@cydm/happy-elves 0.1.0-beta.75 → 0.1.0-beta.76

package/apps/cli/dist/commands/app.js

@@ -2,6 +2,7 @@ import { handleAccount } from "./account.js";
 import { handleCollect } from "./collect.js";
 import { handleConfig } from "./config.js";
 import { handleDaemon } from "./daemon.js";
+import { handleDiagnostics } from "./diagnostics.js";
 import { handleGateway } from "./gateway.js";
 import { handleLoop } from "./loop.js";
 import { handleMachine } from "./machine.js";
@@ -22,6 +23,7 @@ const domainHandlers = [
     handleToken,
     handleLoop,
     handleDaemon,
+    handleDiagnostics,
     handleRelay,
     handleMachine,
     handleMemory,

package/apps/cli/dist/commands/diagnostics.d.ts

@@ -0,0 +1,2 @@
+import type { CommandInput } from "./command.js";
+export declare function handleDiagnostics({ domain, action, flags }: CommandInput): Promise<boolean>;

package/apps/cli/dist/commands/diagnostics.js

@@ -0,0 +1,71 @@
+import { UiProbeClient } from "../../../../packages/client/dist/index.js";
+import { CliError, ok, parseDurationMs, readConfig, requireString, wantsJson } from "./lib/index.js";
+const DEFAULT_CAPTURE_TIMEOUT_MS = 30_000;
+const DEFAULT_WATCH_DURATION_MS = 10 * 60_000;
+const MAX_WATCH_DURATION_MS = 10 * 60_000;
+function durationFlag(flags, key, fallbackMs, maximumMs) {
+    const durationMs = parseDurationMs(flags[key], fallbackMs);
+    if (!Number.isFinite(durationMs) || durationMs <= 0 || durationMs > maximumMs) {
+        throw new CliError(`Invalid --${key}: expected a positive duration no greater than 10m`, "INVALID_ARGUMENT");
+    }
+    return durationMs;
+}
+function printTelemetry(telemetry) {
+    console.log(JSON.stringify(telemetry));
+}
+export async function handleDiagnostics({ domain, action, flags }) {
+    if (domain !== "diagnostics")
+        return false;
+    const config = await readConfig(flags);
+    const client = new UiProbeClient(config);
+    try {
+        if (action === "surfaces") {
+            const surfaces = await client.listSurfaces();
+            if (wantsJson(flags))
+                ok("diagnostics.surfaces", { surfaces });
+            else if (surfaces.length === 0)
+                console.log("No Device is sharing live diagnostics.");
+            else {
+                for (const surface of surfaces) {
+                    console.log(`${surface.deviceId}  ${surface.surfaceId}  ${surface.kind}  expires ${new Date(surface.expiresAt).toISOString()}`);
+                }
+            }
+            return true;
+        }
+        if (action === "capture") {
+            const deviceId = requireString(flags, "device");
+            const surfaceId = requireString(flags, "surface");
+            const timeoutMs = durationFlag(flags, "timeout", DEFAULT_CAPTURE_TIMEOUT_MS, MAX_WATCH_DURATION_MS);
+            const telemetry = await client.capture({ deviceId, surfaceId, timeoutMs });
+            if (wantsJson(flags))
+                ok("diagnostics.capture", telemetry);
+            else
+                console.log(JSON.stringify(telemetry, null, 2));
+            return true;
+        }
+        if (action === "watch") {
+            if (flags.jsonl !== true) {
+                throw new CliError("diagnostics watch requires --jsonl", "MISSING_ARGUMENT");
+            }
+            const deviceId = requireString(flags, "device");
+            const surfaceId = requireString(flags, "surface");
+            const durationMs = durationFlag(flags, "duration", DEFAULT_WATCH_DURATION_MS, MAX_WATCH_DURATION_MS);
+            const abortController = new AbortController();
+            const onSigint = () => abortController.abort();
+            process.once("SIGINT", onSigint);
+            try {
+                const watch = await client.watch({ deviceId, surfaceId, durationMs, signal: abortController.signal });
+                for await (const telemetry of watch)
+                    printTelemetry(telemetry);
+            }
+            finally {
+                process.removeListener("SIGINT", onSigint);
+            }
+            return true;
+        }
+        throw new CliError(`Unknown diagnostics action: ${action ?? "(missing)"}`, "INVALID_ARGUMENT");
+    }
+    finally {
+        await client.close();
+    }
+}

