@darwinium/portal-mcp 0.0.1 → 0.0.2

package/dist/bin/oobPair-ybkkqrSh.js

@@ -0,0 +1,250 @@
+import { c as PAIRING_CODE_REGEX, f as VERSION_SUBPROTOCOL, l as PROTOCOL_VERSION, n as killProcessOnPort, p as WS_CLOSE_TOKEN_MISMATCH, r as wait, t as isPortInUse } from "./killProcessOnPort-Bt5MA5Dv.js";
+import { a as info, n as box, o as ok, s as warn } from "./term-Bg7icwx7.js";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { WebSocketServer } from "ws";
+import { randomInt } from "node:crypto";
+
+//#region src/install/migrate.ts
+/**
+* Legacy token-path migration.
+*
+* Earlier builds unconditionally placed the token at
+* `~/.config/darwinium-portal-mcp/token` on every platform. Current builds use
+* `env-paths` for platform-conventional paths (macOS `~/Library/Application
+* Support/...`, Windows `%APPDATA%/.../Data`, Linux `~/.local/share/...`).
+* On macOS/Windows the path changes; on Linux we silently skip migration.
+*
+* The migration runs once per `install` / `rotate-token` invocation (idempotent
+* — no-op if old path absent OR new path already populated).
+*
+* Output lines:
+*   - Success: `✓ migrated token from <old path> to <new path>`
+*   - Partial: `⚠ migration partial — old token at <old path> still present; please remove manually.`
+*/
+/** Legacy token path — hand-coded XDG-style. */
+const LEGACY_TOKEN_PATH = path.join(os.homedir(), ".config", "darwinium-portal-mcp", "token");
+/**
+* Move the legacy token file to `newTokenPath` if appropriate.
+*
+* Idempotent: no-op when the old path is absent. When BOTH paths exist, log a
+* warn line so the customer can resolve the partial-migration state manually
+* (we never silently overwrite the new file).
+*
+* Linux: silently no-op — env-paths default places the data dir at
+* `~/.local/share/darwinium-portal-mcp/`, distinct from the legacy
+* `~/.config/darwinium-portal-mcp/`. The legacy layout only ever shipped to
+* dev machines (macOS/Windows), so Linux deployments cannot have a stale
+* legacy token to migrate.
+*/
+function maybeMigrate(newTokenPath) {
+	if (process.platform === "linux") return;
+	if (!fs.existsSync(LEGACY_TOKEN_PATH)) return;
+	if (fs.existsSync(newTokenPath)) {
+		warn(`migration partial — old token at ${LEGACY_TOKEN_PATH} still present; please remove manually.`);
+		return;
+	}
+	fs.mkdirSync(path.dirname(newTokenPath), {
+		recursive: true,
+		mode: 448
+	});
+	fs.renameSync(LEGACY_TOKEN_PATH, newTokenPath);
+	ok(`migrated token from ${LEGACY_TOKEN_PATH} to ${newTokenPath}`);
+}
+
+//#endregion
+//#region src/install/oobPair.ts
+/**
+* Foreground OOB pairing-WS server.
+*
+* `install` and `rotate-token` invoke this module to deliver the freshly
+* generated 64-hex token to the popup over an OOB-authenticated channel:
+*
+*   1. Generate a 6-digit code with crypto.randomInt (CSPRNG; never Math.random).
+*   2. Bind a short-lived WebSocketServer on 127.0.0.1:9224 that accepts ONLY
+*      the `pair.<6-digit>` subprotocol (parallel to production `serve`'s
+*      `tok.<hex>` lifecycle — separate WSS instance).
+*   3. Print the boxed pairing prompt on stderr.
+*   4. Wait up to 60s for a popup to upgrade with the matching code.
+*      - On match: send {type:'paired', token, version}; close 1000; resolve.
+*      - On mismatch: 4401 close + attempt counter (3-attempt lockout).
+*      - On expiry / lockout: print re-arm prompt; wait for stdin Enter to
+*        regenerate code + re-arm. Loop indefinitely until paired or SIGINT.
+*   5. SIGINT: print the Ctrl+C abort lines + exit 130.
+*
+* Security:
+*   - `handleProtocols` returns ONLY `VERSION_SUBPROTOCOL` — never echoes the
+*     offered `pair.<code>` slot.
+*   - 3-attempt lockout × 60s window × CSPRNG 6-digit space (≈3×10⁻⁶ success
+*     per window) bounds the brute-force attack surface.
+*   - Pre-pair handleProtocols rejection consumes no app-level resources
+*     (HTTP 401 at upgrade boundary). Post-upgrade attempts are bounded by
+*     the counter.
+*
+* Pair handling lives here only — production `src/ws/server.ts` rejects
+* `pair.*` shapes. The popup-side mirror lives in the portal-extension package.
+*/
+const DEFAULT_PORT = 9224;
+const DEFAULT_TTL_MS = 6e4;
+const DEFAULT_MAX_ATTEMPTS = 3;
+const PORT_HELD_MESSAGE = "Another MCP client is using the Darwinium bridge on port 9224. Close other Claude Desktop / Claude Code instances and retry, or run `lsof -i:9224` to find the holding process.";
+/** 6-digit zero-padded random pairing code via CSPRNG. */
+function generateCode() {
+	return String(randomInt(0, 1e6)).padStart(6, "0");
+}
+/** Print the boxed pairing prompt + waiting line. */
+function printPairingPrompt(code, mode) {
+	if (mode === "install") {
+		info("pairing armed. Open the Darwinium Portal MCP extension popup");
+		console.error("            and enter this 6-digit code within 60 seconds.");
+	} else {
+		info("pairing armed. Open the Darwinium Portal MCP extension popup,");
+		console.error("            click \"Re-pair\", and enter this 6-digit code within 60 seconds.");
+	}
+	console.error("");
+	box([
+		"",
+		`   Pairing code:  ${code}`,
+		`   Expires:       60s`,
+		""
+	]);
+	console.error("");
+	info("waiting for popup... (Ctrl+C to abort)");
+}
+/** Print the re-arm prompt after code expiry or lockout. */
+function printRearmPrompt() {
+	info("code expired.");
+	info("press Enter to generate a new one, or Ctrl+C to abort.");
+}
+/** Wait for the user to press Enter (returns Promise<void>). */
+function waitForEnter() {
+	return new Promise((resolve) => {
+		process.stdin.resume();
+		process.stdin.once("data", () => {
+			process.stdin.pause();
+			resolve();
+		});
+	});
+}
+/** Parse the offered subprotocol list from an upgrade request header. */
+function offeredProtocols(req) {
+	const header = req.headers["sec-websocket-protocol"];
+	if (!header) return [];
+	return (Array.isArray(header) ? header.join(",") : header).split(",").map((s) => s.trim()).filter((s) => s.length > 0);
+}
+/** Reclaim port 9224 from any stale holder, then bail if still bound. */
+async function reclaimPort(port) {
+	killProcessOnPort(port);
+	for (let i = 0; i < 50; i++) {
+		if (!await isPortInUse(port)) return;
+		await wait(100);
+	}
+	console.error(PORT_HELD_MESSAGE);
+	process.exit(1);
+}
+/**
+* Run the foreground OOB pairing flow until a successful pair, expiry-without-
+* Enter (treated as Ctrl+C), or SIGINT.
