@chatlychat/cli 0.2.0 → 0.4.0

package/dist/commands/listen-relay-options.d.ts

@@ -0,0 +1,78 @@
+/**
+ * The flags and the wire shapes of `chatly listen --relay`.
+ *
+ * Split out of `listen-relay.ts` for the 650-line ceiling. What is parsed
+ * here, and why each refusal exists, is documented on each function; the
+ * protocol the shapes belong to is `apps/cli/RELAY-SERVER-SPEC.md`.
+ */
+import { type RelayKind } from './listen-relay-sign.js';
+import { type ParsedArgs } from '../args.js';
+export interface RelaySecrets {
+    /** `--secret <value>`: for every target without its own. */
+    readonly fallback: string | null;
+    /** `--secret <targetId>=<value>`. */
+    readonly byTarget: ReadonlyMap<string, string>;
+}
+export interface RelayOptions {
+    readonly forwardTo: string;
+    readonly tools: readonly string[];
+    readonly cards: readonly string[];
+    readonly canvases: readonly string[];
+    readonly secrets: RelaySecrets;
+    readonly json: boolean;
+}
+/** One relayed call, as `GET /v1/relay-sessions/{id}/frames` renders it. */
+export interface RelayFrame {
+    readonly id: string;
+    readonly kind: RelayKind;
+    readonly targetId: string;
+    readonly method: string;
+    /** `pathname + search` of the CONFIGURED url. */
+    readonly path: string;
+    readonly headers: Readonly<Record<string, string>>;
+    /** Exactly the bytes the configured url would have received. `''` for none. */
+    readonly body: string;
+    /** When the waiting caller gives up. The CLI aborts the forward then. */
+    readonly deadlineAt: string;
+}
+/** What the CLI posts back. Exactly one of the two arms. */
+export type RelayAnswer = {
+    readonly status: number;
+    readonly headers: Record<string, string>;
+    readonly body: string;
+    readonly durationMs: number;
+} | {
+    readonly error: 'unreachable' | 'timeout' | 'too_large' | 'not_selected' | 'signing_failed' | 'interrupted';
+    readonly message: string;
+    readonly durationMs: number;
+};
+/** `--tool`, `--card` or `--canvas` on a command that is not `--relay`. */
+export declare function relayOnlyFlagWithoutRelay(args: ParsedArgs): string | null;
+/** Read the relay flags, refusing anything that cannot work, with the fix named. */
+export declare function parseRelayOptions(args: ParsedArgs): RelayOptions;
+/**
+ * Where one frame goes: `--forward-to`'s origin and path prefix, then the
+ * CONFIGURED url's path and query.
+ *
+ * The path is preserved because for a tool call it IS the request —
+ * `GET /orders/{{order_id}}` renders to `/orders/42`, and a handler that
+ * cannot see the 42 cannot answer. Cards and canvases are kept the same way
+ * so there is one rule, and a local server mounted under a prefix still works.
+ */
+export declare function relayTargetUrl(forwardTo: string, framePath: string): string;
+/**
+ * The frames on one poll, and how many were unreadable.
+ *
+ * Hand-checked rather than zod, because this package declares the SDK as its
+ * only dependency (CLAUDE.md §2: no new dependency without approval). An
+ * unreadable frame is COUNTED, not silently dropped — the server is waiting
+ * on it, and a relay that loses frames quietly reads as a slow handler.
+ */
+export declare function readFrames(value: unknown): {
+    frames: RelayFrame[];
+    unreadable: number;
+};
+/** Which selected set a frame's kind is checked against. */
+export declare function selectedFor(opts: RelayOptions, kind: RelayKind): readonly string[];
+export declare function secretFor(opts: RelayOptions, targetId: string): string | null;
+//# sourceMappingURL=listen-relay-options.d.ts.map