package/apps/cli/dist/commands/lib/args.js

@@ -25,7 +25,9 @@ const valueFlags = new Set([
     "device-id",
     "device-name",
     "display-name",
+    "device",
     "domain",
+    "duration",
     "from",
     "host",
     "host-machine",
@@ -69,6 +71,7 @@ const valueFlags = new Set([
     "runtime-limit",
     "runtime-session",
     "shell",
+    "surface",
     "actions",
     "expires-in",
     "format",
@@ -122,6 +125,7 @@ const booleanFlags = new Set([
     "include-archived",
     "isolated",
     "json",
+    "jsonl",
     "keep-source",
     "local",
     "longterm",

package/apps/cli/dist/commands/lib/usage.js

@@ -12,6 +12,15 @@ Show the current Account, Daemon, and latest Session state.
     doctor: `Usage: happy-elves doctor [--relay <url>] [--json]
 
 Check local Device access, Account consistency, service reachability, and Daemon state.
+`,
+    diagnostics: `Usage:
+  happy-elves diagnostics surfaces --json
+  happy-elves diagnostics capture --device <deviceId> --surface <surfaceId> [--timeout 30s] --json
+  happy-elves diagnostics watch --device <deviceId> --surface <surfaceId> [--duration 10m] --jsonl
+
+Observe privacy-filtered layout, focus, viewport, pointer, and scroll telemetry
+from a Device that explicitly enabled Settings > Diagnostics > Share live diagnostics.
+Probe traffic is end-to-end encrypted and expires after ten minutes.
 `,
     account: `Usage:
   happy-elves account create --relay <url> [--device-id <id>] [--device-name <name>] [--reveal-secrets] --json
@@ -300,6 +309,11 @@ Advanced and compatibility commands:
   relay status [--relay <url>] [--json]
   relay doctor [--relay <url>] [--json]
 
+  # Privacy-filtered diagnostics shared by another trusted Device.
+  diagnostics surfaces --json
+  diagnostics capture --device <deviceId> --surface <surfaceId> --json
+  diagnostics watch --device <deviceId> --surface <surfaceId> --jsonl
+
 Usage:
   happy-elves <domain> <action> [args] [flags]
   happy-elves <domain> --help
@@ -316,7 +330,7 @@ More:
   happy-elves --version
   happy-elves version --json
   happy-elves <domain> --help
-  start, status, doctor, collect, config, account, daemon, relay, token, gateway, loop.
+  start, status, doctor, collect, config, account, daemon, relay, diagnostics, token, gateway, loop.
   orchestrator, skill.
 `;
 }

