@ccmsg/cli 0.11.2 → 0.11.4

package/src/instance/paths.ts

@@ -12,7 +12,7 @@ import {
   SUPERVISOR_FILE,
 } from "./config.ts";
 
-/** Every path one instance uses, decided in one place (daemon-v2 §8.1).
+/** Every path one instance uses, decided in one place (DESIGN §8.1).
  *
  * All of them are derived from the config home, because the config home is
  * what an instance is (A2): two instances differ in exactly that, so deriving
@@ -35,7 +35,7 @@ export interface InstancePaths {
   readonly endpointsFile: string;
   readonly supervisorFile: string;
   /** Where what has been read and checked is kept, which is the only thing the
-   * supervisor and the instances read (§8.2). */
+   * supervisor and the instances read (DESIGN §8.2). */
   readonly stateRoot: string;
   readonly satisfiedFile: string;
   /** Where a file is put before it is overwritten by the checked copy. */
@@ -49,7 +49,7 @@ export interface InstancePaths {
    * Bun unlinks the path it listened on when the listener stops (measured
    * against Bun 1.3.13), so binding the stable path directly would mean a
    * departing instance deleting the address its successor had already taken
-   * over (§8.5). Binding a path of its own leaves it deleting only its own. */
+   * over (DESIGN §8.5). Binding a path of its own leaves it deleting only its own. */
   readonly socketReal: string;
   /** Where both of the above live, so the orphan sweep has one directory. */
   readonly socketDir: string;
@@ -60,7 +60,7 @@ export interface InstancePaths {
   readonly pidFile: string;
   readonly lockFile: string;
   readonly logFile: string;
-  /** Where this instance's own id is kept (§3.6). It lives with the state
+  /** Where this instance's own id is kept (DESIGN §2.5). It lives with the state
    * because moving an instance is moving that directory: the id has to travel
    * with it, since everything the instance issued is keyed by it. */
   readonly instanceIdFile: string;
@@ -92,7 +92,7 @@ export type Env = Record<string, string | undefined>;
  * process belongs to. Reading the config-home variables in a fixed order
  * instead would send a Codex session's commands to the Claude Code instance,
  * because a session started from inside another one inherits its whole
- * environment and so names both homes at once (§3.8).
+ * environment and so names both homes at once (DESIGN §4.1).
  *
  * With no session claiming the process — a person at a terminal — each
  * harness's own variable is read in turn, and Claude Code's home is the
@@ -128,7 +128,7 @@ export function resolvePaths(env: Env = process.env): InstancePaths {
  * The one to call wherever the config home is decided rather than discovered —
  * a command naming a directory, an install naming an agent's own home. Going
  * through the environment instead would have that answer re-derived from
- * whichever session the process happens to be running inside (§3.8), and a
+ * whichever session the process happens to be running inside (DESIGN §4.1), and a
  * command that named a directory would silently act on another one. */
 export function resolvePathsFor(configHome: string, env: Env = process.env): InstancePaths {
   const key = instanceKey(configHome);

package/src/instance/socket.ts

@@ -29,7 +29,7 @@ export function publishSocket(paths: InstancePaths): void {
  *
  * The stable address is never swept. It may already point at a successor, and
  * one pointing at a socket that is gone is the "the unix socket refuses"
- * a client reads as this instance having finished leaving (§8.5). */
+ * a client reads as this instance having finished leaving (DESIGN §8.5). */
 export function sweepOrphanSockets(paths: InstancePaths): void {
   let names: string[];
   try {

package/src/kv/store.ts

@@ -19,7 +19,7 @@ export const KV_DIR = "kv";
 
