@geohar/un-bien 0.8.0 → 0.9.0

package/dist/launch.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Launch backends for remote `session_launch` — shared by the extension (index.ts)
+ * and the regime-2 launcher daemon. PTY-hosted backends exec `pi` cleanly (no
+ * keystrokes): `tmux` = a WINDOW in one shared named session; `herdr` =
+ * `workspace create` then `agent start --kind pi`. `rpc` is a fast-follow.
+ */
+/** Expand a leading `~`/`~/` to the extension machine's home dir. Node's `fs` does
+ *  NOT expand `~`, so a launch cwd like `~/proj` would fail the existsSync
+ *  check and silently abort the launch. Machine-side (the phone's `~` is
+ *  meaningless here). Exported for tests. */
+export declare function _expandTilde(p: string): string;
+/** Build the argv for launching `pi` in `cwd` as a WINDOW of the shared tmux
+ *  session `session` (one named session, a window per pi — clean `new-window`,
+ *  NO keystrokes/prefix). First launch creates the detached session; later ones
+ *  add a window. Array (never a shell string) so cwd/names can't inject.
+ *  Exported for tests. */
+export declare function _buildTmuxLaunchArgs(session: string, windowName: string, cwd: string, sessionExists: boolean): string[];
+/** argv for creating a detached herdr workspace in `cwd` (JSON response).
+ *  ARRAY (never a shell string) so cwd/label can't inject. Exported for tests. */
+export declare function _buildHerdrWorkspaceArgs(label: string, cwd: string): string[];
+/** argv for exec-launching `pi` as a named herdr agent in an existing pane —
+ *  herdr's canonical-executable launch (NOT keystroke injection). */
+export declare function _buildHerdrAgentStartArgs(agentName: string, paneId: string): string[];
+/** Extract `.result.root_pane.pane_id` from `herdr workspace create --json`. */
+export declare function _herdrPaneIdFromCreate(stdout: string): string | null;
+/**
+ * Honor a `session_launch` request. The caller checked the per-cwd opt-in and
+ * picked `mode` from `launch.backend` (machine config). PTY-hosted backends
+ * exec `pi` cleanly (no keystrokes): `tmux` = detached `new-session … pi`;
+ * `herdr` = `workspace create` then `agent start --kind pi`. `rpc` is a
+ * fast-follow (stubbed). Returns null when the launch is initiated, else an
+ * error string.
+ */
+export declare function _launchSession(mode: "tmux" | "herdr" | "rpc", cwd: string, name: string | undefined): string | null;