package/apps/daemon/dist/lifecycle/detached-helper-bundle.mjs

@@ -18137,8 +18137,241 @@ function isSessionNameValid(value) {
   }
 }
 
+// ../../packages/shared/dist/ui-probe.js
+var encoder2 = new TextEncoder();
+var opaqueIdSchema = external_exports.string().min(1).max(200);
+var identifierSchema = external_exports.string().min(1).max(160).regex(/^[A-Za-z0-9._~-]+$/u);
+var anchorSchema = external_exports.string().min(1).max(64).regex(/^[a-z0-9][a-z0-9._-]*$/u);
+var markerIdSchema = external_exports.string().regex(/^probe_marker_[A-Za-z0-9_-]{16,115}$/u);
+var finiteNumberSchema = external_exports.number().finite();
+var nonNegativeIntegerSchema = external_exports.number().int().min(0).max(Number.MAX_SAFE_INTEGER);
+var positiveSequenceSchema = external_exports.number().int().min(1).max(Number.MAX_SAFE_INTEGER);
+var encodedCiphertextSchema = external_exports.string().min(1).max(128 * 1024).regex(/^[A-Za-z0-9+/_=-]+$/u);
+var uiProbeMaxEncryptedEnvelopeBytes = 126 * 1024;
+var uiProbeEncryptedEnvelopeSchema = external_exports.strictObject({
+  v: external_exports.literal(1),
+  alg: external_exports.literal("A256GCM"),
+  scope: external_exports.string().min(1).max(512),
+  key: external_exports.strictObject({
+    nonce: encodedCiphertextSchema.max(128),
+    ciphertext: encodedCiphertextSchema.max(1024)
+  }),
+  data: external_exports.strictObject({
+    nonce: encodedCiphertextSchema.max(128),
+    ciphertext: encodedCiphertextSchema
+  })
+}).superRefine((envelope, context) => {
+  if (encoder2.encode(JSON.stringify(envelope)).byteLength > uiProbeMaxEncryptedEnvelopeBytes) {
+    context.addIssue({ code: "custom", message: "UI Probe encrypted payload exceeds the 128 KiB frame budget" });
+  }
+});
+var uiProbeCapabilitiesSchema = external_exports.strictObject({
+  versions: external_exports.tuple([external_exports.literal(1)]),
+  telemetry: external_exports.literal(true),
+  driver: external_exports.boolean()
+});
+var uiProbeSurfaceRegistrationSchema = external_exports.strictObject({
+  version: external_exports.literal(1),
+  surfaceId: identifierSchema,
+  instanceId: identifierSchema,
+  kind: external_exports.enum(["browser", "pwa", "desktop-webview"]),
+  capabilities: uiProbeCapabilitiesSchema,
+  expiresAt: nonNegativeIntegerSchema
+});
+var uiProbeSurfaceSchema = uiProbeSurfaceRegistrationSchema.extend({
+  deviceId: opaqueIdSchema,
+  deviceName: external_exports.string().min(1).max(160),
+  connectedAt: nonNegativeIntegerSchema
+});
+var uiProbeSessionSchema = external_exports.strictObject({
+  version: external_exports.literal(1),
+  probeId: identifierSchema,
+  observerDeviceId: opaqueIdSchema,
+  observerDeviceName: external_exports.string().min(1).max(160),
+  targetDeviceId: opaqueIdSchema,
+  surfaceId: identifierSchema,
+  instanceId: identifierSchema,
+  openedAt: nonNegativeIntegerSchema,
+  expiresAt: nonNegativeIntegerSchema
+});
+var uiProbeCloseReasonSchema = external_exports.enum([
+  "requested",
+  "expired",
+  "observer-disconnected",
+  "surface-disconnected",
+  "surface-replaced",
+  "auth-revoked",
+  "backpressure",
+  "rate-limited",
+  "relay-shutdown"
+]);
+var uiProbeOpenSemanticsSchema = external_exports.strictObject({
+  version: external_exports.literal(1),
+  requestId: opaqueIdSchema,
+  targetDeviceId: opaqueIdSchema,
+  surfaceId: identifierSchema,
+  instanceId: identifierSchema
+});
+var uiProbeElementRefSchema = external_exports.strictObject({
+  anchor: anchorSchema.optional(),
+  tag: external_exports.string().min(1).max(48).regex(/^[a-z][a-z0-9-]*$/u),
+  role: external_exports.string().min(1).max(48).regex(/^[a-z][a-z0-9-]*$/u).optional(),
+  inputType: external_exports.string().min(1).max(32).regex(/^[a-z][a-z0-9-]*$/u).optional(),
+  disabled: external_exports.boolean().optional(),
+  readOnly: external_exports.boolean().optional()
+});
+var uiProbeRectSchema = external_exports.strictObject({
+  x: finiteNumberSchema,
+  y: finiteNumberSchema,
+  width: finiteNumberSchema.min(0),
+  height: finiteNumberSchema.min(0)
+});
+var uiProbeSampleSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.strictObject({
+    kind: external_exports.literal("viewport"),
+    at: nonNegativeIntegerSchema,
+    layout: external_exports.strictObject({ width: finiteNumberSchema.min(0), height: finiteNumberSchema.min(0) }),
+    visual: external_exports.strictObject({
+      width: finiteNumberSchema.min(0),
+      height: finiteNumberSchema.min(0),
+      offsetLeft: finiteNumberSchema,
+      offsetTop: finiteNumberSchema,
+      scale: finiteNumberSchema.min(0)
+    }).nullable()
