@earendil-works/pi-coding-agent 0.85.0 → 0.86.0

package/dist/experimental/plugins/package.d.ts

@@ -1,18 +0,0 @@
-import { type FacetBundleArtifact } from "@earendil-works/chord/node";
-import type { ServerId } from "@earendil-works/pi-protocol";
-export interface ConfiguredServerPluginPackage {
-    readonly manifestPath: string;
-    build(): Promise<readonly FacetBundleArtifact[]>;
-}
-/** Persist an explicit plugin package selection or restore it for a later server generation. */
-export declare function restoreServerPluginPackageProfile(directory: string, serverId: ServerId, configuredPackagePaths?: readonly string[]): Promise<readonly string[]>;
-/** Read the explicit plugin selection stored for one durable Session. */
-export declare function readSessionPluginPackageProfile(directory: string, serverId: ServerId, sessionPath: string): Promise<readonly string[] | undefined>;
-/** Remove the plugin selection stored for one deleted Session. */
-export declare function removeSessionPluginPackageProfile(directory: string, serverId: ServerId, sessionPath: string): Promise<void>;
-/** Persist the plugin selection for one durable Session. */
-export declare function writeSessionPluginPackageProfile(directory: string, serverId: ServerId, sessionPath: string, packagePaths: readonly string[]): Promise<void>;
-/** Create a serialized server-owned builder for one configured plugin package. */
-export declare function createServerPluginPackage(directory: string, serverId: ServerId, packagePath: string): ConfiguredServerPluginPackage;
-export declare function normalizePluginPackagePaths(packagePaths: readonly string[]): readonly string[];
-//# sourceMappingURL=package.d.ts.map

package/dist/experimental/plugins/package.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"package.d.ts","sourceRoot":"","sources":["../../../src/experimental/plugins/package.ts"],"names":[],"mappings":"AAIA,OAAO,EAEN,KAAK,mBAAmB,EAExB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAK5D,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,KAAK,IAAI,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC;CACjD;AAED,gGAAgG;AAChG,wBAAsB,iCAAiC,CACtD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,QAAQ,EAClB,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GACxC,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAS5B;AAED,yEAAyE;AACzE,wBAAgB,+BAA+B,CAC9C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,MAAM,GACjB,OAAO,CAAC,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAExC;AAED,kEAAkE;AAClE,wBAAsB,iCAAiC,CACtD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,4DAA4D;AAC5D,wBAAgB,gCAAgC,CAC/C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,SAAS,MAAM,EAAE,GAC7B,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,kFAAkF;AAClF,wBAAgB,yBAAyB,CACxC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,QAAQ,EAClB,WAAW,EAAE,MAAM,GACjB,6BAA6B,CAwB/B;AAoDD,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAS9F","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { readFile, rm, writeFile } from \"node:fs/promises\";\nimport { basename, dirname, join, resolve } from \"node:path\";\nimport { bundleFacetPackage } from \"@earendil-works/chord/bundler\";\nimport {\n\tFACET_BUNDLE_MANIFEST_FILE,\n\ttype FacetBundleArtifact,\n\treadFacetBundleArtifact,\n} from \"@earendil-works/chord/node\";\nimport type { ServerId } from \"@earendil-works/pi-protocol\";\n\nconst PLUGIN_PACKAGE_PROFILE_VERSION = 1;\nconst DEFAULT_PLUGIN_FACETS = Object.freeze({ session: \"src/session.ts\", tui: \"src/tui.ts\" });\n\nexport interface ConfiguredServerPluginPackage {\n\treadonly manifestPath: string;\n\tbuild(): Promise<readonly FacetBundleArtifact[]>;\n}\n\n/** Persist an explicit plugin package selection or restore it for a later server generation. */\nexport async function restoreServerPluginPackageProfile(\n\tdirectory: string,\n\tserverId: ServerId,\n\tconfiguredPackagePaths?: readonly string[],\n): Promise<readonly string[]> {\n\tconst path = join(directory, `plugin-packages-${serverId}.json`);\n\tif (configuredPackagePaths === undefined) {\n\t\treturn (await readPluginPackageProfile(path, false)) ?? [];\n\t}\n\tconst packagePaths = normalizePluginPackagePaths(configuredPackagePaths);\n\tif (packagePaths.length === 0) await rm(path, { force: true });\n\telse await writePluginPackageProfile(path, packagePaths);\n\treturn packagePaths;\n}\n\n/** Read the explicit plugin selection stored for one durable Session. */\nexport function readSessionPluginPackageProfile(\n\tdirectory: string,\n\tserverId: ServerId,\n\tsessionPath: string,\n): Promise<readonly string[] | undefined> {\n\treturn readPluginPackageProfile(sessionPluginProfilePath(directory, serverId, sessionPath), true, sessionPath);\n}\n\n/** Remove the plugin selection stored for one deleted Session. */\nexport async function removeSessionPluginPackageProfile(\n\tdirectory: string,\n\tserverId: ServerId,\n\tsessionPath: string,\n): Promise<void> {\n\tawait rm(sessionPluginProfilePath(directory, serverId, sessionPath), { force: true });\n}\n\n/** Persist the plugin selection for one durable Session. */\nexport function writeSessionPluginPackageProfile(\n\tdirectory: string,\n\tserverId: ServerId,\n\tsessionPath: string,\n\tpackagePaths: readonly string[],\n): Promise<void> {\n\treturn writePluginPackageProfile(\n\t\tsessionPluginProfilePath(directory, serverId, sessionPath),\n\t\tnormalizePluginPackagePaths(packagePaths),\n\t\tsessionPath,\n\t);\n}\n\n/** Create a serialized server-owned builder for one configured plugin package. */\nexport function createServerPluginPackage(\n\tdirectory: string,\n\tserverId: ServerId,\n\tpackagePath: string,\n): ConfiguredServerPluginPackage {\n\tconst normalizedPackagePath = resolve(packagePath);\n\tconst outdir = join(directory, \"plugin-builds\", serverId, pluginBuildDirectoryName(normalizedPackagePath));\n\tconst manifestPath = join(outdir, FACET_BUNDLE_MANIFEST_FILE);\n\tlet buildTail = Promise.resolve();\n\treturn {\n\t\tmanifestPath,\n\t\tbuild() {\n\t\t\tconst operation = buildTail.then(async () => {\n\t\t\t\tconst result = await bundleFacetPackage({\n\t\t\t\t\tpackagePath: normalizedPackagePath,\n\t\t\t\t\toutdir,\n\t\t\t\t\tdefaultFacets: DEFAULT_PLUGIN_FACETS,\n\t\t\t\t});\n\t\t\t\tif (result.manifest.entries.tui === undefined) return [];\n\t\t\t\treturn [await readFacetBundleArtifact({ manifestPath: result.manifestPath, entry: \"tui\" })];\n\t\t\t});\n\t\t\tbuildTail = operation.then(\n\t\t\t\t() => undefined,\n\t\t\t\t() => undefined,\n\t\t\t);\n\t\t\treturn operation;\n\t\t},\n\t};\n}\n\nasync function readPluginPackageProfile(\n\tpath: string,\n\tallowEmpty: boolean,\n\tsessionPath?: string,\n): Promise<readonly string[] | undefined> {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(await readFile(path, \"utf8\"));\n\t} catch (error) {\n\t\tif (error instanceof Error && \"code\" in error && error.code === \"ENOENT\") return undefined;\n\t\tthrow new Error(`Could not read experimental plugin package profile ${path}`, { cause: error });\n\t}\n\tif (\n\t\ttypeof parsed !== \"object\" ||\n\t\tparsed === null ||\n\t\tArray.isArray(parsed) ||\n\t\tObject.keys(parsed).some(\n\t\t\t(key) => key !== \"version\" && key !== \"packagePaths\" && !(key === \"sessionPath\" && sessionPath !== undefined),\n\t\t) ||\n\t\t!(\"version\" in parsed) ||\n\t\tparsed.version !== PLUGIN_PACKAGE_PROFILE_VERSION ||\n\t\t(sessionPath === undefined\n\t\t\t? \"sessionPath\" in parsed\n\t\t\t: !(\"sessionPath\" in parsed) || parsed.sessionPath !== sessionPath) ||\n\t\t!(\"packagePaths\" in parsed) ||\n\t\t!Array.isArray(parsed.packagePaths) ||\n\t\t(!allowEmpty && parsed.packagePaths.length === 0) ||\n\t\tparsed.packagePaths.some((packagePath) => typeof packagePath !== \"string\" || packagePath.length === 0)\n\t) {\n\t\tthrow new Error(`Invalid experimental plugin package profile ${path}`);\n\t}\n\treturn normalizePluginPackagePaths(parsed.packagePaths as readonly string[]);\n}\n\nfunction writePluginPackageProfile(path: string, packagePaths: readonly string[], sessionPath?: string): Promise<void> {\n\treturn writeFile(\n\t\tpath,\n\t\t`${JSON.stringify(\n\t\t\t{\n\t\t\t\tversion: PLUGIN_PACKAGE_PROFILE_VERSION,\n\t\t\t\t...(sessionPath === undefined ? {} : { sessionPath }),\n\t\t\t\tpackagePaths,\n\t\t\t},\n\t\t\tnull,\n\t\t\t2,\n\t\t)}\\n`,\n\t\t{ encoding: \"utf8\", mode: 0o600 },\n\t);\n}\n\nexport function normalizePluginPackagePaths(packagePaths: readonly string[]): readonly string[] {\n\tconst normalized = packagePaths.map((packagePath) => {\n\t\tif (packagePath.length === 0) throw new Error(\"Plugin package path must not be empty\");\n\t\treturn resolve(packagePath);\n\t});\n\tif (new Set(normalized).size !== normalized.length) {\n\t\tthrow new Error(\"Plugin package paths must be unique\");\n\t}\n\treturn Object.freeze(normalized);\n}\n\nfunction sessionPluginProfilePath(directory: string, serverId: ServerId, sessionPath: string): string {\n\tconst hash = createHash(\"sha256\").update(sessionPath).digest(\"hex\").slice(0, 24);\n\treturn join(directory, `session-plugin-packages-${serverId}-${hash}.json`);\n}\n\nfunction pluginBuildDirectoryName(packagePath: string): string {\n\tconst packageDirectory = basename(packagePath) === \"package.json\" ? dirname(packagePath) : packagePath;\n\tconst base = basename(packageDirectory).replaceAll(/[^a-zA-Z0-9._-]/gu, \"-\") || \"plugin\";\n\tconst label = base.endsWith(\"-plugin\") ? base : `${base}-plugin`;\n\tconst hash = createHash(\"sha256\").update(packagePath).digest(\"hex\").slice(0, 12);\n\treturn `${label}-${hash}`;\n}\n"]}

