@cello-protocol/daemon 0.0.225 → 0.0.227

package/dist/initiate-session-handler.js

@@ -1,310 +0,0 @@
-/**
- * cello_initiate_session — the initiator's entry point.
- *
- * Asks the negotiator to find the counterparty and broker a session (cross-node if they live on a
- * different directory node), then stands up the local session node and the relay witness.
- *
- * The relay witness is BEST-EFFORT by design: a session with no relay still runs on the direct
- * content path. Degraded, never blocked — refusing to open a session because the witness is
- * unavailable would hand any relay outage a veto over the whole protocol.
- */
-import { randomUUID } from "node:crypto";
-import { selectAdvertisedAddress } from "./transport-selector.js";
-import { TIER } from "./contacts-tier-migration.js";
-import { relayOnlyState, dialableAddrs } from "./relay-only.js";
-/**
- * Registers `cello_initiate_session` and returns the agent-scoped opener behind it, so a worker can
- * open a session without an IPC connection. See `openSessionAs`.
- */
-export function registerInitiateSessionHandler(deps) {
-    const { handlers, logger, sessionNodeManager, getConnState, resolveCurrentAgent, NO_CURRENT_AGENT_RESPONSE, resolvedSessionNegotiator, transportSelector, autoNatService, buildRelayConnectParams, getRelayCircuitAddress, isChannelAgent, } = deps;
-    // ─── CELLO-M7-TRANSPORT-001: cello_initiate_session ─────────────────────────
-    // Direct-P2P-by-default transport selection (AC-005/AC-006/AC-008/AC-010c).
-    // Flow:
-    //   1. Require a current agent.
-    //   2. Mint a correlationId for the whole session-establishment flow.
-    //   3. Read the standing receiver's AutoNAT dialability → choose the advertised
-    //      address (direct when dialable, relay circuit otherwise — AC-004/AC-019).
-    //   4. Negotiate the FROST-signed SessionAssignment via the directory
-    //      (sessionNegotiator — WIRE-001/SIGNAL-001). When no negotiator is wired,
-    //      return directory_signaling_not_configured (graceful — the transport
-    //      adapters ARE wired; this proves it does not crash with "adapter not wired").
-    //   5. Drive the transport selector to dial the counterparty using the
-    //      assignment's authoritative transport_mode (SI-001). Map the TransportResult
-    //      to the MCP response.
-    /**
-     * Open a session AS a named agent — the handler body, minus the connection.
-     *
-     * Extracted for M14 / DOD-DOC-DELIVERY-2: §16.4's premise is a daemon that opens a session with no
-     * agent attention on either end, and until now this path existed only as an IPC handler, reachable
-     * only by an agent calling `cello_initiate_session`. A worker had nothing to call.
-     *
-     * The split is exactly at the connection boundary: the handler resolves WHICH agent from the
-     * connection's state, and everything after that is agent-scoped and identical for both callers.
-     * Deliberately one implementation rather than two — session establishment is where the transport
-     * mode, the FROST-signed assignment and the counterparty binding are decided, and a second copy
-     * would drift on precisely those.
-     */
-    async function openSessionAs(agentName, params) {
-        const correlationId = randomUUID();
-        /**
-         * M16: A CHANNEL NEVER CONVERSES, and this daemon is the only place its key lives. Refused here,
-         * in the agent-scoped opener rather than only in the IPC handler, so a worker opening a session
-         * for this agent is refused too. Before any directory traffic: nothing about the attempt leaves
-         * this machine.
-         */
-        if (isChannelAgent(agentName)) {
-            logger.warn("session.initiate.refused_channel", { correlationId, agent_name: agentName });
-            return {
-                ok: false,
-                reason: "channel_cannot_initiate",
-                guidance: "This agent is a broadcast channel and cannot open sessions. Publish to the channel instead, or act as a non-channel agent.",
-            };
-        }
-        // AC-004/AC-019: the advertised address is chosen from the standing receiver's
-        // current dialability. Not dialable (or AutoNAT unavailable) → relay circuit.
-        const dialability = autoNatService.getDialability();
-        const relayCircuitAddr = getRelayCircuitAddress ? getRelayCircuitAddress() : "";
-        const advertisedAddress = selectAdvertisedAddress(dialability, relayCircuitAddr);
-        // resolvedSessionNegotiator is always defined (the daemon builds a real internal
-        // negotiator when none is injected), so directory_signaling_not_configured no longer
-        // fires on the live binary — session_request is actually negotiated with the directory.
-        const negotiation = await resolvedSessionNegotiator.negotiate({
-            agentName,
-            correlationId,
-            advertisedAddress,
-            params: params ?? {},
-        });
-        if (!negotiation.ok) {
-            return { ok: false, reason: negotiation.reason, guidance: negotiation.guidance };
-        }
-        // SI-001: the selector consumes the assignment's signed transport_mode as the
-        // sole dial authority — never inferred from address format.
