@decibelsystems/tools 3.0.0 → 3.1.0

package/dist/pairCli.js

@@ -0,0 +1,97 @@
+// ============================================================================
+// `decibel-tools pair` — the only place a browser pairing is approved
+// ============================================================================
+// ADR-0012 (this repo): approval is unreachable from any browser. It happens
+// here, in a terminal on this machine, by typing the code HQ is showing — which
+// proves the person approving can see both sides. `pair list` deliberately does
+// NOT print pending codes: a code read from here instead of from HQ proves
+// nothing.
+// ============================================================================
+import { createInterface } from 'readline';
+import { approveByCode, listPairings, pairingsPath, revokePairing } from './pty/pairing.js';
+function ago(iso) {
+    if (!iso)
+        return '-';
+    const s = Math.max(0, Math.round((Date.now() - Date.parse(iso)) / 1000));
+    if (s < 60)
+        return `${s}s ago`;
+    if (s < 3600)
+        return `${Math.round(s / 60)}m ago`;
+    if (s < 86400)
+        return `${Math.round(s / 3600)}h ago`;
+    return `${Math.round(s / 86400)}d ago`;
+}
+function describe(p) {
+    return `${p.origin}  "${p.label}"  requested ${ago(p.requested_at)}`;
+}
+async function confirm(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    const answer = await new Promise((resolve) => rl.question(question, resolve));
+    rl.close();
+    return /^y(es)?$/i.test(answer.trim());
+}
+const USAGE = `Usage:
+  decibel-tools pair list              pending requests and approved browsers
+  decibel-tools pair approve <code>    approve the request showing <code> in HQ
+  decibel-tools pair revoke <id>       remove a pairing (closes its live sessions)
+
+Store: ${'~/.decibel/pairings.yaml'} (public keys only, mode 0600)`;
+export async function runPairCli(argv) {
+    const [cmd, arg, ...rest] = argv;
+    const yes = rest.includes('--yes') || arg === '--yes';
+    if (cmd === 'list') {
+        const all = listPairings();
+        const pending = all.filter((p) => p.status === 'pending');
+        const approved = all.filter((p) => p.status === 'approved');
+        console.log(`Pending (${pending.length}) — approve with the code HQ shows:`);
+        for (const p of pending)
+            console.log(`  ${p.id}  ${describe(p)}`);
+        console.log(`Approved (${approved.length}):`);
+        for (const p of approved)
+            console.log(`  ${p.id}  ${p.origin}  "${p.label}"  approved ${ago(p.approved_at)}, last used ${ago(p.last_used)}`);
+        if (!all.length)
+            console.log(`  (none — ${pairingsPath()})`);
+        return 0;
+    }
+    if (cmd === 'approve') {
+        if (!arg || !/^\d{6}$/.test(arg)) {
+            console.error('Type the 6-digit code HQ is showing: decibel-tools pair approve <code>');
+            return 2;
+        }
+        const pending = listPairings().filter((p) => p.status === 'pending');
+        const target = pending.find((p) => p.code === arg);
+        if (!target) {
+            console.error(`No pending request with code ${arg}. Requests expire after 10 minutes; start again in HQ.`);
+            return 1;
+        }
+        console.log(`Pairing request: ${describe(target)}`);
+        if (pending.length > 1) {
+            console.log(`WARNING: ${pending.length} requests are pending at once. If you did not start all of them, approve nothing and check HQ.`);
+        }
+        if (!yes) {
+            if (!process.stdin.isTTY) {
+                console.error('Refusing to approve without a terminal to confirm in. Re-run interactively (or pass --yes if you are certain).');
+                return 1;
+            }
+            if (!(await confirm(`Let ${target.origin} act on this machine's daemon? [y/N] `))) {
+                console.log('Not approved.');
+                return 1;
+            }
+        }
+        const p = await approveByCode(arg);
+        console.log(`Approved ${p.id} (${p.origin}). Revoke any time: decibel-tools pair revoke ${p.id}`);
+        return 0;
+    }
+    if (cmd === 'revoke') {
+        if (!arg) {
+            console.error('decibel-tools pair revoke <id>   (ids: decibel-tools pair list)');
+            return 2;
+        }
+        const removed = await revokePairing(arg);
+        console.log(removed ? `Revoked ${arg}. Its live sessions close within 5s.` : `No pairing ${arg}.`);
+        return removed ? 0 : 1;
+    }
+    console.log(USAGE);
+    return cmd ? 2 : 0;
+}
+//# sourceMappingURL=pairCli.js.map