package/dist/experimental/plugins/package.js

@@ -1,113 +0,0 @@
-import { createHash } from "node:crypto";
-import { readFile, rm, writeFile } from "node:fs/promises";
-import { basename, dirname, join, resolve } from "node:path";
-import { bundleFacetPackage } from "@earendil-works/chord/bundler";
-import { FACET_BUNDLE_MANIFEST_FILE, readFacetBundleArtifact, } from "@earendil-works/chord/node";
-const PLUGIN_PACKAGE_PROFILE_VERSION = 1;
-const DEFAULT_PLUGIN_FACETS = Object.freeze({ session: "src/session.ts", tui: "src/tui.ts" });
-/** Persist an explicit plugin package selection or restore it for a later server generation. */
-export async function restoreServerPluginPackageProfile(directory, serverId, configuredPackagePaths) {
-    const path = join(directory, `plugin-packages-${serverId}.json`);
-    if (configuredPackagePaths === undefined) {
-        return (await readPluginPackageProfile(path, false)) ?? [];
-    }
-    const packagePaths = normalizePluginPackagePaths(configuredPackagePaths);
-    if (packagePaths.length === 0)
-        await rm(path, { force: true });
-    else
-        await writePluginPackageProfile(path, packagePaths);
-    return packagePaths;
-}
-/** Read the explicit plugin selection stored for one durable Session. */
-export function readSessionPluginPackageProfile(directory, serverId, sessionPath) {
-    return readPluginPackageProfile(sessionPluginProfilePath(directory, serverId, sessionPath), true, sessionPath);
-}
-/** Remove the plugin selection stored for one deleted Session. */
-export async function removeSessionPluginPackageProfile(directory, serverId, sessionPath) {
-    await rm(sessionPluginProfilePath(directory, serverId, sessionPath), { force: true });
-}
-/** Persist the plugin selection for one durable Session. */
-export function writeSessionPluginPackageProfile(directory, serverId, sessionPath, packagePaths) {
-    return writePluginPackageProfile(sessionPluginProfilePath(directory, serverId, sessionPath), normalizePluginPackagePaths(packagePaths), sessionPath);
-}
-/** Create a serialized server-owned builder for one configured plugin package. */
-export function createServerPluginPackage(directory, serverId, packagePath) {
-    const normalizedPackagePath = resolve(packagePath);
-    const outdir = join(directory, "plugin-builds", serverId, pluginBuildDirectoryName(normalizedPackagePath));
-    const manifestPath = join(outdir, FACET_BUNDLE_MANIFEST_FILE);
-    let buildTail = Promise.resolve();
-    return {
-        manifestPath,
-        build() {
-            const operation = buildTail.then(async () => {
-                const result = await bundleFacetPackage({
-                    packagePath: normalizedPackagePath,
-                    outdir,
-                    defaultFacets: DEFAULT_PLUGIN_FACETS,
-                });
-                if (result.manifest.entries.tui === undefined)
-                    return [];
-                return [await readFacetBundleArtifact({ manifestPath: result.manifestPath, entry: "tui" })];
-            });
-            buildTail = operation.then(() => undefined, () => undefined);
-            return operation;
-        },
-    };
-}
-async function readPluginPackageProfile(path, allowEmpty, sessionPath) {
-    let parsed;
-    try {
-        parsed = JSON.parse(await readFile(path, "utf8"));
-    }
-    catch (error) {
-        if (error instanceof Error && "code" in error && error.code === "ENOENT")
-            return undefined;
-        throw new Error(`Could not read experimental plugin package profile ${path}`, { cause: error });
-    }
-    if (typeof parsed !== "object" ||
-        parsed === null ||
-        Array.isArray(parsed) ||
-        Object.keys(parsed).some((key) => key !== "version" && key !== "packagePaths" && !(key === "sessionPath" && sessionPath !== undefined)) ||
-        !("version" in parsed) ||
-        parsed.version !== PLUGIN_PACKAGE_PROFILE_VERSION ||
-        (sessionPath === undefined
-            ? "sessionPath" in parsed
-            : !("sessionPath" in parsed) || parsed.sessionPath !== sessionPath) ||
-        !("packagePaths" in parsed) ||
-        !Array.isArray(parsed.packagePaths) ||
-        (!allowEmpty && parsed.packagePaths.length === 0) ||
-        parsed.packagePaths.some((packagePath) => typeof packagePath !== "string" || packagePath.length === 0)) {
-        throw new Error(`Invalid experimental plugin package profile ${path}`);
-    }
-    return normalizePluginPackagePaths(parsed.packagePaths);
-}
-function writePluginPackageProfile(path, packagePaths, sessionPath) {
-    return writeFile(path, `${JSON.stringify({
-        version: PLUGIN_PACKAGE_PROFILE_VERSION,
-        ...(sessionPath === undefined ? {} : { sessionPath }),
-        packagePaths,
-    }, null, 2)}\n`, { encoding: "utf8", mode: 0o600 });
-}
-export function normalizePluginPackagePaths(packagePaths) {
-    const normalized = packagePaths.map((packagePath) => {
-        if (packagePath.length === 0)
-            throw new Error("Plugin package path must not be empty");
-        return resolve(packagePath);
-    });
-    if (new Set(normalized).size !== normalized.length) {
-        throw new Error("Plugin package paths must be unique");
-    }
-    return Object.freeze(normalized);
-}
-function sessionPluginProfilePath(directory, serverId, sessionPath) {
-    const hash = createHash("sha256").update(sessionPath).digest("hex").slice(0, 24);
-    return join(directory, `session-plugin-packages-${serverId}-${hash}.json`);
-}
-function pluginBuildDirectoryName(packagePath) {
-    const packageDirectory = basename(packagePath) === "package.json" ? dirname(packagePath) : packagePath;
-    const base = basename(packageDirectory).replaceAll(/[^a-zA-Z0-9._-]/gu, "-") || "plugin";
-    const label = base.endsWith("-plugin") ? base : `${base}-plugin`;
-    const hash = createHash("sha256").update(packagePath).digest("hex").slice(0, 12);
-    return `${label}-${hash}`;
-}
-//# sourceMappingURL=package.js.map

package/dist/experimental/plugins/package.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"package.js","sourceRoot":"","sources":["../../../src/experimental/plugins/package.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EACN,0BAA0B,EAE1B,uBAAuB,GACvB,MAAM,4BAA4B,CAAC;AAGpC,MAAM,8BAA8B,GAAG,CAAC,CAAC;AACzC,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;AAO9F,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACtD,SAAiB,EACjB,QAAkB,EAClB,sBAA0C,EACb;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,QAAQ,OAAO,CAAC,CAAC;IACjE,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,YAAY,GAAG,2BAA2B,CAAC,sBAAsB,CAAC,CAAC;IACzE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;;QAC1D,MAAM,yBAAyB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACzD,OAAO,YAAY,CAAC;AAAA,CACpB;AAED,yEAAyE;AACzE,MAAM,UAAU,+BAA+B,CAC9C,SAAiB,EACjB,QAAkB,EAClB,WAAmB,EACsB;IACzC,OAAO,wBAAwB,CAAC,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAAA,CAC/G;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACtD,SAAiB,EACjB,QAAkB,EAClB,WAAmB,EACH;IAChB,MAAM,EAAE,CAAC,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAAA,CACtF;AAED,4DAA4D;AAC5D,MAAM,UAAU,gCAAgC,CAC/C,SAAiB,EACjB,QAAkB,EAClB,WAAmB,EACnB,YAA+B,EACf;IAChB,OAAO,yBAAyB,CAC/B,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,EAC1D,2BAA2B,CAAC,YAAY,CAAC,EACzC,WAAW,CACX,CAAC;AAAA,CACF;AAED,kFAAkF;AAClF,MAAM,UAAU,yBAAyB,CACxC,SAAiB,EACjB,QAAkB,EAClB,WAAmB,EACa;IAChC,MAAM,qBAAqB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,wBAAwB,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC3G,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IAC9D,IAAI,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAClC,OAAO;QACN,YAAY;QACZ,KAAK,GAAG;YACP,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;oBACvC,WAAW,EAAE,qBAAqB;oBAClC,MAAM;oBACN,aAAa,EAAE,qBAAqB;iBACpC,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS;oBAAE,OAAO,EAAE,CAAC;gBACzD,OAAO,CAAC,MAAM,uBAAuB,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAAA,CAC5F,CAAC,CAAC;YACH,SAAS,GAAG,SAAS,CAAC,IAAI,CACzB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CACf,CAAC;YACF,OAAO,SAAS,CAAC;QAAA,CACjB;KACD,CAAC;AAAA,CACF;AAED,KAAK,UAAU,wBAAwB,CACtC,IAAY,EACZ,UAAmB,EACnB,WAAoB,EACqB;IACzC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,IACC,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CACvB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,cAAc,IAAI,CAAC,CAAC,GAAG,KAAK,aAAa,IAAI,WAAW,KAAK,SAAS,CAAC,CAC7G;QACD,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC;QACtB,MAAM,CAAC,OAAO,KAAK,8BAA8B;QACjD,CAAC,WAAW,KAAK,SAAS;YACzB,CAAC,CAAC,aAAa,IAAI,MAAM;YACzB,CAAC,CAAC,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,CAAC;QACpE,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC;QAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;QACnC,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,EACrG,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,2BAA2B,CAAC,MAAM,CAAC,YAAiC,CAAC,CAAC;AAAA,CAC7E;AAED,SAAS,yBAAyB,CAAC,IAAY,EAAE,YAA+B,EAAE,WAAoB,EAAiB;IACtH,OAAO,SAAS,CACf,IAAI,EACJ,GAAG,IAAI,CAAC,SAAS,CAChB;QACC,OAAO,EAAE,8BAA8B;QACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,YAAY;KACZ,EACD,IAAI,EACJ,CAAC,CACD,IAAI,EACL,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CACjC,CAAC;AAAA,CACF;AAED,MAAM,UAAU,2BAA2B,CAAC,YAA+B,EAAqB;IAC/F,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACpD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACvF,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC;IAAA,CAC5B,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAAA,CACjC;AAED,SAAS,wBAAwB,CAAC,SAAiB,EAAE,QAAkB,EAAE,WAAmB,EAAU;IACrG,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,OAAO,IAAI,CAAC,SAAS,EAAE,2BAA2B,QAAQ,IAAI,IAAI,OAAO,CAAC,CAAC;AAAA,CAC3E;AAED,SAAS,wBAAwB,CAAC,WAAmB,EAAU;IAC9D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,WAAW,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IACvG,MAAM,IAAI,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAC,UAAU,CAAC,mBAAmB,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC;IACzF,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS,CAAC;IACjE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,OAAO,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;AAAA,CAC1B","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { readFile, rm, writeFile } from \"node:fs/promises\";\nimport { basename, dirname, join, resolve } from \"node:path\";\nimport { bundleFacetPackage } from \"@earendil-works/chord/bundler\";\nimport {\n\tFACET_BUNDLE_MANIFEST_FILE,\n\ttype FacetBundleArtifact,\n\treadFacetBundleArtifact,\n} from \"@earendil-works/chord/node\";\nimport type { ServerId } from \"@earendil-works/pi-protocol\";\n\nconst PLUGIN_PACKAGE_PROFILE_VERSION = 1;\nconst DEFAULT_PLUGIN_FACETS = Object.freeze({ session: \"src/session.ts\", tui: \"src/tui.ts\" });\n\nexport interface ConfiguredServerPluginPackage {\n\treadonly manifestPath: string;\n\tbuild(): Promise<readonly FacetBundleArtifact[]>;\n}\n\n/** Persist an explicit plugin package selection or restore it for a later server generation. */\nexport async function restoreServerPluginPackageProfile(\n\tdirectory: string,\n\tserverId: ServerId,\n\tconfiguredPackagePaths?: readonly string[],\n): Promise<readonly string[]> {\n\tconst path = join(directory, `plugin-packages-${serverId}.json`);\n\tif (configuredPackagePaths === undefined) {\n\t\treturn (await readPluginPackageProfile(path, false)) ?? [];\n\t}\n\tconst packagePaths = normalizePluginPackagePaths(configuredPackagePaths);\n\tif (packagePaths.length === 0) await rm(path, { force: true });\n\telse await writePluginPackageProfile(path, packagePaths);\n\treturn packagePaths;\n}\n\n/** Read the explicit plugin selection stored for one durable Session. */\nexport function readSessionPluginPackageProfile(\n\tdirectory: string,\n\tserverId: ServerId,\n\tsessionPath: string,\n): Promise<readonly string[] | undefined> {\n\treturn readPluginPackageProfile(sessionPluginProfilePath(directory, serverId, sessionPath), true, sessionPath);\n}\n\n/** Remove the plugin selection stored for one deleted Session. */\nexport async function removeSessionPluginPackageProfile(\n\tdirectory: string,\n\tserverId: ServerId,\n\tsessionPath: string,\n): Promise<void> {\n\tawait rm(sessionPluginProfilePath(directory, serverId, sessionPath), { force: true });\n}\n\n/** Persist the plugin selection for one durable Session. */\nexport function writeSessionPluginPackageProfile(\n\tdirectory: string,\n\tserverId: ServerId,\n\tsessionPath: string,\n\tpackagePaths: readonly string[],\n): Promise<void> {\n\treturn writePluginPackageProfile(\n\t\tsessionPluginProfilePath(directory, serverId, sessionPath),\n\t\tnormalizePluginPackagePaths(packagePaths),\n\t\tsessionPath,\n\t);\n}\n\n/** Create a serialized server-owned builder for one configured plugin package. */\nexport function createServerPluginPackage(\n\tdirectory: string,\n\tserverId: ServerId,\n\tpackagePath: string,\n): ConfiguredServerPluginPackage {\n\tconst normalizedPackagePath = resolve(packagePath);\n\tconst outdir = join(directory, \"plugin-builds\", serverId, pluginBuildDirectoryName(normalizedPackagePath));\n\tconst manifestPath = join(outdir, FACET_BUNDLE_MANIFEST_FILE);\n\tlet buildTail = Promise.resolve();\n\treturn {\n\t\tmanifestPath,\n\t\tbuild() {\n\t\t\tconst operation = buildTail.then(async () => {\n\t\t\t\tconst result = await bundleFacetPackage({\n\t\t\t\t\tpackagePath: normalizedPackagePath,\n\t\t\t\t\toutdir,\n\t\t\t\t\tdefaultFacets: DEFAULT_PLUGIN_FACETS,\n\t\t\t\t});\n\t\t\t\tif (result.manifest.entries.tui === undefined) return [];\n\t\t\t\treturn [await readFacetBundleArtifact({ manifestPath: result.manifestPath, entry: \"tui\" })];\n\t\t\t});\n\t\t\tbuildTail = operation.then(\n\t\t\t\t() => undefined,\n\t\t\t\t() => undefined,\n\t\t\t);\n\t\t\treturn operation;\n\t\t},\n\t};\n}\n\nasync function readPluginPackageProfile(\n\tpath: string,\n\tallowEmpty: boolean,\n\tsessionPath?: string,\n): Promise<readonly string[] | undefined> {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(await readFile(path, \"utf8\"));\n\t} catch (error) {\n\t\tif (error instanceof Error && \"code\" in error && error.code === \"ENOENT\") return undefined;\n\t\tthrow new Error(`Could not read experimental plugin package profile ${path}`, { cause: error });\n\t}\n\tif (\n\t\ttypeof parsed !== \"object\" ||\n\t\tparsed === null ||\n\t\tArray.isArray(parsed) ||\n\t\tObject.keys(parsed).some(\n\t\t\t(key) => key !== \"version\" && key !== \"packagePaths\" && !(key === \"sessionPath\" && sessionPath !== undefined),\n\t\t) ||\n\t\t!(\"version\" in parsed) ||\n\t\tparsed.version !== PLUGIN_PACKAGE_PROFILE_VERSION ||\n\t\t(sessionPath === undefined\n\t\t\t? \"sessionPath\" in parsed\n\t\t\t: !(\"sessionPath\" in parsed) || parsed.sessionPath !== sessionPath) ||\n\t\t!(\"packagePaths\" in parsed) ||\n\t\t!Array.isArray(parsed.packagePaths) ||\n\t\t(!allowEmpty && parsed.packagePaths.length === 0) ||\n\t\tparsed.packagePaths.some((packagePath) => typeof packagePath !== \"string\" || packagePath.length === 0)\n\t) {\n\t\tthrow new Error(`Invalid experimental plugin package profile ${path}`);\n\t}\n\treturn normalizePluginPackagePaths(parsed.packagePaths as readonly string[]);\n}\n\nfunction writePluginPackageProfile(path: string, packagePaths: readonly string[], sessionPath?: string): Promise<void> {\n\treturn writeFile(\n\t\tpath,\n\t\t`${JSON.stringify(\n\t\t\t{\n\t\t\t\tversion: PLUGIN_PACKAGE_PROFILE_VERSION,\n\t\t\t\t...(sessionPath === undefined ? {} : { sessionPath }),\n\t\t\t\tpackagePaths,\n\t\t\t},\n\t\t\tnull,\n\t\t\t2,\n\t\t)}\\n`,\n\t\t{ encoding: \"utf8\", mode: 0o600 },\n\t);\n}\n\nexport function normalizePluginPackagePaths(packagePaths: readonly string[]): readonly string[] {\n\tconst normalized = packagePaths.map((packagePath) => {\n\t\tif (packagePath.length === 0) throw new Error(\"Plugin package path must not be empty\");\n\t\treturn resolve(packagePath);\n\t});\n\tif (new Set(normalized).size !== normalized.length) {\n\t\tthrow new Error(\"Plugin package paths must be unique\");\n\t}\n\treturn Object.freeze(normalized);\n}\n\nfunction sessionPluginProfilePath(directory: string, serverId: ServerId, sessionPath: string): string {\n\tconst hash = createHash(\"sha256\").update(sessionPath).digest(\"hex\").slice(0, 24);\n\treturn join(directory, `session-plugin-packages-${serverId}-${hash}.json`);\n}\n\nfunction pluginBuildDirectoryName(packagePath: string): string {\n\tconst packageDirectory = basename(packagePath) === \"package.json\" ? dirname(packagePath) : packagePath;\n\tconst base = basename(packageDirectory).replaceAll(/[^a-zA-Z0-9._-]/gu, \"-\") || \"plugin\";\n\tconst label = base.endsWith(\"-plugin\") ? base : `${base}-plugin`;\n\tconst hash = createHash(\"sha256\").update(packagePath).digest(\"hex\").slice(0, 12);\n\treturn `${label}-${hash}`;\n}\n"]}

