@cello-protocol/daemon 0.0.3 → 0.0.5

package/dist/ipc-client.js

@@ -0,0 +1,112 @@
+/**
+ * IPC client for connecting to the CELLO daemon.
+ *
+ * Pseudocode:
+ * 1. connectToDaemon(socketPath):
+ *    a. Create net.Socket
+ *    b. Connect to Unix domain socket
+ *    c. Return IpcClient with send(method, params) → Promise<result>
+ *
+ * 2. send(method, params):
+ *    a. Generate unique request ID
+ *    b. Write JSON + newline to socket
+ *    c. Wait for response with matching ID
+ *    d. Return result or throw error
+ */
+import { createConnection } from "node:net";
+import { randomUUID } from "node:crypto";
+export class IpcError extends Error {
+    code;
+    guidance;
+    constructor(code, message, guidance) {
+        super(message);
+        this.name = "IpcError";
+        this.code = code;
+        this.guidance = guidance;
+    }
+}
+export function connectToDaemon(socketPath, opts) {
+    return new Promise((resolve, reject) => {
+        const socket = createConnection(socketPath);
+        const pending = new Map();
+        let buffer = "";
+        let notificationHandler = null;
+        const client = {
+            send(method, params) {
+                return new Promise((res, rej) => {
+                    if (socket.destroyed) {
+                        rej(new Error("Socket closed"));
+                        return;
+                    }
+                    const id = randomUUID();
+                    pending.set(id, { resolve: res, reject: rej });
+                    const request = { id, method, params };
+                    socket.write(JSON.stringify(request) + "\n");
+                });
+            },
+            close() {
+                socket.end();
+            },
+            onNotification(handler) {
+                notificationHandler = handler;
+            },
+        };
+        socket.on("connect", () => {
+            resolve(client);
+        });
+        socket.on("error", (err) => {
+            reject(err);
+            for (const [, p] of pending) {
+                p.reject(err);
+            }
+            pending.clear();
+        });
+        socket.on("data", (chunk) => {
+            buffer += chunk.toString("utf-8");
+            let newlineIdx;
+            while ((newlineIdx = buffer.indexOf("\n")) !== -1) {
+                const line = buffer.slice(0, newlineIdx);
+                buffer = buffer.slice(newlineIdx + 1);
+                if (line.trim().length === 0)
+                    continue;
+                try {
+                    const frame = JSON.parse(line);
+                    // Notifications have a "notification" field — they are server-initiated
+                    // and never correlate to a request.
+                    if ("notification" in frame) {
+                        if (notificationHandler) {
+                            notificationHandler(frame);
+                        }
+                        continue;
+                    }
+                    // Regular response — correlate by id
+                    const response = frame;
+                    const p = pending.get(response.id);
+                    if (p) {
+                        pending.delete(response.id);
+                        if ("error" in response) {
+                            const errResp = response;
+                            p.reject(new IpcError(errResp.error.code, errResp.error.message, errResp.error.guidance));
+                        }
+                        else {
+                            p.resolve(response.result);
+                        }
+                    }
+                }
+                catch (err) {
+                    const msg = err instanceof Error ? err.message : String(err);
+                    if (opts?.onFrameError) {
+                        opts.onFrameError(msg);
+                    }
+                }
+            }
+        });
+        socket.on("close", () => {
+            for (const [, p] of pending) {
+                p.reject(new Error("Connection closed"));
+            }
+            pending.clear();
+        });
+    });
+}
+//# sourceMappingURL=ipc-client.js.map

