@clevercloud/pi-remote-control 0.0.1 → 0.1.1

package/README.md

@@ -1,9 +1,92 @@
-# @clevercloud/pi-remote-control
+# pi-remote-control extension
 
-**Placeholder — name reserved.**
+A [pi.dev](https://pi.dev) extension that bridges your live pi session to the
+remote-control relay, so a remote device (the iOS app, or `cli-test`) can watch
+the session and send prompts.
 
-This `0.0.1` is an empty placeholder that reserves the package name on npm.
-It contains no runnable code. **Do not install it.**
+## Install
 
-The real pi.dev remote-control extension ships at **0.1.0 and above**, once the
-relay backend is deployed. See https://github.com/CleverCloud/Pi-dev-remote-controll
+```bash
+pi install npm:@clevercloud/pi-remote-control
+```
+
+No clone, no build, no dependencies — pi loads the extension directly (the built
+`dist/` is committed; the extension is dependency-free: node builtins + the
+global `WebSocket`/`fetch`). Just start pi:
+
+```bash
+pi   # relay defaults to wss://pidev-remote.cleverapps.io
+```
+
+The session is named automatically from the project directory pi runs in (the
+git repo root), plus a distinguishing word: the **git worktree name** when pi
+runs in a linked worktree, an animal otherwise (e.g. `dev-foo-4fa9c1-otter`).
+Your devices list your sessions and connect with a tap — nothing to configure
+or share, and no hand-named sessions.
+
+**From source (dev):** `npm install && npm run build`, then
+`pi --extension ./dist/index.js`. Re-commit `dist/` after editing `src/`.
+
+## Sign in — inside pi
+
+No separate binary, no token copy-pasting:
+
+```
+/remote-login          # opens your browser; tokens stored + auto-refreshed
+/remote-status         # relay state · session · auth · mode
+/remote-logout
+/remote-beta-invite you@apple-id.com   # join the iOS TestFlight beta
+```
+
+Credentials live at `~/.config/pidev/credentials.json`. Auth resolution order:
+`PIDEV_OIDC_TOKEN` (env override, for CI) → stored `/remote-login` credentials
+(auto-refreshed) → none (dev mode, loopback relay only). An off-loopback
+(`wss://`) relay requires one of the first two.
+
+> Keycloak: the public client needs the **exact** loopback redirect URIs
+> `http://127.0.0.1:8765/callback`, `:8766`, `:8767` registered (a
+> `http://127.0.0.1/*` wildcard does NOT cover the port). `/remote-login` uses
+> the first free of these ports.
+
+Once pinned to a pi version and published, it can instead be installed with
+`pi install git:github.com/clevercloud/pi-dev-remote-controll` (extension
+sub-path TBD). The Rust `pidev` (`../server/cli-test`) shares the same credential
+file and remains only as an optional device tester.
+
+## What it does (skeleton)
+
+| Direction        | Mapping                                                              |
+| ---------------- | ------------------------------------------------------------------- |
+| device → pi      | `{type:"prompt"}` → `pi.sendUserMessage(text, { streamingBehavior })`|
+| pi → device      | `message_update` (text deltas) → `{type:"delta"}`                    |
+| pi → device      | `tool_execution_start/end` → `{type:"tool"}`                         |
+| pi → device      | `agent_end` → `{type:"turn_end"}`                                    |
+
+## Transport test (no real pi / no model key)
+
+`test/harness.mjs` runs the **real extension** against a mocked `pi` — only the
+LLM brain is faked. With a local Pulsar + relay running, it lets a prompt from
+`cli-test` round-trip device → pi → device through the broker:
+
+```bash
+npm run build
+PIDEV_RELAY_URL=ws://localhost:8080 bun test/harness.mjs &
+# then, from server/: cargo run -p cli-test -- sessions   # grab the printed id
+#       cargo run -p cli-test -- send --session <id> --prompt "hi"
+# → prints "received: hi"
+```
+
+This was validated end-to-end against `apachepulsar/pulsar:4.0.4` standalone:
+both `pidev-demo-to-pi` and `pidev-demo-from-pi` topics are created and carry
+the traffic (subscriptions `pi` and `device-0`).
+
+Tool approvals (`on("tool_call")` → block, paired with `{type:"approval"}`) are
+**implemented** with UUID request ids and default-deny on timeout/disconnect.
+History replay (`ctx.sessionManager.getEntries()`) is still pending.
+
+Transport policy: off-loopback the extension requires `wss://` **and**
+`PIDEV_OIDC_TOKEN`, failing closed otherwise (see
+[`../docs/SECURITY.md`](../docs/SECURITY.md)).
+
+The `ExtensionAPI` type here is modelled loosely from pi's `docs/extensions.md`;
+tighten it once we pin a pi release and depend on its published types.

package/dist/auth.js

@@ -0,0 +1,183 @@
+/**
+ * Pure-Node auth core for the pi remote-control extension: a `clever login`-style
+ * loopback OAuth (PKCE) flow, a persistent token store, and silent refresh. No
+ * separate binary — `/remote-login` runs this in-process. The on-disk format is
+ * shared with the optional Rust `pidev` tester, so both interoperate.