+*
+* Resolves with `{paired: true}` on success. Process-exits 130 on SIGINT.
+* Process-exits 1 on unrecoverable port-bind failure.
+*/
+async function run(opts) {
+	const port = opts.port ?? DEFAULT_PORT;
+	const ttlMs = opts.ttlMs ?? DEFAULT_TTL_MS;
+	const maxAttempts = opts.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;
+	await reclaimPort(port);
+	const sigintHandler = () => {
+		console.error("");
+		info("aborted by user. No token was paired.");
+		info("re-run `npx @darwinium/portal-mcp install` to try again.");
+		process.exit(130);
+	};
+	process.on("SIGINT", sigintHandler);
+	let armedCode = null;
+	let attempts = 0;
+	return new Promise((resolve, reject) => {
+		const wss = new WebSocketServer({
+			port,
+			host: "127.0.0.1",
+			handleProtocols: (offered, _req) => {
+				const protocols = [...offered];
+				const hasVersion = protocols.includes(VERSION_SUBPROTOCOL);
+				const hasPairShape = protocols.some((p) => PAIRING_CODE_REGEX.test(p));
+				if (!hasVersion || !hasPairShape) return false;
+				return VERSION_SUBPROTOCOL;
+			}
+		});
+		let expiryTimer = null;
+		let expiryInProgress = false;
+		const armCode = () => {
+			armedCode = generateCode();
+			attempts = 0;
+			printPairingPrompt(armedCode, opts.mode);
+			if (expiryTimer) clearTimeout(expiryTimer);
+			expiryTimer = setTimeout(() => {
+				handleExpiry();
+			}, ttlMs);
+		};
+		const handleExpiry = async () => {
+			if (expiryInProgress) return;
+			expiryInProgress = true;
+			armedCode = null;
+			printRearmPrompt();
+			try {
+				await waitForEnter();
+			} catch (err) {
+				expiryInProgress = false;
+				reject(err);
+				return;
+			}
+			expiryInProgress = false;
+			armCode();
+		};
+		wss.on("connection", (ws, req) => {
+			const offeredPair = offeredProtocols(req).find((p) => PAIRING_CODE_REGEX.test(p));
+			if (armedCode === null) {
+				ws.close(WS_CLOSE_TOKEN_MISMATCH, "pairing not armed");
+				return;
+			}
+			if (offeredPair !== `pair.${armedCode}`) {
+				attempts += 1;
+				if (attempts >= maxAttempts) {
+					ws.close(WS_CLOSE_TOKEN_MISMATCH, "too many attempts");
+					warn(`wrong code (attempt ${attempts} of ${maxAttempts}).`);
+					if (expiryTimer) clearTimeout(expiryTimer);
+					armedCode = null;
+					handleExpiry();
+					return;
+				}
+				ws.close(WS_CLOSE_TOKEN_MISMATCH, "wrong code");
+				warn(`wrong code (attempt ${attempts} of ${maxAttempts}).`);
+				return;
+			}
+			const frame = JSON.stringify({
+				type: "paired",
+				token: opts.expectedToken,
+				version: PROTOCOL_VERSION
+			});
+			ws.send(frame);
+			ws.close(1e3, "paired");
+			if (expiryTimer) clearTimeout(expiryTimer);
+			armedCode = null;
+			process.removeListener("SIGINT", sigintHandler);
+			wss.close(() => {
+				resolve({ paired: true });
+			});
+		});
+		wss.on("error", (err) => {
+			reject(err);
+		});
+		wss.on("listening", () => {
+			armCode();
+		});
+	});
+}
+
+//#endregion
+export { maybeMigrate as n, run as t };
+//# sourceMappingURL=oobPair-ybkkqrSh.js.map

package/dist/bin/oobPair-ybkkqrSh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oobPair-ybkkqrSh.js","names":[],"sources":["../../src/install/migrate.ts","../../src/install/oobPair.ts"],"sourcesContent":["/**\n * Legacy token-path migration.\n *\n * Earlier builds unconditionally placed the token at\n * `~/.config/darwinium-portal-mcp/token` on every platform. Current builds use\n * `env-paths` for platform-conventional paths (macOS `~/Library/Application\n * Support/...`, Windows `%APPDATA%/.../Data`, Linux `~/.local/share/...`).\n * On macOS/Windows the path changes; on Linux we silently skip migration.\n *\n * The migration runs once per `install` / `rotate-token` invocation (idempotent\n * — no-op if old path absent OR new path already populated).\n *\n * Output lines:\n *   - Success: `✓ migrated token from <old path> to <new path>`\n *   - Partial: `⚠ migration partial — old token at <old path> still present; please remove manually.`\n */\nimport * as fs from 'node:fs';\nimport * as os from 'node:os';\nimport * as path from 'node:path';\nimport * as term from './term.js';\n\n/** Legacy token path — hand-coded XDG-style. */\nexport const LEGACY_TOKEN_PATH = path.join(os.homedir(), '.config', 'darwinium-portal-mcp', 'token');\n\n/**\n * Move the legacy token file to `newTokenPath` if appropriate.\n *\n * Idempotent: no-op when the old path is absent. When BOTH paths exist, log a\n * warn line so the customer can resolve the partial-migration state manually\n * (we never silently overwrite the new file).\n *\n * Linux: silently no-op — env-paths default places the data dir at\n * `~/.local/share/darwinium-portal-mcp/`, distinct from the legacy\n * `~/.config/darwinium-portal-mcp/`. The legacy layout only ever shipped to\n * dev machines (macOS/Windows), so Linux deployments cannot have a stale\n * legacy token to migrate.\n */\nexport function maybeMigrate(newTokenPath: string): void {\n  if (process.platform === 'linux') return;\n  if (!fs.existsSync(LEGACY_TOKEN_PATH)) return;\n  if (fs.existsSync(newTokenPath)) {\n    term.warn(`migration partial — old token at ${LEGACY_TOKEN_PATH} still present; please remove manually.`);\n    return;\n  }\n  // Ensure parent dir exists with secure mode before the rename. mkdirSync is\n  // idempotent on a present dir; mode is applied on creation only.\n  fs.mkdirSync(path.dirname(newTokenPath), { recursive: true, mode: 0o700 });\n  fs.renameSync(LEGACY_TOKEN_PATH, newTokenPath);\n  term.ok(`migrated token from ${LEGACY_TOKEN_PATH} to ${newTokenPath}`);\n}\n","/**\n * Foreground OOB pairing-WS server.