package/dist/ipc-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc-client.js","sourceRoot":"","sources":["../src/ipc-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,gBAAgB,EAAe,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASzC,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAS;IACb,QAAQ,CAAS;IAE1B,YAAY,IAAY,EAAE,OAAe,EAAE,QAAgB;QACzD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAMD,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,IAAuB;IACzE,OAAO,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChD,MAAM,MAAM,GAAW,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyE,CAAC;QACjG,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,mBAAmB,GAAqD,IAAI,CAAC;QAEjF,MAAM,MAAM,GAAc;YACxB,IAAI,CAAC,MAAc,EAAE,MAAgC;gBACnD,OAAO,IAAI,OAAO,CAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;oBACvC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;wBACrB,GAAG,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;wBAChC,OAAO;oBACT,CAAC;oBACD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;oBACxB,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC/C,MAAM,OAAO,GAAe,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;oBACnD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC/C,CAAC,CAAC,CAAC;YACL,CAAC;YAED,KAAK;gBACH,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,CAAC;YAED,cAAc,CAAC,OAAgD;gBAC7D,mBAAmB,GAAG,OAAO,CAAC;YAChC,CAAC;SACF,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,CAAC,CAAC;YACZ,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;gBAC5B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,UAAkB,CAAC;YACvB,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBACzC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;gBACtC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBAEvC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;oBAE1D,wEAAwE;oBACxE,oCAAoC;oBACpC,IAAI,cAAc,IAAI,KAAK,EAAE,CAAC;wBAC5B,IAAI,mBAAmB,EAAE,CAAC;4BACxB,mBAAmB,CAAC,KAAmC,CAAC,CAAC;wBAC3D,CAAC;wBACD,SAAS;oBACX,CAAC;oBAED,qCAAqC;oBACrC,MAAM,QAAQ,GAAG,KAA+B,CAAC;oBACjD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBACnC,IAAI,CAAC,EAAE,CAAC;wBACN,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;wBAC5B,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;4BACxB,MAAM,OAAO,GAAG,QAA4B,CAAC;4BAC7C,CAAC,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;wBAC5F,CAAC;6BAAM,CAAC;4BACN,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;wBAC7B,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAY,EAAE,CAAC;oBACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7D,IAAI,IAAI,EAAE,YAAY,EAAE,CAAC;wBACvB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;gBAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAC3C,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/ipc-server.d.ts

@@ -0,0 +1,49 @@
+/**
+ * IPC server for the CELLO daemon.
+ *
+ * Pseudocode:
+ * 1. createIpcServer(config, handlers):
+ *    a. Create net.Server bound to Unix domain socket
+ *    b. Set socket permissions to 0o600 (SI-001: owner-only access)
+ *    c. On connection:
+ *       - Check connectionCount < maxConnections (16)
+ *       - If limit reached, send error frame and close
+ *       - Otherwise, increment counter, assign connectionId
+ *       - Log daemon.ipc.connected
+ *       - Set up newline-delimited JSON parser on the socket
+ *       - For each parsed request, dispatch to handler map
+ *       - On close, decrement counter, log daemon.ipc.disconnected
+ *    d. Return server handle with start() and stop() methods
+ *
+ * 2. IPC framing: JSON-newline-delimited
+ *    - Each message is a single JSON object followed by \n
+ *    - Requests: {id: string, method: string, params?: object}
+ *    - Responses: {id: string, result: any} or {id: string, error: {code, message, guidance}}
+ *
+ * 3. Graceful shutdown:
+ *    a. Stop accepting new connections
+ *    b. Wait for in-flight requests to complete (with timeout)
+ *    c. Send shutdown frame to all connected clients
+ *    d. Close all connections
+ *    e. Unlink socket file
+ */
+import type { Logger, IpcNotification } from "./types.js";
+export type IpcHandler = (params: Record<string, unknown> | undefined, connectionId: string) => Promise<unknown>;
+export interface IpcServerConfig {
+    socketPath: string;
+    maxConnections: number;
+    logger: Logger;
+}
+export type IpcDisconnectHandler = (connectionId: string) => void;
+export interface IpcServer {
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    getConnectionCount(): number;
+    onDisconnect(handler: IpcDisconnectHandler): void;
+    /** Write a notification to a specific connection. Returns false on write failure. */
+    sendNotification(connectionId: string, notification: IpcNotification): boolean;
+    /** Return all active connection IDs. */
+    getConnectionIds(): string[];
+}
+export declare function createIpcServer(config: IpcServerConfig, handlers: Map<string, IpcHandler>): IpcServer;
+//# sourceMappingURL=ipc-server.d.ts.map

