@amaster.ai/mirrorx-device-client 0.0.0-stage → 0.1.0

package/dist/codebuddy-session.js

@@ -0,0 +1,73 @@
+import { createHash } from "node:crypto";
+import { constants } from "node:fs";
+import { lstat, open, realpath, rm, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { acquireCodebuddyLocks } from "./codebuddy-locks.js";
+export const codebuddySessionPattern = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,127}$/;
+const digest = (value) => createHash("sha256").update(value).digest("hex");
+export const codebuddySessionLockKeys = (cwd, identity, sessionId) => [digest(`workspace:${cwd}`), digest(`session:${identity}:${sessionId}`)];
+async function privateDirectory(directory) {
+    const entry = await lstat(directory);
+    if (!entry.isDirectory() || entry.isSymbolicLink() || (entry.mode & 0o022)
+        || (process.getuid && entry.uid !== process.getuid()))
+        throw new Error("Unsafe WorkBuddy session directory");
+}
+async function readIdentity(directory) {
+    const file = await open(path.join(directory, ".identity.json"), constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const entry = await file.stat();
+        if (!entry.isFile() || entry.nlink !== 1 || entry.size > 16_384 || (entry.mode & 0o077)
+            || (process.getuid && entry.uid !== process.getuid()))
+            throw new Error("Unsafe WorkBuddy session identity");
+        return await file.readFile("utf8");
+    }
+    finally {
+        await file.close();
+    }
+}
+/** Non-secret identity is retained even when the private launch profile is reclaimed. */
+export async function rememberCodebuddySession(stateRoot, directory, identity) {
+    await privateDirectory(path.join(stateRoot, "codebuddy-sessions"));
+    await privateDirectory(directory);
+    try {
+        await writeFile(path.join(directory, ".identity.json"), identity, { flag: "wx", mode: 0o600 });
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+    }
+    if (await readIdentity(directory) !== identity)
+        throw new Error("WorkBuddy session identity changed");
+}
+/** Explicit destructive local recovery: never restores a stale checkpoint or changes a command receipt. */
+export async function discardCodebuddySession(input) {
+    if (process.platform === "win32")
+        throw new Error("WorkBuddy session reset is not supported on Windows");
+    if (!input.confirmedStopped)
+        throw new Error("Confirm the original tools have stopped and reconcile the command before discarding its native session");
+    if (!/^[a-f0-9]{64}$/.test(input.sessionKey) || !codebuddySessionPattern.test(input.sessionId))
+        throw new Error("Invalid WorkBuddy session identity");
+    const root = await realpath(input.stateRoot), parent = path.join(root, "codebuddy-sessions"), directory = path.join(parent, input.sessionKey);
+    await privateDirectory(parent);
+    await privateDirectory(directory);
+    const identity = await readIdentity(directory);
+    if (digest(identity) !== input.sessionKey)
+        throw new Error("WorkBuddy session identity changed");
+    const scope = JSON.parse(identity);
+    if (scope.companyId !== input.companyId || typeof scope.cwd !== "string" || await realpath(scope.cwd) !== scope.cwd)
+        throw new Error("WorkBuddy session does not belong to this company and workspace");
+    const locks = await acquireCodebuddyLocks(root, codebuddySessionLockKeys(scope.cwd, identity, input.sessionId));
+    try {
+        const marker = path.join(directory, input.sessionId + ".unsettled");
+        const entry = await lstat(marker);
+        if (!entry.isFile() || entry.isSymbolicLink() || (process.getuid && entry.uid !== process.getuid()))
+            throw new Error("Unsafe WorkBuddy session fence");
+        // A crash between removals leaves the fence in place. Never expose the old checkpoint again.
+        await rm(path.join(directory, input.sessionId + ".jsonl"), { force: true });
+        await rm(marker);
+    }
+    finally {
+        await locks.release();
+    }
+}
+//# sourceMappingURL=codebuddy-session.js.map