\n *\n * `install` and `rotate-token` invoke this module to deliver the freshly\n * generated 64-hex token to the popup over an OOB-authenticated channel:\n *\n *   1. Generate a 6-digit code with crypto.randomInt (CSPRNG; never Math.random).\n *   2. Bind a short-lived WebSocketServer on 127.0.0.1:9224 that accepts ONLY\n *      the `pair.<6-digit>` subprotocol (parallel to production `serve`'s\n *      `tok.<hex>` lifecycle — separate WSS instance).\n *   3. Print the boxed pairing prompt on stderr.\n *   4. Wait up to 60s for a popup to upgrade with the matching code.\n *      - On match: send {type:'paired', token, version}; close 1000; resolve.\n *      - On mismatch: 4401 close + attempt counter (3-attempt lockout).\n *      - On expiry / lockout: print re-arm prompt; wait for stdin Enter to\n *        regenerate code + re-arm. Loop indefinitely until paired or SIGINT.\n *   5. SIGINT: print the Ctrl+C abort lines + exit 130.\n *\n * Security:\n *   - `handleProtocols` returns ONLY `VERSION_SUBPROTOCOL` — never echoes the\n *     offered `pair.<code>` slot.\n *   - 3-attempt lockout × 60s window × CSPRNG 6-digit space (≈3×10⁻⁶ success\n *     per window) bounds the brute-force attack surface.\n *   - Pre-pair handleProtocols rejection consumes no app-level resources\n *     (HTTP 401 at upgrade boundary). Post-upgrade attempts are bounded by\n *     the counter.\n *\n * Pair handling lives here only — production `src/ws/server.ts` rejects\n * `pair.*` shapes. The popup-side mirror lives in the portal-extension package.\n */\nimport { WebSocketServer, WebSocket } from 'ws';\nimport { randomInt } from 'node:crypto';\nimport { IncomingMessage } from 'node:http';\nimport { killProcessOnPort, isPortInUse, wait } from '../ws/killProcessOnPort.js';\nimport {\n  PROTOCOL_VERSION,\n  VERSION_SUBPROTOCOL,\n  PAIRING_CODE_REGEX,\n  WS_CLOSE_TOKEN_MISMATCH,\n} from '../bridge/wireProtocol.js';\nimport * as term from './term.js';\n\nconst DEFAULT_PORT = 9224;\nconst DEFAULT_TTL_MS = 60_000; // 60-second pairing window\nconst DEFAULT_MAX_ATTEMPTS = 3; // 3-attempt lockout\n\n// Same message as src/ws/server.ts. Duplicated here because we deliver\n// the message in the foreground install flow (PORT_HELD on `serve`'s server is\n// async; here it's synchronous to a customer staring at their terminal).\nconst PORT_HELD_MESSAGE =\n  'Another MCP client is using the Darwinium bridge on port 9224. ' +\n  'Close other Claude Desktop / Claude Code instances and retry, ' +\n  'or run `lsof -i:9224` to find the holding process.';\n\n/** Public API — caller picks the prompt-copy variant via `mode`. */\nexport interface OobPairOptions {\n  /** Picks the prompt-verb copy: install (\"Open ... popup\") vs rotate (\"click Re-pair\"). */\n  mode: 'install' | 'rotate';\n  /** 64-hex token to deliver in the {type:'paired'} frame on successful pair. */\n  expectedToken: string;\n  /** Override the 9224 default — primarily for tests. */\n  port?: number;\n  /** Override the 60_000 default — primarily for tests. */\n  ttlMs?: number;\n  /** Override the 3 default — primarily for tests. */\n  maxAttempts?: number;\n}\n\n/** Result returned on a successful pair (caller's promise resolves with this). */\nexport interface OobPairResult {\n  paired: true;\n}\n\n/** 6-digit zero-padded random pairing code via CSPRNG. */\nfunction generateCode(): string {\n  return String(randomInt(0, 1_000_000)).padStart(6, '0');\n}\n\n/** Print the boxed pairing prompt + waiting line. */\nfunction printPairingPrompt(code: string, mode: 'install' | 'rotate'): void {\n  if (mode === 'install') {\n    term.info('pairing armed. Open the Darwinium Portal MCP extension popup');\n    console.error('            and enter this 6-digit code within 60 seconds.');\n  } else {\n    term.info('pairing armed. Open the Darwinium Portal MCP extension popup,');\n    console.error('            click \"Re-pair\", and enter this 6-digit code within 60 seconds.');\n  }\n  console.error('');\n  // Box content — inner padding column 19.\n  // \"   Pairing code:  \" is 3 + 14 + 2 = 19 chars; code follows; row right-padded.\n  // \"   Expires:       60s\" — same column-19 left edge for vertical rhythm.\n  term.box(['', `   Pairing code:  ${code}`, `   Expires:       60s`, '']);\n  console.error('');\n  term.info('waiting for popup... (Ctrl+C to abort)');\n}\n\n/** Print the re-arm prompt after code expiry or lockout. */\nfunction printRearmPrompt(): void {\n  // run() resolves on the first successful pair, so this prompt only fires\n  // when no pair has happened in the current 60s window — a counter would\n  // always print \"0 successful pairings\" and read like a bug to a customer.\n  term.info('code expired.');\n  term.info('press Enter to generate a new one, or Ctrl+C to abort.');\n}\n\n/** Wait for the user to press Enter (returns Promise<void>). */\nfunction waitForEnter(): Promise<void> {\n  return new Promise((resolve) => {\n    process.stdin.resume();\n    // `once` instead of `on` so a duplicate invocation only attaches a\n    // one-shot listener — the re-entrancy guard in handleExpiry already\n    // prevents the duplicate, but defense-in-depth here means a future\n    // caller cannot accidentally leak a stdin 'data' listener.\n    process.stdin.once('data', () => {\n      process.stdin.pause();\n      resolve();\n    });\n  });\n}\n\n/** Parse the offered subprotocol list from an upgrade request header. */\nfunction offeredProtocols(req: IncomingMessage): string[] {\n  const header = req.headers['sec-websocket-protocol'];\n  if (!header) return [];\n  // Header may be `string` (comma-joined) or `string[]` per Node ws semantics.