package/dist/ipc-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc-server.d.ts","sourceRoot":"","sources":["../src/ipc-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,KAAK,EAAE,MAAM,EAA2B,eAAe,EAAE,MAAM,YAAY,CAAC;AAEnF,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEjH,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC;AAElE,MAAM,WAAW,SAAS;IACxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,kBAAkB,IAAI,MAAM,CAAC;IAC7B,YAAY,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAClD,qFAAqF;IACrF,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,GAAG,OAAO,CAAC;IAC/E,wCAAwC;IACxC,gBAAgB,IAAI,MAAM,EAAE,CAAC;CAC9B;AASD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,GAChC,SAAS,CAyPX"}

package/dist/ipc-server.js

@@ -0,0 +1,268 @@
+/**
+ * IPC server for the CELLO daemon.
+ *
+ * Pseudocode:
+ * 1. createIpcServer(config, handlers):
+ *    a. Create net.Server bound to Unix domain socket
+ *    b. Set socket permissions to 0o600 (SI-001: owner-only access)
+ *    c. On connection:
+ *       - Check connectionCount < maxConnections (16)
+ *       - If limit reached, send error frame and close
+ *       - Otherwise, increment counter, assign connectionId
+ *       - Log daemon.ipc.connected
+ *       - Set up newline-delimited JSON parser on the socket
+ *       - For each parsed request, dispatch to handler map
+ *       - On close, decrement counter, log daemon.ipc.disconnected
+ *    d. Return server handle with start() and stop() methods
+ *
+ * 2. IPC framing: JSON-newline-delimited
+ *    - Each message is a single JSON object followed by \n
+ *    - Requests: {id: string, method: string, params?: object}
+ *    - Responses: {id: string, result: any} or {id: string, error: {code, message, guidance}}
+ *
+ * 3. Graceful shutdown:
+ *    a. Stop accepting new connections
+ *    b. Wait for in-flight requests to complete (with timeout)
+ *    c. Send shutdown frame to all connected clients
+ *    d. Close all connections
+ *    e. Unlink socket file
+ */
+import { createServer } from "node:net";
+import { chmod, unlink } from "node:fs/promises";
+import { randomUUID } from "node:crypto";
+export function createIpcServer(config, handlers) {
+    const { socketPath, maxConnections, logger } = config;
+    let server = null;
+    const connections = new Map();
+    let stopping = false;
+    let disconnectHandler = null;
+    function handleConnection(socket) {
+        if (stopping) {
+            socket.destroy();
+            return;
+        }
+        if (connections.size >= maxConnections) {
+            logger.warn("daemon.ipc.connection.limit.reached", {
+                currentCount: connections.size,
+                maxCount: maxConnections,
+            });
+            // Destroy immediately — the client has no pending requests to correlate
+            // an error response against. Client's connectToDaemon() will reject with
+            // a socket error, which is the correct signal.
+            socket.destroy();
+            return;
+        }
+        const connectionId = randomUUID();
+        const conn = { id: connectionId, socket, inFlightCount: 0, shutdownReason: null };
+        connections.set(connectionId, conn);
+        logger.info("daemon.ipc.accepted", { connectionId });
+        // CELLO-M7-MSG-001: the IPC buffer cap MUST exceed the application content cap
+        // (MAX_CONTENT_BYTES = 1 MB) plus the JSON request envelope, or a max-size
+        // cello_send message would trip this overflow and the connection would be killed
+        // BEFORE cello_send's content_too_large check could run — turning a clean,
+        // recoverable "content_too_large" into a fatal connection drop, and making even a
+        // VALID 1 MB message unsendable. 4 MB matches the it-length-prefixed transport
+        // default (IT_LENGTH_PREFIX_DEFAULT_MAX) so the IPC, app-cap, and transport layers
+        // are coherent: content up to the 1 MB cap always traverses IPC, oversize content
+        // reaches cello_send and is rejected with content_too_large, and only a payload