package/dist/experimental/process.d.ts

@@ -1,20 +0,0 @@
-import { type ChildProcess } from "node:child_process";
-export declare const INTERNAL_PROCESS_ENV = "__PI_INTERNAL_SPAWN";
-export type InternalProcessRole = "coordinator" | "server" | "session-worker";
-/** Detect a directly executed source or unbundled internal-process module. */
-export declare function isDirectInternalProcessEntry(moduleUrl: string): boolean;
-/** Read and validate an internal process role without consuming it. */
-export declare function getInternalProcessRole(): InternalProcessRole | undefined;
-/** Read, validate, and remove the role so descendants do not inherit it. */
-export declare function consumeInternalProcessRole(): InternalProcessRole | undefined;
-export interface InternalProcessSpawnOptions {
-    readonly entryUrl?: URL;
-    readonly env?: NodeJS.ProcessEnv;
-}
-/** Spawn a detached Pi-owned process consistently across Node and compiled Bun. */
-export declare function spawnInternalProcess(role: InternalProcessRole, args: readonly string[], options?: InternalProcessSpawnOptions): ChildProcess;
-/** Force a spawned internal process to exit and wait until it can no longer take ownership. */
-export declare function terminateInternalProcess(child: ChildProcess): Promise<void>;
-export declare const MAX_CONTROL_LINE_BYTES: number;
-export declare function encodeControlLine(message: unknown): string;
-//# sourceMappingURL=process.d.ts.map

package/dist/experimental/process.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../src/experimental/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAS,MAAM,oBAAoB,CAAC;AAK9D,eAAO,MAAM,oBAAoB,wBAAwB,CAAC;AAE1D,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAE9E,8EAA8E;AAC9E,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAOvE;AAED,uEAAuE;AACvE,wBAAgB,sBAAsB,IAAI,mBAAmB,GAAG,SAAS,CAKxE;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,IAAI,mBAAmB,GAAG,SAAS,CAI5E;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACjC;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CACnC,IAAI,EAAE,mBAAmB,EACzB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,GAAE,2BAAgC,GACvC,YAAY,CAyBd;AAED,+FAA+F;AAC/F,wBAAsB,wBAAwB,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjF;AAkBD,eAAO,MAAM,sBAAsB,QAAoB,CAAC;AAExD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAI1D","sourcesContent":["import { type ChildProcess, spawn } from \"node:child_process\";\nimport { join, resolve } from \"node:path\";\nimport { fileURLToPath, pathToFileURL } from \"node:url\";\nimport { getPackageDir, isBunBinary, isBundledNode } from \"../config.ts\";\n\nexport const INTERNAL_PROCESS_ENV = \"__PI_INTERNAL_SPAWN\";\n\nexport type InternalProcessRole = \"coordinator\" | \"server\" | \"session-worker\";\n\n/** Detect a directly executed source or unbundled internal-process module. */\nexport function isDirectInternalProcessEntry(moduleUrl: string): boolean {\n\treturn (\n\t\t!isBunBinary &&\n\t\t!isBundledNode &&\n\t\tprocess.argv[1] !== undefined &&\n\t\tresolve(process.argv[1]) === fileURLToPath(moduleUrl)\n\t);\n}\n\n/** Read and validate an internal process role without consuming it. */\nexport function getInternalProcessRole(): InternalProcessRole | undefined {\n\tconst role = process.env[INTERNAL_PROCESS_ENV];\n\tif (role === undefined) return undefined;\n\tif (role === \"coordinator\" || role === \"server\" || role === \"session-worker\") return role;\n\tthrow new Error(`Unsupported internal process role: ${role}`);\n}\n\n/** Read, validate, and remove the role so descendants do not inherit it. */\nexport function consumeInternalProcessRole(): InternalProcessRole | undefined {\n\tconst role = getInternalProcessRole();\n\tdelete process.env[INTERNAL_PROCESS_ENV];\n\treturn role;\n}\n\nexport interface InternalProcessSpawnOptions {\n\treadonly entryUrl?: URL;\n\treadonly env?: NodeJS.ProcessEnv;\n}\n\n/** Spawn a detached Pi-owned process consistently across Node and compiled Bun. */\nexport function spawnInternalProcess(\n\trole: InternalProcessRole,\n\targs: readonly string[],\n\toptions: InternalProcessSpawnOptions = {},\n): ChildProcess {\n\tif (isBunBinary && options.entryUrl) {\n\t\tthrow new Error(\"A compiled Bun executable cannot launch an external internal-process entrypoint\");\n\t}\n\tconst entryUrl = defaultEntryUrl(role, options.entryUrl);\n\tconst sourceRuntimeArgs = import.meta.url.endsWith(\".ts\")\n\t\t? [\"--import\", fileURLToPath(new URL(\"source-resolver.ts\", import.meta.url))]\n\t\t: [];\n\tconst child = spawn(\n\t\tprocess.execPath,\n\t\tisBunBinary ? [...args] : [...sourceRuntimeArgs, fileURLToPath(entryUrl), ...args],\n\t\t{\n\t\t\tcwd: process.cwd(),\n\t\t\tdetached: true,\n\t\t\tenv: {\n\t\t\t\t...process.env,\n\t\t\t\t...options.env,\n\t\t\t\t[INTERNAL_PROCESS_ENV]: role,\n\t\t\t},\n\t\t\tstdio: \"ignore\",\n\t\t\twindowsHide: true,\n\t\t},\n\t);\n\tchild.unref();\n\treturn child;\n}\n\n/** Force a spawned internal process to exit and wait until it can no longer take ownership. */\nexport async function terminateInternalProcess(child: ChildProcess): Promise<void> {\n\tif (child.pid === undefined || child.exitCode !== null || child.signalCode !== null) return;\n\tconst terminated = new Promise<void>((resolve) => {\n\t\tchild.once(\"exit\", () => resolve());\n\t\tchild.once(\"error\", () => resolve());\n\t});\n\tchild.kill(\"SIGKILL\");\n\tawait terminated;\n}\n\nfunction defaultEntryUrl(role: InternalProcessRole, override: URL | undefined): URL {\n\tif (override) return override;\n\tif (isBundledNode) {\n\t\tconst entry = role === \"coordinator\" ? \"coordinator.js\" : \"cli.js\";\n\t\treturn pathToFileURL(join(getPackageDir(), \"dist\", \"bundle\", entry));\n\t}\n\tconst javaScript = import.meta.url.endsWith(\".js\");\n\tif (role === \"coordinator\") {\n\t\treturn new URL(javaScript ? \"coordinator.js\" : \"coordinator.ts\", import.meta.url);\n\t}\n\tif (role === \"server\") {\n\t\treturn new URL(javaScript ? \"server.js\" : \"server.ts\", import.meta.url);\n\t}\n\treturn new URL(javaScript ? \"session-worker.js\" : \"session-worker.ts\", import.meta.url);\n}\n\nexport const MAX_CONTROL_LINE_BYTES = 128 * 1024 * 1024;\n\nexport function encodeControlLine(message: unknown): string {\n\tconst line = `${JSON.stringify(message)}\\n`;\n\tif (Buffer.byteLength(line) > MAX_CONTROL_LINE_BYTES) throw new Error(\"Internal control message is too large\");\n\treturn line;\n}\n"]}