 /** The values clients keep here, and the topic that shows them changing.
  *
- * Written down, unlike almost everything else this instance holds (§3.6): a
+ * Written down, unlike almost everything else this instance holds (DESIGN §2.5): a
  * value here was typed by a person and exists nowhere else — the theme a
  * browser is showing is a copy of it, not its source — so losing it on a
  * restart loses what they set. It is not a derived value, which is what M4

package/src/mesh/instances.ts

@@ -34,7 +34,7 @@ export function clusterView(
   );
 }
 
-/** The `instances` topic (§7.5).
+/** The `instances` topic (DESIGN §7.5).
  *
  * A link going down reaches a subscriber where it is already listening, rather
  * than only on its next greeting. The value is whole per instance: `reachable`
@@ -43,7 +43,7 @@ export function clusterView(
  * one sender's view entire and leaves every other sender's alone.
  *
  * Nothing is started or stopped by a subscription. The view exists because the
- * mesh exists, and reading it costs a walk over the configured peers (§6.3:
+ * mesh exists, and reading it costs a walk over the configured peers (DESIGN §6.3:
  * what subscription drives is a watch, and there is none here). */
 export class Instances implements UpstreamResource {
   constructor(

package/src/mesh/keys.ts

@@ -16,17 +16,17 @@ export const MESH_VER = 1;
  *
  * A set rather than one name, because the JWS header is not trusted: the header
  * names an algorithm and this is what decides whether that name may be used at
- * all, which is what stops `alg: none` and algorithm confusion (§5.7-7). Two
+ * all, which is what stops `alg: none` and algorithm confusion (mesh-peer-auth §5.7-7). Two
  * entries have to be expressible for a migration, so it is a set even while it
  * holds one. */
 export const ALLOWED_ALGS: ReadonlySet<string> = new Set(["EdDSA"]);
 
-/** How long a proof stays valid (§5.9). A handshake within one region completes
+/** How long a proof stays valid (mesh-peer-auth §5.9). A handshake within one region completes
  * in tens to hundreds of milliseconds, and a peer that cannot manage this could
  * not hold a mesh link anyway. */
 export const PROOF_LIFETIME_MS = 10_000;
 
-/** 128 bits, the floor §5.9 sets for both the challenge and the key id: the only
+/** 128 bits, the floor mesh-peer-auth §5.9 sets for both the challenge and the key id: the only
  * requirement on either is that it cannot be predicted. */
 const RANDOM_BYTES = 16;
 
@@ -38,7 +38,7 @@ export function randomId(): string {
  *
  * The id is on the key because the receiver compares three of them — the
  * greeting's, the proof header's, and this one — and a key that arrived without
- * its own id could not be part of that comparison (§5.7-8). */
+ * its own id could not be part of that comparison (mesh-peer-auth §5.7-8). */
 export interface MeshJwk {
   readonly kty: string;
   readonly crv?: string;
@@ -50,7 +50,7 @@ export interface MeshJwk {
  *
  * It lives as long as the handshake it was made for: created when the dial
  * starts, fetched once by the peer, and destroyed when the acknowledgement
- * arrives or the connection goes, whichever comes first (§7). Nothing rotates
+ * arrives or the connection goes, whichever comes first (mesh-peer-auth §7). Nothing rotates
  * it because nothing outlives one connection. */
 export class EphemeralKey {
   readonly kid = randomId();
@@ -67,7 +67,7 @@ export class EphemeralKey {
     return { ...(this.#public.export({ format: "jwk" }) as object), kid: this.kid } as MeshJwk;
   }
 
-  /** The proof of §5.4: the challenge, and the two endpoint URLs, signed.
+  /** The proof of mesh-peer-auth §5.4: the challenge, and the two endpoint URLs, signed.
    *
    * The URLs are signed even though the greeting already carried them, because
    * the greeting is not signed and therefore states nothing. */
@@ -102,7 +102,7 @@ export class ProofError extends Error {}
  * with an algorithm outside the allowed set.
  *
  * The algorithm is checked here, before the key is even looked at, because the
- * check exists to decide whether the header may be acted on at all (§5.7-7). */
+ * check exists to decide whether the header may be acted on at all (mesh-peer-auth §5.7-7). */
 export function parseProof(jws: string): ParsedProof {
   const parts = jws.split(".");
   if (parts.length !== 3) throw new ProofError("a proof is a compact JWS of three parts");