package/dist/codebuddy-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codebuddy-session.js","sourceRoot":"","sources":["../src/codebuddy-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,mCAAmC,CAAC;AAC3E,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAW,EAAE,QAAgB,EAAE,SAAiB,EAAE,EAAE,CAC3F,CAAC,MAAM,CAAC,aAAa,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,WAAW,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;AAE3E,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAC/C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;WACrE,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACjH,CAAC;AACD,KAAK,UAAU,YAAY,CAAC,SAAiB;IAC3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3G,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;eAClF,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC9G,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACnC,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,SAAiB,EAAE,SAAiB,EAAE,QAAgB;IACnG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACnE,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,CAAC;QAAC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IACvG,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IACtF,IAAI,MAAM,YAAY,CAAC,SAAS,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACxG,CAAC;AAED,2GAA2G;AAC3G,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAE7C;IACC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzG,IAAI,CAAC,KAAK,CAAC,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAC;IACvJ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACtJ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9I,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACxM,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,wBAAwB,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAChH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,GAAG,YAAY,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACvJ,6FAA6F;QAC7F,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;YAAS,CAAC;QAAC,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACtC,CAAC"}

package/dist/codebuddy-tool-gate.d.ts

@@ -0,0 +1,4 @@
+/** A fixed PreToolUse gate denies every tool outside this run's exact MCP names. */
+export declare function codebuddyToolGate(tools: string[]): string;
+export declare const shellQuote: (value: string) => string;
+//# sourceMappingURL=codebuddy-tool-gate.d.ts.map

package/dist/codebuddy-tool-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codebuddy-tool-gate.d.ts","sourceRoot":"","sources":["../src/codebuddy-tool-gate.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,UAMhD;AACD,eAAO,MAAM,UAAU,GAAI,OAAO,MAAM,WAA+C,CAAC"}

package/dist/codebuddy-tool-gate.js

@@ -0,0 +1,10 @@
+/** A fixed PreToolUse gate denies every tool outside this run's exact MCP names. */
+export function codebuddyToolGate(tools) {
+    return `const allowed=new Set(${JSON.stringify(tools)});let input='',oversized=false;
+process.stdin.setEncoding('utf8');process.stdin.on('data',chunk=>{if(input.length+chunk.length>8388608){oversized=true;input='';}else if(!oversized)input+=chunk;});
+process.stdin.on('end',()=>{let allow=false;try{const value=JSON.parse(input);allow=!oversized&&allowed.has(value.tool_name);}catch{}
+process.stdout.write(JSON.stringify({hookSpecificOutput:{hookEventName:'PreToolUse',permissionDecision:allow?'allow':'deny',permissionDecisionReason:allow?'Authorized run MCP tool':'Tool is outside this run MCP allowlist'}}));});
+`;
+}
+export const shellQuote = (value) => "'" + value.replaceAll("'", "'\\''") + "'";
+//# sourceMappingURL=codebuddy-tool-gate.js.map

package/dist/codebuddy-tool-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codebuddy-tool-gate.js","sourceRoot":"","sources":["../src/codebuddy-tool-gate.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,KAAe;IAC/C,OAAO,yBAAyB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;;;;CAItD,CAAC;AACF,CAAC;AACD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC"}

package/dist/codex-runtime.d.ts

@@ -0,0 +1,6 @@
+/** Codex discovers companion binaries beside argv[0], including code-mode-host.
+ * Resolve on the device, whose installation/PATH can differ from the server's.
+ * Only the selected Codex executable is canonicalized; transfer commands stay intact.
+ */
+export declare function resolveCodexExecutable(command: string, cwd: string, env: NodeJS.ProcessEnv): Promise<string>;
+//# sourceMappingURL=codex-runtime.d.ts.map

package/dist/codex-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-runtime.d.ts","sourceRoot":"","sources":["../src/codex-runtime.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAalH"}

package/dist/codex-runtime.js

@@ -0,0 +1,24 @@
+import { access, constants, realpath, stat } from "node:fs/promises";
+import path from "node:path";
+/** Codex discovers companion binaries beside argv[0], including code-mode-host.
+ * Resolve on the device, whose installation/PATH can differ from the server's.
+ * Only the selected Codex executable is canonicalized; transfer commands stay intact.
+ */
+export async function resolveCodexExecutable(command, cwd, env) {
+    if (!/^codex(?:\.exe)?$/i.test(path.basename(command)))
+        return command;
+    const candidates = command.includes("/") || command.includes("\\")
+        ? [path.resolve(cwd, command)]
+        : (env.PATH ?? "").split(path.delimiter).map(directory => path.resolve(cwd, directory, command));
+    for (const candidate of candidates) {
+        try {
+            if (!(await stat(candidate)).isFile())
+                continue;
+            await access(candidate, constants.X_OK);
+            return await realpath(candidate);
+        }
+        catch { /* Preserve normal spawn failure if no installed executable resolves. */ }
+    }
+    return command;
+}
+//# sourceMappingURL=codex-runtime.js.map