package/dist/commands/listen-relay-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen-relay-options.d.ts","sourceRoot":"","sources":["../../src/commands/listen-relay-options.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAe,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAIxD,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,qCAAqC;IACrC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,4EAA4E;AAC5E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,4DAA4D;AAC5D,MAAM,MAAM,WAAW,GACnB;IACE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACD;IACE,QAAQ,CAAC,KAAK,EACV,aAAa,GACb,SAAS,GACT,WAAW,GACX,cAAc,GACd,gBAAgB,GAChB,aAAa,CAAC;IAClB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAaN,2EAA2E;AAC3E,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAOzE;AAqDD,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CA6DhE;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAQ3E;AAWD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CA8BvF;AAED,4DAA4D;AAC5D,wBAAgB,WAAW,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,GAAG,SAAS,MAAM,EAAE,CAMlF;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE7E"}

package/dist/commands/listen-relay-options.js

@@ -0,0 +1,195 @@
+/**
+ * The flags and the wire shapes of `chatly listen --relay`.
+ *
+ * Split out of `listen-relay.ts` for the 650-line ceiling. What is parsed
+ * here, and why each refusal exists, is documented on each function; the
+ * protocol the shapes belong to is `apps/cli/RELAY-SERVER-SPEC.md`.
+ */
+import { RELAY_KINDS } from './listen-relay-sign.js';
+import { bool, str } from '../args.js';
+const ID_FLAGS = ['tool', 'card', 'canvas'];
+function listFlag(args, name) {
+    const raw = args.flags[name];
+    if (raw === undefined || raw === true || raw === false) {
+        return [];
+    }
+    return (Array.isArray(raw) ? raw : [String(raw)])
+        .flatMap((v) => String(v).split(','))
+        .map((s) => s.trim())
+        .filter((s) => s.length > 0);
+}
+/** `--tool`, `--card` or `--canvas` on a command that is not `--relay`. */
+export function relayOnlyFlagWithoutRelay(args) {
+    for (const name of ID_FLAGS) {
+        if (args.flags[name] !== undefined) {
+            return name;
+        }
+    }
+    return null;
+}
+/** The ledger-tail flags, none of which mean anything on a relay. */
+const LEDGER_ONLY_FLAGS = ['bot', 'endpoint', 'event', 'status', 'replay', 'interval', 'limit'];
+function parseSecrets(args, ids) {
+    const raw = args.flags['secret'];
+    const values = raw === undefined || typeof raw === 'boolean' ? [] : Array.isArray(raw) ? raw : [raw];
+    let fallback = null;
+    const byTarget = new Map();
+    for (const value of values.map(String)) {
+        /*
+         * `<id>=<secret>` only when the left side IS one of the selected ids. A
+         * secret is operator-chosen on a tool, so it may itself contain `=`
+         * (standard base64 padding), and splitting every value on the first one
+         * would turn that secret into a target id nobody asked for.
+         */
+        const eq = value.indexOf('=');
+        const left = eq > 0 ? value.slice(0, eq) : '';
+        if (left.length > 0 && ids.has(left)) {
+            byTarget.set(left, value.slice(eq + 1));
+            continue;
+        }
+        if (fallback !== null) {
+            throw new Error('Two bare --secret values. With more than one target, name which secret is whose:\n' +
+                '  --secret <id>=<secret>   (repeatable)');
+        }
+        fallback = value;
+    }
+    for (const secret of [fallback, ...byTarget.values()]) {
+        if (secret === null) {
+            continue;
+        }
+        /*
+         * The two prefixes this product mints for OTHER surfaces. Neither signs
+         * a tool call, a card fetch or a canvas step, and the symptom of passing
+         * one is a 401 from your own handler that looks like a verifier bug.
+         */
+        if (secret.startsWith('whsec_') || secret.startsWith('chsec_')) {
+            throw new Error(`--secret "${secret.slice(0, 6)}…" is a ${secret.startsWith('whsec_') ? 'webhook endpoint' : 'external agent'} secret, and it signs a different surface. A relay needs the secret configured on ` +
+                "the tool, the customer card (or its endpoint), or the channel's canvas.");
+        }
+    }
+    return { fallback, byTarget };
+}
+/** Read the relay flags, refusing anything that cannot work, with the fix named. */
+export function parseRelayOptions(args) {
+    for (const name of LEDGER_ONLY_FLAGS) {
+        if (args.flags[name] !== undefined) {
+            throw new Error(`--${name} tails a delivery ledger and means nothing on --relay, which receives live ` +
+                'calls instead of replaying logged ones.');
+        }
+    }
+    const tools = listFlag(args, 'tool');