+  }),
+  external_exports.strictObject({
+    kind: external_exports.literal("focus"),
+    at: nonNegativeIntegerSchema,
+    event: external_exports.enum(["focus", "blur", "focusin", "focusout"]),
+    active: uiProbeElementRefSchema.nullable(),
+    isTrusted: external_exports.boolean()
+  }),
+  external_exports.strictObject({
+    kind: external_exports.literal("pointer"),
+    at: nonNegativeIntegerSchema,
+    event: external_exports.enum(["pointerdown", "pointerup", "pointercancel", "touchstart", "touchend", "touchcancel"]),
+    x: finiteNumberSchema,
+    y: finiteNumberSchema,
+    isTrusted: external_exports.boolean(),
+    target: uiProbeElementRefSchema.nullable()
+  }),
+  external_exports.strictObject({
+    kind: external_exports.literal("scroll"),
+    at: nonNegativeIntegerSchema,
+    target: uiProbeElementRefSchema.nullable(),
+    scrollLeft: finiteNumberSchema,
+    scrollTop: finiteNumberSchema,
+    clientWidth: finiteNumberSchema.min(0),
+    clientHeight: finiteNumberSchema.min(0),
+    scrollWidth: finiteNumberSchema.min(0),
+    scrollHeight: finiteNumberSchema.min(0)
+  }),
+  external_exports.strictObject({
+    kind: external_exports.literal("anchors"),
+    at: nonNegativeIntegerSchema,
+    anchors: external_exports.array(external_exports.strictObject({
+      anchor: anchorSchema,
+      tag: external_exports.string().min(1).max(48).regex(/^[a-z][a-z0-9-]*$/u),
+      role: external_exports.string().min(1).max(48).regex(/^[a-z][a-z0-9-]*$/u).optional(),
+      inputType: external_exports.string().min(1).max(32).regex(/^[a-z][a-z0-9-]*$/u).optional(),
+      disabled: external_exports.boolean().optional(),
+      readOnly: external_exports.boolean().optional(),
+      rect: uiProbeRectSchema,
+      style: external_exports.strictObject({
+        position: external_exports.enum(["static", "relative", "absolute", "fixed", "sticky"]),
+        overflowX: external_exports.enum(["visible", "hidden", "clip", "scroll", "auto"]),
+        overflowY: external_exports.enum(["visible", "hidden", "clip", "scroll", "auto"]),
+        touchAction: external_exports.string().min(1).max(64),
+        pointerEvents: external_exports.enum(["auto", "none"]),
+        zIndex: external_exports.string().min(1).max(32),
+        fontSize: external_exports.string().min(1).max(32),
+        transform: external_exports.string().min(1).max(256)
+      })
+    })).max(64)
+  }),
+  external_exports.strictObject({
+    kind: external_exports.literal("layout-shift"),
+    at: nonNegativeIntegerSchema,
+    value: finiteNumberSchema.min(0),
+    hadRecentInput: external_exports.boolean()
+  }),
+  external_exports.strictObject({
+    kind: external_exports.literal("lifecycle"),
+    at: nonNegativeIntegerSchema,
+    event: external_exports.enum(["load", "pageshow", "pagehide", "visible", "hidden", "online", "offline"]),
+    persisted: external_exports.boolean().optional()
+  }),
+  external_exports.strictObject({
+    kind: external_exports.literal("error"),
+    at: nonNegativeIntegerSchema,
+    category: external_exports.enum(["console", "unhandled-error", "unhandled-rejection", "layout-observer"]),
+    messageHash: external_exports.string().regex(/^[a-f0-9]{64}$/u)
+  }),
+  external_exports.strictObject({
+    kind: external_exports.literal("marker"),
+    at: nonNegativeIntegerSchema,
+    markerId: markerIdSchema
+  })
+]);
+var uiProbeBindingSchema = {
+  version: external_exports.literal(1),
+  probeId: identifierSchema,
+  observerDeviceId: opaqueIdSchema,
+  targetDeviceId: opaqueIdSchema,
+  surfaceId: identifierSchema,
+  instanceId: identifierSchema,
+  sequence: positiveSequenceSchema
+};
+var uiProbeCommandActionSchema = external_exports.discriminatedUnion("action", [
+  external_exports.strictObject({ action: external_exports.literal("snapshot"), anchors: external_exports.array(anchorSchema).max(64).optional() }),
+  external_exports.strictObject({ action: external_exports.literal("setSampling"), intervalMs: external_exports.number().int().min(250).max(2e3) }),
+  external_exports.strictObject({ action: external_exports.literal("mark"), markerId: markerIdSchema }),
+  external_exports.strictObject({ action: external_exports.literal("close") })
+]);
+var uiProbeCommandSchema = external_exports.strictObject({
+  ...uiProbeBindingSchema,
+  command: uiProbeCommandActionSchema
+});
+var uiProbeTelemetrySchema = external_exports.strictObject({
+  ...uiProbeBindingSchema,
+  sampledAt: nonNegativeIntegerSchema,
+  fullSnapshot: external_exports.boolean(),
+  dropped: nonNegativeIntegerSchema,