package/dist/codex-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-runtime.js","sourceRoot":"","sources":["../src/codex-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAe,EAAE,GAAW,EAAE,GAAsB;IAC/F,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IACvE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAChE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACnG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE;gBAAE,SAAS;YAChD,MAAM,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC,CAAC,wEAAwE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/computer.d.ts

@@ -0,0 +1,25 @@
+export declare function pairMirrorxComputer(input: {
+    baseUrl: string;
+    code: string;
+}): Promise<{
+    baseUrl: string;
+    principalId: string;
+    companyId: string;
+    computerId: string;
+    deviceProfileId: string;
+}>;
+export declare function listMirrorxComputers(): Promise<{
+    baseUrl: string;
+    principalId: string;
+    companyId: string;
+    computerId: string;
+    deviceProfileId: string;
+}[]>;
+export declare function runMirrorxComputer(input: {
+    computerId: string;
+    baseUrl: string;
+    signal?: AbortSignal;
+    drainSignal?: AbortSignal;
+    onState?(state: string): void;
+}): Promise<void>;
+//# sourceMappingURL=computer.d.ts.map

package/dist/computer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"computer.d.ts","sourceRoot":"","sources":["../src/computer.ts"],"names":[],"mappings":"AA4BA,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;aAjBjD,MAAM;iBAAe,MAAM;eAAa,MAAM;gBAAc,MAAM;qBAAmB,MAAM;GA+B3H;AAYD,wBAAsB,oBAAoB;aA3CT,MAAM;iBAAe,MAAM;eAAa,MAAM;gBAAc,MAAM;qBAAmB,MAAM;KA2CW;AACvI,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IAAC,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,iBAyEtK"}