+    const cards = listFlag(args, 'card');
+    const canvases = listFlag(args, 'canvas');
+    if (tools.length + cards.length + canvases.length === 0) {
+        throw new Error('--relay needs at least one explicit target, because it takes PRODUCTION traffic:\n' +
+            '  --tool <id>          an AI tool (chatly ai tools list)\n' +
+            '  --card <id>          a customer card (chatly customer-cards list)\n' +
+            "  --canvas <channelId> a channel's canvas endpoint\n" +
+            'There is deliberately no form that relays everything.');
+    }
+    const forwardTo = str(args.flags, 'forward-to') ?? null;
+    if (forwardTo === null) {
+        throw new Error('--relay needs --forward-to. A relayed call is waiting for an answer, so there is no ' +
+            'print-only mode:\n  chatly listen --relay --tool <id> --forward-to http://localhost:3000');
+    }
+    let parsed;
+    try {
+        parsed = new URL(forwardTo);
+    }
+    catch {
+        parsed = null;
+    }
+    // `localhost:3000` parses, as the scheme `localhost:` — see listen-core.ts.
+    if (parsed === null || (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')) {
+        throw new Error(`--forward-to "${forwardTo}" is not an http(s) URL. Include the scheme:\n` +
+            '  --forward-to http://localhost:3000');
+    }
+    if (parsed.search !== '' || parsed.hash !== '') {
+        // The configured url's own query is appended (see relayTargetUrl), and
+        // merging two query strings would sign one the handler does not receive.
+        throw new Error(`--forward-to "${forwardTo}" has a query or fragment. Give an origin, optionally with a ` +
+            "path prefix; each call's own path and query are appended to it.");
+    }
+    const ids = new Set([...tools, ...cards, ...canvases]);
+    return {
+        forwardTo,
+        tools,
+        cards,
+        canvases,
+        secrets: parseSecrets(args, ids),
+        json: bool(args.flags, 'json'),
+    };
+}
+/**
+ * Where one frame goes: `--forward-to`'s origin and path prefix, then the
+ * CONFIGURED url's path and query.
+ *
+ * The path is preserved because for a tool call it IS the request —
+ * `GET /orders/{{order_id}}` renders to `/orders/42`, and a handler that
+ * cannot see the 42 cannot answer. Cards and canvases are kept the same way
+ * so there is one rule, and a local server mounted under a prefix still works.
+ */
+export function relayTargetUrl(forwardTo, framePath) {
+    const base = new URL(forwardTo);
+    const prefix = base.pathname.replace(/\/+$/, '');
+    const rel = framePath.startsWith('/') ? framePath : `/${framePath}`;
+    const q = rel.indexOf('?');
+    const pathname = q === -1 ? rel : rel.slice(0, q);
+    const search = q === -1 ? '' : rel.slice(q);
+    return `${base.origin}${prefix}${pathname}${search}`;
+}
+function isStringRecord(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        !Array.isArray(value) &&
+        Object.values(value).every((v) => typeof v === 'string'));
+}
+/**
+ * The frames on one poll, and how many were unreadable.
+ *
+ * Hand-checked rather than zod, because this package declares the SDK as its
+ * only dependency (CLAUDE.md §2: no new dependency without approval). An
+ * unreadable frame is COUNTED, not silently dropped — the server is waiting
+ * on it, and a relay that loses frames quietly reads as a slow handler.
+ */
+export function readFrames(value) {
+    const list = typeof value === 'object' && value !== null
+        ? value.frames
+        : undefined;
+    if (!Array.isArray(list)) {
+        return { frames: [], unreadable: 0 };
+    }
+    const frames = [];
+    let unreadable = 0;
+    for (const f of list) {
+        const r = (typeof f === 'object' && f !== null ? f : {});
+        if (typeof r['id'] === 'string' &&
+            typeof r['kind'] === 'string' &&
+            RELAY_KINDS.includes(r['kind']) &&
+            typeof r['targetId'] === 'string' &&
+            typeof r['method'] === 'string' &&
+            typeof r['path'] === 'string' &&
+            isStringRecord(r['headers']) &&
+            typeof r['body'] === 'string' &&
+            typeof r['deadlineAt'] === 'string' &&
+            !Number.isNaN(Date.parse(r['deadlineAt']))) {
+            frames.push(r);
+        }
+        else {
+            unreadable += 1;
+        }
+    }
+    return { frames, unreadable };
+}
+/** Which selected set a frame's kind is checked against. */
+export function selectedFor(opts, kind) {
+    return kind === 'ai_tool_call'
+        ? opts.tools
+        : kind === 'customer_card'
+            ? opts.cards
+            : opts.canvases;
+}
+export function secretFor(opts, targetId) {
+    return opts.secrets.byTarget.get(targetId) ?? opts.secrets.fallback;
+}
+//# sourceMappingURL=listen-relay-options.js.map