package/dist/launch.js

@@ -0,0 +1,171 @@
+import { spawn, spawnSync, execFile } from "node:child_process";
+import { basename, join } from "node:path";
+import { existsSync, statSync } from "node:fs";
+import { homedir } from "node:os";
+import { loadConfig } from "./config.js";
+import { envLog } from "./session/debug_log.js";
+/**
+ * Launch backends for remote `session_launch` — shared by the extension (index.ts)
+ * and the regime-2 launcher daemon. PTY-hosted backends exec `pi` cleanly (no
+ * keystrokes): `tmux` = a WINDOW in one shared named session; `herdr` =
+ * `workspace create` then `agent start --kind pi`. `rpc` is a fast-follow.
+ */
+/** Expand a leading `~`/`~/` to the extension machine's home dir. Node's `fs` does
+ *  NOT expand `~`, so a launch cwd like `~/proj` would fail the existsSync
+ *  check and silently abort the launch. Machine-side (the phone's `~` is
+ *  meaningless here). Exported for tests. */
+export function _expandTilde(p) {
+    if (p === "~")
+        return homedir();
+    if (p.startsWith("~/"))
+        return join(homedir(), p.slice(2));
+    return p;
+}
+/** Sanitize a tmux session name: keep it shell-safe and tmux-legal. */
+function _safeTmuxName(name, fallback) {
+    const base = (name ?? "").trim() || fallback;
+    // tmux disallows `.` and `:` in session names; strip anything risky.
+    const clean = base
+        .replace(/[^A-Za-z0-9_-]+/g, "-")
+        .replace(/-{2,}/g, "-")
+        .replace(/^-+|-+$/g, "");
+    return clean.slice(0, 40) || "pi";
+}
+/** Build the argv for launching `pi` in `cwd` as a WINDOW of the shared tmux
+ *  session `session` (one named session, a window per pi — clean `new-window`,
+ *  NO keystrokes/prefix). First launch creates the detached session; later ones
+ *  add a window. Array (never a shell string) so cwd/names can't inject.
+ *  Exported for tests. */
+export function _buildTmuxLaunchArgs(session, windowName, cwd, sessionExists) {
+    return sessionExists
+        ? ["new-window", "-t", session, "-n", windowName, "-c", cwd, "pi"]
+        : ["new-session", "-d", "-s", session, "-n", windowName, "-c", cwd, "pi"];
+}
+/** Sanitize a herdr agent name: must match [a-z][a-z0-9_-]{0,31}. */
+function _safeHerdrName(name, fallback) {
+    const base = (name ?? "").trim().toLowerCase() || fallback;
+    let clean = base
+        .replace(/[^a-z0-9_-]+/g, "-")
+        .replace(/-{2,}/g, "-")
+        .replace(/^-+|-+$/g, "");
+    if (!/^[a-z]/.test(clean))
+        clean = `pi-${clean}`;
+    return clean.slice(0, 32).replace(/-+$/g, "") || "pi";
+}
+/** argv for creating a detached herdr workspace in `cwd` (JSON response).
+ *  ARRAY (never a shell string) so cwd/label can't inject. Exported for tests. */
+export function _buildHerdrWorkspaceArgs(label, cwd) {
+    return [
+        "workspace",
+        "create",
+        "--cwd",
+        cwd,
+        "--label",
+        label,
+        "--no-focus",
+        "--json",
+    ];
+}
+/** argv for exec-launching `pi` as a named herdr agent in an existing pane —
+ *  herdr's canonical-executable launch (NOT keystroke injection). */
+export function _buildHerdrAgentStartArgs(agentName, paneId) {
+    return ["agent", "start", agentName, "--kind", "pi", "--pane", paneId];
+}
+/** Extract `.result.root_pane.pane_id` from `herdr workspace create --json`. */
+export function _herdrPaneIdFromCreate(stdout) {
+    try {
+        const j = JSON.parse(stdout);
+        const id = j.result?.root_pane?.pane_id;
+        return typeof id === "string" && id.length > 0 ? id : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Is a launch backend's binary present on PATH? A `--version` probe: a missing
+ *  binary (ENOENT) sets `error`; anything that runs counts as present. */
+function _backendAvailable(backend) {
+    try {
+        return (spawnSync(backend, ["--version"], {
+            stdio: "ignore",
+            timeout: 5_000,
+        }).error === undefined);
+    }
+    catch {
+        return false;
+    }
+}
+function _execFileCapture(cmd, args) {
+    return new Promise((resolve, reject) => {
+        execFile(cmd, args, { timeout: 15_000 }, (err, stdout) => {
+            if (err)
+                reject(err);
+            else
+                resolve(stdout);
+        });
+    });
+}
+/**
+ * herdr launch (clean exec, no keystrokes): create a detached workspace in
+ * `cwd`, then start `pi` as its agent via herdr's canonical-executable path
+ * (`agent start --kind pi`). Fire-and-forget — the launched pi joins the relay
+ * and the app attaches there; create/start errors are logged, not returned.
+ */
+async function _launchHerdr(cwd, agentName) {
+    try {
+        const created = await _execFileCapture("herdr", _buildHerdrWorkspaceArgs(agentName, cwd));
+        const paneId = _herdrPaneIdFromCreate(created);
+        if (!paneId) {
+            envLog("herdr launch: no root_pane_id in `workspace create` output");
+            return;
+        }
+        await _execFileCapture("herdr", _buildHerdrAgentStartArgs(agentName, paneId));
+        envLog(`herdr launch: agent '${agentName}' started in pane ${paneId}`);
+    }
+    catch (error) {
+        envLog(`herdr launch failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Honor a `session_launch` request. The caller checked the per-cwd opt-in and
+ * picked `mode` from `launch.backend` (machine config). PTY-hosted backends
+ * exec `pi` cleanly (no keystrokes): `tmux` = detached `new-session … pi`;
+ * `herdr` = `workspace create` then `agent start --kind pi`. `rpc` is a
+ * fast-follow (stubbed). Returns null when the launch is initiated, else an
+ * error string.
+ */
+export function _launchSession(mode, cwd, name) {
+    if (mode === "rpc")
+        return "launch mode 'rpc' is not supported yet";
+    if (mode !== "tmux" && mode !== "herdr") {
+        return `unknown launch mode '${mode}'`;
+    }
+    if (!existsSync(cwd) || !statSync(cwd).isDirectory()) {
+        return `cwd does not exist or is not a directory: ${cwd}`;
+    }
+    if (!_backendAvailable(mode)) {
+        return `launch backend '${mode}' is not installed`;
+    }
+    if (mode === "herdr") {
+        const agentName = _safeHerdrName(name, `pi-${basename(cwd) || "session"}`);
+        void _launchHerdr(cwd, agentName);
+        return null;
+    }
+    // One shared, named tmux session; each launch is a WINDOW in it (single
+    // attach point). Clean `new-window` via the CLI — never a prefix keystroke.
+    const session = _safeTmuxName(loadConfig().launch?.tmux_session, "un-bien");
+    const windowName = _safeTmuxName(name, `pi-${basename(cwd) || "session"}`);
+    const sessionExists = spawnSync("tmux", ["has-session", "-t", session], {
+        stdio: "ignore",
+        timeout: 5_000,
+    }).status === 0;
+    try {
+        const child = spawn("tmux", _buildTmuxLaunchArgs(session, windowName, cwd, sessionExists), { detached: true, stdio: "ignore" });
+        child.unref();
+        return null;
+    }
+    catch (error) {
+        return `tmux launch failed: ${error instanceof Error ? error.message : String(error)}`;
+    }
+}
+//# sourceMappingURL=launch.js.map