package/dist/computer.js

@@ -0,0 +1,161 @@
+/** Presence belongs to the computer. Employee execution is started only for explicit enrollments. */
+import manifest from "../package.json" with { type: "json" };
+import { createHash, randomUUID } from "node:crypto";
+import { access, chmod, constants, lstat, mkdir, readFile, readdir, rename, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { setTimeout as delay } from "node:timers/promises";
+import { canonicalServerOrigin, mirrorxIdentityHome, readOrCreateDeviceProfile } from "./device-id.js";
+import { acquireDeviceResourceLock } from "./resource-lock.js";
+import { connectMirrorxComputerIntent, DeviceRequestError, listMirrorxDevicePairings, restoreMirrorxComputerEmployee, runMirrorxDevice } from "./index.js";
+const root = () => path.join(mirrorxIdentityHome(), "computers");
+const configPath = (config) => path.join(root(), createHash("sha256").update(JSON.stringify([config.baseUrl, config.principalId, config.companyId, config.computerId])).digest("hex") + ".json");
+async function rpc(baseUrl, route, options = {}) {
+    const response = await fetch(new URL(route, canonicalServerOrigin(baseUrl)), { method: options.body === undefined ? "GET" : "POST", redirect: "error",
+        headers: { "content-type": "application/json", "x-mirrorx-device-protocol-min": String(manifest.mirrorxDeviceProtocol.min),
+            "x-mirrorx-device-protocol-max": String(manifest.mirrorxDeviceProtocol.max), ...(options.token ? { "x-mirrorx-device-token": options.token } : {}) },
+        ...(options.body === undefined ? {} : { body: JSON.stringify(options.body) }), signal: AbortSignal.any([AbortSignal.timeout(10_000), ...(options.signal ? [options.signal] : [])]) });
+    if (!response.ok)
+        throw new DeviceRequestError(response.status, options.body === undefined ? "GET" : "POST", route);
+    return response.status === 204 ? undefined : await response.json();
+}
+async function safeDirectory() {
+    await mkdir(root(), { recursive: true, mode: 0o700 });
+    const info = await lstat(root());
+    if (!info.isDirectory() || info.isSymbolicLink() || process.getuid && info.uid !== process.getuid())
+        throw new Error("Computer configuration ownership is invalid");
+    await chmod(root(), 0o700);
+}
+export async function pairMirrorxComputer(input) {
+    const baseUrl = canonicalServerOrigin(input.baseUrl);
+    const context = await rpc(baseUrl, "/api/computers/pairing/context", { body: { pairingCode: input.code } });
+    const deviceProfileId = await readOrCreateDeviceProfile(baseUrl, context.principalId);
+    await safeDirectory();
+    const paired = await rpc(baseUrl, "/api/computers/pairing/claim", { body: { pairingCode: input.code, deviceProfileId, name: os.hostname().slice(0, 60) || "Computer" } });
+    if (paired.principalId !== context.principalId || paired.computer.companyId !== context.companyId || paired.computer.deviceProfileId !== deviceProfileId || !/^mxcomputer_[A-Za-z0-9_-]{43}$/.test(paired.token))
+        throw new Error("Computer pairing response identity mismatch");
+    const config = { baseUrl, principalId: context.principalId, companyId: context.companyId, computerId: paired.computer.id, deviceProfileId, computerToken: paired.token };
+    const temporary = `${configPath(config)}.${randomUUID()}.tmp`;
+    await writeFile(temporary, JSON.stringify(config), { flag: "wx", mode: 0o600 });
+    await rename(temporary, configPath(config));
+    const { computerToken: _token, ...summary } = config;
+    return summary;
+}
+async function configurations() {
+    const files = await readdir(root()).catch(error => { if (error.code === "ENOENT")
+        return []; throw error; });
+    return Promise.all(files.filter(file => /^[a-f0-9]{64}\.json$/.test(file)).map(async (file) => {
+        const full = path.join(root(), file), info = await lstat(full);
+        if (!info.isFile() || info.isSymbolicLink() || process.getuid && info.uid !== process.getuid())
+            throw new Error("Computer configuration ownership is invalid");
+        await chmod(full, 0o600);
+        const config = JSON.parse(await readFile(full, "utf8"));
+        if (configPath(config) !== full || canonicalServerOrigin(config.baseUrl) !== config.baseUrl)
+            throw new Error("Computer configuration identity is invalid");
+        return config;
+    }));
+}
+export async function listMirrorxComputers() { return (await configurations()).map(({ computerToken: _token, ...config }) => config); }
+export async function runMirrorxComputer(input) {
+    const config = (await configurations()).find(row => row.computerId === input.computerId && row.baseUrl === canonicalServerOrigin(input.baseUrl));
+    if (!config)
+        throw new Error("Pair this computer first");
+    const instanceId = randomUUID();
+    const unlock = await acquireDeviceResourceLock({ ...config, executorKind: "computer", bindingId: config.computerId }, instanceId);
+    const children = new Map(), stopped = new Set();
+    const abort = new AbortController(), drain = new AbortController();
+    const signal = AbortSignal.any([abort.signal, ...(input.signal ? [input.signal] : [])]);
+    const drainSignal = AbortSignal.any([drain.signal, ...(input.drainSignal ? [input.drainSignal] : [])]);
+    let childFailed = false;
+    const capable = process.platform === "darwin" && await access("/usr/bin/sandbox-exec", constants.X_OK).then(() => true, () => false);
+    const startEmployees = async () => {
+        for (const employee of await listMirrorxDevicePairings({ expectedBaseUrl: config.baseUrl })) {
+            if (employee.computerId !== config.computerId || employee.principalId !== config.principalId || employee.companyId !== config.companyId || children.has(employee.bindingId) || stopped.has(employee.bindingId))
+                continue;
+            const task = (async () => {
+                try {
+                    await runMirrorxDevice({ executorKind: employee.executorKind, bindingId: employee.bindingId, companyId: config.companyId, expectedBaseUrl: config.baseUrl, signal, drainSignal });
+                }
+                catch (error) {
+                    if (!(error instanceof DeviceRequestError) || error.code !== "DEVICE_SESSION_EXPIRED" || signal.aborted || drainSignal.aborted)
+                        throw error;
+                    await restoreMirrorxComputerEmployee({ ...config, bindingId: employee.bindingId, executorKind: employee.executorKind, signal });
+                    await runMirrorxDevice({ executorKind: employee.executorKind, bindingId: employee.bindingId, companyId: config.companyId, expectedBaseUrl: config.baseUrl, signal, drainSignal });
+                }
+            })().catch(() => { if (!signal.aborted) {
+                childFailed = true;
+                input.onState?.("An employee needs attention. Check its connection details before retrying.");
+            } }).finally(() => { children.delete(employee.bindingId); stopped.add(employee.bindingId); });
+            children.set(employee.bindingId, task);
+        }
+    };
+    let heartbeatFailure;
+    let heartbeatPending = Promise.resolve();
+    let beating = false;
+    const heartbeat = async () => {
+        try {
+            await rpc(config.baseUrl, "/api/computers/heartbeat", { token: config.computerToken, signal, body: { instanceId, platform: `${process.platform}-${process.arch}`, clientVersion: manifest.version, capabilities: capable ? { managedWorkspaces: "seatbelt" } : {} } });
+            input.onState?.("Computer online");
+        }
+        catch (error) {
+            if (error instanceof DeviceRequestError && [401, 403, 409, 426].includes(error.status)) {
+                heartbeatFailure = error;
+                abort.abort();
+            }
+            else if (!signal.aborted)
+                input.onState?.("Computer disconnected; retrying");
+        }
+    };
+    // Keep the presence lease alive even while enrollment or an employee drains.
+    const timer = setInterval(() => {
+        if (beating || signal.aborted)
+            return;
+        beating = true;
+        heartbeatPending = heartbeat().finally(() => { beating = false; });
+    }, 15_000);
+    try {
+        await heartbeat();
+        while (!signal.aborted && !drainSignal.aborted) {
+            try {
+                await startEmployees();
+                const intents = await rpc(config.baseUrl, "/api/computers/intents", { token: config.computerToken, signal });
+                for (const intent of intents) {
+                    if (signal.aborted || drainSignal.aborted)
+                        break;
+                    try {
+                        await connectMirrorxComputerIntent({ ...config, enrollmentIntentId: intent.enrollmentIntentId, signal });
+                    }
+                    catch {
+                        input.onState?.("Employee creation needs attention; check the request in MirrorX.");
+                    }
+                }
+                await startEmployees();
+            }
+            catch (error) {
+                if (signal.aborted)
+                    break;
+                if (error instanceof DeviceRequestError && [401, 403, 409, 426].includes(error.status)) {
+                    abort.abort();
+                    throw error;
+                }
+                input.onState?.("Computer disconnected; retrying");
+            }
+            await delay(3_000, undefined, { signal: AbortSignal.any([signal, drainSignal]) }).catch(() => undefined);
+        }
+        drain.abort();
+        await Promise.allSettled(children.values());
+        if (heartbeatFailure)
+            throw heartbeatFailure;
+        if (childFailed)
+            throw new Error("One or more employees need attention; inspect their connection details");
+    }
+    finally {
+        drain.abort();
+        await Promise.allSettled(children.values());
+        clearInterval(timer);
+        await heartbeatPending;
+        await rpc(config.baseUrl, "/api/computers/disconnect", { token: config.computerToken, body: { instanceId } }).catch(() => undefined);
+        await unlock();
+    }
+}
+//# sourceMappingURL=computer.js.map