package/dist/commands/listen-relay-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen-relay-options.js","sourceRoot":"","sources":["../../src/commands/listen-relay-options.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAkB,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAmB,MAAM,YAAY,CAAC;AAExD,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAqDrD,SAAS,QAAQ,CAAC,IAAgB,EAAE,IAAY;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QACvD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;SAC9C,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB,CAAC,IAAgB;IACxD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAEhG,SAAS,YAAY,CAAC,IAAgB,EAAE,GAAwB;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,MAAM,GACV,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxF,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC;;;;;WAKG;QACH,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACxC,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,oFAAoF;gBAClF,yCAAyC,CAC5C,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QACtD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QACD;;;;WAIG;QACH,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CACb,aAAa,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAC7B,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBACrD,oFAAoF;gBAClF,yEAAyE,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,IAAgB;IAChD,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,KAAK,IAAI,6EAA6E;gBACpF,yCAAyC,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,oFAAoF;YAClF,4DAA4D;YAC5D,uEAAuE;YACvE,sDAAsD;YACtD,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC;IACxD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,sFAAsF;YACpF,0FAA0F,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,4EAA4E;IAC5E,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,gDAAgD;YACxE,sCAAsC,CACzC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC/C,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,IAAI,KAAK,CACb,iBAAiB,SAAS,+DAA+D;YACvF,iEAAiE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IACvD,OAAO;QACL,SAAS;QACT,KAAK;QACL,KAAK;QACL,QAAQ;QACR,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;KAC/B,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,SAAiB;IACjE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;IACpE,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CACzD,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QACzC,CAAC,CAAE,KAA8B,CAAC,MAAM;QACxC,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,IAAiB,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;QACpF,IACE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ;YAC3B,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;YAC5B,WAAiC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACtD,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ;YACjC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ;YAC/B,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;YAC7B,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;YAC7B,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ;YACnC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAC1C,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAA0B,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAChC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,WAAW,CAAC,IAAkB,EAAE,IAAe;IAC7D,OAAO,IAAI,KAAK,cAAc;QAC5B,CAAC,CAAC,IAAI,CAAC,KAAK;QACZ,CAAC,CAAC,IAAI,KAAK,eAAe;YACxB,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAkB,EAAE,QAAgB;IAC5D,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;AACtE,CAAC"}

package/dist/commands/listen-relay-sign.d.ts

@@ -0,0 +1,36 @@
+/** The three surfaces a relay carries. Values are the SDK's surface names. */
+export declare const RELAY_KINDS: readonly ["ai_tool_call", "customer_card", "canvas_step"];
+export type RelayKind = (typeof RELAY_KINDS)[number];
+/**
+ * Header names this CLI owns on a relayed request.
+ *
+ * Stripped from whatever the frame carried before signing, so a server that
+ * got §5 wrong and sent the production signature cannot have it forwarded
+ * beside ours — a handler that reads the first `x-chatly-signature` it finds
+ * would then verify the server's MAC, which is over the PRODUCTION path, and
+ * fail for a reason nobody could see. `host` and `content-length` are
+ * `fetch`'s to set.
+ */
+export declare const RELAY_OWNED_HEADERS: ReadonlySet<string>;
+/**
+ * The signature headers for one relayed request, self-checked.
+ *
+ * Returns the headers to merge, or a message naming what failed — which can
+ * only be a bug in this CLI, since it signed the bytes itself.
+ */
+export declare function signRelayedRequest(input: {
+    readonly kind: RelayKind;
+    readonly method: string;
+    /** The absolute LOCAL url this request is about to be sent to. */
+    readonly targetUrl: string;
+    readonly body: string;
+    readonly secret: string;
+    readonly nowMs: number;
+}): {
+    ok: true;
+    headers: Record<string, string>;
+} | {
+    ok: false;
+    message: string;
+};
+//# sourceMappingURL=listen-relay-sign.d.ts.map