+        // beyond the transport frame is a hard stop. Must stay in sync with the matching
+        // constant in adapter-claude-code/src/ipc-proxy.ts.
+        const MAX_BUFFER_SIZE = 4 * 1024 * 1024; // 4MB per connection (> 1MB content cap + envelope)
+        let buffer = "";
+        socket.on("data", (chunk) => {
+            buffer += chunk.toString("utf-8");
+            if (buffer.length > MAX_BUFFER_SIZE) {
+                logger.warn("daemon.ipc.buffer.overflow", { connectionId, bufferSize: buffer.length });
+                buffer = "";
+                socket.removeAllListeners("data");
+                socket.destroy();
+                return;
+            }
+            let newlineIdx;
+            while ((newlineIdx = buffer.indexOf("\n")) !== -1) {
+                const line = buffer.slice(0, newlineIdx);
+                buffer = buffer.slice(newlineIdx + 1);
+                if (line.trim().length === 0)
+                    continue;
+                handleMessage(conn, line);
+            }
+        });
+        socket.on("close", () => {
+            connections.delete(connectionId);
+            const reason = conn.shutdownReason || "client_closed";
+            logger.info("daemon.ipc.disconnected", { connectionId, reason });
+            if (disconnectHandler)
+                disconnectHandler(connectionId);
+        });
+        // Set shutdownReason so the 'close' handler (which always fires after 'error') logs it.
+        // Do NOT call disconnectHandler or log here — 'close' fires immediately after 'error'.
+        socket.on("error", (err) => {
+            conn.shutdownReason = err.message;
+        });
+    }
+    function handleMessage(conn, line) {
+        let request;
+        try {
+            request = JSON.parse(line);
+        }
+        catch {
+            // Cannot recover the request ID from unparseable input.
+            // Close the connection — client's pending promises will all reject
+            // with "Connection closed", which correctly propagates the failure.
+            logger.warn("daemon.ipc.parse.error", { connectionId: conn.id });
+            conn.socket.destroy();
+            return;
+        }
+        if (!request.id || !request.method) {
+            // If id is missing/falsy, we can't correlate an error response.
+            // Close the connection rather than sending an unmatchable frame.
+            logger.warn("daemon.ipc.invalid.request", { connectionId: conn.id, hasId: !!request.id, hasMethod: !!request.method });
+            conn.socket.destroy();
+            return;
+        }
+        const handler = handlers.get(request.method);
+        if (!handler) {
+            const errorResp = {
+                id: request.id,
+                error: {
+                    code: "method_not_found",
+                    message: `Unknown method: ${request.method}`,
+                    guidance: `Unknown IPC method '${request.method}'. Check that cello-mcp and the daemon are the same version. Run 'cello status' to verify the daemon is running.`,
+                },
+            };
+            conn.socket.write(JSON.stringify(errorResp) + "\n");
+            return;
+        }
+        conn.inFlightCount++;
+        Promise.resolve(handler(request.params, conn.id))
+            .then((result) => {
+            try {
+                const resp = { id: request.id, result };
+                conn.socket.write(JSON.stringify(resp) + "\n");
+            }
+            catch {
+                // Socket closed before response could be written
+            }
+        })
+            .catch((err) => {
+            try {
+                const resp = {
+                    id: request.id,
+                    error: {
+                        code: "internal_error",
+                        message: err instanceof Error ? err.message : String(err),
+                        guidance: "An unexpected error occurred. Check daemon logs for details.",
+                    },