+ */
+import { spawn } from "node:child_process";
+import { createHash, randomBytes } from "node:crypto";
+import { existsSync } from "node:fs";
+import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { createServer } from "node:http";
+import { homedir, platform } from "node:os";
+import { dirname, join } from "node:path";
+export const CREDENTIALS_PATH = join(homedir(), ".config", "pidev", "credentials.json");
+/** Fixed callback ports so an *exact* redirect URI can be registered in Keycloak
+ *  (a `http://127.0.0.1/*` wildcard does NOT cover the port). */
+const CALLBACK_PORTS = [8765, 8766, 8767];
+const nowSec = () => Math.floor(Date.now() / 1000);
+const b64url = (buf) => buf.toString("base64url");
+const httpBase = (relay) => relay.replace(/\/$/, "").replace(/^ws/, "http");
+export function hasCredentials() {
+    return existsSync(CREDENTIALS_PATH);
+}
+async function loadCredentials() {
+    try {
+        return JSON.parse(await readFile(CREDENTIALS_PATH, "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+async function saveCredentials(creds) {
+    await mkdir(dirname(CREDENTIALS_PATH), { recursive: true });
+    await writeFile(CREDENTIALS_PATH, JSON.stringify(creds, null, 2), { mode: 0o600 });
+}
+export async function logout() {
+    if (!existsSync(CREDENTIALS_PATH))
+        return false;
+    await rm(CREDENTIALS_PATH);
+    return true;
+}
+async function fetchWebConfig(relay) {
+    const res = await fetch(`${httpBase(relay)}/web-config.json`);
+    if (!res.ok)
+        throw new Error(`/web-config.json → ${res.status}`);
+    return (await res.json());
+}
+function openBrowser(url) {
+    const os = platform();
+    const cmd = os === "darwin" ? "open" : os === "win32" ? "cmd" : "xdg-open";
+    const args = os === "win32" ? ["/c", "start", "", url] : [url];
+    try {
+        spawn(cmd, args, { stdio: "ignore", detached: true }).unref();
+    }
+    catch {
+        /* the URL is logged for manual use */
+    }
+}
+/** Listen on the first free callback port; resolve the bound port. */
+function bindFirstFree(server) {
+    return new Promise((resolve, reject) => {
+        const tryPort = (i) => {
+            if (i >= CALLBACK_PORTS.length) {
+                reject(new Error(`no free loopback port among ${CALLBACK_PORTS.join(", ")}`));
+                return;
+            }
+            const onError = () => tryPort(i + 1);
+            server.once("error", onError);
+            server.listen(CALLBACK_PORTS[i], "127.0.0.1", () => {
+                server.removeListener("error", onError);
+                resolve(CALLBACK_PORTS[i]);
+            });
+        };
+        tryPort(0);
+    });
+}
+const SIGNED_IN_PAGE = "<html><body style='font-family:system-ui;background:#171a21;color:#eee;" +
+    "text-align:center;padding-top:4rem'><h2>✓ Signed in</h2>" +
+    "<p>You can close this tab and return to your editor.</p></body></html>";
+/**
+ * Run the loopback PKCE login: open the browser, capture the code on 127.0.0.1,
+ * exchange it for access+refresh tokens, and persist them.
+ */
+export async function login(relay, log) {
+    const cfg = await fetchWebConfig(relay);
+    const verifier = b64url(randomBytes(32));
+    const challenge = b64url(createHash("sha256").update(verifier).digest());
+    const state = b64url(randomBytes(16));
+    let port = 0;
+    let resolveCode;
+    const codePromise = new Promise((res) => {
+        resolveCode = res;
+    });
+    const server = createServer((req, resp) => {
+        const url = new URL(req.url ?? "/", `http://127.0.0.1:${port}`);
+        const code = url.searchParams.get("code");
+        const gotState = url.searchParams.get("state");
+        if (code && gotState) {
+            resp.writeHead(200, { "content-type": "text/html" });
+            resp.end(SIGNED_IN_PAGE);
+            resolveCode({ code, state: gotState });
+        }
+        else {
+            resp.writeHead(204);
+            resp.end();
+        }
+    });
+    port = await bindFirstFree(server);
+    const redirect = `http://127.0.0.1:${port}/callback`;
+    const authUrl = `${cfg.issuer}/protocol/openid-connect/auth?client_id=${encodeURIComponent(cfg.clientId)}` +
+        `&response_type=code&scope=${encodeURIComponent("openid offline_access")}` +
+        `&code_challenge=${challenge}&code_challenge_method=S256` +
+        `&redirect_uri=${encodeURIComponent(redirect)}&state=${state}`;
+    log(`opening your browser to sign in… if it doesn't open, visit:\n  ${authUrl}`);
+    openBrowser(authUrl);
+    const got = await codePromise;
+    server.close();
+    if (got.state !== state)
+        throw new Error("OAuth state mismatch (possible CSRF)");
+    const res = await fetch(`${cfg.issuer}/protocol/openid-connect/token`, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({
+            grant_type: "authorization_code",
+            code: got.code,
+            redirect_uri: redirect,
+            client_id: cfg.clientId,
+            code_verifier: verifier,
+        }),
+    });
+    if (!res.ok)
+        throw new Error(`token exchange ${res.status}: ${await res.text()}`);
+    const t = (await res.json());
+    if (!t.refresh_token)
+        throw new Error("no refresh_token — the client needs offline_access");
+    await saveCredentials({
+        access_token: t.access_token,
+        refresh_token: t.refresh_token,
+        expires_at: nowSec() + t.expires_in - 30,
+        issuer: cfg.issuer,
+        client_id: cfg.clientId,
+    });
+}
+/**
+ * Resolve a valid OIDC access token: `PIDEV_OIDC_TOKEN` env override first, else
+ * the stored login credentials, refreshing them when near expiry.