package/dist/launch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch.js","sourceRoot":"","sources":["../src/launch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAEhD;;;;;GAKG;AAEH;;;6CAG6C;AAC7C,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IAChC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uEAAuE;AACvE,SAAS,aAAa,CAAC,IAAwB,EAAE,QAAgB;IAC/D,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC;IAC7C,qEAAqE;IACrE,MAAM,KAAK,GAAG,IAAI;SACf,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC;SAChC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;AACpC,CAAC;AAED;;;;0BAI0B;AAC1B,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,UAAkB,EAClB,GAAW,EACX,aAAsB;IAEtB,OAAO,aAAa;QAClB,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC;QAClE,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,qEAAqE;AACrE,SAAS,cAAc,CAAC,IAAwB,EAAE,QAAgB;IAChE,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC;IAC3D,IAAI,KAAK,GAAG,IAAI;SACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,KAAK,GAAG,MAAM,KAAK,EAAE,CAAC;IACjD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;AACxD,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,GAAW;IACjE,OAAO;QACL,WAAW;QACX,QAAQ;QACR,OAAO;QACP,GAAG;QACH,SAAS;QACT,KAAK;QACL,YAAY;QACZ,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;qEACqE;AACrE,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,MAAc;IAEd,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AACzE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAE1B,CAAC;QACF,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC;QACxC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;0EAC0E;AAC1E,SAAS,iBAAiB,CAAC,OAAyB;IAClD,IAAI,CAAC;QACH,OAAO,CACL,SAAS,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;YAChC,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,KAAK;SACf,CAAC,CAAC,KAAK,KAAK,SAAS,CACvB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,IAAc;IACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YACvD,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAChB,OAAO,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,SAAiB;IACxD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CACpC,OAAO,EACP,wBAAwB,CAAC,SAAS,EAAE,GAAG,CAAC,CACzC,CAAC;QACF,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,4DAA4D,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,MAAM,gBAAgB,CACpB,OAAO,EACP,yBAAyB,CAAC,SAAS,EAAE,MAAM,CAAC,CAC7C,CAAC;QACF,MAAM,CAAC,wBAAwB,SAAS,qBAAqB,MAAM,EAAE,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CACJ,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,IAA8B,EAC9B,GAAW,EACX,IAAwB;IAExB,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,wCAAwC,CAAC;IACpE,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACxC,OAAO,wBAAwB,IAAI,GAAG,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACrD,OAAO,6CAA6C,GAAG,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,mBAAmB,IAAI,oBAAoB,CAAC;IACrD,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;QAC3E,KAAK,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;IAC3E,MAAM,aAAa,GACjB,SAAS,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;QAChD,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,KAAK;KACf,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CACjB,MAAM,EACN,oBAAoB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,CAAC,EAC7D,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpC,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACzF,CAAC;AACH,CAAC"}