package/dist/commands/listen-relay-sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen-relay-sign.d.ts","sourceRoot":"","sources":["../../src/commands/listen-relay-sign.ts"],"names":[],"mappings":"AA2CA,8EAA8E;AAC9E,eAAO,MAAM,WAAW,2DAA4D,CAAC;AACrF,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAQlD,CAAC;AAMH;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAgEjF"}

package/dist/commands/listen-relay-sign.js

@@ -0,0 +1,136 @@
+/**
+ * The signature a relayed SYNCHRONOUS call carries when it reaches localhost.
+ *
+ * ═══ WHY THE CLI SIGNS AND THE SERVER DOES NOT ════════════════════════════
+ *
+ * The server holds the real secret for every one of these surfaces, so the
+ * obvious design is for it to sign the frame and for this CLI to forward it
+ * byte for byte. That is rejected in `RELAY-SERVER-SPEC.md` §5 and the reason
+ * is worth repeating where the signing happens: a frame carrying a
+ * production-valid signature is a replayable credential, delivered to anyone
+ * holding a `ck_` key with the relay permission. For a tool call the MAC
+ * covers the method and the path, so the replay is narrow — but for a
+ * customer-card fetch and a canvas step it covers `<ts>.<body>` only, and the
+ * same signed bytes are accepted by the operator's REAL endpoint for the next
+ * five minutes. So frames arrive unsigned and are signed here, with the
+ * secret the developer passes in `--secret`, exactly as `listen` and
+ * `listen --bot` already do for the ledgers.
+ *
+ * ═══ THE THREE CONSTRUCTIONS, AS THE SENDERS USE THEM ═════════════════════
+ *
+ * Read against the senders, not against the docs:
+ *
+ *   | kind            | sender                                              | header(s)                                           | base                          | `t` unit |
+ *   | --------------- | --------------------------------------------------- | --------------------------------------------------- | ----------------------------- | -------- |
+ *   | `ai_tool_call`  | `dialCustomTool`, `packages/shared/src/ai-tools`    | `x-chatly-signature: t=…,v1=…`                      | `<t>.<METHOD>.<path>.<body>`  | seconds  |
+ *   | `customer_card` | `customer-cards.fetcher.ts` `attempt()`             | `x-chatly-signature: sha256=…` + `x-chatly-timestamp` | `<ts>.<body>`               | **ms**   |
+ *   | `canvas_step`   | `widget-canvas.service.ts` `callIntegrator()`       | `x-chatly-canvas-signature: sha256=…` + `-ts`       | `<ts>.<body>`                 | **ms**   |
+ *
+ * Two of the three put `x-chatly-signature` on the wire with DIFFERENT
+ * formats, and two send milliseconds where the third sends seconds. Both
+ * traps are why each header is checked with the SDK's own
+ * `verifyChatlySignature` under its own `surface` before the request goes
+ * out, and a forward that does not verify is refused rather than sent — the
+ * reasoning is `listen-core.ts`'s, and so is the unified
+ * `x-chatly-signature-v2` minted beside each one.
+ *
+ * `path` in the tool-call base string is the LOCAL path, because that is the
+ * request line the developer's handler verifies.
+ */
+import { createHmac } from 'node:crypto';
+import { chatlyV2SigningPath, signChatlyV2, verifyChatlySignature } from '@chatlychat/sdk-node';
+/** The three surfaces a relay carries. Values are the SDK's surface names. */
+export const RELAY_KINDS = ['ai_tool_call', 'customer_card', 'canvas_step'];
+/**
+ * Header names this CLI owns on a relayed request.
+ *
+ * Stripped from whatever the frame carried before signing, so a server that
+ * got §5 wrong and sent the production signature cannot have it forwarded
+ * beside ours — a handler that reads the first `x-chatly-signature` it finds
+ * would then verify the server's MAC, which is over the PRODUCTION path, and
+ * fail for a reason nobody could see. `host` and `content-length` are
+ * `fetch`'s to set.
+ */
+export const RELAY_OWNED_HEADERS = new Set([
+    'x-chatly-signature',
+    'x-chatly-signature-v2',
+    'x-chatly-timestamp',
+    'x-chatly-canvas-signature',
+    'x-chatly-canvas-ts',
+    'host',
+    'content-length',
+]);
+function hmacHex(secret, base) {
+    return createHmac('sha256', secret).update(base).digest('hex');
+}
+/**
+ * The signature headers for one relayed request, self-checked.
+ *
+ * Returns the headers to merge, or a message naming what failed — which can
+ * only be a bug in this CLI, since it signed the bytes itself.
+ */
+export function signRelayedRequest(input) {
+    const { kind, body, secret, nowMs } = input;
+    const method = input.method.toUpperCase();
+    const path = chatlyV2SigningPath(input.targetUrl);
+    if (path === null) {
+        return { ok: false, message: `"${input.targetUrl}" is not a URL` };
+    }
+    const seconds = Math.floor(nowMs / 1000);
+    const headers = {};
+    if (kind === 'ai_tool_call') {
+        const t = String(seconds);
+        headers['x-chatly-signature'] =
+            `t=${t},v1=${hmacHex(secret, `${t}.${method}.${path}.${body}`)}`;
+    }
+    else {
+        // MILLISECONDS, as both senders do: `Date.now().toString()`.
+        const ts = String(Math.floor(nowMs));
+        const value = `sha256=${hmacHex(secret, `${ts}.${body}`)}`;
+        if (kind === 'customer_card') {
+            headers['x-chatly-timestamp'] = ts;
+            headers['x-chatly-signature'] = value;
+        }
+        else {
+            headers['x-chatly-canvas-ts'] = ts;
+            headers['x-chatly-canvas-signature'] = value;
+        }
+    }
+    const legacyCheck = verifyChatlySignature({
+        surface: kind,
+        body,
+        headers,
+        secret,
+        method,
+        path,
+        nowMs,
+        // This check is of the surface's OWN construction; v2 is checked below.
+        v2: 'ignore',
+    });
+    if (!legacyCheck.ok) {
+        return { ok: false, message: `${legacyCheck.reason}: ${legacyCheck.message}` };
+    }
+    const v2 = signChatlyV2({
+        base: 'target',
+        secret,
+        timestampSeconds: seconds,
+        method,
+        path,
+        body,
+    });
+    const v2Check = verifyChatlySignature({
+        surface: 'unified_v2',
+        body,
+        headers: { 'x-chatly-signature-v2': v2 },
+        secret,
+        method,
+        path,
+        nowMs,
+    });
+    if (!v2Check.ok) {
+        return { ok: false, message: `${v2Check.reason}: ${v2Check.message}` };
+    }
+    headers['x-chatly-signature-v2'] = v2;
+    return { ok: true, headers };
+}
+//# sourceMappingURL=listen-relay-sign.js.map