-        const assignment = negotiation.assignment;
-        // M8B F13: validate-what-you-receive at the trust boundary. When the responder cannot
-        // proceed it aborts SILENTLY (session-ceremony.ts wireSessionOfferHandler sends nothing)
-        // and the directory folds an EMPTY counterparty endpoint into the FROST-signed
-        // assignment. Accepting that assignment produced a false ok:true + a phantom session
-        // whose failure only surfaced on the first cello_send. Reject it HERE — before any
-        // local session state exists — covering every cause of a missing accept (abort,
-        // offline, crash, timeout) without needing a directory change.
-        if (!assignment.counterparty_session_peer_id) {
-            logger.warn("session.initiate.counterparty_unavailable", {
-                sessionId: Buffer.from(assignment.session_id).toString("hex"),
-                agentName,
-                correlationId,
-            });
-            return {
-                ok: false,
-                reason: "counterparty_unavailable",
-                guidance: "The counterparty did not accept the session offer (it may be offline or unable to receive). No session was established. Verify the counterparty agent is online (its operator can check cello_status), then retry cello_initiate_session.",
-            };
-        }
-        /**
-         * ─── 038-KEYBIND review F5: THE PIN GUARDS BOTH DIRECTIONS, OR IT GUARDS ONE ────────────────
-         *
-         * Inbound, a counterparty whose group key differs from the one this daemon recorded is a loud
-         * refusal — `inbound_assignment_signer_not_pinned`, with "confirm OUT OF BAND, this is not
-         * transient". Outbound there was no comparison at all: the binding was verified, the key was
-         * returned, and it OVERWROTE whatever had been recorded for that counterparty, silently.
-         *
-         * The binding already stops a forged key — a directory cannot mint one for a key the
-         * counterparty never signed over. What it does not stop is a genuine but STALE binding for an
-         * old group key they no longer hold shares for, replayed by a directory that kept a copy. That
-         * surfaces much later as a seal nobody can verify, instead of here, where it can be named.
-         *
-         * ⚠️ BEFORE THE DIAL. A refusal after `transportSelector.dial` has already handed the peer our
-         * session peer id and, on a direct address, our IP — permanently. Same reason
-         * `DOD-M15-ASSIGN-TARGET-1` refuses before dialling.
-         *
-         * The pinned value is this daemon's own memory of an earlier session, which no directory can
-         * retroactively change; that is what makes the comparison worth anything.
-         */
-        const askedForHex = typeof params?.target_pubkey === "string"
-            ? params.target_pubkey
-            : typeof params?.counterparty_pubkey === "string"
-                ? params.counterparty_pubkey
-                : "";
-        const pinnedCounterparty = askedForHex
-            ? sessionNodeManager.getPinnedCounterpartyPrimary(agentName, askedForHex.toLowerCase())
-            : null;
-        if (pinnedCounterparty !== null && pinnedCounterparty.toLowerCase() !== negotiation.counterpartyPrimaryHex.toLowerCase()) {
-            logger.error("session.initiate.counterparty_primary_changed", {
-                sessionId: Buffer.from(assignment.session_id).toString("hex"),
-                agentName,
-                correlationId,
-                pinnedPrefix: pinnedCounterparty.slice(0, 16),
-                offeredPrefix: negotiation.counterpartyPrimaryHex.slice(0, 16),
-                impact: "the assignment named a different threshold group key for this counterparty than the one " +
-                    "recorded in an earlier session with them; it was refused before any dial, so nothing was " +
-                    "opened, nothing was sent, and the recorded key was not overwritten",
-            });
-            return {
-                ok: false,
-                reason: "counterparty_primary_key_changed",
-                // The SAME remedy the inbound path gives, because it is the same event seen from the other
-                // side — and it names the one action that must NOT be taken blindly, since clearing the
-                // contact is what destroys a correct pin.
-                guidance: "The directory named a different threshold signing key for this counterparty than the one your agent recorded in an earlier session with them. Nothing was opened and nothing you wrote was sent. This is not transient: either they genuinely re-registered — confirm that with them OUT OF BAND, on a channel that is not this one, then run cello_contact_remove for them, which clears the recorded key so the next session re-records it — or a directory is naming a key they did not authorise. From here the two look identical and only they can tell you which.",
-            };
-        }
-        const result = await transportSelector.dial(assignment, { correlationId });
-        const sessionId = Buffer.from(assignment.session_id).toString("hex");
-        if (!result.ok) {
-            // Terminal: both direct and relay failed (AC-008). Pass the error through.
-            return { ok: false, reason: result.reason, guidance: result.guidance };
-        }
-        // SEAM (initiate → DAEMON-004 session-core): transport is now established, but the
-        // session does not yet exist in the daemon's session-core. Without this, initiate
-        // would set up a connection no session can use and a subsequent cello_send would
-        // report session_not_found. Create the DAEMON-004 session node + DB row, bound (via
-        // its connection gater) to the counterparty's negotiated session peer id, so the
-        // session is queryable and usable (cello_send / cello_receive / cello_close_session).