+ */
+export async function resolveOidcToken(log) {
+    if (process.env.PIDEV_OIDC_TOKEN)
+        return process.env.PIDEV_OIDC_TOKEN;
+    const creds = await loadCredentials();
+    if (!creds)
+        return undefined;
+    if (creds.expires_at > nowSec() + 30)
+        return creds.access_token;
+    try {
+        const res = await fetch(`${creds.issuer}/protocol/openid-connect/token`, {
+            method: "POST",
+            headers: { "content-type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+                grant_type: "refresh_token",
+                refresh_token: creds.refresh_token,
+                client_id: creds.client_id,
+            }),
+        });
+        if (!res.ok) {
+            log(`token refresh failed (${res.status}) — run /remote-login again`);
+            return undefined;
+        }
+        const t = (await res.json());
+        creds.access_token = t.access_token;
+        if (t.refresh_token)
+            creds.refresh_token = t.refresh_token;
+        creds.expires_at = nowSec() + t.expires_in - 30;
+        await saveCredentials(creds);
+        return creds.access_token;
+    }
+    catch (e) {
+        log(`token refresh error: ${String(e)}`);
+        return undefined;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;AACxF;iEACiE;AACjE,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAe1C,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAC3D,MAAM,MAAM,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClE,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAE5F,MAAM,UAAU,cAAc;IAC5B,OAAO,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAsB,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAwB;IACrD,MAAM,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,EAAE,CAAC,gBAAgB,CAAC,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAa;IACzC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC9D,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAc,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IAC3E,MAAM,IAAI,GAAG,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,CAAC,CAAS,EAAQ,EAAE;YAClC,IAAI,CAAC,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC9E,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;gBACjD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACxC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,OAAO,CAAC,CAAC,CAAC,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,cAAc,GAClB,yEAAyE;IACzE,0DAA0D;IAC1D,wEAAwE,CAAC;AAE3E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,KAAa,EAAE,GAAwB;IACjE,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAEtC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,WAA0D,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,OAAO,CAAkC,CAAC,GAAG,EAAE,EAAE;QACvE,WAAW,GAAG,GAAG,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QACxC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;YACrB,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACzB,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,oBAAoB,IAAI,WAAW,CAAC;IACrD,MAAM,OAAO,GACX,GAAG,GAAG,CAAC,MAAM,2CAA2C,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QAC1F,6BAA6B,kBAAkB,CAAC,uBAAuB,CAAC,EAAE;QAC1E,mBAAmB,SAAS,6BAA6B;QACzD,iBAAiB,kBAAkB,CAAC,QAAQ,CAAC,UAAU,KAAK,EAAE,CAAC;IAEjE,GAAG,CAAC,kEAAkE,OAAO,EAAE,CAAC,CAAC;IACjF,WAAW,CAAC,OAAO,CAAC,CAAC;IAErB,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC;IAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAEjF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,gCAAgC,EAAE;QACrE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,oBAAoB;YAChC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,GAAG,CAAC,QAAQ;YACvB,aAAa,EAAE,QAAQ;SACxB,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAClF,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyE,CAAC;IACrG,IAAI,CAAC,CAAC,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC5F,MAAM,eAAe,CAAC;QACpB,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,GAAG,EAAE;QACxC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,QAAQ;KACxB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAwB;IAC7D,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACtE,MAAM,KAAK,GAAG,MAAM,eAAe,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,EAAE,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,gCAAgC,EAAE;YACvE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,GAAG,CAAC,yBAAyB,GAAG,CAAC,MAAM,6BAA6B,CAAC,CAAC;YACtE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyE,CAAC;QACrG,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;QACpC,IAAI,CAAC,CAAC,aAAa;YAAE,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;QAC3D,KAAK,CAAC,UAAU,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC;QAChD,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC,YAAY,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,wBAAwB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/index.js

@@ -0,0 +1,565 @@
+/**
+ * pi.dev remote-control extension.
+ *
+ * Bridges the live pi session to the relay over a WebSocket:
+ *   - observes assistant streaming (`message_update`) and tool runs, and
+ *     forwards them to the relay as `from-pi` events;
+ *   - receives `to-pi` commands from remote devices and injects them into the
+ *     session via `pi.sendUserMessage`;
+ *   - gates tool calls on remote approval: on `tool_call` it asks the device
+ *     and blocks the tool if denied (or on timeout).
+ *
+ * Auth: before connecting, the extension exchanges an OIDC token (or, in the
+ * relay's dev mode, nothing) for a subject-scoped biscuit at `POST
+ * /auth/token`, and presents that biscuit on the WS connect.
+ *
+ * Sessions are named automatically: the extension *claims* its session at
+ * `POST /sessions/claim` by declaring its project directory (the git repo
+ * root, falling back to the bare cwd), and the relay answers with a stable id
+ * derived from the path plus a distinguishing word — the git worktree name
+ * when pi runs in a linked worktree, an animal otherwise (e.g.
+ * `dev-foo-4fa9c1-otter`). Remotes discover it via `GET /sessions` — nothing
+ * to configure or share, and no hand-named sessions.
+ *
+ * Config via env:
+ *   PIDEV_RELAY_URL    relay base, default wss://pidev-remote.cleverapps.io
+ *   PIDEV_OIDC_TOKEN   optional OIDC access token (required when the relay has
+ *                      OIDC_ISSUER set; omitted in dev mode)
+ *
+ * NOTE: pi's published types aren't depended on here — the `ExtensionAPI`
+ * surface is modelled loosely against the documented methods/events
+ * (docs/extensions.md). Tighten once we pin a pi version.
+ */
+import { execSync } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { basename, dirname, resolve } from "node:path";
+import { hasCredentials, login, logout, resolveOidcToken } from "./auth.js";
+/** What this pi identifies as: the project directory (git repo root — the
+ *  *main* checkout when running in a linked worktree — else the bare cwd) and,
+ *  in a worktree, the worktree name as the distinguishing-word hint. */
+function detectProject(cwd) {
+    const git = (args) => {
+        try {
+            const out = execSync(`git ${args}`, { cwd, stdio: ["ignore", "pipe", "ignore"] })
+                .toString()
+                .trim();
+            return out || undefined;
+        }
+        catch {
+            return undefined;
+        }
+    };
+    const top = git("rev-parse --show-toplevel");
+    if (!top)
+        return { path: cwd }; // not a git checkout (or no git)
+    const gitDir = git("rev-parse --absolute-git-dir");
+    const commonDir = git("rev-parse --git-common-dir");
+    if (gitDir && commonDir) {
+        const common = resolve(cwd, commonDir);
+        if (resolve(cwd, gitDir) !== common) {
+            // Linked worktree: identify as the main checkout, distinguished by the
+            // worktree's name — `repo (my-feature)` instead of two anonymous animals.
+            return { path: dirname(common), hint: basename(top) };
+        }
+    }
+    return { path: top };
+}
+// Overridable so tests can exercise the timeout path without a 60s wait.
+const APPROVAL_TIMEOUT_MS = Number(process.env.PIDEV_APPROVAL_TIMEOUT_MS) || 60_000;
+const ASK_TIMEOUT_MS = Number(process.env.PIDEV_ASK_TIMEOUT_MS) || 120_000;
+// ---------------------------------------------------------------------------
+export default function activate(pi, ctx) {
+    const relayBase = (process.env.PIDEV_RELAY_URL ?? "wss://pidev-remote.cleverapps.io").replace(/\/$/, "");
+    const httpBase = relayBase.replace(/^ws/, "http");
+    const oidcToken = process.env.PIDEV_OIDC_TOKEN;
+    // The session id is claimed from the relay on each connect (project path +
+    // distinguishing word, see the header comment). No manual session names.
+    let session = "";
+    let word; // relay-assigned; remembered → stable id
+    const project = detectProject(process.cwd());
+    // Transport policy: cleartext is only allowed to a loopback relay. Off-loopback
+    // requires wss:// and an OIDC token (fail closed rather than leak credentials
+    // or connect unauthenticated). See docs/audits/SECURITY-AUDIT.md (C1, C6).