+                };
+                conn.socket.write(JSON.stringify(resp) + "\n");
+            }
+            catch {
+                // Socket closed before error could be written
+            }
+        })
+            .finally(() => {
+            conn.inFlightCount--;
+        });
+    }
+    return {
+        async start() {
+            // Remove stale socket file if it exists
+            try {
+                await unlink(socketPath);
+            }
+            catch (err) {
+                if (err.code !== "ENOENT") {
+                    throw err;
+                }
+            }
+            server = createServer(handleConnection);
+            await new Promise((resolve, reject) => {
+                server.on("error", (err) => {
+                    reject(err);
+                });
+                server.listen(socketPath, () => {
+                    resolve();
+                });
+            });
+            // SI-001: Set socket permissions to owner-only
+            await chmod(socketPath, 0o600);
+        },
+        async stop() {
+            stopping = true;
+            if (!server)
+                return;
+            // Wait for in-flight requests to complete (max 5 seconds)
+            const deadline = Date.now() + 5000;
+            let totalInFlight = 0;
+            while (Date.now() < deadline) {
+                totalInFlight = 0;
+                for (const conn of connections.values()) {
+                    totalInFlight += conn.inFlightCount;
+                }
+                if (totalInFlight === 0)
+                    break;
+                await new Promise((r) => setTimeout(r, 50));
+            }
+            if (totalInFlight > 0) {
+                logger.warn("daemon.ipc.shutdown.timeout", { abandonedRequests: totalInFlight });
+            }
+            // Send shutdown notification to all connected clients.
+            // Uses IpcNotification shape — distinct from IpcResponse so clients
+            // never confuse it with a response to their request.
+            const shutdownNotification = { notification: "shutdown" };
+            const shutdownFrame = JSON.stringify(shutdownNotification) + "\n";
+            for (const conn of connections.values()) {
+                try {
+                    conn.shutdownReason = "daemon_shutdown";
+                    conn.socket.write(shutdownFrame);
+                    conn.socket.end();
+                }
+                catch {
+                    // Connection may already be closed
+                }
+            }
+            // Close server and remove socket
+            await new Promise((resolve) => {
+                server.close(() => resolve());
+            });
+            try {
+                await unlink(socketPath);
+            }
+            catch (err) {
+                if (err.code !== "ENOENT") {
+                    logger.warn("daemon.ipc.socket.unlink.failed", {
+                        socketPath,
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                }
+            }
+            server = null;
+        },
+        getConnectionCount() {
+            return connections.size;
+        },
+        onDisconnect(handler) {
+            disconnectHandler = handler;
+        },
+        sendNotification(connectionId, notification) {
+            const conn = connections.get(connectionId);
+            if (!conn)
+                return false;
+            try {
+                const frame = JSON.stringify(notification) + "\n";
+                return conn.socket.write(frame);
+            }
+            catch (err) {
+                logger.debug("daemon.ipc.notification.write.failed", {
+                    connectionId,
+                    error: err instanceof Error ? err.message : String(err),
+                });
+                return false;
+            }
+        },
+        getConnectionIds() {
+            return Array.from(connections.keys());
+        },
+    };
+}
+//# sourceMappingURL=ipc-server.js.map