-        //
-        // NOTE (seam 1b, next): the session node N_A created here does NOT yet share the
-        // connection that transportSelector.dial established on the separate transportDialer
-        // node — so its content newStream cannot ride that link until the dial is routed
-        // THROUGH N_A. Tracked as the dialer/session-node reconciliation; this seam only
-        // establishes that initiate creates the session-core session.
-        // The initiator's session row must record WHO this session is with, so an interrupted
-        // initiator session surfaces its counterparty at next login (DOD-INT-1). The public
-        // tool param is `target_pubkey` (the counterparty's K_local) — the same field the
-        // negotiator reads above; `counterparty_pubkey` is the legacy fallback. Reading only
-        // the legacy field stored an EMPTY counterparty on every initiator session.
-        const counterpartyPubkey = typeof params?.target_pubkey === "string"
-            ? params.target_pubkey
-            : typeof params?.counterparty_pubkey === "string"
-                ? params.counterparty_pubkey
-                : "";
-        const counterpartyPeerId = assignment.counterparty_session_peer_id ?? "";
-        // M7 DOD-SPINE-6 / MSG-001-3b: relay witness params from the FROST-signed assignment
-        // + this agent's K_local. N_A connects to the relay and submits message-leaf hashes.
-        const relayParams = await buildRelayConnectParams(agentName, assignment);
-        /**
-         * ─── RECORD THE SESSION'S STARTING POINT — `DOD-M15-SELFCHAIN-1` ─────────────────────────────
-         *
-         * ⚠️ BEFORE THE NODE IS BUILT, NOT AFTER, and the order is the whole fix. Creating the session
-         * node registers it with the relay client, and THAT is what seeds the acknowledgement state
-         * every message chains to. Recorded afterwards, the seed is missing at the one moment it is
-         * read, and the session's first message — including its own SEAL leaf on close — is refused for
-         * having nothing to link to. That is what it did: a close on a relay-witnessed session never
-         * escalated, because the seal leaf could not be submitted.
-         *
-         * Derived from the FROST-signed assignment this handler already holds, for EVERY transport
-         * mode. It used to be derived only from the relay-assignment CARRY, which is built only for a
-         * relay-mode assignment that also carries a per-node relay signature — so a direct-mode
-         * session, brokered and signed exactly like any other, recorded no starting point at all.
-         *
-         * The anchor belongs to the session. The relay is how the conversation travels; it is not what
-         * makes the conversation provable.
-         */
-        sessionNodeManager.recordSessionGenesis(agentName, sessionId, assignment.participant_a.pubkey, assignment.participant_b.pubkey, assignment.session_timestamp, 
-        // The opening FROST signature: the genesis includes it, so the chain starts from it.
-        assignment.directory_signature, 
-        // 069-ORDERPROOF: the relay this session's ordering attestations verify under, recorded at
-        // the same moment and from the same FROST-verified assignment as the starting point above.
-        // Durable, because a session revived after a restart re-registers with no assignment.
-        assignment.relay_id);
-        const created = await sessionNodeManager.createSessionNode(sessionId, agentName, counterpartyPubkey, counterpartyPeerId, correlationId, 
-        // Reuse the standing receiver as N_A so its peer id matches the session endpoint the
-        // negotiator advertised — the counterparty's gater admits the dial (WIRE-002).
-        true, relayParams);
-        if (!created.ok) {
-            return { ok: false, reason: created.reason, guidance: created.guidance };
-        }
-        /**
-         * ─── 038-KEYBIND: THE INITIATOR NOW LEARNS THE RESPONDER'S GROUP KEY ────────────────────────
-         *
-         * Only the responder used to record a counterparty group key — it took the initiator's from the
-         * assignment's `signer_pubkey`. The initiator learned nothing, so when the RESPONDER closed the
-         * conversation first, the seal certificate arrived signed by a key this daemon did not hold and
-         * was accepted `verified:false` / `signer_key_not_held`. The receipt for a real conversation was
-         * taken on trust in the channel it came over rather than checked.
-         *
-         * AFTER `createSessionNode`, not before: this is an UPDATE on the session row, and there is no
-         * row until the node is created. The one thing that would make it worse than doing nothing is
-         * writing an unverified key here — so the value comes from the negotiation result, which exists
-         * only once the responder's own identity key has signed for it.
-         */
-        sessionNodeManager.recordCounterpartyPrimary(agentName, sessionId, negotiation.counterpartyPrimaryHex);
-        // SEAM 1b: the session node N_A must hold the connection its content stream rides — so
-        // dial the counterparty THROUGH N_A. The counterparty's advertised SESSION addresses are
-        // the source of truth for dialability (a NATed node advertises a relay-circuit address; a
-        // directly-reachable one — localhost or a public addr — advertises a direct multiaddr), so
-        // attempt the dial whenever the assignment carries counterparty session addrs, regardless
-        // of the transport_mode LABEL (the local selector stub labels everything "relay" even when
-        // the addrs are directly dialable).