\n  const raw = Array.isArray(header) ? header.join(',') : header;\n  return raw\n    .split(',')\n    .map((s) => s.trim())\n    .filter((s) => s.length > 0);\n}\n\n/** Reclaim port 9224 from any stale holder, then bail if still bound. */\nasync function reclaimPort(port: number): Promise<void> {\n  killProcessOnPort(port);\n  for (let i = 0; i < 50; i++) {\n    if (!(await isPortInUse(port))) return;\n    await wait(100);\n  }\n  console.error(PORT_HELD_MESSAGE);\n  process.exit(1);\n}\n\n/**\n * Run the foreground OOB pairing flow until a successful pair, expiry-without-\n * Enter (treated as Ctrl+C), or SIGINT.\n *\n * Resolves with `{paired: true}` on success. Process-exits 130 on SIGINT.\n * Process-exits 1 on unrecoverable port-bind failure.\n */\nexport async function run(opts: OobPairOptions): Promise<OobPairResult> {\n  const port = opts.port ?? DEFAULT_PORT;\n  const ttlMs = opts.ttlMs ?? DEFAULT_TTL_MS;\n  const maxAttempts = opts.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;\n\n  await reclaimPort(port);\n\n  // SIGINT — abort cleanly with a clear \"nothing was paired\" message.\n  const sigintHandler = () => {\n    console.error('');\n    term.info('aborted by user. No token was paired.');\n    term.info('re-run `npx @darwinium/portal-mcp install` to try again.');\n    process.exit(130);\n  };\n  process.on('SIGINT', sigintHandler);\n\n  let armedCode: string | null = null;\n  let attempts = 0;\n\n  return new Promise<OobPairResult>((resolve, reject) => {\n    const wss = new WebSocketServer({\n      port,\n      host: '127.0.0.1',\n      handleProtocols: (offered: Set<string>, _req) => {\n        const protocols = [...offered];\n        const hasVersion = protocols.includes(VERSION_SUBPROTOCOL);\n        const hasPairShape = protocols.some((p) => PAIRING_CODE_REGEX.test(p));\n        if (!hasVersion || !hasPairShape) return false; // → HTTP 401\n        // Return ONLY the version subprotocol; NEVER echo the code.\n        return VERSION_SUBPROTOCOL;\n      },\n    });\n\n    let expiryTimer: NodeJS.Timeout | null = null;\n    // Re-entrancy guard. clearTimeout cannot un-queue an already-fired\n    // setTimeout callback, so the lockout-driven handleExpiry can race\n    // the timer-driven handleExpiry. Without this flag, both invocations\n    // would call waitForEnter(), register two stdin listeners, and leak\n    // the one whose promise never resolves.\n    let expiryInProgress = false;\n\n    const armCode = (): void => {\n      armedCode = generateCode();\n      attempts = 0;\n      printPairingPrompt(armedCode, opts.mode);\n      if (expiryTimer) clearTimeout(expiryTimer);\n      expiryTimer = setTimeout(() => {\n        void handleExpiry();\n      }, ttlMs);\n    };\n\n    const handleExpiry = async (): Promise<void> => {\n      if (expiryInProgress) return;\n      expiryInProgress = true;\n      armedCode = null;\n      printRearmPrompt();\n      try {\n        await waitForEnter();\n      } catch (err) {\n        expiryInProgress = false;\n        reject(err as Error);\n        return;\n      }\n      expiryInProgress = false;\n      armCode();\n    };\n\n    wss.on('connection', (ws: WebSocket, req: IncomingMessage) => {\n      const protocols = offeredProtocols(req);\n      const offeredPair = protocols.find((p) => PAIRING_CODE_REGEX.test(p));\n      if (armedCode === null) {\n        ws.close(WS_CLOSE_TOKEN_MISMATCH, 'pairing not armed');\n        return;\n      }\n      if (offeredPair !== `pair.${armedCode}`) {\n        attempts += 1;\n        if (attempts >= maxAttempts) {\n          ws.close(WS_CLOSE_TOKEN_MISMATCH, 'too many attempts');\n          term.warn(`wrong code (attempt ${attempts} of ${maxAttempts}).`);\n          // Trigger expiry path immediately — re-arm gates on Enter.\n          if (expiryTimer) clearTimeout(expiryTimer);\n          armedCode = null;\n          void handleExpiry();\n          return;\n        }\n        ws.close(WS_CLOSE_TOKEN_MISMATCH, 'wrong code');\n        term.warn(`wrong code (attempt ${attempts} of ${maxAttempts}).`);\n        return;\n      }\n      // Match — deliver token and close cleanly.\n      const frame = JSON.stringify({\n        type: 'paired',\n        token: opts.expectedToken,\n        version: PROTOCOL_VERSION,\n      });\n      ws.send(frame);\n      ws.close(1000, 'paired');\n      if (expiryTimer) clearTimeout(expiryTimer);\n      armedCode = null;\n      process.removeListener('SIGINT', sigintHandler);\n      // Close the server BEFORE resolving so port 9224 is released for any\n      // subsequent `serve` start that the customer may run.