package/dist/launcher/launcher.d.ts

@@ -0,0 +1,6 @@
+export interface LauncherHandle {
+    readonly roomId: string;
+    readonly epk: string;
+    stop(): void;
+}
+export declare function startLauncher(): Promise<LauncherHandle>;

package/dist/launcher/launcher.js

@@ -0,0 +1,188 @@
+import { Buffer } from "node:buffer";
+import { hostname, homedir } from "node:os";
+import { RelayClient } from "../transport/relay_client.js";
+import { PlainPeerChannel } from "../transport/peer_channel.js";
+import { getOrCreateEd25519Keypair } from "../pairing/storage.js";
+import { roomIdForControl } from "../rooms.js";
+import { _findKnownPeer } from "../pairing/peer_trust.js";
+import { _launchSession, _expandTilde } from "../launch.js";
+import { helloEnvelope, isEnvelopeFrame, } from "../session/rpc_envelope.js";
+import { loadConfig, resolveRelayUrl } from "../config.js";
+import { loadLocalConfig, effectiveAllowRemoteLaunch, } from "../session/local_config.js";
+import { envLog } from "../session/debug_log.js";
+/**
+ * Regime-2 machine-launcher core (pi-INDEPENDENT — no pi SDK). A lightweight
+ * mesh peer that lets a paired app reach a machine with NO live pi session:
+ * it joins the machine-level control room (roomIdForControl), advertises the
+ * `remote_launch` capability, and on a `session_launch` frame spawns a
+ * tmux/herdr window via the shared launch module. Owner-auth reuses the extension's
+ * exact gate (relay verifies the peer's key; _findKnownPeer checks peers.json).
+ *
+ * NOT a pi process: no transcript/rpc/panels, no pairing (pairing happens once
+ * via any session extension's QR — the launcher only trusts already-paired owners).
+ */
+const RECONNECT_DELAY_MS = 3_000;
+/** Caps the launcher daemon advertises: `remote_launch` gates the app's launch
+ *  control; `is_daemon` marks the control room so the app filters it. */
+const DAEMON_CAPS = ["remote_launch", "is_daemon"];
+export async function startLauncher() {
+    const kp = await getOrCreateEd25519Keypair();
+    const epk = Buffer.from(kp.publicKey).toString("base64url");
+    const roomId = roomIdForControl(epk);
+    const resolution = resolveRelayUrl();
+    if (!resolution.url) {
+        throw new Error("un-bien launcher: no relay configured (set UNBIEN_RELAY or the `relay` config key)");
+    }
+    const relayUrl = resolution.url;
+    let stopped = false;
+    let relay = null;
+    const channels = new Map();
+    /** The machine's configured launch backend (rpc is a fast-follow). */
+    function configuredBackend() {
+        return loadConfig().launch?.backend === "herdr" ? "herdr" : "tmux";
+    }
+    /** Liveness: answer a stock `ping` with `pong`, mirroring the extension's
+     *  transport-control handler (index.ts) so a health check works against an
+     *  idle machine too. Distinct from the `presence_status` caps PULL — this is
+     *  the plain are-you-there reply, no caps. */
+    function handleStockMessage(msg, sender) {
+        if (msg.type === "ping") {
+            sender.send({
+                type: "pong",
+                in_reply_to: msg.id,
+            });
+        }
+    }
+    /** Handle a ub-frame from an attached owner. `presence_status` is the
+     *  DAEMON-SPECIFIC caps PULL (design 01M1813Q) — reply with caps + hostname +
+     *  backend. `session_launch` mirrors the extension's _routeUnBienPlaneFrom handler:
+     *  per-cwd opt-in, machine-config backend, clean exec (no keystrokes). */
+    function handleUbFrame(env, sender) {
+        if (env.ub === undefined)
+            return;
+        const frame = env.ub;
+        if (frame.type === "presence_status") {
+            sender.sendEnvelope({
+                ub: {
+                    type: "presence_status",
+                    caps: [...DAEMON_CAPS],
+                    hostname: hostname(),
+                    backend: configuredBackend(),
+                    ...(typeof frame.id === "string" ? { in_reply_to: frame.id } : {}),
+                },
+            });
+            return;
+        }
+        if (frame.type !== "session_launch")
+            return;