-        //
-        // ⚠️ DOD-M15-RELAYONLY-1 NARROWED THIS: the label is still not the authority, but the ADDRESS
-        // SET now is. Under relay-only only `/p2p-circuit` addrs are dialled — see `dialableAddrs`.
-        //
-        // A failure is NOT fatal: per the dead-channel contract,
-        // the session stays active and a later cello_send queues the content in the durable retry
-        // queue until a route exists (the relay-park path is MSG-001-3b).
-        const counterpartyAddrs = assignment.counterparty_session_addrs ?? [];
-        // DOD-M15-RELAYONLY-1: the OTHER half of the control. Suppressing our own published addresses
-        // stops them dialing US; this stops us handing our IP to THEM. Both are needed, because the
-        // counterparty may not be relay-only themselves — they will still advertise addresses, and the
-        // gate below is otherwise satisfied by exactly that.
-        // ⚠️ TRI-STATE HERE TOO. The publish half was fixed to treat "cannot read the setting" as
-        // distinct from "off"; leaving the DIAL half on the plain boolean kept the old failure direction
-        // on this side — a closed or not-yet-opened database read as `false` and the operator's IP went
-        // out on the dial. `unknown` is treated as ON for the same reason it is when publishing: a
-        // narrowed route is recoverable and a disclosed address is not.
-        const relayOnly = relayOnlyState((key) => sessionNodeManager.getSetting(agentName, key), sessionNodeManager.hasDatabase()) !== "off";
-        const dialable = dialableAddrs(counterpartyAddrs, relayOnly);
-        if (relayOnly && counterpartyAddrs.length > dialable.length) {
-            logger.info("session.initiate.direct_dial.suppressed", {
-                sessionId,
-                suppressed: counterpartyAddrs.length - dialable.length,
-                dialing: dialable.length,
-                impact: "relay-only is on: dialling only the counterparty's relay-circuit address, which terminates " +
-                    "at the relay, and dropping any direct address that would reveal this node's own",
-                correlationId,
-            });
-        }
-        // ⚠️ THE FILTERED LIST, not a boolean. Relay-only does not mean "do not connect" — it means
-        // "connect only over the circuit". Refusing EVERY address (the first build) also refused the
-        // `/p2p-circuit` one, which is the relay route this setting exists to force everything onto, and
-        // dropped every session onto the store-and-forward backstop.
-        if (dialable.length > 0) {
-            const connected = await sessionNodeManager.connectToCounterparty(agentName, sessionId, dialable);
-            if (!connected.ok) {
-                logger.warn("session.initiate.connect.failed", {
-                    sessionId,
-                    reason: connected.reason,
-                    error: connected.error,
-                    transportMode: assignment.transport_mode,
-                    correlationId,
-                });
-            }
-        }
-        // M8C-CONTACT-1 (D6): "initiating a session to X adds X" — pin at the pubkey the negotiator
-        // actually used (not re-resolved later). DOD-TIER-4 AC3: a deliberate outbound initiate makes the
-        // counterparty KNOWN, provenance 'initiated'. (Not WHITELISTED — auto-accept stays an explicit
-        // cello_contact_set_tier act, design §1.)
-        sessionNodeManager.addContact(agentName, counterpartyPubkey, undefined, "initiated", TIER.KNOWN);
-        // AC-007: the session is usable immediately upon (relay) connection — the dcutr
-        // upgrade runs in the background and is intentionally NOT awaited here.
-        deps.onSessionOpened?.(agentName, counterpartyPubkey);
-        return { ok: true, sessionId, transportMode: result.mode, correlationId };
-    }
-    handlers.set("cello_initiate_session", async (params, connectionId) => {
-        const connState = getConnState(connectionId);
-        // CC-3 / M8C-AUTOSTART-1 F18: resolve the target agent — explicit { agent } wins, else this
-        // connection's current agent, else the sole online agent (removes the no_current_agent papercut
-        // after a /mcp reconnect when exactly one agent is online). 2+ online with none selected → null.
-        const agentName = resolveCurrentAgent(connState, params?.agent);
-        if (!agentName) {
-            return NO_CURRENT_AGENT_RESPONSE;
-        }
-        return openSessionAs(agentName, params);
-    });
-    return {
-        openSessionAs,
-        openSessionFor: (agentName, target) => 
-        // The ONE place the wire name is written for internal callers.