\n      wss.close(() => {\n        resolve({ paired: true });\n      });\n    });\n\n    wss.on('error', (err: Error) => {\n      reject(err);\n    });\n\n    wss.on('listening', () => {\n      armCode();\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,oBAAoB,KAAK,KAAK,GAAG,SAAS,EAAE,WAAW,wBAAwB,QAAQ;;;;;;;;;;;;;;AAepG,SAAgB,aAAa,cAA4B;AACvD,KAAI,QAAQ,aAAa,QAAS;AAClC,KAAI,CAAC,GAAG,WAAW,kBAAkB,CAAE;AACvC,KAAI,GAAG,WAAW,aAAa,EAAE;AAC/B,OAAU,oCAAoC,kBAAkB,yCAAyC;AACzG;;AAIF,IAAG,UAAU,KAAK,QAAQ,aAAa,EAAE;EAAE,WAAW;EAAM,MAAM;EAAO,CAAC;AAC1E,IAAG,WAAW,mBAAmB,aAAa;AAC9C,IAAQ,uBAAuB,kBAAkB,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACNxE,MAAM,eAAe;AACrB,MAAM,iBAAiB;AACvB,MAAM,uBAAuB;AAK7B,MAAM,oBACJ;;AAwBF,SAAS,eAAuB;AAC9B,QAAO,OAAO,UAAU,GAAG,IAAU,CAAC,CAAC,SAAS,GAAG,IAAI;;;AAIzD,SAAS,mBAAmB,MAAc,MAAkC;AAC1E,KAAI,SAAS,WAAW;AACtB,OAAU,+DAA+D;AACzE,UAAQ,MAAM,6DAA6D;QACtE;AACL,OAAU,gEAAgE;AAC1E,UAAQ,MAAM,gFAA8E;;AAE9F,SAAQ,MAAM,GAAG;AAIjB,KAAS;EAAC;EAAI,qBAAqB;EAAQ;EAAyB;EAAG,CAAC;AACxE,SAAQ,MAAM,GAAG;AACjB,MAAU,yCAAyC;;;AAIrD,SAAS,mBAAyB;AAIhC,MAAU,gBAAgB;AAC1B,MAAU,yDAAyD;;;AAIrE,SAAS,eAA8B;AACrC,QAAO,IAAI,SAAS,YAAY;AAC9B,UAAQ,MAAM,QAAQ;AAKtB,UAAQ,MAAM,KAAK,cAAc;AAC/B,WAAQ,MAAM,OAAO;AACrB,YAAS;IACT;GACF;;;AAIJ,SAAS,iBAAiB,KAAgC;CACxD,MAAM,SAAS,IAAI,QAAQ;AAC3B,KAAI,CAAC,OAAQ,QAAO,EAAE;AAGtB,SADY,MAAM,QAAQ,OAAO,GAAG,OAAO,KAAK,IAAI,GAAG,QAEpD,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,QAAQ,MAAM,EAAE,SAAS,EAAE;;;AAIhC,eAAe,YAAY,MAA6B;AACtD,mBAAkB,KAAK;AACvB,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;AAC3B,MAAI,CAAE,MAAM,YAAY,KAAK,CAAG;AAChC,QAAM,KAAK,IAAI;;AAEjB,SAAQ,MAAM,kBAAkB;AAChC,SAAQ,KAAK,EAAE;;;;;;;;;AAUjB,eAAsB,IAAI,MAA8C;CACtE,MAAM,OAAO,KAAK,QAAQ;CAC1B,MAAM,QAAQ,KAAK,SAAS;CAC5B,MAAM,cAAc,KAAK,eAAe;AAExC,OAAM,YAAY,KAAK;CAGvB,MAAM,sBAAsB;AAC1B,UAAQ,MAAM,GAAG;AACjB,OAAU,wCAAwC;AAClD,OAAU,2DAA2D;AACrE,UAAQ,KAAK,IAAI;;AAEnB,SAAQ,GAAG,UAAU,cAAc;CAEnC,IAAI,YAA2B;CAC/B,IAAI,WAAW;AAEf,QAAO,IAAI,SAAwB,SAAS,WAAW;EACrD,MAAM,MAAM,IAAI,gBAAgB;GAC9B;GACA,MAAM;GACN,kBAAkB,SAAsB,SAAS;IAC/C,MAAM,YAAY,CAAC,GAAG,QAAQ;IAC9B,MAAM,aAAa,UAAU,SAAS,oBAAoB;IAC1D,MAAM,eAAe,UAAU,MAAM,MAAM,mBAAmB,KAAK,EAAE,CAAC;AACtE,QAAI,CAAC,cAAc,CAAC,aAAc,QAAO;AAEzC,WAAO;;GAEV,CAAC;EAEF,IAAI,cAAqC;EAMzC,IAAI,mBAAmB;EAEvB,MAAM,gBAAsB;AAC1B,eAAY,cAAc;AAC1B,cAAW;AACX,sBAAmB,WAAW,KAAK,KAAK;AACxC,OAAI,YAAa,cAAa,YAAY;AAC1C,iBAAc,iBAAiB;AAC7B,IAAK,cAAc;MAClB,MAAM;;EAGX,MAAM,eAAe,YAA2B;AAC9C,OAAI,iBAAkB;AACtB,sBAAmB;AACnB,eAAY;AACZ,qBAAkB;AAClB,OAAI;AACF,UAAM,cAAc;YACb,KAAK;AACZ,uBAAmB;AACnB,WAAO,IAAa;AACpB;;AAEF,sBAAmB;AACnB,YAAS;;AAGX,MAAI,GAAG,eAAe,IAAe,QAAyB;GAE5D,MAAM,cADY,iBAAiB,IACN,CAAC,MAAM,MAAM,mBAAmB,KAAK,EAAE,CAAC;AACrE,OAAI,cAAc,MAAM;AACtB,OAAG,MAAM,yBAAyB,oBAAoB;AACtD;;AAEF,OAAI,gBAAgB,QAAQ,aAAa;AACvC,gBAAY;AACZ,QAAI,YAAY,aAAa;AAC3B,QAAG,MAAM,yBAAyB,oBAAoB;AACtD,UAAU,uBAAuB,SAAS,MAAM,YAAY,IAAI;AAEhE,SAAI,YAAa,cAAa,YAAY;AAC1C,iBAAY;AACZ,KAAK,cAAc;AACnB;;AAEF,OAAG,MAAM,yBAAyB,aAAa;AAC/C,SAAU,uBAAuB,SAAS,MAAM,YAAY,IAAI;AAChE;;GAGF,MAAM,QAAQ,KAAK,UAAU;IAC3B,MAAM;IACN,OAAO,KAAK;IACZ,SAAS;IACV,CAAC;AACF,MAAG,KAAK,MAAM;AACd,MAAG,MAAM,KAAM,SAAS;AACxB,OAAI,YAAa,cAAa,YAAY;AAC1C,eAAY;AACZ,WAAQ,eAAe,UAAU,cAAc;AAG/C,OAAI,YAAY;AACd,YAAQ,EAAE,QAAQ,MAAM,CAAC;KACzB;IACF;AAEF,MAAI,GAAG,UAAU,QAAe;AAC9B,UAAO,IAAI;IACX;AAEF,MAAI,GAAG,mBAAmB;AACxB,YAAS;IACT;GACF"}

package/dist/bin/portal-mcp.js

@@ -0,0 +1,38 @@
+#!/usr/bin/env node
+import { Command } from "commander";
+
+//#region src/version.ts
+const VERSION = "0.0.2";
+
+//#endregion
+//#region src/bin/portal-mcp.ts
+console.log = console.error;
+console.info = console.error;
+console.debug = console.error;
+console.warn = console.error;
+const program = new Command();
+program.name("portal-mcp").version(VERSION);
+program.command("serve", { isDefault: true }).description("Run as MCP stdio server (default subcommand). Binds WS server on 127.0.0.1:9224 for the extension bridge.").action(async () => {
+	const { runServer } = await import("./server-CuNr9ZtJ.js");
+	await runServer();
+});
+program.command("install").description("Install Darwinium Portal MCP — writes binary, token, config, and OOB-pairs the extension").action(async () => {
+	const { runInstall } = await import("./install-BhzwhhI-.js");
+	await runInstall({});
+});
+program.command("doctor").description("Self-diagnostic: pass/fail across binary, token, config, extension, port").option("--json", "Emit machine-readable JSON for support tickets").action(async (opts) => {
+	const { runDoctor } = await import("./doctor-D7BbIXN2.js");
+	await runDoctor(opts);
+});
+program.command("rotate-token").description("Generate a new token + fresh OOB pairing code; old token rejects with WS 4401").action(async () => {
+	const { runRotateToken } = await import("./rotate-Dzf8pwua.js");
+	await runRotateToken();
+});
+program.parseAsync(process.argv).catch((err) => {
+	console.error(`portal-mcp fatal: ${err.message}`);
+	process.exit(1);
+});
+
+//#endregion
+export { VERSION as t };
+//# sourceMappingURL=portal-mcp.js.map

package/dist/bin/portal-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal-mcp.js","names":[],"sources":["../../src/version.ts","../../src/bin/portal-mcp.ts"],"sourcesContent":["// AUTO-GENERATED by scripts/gen-version.mjs — do not edit by hand.\n// Regenerate with `yarn gen-version`; `yarn build` does it for you.\n//\n// This is the RELEASE version. For the bridge frame-format version see\n// PROTOCOL_VERSION in src/bridge/wireProtocol.ts — they are independent.\nexport const VERSION = '0.0.2';\n","#!/usr/bin/env node\n\n// STDOUT DISCIPLINE — MUST be the FIRST executable statements before any imports\n// that may log on load. Any console.log / .info / .debug / .warn is re-routed to\n// stderr to keep stdout pure JSON-RPC for MCP host parsing.