package/dist/pairCli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairCli.js","sourceRoot":"","sources":["../src/pairCli.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,sEAAsE;AACtE,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,gFAAgF;AAChF,2EAA2E;AAC3E,WAAW;AACX,+EAA+E;AAE/E,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAgB,MAAM,kBAAkB,CAAC;AAE1G,SAAS,GAAG,CAAC,GAAuB;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IAClD,IAAI,CAAC,GAAG,KAAK;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IACrD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,GAAG,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,KAAK,gBAAgB,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,QAAgB;IACrC,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IACtF,EAAE,CAAC,KAAK,EAAE,CAAC;IACX,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,KAAK,GAAG;;;;;SAKL,0BAA0B,gCAAgC,CAAC;AAEpE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC;IAEtD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,MAAM,qCAAqC,CAAC,CAAC;QAC7E,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,aAAa,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,KAAK,eAAe,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7I,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,aAAa,YAAY,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;YACxF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,gCAAgC,GAAG,wDAAwD,CAAC,CAAC;YAC3G,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,oBAAoB,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,MAAM,gGAAgG,CAAC,CAAC;QAC1I,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACzB,OAAO,CAAC,KAAK,CAAC,gHAAgH,CAAC,CAAC;gBAChI,OAAO,CAAC,CAAC;YACX,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,MAAM,CAAC,MAAM,uCAAuC,CAAC,CAAC,EAAE,CAAC;gBAClF,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;gBAC7B,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,iDAAiD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClG,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;YACjF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,GAAG,sCAAsC,CAAC,CAAC,CAAC,cAAc,GAAG,GAAG,CAAC,CAAC;QACnG,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC"}

package/dist/peerBroker.d.ts

@@ -0,0 +1,40 @@
+export interface BrokerPeer {
+    id: string;
+    pid: number;
+    cwd: string;
+    git_root: string | null;
+    /** Controlling tty without /dev/ (e.g. "ttys004"); null when detached. */
+    tty?: string | null;
+    summary: string;
+    registered_at: string;
+    last_seen: string;
+}
+/** Live peers on this machine. Empty when the broker is down; never throws. */
+export declare function fetchPeers(): Promise<BrokerPeer[]>;
+export interface BrokerMessage {
+    id: number;
+    from_id: string;
+    to_id: string;
+    text: string;
+    sent_at: string;
+}
+export declare function brokerRegister(req: {
+    pid: number;
+    cwd: string;
+    git_root: string | null;
+    tty: string | null;
+    summary: string;
+}): Promise<{
+    id: string;
+}>;
+export declare function brokerHeartbeat(id: string): Promise<unknown>;
+export declare function brokerUnregister(id: string): Promise<unknown>;
+/** Undelivered messages for a peer. The broker marks them delivered as it returns them. */
+export declare function brokerPoll(id: string): Promise<BrokerMessage[]>;
+export declare function brokerSend(fromId: string, toId: string, text: string): Promise<{
+    ok: boolean;
+    error?: string;
+}>;
+export declare function getHumanPeerId(): string | null;
+export declare function setHumanPeerId(id: string | null): void;
+//# sourceMappingURL=peerBroker.d.ts.map

package/dist/peerBroker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peerBroker.d.ts","sourceRoot":"","sources":["../src/peerBroker.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+EAA+E;AAC/E,wBAAsB,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAaxD;AAMD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAaD,wBAAgB,cAAc,CAAC,GAAG,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAEvJ;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE5D;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE7D;AAED,2FAA2F;AAC3F,wBAAsB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAGrE;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAOrH;AAMD,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAE9C;AACD,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAEtD"}