+        const cwd = _expandTilde(typeof frame.cwd === "string" && frame.cwd.length > 0
+            ? frame.cwd
+            : process.cwd());
+        if (!effectiveAllowRemoteLaunch(loadLocalConfig(cwd))) {
+            envLog("launcher session_launch: remote launch disabled on this machine");
+            return;
+        }
+        const launchError = _launchSession(configuredBackend(), cwd, typeof frame.name === "string" ? frame.name : undefined);
+        if (launchError)
+            envLog(`launcher session_launch error: ${launchError}`);
+    }
+    async function gateAndAttach(r, peer, firstInner) {
+        const known = await _findKnownPeer(peer);
+        if (!known) {
+            // Relay-verified but not a paired owner (never paired / revoked). Signal
+            // so the app can react, mirroring the extension's unknown-peer reply.
+            try {
+                const errCt = Buffer.from(JSON.stringify({
+                    type: "error",
+                    code: "unknown_peer",
+                    message: "Peer not paired — re-scan QR",
+                })).toString("base64");
+                r.send(JSON.stringify({ peer, ct: errCt }));
+            }
+            catch {
+                /* relay down — nothing to signal */
+            }
+            return;
+        }
+        if (channels.has(peer))
+            return;
+        const channel = new PlainPeerChannel(r, peer, roomId, (msg) => handleStockMessage(msg, channel), // liveness ping->pong
+        () => channels.delete(peer), (env) => handleUbFrame(env, channel));
+        channels.set(peer, channel);
+        // Advertise machine caps up front so the app enables its launch control for
+        // this control room. No sessionId — the launcher has no pi session.
+        channel.sendEnvelope(helloEnvelope([...DAEMON_CAPS]));
+        envLog(`launcher: owner ${peer.slice(0, 8)} (${known.name}) attached; caps sent`);
+        // The channel didn't see the line that triggered the attach — route it.
+        if (isEnvelopeFrame(firstInner)) {
+            handleUbFrame(firstInner, channel);
+        }
+    }
+    function onMsg(r, line) {
+        let outer;
+        try {
+            outer = JSON.parse(line);
+        }
+        catch {
+            return;
+        }
+        if (!outer.peer || !outer.ct)
+            return;
+        if (channels.has(outer.peer))
+            return; // its PlainPeerChannel handles routing
+        let inner;
+        try {
+            inner = JSON.parse(Buffer.from(outer.ct, "base64").toString("utf8"));
+        }
+        catch {
+            return;
+        }
+        if (!inner || typeof inner !== "object")
+            return;
+        void gateAndAttach(r, outer.peer, inner);
+    }
+    function scheduleReconnect() {
+        if (stopped)
+            return;
+        setTimeout(() => {
+            if (stopped)
+                return;
+            connectOnce().catch(() => scheduleReconnect());
+        }, RECONNECT_DELAY_MS);
+    }
+    async function connectOnce() {
+        const r = new RelayClient(relayUrl, kp);
+        relay = r;
+        r.on("message", (line) => onMsg(r, line));
+        r.on("close", () => {
+            channels.clear();
+            if (!stopped)
+                scheduleReconnect();
+        });
+        await r.connect({
+            roomId,
+            // caps ride room_meta so the app filters the control room from the announce.
+            roomMeta: { name: hostname(), cwd: homedir(), caps: [...DAEMON_CAPS] },
+        });
+        envLog(`launcher: connected to control room ${roomId} (epk ${epk.slice(0, 12)}…)`);
+    }
+    await connectOnce();
+    return {
+        roomId,
+        epk,
+        stop() {
+            stopped = true;
+            for (const ch of channels.values()) {
+                try {
+                    ch.detach();
+                }
+                catch {
+                    /* best-effort */
+                }
+            }
+            channels.clear();
+            relay?.close();
+        },
+    };
+}
+//# sourceMappingURL=launcher.js.map