\nconsole.log = console.error;\nconsole.info = console.error;\nconsole.debug = console.error;\nconsole.warn = console.error;\n\nimport { Command } from 'commander';\n\nimport { VERSION } from '../version.js';\n\nconst program = new Command();\nprogram.name('portal-mcp').version(VERSION);\n\nprogram\n  .command('serve', { isDefault: true })\n  .description(\n    'Run as MCP stdio server (default subcommand). Binds WS server on 127.0.0.1:9224 for the extension bridge.',\n  )\n  .action(async () => {\n    const { runServer } = await import('../server/index.js');\n    await runServer();\n  });\n\nprogram\n  .command('install')\n  .description('Install Darwinium Portal MCP — writes binary, token, config, and OOB-pairs the extension')\n  .action(async () => {\n    const { runInstall } = await import('../install/install.js');\n    await runInstall({});\n  });\n\nprogram\n  .command('doctor')\n  .description('Self-diagnostic: pass/fail across binary, token, config, extension, port')\n  .option('--json', 'Emit machine-readable JSON for support tickets')\n  .action(async (opts: { json?: boolean }) => {\n    const { runDoctor } = await import('../install/doctor.js');\n    await runDoctor(opts);\n  });\n\nprogram\n  .command('rotate-token')\n  .description('Generate a new token + fresh OOB pairing code; old token rejects with WS 4401')\n  .action(async () => {\n    const { runRotateToken } = await import('../install/rotate.js');\n    await runRotateToken();\n  });\n\nprogram.parseAsync(process.argv).catch((err) => {\n  // Unhandled errors must go to stderr so stdout stays clean.\n  console.error(`portal-mcp fatal: ${(err as Error).message}`);\n  process.exit(1);\n});\n"],"mappings":";;;;AAKA,MAAa,UAAU;;;;ACAvB,QAAQ,MAAM,QAAQ;AACtB,QAAQ,OAAO,QAAQ;AACvB,QAAQ,QAAQ,QAAQ;AACxB,QAAQ,OAAO,QAAQ;AAMvB,MAAM,UAAU,IAAI,SAAS;AAC7B,QAAQ,KAAK,aAAa,CAAC,QAAQ,QAAQ;AAE3C,QACG,QAAQ,SAAS,EAAE,WAAW,MAAM,CAAC,CACrC,YACC,4GACD,CACA,OAAO,YAAY;CAClB,MAAM,EAAE,cAAc,MAAM,OAAO;AACnC,OAAM,WAAW;EACjB;AAEJ,QACG,QAAQ,UAAU,CAClB,YAAY,2FAA2F,CACvG,OAAO,YAAY;CAClB,MAAM,EAAE,eAAe,MAAM,OAAO;AACpC,OAAM,WAAW,EAAE,CAAC;EACpB;AAEJ,QACG,QAAQ,SAAS,CACjB,YAAY,2EAA2E,CACvF,OAAO,UAAU,iDAAiD,CAClE,OAAO,OAAO,SAA6B;CAC1C,MAAM,EAAE,cAAc,MAAM,OAAO;AACnC,OAAM,UAAU,KAAK;EACrB;AAEJ,QACG,QAAQ,eAAe,CACvB,YAAY,gFAAgF,CAC5F,OAAO,YAAY;CAClB,MAAM,EAAE,mBAAmB,MAAM,OAAO;AACxC,OAAM,gBAAgB;EACtB;AAEJ,QAAQ,WAAW,QAAQ,KAAK,CAAC,OAAO,QAAQ;AAE9C,SAAQ,MAAM,qBAAsB,IAAc,UAAU;AAC5D,SAAQ,KAAK,EAAE;EACf"}

package/dist/bin/rotate-Dzf8pwua.js

@@ -0,0 +1,64 @@
+import { i as EXTENSION_DIR, o as TOKEN_PATH } from "./killProcessOnPort-Bt5MA5Dv.js";
+import { a as info, c as lockAcl, o as ok, s as warn } from "./term-Bg7icwx7.js";
+import { r as regenerate } from "./store-B3e4WCLw.js";
+import { n as maybeMigrate, t as run } from "./oobPair-ybkkqrSh.js";
+import * as fs from "node:fs";
+import * as path from "node:path";
+
+//#region src/install/rotate.ts
+/**
+* `npx @darwinium/portal-mcp rotate-token` — token rotation.
+*
+* Sequence:
+*   1. migrate.maybeMigrate()  — in case the customer is rotating from a
+*      stale legacy install they never ran `install` against.
+*   2. If TOKEN_PATH is absent: warn + delegate to runInstall.
+*   3. token.regenerate({silent:true})  — fresh 64-hex via TOCTOU-safe wx+0o600.
+*   4. winAcl.lockAcl(TOKEN_PATH)  — re-lock the new file on Windows.
+*   5. oobPair.run({mode:'rotate', expectedToken: newToken})  — same flow as
+*      install but with the "click Re-pair" prompt-copy variant.
+*   6. Success summary + process.exit(0).
+*
+* Security:
+*   - Never echoes the new token (silent mode).
+*   - The audit-line "generated new token at <path>" fires inside
+*     generateAndWrite() so log-aggregators see the rotation.
+*
+* Old-token rejection is enforced by the next `serve` start — the WS
+* hello-frame check fails for the old token because TOKEN_PATH now holds
+* the new one. The smoke test verifies this.
+*/
+async function runRotateToken() {
+	info("rotate-token starting...");
+	maybeMigrate(TOKEN_PATH);
+	if (!fs.existsSync(TOKEN_PATH)) {
+		warn("no existing token to rotate. Running install instead.");
+		const { runInstall } = await import("./install-BhzwhhI-.js");
+		return runInstall({});
+	}
+	const token = regenerate({ silent: true });
+	const aclSuffix = process.platform === "win32" ? ", ACL locked" : "";
+	ok(`token (regenerated at ${TOKEN_PATH}, mode 0600${aclSuffix})`);
+	if (process.platform === "win32") {
+		const r = lockAcl(TOKEN_PATH);
+		if (!r.ok) warn(`Could not restrict ACLs: ${r.error}. Run \`${r.cmd}\` manually.`);
+	}
+	console.error("");
+	await run({
+		mode: "rotate",
+		expectedToken: token
+	});
+	let extVersion = "";
+	const manifestPath = path.join(EXTENSION_DIR, "manifest.json");
+	if (fs.existsSync(manifestPath)) try {
+		extVersion = JSON.parse(fs.readFileSync(manifestPath, "utf8")).version;
+	} catch {}
+	if (extVersion) ok(`paired with extension (extension version ${extVersion})`);
+	else ok("paired with extension");
+	info("rotate complete. The old token is no longer accepted.");
+	process.exit(0);
+}
+
+//#endregion
+export { runRotateToken };
+//# sourceMappingURL=rotate-Dzf8pwua.js.map

package/dist/bin/rotate-Dzf8pwua.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rotate-Dzf8pwua.js","names":["winAcl.lockAcl","oobPair.run"],"sources":["../../src/install/rotate.ts"],"sourcesContent":["/**\n * `npx @darwinium/portal-mcp rotate-token` — token rotation.\n *\n * Sequence:\n *   1. migrate.maybeMigrate()  — in case the customer is rotating from a\n *      stale legacy install they never ran `install` against.\n *   2. If TOKEN_PATH is absent: warn + delegate to runInstall.\n *   3. token.regenerate({silent:true})  — fresh 64-hex via TOCTOU-safe wx+0o600.\n *   4. winAcl.lockAcl(TOKEN_PATH)  — re-lock the new file on Windows.\n *   5. oobPair.run({mode:'rotate', expectedToken: newToken})  — same flow as\n *      install but with the \"click Re-pair\" prompt-copy variant.\n *   6. Success summary + process.exit(0).\n *\n * Security:\n *   - Never echoes the new token (silent mode).