package/dist/experimental/process.js

@@ -1,85 +0,0 @@
-import { spawn } from "node:child_process";
-import { join, resolve } from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
-import { getPackageDir, isBunBinary, isBundledNode } from "../config.js";
-export const INTERNAL_PROCESS_ENV = "__PI_INTERNAL_SPAWN";
-/** Detect a directly executed source or unbundled internal-process module. */
-export function isDirectInternalProcessEntry(moduleUrl) {
-    return (!isBunBinary &&
-        !isBundledNode &&
-        process.argv[1] !== undefined &&
-        resolve(process.argv[1]) === fileURLToPath(moduleUrl));
-}
-/** Read and validate an internal process role without consuming it. */
-export function getInternalProcessRole() {
-    const role = process.env[INTERNAL_PROCESS_ENV];
-    if (role === undefined)
-        return undefined;
-    if (role === "coordinator" || role === "server" || role === "session-worker")
-        return role;
-    throw new Error(`Unsupported internal process role: ${role}`);
-}
-/** Read, validate, and remove the role so descendants do not inherit it. */
-export function consumeInternalProcessRole() {
-    const role = getInternalProcessRole();
-    delete process.env[INTERNAL_PROCESS_ENV];
-    return role;
-}
-/** Spawn a detached Pi-owned process consistently across Node and compiled Bun. */
-export function spawnInternalProcess(role, args, options = {}) {
-    if (isBunBinary && options.entryUrl) {
-        throw new Error("A compiled Bun executable cannot launch an external internal-process entrypoint");
-    }
-    const entryUrl = defaultEntryUrl(role, options.entryUrl);
-    const sourceRuntimeArgs = import.meta.url.endsWith(".ts")
-        ? ["--import", fileURLToPath(new URL("source-resolver.ts", import.meta.url))]
-        : [];
-    const child = spawn(process.execPath, isBunBinary ? [...args] : [...sourceRuntimeArgs, fileURLToPath(entryUrl), ...args], {
-        cwd: process.cwd(),
-        detached: true,
-        env: {
-            ...process.env,
-            ...options.env,
-            [INTERNAL_PROCESS_ENV]: role,
-        },
-        stdio: "ignore",
-        windowsHide: true,
-    });
-    child.unref();
-    return child;
-}
-/** Force a spawned internal process to exit and wait until it can no longer take ownership. */
-export async function terminateInternalProcess(child) {
-    if (child.pid === undefined || child.exitCode !== null || child.signalCode !== null)
-        return;
-    const terminated = new Promise((resolve) => {
-        child.once("exit", () => resolve());
-        child.once("error", () => resolve());
-    });
-    child.kill("SIGKILL");
-    await terminated;
-}
-function defaultEntryUrl(role, override) {
-    if (override)
-        return override;
-    if (isBundledNode) {
-        const entry = role === "coordinator" ? "coordinator.js" : "cli.js";
-        return pathToFileURL(join(getPackageDir(), "dist", "bundle", entry));
-    }
-    const javaScript = import.meta.url.endsWith(".js");
-    if (role === "coordinator") {
-        return new URL(javaScript ? "coordinator.js" : "coordinator.ts", import.meta.url);
-    }
-    if (role === "server") {
-        return new URL(javaScript ? "server.js" : "server.ts", import.meta.url);
-    }
-    return new URL(javaScript ? "session-worker.js" : "session-worker.ts", import.meta.url);
-}
-export const MAX_CONTROL_LINE_BYTES = 128 * 1024 * 1024;
-export function encodeControlLine(message) {
-    const line = `${JSON.stringify(message)}\n`;
-    if (Buffer.byteLength(line) > MAX_CONTROL_LINE_BYTES)
-        throw new Error("Internal control message is too large");
-    return line;
-}
-//# sourceMappingURL=process.js.map

package/dist/experimental/process.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/experimental/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAEzE,MAAM,CAAC,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AAI1D,8EAA8E;AAC9E,MAAM,UAAU,4BAA4B,CAAC,SAAiB,EAAW;IACxE,OAAO,CACN,CAAC,WAAW;QACZ,CAAC,aAAa;QACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;QAC7B,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,SAAS,CAAC,CACrD,CAAC;AAAA,CACF;AAED,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,GAAoC;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAC/C,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAC1F,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;AAAA,CAC9D;AAED,4EAA4E;AAC5E,MAAM,UAAU,0BAA0B,GAAoC;IAC7E,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC;AAAA,CACZ;AAOD,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CACnC,IAAyB,EACzB,IAAuB,EACvB,OAAO,GAAgC,EAAE,EAC1B;IACf,IAAI,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,iBAAiB,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,oBAAoB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,KAAK,GAAG,KAAK,CAClB,OAAO,CAAC,QAAQ,EAChB,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAiB,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,EAClF;QACC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,QAAQ,EAAE,IAAI;QACd,GAAG,EAAE;YACJ,GAAG,OAAO,CAAC,GAAG;YACd,GAAG,OAAO,CAAC,GAAG;YACd,CAAC,oBAAoB,CAAC,EAAE,IAAI;SAC5B;QACD,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,IAAI;KACjB,CACD,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,OAAO,KAAK,CAAC;AAAA,CACb;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAmB,EAAiB;IAClF,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO;IAC5F,MAAM,UAAU,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAAA,CACrC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,MAAM,UAAU,CAAC;AAAA,CACjB;AAED,SAAS,eAAe,CAAC,IAAyB,EAAE,QAAyB,EAAO;IACnF,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,aAAa,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnE,OAAO,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC5B,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CACxF;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAExD,MAAM,UAAU,iBAAiB,CAAC,OAAgB,EAAU;IAC3D,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,sBAAsB;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC/G,OAAO,IAAI,CAAC;AAAA,CACZ","sourcesContent":["import { type ChildProcess, spawn } from \"node:child_process\";\nimport { join, resolve } from \"node:path\";\nimport { fileURLToPath, pathToFileURL } from \"node:url\";\nimport { getPackageDir, isBunBinary, isBundledNode } from \"../config.ts\";\n\nexport const INTERNAL_PROCESS_ENV = \"__PI_INTERNAL_SPAWN\";\n\nexport type InternalProcessRole = \"coordinator\" | \"server\" | \"session-worker\";\n\n/** Detect a directly executed source or unbundled internal-process module. */\nexport function isDirectInternalProcessEntry(moduleUrl: string): boolean {\n\treturn (\n\t\t!isBunBinary &&\n\t\t!isBundledNode &&\n\t\tprocess.argv[1] !== undefined &&\n\t\tresolve(process.argv[1]) === fileURLToPath(moduleUrl)\n\t);\n}\n\n/** Read and validate an internal process role without consuming it. */\nexport function getInternalProcessRole(): InternalProcessRole | undefined {\n\tconst role = process.env[INTERNAL_PROCESS_ENV];\n\tif (role === undefined) return undefined;\n\tif (role === \"coordinator\" || role === \"server\" || role === \"session-worker\") return role;\n\tthrow new Error(`Unsupported internal process role: ${role}`);\n}\n\n/** Read, validate, and remove the role so descendants do not inherit it. */\nexport function consumeInternalProcessRole(): InternalProcessRole | undefined {\n\tconst role = getInternalProcessRole();\n\tdelete process.env[INTERNAL_PROCESS_ENV];\n\treturn role;\n}\n\nexport interface InternalProcessSpawnOptions {\n\treadonly entryUrl?: URL;\n\treadonly env?: NodeJS.ProcessEnv;\n}\n\n/** Spawn a detached Pi-owned process consistently across Node and compiled Bun. */\nexport function spawnInternalProcess(\n\trole: InternalProcessRole,\n\targs: readonly string[],\n\toptions: InternalProcessSpawnOptions = {},\n): ChildProcess {\n\tif (isBunBinary && options.entryUrl) {\n\t\tthrow new Error(\"A compiled Bun executable cannot launch an external internal-process entrypoint\");\n\t}\n\tconst entryUrl = defaultEntryUrl(role, options.entryUrl);\n\tconst sourceRuntimeArgs = import.meta.url.endsWith(\".ts\")\n\t\t? [\"--import\", fileURLToPath(new URL(\"source-resolver.ts\", import.meta.url))]\n\t\t: [];\n\tconst child = spawn(\n\t\tprocess.execPath,\n\t\tisBunBinary ? [...args] : [...sourceRuntimeArgs, fileURLToPath(entryUrl), ...args],\n\t\t{\n\t\t\tcwd: process.cwd(),\n\t\t\tdetached: true,\n\t\t\tenv: {\n\t\t\t\t...process.env,\n\t\t\t\t...options.env,\n\t\t\t\t[INTERNAL_PROCESS_ENV]: role,\n\t\t\t},\n\t\t\tstdio: \"ignore\",\n\t\t\twindowsHide: true,\n\t\t},\n\t);\n\tchild.unref();\n\treturn child;\n}\n\n/** Force a spawned internal process to exit and wait until it can no longer take ownership. */\nexport async function terminateInternalProcess(child: ChildProcess): Promise<void> {\n\tif (child.pid === undefined || child.exitCode !== null || child.signalCode !== null) return;\n\tconst terminated = new Promise<void>((resolve) => {\n\t\tchild.once(\"exit\", () => resolve());\n\t\tchild.once(\"error\", () => resolve());\n\t});\n\tchild.kill(\"SIGKILL\");\n\tawait terminated;\n}\n\nfunction defaultEntryUrl(role: InternalProcessRole, override: URL | undefined): URL {\n\tif (override) return override;\n\tif (isBundledNode) {\n\t\tconst entry = role === \"coordinator\" ? \"coordinator.js\" : \"cli.js\";\n\t\treturn pathToFileURL(join(getPackageDir(), \"dist\", \"bundle\", entry));\n\t}\n\tconst javaScript = import.meta.url.endsWith(\".js\");\n\tif (role === \"coordinator\") {\n\t\treturn new URL(javaScript ? \"coordinator.js\" : \"coordinator.ts\", import.meta.url);\n\t}\n\tif (role === \"server\") {\n\t\treturn new URL(javaScript ? \"server.js\" : \"server.ts\", import.meta.url);\n\t}\n\treturn new URL(javaScript ? \"session-worker.js\" : \"session-worker.ts\", import.meta.url);\n}\n\nexport const MAX_CONTROL_LINE_BYTES = 128 * 1024 * 1024;\n\nexport function encodeControlLine(message: unknown): string {\n\tconst line = `${JSON.stringify(message)}\\n`;\n\tif (Buffer.byteLength(line) > MAX_CONTROL_LINE_BYTES) throw new Error(\"Internal control message is too large\");\n\treturn line;\n}\n"]}

package/dist/experimental/radius-auth.d.ts

@@ -1,17 +0,0 @@
-import type { AuthInput } from "../cli/experimental/command-options.ts";
-export declare const ENV_RADIUS_GATEWAY = "PI_RADIUS_GATEWAY";
-export interface RadiusRelayAuth {
-    readonly gateway: string;
-    readonly token: string;
-}
-/** Resolve explicit or stored Radius credentials anew for every relay connection attempt. */
-export declare class RadiusRelayAuthResolver {
-    #private;
-    constructor(input?: AuthInput, gateway?: string);
-    get gateway(): string;
-    resolve(options: {
-        readonly required: boolean;
-        readonly signal?: AbortSignal;
-    }): Promise<RadiusRelayAuth | undefined>;
-}
-//# sourceMappingURL=radius-auth.d.ts.map