package/dist/ipc-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc-server.js","sourceRoot":"","sources":["../src/ipc-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA+BzC,MAAM,UAAU,eAAe,CAC7B,MAAuB,EACvB,QAAiC;IAEjC,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACtD,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IACxD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,iBAAiB,GAAgC,IAAI,CAAC;IAE1D,SAAS,gBAAgB,CAAC,MAAc;QACtC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;gBACjD,YAAY,EAAE,WAAW,CAAC,IAAI;gBAC9B,QAAQ,EAAE,cAAc;aACzB,CAAC,CAAC;YACH,wEAAwE;YACxE,yEAAyE;YACzE,+CAA+C;YAC/C,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,GAAqB,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QACpG,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAEpC,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAErD,+EAA+E;QAC/E,2EAA2E;QAC3E,iFAAiF;QACjF,2EAA2E;QAC3E,kFAAkF;QAClF,+EAA+E;QAC/E,mFAAmF;QACnF,kFAAkF;QAClF,gFAAgF;QAChF,iFAAiF;QACjF,oDAAoD;QACpD,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,oDAAoD;QAC7F,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBACvF,MAAM,GAAG,EAAE,CAAC;gBACZ,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBAClC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,IAAI,UAAkB,CAAC;YACvB,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBACzC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;gBACtC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBACvC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,IAAI,eAAe,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,IAAI,iBAAiB;gBAAE,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,wFAAwF;QACxF,uFAAuF;QACvF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAChC,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,aAAa,CAAC,IAAsB,EAAE,IAAY;QACzD,IAAI,OAAmB,CAAC;QACxB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;YACxD,mEAAmE;YACnE,oEAAoE;YACpE,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,gEAAgE;YAChE,iEAAiE;YACjE,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACvH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,SAAS,GAAgB;gBAC7B,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,mBAAmB,OAAO,CAAC,MAAM,EAAE;oBAC5C,QAAQ,EAAE,uBAAuB,OAAO,CAAC,MAAM,kHAAkH;iBAClK;aACF,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC9C,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,GAAgB,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC;gBACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,iDAAiD;YACnD,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAgB;oBACxB,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,gBAAgB;wBACtB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,QAAQ,EAAE,8DAA8D;qBACzE;iBACF,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,8CAA8C;YAChD,CAAC;QACH,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK;YACT,wCAAwC;YACxC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrD,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;YAED,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;YAExC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;oBACjC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;gBACH,MAAO,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE;oBAC9B,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,+CAA+C;YAC/C,MAAM,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,IAAI;YACR,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC,MAAM;gBAAE,OAAO;YAEpB,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACnC,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAC7B,aAAa,GAAG,CAAC,CAAC;gBAClB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;oBACxC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC;gBACtC,CAAC;gBACD,IAAI,aAAa,KAAK,CAAC;oBAAE,MAAM;gBAC/B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC9C,CAAC;YAED,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,CAAC;YACnF,CAAC;YAED,uDAAuD;YACvD,oEAAoE;YACpE,qDAAqD;YACrD,MAAM,oBAAoB,GAAoB,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;YAC3E,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC;YAClE,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,IAAI,CAAC;oBACH,IAAI,CAAC,cAAc,GAAG,iBAAiB,CAAC;oBACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;oBACjC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBACpB,CAAC;gBAAC,MAAM,CAAC;oBACP,mCAAmC;gBACrC,CAAC;YACH,CAAC;YAED,iCAAiC;YACjC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrD,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;wBAC7C,UAAU;wBACV,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QAED,kBAAkB;YAChB,OAAO,WAAW,CAAC,IAAI,CAAC;QAC1B,CAAC;QAED,YAAY,CAAC,OAA6B;YACxC,iBAAiB,GAAG,OAAO,CAAC;QAC9B,CAAC;QAED,gBAAgB,CAAC,YAAoB,EAAE,YAA6B;YAClE,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;gBAClD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE;oBACnD,YAAY;oBACZ,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACxD,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,gBAAgB;YACd,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lock-file.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Lock file management for the CELLO daemon.
+ *
+ * Pseudocode:
+ * 1. acquireLock(path, content):
+ *    - Write JSON content to path.tmp atomically
+ *    - Rename path.tmp → path (atomic on POSIX)
+ *    - Return true on success
+ *
+ * 2. readLock(path):
+ *    - Read file, parse JSON
+ *    - Validate shape: {pid: number, socketPath: string, version: string}
+ *    - Return parsed content or null if missing/invalid
+ *
+ * 3. isProcessAlive(pid):
+ *    - process.kill(pid, 0) — signal 0 checks existence without killing
+ *    - Return true if no error thrown
+ *
+ * 4. removeLock(path):
+ *    - Unlink the file, ignoring ENOENT
+ */
+import type { LockFileContent, Logger } from "./types.js";
+export declare function readLock(lockPath: string): Promise<LockFileContent | null>;
+export declare function acquireLock(lockPath: string, content: LockFileContent): Promise<void>;
+export declare function removeLock(lockPath: string, logger: Logger): Promise<void>;
+export declare function isProcessAlive(pid: number): boolean;
+//# sourceMappingURL=lock-file.d.ts.map