package/dist/peerBroker.js

@@ -0,0 +1,70 @@
+// ============================================================================
+// claude-peers broker — the local peer bus (127.0.0.1:7899)
+// ============================================================================
+// Its own module so a reader of live peers (hosted sessions, the coordinator's
+// `sessions` action) does not import agentPresence, and with it supabase-js.
+// This module reaches localhost only.
+// ============================================================================
+const BROKER_URL = `http://127.0.0.1:${process.env.CLAUDE_PEERS_PORT ?? '7899'}`;
+/** Live peers on this machine. Empty when the broker is down; never throws. */
+export async function fetchPeers() {
+    try {
+        const res = await fetch(`${BROKER_URL}/list-peers`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ requester_id: 'decibel-presence', scope: 'machine' }),
+            signal: AbortSignal.timeout(2000),
+        });
+        if (!res.ok)
+            return [];
+        return (await res.json());
+    }
+    catch {
+        return [];
+    }
+}
+async function brokerPost(path, body, timeoutMs = 3000) {
+    const res = await fetch(`${BROKER_URL}${path}`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(body),
+        signal: AbortSignal.timeout(timeoutMs),
+    });
+    if (!res.ok)
+        throw new Error(`broker ${path}: HTTP ${res.status}`);
+    return (await res.json().catch(() => ({})));
+}
+export function brokerRegister(req) {
+    return brokerPost('/register', req);
+}
+export function brokerHeartbeat(id) {
+    return brokerPost('/heartbeat', { id });
+}
+export function brokerUnregister(id) {
+    return brokerPost('/unregister', { id });
+}
+/** Undelivered messages for a peer. The broker marks them delivered as it returns them. */
+export async function brokerPoll(id) {
+    const r = await brokerPost('/poll-messages', { id });
+    return r.messages ?? [];
+}
+export async function brokerSend(fromId, toId, text) {
+    try {
+        const r = await brokerPost('/send-message', { from_id: fromId, to_id: toId, text });
+        return { ok: r.ok === true, ...(r.error ? { error: r.error } : {}) };
+    }
+    catch (e) {
+        return { ok: false, error: e instanceof Error ? e.message : String(e) };
+    }
+}
+// The human peer's current broker id (set by src/chat.ts). It lives here, not
+// in chat.ts, so the session roster and the command dispatcher can read it
+// without importing the chat loop.
+let humanPeerId = null;
+export function getHumanPeerId() {
+    return humanPeerId;
+}
+export function setHumanPeerId(id) {
+    humanPeerId = id;
+}
+//# sourceMappingURL=peerBroker.js.map

package/dist/peerBroker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peerBroker.js","sourceRoot":"","sources":["../src/peerBroker.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,4DAA4D;AAC5D,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,sCAAsC;AACtC,+EAA+E;AAE/E,MAAM,UAAU,GAAG,oBAAoB,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,EAAE,CAAC;AAcjF,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,aAAa,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,kBAAkB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAC5E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAcD,KAAK,UAAU,UAAU,CAAI,IAAY,EAAE,IAAa,EAAE,SAAS,GAAG,IAAI;IACxE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,GAAG,IAAI,EAAE,EAAE;QAC9C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;KACvC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAM,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAA+F;IAC5H,OAAO,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,OAAO,UAAU,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,OAAO,UAAU,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAU;IACzC,MAAM,CAAC,GAAG,MAAM,UAAU,CAAiC,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACrF,OAAO,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,IAAY,EAAE,IAAY;IACzE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,UAAU,CAAmC,eAAe,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtH,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACvE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,mCAAmC;AACnC,IAAI,WAAW,GAAkB,IAAI,CAAC;AACtC,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC;AACrB,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,EAAiB;IAC9C,WAAW,GAAG,EAAE,CAAC;AACnB,CAAC"}

package/dist/peerBrokerSupervisor.d.ts

@@ -0,0 +1,21 @@
+export interface BrokerSupervisorConfig {
+    /** argv for the broker. command[0] must be an absolute path to an executable. */
+    command?: string[];
+}
+/** True when the broker answers /health. Never throws. */
+export declare function isBrokerHealthy(timeoutMs?: number): Promise<boolean>;
+/**
+ * Why a configured command cannot be used, or null when it can. Absolute paths
+ * only, for the same reason as extensions.allow: a bare name would be resolved
+ * against whatever PATH launchd handed the daemon, which is not the user's.
+ */
+export declare function validateBrokerCommand(command: unknown): string | null;
+/**
+ * Keep the broker up. Returns a stop function that ends supervision; it
+ * deliberately leaves a running broker running (see header).
+ */
+export declare function startBrokerSupervisor(config: BrokerSupervisorConfig | undefined, opts?: {
+    checkMs?: number;
+    logDir?: string;
+}): () => void;
+//# sourceMappingURL=peerBrokerSupervisor.d.ts.map