package/dist/commands/listen-relay-sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen-relay-sign.js","sourceRoot":"","sources":["../../src/commands/listen-relay-sign.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAEhG,8EAA8E;AAC9E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,aAAa,CAAU,CAAC;AAGrF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IAC9D,oBAAoB;IACpB,uBAAuB;IACvB,oBAAoB;IACpB,2BAA2B;IAC3B,oBAAoB;IACpB,MAAM;IACN,gBAAgB;CACjB,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,MAAc,EAAE,IAAY;IAC3C,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAQlC;IACC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,KAAK,CAAC,SAAS,gBAAgB,EAAE,CAAC;IACrE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAEzC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,CAAC,oBAAoB,CAAC;YAC3B,KAAK,CAAC,OAAO,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,6DAA6D;QAC7D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,UAAU,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,OAAO,CAAC,oBAAoB,CAAC,GAAG,EAAE,CAAC;YACnC,OAAO,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,oBAAoB,CAAC,GAAG,EAAE,CAAC;YACnC,OAAO,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,qBAAqB,CAAC;QACxC,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,OAAO;QACP,MAAM;QACN,MAAM;QACN,IAAI;QACJ,KAAK;QACL,wEAAwE;QACxE,EAAE,EAAE,QAAQ;KACb,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,EAAE,GAAG,YAAY,CAAC;QACtB,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,gBAAgB,EAAE,OAAO;QACzB,MAAM;QACN,IAAI;QACJ,IAAI;KACL,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACpC,OAAO,EAAE,YAAY;QACrB,IAAI;QACJ,OAAO,EAAE,EAAE,uBAAuB,EAAE,EAAE,EAAE;QACxC,MAAM;QACN,MAAM;QACN,IAAI;QACJ,KAAK;KACN,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,CAAC;IACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC"}