package/dist/experimental/radius-auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"radius-auth.d.ts","sourceRoot":"","sources":["../../src/experimental/radius-auth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wCAAwC,CAAC;AAIxE,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAED,6FAA6F;AAC7F,qBAAa,uBAAuB;;IAKnC,YAAY,KAAK,CAAC,EAAE,SAAS,EAAE,OAAO,SAA4D,EAGjG;IAED,IAAI,OAAO,IAAI,MAAM,CAEpB;IAEK,OAAO,CAAC,OAAO,EAAE;QACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC9B,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAqBvC;CAYD","sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { DEFAULT_RADIUS_GATEWAY, normalizeRadiusGatewayUrl } from \"@earendil-works/pi-ai/providers/radius-config\";\nimport { getAuthCredential } from \"../cli/auth-command.ts\";\nimport type { AuthInput } from \"../cli/experimental/command-options.ts\";\nimport { ModelRuntime } from \"../core/model-runtime.ts\";\nimport { resolvePath } from \"../utils/paths.ts\";\n\nexport const ENV_RADIUS_GATEWAY = \"PI_RADIUS_GATEWAY\";\n\nexport interface RadiusRelayAuth {\n\treadonly gateway: string;\n\treadonly token: string;\n}\n\n/** Resolve explicit or stored Radius credentials anew for every relay connection attempt. */\nexport class RadiusRelayAuthResolver {\n\treadonly #input: AuthInput | undefined;\n\treadonly #gateway: string;\n\t#modelRuntime: Promise<ModelRuntime> | undefined;\n\n\tconstructor(input?: AuthInput, gateway = process.env[ENV_RADIUS_GATEWAY] ?? DEFAULT_RADIUS_GATEWAY) {\n\t\tthis.#input = input;\n\t\tthis.#gateway = normalizeRadiusGatewayUrl(gateway);\n\t}\n\n\tget gateway(): string {\n\t\treturn this.#gateway;\n\t}\n\n\tasync resolve(options: {\n\t\treadonly required: boolean;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<RadiusRelayAuth | undefined> {\n\t\toptions.signal?.throwIfAborted();\n\t\tif (process.env.PI_OFFLINE !== undefined) {\n\t\t\tif (options.required) throw new Error(\"Radius relay connections are unavailable in offline mode\");\n\t\t\treturn undefined;\n\t\t}\n\n\t\tconst explicit = await this.#explicitToken(options.signal);\n\t\tif (explicit !== undefined) return { gateway: this.#gateway, token: explicit };\n\n\t\tthis.#modelRuntime ??= ModelRuntime.create({ refreshOnCreate: false, allowModelNetwork: false });\n\t\tconst runtime = await this.#modelRuntime;\n\t\toptions.signal?.throwIfAborted();\n\t\tconst token = getAuthCredential(\n\t\t\tawait runtime.getAuth(\"radius\", { minOAuthValidityMs: 5 * 60_000, signal: options.signal }),\n\t\t);\n\t\tif (token !== undefined && token.length > 0) return { gateway: this.#gateway, token };\n\t\tif (options.required) {\n\t\t\tthrow new Error(\"Radius authentication is required; start Pi and run /login radius, then retry\");\n\t\t}\n\t\treturn undefined;\n\t}\n\n\tasync #explicitToken(signal: AbortSignal | undefined): Promise<string | undefined> {\n\t\tif (this.#input === undefined) return undefined;\n\t\tconst value =\n\t\t\tthis.#input.type === \"token\"\n\t\t\t\t? this.#input.token\n\t\t\t\t: await readFile(resolvePath(this.#input.path), { encoding: \"utf8\", signal });\n\t\tconst token = value.trim();\n\t\tif (token.length === 0) throw new Error(\"Radius authentication token must not be empty\");\n\t\treturn token;\n\t}\n}\n"]}

package/dist/experimental/radius-auth.js

@@ -1,52 +0,0 @@
-import { readFile } from "node:fs/promises";
-import { DEFAULT_RADIUS_GATEWAY, normalizeRadiusGatewayUrl } from "@earendil-works/pi-ai/providers/radius-config";
-import { getAuthCredential } from "../cli/auth-command.js";
-import { ModelRuntime } from "../core/model-runtime.js";
-import { resolvePath } from "../utils/paths.js";
-export const ENV_RADIUS_GATEWAY = "PI_RADIUS_GATEWAY";
-/** Resolve explicit or stored Radius credentials anew for every relay connection attempt. */
-export class RadiusRelayAuthResolver {
-    #input;
-    #gateway;
-    #modelRuntime;
-    constructor(input, gateway = process.env[ENV_RADIUS_GATEWAY] ?? DEFAULT_RADIUS_GATEWAY) {
-        this.#input = input;
-        this.#gateway = normalizeRadiusGatewayUrl(gateway);
-    }
-    get gateway() {
-        return this.#gateway;
-    }
-    async resolve(options) {
-        options.signal?.throwIfAborted();
-        if (process.env.PI_OFFLINE !== undefined) {
-            if (options.required)
-                throw new Error("Radius relay connections are unavailable in offline mode");
-            return undefined;
-        }
-        const explicit = await this.#explicitToken(options.signal);
-        if (explicit !== undefined)
-            return { gateway: this.#gateway, token: explicit };
-        this.#modelRuntime ??= ModelRuntime.create({ refreshOnCreate: false, allowModelNetwork: false });
-        const runtime = await this.#modelRuntime;
-        options.signal?.throwIfAborted();
-        const token = getAuthCredential(await runtime.getAuth("radius", { minOAuthValidityMs: 5 * 60_000, signal: options.signal }));
-        if (token !== undefined && token.length > 0)
-            return { gateway: this.#gateway, token };
-        if (options.required) {
-            throw new Error("Radius authentication is required; start Pi and run /login radius, then retry");
-        }
-        return undefined;
-    }
-    async #explicitToken(signal) {
-        if (this.#input === undefined)
-            return undefined;
-        const value = this.#input.type === "token"
-            ? this.#input.token
-            : await readFile(resolvePath(this.#input.path), { encoding: "utf8", signal });
-        const token = value.trim();
-        if (token.length === 0)
-            throw new Error("Radius authentication token must not be empty");
-        return token;
-    }
-}
-//# sourceMappingURL=radius-auth.js.map

package/dist/experimental/radius-auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"radius-auth.js","sourceRoot":"","sources":["../../src/experimental/radius-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,+CAA+C,CAAC;AAClH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAOtD,6FAA6F;AAC7F,MAAM,OAAO,uBAAuB;IAC1B,MAAM,CAAwB;IAC9B,QAAQ,CAAS;IAC1B,aAAa,CAAoC;IAEjD,YAAY,KAAiB,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,sBAAsB,EAAE;QACnG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAAA,CACnD;IAED,IAAI,OAAO,GAAW;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC;IAAA,CACrB;IAED,KAAK,CAAC,OAAO,CAAC,OAGb,EAAwC;QACxC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC1C,IAAI,OAAO,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAClG,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAE/E,IAAI,CAAC,aAAa,KAAK,YAAY,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;QACjG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;QACzC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,iBAAiB,CAC9B,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,kBAAkB,EAAE,CAAC,GAAG,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAC3F,CAAC;QACF,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;QACtF,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,SAAS,CAAC;IAAA,CACjB;IAED,KAAK,CAAC,cAAc,CAAC,MAA+B,EAA+B;QAClF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,KAAK,GACV,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;YAC3B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK;YACnB,CAAC,CAAC,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC;IAAA,CACb;CACD","sourcesContent":["import { readFile } from \"node:fs/promises\";\nimport { DEFAULT_RADIUS_GATEWAY, normalizeRadiusGatewayUrl } from \"@earendil-works/pi-ai/providers/radius-config\";\nimport { getAuthCredential } from \"../cli/auth-command.ts\";\nimport type { AuthInput } from \"../cli/experimental/command-options.ts\";\nimport { ModelRuntime } from \"../core/model-runtime.ts\";\nimport { resolvePath } from \"../utils/paths.ts\";\n\nexport const ENV_RADIUS_GATEWAY = \"PI_RADIUS_GATEWAY\";\n\nexport interface RadiusRelayAuth {\n\treadonly gateway: string;\n\treadonly token: string;\n}\n\n/** Resolve explicit or stored Radius credentials anew for every relay connection attempt. */\nexport class RadiusRelayAuthResolver {\n\treadonly #input: AuthInput | undefined;\n\treadonly #gateway: string;\n\t#modelRuntime: Promise<ModelRuntime> | undefined;\n\n\tconstructor(input?: AuthInput, gateway = process.env[ENV_RADIUS_GATEWAY] ?? DEFAULT_RADIUS_GATEWAY) {\n\t\tthis.#input = input;\n\t\tthis.#gateway = normalizeRadiusGatewayUrl(gateway);\n\t}\n\n\tget gateway(): string {\n\t\treturn this.#gateway;\n\t}\n\n\tasync resolve(options: {\n\t\treadonly required: boolean;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<RadiusRelayAuth | undefined> {\n\t\toptions.signal?.throwIfAborted();\n\t\tif (process.env.PI_OFFLINE !== undefined) {\n\t\t\tif (options.required) throw new Error(\"Radius relay connections are unavailable in offline mode\");\n\t\t\treturn undefined;\n\t\t}\n\n\t\tconst explicit = await this.#explicitToken(options.signal);\n\t\tif (explicit !== undefined) return { gateway: this.#gateway, token: explicit };\n\n\t\tthis.#modelRuntime ??= ModelRuntime.create({ refreshOnCreate: false, allowModelNetwork: false });\n\t\tconst runtime = await this.#modelRuntime;\n\t\toptions.signal?.throwIfAborted();\n\t\tconst token = getAuthCredential(\n\t\t\tawait runtime.getAuth(\"radius\", { minOAuthValidityMs: 5 * 60_000, signal: options.signal }),\n\t\t);\n\t\tif (token !== undefined && token.length > 0) return { gateway: this.#gateway, token };\n\t\tif (options.required) {\n\t\t\tthrow new Error(\"Radius authentication is required; start Pi and run /login radius, then retry\");\n\t\t}\n\t\treturn undefined;\n\t}\n\n\tasync #explicitToken(signal: AbortSignal | undefined): Promise<string | undefined> {\n\t\tif (this.#input === undefined) return undefined;\n\t\tconst value =\n\t\t\tthis.#input.type === \"token\"\n\t\t\t\t? this.#input.token\n\t\t\t\t: await readFile(resolvePath(this.#input.path), { encoding: \"utf8\", signal });\n\t\tconst token = value.trim();\n\t\tif (token.length === 0) throw new Error(\"Radius authentication token must not be empty\");\n\t\treturn token;\n\t}\n}\n"]}

package/dist/experimental/radius-relay.d.ts

@@ -1,90 +0,0 @@
-import type { ByteTransportFactory, Client } from "@earendil-works/pi-client";
-import { type ServerId } from "@earendil-works/pi-protocol";
-import type { Server } from "@earendil-works/pi-server";
-import type { RadiusRelayAuthResolver } from "./radius-auth.ts";
-export declare const RADIUS_RELAY_HOST_SUBPROTOCOL = "pi-session-relay.host.v1";
-export declare const RADIUS_RELAY_CLIENT_SUBPROTOCOL = "pi-session-relay.client.v1";
-interface RadiusRelayMessageEvent extends Event {
-    readonly data: unknown;
-}
-interface RadiusRelayCloseEvent extends Event {
-    readonly code: number;
-    readonly reason: string;
-}
-interface RadiusRelayErrorEvent extends Event {
-    readonly error?: unknown;
-    readonly message?: string;
-}
-export interface RadiusRelayWebSocket {
-    binaryType: "arraybuffer" | "blob";
-    readonly bufferedAmount: number;
-    readonly protocol: string;
-    readonly readyState: number;
-    readonly OPEN: number;
-    send(data: string | ArrayBuffer): void;
-    close(code?: number, reason?: string): void;
-    addEventListener(type: "open", listener: (event: Event) => void, options?: {
-        once?: boolean;
-    }): void;
-    addEventListener(type: "message", listener: (event: RadiusRelayMessageEvent) => void, options?: {
-        once?: boolean;
-    }): void;
-    addEventListener(type: "close", listener: (event: RadiusRelayCloseEvent) => void, options?: {
-        once?: boolean;
-    }): void;
-    addEventListener(type: "error", listener: (event: RadiusRelayErrorEvent) => void, options?: {
-        once?: boolean;
-    }): void;
-    removeEventListener(type: "open", listener: (event: Event) => void): void;
-    removeEventListener(type: "message", listener: (event: RadiusRelayMessageEvent) => void): void;
-    removeEventListener(type: "close", listener: (event: RadiusRelayCloseEvent) => void): void;
-    removeEventListener(type: "error", listener: (event: RadiusRelayErrorEvent) => void): void;
-}
-export type RadiusRelayWebSocketFactory = (options: {
-    readonly url: string;
-    readonly protocol: string;
-    readonly authorization: string;
-}) => RadiusRelayWebSocket;
-export type RadiusRelayHostStatus = {
-    readonly status: "not_authenticated";
-} | {
-    readonly status: "connecting";
-} | {
-    readonly status: "connected";
-} | {
-    readonly status: "retrying";
-    readonly error: string;
-};
-export interface RadiusRelayHostOptions {
-    readonly serverId: ServerId;
-    readonly server: Pick<Server, "accept">;
-    readonly auth: RadiusRelayAuthResolver;
-    readonly webSocketFactory?: RadiusRelayWebSocketFactory;
-    readonly onStatus?: (status: RadiusRelayHostStatus) => void;
-}
-/** Maintain the experimental server's multiplexed, authenticated Radius host connection. */
-export declare class RadiusRelayHost {
-    #private;
-    constructor(options: RadiusRelayHostOptions);
-    start(): void;
-    close(): Promise<void>;
-}
-export declare function createRadiusClientTransportFactory(options: {
-    readonly serverId: ServerId;
-    readonly auth: RadiusRelayAuthResolver;
-    readonly webSocketFactory?: RadiusRelayWebSocketFactory;
-}): ByteTransportFactory;
-type RadiusReconnectClient = Pick<Client, "attachment" | "connected" | "connectionState" | "disconnect" | "onAttachmentChange" | "onConnectionStateChange" | "reconnect">;
-/** Reconnect one established Radius client and restore its last selected Session. */
-export declare class RadiusClientReconnect {
-    #private;
-    constructor(client: RadiusReconnectClient, reattach: (sessionId: string) => Promise<void>);
-    dispose(): Promise<void>;
-}
-export declare function encodeRelayDataFrame(connectionId: string, payload: Uint8Array): ArrayBuffer;
-export declare function parseRelayDataFrame(frame: ArrayBuffer): {
-    readonly connectionId: string;
-    readonly payload: ArrayBuffer;
-} | undefined;
-export {};
-//# sourceMappingURL=radius-relay.d.ts.map