package/dist/peerBrokerSupervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peerBrokerSupervisor.d.ts","sourceRoot":"","sources":["../src/peerBrokerSupervisor.ts"],"names":[],"mappings":"AA2BA,MAAM,WAAW,sBAAsB;IACrC,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAMD,0DAA0D;AAC1D,wBAAsB,eAAe,CAAC,SAAS,SAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,CASrF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAWrE;AAYD;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,sBAAsB,GAAG,SAAS,EAC1C,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/C,MAAM,IAAI,CAsDZ"}

package/dist/peerBrokerSupervisor.js

@@ -0,0 +1,131 @@
+// ============================================================================
+// claude-peers broker supervision (ISS-0193)
+// ============================================================================
+// The broker was started by whichever peer happened to come up first. When that
+// was Claude Desktop, the broker lived in Desktop's process group, and quitting
+// Desktop took peer messaging down for every session on the machine. The
+// daemon already depends on the broker (chat.ts, agentCommands.ts,
+// agentPresence.ts), so it is the natural owner: this keeps one alive.
+//
+// Opt-in. With no `peers.broker.command` in ~/.decibel/config.yaml this does
+// nothing, which is the case for everyone who does not run claude-peers.
+//
+// The broker is spawned DETACHED: its own session, so it is not in the
+// daemon's process group, and launchd stopping the daemon does not stop it.
+// A daemon restart therefore never drops peers; the next daemon finds the
+// broker healthy and leaves it alone.
+// ============================================================================
+import { spawn } from 'child_process';
+import { existsSync, mkdirSync, openSync, closeSync } from 'fs';
+import { isAbsolute, join } from 'path';
+import { homedir } from 'os';
+import { log } from './config.js';
+const CHECK_MS = 30_000;
+const HEALTH_TIMEOUT_MS = 1_500;
+function brokerPort() {
+    return process.env.CLAUDE_PEERS_PORT ?? '7899';
+}
+/** True when the broker answers /health. Never throws. */
+export async function isBrokerHealthy(timeoutMs = HEALTH_TIMEOUT_MS) {
+    try {
+        const res = await fetch(`http://127.0.0.1:${brokerPort()}/health`, {
+            signal: AbortSignal.timeout(timeoutMs),
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Why a configured command cannot be used, or null when it can. Absolute paths
+ * only, for the same reason as extensions.allow: a bare name would be resolved
+ * against whatever PATH launchd handed the daemon, which is not the user's.
+ */
+export function validateBrokerCommand(command) {
+    if (!Array.isArray(command) || command.length === 0) {
+        return 'peers.broker.command must be a non-empty list';
+    }
+    if (!command.every((a) => typeof a === 'string' && a.length > 0)) {
+        return 'peers.broker.command entries must be non-empty strings';
+    }
+    const exe = command[0];
+    if (!isAbsolute(exe))
+        return `peers.broker.command[0] must be an absolute path, got "${exe}"`;
+    if (!existsSync(exe))
+        return `peers.broker.command[0] does not exist: ${exe}`;
+    return null;
+}
+function isAlive(pid) {
+    if (!pid)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Keep the broker up. Returns a stop function that ends supervision; it
+ * deliberately leaves a running broker running (see header).
+ */
+export function startBrokerSupervisor(config, opts = {}) {
+    if (!config?.command)
+        return () => { };
+    const problem = validateBrokerCommand(config.command);
+    if (problem) {
+        log(`Peers: broker supervision disabled: ${problem}`);
+        return () => { };
+    }
+    const [exe, ...args] = config.command;
+    const logDir = opts.logDir ?? join(homedir(), '.decibel', 'logs');
+    let stopped = false;
+    let checking = false;
+    let childPid;
+    const check = async () => {
+        if (stopped || checking)
+            return;
+        checking = true;
+        try {
+            if (await isBrokerHealthy())
+                return;
+            // A broker we started may still be binding its port. Give it until the
+            // next check rather than starting a second one that will lose the race.
+            if (isAlive(childPid))
+                return;
+            mkdirSync(logDir, { recursive: true });
+            const fd = openSync(join(logDir, 'peers-broker.log'), 'a');
+            try {
+                const child = spawn(exe, args, {
+                    detached: true,
+                    stdio: ['ignore', fd, fd],
+                    env: process.env,
+                });
+                child.on('error', (err) => log(`Peers: broker failed to start: ${err.message}`));
+                child.unref();
+                childPid = child.pid;
+                log(`Peers: broker was down, started it (PID ${child.pid})`);
+            }
+            finally {
+                closeSync(fd);
+            }
+        }
+        catch (err) {
+            log(`Peers: broker check failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        finally {
+            checking = false;
+        }
+    };
+    void check();
+    const timer = setInterval(() => void check(), opts.checkMs ?? CHECK_MS);
+    timer.unref?.();
+    log(`Peers: supervising the claude-peers broker on port ${brokerPort()}`);
+    return () => {
+        stopped = true;
+        clearInterval(timer);
+    };
+}
+//# sourceMappingURL=peerBrokerSupervisor.js.map