package/dist/launcher/launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../src/launcher/launcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EACL,aAAa,EACb,eAAe,GAEhB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EACL,eAAe,EACf,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAGjD;;;;;;;;;;GAUG;AAEH,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC;yEACyE;AACzE,MAAM,WAAW,GAAG,CAAC,eAAe,EAAE,WAAW,CAAU,CAAC;AAQ5D,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,EAAE,GAAG,MAAM,yBAAyB,EAAE,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,eAAe,EAAE,CAAC;IACrC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC;IAEhC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,GAAuB,IAAI,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IAErD,sEAAsE;IACtE,SAAS,iBAAiB;QACxB,OAAO,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IACrE,CAAC;IAED;;;kDAG8C;IAC9C,SAAS,kBAAkB,CACzB,GAAkB,EAClB,MAAwB;QAExB,IAAK,GAAyB,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAG,GAAuB,CAAC,EAAE;aACxB,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED;;;8EAG0E;IAC1E,SAAS,aAAa,CAAC,GAAoB,EAAE,MAAwB;QACnE,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,EAA6B,CAAC;QAEhD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACrC,MAAM,CAAC,YAAY,CAAC;gBAClB,EAAE,EAAE;oBACF,IAAI,EAAE,iBAAiB;oBACvB,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC;oBACtB,QAAQ,EAAE,QAAQ,EAAE;oBACpB,OAAO,EAAE,iBAAiB,EAAE;oBAC5B,GAAG,CAAC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnE;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAAE,OAAO;QAC5C,MAAM,GAAG,GAAG,YAAY,CACtB,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;YACnD,CAAC,CAAC,KAAK,CAAC,GAAG;YACX,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,CAAC;QACF,IAAI,CAAC,0BAA0B,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,CAAC,iEAAiE,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,cAAc,CAChC,iBAAiB,EAAE,EACnB,GAAG,EACH,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;QACF,IAAI,WAAW;YAAE,MAAM,CAAC,kCAAkC,WAAW,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,UAAU,aAAa,CAC1B,CAAc,EACd,IAAY,EACZ,UAAmB;QAEnB,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,yEAAyE;YACzE,sEAAsE;YACtE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,8BAA8B;iBACxC,CAAC,CACH,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACrB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAE/B,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAClC,CAAC,EACD,IAAI,EACJ,MAAM,EACN,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,sBAAsB;QACjE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAC3B,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CACrC,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5B,4EAA4E;QAC5E,oEAAoE;QACpE,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,CACJ,mBAAmB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,uBAAuB,CAC1E,CAAC;QACF,wEAAwE;QACxE,IAAI,eAAe,CAAC,UAAqC,CAAC,EAAE,CAAC;YAC3D,aAAa,CAAC,UAA6B,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,SAAS,KAAK,CAAC,CAAc,EAAE,IAAY;QACzC,IAAI,KAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO;QACrC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,uCAAuC;QAE7E,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO;QAChD,KAAK,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,SAAS,iBAAiB;QACxB,IAAI,OAAO;YAAE,OAAO;QACpB,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,OAAO;gBAAE,OAAO;YACpB,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACjD,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,UAAU,WAAW;QACxB,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxC,KAAK,GAAG,CAAC,CAAC;QACV,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACjB,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO;gBAAE,iBAAiB,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,OAAO,CAAC;YACd,MAAM;YACN,6EAA6E;YAC7E,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE;SACvE,CAAC,CAAC;QACH,MAAM,CACJ,uCAAuC,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAC3E,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,EAAE,CAAC;IAEpB,OAAO;QACL,MAAM;QACN,GAAG;QACH,IAAI;YACF,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,EAAE,CAAC,MAAM,EAAE,CAAC;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,EAAE,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/pairing/peer_trust.d.ts