package/dist/computer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"computer.js","sourceRoot":"","sources":["../src/computer.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,OAAO,QAAQ,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AACvG,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG3J,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,WAAW,CAAC,CAAC;AACjE,MAAM,UAAU,GAAG,CAAC,MAA6C,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC;AACxO,KAAK,UAAU,GAAG,CAAI,OAAe,EAAE,KAAa,EAAE,UAAgF,EAAE;IACtI,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO;QACnJ,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,GAAG,CAAC;YACxH,+BAA+B,EAAE,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACtJ,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxL,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpH,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAc,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAO,CAAC;AAC/E,CAAC;AACD,KAAK,UAAU,aAAa;IAC1B,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACpK,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAwC;IAChF,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,GAAG,CAA6C,OAAO,EAAE,gCAAgC,EAAE,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxJ,MAAM,eAAe,GAAG,MAAM,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACtF,MAAM,aAAa,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,MAAM,GAAG,CAA+G,OAAO,EAAE,8BAA8B,EAC5K,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1G,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,KAAK,eAAe,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjR,MAAM,MAAM,GAAmB,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACzL,MAAM,SAAS,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC;IAC9D,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,MAAM,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;IACrD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,KAAK,UAAU,cAAc;IAC3B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxI,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;QAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC/J,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAmB,CAAC;QAC1E,IAAI,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC3J,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB,KAAK,OAAO,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACvI,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAA8H;IACrK,MAAM,MAAM,GAAG,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,KAAK,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACjJ,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;IAClI,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,EAAE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/E,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,EAAE,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvG,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,MAAM,CAAC,uBAAuB,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACrI,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;QAChC,KAAK,MAAM,QAAQ,IAAI,MAAM,yBAAyB,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC5F,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YACzN,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;gBACvB,IAAI,CAAC;oBACH,MAAM,gBAAgB,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,CAAC,KAAK,YAAY,kBAAkB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,IAAI,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO;wBAAE,MAAM,KAAK,CAAC;oBAC5I,MAAM,8BAA8B,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;oBAChI,MAAM,gBAAgB,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;gBACpL,CAAC;YACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,WAAW,GAAG,IAAI,CAAC;gBAAC,KAAK,CAAC,OAAO,EAAE,CAAC,4EAA4E,CAAC,CAAC;YAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3P,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC;IACF,IAAI,gBAAyB,CAAC;IAC9B,IAAI,gBAAgB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,0BAA0B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACvQ,KAAK,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,kBAAkB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAC,gBAAgB,GAAG,KAAK,CAAC;gBAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;iBAC/H,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,KAAK,CAAC,OAAO,EAAE,CAAC,iCAAiC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC,CAAC;IACF,6EAA6E;IAC7E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,IAAI,OAAO,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO;QACtC,OAAO,GAAG,IAAI,CAAC;QAAC,gBAAgB,GAAG,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,IAAI,CAAC;QACH,MAAM,SAAS,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,cAAc,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAkE,MAAM,CAAC,OAAO,EAAE,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC9K,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,IAAI,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC,OAAO;wBAAE,MAAM;oBACjD,IAAI,CAAC;wBAAC,MAAM,4BAA4B,CAAC,EAAE,GAAG,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC;oBAAC,CAAC;oBACjH,MAAM,CAAC;wBAAC,KAAK,CAAC,OAAO,EAAE,CAAC,kEAAkE,CAAC,CAAC;oBAAC,CAAC;gBAChG,CAAC;gBACD,MAAM,cAAc,EAAE,CAAC;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,OAAO;oBAAE,MAAM;gBAC1B,IAAI,KAAK,YAAY,kBAAkB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;gBACvH,KAAK,CAAC,OAAO,EAAE,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3G,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,IAAI,gBAAgB;YAAE,MAAM,gBAAgB,CAAC;QAC7C,IAAI,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC7G,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,aAAa,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,gBAAgB,CAAC;QAC7C,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,2BAA2B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrI,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/configuration-lifetime.d.ts