package/dist/peerBrokerSupervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peerBrokerSupervisor.js","sourceRoot":"","sources":["../src/peerBrokerSupervisor.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,6CAA6C;AAC7C,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,yEAAyE;AACzE,mEAAmE;AACnE,uEAAuE;AACvE,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,EAAE;AACF,uEAAuE;AACvE,4EAA4E;AAC5E,0EAA0E;AAC1E,sCAAsC;AACtC,+EAA+E;AAE/E,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAOhC,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC;AACjD,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAS,GAAG,iBAAiB;IACjE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,UAAU,EAAE,SAAS,EAAE;YACjE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,+CAA+C,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,wDAAwD,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAW,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,0DAA0D,GAAG,GAAG,CAAC;IAC9F,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,2CAA2C,GAAG,EAAE,CAAC;IAC9E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,GAAuB;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA0C,EAC1C,OAA8C,EAAE;IAEhD,IAAI,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,OAAO,EAAE,CAAC;QACZ,GAAG,CAAC,uCAAuC,OAAO,EAAE,CAAC,CAAC;QACtD,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAElE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAA4B,CAAC;IAEjC,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,IAAI,OAAO,IAAI,QAAQ;YAAE,OAAO;QAChC,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC;YACH,IAAI,MAAM,eAAe,EAAE;gBAAE,OAAO;YACpC,uEAAuE;YACvE,wEAAwE;YACxE,IAAI,OAAO,CAAC,QAAQ,CAAC;gBAAE,OAAO;YAE9B,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,GAAG,CAAC,CAAC;YAC3D,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;oBAC7B,QAAQ,EAAE,IAAI;oBACd,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC;oBACzB,GAAG,EAAE,OAAO,CAAC,GAAG;iBACjB,CAAC,CAAC;gBACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,kCAAkC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACjF,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC;gBACrB,GAAG,CAAC,2CAA2C,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;YAC/D,CAAC;oBAAS,CAAC;gBACT,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;gBAAS,CAAC;YACT,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,KAAK,EAAE,CAAC;IACb,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,CAAC;IACxE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,GAAG,CAAC,sDAAsD,UAAU,EAAE,EAAE,CAAC,CAAC;IAE1E,OAAO,GAAG,EAAE;QACV,OAAO,GAAG,IAAI,CAAC;QACf,aAAa,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC"}

package/dist/projectPaths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projectPaths.d.ts","sourceRoot":"","sources":["../src/projectPaths.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAkCD;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,CAAC,CAYxB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAezC"}
+{"version":3,"file":"projectPaths.d.ts","sourceRoot":"","sources":["../src/projectPaths.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAiBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,aAAa,CAAC,CAYxB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,MAAM,EAAE,CAezC"}

package/dist/projectPaths.js

@@ -4,29 +4,11 @@
 // Helps MCP tools resolve project roots from project IDs.
 // Uses registry-based resolution with fallback to dynamic discovery.
 // ============================================================================
-import fs from 'fs';
 import path from 'path';
-import { resolveProject, listProjects } from './projectRegistry.js';
+import { resolveProject, listProjects, findDecibelDir } from './projectRegistry.js';
 // ============================================================================
 // Path Resolution Helpers
 // ============================================================================
-/**
- * Walk up directory tree looking for a .decibel folder
- */
-function findDecibelDir(start) {
-    let current = path.resolve(start);
-    while (true) {
-        const candidate = path.join(current, '.decibel');
-        if (fs.existsSync(candidate) && fs.statSync(candidate).isDirectory()) {
-            return current; // Return the project root, not the .decibel folder
-        }
-        const parent = path.dirname(current);
-        if (parent === current)
-            break;
-        current = parent;
-    }
-    return undefined;
-}
 /**
  * Get the project name from a project root directory
  */