+    const host = (() => {
+        try {
+            return new URL(relayBase).hostname;
+        }
+        catch {
+            return "";
+        }
+    })();
+    const isLoopback = ["localhost", "127.0.0.1", "::1", "[::1]"].includes(host);
+    if (!isLoopback) {
+        if (!relayBase.startsWith("wss://")) {
+            log(`refusing to connect: ${relayBase} is not loopback and not wss:// (cleartext would leak the biscuit)`);
+            return;
+        }
+        if (!oidcToken && !hasCredentials()) {
+            log("refusing to connect: non-loopback relay needs auth — run /remote-login (or set PIDEV_OIDC_TOKEN). Failing closed.");
+            return;
+        }
+    }
+    let ws = null;
+    let closed = false;
+    let retryMs = 1000;
+    const RETRY_MAX_MS = 30_000;
+    // Detect a session conflict (another pi kicking us): count short-lived connects.
+    let openedAt = 0;
+    let shortLived = 0;
+    let conflictWarned = false;
+    // How many remote devices are currently connected to this session. The relay
+    // sends a `presence` frame whenever this changes; it resets to 0 when the relay
+    // connection drops. The approval gates only engage while this is >= 1 — see the
+    // tool_call gate for why.
+    let devicesPresent = 0;
+    // Pending tool approvals, keyed by request id.
+    const pendingApprovals = new Map();
+    // Pending ask-user questions, keyed by question id.
+    const pendingAnswers = new Map();
+    // Whether a turn is currently running (drives the busy ack hint).
+    let turnInProgress = false;
+    // How much of the turn's thinking content we've already forwarded (for diffing).
+    let sentThinkingLen = 0;
+    const scheduleReconnect = () => {
+        if (closed)
+            return;
+        const delay = Math.min(retryMs, RETRY_MAX_MS) + Math.floor(Math.random() * 500);
+        debug(`reconnecting in ${delay}ms`);
+        setTimeout(connect, delay);
+        retryMs = Math.min(retryMs * 2, RETRY_MAX_MS); // exponential backoff
+    };
+    const send = (msg) => {
+        if (ws && ws.readyState === WebSocket.OPEN)
+            ws.send(JSON.stringify(msg));
+    };
+    // "pi is working" heartbeat: while a turn runs, tell the device every few
+    // seconds so it can show a live loader even during long silent tool runs.
+    let workingTimer = null;
+    const startWorking = () => {
+        send({ type: "working" });
+        if (workingTimer)
+            return;
+        workingTimer = setInterval(() => {
+            if (turnInProgress)
+                send({ type: "working" });
+            else
+                stopWorking();
+        }, 2500);
+    };
+    function stopWorking() {
+        if (workingTimer) {
+            clearInterval(workingTimer);
+            workingTimer = null;
+        }
+    }
+    const fetchBiscuit = async () => {
+        const headers = { "content-type": "application/json" };
+        const token = await resolveOidcToken(log);
+        if (token)
+            headers["authorization"] = `Bearer ${token}`;
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), 10_000);
+        try {
+            const res = await fetch(`${httpBase}/auth/token`, {
+                method: "POST",
+                headers,
+                body: JSON.stringify({ role: "pi" }),
+                signal: ctrl.signal,
+            });
+            if (!res.ok)
+                throw new Error(`auth/token returned ${res.status}`);
+            const body = (await res.json());
+            return body.biscuit;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    };
+    /** Claim this project's session id from the relay (path + word). The first
+     *  claim hints the git worktree name; afterwards the assigned word rides
+     *  along so the id stays stable across reconnects and relay restarts. */
+    const claimSession = async (biscuit) => {
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), 10_000);
+        try {
+            const res = await fetch(`${httpBase}/sessions/claim`, {
+                method: "POST",
+                headers: { "content-type": "application/json", authorization: `Bearer ${biscuit}` },
+                body: JSON.stringify({ path: project.path, word, hint: project.hint }),
+                signal: ctrl.signal,
+            });
+            if (!res.ok)
+                throw new Error(`sessions/claim returned ${res.status}`);
+            const body = (await res.json());
+            if (!session)
+                log(`session: ${project.path} (${body.word})`);
+            session = body.session;
+            word = body.word;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    };
+    const sessionLabel = () => session ? `${project.path} (${word})` : "not claimed yet";
+    const connect = async () => {
+        if (closed)
+            return;
+        let biscuit;
+        try {
+            biscuit = await fetchBiscuit();
+            await claimSession(biscuit);
+        }
+        catch (err) {
+            log(`auth failed: ${err.message}`);
+            scheduleReconnect();
+            return;
+        }
+        const wsUrl = `${relayBase}/ws/pi?session=${encodeURIComponent(session)}`;
+        debug(`connecting to relay ${wsUrl}`);
+        // Global WebSocket (bun/Node) can't set request headers, so the biscuit rides
+        // as the access_token query param (the relay accepts header OR query). Keeps
+        // the extension dependency-free — no `ws` package — so `pi install` just works.
+        ws = new WebSocket(`${wsUrl}&access_token=${encodeURIComponent(biscuit)}`);
+        ws.onopen = () => {
+            retryMs = 1000; // reset backoff on a successful connect
+            openedAt = Date.now();
+            sink.reset(); // recovered — re-arm the dedupe so a later outage re-notifies
+            debug("relay connected");
+        };
+        ws.onmessage = (event) => {
+            let cmd;
+            try {
+                cmd = JSON.parse(String(event.data));
+            }
+            catch {
+                log(`bad command frame: ${String(event.data)}`);
+                return;
+            }
+            if (cmd.type === "prompt") {
+                log(`remote prompt: ${cmd.text}`);
+                // Instant receipt ack (remote_pi-style) so the device knows pi got it,
+                // without waiting for the first delta or a timeout.
+                send({ type: "ack", status: turnInProgress ? "busy" : "received" });
+                turnInProgress = true;
+                sentThinkingLen = 0; // reset the thinking diff for the new turn
+                startWorking();
+                void pi.sendUserMessage(cmd.text, {
+                    streamingBehavior: cmd.streamingBehavior ?? "followUp",
+                });
+            }
+            else if (cmd.type === "approval") {
+                const resolve = pendingApprovals.get(cmd.id);
+                if (resolve)
+                    resolve(cmd.allow);
+            }
+            else if (cmd.type === "answer") {
+                const resolve = pendingAnswers.get(cmd.id);
+                if (resolve)
+                    resolve(cmd.text);
+            }
+            else if (cmd.type === "presence") {
+                // Track how many devices are watching. Be defensive: a non-number (or a
+                // malformed frame) means "we don't actually know anyone's there" → 0.