package/dist/experimental/radius-relay.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"radius-relay.d.ts","sourceRoot":"","sources":["../../src/experimental/radius-relay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,oBAAoB,EAAyB,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACpH,OAAO,EAA4B,KAAK,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACtF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAExD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEhE,eAAO,MAAM,6BAA6B,6BAA6B,CAAC;AACxE,eAAO,MAAM,+BAA+B,+BAA+B,CAAC;AAmB5E,UAAU,uBAAwB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACvB;AAED,UAAU,qBAAsB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,qBAAsB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,aAAa,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,EAAE,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACrG,gBAAgB,CACf,IAAI,EAAE,SAAS,EACf,QAAQ,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,EAClD,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAC1B,IAAI,CAAC;IACR,gBAAgB,CACf,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,EAChD,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAC1B,IAAI,CAAC;IACR,gBAAgB,CACf,IAAI,EAAE,OAAO,EACb,QAAQ,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,EAChD,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAC1B,IAAI,CAAC;IACR,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAAG,IAAI,CAAC;IAC1E,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,GAAG,IAAI,CAAC;IAC/F,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,GAAG,IAAI,CAAC;IAC3F,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,GAAG,IAAI,CAAC;CAC3F;AAED,MAAM,MAAM,2BAA2B,GAAG,CAAC,OAAO,EAAE;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAC/B,KAAK,oBAAoB,CAAC;AAc3B,MAAM,MAAM,qBAAqB,GAC9B;IAAE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,GACxC;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GACjC;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,2BAA2B,CAAC;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,IAAI,CAAC;CAC5D;AAED,4FAA4F;AAC5F,qBAAa,eAAe;;IAY3B,YAAY,OAAO,EAAE,sBAAsB,EAE1C;IAED,KAAK,IAAI,IAAI,CAGZ;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ3B;CAmLD;AAED,wBAAgB,kCAAkC,CAAC,OAAO,EAAE;IAC3D,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,2BAA2B,CAAC;CACxD,GAAG,oBAAoB,CAYvB;AAED,KAAK,qBAAqB,GAAG,IAAI,CAChC,MAAM,EACJ,YAAY,GACZ,WAAW,GACX,iBAAiB,GACjB,YAAY,GACZ,oBAAoB,GACpB,yBAAyB,GACzB,WAAW,CACb,CAAC;AAEF,qFAAqF;AACrF,qBAAa,qBAAqB;;IAUjC,YAAY,MAAM,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,EAWxF;IAEK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAU7B;CAyBD;AA8LD,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,WAAW,CAW3F;AAED,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,WAAW,GAChB;IAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,GAAG,SAAS,CAS9E","sourcesContent":["import type { ByteTransport, ByteTransportFactory, ByteTransportHandlers, Client } from \"@earendil-works/pi-client\";\nimport { DEFAULT_MAX_FRAME_LENGTH, type ServerId } from \"@earendil-works/pi-protocol\";\nimport type { Server } from \"@earendil-works/pi-server\";\nimport { WebSocket } from \"undici\";\nimport type { RadiusRelayAuthResolver } from \"./radius-auth.ts\";\n\nexport const RADIUS_RELAY_HOST_SUBPROTOCOL = \"pi-session-relay.host.v1\";\nexport const RADIUS_RELAY_CLIENT_SUBPROTOCOL = \"pi-session-relay.client.v1\";\n\nconst RELAY_DATA_HEADER_BYTES = 18;\nconst RELAY_DATA_FRAME_VERSION = 1;\nconst RELAY_DATA_FRAME_TYPE = 1;\nconst CONNECTION_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/u;\nconst MAX_PENDING_BYTES = DEFAULT_MAX_FRAME_LENGTH * 4;\nconst DRAIN_THRESHOLD_BYTES = 1024 * 1024;\nconst HOST_RETRY_INITIAL_MS = 1_000;\nconst HOST_RETRY_MAX_MS = 30_000;\nconst MISSING_AUTH_RETRY_MS = 30_000;\nconst CLIENT_RETRY_INITIAL_MS = 1_000;\nconst CLIENT_RETRY_MAX_MS = 30_000;\n// Undici implements the browser WebSocket API, which permits callers to send\n// only code 1000 or application codes from 3000 through 4999. RFC protocol\n// codes such as 1002 and 1011 may be received but cannot be passed to close().\nconst LOCAL_PROTOCOL_ERROR_CLOSE_CODE = 4000;\nconst LOCAL_TRANSPORT_ERROR_CLOSE_CODE = 4001;\n\ninterface RadiusRelayMessageEvent extends Event {\n\treadonly data: unknown;\n}\n\ninterface RadiusRelayCloseEvent extends Event {\n\treadonly code: number;\n\treadonly reason: string;\n}\n\ninterface RadiusRelayErrorEvent extends Event {\n\treadonly error?: unknown;\n\treadonly message?: string;\n}\n\nexport interface RadiusRelayWebSocket {\n\tbinaryType: \"arraybuffer\" | \"blob\";\n\treadonly bufferedAmount: number;\n\treadonly protocol: string;\n\treadonly readyState: number;\n\treadonly OPEN: number;\n\tsend(data: string | ArrayBuffer): void;\n\tclose(code?: number, reason?: string): void;\n\taddEventListener(type: \"open\", listener: (event: Event) => void, options?: { once?: boolean }): void;\n\taddEventListener(\n\t\ttype: \"message\",\n\t\tlistener: (event: RadiusRelayMessageEvent) => void,\n\t\toptions?: { once?: boolean },\n\t): void;\n\taddEventListener(\n\t\ttype: \"close\",\n\t\tlistener: (event: RadiusRelayCloseEvent) => void,\n\t\toptions?: { once?: boolean },\n\t): void;\n\taddEventListener(\n\t\ttype: \"error\",\n\t\tlistener: (event: RadiusRelayErrorEvent) => void,\n\t\toptions?: { once?: boolean },\n\t): void;\n\tremoveEventListener(type: \"open\", listener: (event: Event) => void): void;\n\tremoveEventListener(type: \"message\", listener: (event: RadiusRelayMessageEvent) => void): void;\n\tremoveEventListener(type: \"close\", listener: (event: RadiusRelayCloseEvent) => void): void;\n\tremoveEventListener(type: \"error\", listener: (event: RadiusRelayErrorEvent) => void): void;\n}\n\nexport type RadiusRelayWebSocketFactory = (options: {\n\treadonly url: string;\n\treadonly protocol: string;\n\treadonly authorization: string;\n}) => RadiusRelayWebSocket;\n\ninterface RelayByteConnection {\n\treadonly closed: boolean;\n\tsend(chunk: Uint8Array): Promise<void>;\n\tclose(finalChunk?: Uint8Array): Promise<void>;\n}\n\ninterface RelayByteConnectionHandler {\n\tonData(chunk: Uint8Array): void;\n\tonClose(): void;\n\tonError(error: Error): void;\n}\n\nexport type RadiusRelayHostStatus =\n\t| { readonly status: \"not_authenticated\" }\n\t| { readonly status: \"connecting\" }\n\t| { readonly status: \"connected\" }\n\t| { readonly status: \"retrying\"; readonly error: string };\n\nexport interface RadiusRelayHostOptions {\n\treadonly serverId: ServerId;\n\treadonly server: Pick<Server, \"accept\">;\n\treadonly auth: RadiusRelayAuthResolver;\n\treadonly webSocketFactory?: RadiusRelayWebSocketFactory;\n\treadonly onStatus?: (status: RadiusRelayHostStatus) => void;\n}\n\n/** Maintain the experimental server's multiplexed, authenticated Radius host connection. */\nexport class RadiusRelayHost {\n\treadonly #options: RadiusRelayHostOptions;\n\treadonly #abortController = new AbortController();\n\treadonly #connections = new Map<\n\t\tstring,\n\t\t{ connection: RelayServerByteConnection; handler: RelayByteConnectionHandler }\n\t>();\n\t#socket: RadiusRelayWebSocket | undefined;\n\t#writer: OrderedWebSocketWriter | undefined;\n\t#loop: Promise<void> | undefined;\n\t#closed = false;\n\n\tconstructor(options: RadiusRelayHostOptions) {\n\t\tthis.#options = options;\n\t}\n\n\tstart(): void {\n\t\tif (this.#loop !== undefined) return;\n\t\tthis.#loop = this.#run();\n\t}\n\n\tasync close(): Promise<void> {\n\t\tif (this.#closed) return;\n\t\tthis.#closed = true;\n\t\tthis.#abortController.abort();\n\t\tthis.#writer?.close();\n\t\tthis.#socket?.close(1000, \"Pi server stopped\");\n\t\tthis.#dropConnections();\n\t\tawait this.#loop;\n\t}\n\n\tasync #run(): Promise<void> {\n\t\tlet retryMs = HOST_RETRY_INITIAL_MS;\n\t\twhile (!this.#closed) {\n\t\t\ttry {\n\t\t\t\tconst auth = await this.#options.auth.resolve({\n\t\t\t\t\trequired: false,\n\t\t\t\t\tsignal: this.#abortController.signal,\n\t\t\t\t});\n\t\t\t\tif (auth === undefined) {\n\t\t\t\t\tthis.#options.onStatus?.({ status: \"not_authenticated\" });\n\t\t\t\t\tawait delay(MISSING_AUTH_RETRY_MS, this.#abortController.signal, true);\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\n\t\t\t\tthis.#options.onStatus?.({ status: \"connecting\" });\n\t\t\t\tconst socket = await openRadiusRelayWebSocket(\n\t\t\t\t\trelayWebSocketUrl(auth.gateway, this.#options.serverId),\n\t\t\t\t\tRADIUS_RELAY_HOST_SUBPROTOCOL,\n\t\t\t\t\tauth.token,\n\t\t\t\t\tthis.#options.webSocketFactory ?? defaultWebSocketFactory,\n\t\t\t\t\tthis.#abortController.signal,\n\t\t\t\t);\n\t\t\t\tretryMs = HOST_RETRY_INITIAL_MS;\n\t\t\t\tthis.#options.onStatus?.({ status: \"connected\" });\n\t\t\t\tawait this.#serve(socket);\n\t\t\t\tif (!this.#closed) throw new Error(\"Radius relay host disconnected\");\n\t\t\t} catch (error) {\n\t\t\t\tif (this.#closed || this.#abortController.signal.aborted) break;\n\t\t\t\tthis.#options.onStatus?.({ status: \"retrying\", error: errorMessage(error) });\n\t\t\t\ttry {\n\t\t\t\t\tawait delay(retryMs, this.#abortController.signal, true);\n\t\t\t\t} catch {\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t\tretryMs = Math.min(retryMs * 2, HOST_RETRY_MAX_MS);\n\t\t\t}\n\t\t}\n\t}\n\n\t#serve(socket: RadiusRelayWebSocket): Promise<void> {\n\t\tthis.#socket = socket;\n\t\tthis.#writer = new OrderedWebSocketWriter(socket);\n\t\treturn new Promise<void>((resolve, reject) => {\n\t\t\tlet terminal = false;\n\t\t\tconst cleanup = (): void => {\n\t\t\t\tsocket.removeEventListener(\"message\", onMessage);\n\t\t\t\tsocket.removeEventListener(\"close\", onClose);\n\t\t\t\tsocket.removeEventListener(\"error\", onError);\n\t\t\t\tthis.#writer?.close();\n\t\t\t\tif (this.#socket === socket) {\n\t\t\t\t\tthis.#socket = undefined;\n\t\t\t\t\tthis.#writer = undefined;\n\t\t\t\t}\n\t\t\t};\n\t\t\tconst finish = (error?: Error): void => {\n\t\t\t\tif (terminal) return;\n\t\t\t\tterminal = true;\n\t\t\t\tcleanup();\n\t\t\t\tthis.