package/dist/lock-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock-file.d.ts","sourceRoot":"","sources":["../src/lock-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAE1D,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAwBhF;AAED,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAU3F;AAED,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAWhF;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD"}

package/dist/lock-file.js

@@ -0,0 +1,84 @@
+/**
+ * Lock file management for the CELLO daemon.
+ *
+ * Pseudocode:
+ * 1. acquireLock(path, content):
+ *    - Write JSON content to path.tmp atomically
+ *    - Rename path.tmp → path (atomic on POSIX)
+ *    - Return true on success
+ *
+ * 2. readLock(path):
+ *    - Read file, parse JSON
+ *    - Validate shape: {pid: number, socketPath: string, version: string}
+ *    - Return parsed content or null if missing/invalid
+ *
+ * 3. isProcessAlive(pid):
+ *    - process.kill(pid, 0) — signal 0 checks existence without killing
+ *    - Return true if no error thrown
+ *
+ * 4. removeLock(path):
+ *    - Unlink the file, ignoring ENOENT
+ */
+import { readFile, writeFile, rename, unlink } from "node:fs/promises";
+export async function readLock(lockPath) {
+    let raw;
+    try {
+        raw = await readFile(lockPath, "utf-8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            return null;
+        }
+        throw err;
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.pid !== "number" ||
+            typeof parsed.socketPath !== "string" ||
+            typeof parsed.version !== "string") {
+            return null;
+        }
+        return { pid: parsed.pid, socketPath: parsed.socketPath, version: parsed.version };
+    }
+    catch {
+        return null;
+    }
+}
+export async function acquireLock(lockPath, content) {
+    const tmpPath = lockPath + ".tmp";
+    const json = JSON.stringify(content, null, 2) + "\n";
+    await writeFile(tmpPath, json, { mode: 0o600 });
+    try {
+        await rename(tmpPath, lockPath);
+    }
+    catch (err) {
+        try {
+            await unlink(tmpPath);
+        }
+        catch { /* best-effort cleanup */ }
+        throw err;
+    }
+}
+export async function removeLock(lockPath, logger) {
+    try {
+        await unlink(lockPath);
+    }
+    catch (err) {
+        if (err.code !== "ENOENT") {
+            logger.warn("daemon.lock.remove.failed", {
+                lockPath,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+}
+export function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=lock-file.js.map

package/dist/lock-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock-file.js","sourceRoot":"","sources":["../src/lock-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAGvE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,QAAgB;IAC7C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,IACE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACrC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAClC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAwB;IAC1E,MAAM,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IACrD,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB,EAAE,MAAc;IAC/D,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE;gBACvC,QAAQ;gBACR,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/manifest-loader.d.ts

@@ -0,0 +1,33 @@
+/**
+ * M7-MANIFEST-002 — FileManifestProvider: production IManifestProvider implementation.
+ *
+ * Reads the bundled consortium-manifest.json from the package root, parses it,
+ * verifies the threshold signatures, and caches the result for subsequent calls
+ * to getCurrentManifest().
+ *
+ * Tests use TestManifestProvider (from @cello-protocol/transport) which
+ * takes a pre-built ConsortiumManifest and skips file read and signature verification.
+ *
+ * Crypto reference: RFC 8032 (Ed25519 threshold signature verification via verifyManifest).
+ */
+import type { ConsortiumManifest } from "@cello-protocol/protocol-types";
+import type { IManifestProvider } from "@cello-protocol/transport";
+/**
+ * FileManifestProvider — reads consortium-manifest.json from the package root.
+ *
+ * Pseudocode:
+ *   loadAndVerify(rootKeys, threshold):
+ *     1. Read consortium-manifest.json from the package root (same directory as this file).
+ *     2. Parse as JSON — throw on parse failure.
+ *     3. Call verifyManifest(parsed, rootKeys, threshold) — RFC 8032 Ed25519 threshold check.
+ *     4. If ok: cache the manifest, return it.
+ *     5. If not ok: throw Error with reason from verifyManifest diagnostics.
+ */
+export declare class FileManifestProvider implements IManifestProvider {
+    #private;
+    constructor(manifestPath?: string);
+    loadAndVerify(rootKeys: readonly string[], threshold: number): Promise<ConsortiumManifest>;
+    getCurrentManifest(): ConsortiumManifest | null;
+    updateManifest(manifest: ConsortiumManifest): void;
+}
+//# sourceMappingURL=manifest-loader.d.ts.map

package/dist/manifest-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-loader.d.ts","sourceRoot":"","sources":["../src/manifest-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEnE;;;;;;;;;;GAUG;AACH,qBAAa,oBAAqB,YAAW,iBAAiB;;gBAIhD,YAAY,CAAC,EAAE,MAAM;IAQ3B,aAAa,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAmChG,kBAAkB,IAAI,kBAAkB,GAAG,IAAI;IAI/C,cAAc,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI;CAGnD"}