame, send);
+            if (opts.once) {
+                // One launch handled — close cleanly and signal exit.
+                try {
+                    ws.close(1000);
+                }
+                catch {
+                    /* ignore */
+                }
+                onOnceDone();
+            }
+            return;
+    }
+}
+//# sourceMappingURL=tunnel.js.map

package/dist/tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../src/tunnel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,SAAS,MAAM,IAAI,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,SAAS,EACT,QAAQ,EACR,YAAY,GAIb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,+CAA+C;AAC/C,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,0DAA0D;AAC1D,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAErC,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,SAAuB,IAAI,CAAC,MAAM;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,eAAe,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,uFAAuF;AACvF,SAAS,kBAAkB,CAAC,IAAY,EAAE,OAAe;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACrC,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QAC3B,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC/B,uFAAuF;QACvF,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;QAC3D,IAAI,SAAS,KAAK,KAAK,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC;IAC/D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9D,OAAO,KAAK,CAAC;AACf,CAAC;AA8BD,MAAM,YAAY,GAAG,CAAC,EAAU,EAAiB,EAAE,CACjD,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAExC,SAAS,gBAAgB,CACvB,GAAW,EACX,IAA6D;IAE7D,gFAAgF;IAChF,iFAAiF;IACjF,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IAAI,QAAQ,KAAK,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE;QACxB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAmB;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IAEzC,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAElD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChE,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAE9D,sEAAsE;QACtE,IAAI,MAAM,CAAC,WAAW;YAAE,OAAO,GAAG,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAQD,SAAS,WAAW,CAClB,IAAmB,EACnB,SAAkD;IAElD,OAAO,IAAI,OAAO,CAAgB,CAAC,cAAc,EAAE,EAAE;QACnD,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,CAAgB,EAAQ,EAAE;YACxC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,cAAc,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC;QAEF,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE;YACnC,gDAAgD;YAChD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;YACnD,UAAU,EAAE,eAAe;SAC5B,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,CAAC,KAAoB,EAAQ,EAAE;YAC1C,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACrC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC;QAEF,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACjB,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAuB,EAAE,EAAE;YAC3C,KAAK,aAAa,CAChB,IAAI,EACJ,EAAE,EACF,IAAI,EACJ,IAAI,EACJ,GAAG,EAAE;gBACH,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC,EACD,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CACvD,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE;YAC9B,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;YAC1C,CAAC;iBAAM,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACrC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,8CAA8C;gBAC9C,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC5B,+EAA+E;YAC/E,8CAA8C;YAC9C,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAuB,EACvB,EAAa,EACb,IAAmB,EACnB,IAAoC,EACpC,WAAuB,EACvB,UAAsB;IAEtB,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IAED,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,WAAW;YACd,WAAW,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,KAAK,MAAM;YACT,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5B,OAAO;QACT,KAAK,OAAO;YACV,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE;gBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;aACnC,CAAC,CAAC;YACH,OAAO;QACT,KAAK,QAAQ;YACX,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,sDAAsD;gBACtD,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjB,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;gBACD,UAAU,EAAE,CAAC;YACf,CAAC;YACD,OAAO;IACX,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@ai-codebot/daemon",
+  "version": "0.1.0",
+  "description": "slock local-runner daemon — dials the cloud relay over outbound WSS and brokers a local coding-agent CLI through a 127.0.0.1 capability proxy.",
+  "license": "MIT",
+  "author": "ai-codebot",
+  "homepage": "https://github.com/lufeng0715/ai-codebot/tree/main/packages/local-daemon#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lufeng0715/ai-codebot.git",
+    "directory": "packages/local-daemon"
+  },
+  "bugs": {
+    "url": "https://github.com/lufeng0715/ai-codebot/issues"
+  },
+  "keywords": [
+    "ai-codebot",
+    "local-runner",
+    "daemon",
+    "coding-agent",
+    "cli"
+  ],
+  "type": "module",
+  "private": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "bin": {
+    "codebot-daemon": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "lint": "eslint . --ext .ts",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "tsx --test test/*.test.ts",
+    "prepack": "tsc -p tsconfig.json"
+  },
+  "dependencies": {
+    "https-proxy-agent": "^7.0.6",
+    "ws": "^8.18.0",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@types/node": "^22.7.5",
+    "@types/ws": "^8.5.12",
+    "@typescript-eslint/eslint-plugin": "^7.18.0",
+    "@typescript-eslint/parser": "^7.18.0",
+    "eslint": "^8.57.0",
+    "tsx": "^4.19.1",
+    "typescript": "^5.6.2"
+  }
+}