+                devicesPresent = typeof cmd.devices === "number" && cmd.devices > 0 ? cmd.devices : 0;
+                debug(`presence: ${devicesPresent} device(s)`);
+            }
+            else if (cmd.type === "abort") {
+                log("remote abort: interrupting the current turn");
+                void pi.abort?.();
+            }
+        };
+        ws.onclose = () => {
+            debug("relay disconnected");
+            stopWorking();
+            // No relay connection ⇒ no operator is reachable. Drop back to 0 so the
+            // gates fall through to pi's native local prompt until presence resumes.
+            devicesPresent = 0;
+            // A connection that barely lived is the signature of a session conflict
+            // (another pi kicking us off the "pi" subscription). Warn once, don't spam.
+            const lived = openedAt ? Date.now() - openedAt : 0;
+            if (openedAt && lived < 3000) {
+                if (++shortLived >= 3 && !conflictWarned) {
+                    conflictWarned = true;
+                    log(`the relay keeps dropping this connection — another pi is likely on session "${sessionLabel()}" (two pi's claiming the same id should not happen; restarting pi will claim a fresh animal).`);
+                }
+            }
+            else {
+                shortLived = 0;
+                conflictWarned = false;
+            }
+            openedAt = 0;
+            // Fail any in-flight approvals closed (deny by default).
+            for (const resolve of pendingApprovals.values())
+                resolve(false);
+            pendingApprovals.clear();
+            // Fail any in-flight questions with an empty answer.
+            for (const resolve of pendingAnswers.values())
+                resolve("");
+            pendingAnswers.clear();
+            scheduleReconnect();
+        };
+        ws.onerror = () => debug("relay websocket error");
+    };
+    const awaitApproval = (id) => new Promise((resolve) => {
+        let settled = false;
+        const finish = (allow) => {
+            if (settled)
+                return;
+            settled = true;
+            pendingApprovals.delete(id);
+            resolve(allow);
+        };
+        pendingApprovals.set(id, finish);
+        setTimeout(() => finish(false), APPROVAL_TIMEOUT_MS); // default-deny on timeout
+    });
+    const awaitAnswer = (id) => new Promise((resolve) => {
+        let settled = false;
+        const finish = (text) => {
+            if (settled)
+                return;
+            settled = true;
+            pendingAnswers.delete(id);
+            resolve(text);
+        };
+        pendingAnswers.set(id, finish);
+        setTimeout(() => finish(""), ASK_TIMEOUT_MS); // empty answer on timeout
+    });
+    // Each message accumulates its own thinking content, so reset the diff cursor
+    // when a new message starts (a turn may have several assistant messages).
+    pi.on("message_start", () => {
+        sentThinkingLen = 0;
+    });
+    // Assistant token stream → device.
+    pi.on("message_update", (event) => {
+        const ev = event?.assistantMessageEvent;
+        if (ev?.type === "text_delta" && typeof ev.delta === "string") {
+            send({ type: "delta", text: ev.delta });
+        }
+        // A per-token thinking/reasoning stream event, whatever its exact shape.
+        if (ev && ev.type !== "text_delta" && /think|reason/i.test(String(ev.type ?? ""))) {
+            const t = ev.delta ?? ev.thinking ?? ev.reasoning ?? ev.text;
+            if (typeof t === "string" && t.length)
+                send({ type: "thinking", text: t });
+        }
+        // Also diff the message's thinking/reasoning content blocks (documented shape
+        // {type:"thinking", thinking}), covering providers that only expose it there.
+        const content = event?.message?.content;
+        if (Array.isArray(content)) {
+            let thinking = "";
+            for (const block of content) {
+                if (!block)
+                    continue;
+                if (block.type === "thinking" && typeof block.thinking === "string")
+                    thinking += block.thinking;
+                else if (/think|reason/i.test(String(block.type ?? "")) && typeof (block.thinking ?? block.text ?? block.reasoning) === "string") {
+                    thinking += (block.thinking ?? block.text ?? block.reasoning);
+                }
+            }
+            if (thinking.length > sentThinkingLen) {
+                send({ type: "thinking", text: thinking.slice(sentThinkingLen) });
+                sentThinkingLen = thinking.length;
+            }
+        }
+        // Diagnostic (PIDEV_DEBUG=1): dump the real event shape so we can pin the
+        // thinking representation for this provider/model.
+        if (process.env.PIDEV_DEBUG) {
+            const blocks = Array.isArray(content) ? content.map((b) => b?.type).join(",") : typeof content;
+            debug(`msg-update evType=${ev?.type} evKeys=[${ev ? Object.keys(ev).join(",") : ""}] blocks=[${blocks}]`);
+        }
+    });
+    // Tool lifecycle markers → device.
+    pi.on("tool_execution_start", (event) => {
+        send({ type: "tool", phase: "start", name: event?.toolName ?? "?" });
+    });
+    pi.on("tool_execution_end", (event) => {
+        send({ type: "tool", phase: "end", name: event?.toolName ?? "?" });
+    });
+    // Gate each tool call on a remote approval. Returns `{ block }` to deny.
+    //
+    // The gate ONLY engages while a device is present. With nobody watching, an
+    // approval_request would go into the void and default-deny on timeout —
+    // confiscating pi's native local prompt and silently dropping commands the
+    // user is sitting right there to approve. So when `devicesPresent < 1` we
+    // return `undefined` and let pi ask locally.
+    pi.on("tool_call", async (event) => {
+        if (devicesPresent < 1)
+            return undefined; // no remote operator → defer to pi's native prompt
+        const tool = event?.toolName ?? event?.name ?? "tool";
+        const id = randomUUID(); // unguessable, matches docs' "uuid" contract
+        const title = `Allow tool \`${tool}\`?`;
+        log(`requesting approval for ${tool} (${id})`);
+        send({ type: "approval_request", id, title, tool });
+        const allow = await awaitApproval(id);
+        log(`approval ${id}: ${allow ? "allowed" : "denied"}`);
+        return allow ? undefined : { block: true, reason: "denied by remote operator" };
+    });
+    // pi asks the user a free-form question → forward to the device and await the
+    // typed answer (mirrors the tool_call gate). LOOSE MODEL: pi's real ask-user
+    // hook name/shape is unconfirmed — same caveat as the rest of this file —
+    // modelled as a `user_input_request` event whose handler returns `{ text }`.