#dropConnections(error);\n\t\t\t\tif (error) reject(error);\n\t\t\t\telse resolve();\n\t\t\t};\n\t\t\tconst onMessage = (event: RadiusRelayMessageEvent): void => {\n\t\t\t\ttry {\n\t\t\t\t\tthis.#handleHostMessage(event.data);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tcloseWebSocket(socket, LOCAL_PROTOCOL_ERROR_CLOSE_CODE, \"Radius relay protocol error\");\n\t\t\t\t\tfinish(toError(error));\n\t\t\t\t}\n\t\t\t};\n\t\t\tconst onClose = (event: RadiusRelayCloseEvent): void => {\n\t\t\t\tfinish(\n\t\t\t\t\tevent.code === 1000\n\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t: new Error(`Radius relay host closed (${event.code}${event.reason ? `: ${event.reason}` : \"\"})`),\n\t\t\t\t);\n\t\t\t};\n\t\t\tconst onError = (event: RadiusRelayErrorEvent): void => finish(webSocketError(event));\n\t\t\tsocket.addEventListener(\"message\", onMessage);\n\t\t\tsocket.addEventListener(\"close\", onClose);\n\t\t\tsocket.addEventListener(\"error\", onError);\n\t\t});\n\t}\n\n\t#handleHostMessage(value: unknown): void {\n\t\tif (typeof value === \"string\") {\n\t\t\tconst control = parseHostControlMessage(value);\n\t\t\tswitch (control.type) {\n\t\t\t\tcase \"ping\":\n\t\t\t\t\tvoid this.#sendControl({ version: 1, type: \"pong\" }).catch(() => {\n\t\t\t\t\t\tif (this.#socket !== undefined) {\n\t\t\t\t\t\t\tcloseWebSocket(this.#socket, LOCAL_TRANSPORT_ERROR_CLOSE_CODE, \"Radius relay send failed\");\n\t\t\t\t\t\t}\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\tcase \"pong\":\n\t\t\t\t\treturn;\n\t\t\t\tcase \"connection_open\":\n\t\t\t\t\tthis.#openConnection(control.connection_id);\n\t\t\t\t\treturn;\n\t\t\t\tcase \"connection_close\":\n\t\t\t\t\tthis.#remoteCloseConnection(control.connection_id);\n\t\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t\tif (!(value instanceof ArrayBuffer)) throw new Error(\"Radius relay data message must be binary\");\n\t\tconst frame = parseRelayDataFrame(value);\n\t\tif (!frame) throw new Error(\"Invalid Radius relay data frame\");\n\t\tconst active = this.#connections.get(frame.connectionId);\n\t\tif (!active) {\n\t\t\tvoid this.#sendControl({\n\t\t\t\tversion: 1,\n\t\t\t\ttype: \"connection_close\",\n\t\t\t\tconnection_id: frame.connectionId,\n\t\t\t\tcode: 1000,\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tactive.handler.onData(new Uint8Array(frame.payload));\n\t}\n\n\t#openConnection(connectionId: string): void {\n\t\tif (this.#connections.has(connectionId)) throw new Error(\"Radius relay reused a connection ID\");\n\t\tconst connection = new RelayServerByteConnection(\n\t\t\t(chunk) => this.#sendData(connectionId, chunk),\n\t\t\t(finalChunk) => this.#serverCloseConnection(connectionId, finalChunk),\n\t\t);\n\t\tconst handler = this.#options.server.accept(connection);\n\t\tif (connection.closed) {\n\t\t\tvoid this.#sendControl({ version: 1, type: \"connection_close\", connection_id: connectionId, code: 1012 });\n\t\t} else {\n\t\t\tthis.#connections.set(connectionId, { connection, handler });\n\t\t}\n\t}\n\n\t#remoteCloseConnection(connectionId: string): void {\n\t\tconst active = this.#connections.get(connectionId);\n\t\tif (!active) return;\n\t\tthis.#connections.delete(connectionId);\n\t\tactive.connection.markClosed();\n\t\tactive.handler.onClose();\n\t}\n\n\tasync #serverCloseConnection(connectionId: string, finalChunk?: Uint8Array): Promise<void> {\n\t\tif (!this.#connections.delete(connectionId)) return;\n\t\tif (finalChunk !== undefined) await this.#requireWriter().send(encodeRelayDataFrame(connectionId, finalChunk));\n\t\tawait this.#sendControl({\n\t\t\tversion: 1,\n\t\t\ttype: \"connection_close\",\n\t\t\tconnection_id: connectionId,\n\t\t\tcode: 1000,\n\t\t});\n\t}\n\n\t#sendData(connectionId: string, chunk: Uint8Array): Promise<void> {\n\t\tif (!this.#connections.has(connectionId)) return Promise.reject(new Error(\"Radius relay connection is closed\"));\n\t\treturn this.#requireWriter().send(encodeRelayDataFrame(connectionId, chunk));\n\t}\n\n\t#sendControl(message: HostOutputControlMessage): Promise<void> {\n\t\treturn this.#requireWriter().send(JSON.stringify(message));\n\t}\n\n\t#requireWriter(): OrderedWebSocketWriter {\n\t\tif (!this.#writer) throw new Error(\"Radius relay host is disconnected\");\n\t\treturn this.#writer;\n\t}\n\n\t#dropConnections(error?: Error): void {\n\t\tconst connections = [...this.#connections.values()];\n\t\tthis.#connections.clear();\n\t\tfor (const active of connections) {\n\t\t\tactive.connection.markClosed();\n\t\t\tif (error) active.handler.onError(error);\n\t\t\telse active.handler.onClose();\n\t\t}\n\t}\n}\n\nexport function createRadiusClientTransportFactory(options: {\n\treadonly serverId: ServerId;\n\treadonly auth: RadiusRelayAuthResolver;\n\treadonly webSocketFactory?: RadiusRelayWebSocketFactory;\n}): ByteTransportFactory {\n\treturn async (handlers) => {\n\t\tconst auth = await options.auth.resolve({ required: true });\n\t\tif (!auth) throw new Error(\"Radius authentication is required\");\n\t\tconst socket = await openRadiusRelayWebSocket(\n\t\t\trelayWebSocketUrl(auth.gateway, options.serverId),\n\t\t\tRADIUS_RELAY_CLIENT_SUBPROTOCOL,\n\t\t\tauth.token,\n\t\t\toptions.webSocketFactory ?? defaultWebSocketFactory,\n\t\t);\n\t\treturn new RadiusClientByteTransport(socket, handlers);\n\t};\n}\n\ntype RadiusReconnectClient = Pick<\n\tClient,\n\t| \"attachment\"\n\t| \"connected\"\n\t| \"connectionState\"\n\t| \"disconnect\"\n\t| \"onAttachmentChange\"\n\t| \"onConnectionStateChange\"\n\t| \"reconnect\"\n>;\n\n/** Reconnect one established Radius client and restore its last selected Session. */\nexport class RadiusClientReconnect {\n\treadonly #client: RadiusReconnectClient;\n\treadonly #reattach: (sessionId: string) => Promise<void>;\n\treadonly #abortController = new AbortController();\n\treadonly #removeConnectionListener: () => void;\n\treadonly #removeAttachmentListener: () => void;\n\t#desiredSessionId: string | undefined;\n\t#reconnecting: Promise<void> | undefined;\n\t#disposed = false;\n\n\tconstructor(client: RadiusReconnectClient, reattach: (sessionId: string) => Promise<void>) {\n\t\tthis.#client = client;\n\t\tthis.#reattach = reattach;\n\t\tthis.#desiredSessionId = client.attachment?.sessionId;\n\t\tthis.#removeAttachmentListener = client.onAttachmentChange((attachment) => {\n\t\t\tif (attachment !== undefined) this.#desiredSessionId = attachment.sessionId;\n\t\t\telse if (client.connected) this.#desiredSessionId = undefined;\n\t\t});\n\t\tthis.#removeConnectionListener = client.onConnectionStateChange(({ state }) => {\n\t\t\tif (state === \"disconnected\" && !this.#disposed) this.#startReconnect();\n\t\t});\n\t}\n\n\tasync dispose(): Promise<void> {\n\t\tif (this.#disposed) return;\n\t\tthis.#disposed = true;\n\t\tthis.#removeConnectionListener();\n\t\tthis.#removeAttachmentListener();\n\t\tthis.#abortController.abort();\n\t\tif (this.#client.connectionState !== \"disconnected\") {\n\t\t\tthis.#client.disconnect(\"Radius reconnect stopped\");\n\t\t}\n\t\tawait this.#reconnecting;\n\t}\n\n\t#startReconnect(): void {\n\t\tif (this.#reconnecting !== undefined) return;\n\t\tthis.#reconnecting = this.#runReconnect().finally(() => {\n\t\t\tthis.#reconnecting = undefined;\n\t\t});\n\t}\n\n\tasync #runReconnect(): Promise<void> {\n\t\tlet retryMs = CLIENT_RETRY_INITIAL_MS;\n\t\twhile (!this.#disposed && !this.#client.connected) {\n\t\t\ttry {\n\t\t\t\tawait delay(retryMs, this.#abortController.signal, false);\n\t\t\t\tawait this.#client.reconnect();\n\t\t\t\tconst sessionId = this.#desiredSessionId;\n\t\t\t\tif (sessionId !== undefined) await this.#reattach(sessionId);\n\t\t\t\treturn;\n\t\t\t} catch (error) {\n\t\t\t\tif (this.#disposed || this.#abortController.signal.aborted) return;\n\t\t\t\tif (this.#client.connected) this.#client.disconnect(errorMessage(error));\n\t\t\t\tretryMs = Math.min(retryMs * 2, CLIENT_RETRY_MAX_MS);\n\t\t\t}\n\t\t}\n\t}\n}\n\nclass RelayServerByteConnection implements RelayByteConnection {\n\treadonly #sendChunk: (chunk: Uint8Array) => Promise<void>;\n\treadonly #closeConnection: (finalChunk?: Uint8Array) => Promise<void>;\n\t#closed = false;\n\n\tconstructor(\n\t\tsendChunk: (chunk: Uint8Array) => Promise<void>,\n\t\tcloseConnection: (finalChunk?: Uint8Array) => Promise<void>,\n\t) {\n\t\tthis.#sendChunk = sendChunk;\n\t\tthis.#closeConnection = closeConnection;\n\t}\n\n\tget closed(): boolean {\n\t\treturn this.#closed;\n\t}\n\n\tsend(chunk: Uint8Array): Promise<void> {\n\t\tif (this.#closed) return Promise.reject(new Error(\"Radius relay connection is closed\"));\n\t\treturn this.#sendChunk(chunk);\n\t}\n\n\tasync close(finalChunk?: Uint8Array): Promise<void> {\n\t\tif (this.#closed) return;\n\t\tthis.#closed = true;\n\t\tawait this.#closeConnection(finalChunk);\n\t}\n\n\tmarkClosed(): void {\n\t\tthis.#closed = true;\n\t}\n}\n\nclass RadiusClientByteTransport implements ByteTransport {\n\treadonly #socket: RadiusRelayWebSocket;\n\treadonly #handlers: ByteTransportHandlers;\n\treadonly #writer: OrderedWebSocketWriter;\n\treadonly #onMessage: (event: RadiusRelayMessageEvent) => void;\n\treadonly #onClose: (event: RadiusRelayCloseEvent) => void;\n\treadonly #onError: (event: RadiusRelayErrorEvent) => void;\n\t#closed = false;\n\n\tconstructor(socket: RadiusRelayWebSocket, handlers: ByteTransportHandlers) {\n\t\tthis.#socket = socket;\n\t\tthis.#handlers = handlers;\n\t\tthis.#writer = new OrderedWebSocketWriter(socket);\n\t\tthis.#onMessage = (event) => {\n\t\t\tif (this.#closed) return;\n\t\t\tif (!(event.data instanceof ArrayBuffer)) {\n\t\t\t\tthis.#fail(new Error(\"Radius relay client received a non-binary message\"));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tthis.#handlers.onData(new Uint8Array(event.data));\n\t\t};\n\t\tthis.#onClose = () => {\n\t\t\tif (this.#markClosed()) this.#handlers.onClose();\n\t\t};\n\t\tthis.#onError = (event) => this.#fail(webSocketError(event));\n\t\tsocket.addEventListener(\"message\", this.