-        openSessionAs(agentName, { target_pubkey: target.targetPubkey }),
-    };
-}
-//# sourceMappingURL=initiate-session-handler.js.map

package/dist/initiate-session-handler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"initiate-session-handler.js","sourceRoot":"","sources":["../src/initiate-session-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,uBAAuB,EAAmD,MAAM,yBAAyB,CAAC;AACnH,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AA4BhE;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,IAAyB;IAwBtE,MAAM,EACJ,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,mBAAmB,EACvE,yBAAyB,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,cAAc,EACvF,uBAAuB,EAAE,sBAAsB,EAAE,cAAc,GAChE,GAAG,IAAI,CAAC;IAET,+EAA+E;IAC/E,4EAA4E;IAC5E,QAAQ;IACR,gCAAgC;IAChC,sEAAsE;IACtE,gFAAgF;IAChF,gFAAgF;IAChF,sEAAsE;IACtE,+EAA+E;IAC/E,2EAA2E;IAC3E,oFAAoF;IACpF,uEAAuE;IACvE,mFAAmF;IACnF,4BAA4B;IAC5B;;;;;;;;;;;;OAYG;IACH,KAAK,UAAU,aAAa,CAC1B,SAAiB,EACjB,MAA2C;QAE3C,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;QAEnC;;;;;WAKG;QACH,IAAI,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1F,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,yBAAyB;gBACjC,QAAQ,EACN,4HAA4H;aAC/H,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,8EAA8E;QAC9E,MAAM,WAAW,GAAG,cAAc,CAAC,cAAc,EAAE,CAAC;QACpD,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAEjF,iFAAiF;QACjF,qFAAqF;QACrF,wFAAwF;QACxF,MAAM,WAAW,GAAG,MAAM,yBAAyB,CAAC,SAAS,CAAC;YAC5D,SAAS;YACT,aAAa;YACb,iBAAiB;YACjB,MAAM,EAAE,MAAM,IAAI,EAAE;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC;QACnF,CAAC;QAED,8EAA8E;QAC9E,4DAA4D;QAC5D,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;QAE1C,sFAAsF;QACtF,yFAAyF;QACzF,+EAA+E;QAC/E,qFAAqF;QACrF,mFAAmF;QACnF,gFAAgF;QAChF,+DAA+D;QAC/D,IAAI,CAAC,UAAU,CAAC,4BAA4B,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBACvD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC7D,SAAS;gBACT,aAAa;aACd,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,0BAA0B;gBAClC,QAAQ,EAAE,2OAA2O;aACtP,CAAC;QACJ,CAAC;QAED;;;;;;;;;;;;;;;;;;;WAmBG;QACH,MAAM,WAAW,GACf,OAAO,MAAM,EAAE,aAAa,KAAK,QAAQ;YACvC,CAAC,CAAC,MAAM,CAAC,aAAa;YACtB,CAAC,CAAC,OAAO,MAAM,EAAE,mBAAmB,KAAK,QAAQ;gBAC/C,CAAC,CAAC,MAAM,CAAC,mBAAmB;gBAC5B,CAAC,CAAC,EAAE,CAAC;QACX,MAAM,kBAAkB,GAAG,WAAW;YACpC,CAAC,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,SAAS,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC;YACvF,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,kBAAkB,KAAK,IAAI,IAAI,kBAAkB,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,sBAAsB,CAAC,WAAW,EAAE,EAAE,CAAC;YACzH,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE;gBAC5D,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC7D,SAAS;gBACT,aAAa;gBACb,YAAY,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC7C,aAAa,EAAE,WAAW,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC9D,MAAM,EACJ,0FAA0F;oBAC1F,2FAA2F;oBAC3F,oEAAoE;aACvE,CAAC,CAAC;YACH,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,kCAAkC;gBAC1C,2FAA2F;gBAC3F,wFAAwF;gBACxF,0CAA0C;gBAC1C,QAAQ,EACN,0iBAA0iB;aAC7iB,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAErE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,2EAA2E;YAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzE,CAAC;QAED,mFAAmF;QACnF,kFAAkF;QAClF,iFAAiF;QACjF,oFAAoF;QACpF,iFAAiF;QACjF,sFAAsF;QACtF,EAAE;QACF,iFAAiF;QACjF,qFAAqF;QACrF,iFAAiF;QACjF,iFAAiF;QACjF,8DAA8D;QAC9D,sFAAsF;QACtF,oFAAoF;QACpF,kFAAkF;QAClF,qFAAqF;QACrF,4EAA4E;QAC5E,MAAM,kBAAkB,GACtB,OAAO,MAAM,EAAE,aAAa,KAAK,QAAQ;YACvC,CAAC,CAAC,MAAM,CAAC,aAAa;YACtB,CAAC,CAAC,OAAO,MAAM,EAAE,mBAAmB,KAAK,QAAQ;gBAC/C,CAAC,CAAC,MAAM,CAAC,mBAAmB;gBAC5B,CAAC,CAAC,EAAE,CAAC;QACX,MAAM,kBAAkB,GAAG,UAAU,CAAC,4BAA4B,IAAI,EAAE,CAAC;QACzE,qFAAqF;QACrF,qFAAqF;QACrF,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACzE;;;;;;;;;;;;;;;;;WAiBG;QACH,kBAAkB,CAAC,oBAAoB,CACrC,SAAS,EACT,SAAS,EACT,UAAU,CAAC,aAAa,CAAC,MAAM,EAC/B,UAAU,CAAC,aAAa,CAAC,MAAM,EAC/B,UAAU,CAAC,iBAAiB;QAC5B,qFAAqF;QACrF,UAAU,CAAC,mBAAmB;QAC9B,2FAA2F;QAC3F,2FAA2F;QAC3F,sFAAsF;QACtF,UAAU,CAAC,QAAQ,CACpB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