+    // Tighten once a pi version is pinned (see docs/extensions.md).
+    pi.on("user_input_request", async (event) => {
+        // Same fall-through as the tool_call gate: with no device present, forwarding
+        // a `question` would strand it and pi couldn't ask locally. Let pi prompt.
+        if (devicesPresent < 1)
+            return undefined;
+        const prompt = event?.prompt ?? event?.question ?? "pi needs your input";
+        const choices = Array.isArray(event?.choices) ? event.choices : undefined;
+        const id = randomUUID();
+        log(`asking user: ${prompt} (${id})`);
+        send({ type: "question", id, prompt, choices });
+        const text = await awaitAnswer(id);
+        log(`answer ${id}: ${JSON.stringify(text)}`);
+        return { text };
+    });
+    // End of an agent turn → device.
+    pi.on("agent_end", () => {
+        turnInProgress = false;
+        stopWorking();
+        send({ type: "turn_end" });
+    });
+    // User-invoked commands must always show their output, even if a line matches
+    // one already emitted during an outage streak — reset the dedupe on each
+    // invocation so a manually typed command is never silently swallowed.
+    const command = (name, options) => pi.registerCommand(name, {
+        ...options,
+        handler: (args) => {
+            sink.reset();
+            return options.handler(args);
+        },
+    });
+    command("remote-status", {
+        description: "Show pi-dev remote-control connection status",
+        handler: () => {
+            const state = ws ? readyStateName(ws.readyState) : "disconnected";
+            const auth = process.env.PIDEV_OIDC_TOKEN ? "env token" : hasCredentials() ? "logged in" : "not signed in";
+            log(`relay ${state} · ${relayBase} · session ${sessionLabel()} · auth ${auth} · mode ${ctx?.mode ?? "?"}`);
+        },
+    });
+    command("remote-login", {
+        description: "Sign in to the remote relay (opens your browser)",
+        handler: async () => {
+            try {
+                log("signing in…");
+                await login(relayBase, log);
+                log("✓ signed in — credentials stored and auto-refreshed. reconnecting…");
+                if (ws)
+                    ws.close(); // the reconnect picks up the fresh credentials
+                else
+                    void connect();
+            }
+            catch (e) {
+                log(`login failed: ${String(e)}`);
+            }
+        },
+    });
+    command("remote-logout", {
+        description: "Forget stored remote credentials",
+        handler: async () => {
+            log((await logout()) ? "✓ logged out (credentials removed)" : "no stored credentials");
+        },
+    });
+    command("remote-pair", {
+        description: "Show a QR to pair your phone with this remote (no login on the phone)",
+        handler: async () => {
+            const token = await resolveOidcToken(log);
+            if (!token) {
+                log("not signed in — run /remote-login first");
+                return;
+            }
+            try {
+                const res = await fetch(`${httpBase}/pair`, { method: "POST", headers: { authorization: `Bearer ${token}` } });
+                if (!res.ok) {
+                    log(`pairing failed (${res.status})`);
+                    return;
+                }
+                const p = (await res.json());
+                // eslint-disable-next-line no-console
+                console.error(`\n${p.qrTerminal}\nScan with the pi.dev app — this session shows up as "${sessionLabel()}". ` +
+                    `Expires in ${p.expiresIn}s. No login needed on the phone.\n`);
+            }
+            catch (e) {
+                log(`pairing error: ${String(e)}`);
+            }
+        },
+    });
+    command("remote-beta-invite", {
+        description: "Add your Apple ID to the iOS TestFlight beta: /remote-beta-invite you@appleid",
+        handler: async (args) => {
+            const email = (args ?? "").trim();
+            if (!email || !email.includes("@")) {
+                log("usage: /remote-beta-invite you@your-apple-id.com");
+                return;
+            }
+            const token = await resolveOidcToken(log);
+            if (!token) {
+                log("not signed in — run /remote-login first");
+                return;
+            }
+            try {
+                const res = await fetch(`${httpBase}/beta/invite`, {
+                    method: "POST",
+                    headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
+                    body: JSON.stringify({ email }),
+                });
+                const body = await res.text();
+                if (!res.ok) {
+                    log(`beta invite failed (${res.status}): ${body}`);
+                    return;
+                }
+                log(body.includes("already_registered")
+                    ? `${email} is already in the beta — open TestFlight to install.`
+                    : `✓ invited ${email} to the TestFlight beta — check your email, then install "pi.dev remote".`);
+            }
+            catch (e) {
+                log(`beta invite error: ${String(e)}`);
+            }
+        },
+    });
+    void connect();
+}
+function readyStateName(s) {
+    return ["connecting", "open", "closing", "closed"][s] ?? String(s);
+}
+// A sink that emits each distinct line at most once per "streak". The extension
+// has no rich UI channel — it writes to stderr, and in pi's TUI raw writes
+// garble the rendered screen. A reconnect loop repeats a small SET of messages
+// every attempt ("token refresh failed…" then "auth failed…", alternating), so
+// suppressing only consecutive duplicates isn't enough — the interleaving
+// defeats it. Instead every message already seen since the last reset is
+// dropped: an outage surfaces each of its lines ONCE, then goes silent.
+// `reset()` re-arms it on a state change (a successful connect, or a user
+// running a command) so later output — or a later outage — is shown again
+// instead of being silently swallowed.
+export function makeDedupedSink(write) {
+    const seen = new Set();
+    return {
+        note(msg) {
+            if (seen.has(msg))
+                return;
+            seen.add(msg);
+            write(msg);
+        },
+        reset() {
+            seen.clear();
+        },
+    };
+}
+// Actionable messages the user should see (rare: login needed, hard failures).
+// Routed through the deduped sink so a retry loop can't spam pi's TUI.
+const sink = makeDedupedSink((line) => {
+    // eslint-disable-next-line no-console
+    console.error(`[pi-remote] ${line}`);
+});
+function log(msg) {
+    sink.note(msg);
+}
+// Routine lifecycle chatter (connect/reconnect/etc.) — silent by default so it
+// doesn't garble pi's TUI. Set PIDEV_DEBUG=1 to see it.