package/dist/projectPaths.js.map

@@ -1 +1 @@
-{"version":3,"file":"projectPaths.js","sourceRoot":"","sources":["../src/projectPaths.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAC/E,0DAA0D;AAC1D,qEAAqE;AACrE,+EAA+E;AAE/E,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAgB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAYlF,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;GAEG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACrE,OAAO,OAAO,CAAC,CAAC,mDAAmD;QACrE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM;QAC9B,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,WAAmB;IAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,KAAK,GAAiB,cAAc,CAAC,SAAS,CAAC,CAAC;QACtD,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,EAAE;YACnB,WAAW,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE;YACnC,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wDAAwD;QACxD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,kBAAkB,GAAG,YAAY,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE9D,qDAAqD;IACrD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7E,MAAM,cAAc,GAAG,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAC1D,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"projectPaths.js","sourceRoot":"","sources":["../src/projectPaths.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAC/E,0DAA0D;AAC1D,qEAAqE;AACrE,+EAA+E;AAE/E,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAgB,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAYlG,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E;;GAEG;AACH,SAAS,qBAAqB,CAAC,WAAmB;IAChD,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACpC,CAAC;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,KAAK,GAAiB,cAAc,CAAC,SAAS,CAAC,CAAC;QACtD,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,EAAE;YACnB,WAAW,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE;YACnC,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wDAAwD;QACxD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,kBAAkB,GAAG,YAAY,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE9D,qDAAqD;IACrD,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7E,MAAM,cAAc,GAAG,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAC1D,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/projectRegistry.d.ts

@@ -50,6 +50,28 @@ export declare function listCandidatePaths(entry: ProjectEntry): string[];
  * at the right location.
  */
 export declare function getEffectivePath(entry: ProjectEntry): EffectivePath;
+/**
+ * Walk up directory tree looking for a .decibel folder.
+ *
+ * The global config directory ENDS the walk rather than merely being skipped.
+ * Skipping it was the first fix and it was not enough: the Windows CI leg then
+ * climbed straight past the fake HOME the test had set up and returned the real
+ * one above it (`C:\Users\runneradmin` -> project "RUNNER~1"). The general
+ * case is the same shape — a stray `.decibel` in an ancestor of every home
+ * directory, `/Users` or `C:\Users`, would be handed to every user on the
+ * machine as their project. Nothing above your home directory is your project,
+ * so reaching it means the answer is "no project", not "keep looking".
+ *
+ * Without this, any cwd under $HOME that is not itself a project resolved to a
+ * "project" rooted at HOME with an id of basename(HOME), and every write then
+ * landed in the directory all projects share (ISS-0177).
+ *
+ * This constrains discovery only. Explicit resolution — a registry entry,
+ * DECIBEL_PROJECT_ROOT, an absolute path — still resolves HOME for anyone who
+ * genuinely means it, and a real checkout under $HOME is still found, because
+ * the walk reaches it long before it reaches home.
+ */
+export declare function findDecibelDir(start: string): string | undefined;
 /**
  * Resolve a project ID or alias to its filesystem path.
  *

package/dist/projectRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projectRegistry.d.ts","sourceRoot":"","sources":["../src/projectRegistry.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,YAAY;IAC3B,0CAA0C;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,6FAA6F;IAC7F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mFAAmF;IACnF,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,WAAW,GAAG,cAAc,CAAC;AAE1E,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mBAAmB,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAuBD,wBAAgB,WAAW,IAAI,MAAM,CA8BpC;AAMD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,EAAE,CAUhE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAenE;AA4JD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CAiF9D;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,YAAY,EAAE,CAY7C;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,GAAG,mBAAmB,GAAG,eAAe,GAAG,2BAA2B,CAAC;IACtF,EAAE,EAAE,MAAM,CAAC;IACX,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,YAAY,EACnB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAChD,cAAc,CAsEhB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAa5D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CActE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAMD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9D;AAgCD,wBAAgB,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,MAAM,EAAE,CAuBnE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,UAAU,CA8D7E;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,YAAY,GAAG,SAAS,CAgD5D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAiBzD;AAMD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAErF;AAMD,MAAM,WAAW,oBAAoB;IACnC,iBAAiB;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,OAAO,EAAE,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,KAAK,MAAM,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,oBAAoB,CAgC5E;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CA4C1F"}
+{"version":3,"file":"projectRegistry.d.ts","sourceRoot":"","sources":["../src/projectRegistry.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,YAAY;IAC3B,0CAA0C;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,6FAA6F;IAC7F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mFAAmF;IACnF,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAClC;AAED,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,WAAW,GAAG,cAAc,CAAC;AAE1E,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mBAAmB,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAuBD,wBAAgB,WAAW,IAAI,MAAM,CA8BpC;AAMD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,EAAE,CAUhE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAenE;AAkKD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAgBhE;AAcD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,CAiF9D;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,YAAY,EAAE,CAY7C;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,GAAG,mBAAmB,GAAG,eAAe,GAAG,2BAA2B,CAAC;IACtF,EAAE,EAAE,MAAM,CAAC;IACX,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,YAAY,EACnB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAChD,cAAc,CAsEhB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAa5D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CActE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAMD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9D;AAgCD,wBAAgB,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,MAAM,EAAE,CAuBnE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,UAAU,CA8D7E;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,IAAI,YAAY,GAAG,SAAS,CAgD5D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAiBzD;AAMD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAErF;AAMD,MAAM,WAAW,oBAAoB;IACnC,iBAAiB;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,OAAO,EAAE,CAAC,GAAG,QAAQ,EAAE,MAAM,EAAE,KAAK,MAAM,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,oBAAoB,CAgC5E;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,GAAG,IAAI,CA4C1F"}