,iBAAiB,CACxD,SAAS,EACT,SAAS,EACT,kBAAkB,EAClB,kBAAkB,EAClB,aAAa;QACb,qFAAqF;QACrF,+EAA+E;QAC/E,IAAI,EACJ,WAAW,CACZ,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC3E,CAAC;QACD;;;;;;;;;;;;;WAaG;QACH,kBAAkB,CAAC,yBAAyB,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,sBAAsB,CAAC,CAAC;QACvG,uFAAuF;QACvF,yFAAyF;QACzF,0FAA0F;QAC1F,2FAA2F;QAC3F,0FAA0F;QAC1F,2FAA2F;QAC3F,oCAAoC;QACpC,EAAE;QACF,8FAA8F;QAC9F,4FAA4F;QAC5F,EAAE;QACF,yDAAyD;QACzD,0FAA0F;QAC1F,kEAAkE;QAClE,MAAM,iBAAiB,GAAG,UAAU,CAAC,0BAA0B,IAAI,EAAE,CAAC;QACtE,8FAA8F;QAC9F,4FAA4F;QAC5F,+FAA+F;QAC/F,qDAAqD;QACrD,0FAA0F;QAC1F,iGAAiG;QACjG,gGAAgG;QAChG,2FAA2F;QAC3F,gEAAgE;QAChE,MAAM,SAAS,GACb,cAAc,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,kBAAkB,CAAC,WAAW,EAAE,CAAC,KAAK,KAAK,CAAC;QACrH,MAAM,QAAQ,GAAG,aAAa,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;QAC7D,IAAI,SAAS,IAAI,iBAAiB,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE;gBACrD,SAAS;gBACT,UAAU,EAAE,iBAAiB,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM;gBACtD,OAAO,EAAE,QAAQ,CAAC,MAAM;gBACxB,MAAM,EACJ,6FAA6F;oBAC7F,iFAAiF;gBACnF,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QACD,4FAA4F;QAC5F,6FAA6F;QAC7F,iGAAiG;QACjG,6DAA6D;QAC7D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;YACjG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;oBAC7C,SAAS;oBACT,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,aAAa,EAAE,UAAU,CAAC,cAAc;oBACxC,aAAa;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,4FAA4F;QAC5F,kGAAkG;QAClG,+FAA+F;QAC/F,0CAA0C;QAC1C,kBAAkB,CAAC,UAAU,CAAC,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAEjG,gFAAgF;QAChF,wEAAwE;QACxE,IAAI,CAAC,eAAe,EAAE,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC;IAC5E,CAAC;IAED,QAAQ,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;QACpE,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,4FAA4F;QAC5F,gGAAgG;QAChG,iGAAiG;QACjG,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAA2B,CAAC,CAAC;QACtF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,yBAAyB,CAAC;QACnC,CAAC;QACD,OAAO,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,aAAa;QACb,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE;QACpC,+DAA+D;QAC/D,aAAa,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC"}

package/dist/ipc-client.d.ts

@@ -1,31 +0,0 @@
-/**
- * IPC client for connecting to the CELLO daemon.
- *
- * Pseudocode:
- * 1. connectToDaemon(socketPath):
- *    a. Create net.Socket
- *    b. Connect to Unix domain socket
- *    c. Return IpcClient with send(method, params) → Promise<result>
- *
- * 2. send(method, params):
- *    a. Generate unique request ID
- *    b. Write JSON + newline to socket
- *    c. Wait for response with matching ID
- *    d. Return result or throw error
- */
-import type { IpcNotification } from "./types.js";
-export interface IpcClient {
-    send(method: string, params?: Record<string, unknown>): Promise<unknown>;
-    close(): void;
-    onNotification(handler: (notification: IpcNotification) => void): void;
-}
-export declare class IpcError extends Error {
-    readonly code: string;
-    readonly guidance: string;
-    constructor(code: string, message: string, guidance: string);
-}
-export interface IpcClientOptions {
-    onFrameError?: (error: string) => void;
-}
-export declare function connectToDaemon(socketPath: string, opts?: IpcClientOptions): Promise<IpcClient>;
-//# sourceMappingURL=ipc-client.d.ts.map

package/dist/ipc-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ipc-client.d.ts","sourceRoot":"","sources":["../src/ipc-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAA6C,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7F,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,KAAK,IAAI,IAAI,CAAC;IACd,cAAc,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,eAAe,KAAK,IAAI,GAAG,IAAI,CAAC;CACxE;AAED,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAM5D;AAED,MAAM,WAAW,gBAAgB;IAC/B,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CA0F/F"}

package/dist/ipc-client.js

@@ -1,113 +0,0 @@
-/**
- * IPC client for connecting to the CELLO daemon.