+  samples: external_exports.array(uiProbeSampleSchema).max(64)
+});
+
 // ../../packages/shared/dist/protocol.js
 var controllerMessageSchema = external_exports.discriminatedUnion("type", [
+  external_exports.object({
+    type: external_exports.literal("controller:uiProbeList"),
+    requestId: external_exports.string().min(1).max(200)
+  }),
+  external_exports.object({
+    type: external_exports.literal("controller:uiProbeOpen"),
+    requestId: external_exports.string().min(1).max(200),
+    targetDeviceId: external_exports.string().min(1).max(200),
+    surfaceId: external_exports.string().min(1).max(160).regex(/^[A-Za-z0-9._~-]+$/u),
+    instanceId: external_exports.string().min(1).max(160).regex(/^[A-Za-z0-9._~-]+$/u),
+    semanticDigest: external_exports.string().max(200).regex(/^ui-probe-v1:[A-Za-z0-9_-]+$/u)
+  }),
+  external_exports.object({
+    type: external_exports.literal("controller:uiProbeCommand"),
+    requestId: external_exports.string().min(1).max(200),
+    probeId: external_exports.string().min(1).max(160).regex(/^[A-Za-z0-9._~-]+$/u),
+    sequence: external_exports.number().int().positive(),
+    encryptedPayload: uiProbeEncryptedEnvelopeSchema
+  }),
+  external_exports.object({
+    type: external_exports.literal("controller:uiProbeTelemetry"),
+    probeId: external_exports.string().min(1).max(160).regex(/^[A-Za-z0-9._~-]+$/u),
+    sequence: external_exports.number().int().positive(),
+    encryptedPayload: uiProbeEncryptedEnvelopeSchema
+  }),
+  external_exports.object({
+    type: external_exports.literal("controller:uiProbeClose"),
+    requestId: external_exports.string().min(1).max(200),
+    probeId: external_exports.string().min(1).max(160).regex(/^[A-Za-z0-9._~-]+$/u)
+  }),
   external_exports.object({
     type: external_exports.literal("controller:createSession"),
     requestId: external_exports.string().min(1),
@@ -18598,11 +18831,14 @@ var clientMessageSchema = external_exports.union([
     clientType: external_exports.enum(["controller", "machine"]),
     token: external_exports.string().min(1),
     machineId: external_exports.string().min(1).optional(),
+    purpose: external_exports.enum(["app", "probe"]).optional(),
+    uiProbeSurface: uiProbeSurfaceRegistrationSchema.optional(),
     capabilities: external_exports.object({
       daemonLifecycleEventsV1: external_exports.boolean().optional(),
       daemonAutostartV1: external_exports.boolean().optional(),
       resourcePreferenceInvalidationV1: external_exports.boolean().optional(),
-      daemonProjectsPreferenceV1: external_exports.boolean().optional()
+      daemonProjectsPreferenceV1: external_exports.boolean().optional(),
+      uiProbe: uiProbeCapabilitiesSchema.optional()
     }).optional()
   }),
   controllerMessageSchema,
@@ -18850,9 +19086,39 @@ var serverMessageSchema = external_exports.union([
       sessionStarsV1: external_exports.boolean().optional(),
       daemonAuthorizedDeviceBootstrapV1: external_exports.boolean().optional(),
       browserBootstrapInviteV1: external_exports.boolean().optional(),
-      daemonAutostartV1: external_exports.boolean().optional()
+      daemonAutostartV1: external_exports.boolean().optional(),
+      uiProbe: uiProbeCapabilitiesSchema.optional()
     }).optional()
   }),
+  external_exports.object({
+    type: external_exports.literal("server:uiProbeSurfaces"),
+    requestId: external_exports.string().min(1),
+    surfaces: external_exports.array(uiProbeSurfaceSchema)
+  }),
+  external_exports.object({
+    type: external_exports.literal("server:uiProbeOpened"),
+    requestId: external_exports.string().min(1),
+    session: uiProbeSessionSchema
+  }),
+  external_exports.object({
+    type: external_exports.literal("server:uiProbeCommand"),
+    requestId: external_exports.string().min(1),
+    session: uiProbeSessionSchema,
+    sequence: external_exports.number().int().positive(),
+    encryptedPayload: uiProbeEncryptedEnvelopeSchema
+  }),
+  external_exports.object({
+    type: external_exports.literal("server:uiProbeTelemetry"),
+    session: uiProbeSessionSchema,
+    sequence: external_exports.number().int().positive(),
+    encryptedPayload: uiProbeEncryptedEnvelopeSchema
+  }),
+  external_exports.object({
+    type: external_exports.literal("server:uiProbeClosed"),
+    requestId: external_exports.string().min(1).optional(),
+    probeId: external_exports.string().min(1),
+    reason: uiProbeCloseReasonSchema
+  }),
   external_exports.object({
     type: external_exports.literal("server:snapshot"),
     machines: external_exports.array(machineSnapshotSchema),