@@ -0,0 +1,20 @@
+import { type PeerRecord } from "./storage.js";
+/**
+ * Owner-trust lookups shared by the extension (index.ts) and the regime-2 launcher
+ * daemon. The trust model: the RELAY authenticates a peer's Ed25519 key
+ * ownership (challenge-response), so an inbound `peer` id IS the owner's
+ * cryptographic identity; authorization is then "is this key in peers.json?".
+ * Revocation is expressed by REMOVING the record, so a peers.json match is
+ * itself the not-revoked check — there is no separate revoked flag to honor.
+ */
+export interface InspectedPeerRecord {
+    readonly record: PeerRecord;
+    readonly rawHandle: string;
+    readonly runtimeKey: string | null;
+}
+export declare function _runtimeOwnerFingerprint(runtimeKey: string): string;
+export declare function _inspectPeerRecord(record: unknown): InspectedPeerRecord | null;
+/** Resolve a relay-verified inbound `peer` id to its paired PeerRecord, or null
+ *  if it isn't a known owner (never paired, or revoked → removed from
+ *  peers.json). This IS the owner-authorization gate. */
+export declare function _findKnownPeer(appPeerIdStd: string): Promise<PeerRecord | null>;

package/dist/pairing/peer_trust.js

@@ -0,0 +1,82 @@
+import { createHash } from "node:crypto";
+import { canonicalizeEd25519PublicKey, decodeEd25519PublicKey, publicKeyFingerprint, } from "../mesh/encoding.js";
+import { listPeers } from "./storage.js";
+/** Metadata-only fingerprint of an UNTRUSTED/unparseable owner handle — used in
+ *  diagnostics so a malformed record never puts key bytes in a log line. */
+function _rawOwnerFingerprint(rawValue) {
+    let fingerprintInput;
+    if (typeof rawValue === "string") {
+        fingerprintInput = rawValue;
+    }
+    else {
+        try {
+            const serialized = JSON.stringify(rawValue);
+            const type = rawValue === null ? "null" : typeof rawValue;
+            fingerprintInput = `${type}:${serialized ?? ""}`;
+        }
+        catch {
+            fingerprintInput = `${typeof rawValue}:unserializable`;
+        }
+    }
+    return createHash("sha256")
+        .update(fingerprintInput, "utf8")
+        .digest("hex")
+        .slice(0, 8);
+}
+export function _runtimeOwnerFingerprint(runtimeKey) {
+    try {
+        return publicKeyFingerprint(decodeEd25519PublicKey(runtimeKey, "Owner runtime key"));
+    }
+    catch {
+        // Relay authentication guarantees canonical keys in production. This
+        // fallback keeps diagnostics metadata-only at defensive/test boundaries.
+        return _rawOwnerFingerprint(runtimeKey);
+    }
+}
+export function _inspectPeerRecord(record) {
+    if (!record || typeof record !== "object") {
+        const fingerprint = _rawOwnerFingerprint(record);
+        console.warn(`[un-bien] event=invalid_owner_record owner_fp=${fingerprint}`);
+        return null;
+    }
+    const candidate = record;
+    const rawHandle = candidate.remote_epk;
+    if (typeof rawHandle !== "string") {
+        const fingerprint = _rawOwnerFingerprint(rawHandle);
+        console.warn(`[un-bien] event=invalid_owner_record owner_fp=${fingerprint}`);
+        return null;
+    }
+    const safeRecord = {
+        name: typeof candidate.name === "string" ? candidate.name : "Unknown Owner",
+        remote_epk: rawHandle,
+        paired_at: typeof candidate.paired_at === "string" ? candidate.paired_at : "",
+    };
+    try {
+        const runtimeKey = canonicalizeEd25519PublicKey(rawHandle, "stored Owner public key");
+        return { record: safeRecord, rawHandle, runtimeKey };
+    }
+    catch {
+        const fingerprint = _rawOwnerFingerprint(rawHandle);
+        console.warn(`[un-bien] event=invalid_owner_record owner_fp=${fingerprint}`);
+        return { record: safeRecord, rawHandle, runtimeKey: null };
+    }
+}
+/** Resolve a relay-verified inbound `peer` id to its paired PeerRecord, or null
+ *  if it isn't a known owner (never paired, or revoked → removed from
+ *  peers.json). This IS the owner-authorization gate. */
+export async function _findKnownPeer(appPeerIdStd) {
+    let runtimeKey;
+    try {
+        runtimeKey = canonicalizeEd25519PublicKey(appPeerIdStd, "Relay Owner key");
+    }
+    catch {
+        return null;
+    }
+    for (const record of await listPeers()) {
+        const inspected = _inspectPeerRecord(record);
+        if (inspected?.runtimeKey === runtimeKey)
+            return inspected.record;
+    }
+    return null;
+}
+//# sourceMappingURL=peer_trust.js.map