- *
- * Pseudocode:
- * 1. connectToDaemon(socketPath):
- *    a. Create net.Socket
- *    b. Connect to Unix domain socket
- *    c. Return IpcClient with send(method, params) → Promise<result>
- *
- * 2. send(method, params):
- *    a. Generate unique request ID
- *    b. Write JSON + newline to socket
- *    c. Wait for response with matching ID
- *    d. Return result or throw error
- */
-import { createConnection } from "node:net";
-import { randomUUID } from "node:crypto";
-import { extractErrorMessage } from "./error-message.js";
-export class IpcError extends Error {
-    code;
-    guidance;
-    constructor(code, message, guidance) {
-        super(message);
-        this.name = "IpcError";
-        this.code = code;
-        this.guidance = guidance;
-    }
-}
-export function connectToDaemon(socketPath, opts) {
-    return new Promise((resolve, reject) => {
-        const socket = createConnection(socketPath);
-        const pending = new Map();
-        let buffer = "";
-        let notificationHandler = null;
-        const client = {
-            send(method, params) {
-                return new Promise((res, rej) => {
-                    if (socket.destroyed) {
-                        rej(new Error("Socket closed"));
-                        return;
-                    }
-                    const id = randomUUID();
-                    pending.set(id, { resolve: res, reject: rej });
-                    const request = { id, method, params };
-                    socket.write(JSON.stringify(request) + "\n");
-                });
-            },
-            close() {
-                socket.end();
-            },
-            onNotification(handler) {
-                notificationHandler = handler;
-            },
-        };
-        socket.on("connect", () => {
-            resolve(client);
-        });
-        socket.on("error", (err) => {
-            reject(err);
-            for (const [, p] of pending) {
-                p.reject(err);
-            }
-            pending.clear();
-        });
-        socket.on("data", (chunk) => {
-            buffer += chunk.toString("utf-8");
-            let newlineIdx;
-            while ((newlineIdx = buffer.indexOf("\n")) !== -1) {
-                const line = buffer.slice(0, newlineIdx);
-                buffer = buffer.slice(newlineIdx + 1);
-                if (line.trim().length === 0)
-                    continue;
-                try {
-                    const frame = JSON.parse(line);
-                    // Notifications have a "notification" field — they are server-initiated
-                    // and never correlate to a request.
-                    if ("notification" in frame) {
-                        if (notificationHandler) {
-                            notificationHandler(frame);
-                        }
-                        continue;
-                    }
-                    // Regular response — correlate by id
-                    const response = frame;
-                    const p = pending.get(response.id);
-                    if (p) {
-                        pending.delete(response.id);
-                        if ("error" in response) {
-                            const errResp = response;
-                            p.reject(new IpcError(errResp.error.code, errResp.error.message, errResp.error.guidance));
-                        }
-                        else {
-                            p.resolve(response.result);
-                        }
-                    }
-                }
-                catch (err) {
-                    const msg = extractErrorMessage(err);
-                    if (opts?.onFrameError) {
-                        opts.onFrameError(msg);
-                    }
-                }
-            }
-        });
-        socket.on("close", () => {
-            for (const [, p] of pending) {
-                p.reject(new Error("Connection closed"));
-            }
-            pending.clear();
-        });
-    });
-}
-//# sourceMappingURL=ipc-client.js.map

package/dist/ipc-client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ipc-client.js","sourceRoot":"","sources":["../src/ipc-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,gBAAgB,EAAe,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAQzD,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAS;IACb,QAAQ,CAAS;IAE1B,YAAY,IAAY,EAAE,OAAe,EAAE,QAAgB;QACzD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAMD,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,IAAuB;IACzE,OAAO,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChD,MAAM,MAAM,GAAW,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyE,CAAC;QACjG,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,mBAAmB,GAAqD,IAAI,CAAC;QAEjF,MAAM,MAAM,GAAc;YACxB,IAAI,CAAC,MAAc,EAAE,MAAgC;gBACnD,OAAO,IAAI,OAAO,CAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;oBACvC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;wBACrB,GAAG,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;wBAChC,OAAO;oBACT,CAAC;oBACD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;oBACxB,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC/C,MAAM,OAAO,GAAe,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;oBACnD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC/C,CAAC,CAAC,CAAC;YACL,CAAC;YAED,KAAK;gBACH,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,CAAC;YAED,cAAc,CAAC,OAAgD;gBAC7D,mBAAmB,GAAG,OAAO,CAAC;YAChC,CAAC;SACF,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,CAAC,CAAC;YACZ,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;gBAC5B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,UAAkB,CAAC;YACvB,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBACzC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;gBACtC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBAEvC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;oBAE1D,wEAAwE;oBACxE,oCAAoC;oBACpC,IAAI,cAAc,IAAI,KAAK,EAAE,CAAC;wBAC5B,IAAI,mBAAmB,EAAE,CAAC;4BACxB,mBAAmB,CAAC,KAAmC,CAAC,CAAC;wBAC3D,CAAC;wBACD,SAAS;oBACX,CAAC;oBAED,qCAAqC;oBACrC,MAAM,QAAQ,GAAG,KAA+B,CAAC;oBACjD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBACnC,IAAI,CAAC,EAAE,CAAC;wBACN,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;wBAC5B,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;4BACxB,MAAM,OAAO,GAAG,QAA4B,CAAC;4BAC7C,CAAC,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;wBAC5F,CAAC;6BAAM,CAAC;4BACN,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBAC7B,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACtB,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;oBACrC,IAAI,IAAI,EAAE,YAAY,EAAE,CAAC;wBACvB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;gBAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/ipc-server.d.ts

@@ -1,63 +0,0 @@
-/**
- * IPC server for the CELLO daemon.