package/apps/daemon/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cydm/happy-elves-daemon",
-  "version": "0.1.0-beta.75",
+  "version": "0.1.0-beta.76",
   "private": true,
   "type": "module"
 }

package/apps/relay/dist/connections.d.ts

@@ -57,6 +57,7 @@ export type PendingCommandContext = {
 export declare function machineKey(accountId: string, machineId: string): string;
 export declare function createConnectionState(): {
     controllersByAccount: Map<string, Set<ControllerConnection>>;
+    probeControllersByAccount: Map<string, Set<ControllerConnection>>;
     machinesByKey: Map<string, MachineConnection>;
     pendingCommandRequests: Map<string, PendingCommandContext>;
 };

package/apps/relay/dist/connections.js

@@ -5,6 +5,7 @@ export function machineKey(accountId, machineId) {
 export function createConnectionState() {
     return {
         controllersByAccount: new Map(),
+        probeControllersByAccount: new Map(),
         machinesByKey: new Map(),
         pendingCommandRequests: new Map(),
     };

package/apps/relay/dist/relay-context.d.ts

@@ -100,6 +100,7 @@ export declare function createRelayContext(options: CreateRelayContextOptions):
         sessionId: string;
         turnId: string;
     }) => PendingCommandContext | undefined;
+    probeControllersByAccount: Map<string, Set<ControllerConnection>>;
     isFullControllerToken: typeof isFullControllerToken;
     machineCapabilities: (accountId: string, machineId: string) => MachineSnapshot["capabilities"] | undefined;
     machineSnapshot: (row: MachineRow) => MachineSnapshot;

package/apps/relay/dist/relay-context.js

@@ -9,7 +9,7 @@ import { clearAcceptedRun as clearConnectionAcceptedRun, clearAcceptedRunsForSes
 import { bearerToken, encodePairingCode, tokenDigest } from "./security.js";
 const REWRITE_HEAD_BASIS_PREFIX = "rewrite:";
 export function createRelayContext(options) {
-    const { controllersByAccount, machinesByKey, pendingCommandRequests } = createConnectionState();
+    const { controllersByAccount, probeControllersByAccount, machinesByKey, pendingCommandRequests } = createConnectionState();
     const now = options.now ?? Date.now;
     function connectedMachine(accountId, machineId) {
         return machinesByKey.get(machineKey(accountId, machineId));
@@ -86,17 +86,18 @@ export function createRelayContext(options) {
         assertScopedAction(tokenScope(record), action);
     }
     function closeRevokedControllerConnections(accountId, deviceId) {
-        const controllers = controllersByAccount.get(accountId);
-        if (!controllers)
-            return;
-        for (const connection of controllers) {
-            if (connection.deviceId === deviceId) {
-                send(connection.socket, {
-                    type: "server:error",
-                    code: "AUTH_TOKEN_REVOKED",
-                    message: "Device has been revoked",
-                });
-                connection.socket.close(1008, "Device has been revoked");
+        for (const controllers of [controllersByAccount.get(accountId), probeControllersByAccount.get(accountId)]) {
+            if (!controllers)
+                continue;
+            for (const connection of controllers) {
+                if (connection.deviceId === deviceId) {
+                    send(connection.socket, {
+                        type: "server:error",
+                        code: "AUTH_TOKEN_REVOKED",
+                        message: "Device has been revoked",
+                    });
+                    connection.socket.close(1008, "Device has been revoked");
+                }
             }
         }
     }
@@ -1021,6 +1022,7 @@ export function createRelayContext(options) {
         isCommandPending,
         isSessionCommandPending,
         pendingRunCommand,
+        probeControllersByAccount,
         isFullControllerToken,
         machineCapabilities,
         machineSnapshot,