@@ -0,0 +1,15 @@
+import type { ChildProcess } from "node:child_process";
+export type ConfigurationReference = {
+    configurationDirectory?: string;
+    configurationToken?: string;
+};
+export declare function ownConfiguration(directory: string, manualRecovery?: boolean): Promise<string>;
+export declare function configurationGroupAlive(pid: number): boolean;
+/** Returns false when shutdown evidence is absent; never signals a recovered PID. */
+export declare function reclaimConfiguration(reference: ConfigurationReference, confirmedStopped?: boolean, beforeRemove?: () => Promise<void>): Promise<boolean>;
+/** Keep EOF evidence separate from local stream destruction and from command ACK. */
+export declare function observeConfiguration(reference: Required<ConfigurationReference>, child: ChildProcess, onError: () => void): {
+    completed(): Promise<void>;
+    retain(): void;
+};
+//# sourceMappingURL=configuration-lifetime.d.ts.map

package/dist/configuration-lifetime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration-lifetime.d.ts","sourceRoot":"","sources":["../src/configuration-lifetime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAQvD,MAAM,MAAM,sBAAsB,GAAG;IAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAQtG,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,UAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAIjG;AAuBD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO5D;AAED,qFAAqF;AACrF,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,sBAAsB,EAAE,gBAAgB,UAAQ,EAAE,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CA2B5J;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,YAAY,EACnG,OAAO,EAAE,MAAM,IAAI;;;EA6CpB"}