package/dist/projectRegistry.js

@@ -218,13 +218,69 @@ function saveRegistry(registry) {
 // Discovery Helpers
 // ============================================================================
 /**
- * Walk up directory tree looking for a .decibel folder
+ * The global Decibel config directory, ~/.decibel — home to projects.json,
+ * device.json, daemon.meta, config.yaml and the hooks. It is named exactly like
+ * a project's `.decibel/` but it is NOT a project, and the walk-up below must
+ * never return HOME as a project root (ISS-0177).
+ *
+ * Resolved per call rather than captured at import so it tracks $HOME, the way
+ * daemonConfig does.
+ */
+function globalConfigDir() {
+    return path.join(os.homedir(), '.decibel');
+}
+/**
+ * Do two paths name the same directory as the filesystem sees it?
+ *
+ * A string compare lies on Windows in two ways that both showed up in the CI
+ * run that found ISS-0177: cwd came back as the 8.3 short name
+ * (C:\Users\RUNNER~1) while os.homedir() returned C:\Users\runneradmin, and
+ * case can differ freely. realpath.native resolves the short name to the real
+ * one; the case fold is win32-only, since POSIX paths are case-sensitive.
  */
-function findDecibelDir(start) {
+function isSamePath(a, b) {
+    const canonical = (p) => {
+        let resolved = path.resolve(p);
+        try {
+            resolved = fs.realpathSync.native(resolved);
+        }
+        catch {
+            // Not on disk (yet) — the resolved form is the best we can do.
+        }
+        return process.platform === 'win32' ? resolved.toLowerCase() : resolved;
+    };
+    return canonical(a) === canonical(b);
+}
+/**
+ * Walk up directory tree looking for a .decibel folder.
+ *
+ * The global config directory ENDS the walk rather than merely being skipped.
+ * Skipping it was the first fix and it was not enough: the Windows CI leg then
+ * climbed straight past the fake HOME the test had set up and returned the real
+ * one above it (`C:\Users\runneradmin` -> project "RUNNER~1"). The general
+ * case is the same shape — a stray `.decibel` in an ancestor of every home
+ * directory, `/Users` or `C:\Users`, would be handed to every user on the
+ * machine as their project. Nothing above your home directory is your project,
+ * so reaching it means the answer is "no project", not "keep looking".
+ *
+ * Without this, any cwd under $HOME that is not itself a project resolved to a
+ * "project" rooted at HOME with an id of basename(HOME), and every write then
+ * landed in the directory all projects share (ISS-0177).
+ *
+ * This constrains discovery only. Explicit resolution — a registry entry,
+ * DECIBEL_PROJECT_ROOT, an absolute path — still resolves HOME for anyone who
+ * genuinely means it, and a real checkout under $HOME is still found, because
+ * the walk reaches it long before it reaches home.
+ */
+export function findDecibelDir(start) {
+    const globalDir = globalConfigDir();
     let current = path.resolve(start);
     while (true) {
         const candidate = path.join(current, '.decibel');
         if (fs.existsSync(candidate) && fs.statSync(candidate).isDirectory()) {
+            if (isSamePath(candidate, globalDir)) {
+                return undefined; // Reached ~/.decibel — the config dir, and the ceiling.
+            }
             return current; // Return the project root, not the .decibel folder
         }
         const parent = path.dirname(current);