package/dist/pairing/peer_trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peer_trust.js","sourceRoot":"","sources":["../../src/pairing/peer_trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAmB,MAAM,cAAc,CAAC;AAiB1D;4EAC4E;AAC5E,SAAS,oBAAoB,CAAC,QAAiB;IAC7C,IAAI,gBAAwB,CAAC;IAC7B,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,gBAAgB,GAAG,QAAQ,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC;YAC1D,gBAAgB,GAAG,GAAG,IAAI,IAAI,UAAU,IAAI,EAAE,EAAE,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,gBAAgB,GAAG,GAAG,OAAO,QAAQ,iBAAiB,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,UAAkB;IACzD,IAAI,CAAC;QACH,OAAO,oBAAoB,CACzB,sBAAsB,CAAC,UAAU,EAAE,mBAAmB,CAAC,CACxD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,yEAAyE;QACzE,OAAO,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAe;IAEf,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CACV,iDAAiD,WAAW,EAAE,CAC/D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,MAAoD,CAAC;IACvE,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC;IACvC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CACV,iDAAiD,WAAW,EAAE,CAC/D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAe;QAC7B,IAAI,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe;QAC3E,UAAU,EAAE,SAAS;QACrB,SAAS,EACP,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;KACrE,CAAC;IACF,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,4BAA4B,CAC7C,SAAS,EACT,yBAAyB,CAC1B,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACpD,OAAO,CAAC,IAAI,CACV,iDAAiD,WAAW,EAAE,CAC/D,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;yDAEyD;AACzD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,YAAoB;IAEpB,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,4BAA4B,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,MAAM,SAAS,EAAE,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,SAAS,EAAE,UAAU,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC,MAAM,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/panel_bridge.d.ts

@@ -12,4 +12,6 @@ export interface PanelBridge {
  * Returns `null` when the SDK exposes no usable events bus (defensive — modern
  * Pi always has one); callers stay null-safe.
  */
-export declare function createPanelBridge(pi: ExtensionAPI, broadcast: (msg: ServerMessage) => void): PanelBridge | null;
+export declare function createPanelBridge(pi: ExtensionAPI, broadcast: (msg: ServerMessage) => void, opts?: {
+    suppressAgents?: boolean;
+}): PanelBridge | null;

package/dist/panel_bridge.js

@@ -30,7 +30,7 @@ const AGENTS_KEY = "subagents";
  * Returns `null` when the SDK exposes no usable events bus (defensive — modern
  * Pi always has one); callers stay null-safe.
  */
-export function createPanelBridge(pi, broadcast) {
+export function createPanelBridge(pi, broadcast, opts) {
     const eventsRaw = pi.events;
     if (!eventsRaw || typeof eventsRaw.on !== "function") {
         return null;
@@ -38,8 +38,9 @@ export function createPanelBridge(pi, broadcast) {
     const events = eventsRaw;
     // Opt-in tracing: shows whether bus events land and whether a panel frame is
     // broadcast, to isolate capture vs render. Enabled by the `debug.panels` pref
-    // in the global config (`extensions/un-bien.json`) — logs to stderr AND appends
-    // to `<state>/panel-bridge.log`. stderr scrolls too fast — tail the file.
+    // in the global config (`extensions/un-bien.json`) — appends to
+    // `<state>/panel-bridge.log` only. Direct stderr writes corrupt the TUI, so
+    // `tail -f` the file instead.
     const debug = (() => {
         if (loadConfig().debug?.panels !== true)
             return () => { };
@@ -54,12 +55,6 @@ export function createPanelBridge(pi, broadcast) {
         const logFile = join(dir, "panel-bridge.log");
         return (msg) => {
             const line = `${new Date().toISOString()} [panel-bridge] ${msg}`;
-            try {
-                console.error(line);
-            }
-            catch {
-                /* stderr closed */
-            }
             try {
                 appendFileSync(logFile, `${line}\n`);
             }
@@ -237,7 +232,12 @@ export function createPanelBridge(pi, broadcast) {
         debug(`fleet=${fleet.size} after ${status} ${id}`);
         broadcastNow(AGENTS_KEY, agentsFrame);
     };
-    const unsubAgents = Object.entries(LIFECYCLE).map(([channel, status]) => events.on(channel, recordAgent(status)));
+    // When the subagent-rooms feature owns the subagents panel (producing it from
+    // pi child detection), don't ALSO drive it from the bus here — two producers
+    // would fight over the same `subagents` panel key.
+    const unsubAgents = opts?.suppressAgents
+        ? []
+        : Object.entries(LIFECYCLE).map(([channel, status]) => events.on(channel, recordAgent(status)));
     // NB: unlike pi-plan's TUI (which clears its fleet on session_shutdown to reset
     // the widget), we deliberately KEEP finished agents. Broadcasting an empty
     // frame on shutdown would clobber the app's panel the instant a fast agent