package/dist/configuration-lifetime.js

@@ -0,0 +1,143 @@
+import { randomUUID } from "node:crypto";
+import { lstat, readFile, realpath, rename, rm, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+const markerName = ".mirrorx-configuration-owner.json";
+async function saveOwner(directory, owner) {
+    const temporary = path.join(directory, `${markerName}.${randomUUID()}.tmp`);
+    await writeFile(temporary, JSON.stringify(owner), { mode: 0o600 });
+    await rename(temporary, path.join(directory, markerName));
+}
+export async function ownConfiguration(directory, manualRecovery = false) {
+    const token = randomUUID();
+    await saveOwner(directory, { token, ...(manualRecovery ? { manualRecovery: true } : {}) });
+    return token;
+}
+// The journal is recovery input, not authority to recursively remove any path.
+async function checkedDirectory(directory) {
+    // A trailing separator can make lstat follow the final symlink on POSIX.
+    if (!path.isAbsolute(directory) || directory !== path.resolve(directory)
+        || !/^mirrorx-(?:pi|codebuddy)-command-[a-zA-Z0-9]{6}$/.test(path.basename(directory))
+        || await realpath(path.dirname(directory)) !== await realpath(os.tmpdir())) {
+        throw new Error("Refusing to reclaim an unexpected Pi configuration directory");
+    }
+    try {
+        const entry = await lstat(directory);
+        if (!entry.isDirectory() || entry.isSymbolicLink()
+            || (process.getuid && entry.uid !== process.getuid())) {
+            throw new Error("Refusing to reclaim an unowned Pi configuration directory");
+        }
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw error;
+    }
+}
+export function configurationGroupAlive(pid) {
+    try {
+        process.kill(-pid, 0);
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ESRCH")
+            return false;
+        if (error.code === "EPERM")
+            return true;
+        throw error;
+    }
+}
+/** Returns false when shutdown evidence is absent; never signals a recovered PID. */
+export async function reclaimConfiguration(reference, confirmedStopped = false, beforeRemove) {
+    const directory = reference.configurationDirectory;
+    if (!directory)
+        return true;
+    if (!await checkedDirectory(directory))
+        return true;
+    let owner;
+    try {
+        const marker = path.join(directory, markerName);
+        const entry = await lstat(marker);
+        if (!entry.isFile() || entry.isSymbolicLink())
+            throw new Error("Invalid Pi configuration ownership marker");
+        owner = JSON.parse(await readFile(marker, "utf8"));
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    if (reference.configurationToken && owner?.token !== reference.configurationToken) {
+        throw new Error("Pi configuration ownership does not match its journal");
+    }
+    if (!confirmedStopped) {
+        if (!reference.configurationToken || !owner)
+            return false; // Older journals need explicit operator confirmation.
+        if (owner.completed !== true) {
+            if (owner.manualRecovery)
+                return false;
+            if (process.platform === "win32" || owner.platform !== process.platform || owner.pipesEnded !== true
+                || !Number.isSafeInteger(owner.pid) || owner.pid <= 0 || configurationGroupAlive(owner.pid))
+                return false;
+        }
+    }
+    await beforeRemove?.();
+    await rm(directory, { recursive: true, force: true });
+    return true;
+}
+/** Keep EOF evidence separate from local stream destruction and from command ACK. */
+export function observeConfiguration(reference, child, onError) {
+    const owner = { ...(path.basename(reference.configurationDirectory).startsWith("mirrorx-codebuddy-") ? { manualRecovery: true } : {}), token: reference.configurationToken, ...(child.pid ? { pid: child.pid } : {}), platform: process.platform };
+    let exited = false, retained = false, timer;
+    let writes = Promise.resolve();
+    const save = () => {
+        const snapshot = { ...owner };
+        writes = writes.then(() => saveOwner(reference.configurationDirectory, snapshot));
+        void writes.catch(onError);
+        return writes;
+    };
+    const attempt = async () => {
+        try {
+            await writes;
+            if (await reclaimConfiguration(reference)) {
+                if (timer)
+                    clearInterval(timer);
+            }
+        }
+        catch {
+            if (timer)
+                clearInterval(timer);
+            onError();
+        }
+    };
+    const ended = () => {
+        if (owner.pipesEnded || !exited || !child.stdout?.readableEnded || !child.stderr?.readableEnded)
+            return;
+        owner.pipesEnded = true;
+        void save().then(() => { if (retained)
+            void attempt(); }, () => undefined);
+    };
+    child.once("exit", () => { exited = true; ended(); });
+    child.stdout?.once("end", ended);
+    child.stderr?.once("end", ended);
+    return {
+        async completed() { owner.completed = true; await save(); },
+        retain() {
+            retained = true;
+            // A live desktop can observe late EOF without keeping a closing CLI alive.
+            // Never synthesize EOF by destroying a pipe whose descendant is still using it.
+            for (const stream of [child.stdout, child.stderr]) {
+                stream?.removeAllListeners("data");
+                stream?.resume();
+                const socket = stream;
+                socket?.unref?.();
+            }
+            if (process.platform !== "win32") {
+                timer = setInterval(() => { void attempt(); }, 1_000);
+                timer.unref();
+                void attempt();
+            }
+        },
+    };
+}
+//# sourceMappingURL=configuration-lifetime.js.map