package/apps/relay/dist/types.d.ts

@@ -1,4 +1,4 @@
-import type { MachineSnapshot, SessionSnapshot } from "../../../packages/shared/dist/index.js";
+import type { MachineSnapshot, SessionSnapshot, UiProbeCapabilities, UiProbeSurfaceRegistration } from "../../../packages/shared/dist/index.js";
 export type TokenKind = "controller" | "machine";
 export type ScopedTokenScope = {
     name?: string;
@@ -120,6 +120,8 @@ export type PairingRow = {
 };
 export type WebSocketLike = {
     readyState: number;
+    /** Bytes queued by the transport for this exact recipient socket. */
+    bufferedAmount?: number;
     send(data: string): void;
     close(code?: number, reason?: string): void;
     on(event: "message", cb: (data: Buffer) => void): void;
@@ -131,12 +133,16 @@ export type ControllerConnection = {
     accountId: string;
     token: string;
     deviceId: string | null;
+    deviceName: string;
+    purpose: "app" | "probe";
+    uiProbeSurface?: UiProbeSurfaceRegistration;
     scope: ScopedTokenScope | null;
     clientCapabilities?: {
         daemonLifecycleEventsV1?: boolean;
         daemonAutostartV1?: boolean;
         resourcePreferenceInvalidationV1?: boolean;
         daemonProjectsPreferenceV1?: boolean;
+        uiProbe?: UiProbeCapabilities;
     };
     activeRunTurns?: Set<string>;
     expiresAt: number | null;

package/apps/relay/dist/ui-probe-router.d.ts

@@ -0,0 +1,35 @@
+import { type ClientMessage, type ServerMessage, type UiProbeCloseReason } from "../../../packages/shared/dist/index.js";
+import type { ControllerConnection } from "./types.js";
+export declare const UI_PROBE_TTL_MS: number;
+export declare const UI_PROBE_REGISTRATION_CLOCK_SKEW_MS = 60000;
+export declare const UI_PROBE_MAX_ACTIVE_PER_ACCOUNT = 5;
+export declare const UI_PROBE_MAX_CONTROL_MESSAGES_PER_SECOND = 20;
+export declare const UI_PROBE_MAX_RECIPIENT_BUFFER_BYTES: number;
+export type UiProbeClientMessage = Extract<ClientMessage, {
+    type: "controller:uiProbeList" | "controller:uiProbeOpen" | "controller:uiProbeCommand" | "controller:uiProbeTelemetry" | "controller:uiProbeClose";
+}>;
+type AuthError = {
+    code: string;
+    message: string;
+};
+type TimerHandle = ReturnType<typeof setTimeout> | number;
+type UiProbeRouterOptions = {
+    now(): number;
+    send(connection: ControllerConnection, message: ServerMessage): boolean;
+    authError(connection: ControllerConnection): AuthError | null;
+    setTimer?(callback: () => void, delayMs: number): TimerHandle;
+    clearTimer?(timer: TimerHandle): void;
+};
+export declare function createUiProbeRouter(options: UiProbeRouterOptions): {
+    closeAll: (reason?: UiProbeCloseReason) => void;
+    disconnect: (connection: ControllerConnection) => void;
+    handle: (connection: ControllerConnection, message: UiProbeClientMessage) => void;
+    register: (connection: ControllerConnection) => {
+        replaced?: ControllerConnection;
+    };
+};
+export declare class UiProbeRegistrationError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export {};