- *
- * Pseudocode:
- * 1. createIpcServer(config, handlers):
- *    a. Create net.Server bound to Unix domain socket
- *    b. Set socket permissions to 0o600 (SI-001: owner-only access)
- *    c. On connection:
- *       - Check connectionCount < maxConnections (16)
- *       - If limit reached, send error frame and close
- *       - Otherwise, increment counter, assign connectionId
- *       - Log daemon.ipc.connected
- *       - Set up newline-delimited JSON parser on the socket
- *       - For each parsed request, dispatch to handler map
- *       - On close, decrement counter, log daemon.ipc.disconnected
- *    d. Return server handle with start() and stop() methods
- *
- * 2. IPC framing: JSON-newline-delimited
- *    - Each message is a single JSON object followed by \n
- *    - Requests: {id: string, method: string, params?: object}
- *    - Responses: {id: string, result: any} or {id: string, error: {code, message, guidance}}
- *
- * 3. Graceful shutdown:
- *    a. Stop accepting new connections
- *    b. Wait for in-flight requests to complete (with timeout)
- *    c. Send shutdown frame to all connected clients
- *    d. Close all connections
- *    e. Unlink socket file
- */
-import type { Logger, IpcNotification } from "./types.js";
-/** Everything the server needs of a handler map: resolve a method name when a request arrives. */
-export interface HandlerLookup {
-    get(method: string): IpcHandler | undefined;
-}
-export type IpcHandler = (params: Record<string, unknown> | undefined, connectionId: string) => Promise<unknown>;
-export interface IpcServerConfig {
-    socketPath: string;
-    maxConnections: number;
-    logger: Logger;
-}
-/**
- * Returns context to MERGE into the single `daemon.ipc.disconnected` line — see the close handler.
- * Returning nothing is fine; a second log line from the handler is not (review F8).
- */
-export type IpcDisconnectHandler = (connectionId: string) => Record<string, unknown> | void;
-export interface IpcServer {
-    start(): Promise<void>;
-    stop(): Promise<void>;
-    getConnectionCount(): number;
-    onDisconnect(handler: IpcDisconnectHandler): void;
-    /** Write a notification to a specific connection. Returns false on write failure. */
-    sendNotification(connectionId: string, notification: IpcNotification): boolean;
-    /** Return all active connection IDs. */
-    getConnectionIds(): string[];
-}
-export declare function createIpcServer(config: IpcServerConfig, 
-/**
- * Looked up per request, never enumerated. Typed as the lookup alone so the daemon can pass a
- * LATE-BINDING view over its handler map rather than a snapshot — a snapshot made registration
- * order load-bearing, and anything registered after the copy answered `method_not_found`.
- */
-handlers: HandlerLookup): IpcServer;
-//# sourceMappingURL=ipc-server.d.ts.map

package/dist/ipc-server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ipc-server.d.ts","sourceRoot":"","sources":["../src/ipc-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,KAAK,EAAE,MAAM,EAA2B,eAAe,EAAE,MAAM,YAAY,CAAC;AAKnF,kGAAkG;AAClG,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;CAC7C;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEjH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;AAE5F,MAAM,WAAW,SAAS;IACxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,kBAAkB,IAAI,MAAM,CAAC;IAC7B,YAAY,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAClD,qFAAqF;IACrF,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,GAAG,OAAO,CAAC;IAC/E,wCAAwC;IACxC,gBAAgB,IAAI,MAAM,EAAE,CAAC;CAC9B;AASD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,eAAe;AACvB;;;;GAIG;AACH,QAAQ,EAAE,aAAa,GACtB,SAAS,CAoZX"}