package/dist/configuration-lifetime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration-lifetime.js","sourceRoot":"","sources":["../src/configuration-lifetime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,GAAG,mCAAmC,CAAC;AAIvD,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,KAAY;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,UAAU,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5E,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,cAAc,GAAG,KAAK;IAC9E,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,SAAS,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAC/C,yEAAyE;IACzE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;WACnE,CAAC,mDAAmD,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;WACnF,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,MAAM,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;eAC7C,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC3C,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACpE,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACnE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiC,EAAE,gBAAgB,GAAG,KAAK,EAAE,YAAkC;IACxI,MAAM,SAAS,GAAG,SAAS,CAAC,sBAAsB,CAAC;IACnD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,CAAC,MAAM,gBAAgB,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,KAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC5G,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAU,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,IAAI,SAAS,CAAC,kBAAkB,IAAI,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC,kBAAkB,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,kBAAkB,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC,CAAC,sDAAsD;QACjH,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,IAAI,KAAK,CAAC,cAAc;gBAAE,OAAO,KAAK,CAAC;YACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;mBAC/F,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAI,IAAI,CAAC,IAAI,uBAAuB,CAAC,KAAK,CAAC,GAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;QAChH,CAAC;IACH,CAAC;IACD,MAAM,YAAY,EAAE,EAAE,CAAC;IACvB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,SAA2C,EAAE,KAAmB,EACnG,OAAmB;IACnB,MAAM,KAAK,GAAU,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,kBAAkB,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC1P,IAAI,MAAM,GAAG,KAAK,EAAE,QAAQ,GAAG,KAAK,EAAE,KAAiC,CAAC;IACxE,IAAI,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,MAAM,QAAQ,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClF,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC;YACb,IAAI,MAAM,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,IAAI,KAAK;oBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,KAAK;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACzD,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa;YAAE,OAAO;QACxG,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;QACxB,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,QAAQ;YAAE,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjC,OAAO;QACL,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM;YACJ,QAAQ,GAAG,IAAI,CAAC;YAChB,2EAA2E;YAC3E,gFAAgF;YAChF,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBACnC,MAAM,EAAE,MAAM,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,MAA4C,CAAC;gBAC5D,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YACpB,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBACtD,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,KAAK,OAAO,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/device-id.d.ts

@@ -0,0 +1,7 @@
+export declare function canonicalServerOrigin(value: string): string;
+export declare function mirrorxIdentityHome(): string;
+export declare function identityNamespace(server: string, principalId: string): string;
+export declare function readOrCreateDeviceProfile(server: string, principalId: string, retainedProfileId?: string): Promise<string>;
+/** @deprecated Retained export for older embedders. Never reads OS identifiers. */
+export declare function readDesktopDeviceId(): Promise<undefined>;
+//# sourceMappingURL=device-id.d.ts.map

package/dist/device-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-id.d.ts","sourceRoot":"","sources":["../src/device-id.ts"],"names":[],"mappings":"AAMA,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO3D;AACD,wBAAgB,mBAAmB,IAAI,MAAM,CAG5C;AACD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAG7E;AACD,wBAAsB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAuChI;AACD,mFAAmF;AACnF,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,SAAS,CAAC,CAAsB"}