\n *   - The audit-line \"generated new token at <path>\" fires inside\n *     generateAndWrite() so log-aggregators see the rotation.\n *\n * Old-token rejection is enforced by the next `serve` start — the WS\n * hello-frame check fails for the old token because TOKEN_PATH now holds\n * the new one. The smoke test verifies this.\n */\nimport * as fs from 'node:fs';\nimport * as path from 'node:path';\nimport { TOKEN_PATH, EXTENSION_DIR } from '../token/paths.js';\nimport { regenerate } from '../token/store.js';\nimport * as term from './term.js';\nimport * as migrate from './migrate.js';\nimport * as winAcl from './winAcl.js';\nimport * as oobPair from './oobPair.js';\n\nexport async function runRotateToken(): Promise<void> {\n  term.info('rotate-token starting...');\n\n  // 1. Idempotent legacy token-path migration (in case install was never run).\n  migrate.maybeMigrate(TOKEN_PATH);\n\n  // 2. No-existing-token early branch — delegate to install.\n  if (!fs.existsSync(TOKEN_PATH)) {\n    term.warn('no existing token to rotate. Running install instead.');\n    const { runInstall } = await import('./install.js');\n    return runInstall({});\n  }\n\n  // 3. Regenerate (silent — token is delivered via OOB pairing).\n  const token = regenerate({ silent: true });\n  const aclSuffix = process.platform === 'win32' ? ', ACL locked' : '';\n  term.ok(`token (regenerated at ${TOKEN_PATH}, mode 0600${aclSuffix})`);\n\n  // 4. Re-apply Windows ACL on the freshly created file. unlink + re-create\n  // resets ACLs to inherited; we must re-lock.\n  if (process.platform === 'win32') {\n    const r = winAcl.lockAcl(TOKEN_PATH);\n    if (!r.ok) {\n      term.warn(`Could not restrict ACLs: ${r.error}. Run \\`${r.cmd}\\` manually.`);\n    }\n  }\n\n  console.error('');\n\n  // 5. OOB pair — `mode:'rotate'` picks the \"click Re-pair\" prompt copy.\n  await oobPair.run({ mode: 'rotate', expectedToken: token });\n\n  // 6. Success summary — include extension version when extension was previously extracted.\n  let extVersion = '';\n  const manifestPath = path.join(EXTENSION_DIR, 'manifest.json');\n  if (fs.existsSync(manifestPath)) {\n    try {\n      extVersion = JSON.parse(fs.readFileSync(manifestPath, 'utf8')).version as string;\n    } catch {\n      /* versionless success line is fine */\n    }\n  }\n  if (extVersion) {\n    term.ok(`paired with extension (extension version ${extVersion})`);\n  } else {\n    term.ok('paired with extension');\n  }\n  term.info('rotate complete. The old token is no longer accepted.');\n  process.exit(0);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,eAAsB,iBAAgC;AACpD,MAAU,2BAA2B;AAGrC,cAAqB,WAAW;AAGhC,KAAI,CAAC,GAAG,WAAW,WAAW,EAAE;AAC9B,OAAU,wDAAwD;EAClE,MAAM,EAAE,eAAe,MAAM,OAAO;AACpC,SAAO,WAAW,EAAE,CAAC;;CAIvB,MAAM,QAAQ,WAAW,EAAE,QAAQ,MAAM,CAAC;CAC1C,MAAM,YAAY,QAAQ,aAAa,UAAU,iBAAiB;AAClE,IAAQ,yBAAyB,WAAW,aAAa,UAAU,GAAG;AAItE,KAAI,QAAQ,aAAa,SAAS;EAChC,MAAM,IAAIA,QAAe,WAAW;AACpC,MAAI,CAAC,EAAE,GACL,MAAU,4BAA4B,EAAE,MAAM,UAAU,EAAE,IAAI,cAAc;;AAIhF,SAAQ,MAAM,GAAG;AAGjB,OAAMC,IAAY;EAAE,MAAM;EAAU,eAAe;EAAO,CAAC;CAG3D,IAAI,aAAa;CACjB,MAAM,eAAe,KAAK,KAAK,eAAe,gBAAgB;AAC9D,KAAI,GAAG,WAAW,aAAa,CAC7B,KAAI;AACF,eAAa,KAAK,MAAM,GAAG,aAAa,cAAc,OAAO,CAAC,CAAC;SACzD;AAIV,KAAI,WACF,IAAQ,4CAA4C,WAAW,GAAG;KAElE,IAAQ,wBAAwB;AAElC,MAAU,wDAAwD;AAClE,SAAQ,KAAK,EAAE"}

package/dist/bin/server-Beyo9MT8.js

@@ -0,0 +1,224 @@
+import { d as TOKEN_SUBPROTOCOL_REGEX, f as VERSION_SUBPROTOCOL, n as killProcessOnPort, r as wait, s as HELLO_TIMEOUT_MS, t as isPortInUse, u as TOKEN_SUBPROTOCOL_PREFIX } from "./killProcessOnPort-Bt5MA5Dv.js";
+import * as net from "node:net";
+import { WebSocketServer } from "ws";
+import { randomBytes } from "node:crypto";
+
+//#region src/ws/server.ts
+const WS_PORT = 9224;
+const WS_HOST = "127.0.0.1";
+/** How long the peer probe waits for a WS upgrade before calling the holder foreign. */
+const PEER_PROBE_TIMEOUT_MS = 1500;
+/** Interval between takeover attempts while another instance owns the port. */
+const TAKEOVER_POLL_MS = 1e3;
+/** Pending takeover timer, so shutdown can cancel it and let the process exit. */
+let takeoverTimer;
+/** Cancel any pending takeover poll. Called on MCP transport close. */
+function stopTakeoverPolling() {
+	if (takeoverTimer) {
+		clearTimeout(takeoverTimer);
+		takeoverTimer = void 0;
+	}
+}
+/**
+* Is the process holding WS_PORT a live portal-mcp that would accept our token?
+*
+* Distinguishes "a peer instance is legitimately serving the bridge" from "a
+* zombie or unrelated process is squatting on the port". Only the latter may be
+* killed — see createWsServer. A false negative here is destructive: it routes a
+* healthy peer into the kill branch.
+*
+* Speaks the upgrade by hand over a raw TCP socket rather than using the `ws`
+* client. Under `bun build --compile` the `ws` package's CLIENT is replaced by
+* Bun's native WebSocket, which cannot connect to our own server (immediate
+* 1006) — so a `ws`-based probe reports "not a peer" for every peer in the
+* shipped binary, while passing under plain node and JIT bun. `node:net` plus a
+* literal handshake behaves identically across all three. The `ws`
+* WebSocketServer used below is unaffected; only outbound clients are.
+*
+* Deliberately does NOT send the `hello` frame: hello is what makes the peer
+* call bridge.attach(), which would displace the browser extension's socket and
+* break the very session we are trying not to disturb. A 101 is the signal; the
+* peer drops the silent socket a second later, which is harmless.