package/dist/commands/listen-relay.d.ts

@@ -0,0 +1,43 @@
+import { type ChatlyClient } from '@chatlychat/sdk-node';
+import { type RelayAnswer, type RelayFrame, type RelayOptions } from './listen-relay-options.js';
+import type { ListenDeps } from './listen-core.js';
+export { parseRelayOptions, readFrames, relayOnlyFlagWithoutRelay, relayTargetUrl, type RelayAnswer, type RelayFrame, type RelayOptions, type RelaySecrets, } from './listen-relay-options.js';
+/** Detach after this long with no frame. See the header, rule 2. */
+export declare const RELAY_IDLE_TIMEOUT_MS: number;
+/** Long-poll wait. Under the SDK transport's 15s request timeout. */
+export declare const RELAY_POLL_WAIT_SECONDS = 10;
+/** A local answer larger than this is refused rather than relayed. */
+export declare const RELAY_MAX_RESPONSE_BYTES = 1048576;
+/** The protocol version this CLI speaks, sent on attach. */
+export declare const RELAY_PROTOCOL_VERSION = 1;
+export interface RelaySummary {
+    readonly frames: number;
+    readonly answered: number;
+    readonly failed: number;
+    readonly polls: number;
+    /** Why the session ended, in the server's vocabulary where it has one. */
+    readonly endReason: string;
+}
+/**
+ * Forward one frame to localhost and build the answer. Never throws: every
+ * failure is an answer, because the server is holding a visitor's request
+ * open until it gets one.
+ */
+export declare function answerFrame(opts: RelayOptions, deps: ListenDeps, frame: RelayFrame, signal: AbortSignal): Promise<RelayAnswer>;
+/**
+ * The 404 a server without this feature answers, as a sentence.
+ *
+ * Exported for the spec. A CLI released ahead of the API deploy gets this, so
+ * it has to say plainly that the route is missing rather than that the user
+ * typed something wrong.
+ */
+export declare function explainMissingServer(err: unknown): Error | null;
+/**
+ * The relay loop. Exported for the spec, bounded by `deps.maxPolls` there.
+ *
+ * Frames are answered CONCURRENTLY: each one has its own caller waiting with
+ * its own deadline, and a slow tool call must not make a card fetch behind it
+ * time out.
+ */
+export declare function relay(chatly: ChatlyClient, opts: RelayOptions, deps: ListenDeps): Promise<RelaySummary>;
+//# sourceMappingURL=listen-relay.d.ts.map

package/dist/commands/listen-relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listen-relay.d.ts","sourceRoot":"","sources":["../../src/commands/listen-relay.ts"],"names":[],"mappings":"AAyDA,OAAO,EAAkB,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzE,OAAO,EAKL,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,YAAY,EAClB,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,yBAAyB,EACzB,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,YAAY,GAClB,MAAM,2BAA2B,CAAC;AAEnC,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,QAAc,CAAC;AACjD,qEAAqE;AACrE,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,sEAAsE;AACtE,eAAO,MAAM,wBAAwB,UAAY,CAAC;AAClD,4DAA4D;AAC5D,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAYxC,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AA8GD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAKtB;AAiCD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,GAAG,IAAI,CAe/D;AA0DD;;;;;;GAMG;AACH,wBAAsB,KAAK,CACzB,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,YAAY,CAAC,CAgKvB"}