#onMessage);\n\t\tsocket.addEventListener(\"close\", this.#onClose);\n\t\tsocket.addEventListener(\"error\", this.#onError);\n\t}\n\n\tsend(chunk: Uint8Array): Promise<void> {\n\t\tif (!(chunk instanceof Uint8Array))\n\t\t\treturn Promise.reject(new TypeError(\"Radius relay chunks must be Uint8Array\"));\n\t\tif (this.#closed) return Promise.reject(new Error(\"Radius relay client is closed\"));\n\t\treturn this.#writer.send(chunk.slice().buffer);\n\t}\n\n\tclose(): void {\n\t\tif (!this.#markClosed()) return;\n\t\tthis.#socket.close(1000, \"Pi client closed\");\n\t}\n\n\t#fail(error: Error): void {\n\t\tif (!this.#markClosed()) return;\n\t\tcloseWebSocket(this.#socket, LOCAL_TRANSPORT_ERROR_CLOSE_CODE, \"Radius relay transport error\");\n\t\tthis.#handlers.onError(error);\n\t}\n\n\t#markClosed(): boolean {\n\t\tif (this.#closed) return false;\n\t\tthis.#closed = true;\n\t\tthis.#writer.close();\n\t\tthis.#socket.removeEventListener(\"message\", this.#onMessage);\n\t\tthis.#socket.removeEventListener(\"close\", this.#onClose);\n\t\tthis.#socket.removeEventListener(\"error\", this.#onError);\n\t\treturn true;\n\t}\n}\n\nclass OrderedWebSocketWriter {\n\treadonly #socket: RadiusRelayWebSocket;\n\t#tail: Promise<void> = Promise.resolve();\n\t#pendingBytes = 0;\n\t#closed = false;\n\n\tconstructor(socket: RadiusRelayWebSocket) {\n\t\tthis.#socket = socket;\n\t}\n\n\tsend(value: string | ArrayBuffer): Promise<void> {\n\t\tif (this.#closed) return Promise.reject(new Error(\"Radius relay WebSocket is closed\"));\n\t\tconst copied = typeof value === \"string\" ? value : value.slice(0);\n\t\tconst byteLength = typeof copied === \"string\" ? Buffer.byteLength(copied) : copied.byteLength;\n\t\tif (this.#pendingBytes + byteLength > MAX_PENDING_BYTES) {\n\t\t\treturn Promise.reject(new Error(\"Radius relay exceeded its pending byte limit\"));\n\t\t}\n\t\tthis.#pendingBytes += byteLength;\n\t\tconst operation = this.#tail.then(async () => {\n\t\t\tif (this.#closed || this.#socket.readyState !== this.#socket.OPEN) {\n\t\t\t\tthrow new Error(\"Radius relay WebSocket is closed\");\n\t\t\t}\n\t\t\tthis.#socket.send(copied);\n\t\t\twhile (this.#socket.bufferedAmount > DRAIN_THRESHOLD_BYTES) {\n\t\t\t\tif (this.#closed || this.#socket.readyState !== this.#socket.OPEN) {\n\t\t\t\t\tthrow new Error(\"Radius relay WebSocket closed during write\");\n\t\t\t\t}\n\t\t\t\tawait delay(5, undefined, false);\n\t\t\t}\n\t\t});\n\t\tconst tracked = operation.finally(() => {\n\t\t\tthis.#pendingBytes -= byteLength;\n\t\t});\n\t\tthis.#tail = tracked.catch(() => {});\n\t\treturn tracked;\n\t}\n\n\tclose(): void {\n\t\tthis.#closed = true;\n\t}\n}\n\ntype HostInputControlMessage =\n\t| { readonly version: 1; readonly type: \"ping\" | \"pong\" }\n\t| { readonly version: 1; readonly type: \"connection_open\"; readonly connection_id: string }\n\t| {\n\t\t\treadonly version: 1;\n\t\t\treadonly type: \"connection_close\";\n\t\t\treadonly connection_id: string;\n\t\t\treadonly code?: number;\n\t  };\n\ntype HostOutputControlMessage =\n\t| { readonly version: 1; readonly type: \"pong\" }\n\t| {\n\t\t\treadonly version: 1;\n\t\t\treadonly type: \"connection_close\";\n\t\t\treadonly connection_id: string;\n\t\t\treadonly code?: number;\n\t  };\n\nfunction parseHostControlMessage(value: string): HostInputControlMessage {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(value);\n\t} catch {\n\t\tthrow new Error(\"Invalid Radius relay control message\");\n\t}\n\tif (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n\t\tthrow new Error(\"Invalid Radius relay control message\");\n\t}\n\tconst message = parsed as { version?: unknown; type?: unknown; connection_id?: unknown; code?: unknown };\n\tif (message.version !== 1) throw new Error(\"Unsupported Radius relay control version\");\n\tif (message.type === \"ping\" || message.type === \"pong\") return { version: 1, type: message.type };\n\tif (\n\t\t(message.type === \"connection_open\" || message.type === \"connection_close\") &&\n\t\ttypeof message.connection_id === \"string\" &&\n\t\tCONNECTION_ID_PATTERN.test(message.connection_id) &&\n\t\t(message.code === undefined ||\n\t\t\t(typeof message.code === \"number\" &&\n\t\t\t\tNumber.isInteger(message.code) &&\n\t\t\t\tmessage.code >= 1000 &&\n\t\t\t\tmessage.code <= 4999))\n\t) {\n\t\treturn message.type === \"connection_open\"\n\t\t\t? { version: 1, type: \"connection_open\", connection_id: message.connection_id }\n\t\t\t: {\n\t\t\t\t\tversion: 1,\n\t\t\t\t\ttype: \"connection_close\",\n\t\t\t\t\tconnection_id: message.connection_id,\n\t\t\t\t\t...(message.code === undefined ? {} : { code: message.code }),\n\t\t\t\t};\n\t}\n\tthrow new Error(\"Invalid Radius relay control message\");\n}\n\nexport function encodeRelayDataFrame(connectionId: string, payload: Uint8Array): ArrayBuffer {\n\tif (!CONNECTION_ID_PATTERN.test(connectionId)) throw new TypeError(\"Invalid Radius relay connection ID\");\n\tconst frame = new Uint8Array(RELAY_DATA_HEADER_BYTES + payload.byteLength);\n\tframe[0] = RELAY_DATA_FRAME_VERSION;\n\tframe[1] = RELAY_DATA_FRAME_TYPE;\n\tconst hex = connectionId.replaceAll(\"-\", \"\");\n\tfor (let index = 0; index < 16; index++) {\n\t\tframe[index + 2] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);\n\t}\n\tframe.set(payload, RELAY_DATA_HEADER_BYTES);\n\treturn frame.buffer;\n}\n\nexport function parseRelayDataFrame(\n\tframe: ArrayBuffer,\n): { readonly connectionId: string; readonly payload: ArrayBuffer } | undefined {\n\tif (frame.byteLength < RELAY_DATA_HEADER_BYTES) return undefined;\n\tconst bytes = new Uint8Array(frame);\n\tif (bytes[0] !== RELAY_DATA_FRAME_VERSION || bytes[1] !== RELAY_DATA_FRAME_TYPE) return undefined;\n\tlet hex = \"\";\n\tfor (const byte of bytes.subarray(2, RELAY_DATA_HEADER_BYTES)) hex += byte.toString(16).padStart(2, \"0\");\n\tconst connectionId = `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;\n\tif (!CONNECTION_ID_PATTERN.test(connectionId)) return undefined;\n\treturn { connectionId, payload: frame.slice(RELAY_DATA_HEADER_BYTES) };\n}\n\nfunction relayWebSocketUrl(gateway: string, serverId: ServerId): string {\n\tconst url = new URL(`/v1/session-relays/${serverId}/connect`, gateway);\n\tif (url.protocol === \"https:\") url.protocol = \"wss:\";\n\telse if (url.protocol === \"http:\") url.protocol = \"ws:\";\n\telse throw new Error(`Unsupported Radius gateway protocol: ${url.protocol}`);\n\treturn url.toString();\n}\n\nfunction defaultWebSocketFactory(options: {\n\treadonly url: string;\n\treadonly protocol: string;\n\treadonly authorization: string;\n}): RadiusRelayWebSocket {\n\treturn new WebSocket(options.url, {\n\t\tprotocols: [options.protocol],\n\t\theaders: { authorization: options.authorization },\n\t}) as unknown as RadiusRelayWebSocket;\n}\n\nfunction openRadiusRelayWebSocket(\n\turl: string,\n\tprotocol: string,\n\ttoken: string,\n\tfactory: RadiusRelayWebSocketFactory,\n\tsignal?: AbortSignal,\n): Promise<RadiusRelayWebSocket> {\n\tsignal?.throwIfAborted();\n\treturn new Promise((resolve, reject) => {\n\t\tconst socket = factory({ url, protocol, authorization: `Bearer ${token}` });\n\t\tsocket.binaryType = \"arraybuffer\";\n\t\tlet settled = false;\n\t\tconst cleanup = (): void => {\n\t\t\tsocket.removeEventListener(\"open\", onOpen);\n\t\t\tsocket.removeEventListener(\"close\", onClose);\n\t\t\tsocket.removeEventListener(\"error\", onError);\n\t\t\tsignal?.removeEventListener(\"abort\", onAbort);\n\t\t};\n\t\tconst fail = (error: Error): void => {\n\t\t\tif (settled) return;\n\t\t\tsettled = true;\n\t\t\tcleanup();\n\t\t\tcloseWebSocket(socket, 1000, \"Radius relay connection failed\");\n\t\t\treject(error);\n\t\t};\n\t\tconst onOpen = (): void => {\n\t\t\tif (settled) return;\n\t\t\tif (socket.protocol !== protocol) {\n\t\t\t\tfail(new Error(`Radius relay selected unexpected WebSocket protocol ${JSON.stringify(socket.protocol)}`));\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tsettled = true;\n\t\t\tcleanup();\n\t\t\tresolve(socket);\n\t\t};\n\t\tconst onClose = (event: RadiusRelayCloseEvent): void =>\n\t\t\tfail(new Error(`Radius relay closed before connecting (${event.code})`));\n\t\tconst onError = (event: RadiusRelayErrorEvent): void => fail(webSocketError(event));\n\t\tconst onAbort = (): void => fail(new Error(\"Radius relay connection cancelled\"));\n\t\tsocket.addEventListener(\"open\", onOpen, { once: true });\n\t\tsocket.addEventListener(\"close\", onClose, { once: true });\n\t\tsocket.addEventListener(\"error\", onError, { once: true });\n\t\tsignal?.addEventListener(\"abort\", onAbort, { once: true });\n\t});\n}\n\nfunction closeWebSocket(socket: RadiusRelayWebSocket, code: number, reason: string): void {\n\ttry {\n\t\tsocket.close(code, reason);\n\t} catch {\n\t\t// A WebSocket can reject close() while its opening handshake is still pending.\n\t}\n}\n\nfunction webSocketError(event: RadiusRelayErrorEvent): Error {\n\tif (event.error instanceof Error && event.error.message.trim().length > 0) return event.error;\n\treturn new Error(event.message?.trim() || \"Radius WebSocket connection failed\");\n}\n\nfunction delay(milliseconds: number, signal: AbortSignal | undefined, unref: boolean): Promise<void> {\n\tsignal?.throwIfAborted();\n\treturn new Promise((resolve, reject) => {\n\t\tconst timer = setTimeout(() => {\n\t\t\tcleanup();\n\t\t\tresolve();\n\t\t}, milliseconds);\n\t\tif (unref) timer.unref();\n\t\tconst onAbort = (): void => {\n\t\t\tclearTimeout(timer);\n\t\t\tcleanup();\n\t\t\ttry {\n\t\t\t\tsignal?.throwIfAborted();\n\t\t\t} catch (error) {\n\t\t\t\treject(error);\n\t\t\t}\n\t\t};\n\t\tconst cleanup = (): void => signal?.removeEventListener(\"abort\", onAbort);\n\t\tsignal?.addEventListener(\"abort\", onAbort, { once: true });\n\t});\n}\n\nfunction toError(error: unknown): Error {\n\treturn error instanceof Error ? error : new Error(String(error));\n}\n\nfunction errorMessage(error: unknown): string {\n\treturn toError(error).message;\n}\n"]}