+function debug(msg) {
+    if (process.env.PIDEV_DEBUG) {
+        // eslint-disable-next-line no-console
+        console.error(`[pi-remote] ${msg}`);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE5E;;wEAEwE;AACxE,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAsB,EAAE;QAC/C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;iBAC9E,QAAQ,EAAE;iBACV,IAAI,EAAE,CAAC;YACV,OAAO,GAAG,IAAI,SAAS,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,iCAAiC;IACjE,MAAM,MAAM,GAAG,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACpD,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YACpC,uEAAuE;YACvE,0EAA0E;YAC1E,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC;AA2DD,yEAAyE;AACzE,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,MAAM,CAAC;AACpF,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,OAAO,CAAC;AAE3E,8EAA8E;AAE9E,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,EAAgB,EAAE,GAAsB;IACvE,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,kCAAkC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzG,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAE/C,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,IAAwB,CAAC,CAAC,yCAAyC;IACvE,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAE7C,gFAAgF;IAChF,8EAA8E;IAC9E,2EAA2E;IAC3E,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;QACjB,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,wBAAwB,SAAS,oEAAoE,CAAC,CAAC;YAC3G,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACpC,GAAG,CAAC,mHAAmH,CAAC,CAAC;YACzH,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,EAAE,GAAqB,IAAI,CAAC;IAChC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,MAAM,YAAY,GAAG,MAAM,CAAC;IAC5B,iFAAiF;IACjF,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,6EAA6E;IAC7E,gFAAgF;IAChF,gFAAgF;IAChF,0BAA0B;IAC1B,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,+CAA+C;IAC/C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAoC,CAAC;IACrE,oDAAoD;IACpD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkC,CAAC;IACjE,kEAAkE;IAClE,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,iFAAiF;IACjF,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,MAAM,iBAAiB,GAAG,GAAG,EAAE;QAC7B,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;QAChF,KAAK,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC;QACpC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3B,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,sBAAsB;IACvE,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;QAC3B,IAAI,EAAE,IAAI,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC;IAEF,0EAA0E;IAC1E,0EAA0E;IAC1E,IAAI,YAAY,GAA0C,IAAI,CAAC;IAC/D,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1B,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YAC9B,IAAI,cAAc;gBAAE,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;;gBACzC,WAAW,EAAE,CAAC;QACrB,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC,CAAC;IACF,SAAS,WAAW;QAClB,IAAI,YAAY,EAAE,CAAC;YACjB,aAAa,CAAC,YAAY,CAAC,CAAC;YAC5B,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,IAAqB,EAAE;QAC/C,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,KAAK;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,aAAa,EAAE;gBAChD,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACpC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;YACvD,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF;;6EAEyE;IACzE,MAAM,YAAY,GAAG,KAAK,EAAE,OAAe,EAAiB,EAAE;QAC5D,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,iBAAiB,EAAE;gBACpD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE;gBACnF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;gBACtE,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACtE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAsC,CAAC;YACrE,IAAI,CAAC,OAAO;gBAAE,GAAG,CAAC,YAAY,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YAC7D,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YACvB,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,GAAW,EAAE,CAChC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAE5D,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,YAAY,EAAE,CAAC;YAC/B,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,gBAAiB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9C,iBAAiB,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,SAAS,kBAAkB,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1E,KAAK,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;QACtC,8EAA8E;QAC9E,6EAA6E;QAC7E,gFAAgF;QAChF,EAAE,GAAG,IAAI,SAAS,CAAC,GAAG,KAAK,iBAAiB,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAE3E,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;YACf,OAAO,GAAG,IAAI,CAAC,CAAC,wCAAwC;YACxD,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,8DAA8D;YAC5E,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC3B,CAAC,CAAC;QAEF,EAAE,CAAC,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE;YACvB,IAAI,GAAS,CAAC;YACd,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAS,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,sBAAsB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,GAAG,CAAC,kBAAkB,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClC,uEAAuE;gBACvE,oDAAoD;gBACpD,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;gBACpE,cAAc,GAAG,IAAI,CAAC;gBACtB,eAAe,GAAG,CAAC,CAAC,CAAC,2CAA2C;gBAChE,YAAY,EAAE,CAAC;gBACf,KAAK,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE;oBAChC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,UAAU;iBACvD,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACnC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7C,IAAI,OAAO;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC3C,IAAI,OAAO;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACnC,wEAAwE;gBACxE,sEAAsE;gBACtE,cAAc,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtF,KAAK,CAAC,aAAa,cAAc,YAAY,CAAC,CAAC;YACjD,CAAC;iBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAChC,GAAG,CAAC,6CAA6C,CAAC,CAAC;gBACnD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;YACpB,CAAC;QACH,CAAC,CAAC;QAEF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;YAChB,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC5B,WAAW,EAAE,CAAC;YACd,wEAAwE;YACxE,yEAAyE;YACzE,cAAc,GAAG,CAAC,CAAC;YACnB,wEAAwE;YACxE,4EAA4E;YAC5E,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,IAAI,QAAQ,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;gBAC7B,IAAI,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;oBACzC,cAAc,GAAG,IAAI,CAAC;oBACtB,GAAG,CAAC,+EAA+E,YAAY,EAAE,+FAA+F,CAAC,CAAC;gBACpM,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG,CAAC,CAAC;gBACf,cAAc,GAAG,KAAK,CAAC;YACzB,CAAC;YACD,QAAQ,GAAG,CAAC,CAAC;YACb,yDAAyD;YACzD,KAAK,MAAM,OAAO,IAAI,gBAAgB,CAAC,MAAM,EAAE;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAChE,gBAAgB,CAAC,KAAK,EAAE,CAAC;YACzB,qDAAqD;YACrD,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE;gBAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAC3D,cAAc,CAAC,KAAK,EAAE,CAAC;YACvB,iBAAiB,EAAE,CAAC;QACtB,CAAC,CAAC;QAEF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpD,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,EAAU,EAAoB,EAAE,CACrD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACtB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;QACF,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACjC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,0BAA0B;IAClF,CAAC,CAAC,CAAC;IAEL,MAAM,WAAW,GAAG,CAAC,EAAU,EAAmB,EAAE,CAClD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACtB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;YAC9B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,0BAA0B;IAC1E,CAAC,CAAC,CAAC;IAEL,8EAA8E;IAC9E,0EAA0E;IAC1E,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;QAC1B,eAAe,GAAG,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,mCAAmC;IACnC,EAAE,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE;QAChC,MAAM,EAAE,GAAG,KAAK,EAAE,qBAAqB,CAAC;QACxC,IAAI,EAAE,EAAE,IAAI,KAAK,YAAY,IAAI,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9D,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,yEAAyE;QACzE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,YAAY,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAClF,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,CAAC;YAC7D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM;gBAAE,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,8EAA8E;QAC9E,8EAA8E;QAC9E,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC;QACxC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,KAAK;oBAAE,SAAS;gBACrB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;oBAAE,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC;qBAC3F,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACjI,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;gBACtC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;gBAClE,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC;YACpC,CAAC;QACH,CAAC;QACD,0EAA0E;QAC1E,mDAAmD;QACnD,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC;YAC/F,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,MAAM,GAAG,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mCAAmC;IACnC,EAAE,CAAC,EAAE,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE;QACtC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE;QACpC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,EAAE;IACF,4EAA4E;IAC5E,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,6CAA6C;IAC7C,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAyB,EAAE;QACxD,IAAI,cAAc,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC,CAAC,mDAAmD;QAC7F,MAAM,IAAI,GAAG,KAAK,EAAE,QAAQ,IAAI,KAAK,EAAE,IAAI,IAAI,MAAM,CAAC;QACtD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,6CAA6C;QACtE,MAAM,KAAK,GAAG,gBAAgB,IAAI,KAAK,CAAC;QACxC,GAAG,CAAC,2BAA2B,IAAI,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC;QACtC,GAAG,CAAC,YAAY,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,6EAA6E;IAC7E,0EAA0E;IAC1E,6EAA6E;IAC7E,gEAAgE;IAChE,EAAE,CAAC,EAAE,CAAC,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAwC,EAAE;QAChF,8EAA8E;QAC9E,2EAA2E;QAC3E,IAAI,cAAc,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,KAAK,EAAE,QAAQ,IAAI,qBAAqB,CAAC;QACzE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,GAAG,CAAC,gBAAgB,MAAM,KAAK,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC;QACnC,GAAG,CAAC,UAAU,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,iCAAiC;IACjC,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;QACtB,cAAc,GAAG,KAAK,CAAC;QACvB,WAAW,EAAE,CAAC;QACd,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,OAAO,GAAG,CACd,IAAY,EACZ,OAAmF,EAC7E,EAAE,CACR,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE;QACvB,GAAG,OAAO;QACV,OAAO,EAAE,CAAC,IAAa,EAAE,EAAE;YACzB,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC,CAAC;IAEL,OAAO,CAAC,eAAe,EAAE;QACvB,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;YAClE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC;YAC3G,GAAG,CAAC,SAAS,KAAK,MAAM,SAAS,cAAc,YAAY,EAAE,WAAW,IAAI,WAAW,GAAG,EAAE,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;QAC7G,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,cAAc,EAAE;QACtB,WAAW,EAAE,kDAAkD;QAC/D,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,CAAC;gBACH,GAAG,CAAC,aAAa,CAAC,CAAC;gBACnB,MAAM,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBAC5B,GAAG,CAAC,oEAAoE,CAAC,CAAC;gBAC1E,IAAI,EAAE;oBAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,+CAA+C;;oBAC9D,KAAK,OAAO,EAAE,CAAC;YACtB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,iBAAiB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,eAAe,EAAE;QACvB,WAAW,EAAE,kCAAkC;QAC/C,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,GAAG,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;QACzF,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,aAAa,EAAE;QACrB,WAAW,EAAE,uEAAuE;QACpF,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,yCAAyC,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC/G,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACZ,GAAG,CAAC,mBAAmB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;oBACtC,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8C,CAAC;gBAC1E,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,CAAC,UAAU,0DAA0D,YAAY,EAAE,KAAK;oBAC5F,cAAc,CAAC,CAAC,SAAS,oCAAoC,CAChE,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,kBAAkB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,oBAAoB,EAAE;QAC5B,WAAW,EAAE,+EAA+E;QAC5F,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;YAC/B,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,GAAG,CAAC,kDAAkD,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,GAAG,CAAC,yCAAyC,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,cAAc,EAAE;oBACjD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;oBACjF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;iBAChC,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACZ,GAAG,CAAC,uBAAuB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;oBACnD,OAAO;gBACT,CAAC;gBACD,GAAG,CACD,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC;oBACjC,CAAC,CAAC,GAAG,KAAK,uDAAuD;oBACjE,CAAC,CAAC,aAAa,KAAK,2EAA2E,CAClG,CAAC;YACJ,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,sBAAsB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,KAAK,OAAO,EAAE,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,gFAAgF;AAChF,2EAA2E;AAC3E,+EAA+E;AAC/E,+EAA+E;AAC/E,0EAA0E;AAC1E,yEAAyE;AACzE,wEAAwE;AACxE,0EAA0E;AAC1E,0EAA0E;AAC1E,uCAAuC;AACvC,MAAM,UAAU,eAAe,CAAC,KAA6B;IAI3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO;QACL,IAAI,CAAC,GAAW;YACd,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO;YAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,KAAK,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;QACD,KAAK;YACH,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,uEAAuE;AACvE,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,IAAI,EAAE,EAAE;IACpC,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC,CAAC,CAAC;AACH,SAAS,GAAG,CAAC,GAAW;IACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjB,CAAC;AAED,+EAA+E;AAC/E,wDAAwD;AACxD,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAC5B,sCAAsC;QACtC,OAAO,CAAC,KAAK,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/package.json

@@ -1,15 +1,29 @@
 {
   "name": "@clevercloud/pi-remote-control",
-  "version": "0.0.1",
-  "description": "Name reserved. The pi.dev remote-control extension ships at 0.1.0+ once the relay is deployed. Do not install this placeholder.",
+  "version": "0.1.1",
+  "description": "pi.dev extension: bridge a live pi session to the remote-control relay",
   "license": "Apache-2.0",
-  "keywords": ["pi-package", "pi-extension", "placeholder"],
+  "type": "module",
+  "main": "dist/index.js",
+  "keywords": ["pi-package", "pi-extension"],
+  "pi": {
+    "extensions": ["./dist/index.js"]
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/CleverCloud/Pi-dev-remote-controll.git"
   },
-  "files": ["README.md"],
+  "files": ["dist", "README.md"],
   "publishConfig": {
     "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "watch": "tsc -p tsconfig.json --watch",
+    "prepublishOnly": "npm run build"
+  },
+  "devDependencies": {
+    "@types/node": "^22.7.0",
+    "typescript": "^5.6.0"
   }
 }