+*/
+function probeBridgeHandshake(token) {
+	return new Promise((resolve) => {
+		let settled = false;
+		const socket = net.createConnection({
+			host: WS_HOST,
+			port: WS_PORT
+		});
+		const done = (isPeer) => {
+			if (settled) return;
+			settled = true;
+			clearTimeout(timer);
+			socket.destroy();
+			resolve(isPeer);
+		};
+		const timer = setTimeout(() => done(false), PEER_PROBE_TIMEOUT_MS);
+		socket.on("connect", () => {
+			socket.write(`GET / HTTP/1.1\r
+Host: ${WS_HOST}:${WS_PORT}\r\nUpgrade: websocket\r
+Connection: Upgrade\r
+Sec-WebSocket-Key: ${randomBytes(16).toString("base64")}\r\nSec-WebSocket-Version: 13\r
+Sec-WebSocket-Protocol: ${VERSION_SUBPROTOCOL}, ${TOKEN_SUBPROTOCOL_PREFIX}${token}\r\n\r
+`);
+		});
+		let head = "";
+		socket.on("data", (chunk) => {
+			head += chunk.toString("latin1");
+			const end = head.indexOf("\r\n\r\n");
+			if (end === -1) {
+				if (head.length > 8192) done(false);
+				return;
+			}
+			const status = head.slice(0, end).toLowerCase();
+			done(status.startsWith("http/1.1 101") && status.includes("darwinium.v1".toLowerCase()));
+		});
+		socket.on("error", () => done(false));
+		socket.on("close", () => done(false));
+	});
+}
+/**
+* Bind the WS server on 127.0.0.1:9224, or degrade gracefully if we cannot.
+*
+* Port ownership is a race between instances, so the outcome is one of three:
+*   - port free           → bind, this process owns the bridge.
+*   - held by a live peer → do NOT kill it. Serve MCP without the bridge and
+*                           poll to take over when the peer exits.
+*   - held by a zombie /
+*     foreign process     → killProcessOnPort + poll, then bind.
+*
+* Returns null in the degraded case; the process keeps serving MCP over stdio
+* either way, and never exits on a port conflict.
+*
+* Two-phase token-gated handshake:
+*   1. `handleProtocols` SHAPE GATE — accepts only offered subprotocol arrays that
+*      include `darwinium.v1` AND a `tok.*` entry; returns ONLY `'darwinium.v1'` in
+*      the response Sec-WebSocket-Protocol header (NEVER echoes the token —
+*      subprotocol headers are logged by browsers/proxies).
+*      Mismatched shape → HTTP 401 on upgrade (distinct from post-upgrade WS 4401).
+*   2. POST-UPGRADE TOKEN CHECK — `wss.on('connection')` starts a 1s timer for the
+*      `{type:'hello', token, version}` first frame. Mismatch / no-hello / malformed
+*      JSON → `ws.close(4401, ...)` produces a real WS close event.
+*
+* The bridge takes ownership of `ws` only after a successful hello check.
+*/
+async function createWsServer(bridge, expectedToken) {
+	if (await isPortInUse(9224)) {
+		if (await probeBridgeHandshake(expectedToken)) {
+			console.error("portal-mcp: another portal-mcp instance owns ws://127.0.0.1:9224 — serving MCP without the browser bridge; will take over if it exits.");
+			bridge.setOwnsPort(false);
+			scheduleTakeover(bridge, expectedToken);
+			return null;
+		}
+		killProcessOnPort(WS_PORT);
+		for (let i = 0; i < 50; i++) {
+			if (!await isPortInUse(9224)) break;
+			await wait(100);
+		}
+	}
+	const wss = await bindWsServer(bridge, expectedToken);
+	if (!wss) {
+		console.error("portal-mcp: could not bind ws://127.0.0.1:9224 — serving MCP without the browser bridge; will retry.");
+		bridge.setOwnsPort(false);
+		scheduleTakeover(bridge, expectedToken);
+		return null;
+	}
+	bridge.setOwnsPort(true);
+	return wss;
+}
+/**
+* Retry the bind every TAKEOVER_POLL_MS until it succeeds, then mark this
+* process the owner.
+*
+* Deliberately NOT unref'd. In the degraded path there is no WebSocketServer
+* holding the event loop open, so an unref'd timer lets the process fall out of
+* the loop the moment it finishes answering `initialize` — the MCP host sees
+* "Connection closed" a second after launch. Lifecycle is instead bound to the
+* MCP transport: runServer cancels this on close so the process still exits
+* promptly when the host goes away.
+*/
+function scheduleTakeover(bridge, expectedToken) {
+	takeoverTimer = setTimeout(() => {
+		(async () => {
+			if (await isPortInUse(9224)) {
+				scheduleTakeover(bridge, expectedToken);
+				return;
+			}
+			if (await bindWsServer(bridge, expectedToken)) {
+				takeoverTimer = void 0;
+				bridge.setOwnsPort(true);
+				console.error("portal-mcp: took over ws://127.0.0.1:9224 from the previous instance.");
+				return;
+			}
+			scheduleTakeover(bridge, expectedToken);
+		})();
+	}, TAKEOVER_POLL_MS);
+}
+/**
+* Bind the listener and wire the handshake handlers. Resolves null on a bind
+* failure (EADDRINUSE) so callers can degrade instead of crashing.
+*/
+function bindWsServer(bridge, expectedToken) {
+	return new Promise((resolve) => {
+		let settled = false;
+		const wss = new WebSocketServer({
+			port: WS_PORT,
+			host: WS_HOST,
+			handleProtocols: (offered, _req) => {
+				const protocols = [...offered];
+				const hasVersion = protocols.includes(VERSION_SUBPROTOCOL);
+				const hasTokenShape = protocols.some((p) => TOKEN_SUBPROTOCOL_REGEX.test(p));
+				if (!hasVersion || !hasTokenShape) return false;
+				return VERSION_SUBPROTOCOL;
+			}
+		});
+		wss.on("listening", () => {
+			console.error(`portal-mcp: WS server listening on ws://${WS_HOST}:${WS_PORT}`);
+			if (!settled) {
+				settled = true;
+				resolve(wss);
+			}
+		});
+		wss.on("connection", (ws, _req) => {
+			let helloOk = false;
+			const helloTimer = setTimeout(() => {
+				if (!helloOk) ws.close(4401, "no hello frame");
+			}, HELLO_TIMEOUT_MS);
+			ws.once("message", (raw) => {
+				try {
+					const msg = JSON.parse(raw.toString());
+					if (msg.type !== "hello" || msg.token !== expectedToken) {
+						clearTimeout(helloTimer);
+						ws.close(4401, "invalid token");
+						console.error("portal-mcp: WS rejected — hello mismatch");
+						return;
+					}
+					helloOk = true;
+					clearTimeout(helloTimer);
+					console.error("portal-mcp: WS client authenticated");
+					bridge.attach(ws);
+				} catch {
+					clearTimeout(helloTimer);
+					ws.close(4401, "malformed hello");
+				}
+			});
+			ws.on("close", (code) => console.error(`portal-mcp: WS client disconnected (code=${code})`));
+			ws.on("error", (err) => console.error(`portal-mcp: WS error: ${err.message}`));
+		});
+		wss.on("error", (err) => {
+			console.error(`portal-mcp: WS server error: ${err.message}`);
+			if (!settled) {
+				settled = true;
+				try {
+					wss.close();
+				} catch {}
+				resolve(null);
+			}
+		});
+	});
+}
+
+//#endregion
+export { probeBridgeHandshake as n, stopTakeoverPolling as r, createWsServer as t };
+//# sourceMappingURL=server-Beyo9MT8.js.map