@gtc6244/immediacy-daemon 0.2.1 → 0.2.3

package/dist/src/push.d.ts

@@ -0,0 +1,104 @@
+/**
+ * FCM push — the daemon is the sender (docs/fcm-setup.md).
+ *
+ * The phone does NOT fight to hold the WebSocket open in the background: it
+ * drops the socket and reconnects on resume. So when an agent needs attention
+ * (a deferred permission request, a finished turn, a usage limit) and NO client
+ * socket is live, the daemon wakes the app via FCM. On resume the app reconnects,
+ * the socket replays state, and the actionable card is already there.
+ *
+ * Three pieces:
+ *  - {@link PushTokenStore}: the set of device FCM tokens the app registered over
+ *    the socket (`push.register`), persisted like a credential (0600).
+ *  - {@link FcmSender}: mints a short-lived OAuth2 access token from a Firebase
+ *    service account (env `FCM_SERVICE_ACCOUNT` → a JSON key file, or
+ *    `FCM_SERVICE_ACCOUNT_JSON` → the JSON inline) and POSTs to the FCM v1 API.
+ *    No `firebase-admin` dependency — a signed JWT + `fetch`, matching the
+ *    daemon's lightweight-deps rule. Disabled (a silent no-op) when no service
+ *    account is configured, so a daemon without FCM keeps running unchanged.
+ *  - {@link PushNotifier}: the seam the WorkspaceManager calls. Gated on "no live
+ *    client" so a foregrounded app (which already gets the live event + a local
+ *    notification) is never double-notified; prunes tokens FCM reports as stale.
+ */
+import type { PushPlatform } from "./protocol.js";
+/** A device's FCM registration, keyed by the (unique) token. */
+export interface PushToken {
+    token: string;
+    platform: PushPlatform;
+    /** ms epoch of the last register — lets a future prune drop ancient tokens. */
+    updatedAt: number;
+}
+/**
+ * Durable set of device FCM tokens. Single-user, but several devices may be
+ * paired (phone + tablet), so this is a small keyed collection rather than a
+ * single value. Written 0600 (a token lets anyone holding the FCM key wake that
+ * device), mirroring credentials.ts.
+ */
+export declare class PushTokenStore {
+    private tokens;
+    private writeChain;
+    load(): Promise<void>;
+    all(): PushToken[];
+    /** Add/refresh a device token (idempotent; a re-register just bumps the time). */
+    register(token: string, platform: PushPlatform): Promise<boolean>;
+    /** Drop a token (client signed off, or FCM reported it stale). */
+    unregister(token: string): Promise<void>;
+    private persist;
+}
+/** What a send attempt resolved to — `stale` tells the caller to prune the token. */
+export type SendOutcome = "ok" | "stale" | "error" | "disabled";
+/** A ready-to-send push (platform-neutral; the sender maps it to the FCM shape). */
+export interface PushMessage {
+    title: string;
+    body: string;
+    /** All values are strings on the wire — the sender coerces before sending. */
+    data: Record<string, string>;
+    /** Android notification channel id (matches app/lib/notifications.dart). */
+    androidChannel: "permissions" | "activity";
+    /** Wake-now (permission/limit) vs. normal (done). Drives priority + APNs. */
+    urgent: boolean;
+}
+/**
+ * Sends messages to FCM's HTTP v1 API using a service account. Lazily mints and
+ * caches an OAuth2 access token (valid ~1h); refreshes a minute before expiry.
+ */
+export declare class FcmSender {
+    private sa?;
+    private access?;
+    /** Serializes token minting so a burst of sends does one token exchange. */
+    private minting?;
+    /** True once a service account has loaded — otherwise every send is a no-op. */
+    get enabled(): boolean;
+    /**
+     * Load the service account from the environment. `FCM_SERVICE_ACCOUNT` points
+     * at a JSON key file (kept OUTSIDE the repo); `FCM_SERVICE_ACCOUNT_JSON` holds
+     * the JSON inline (for container secrets). Absent → disabled (no throw).
+     */
+    load(): Promise<void>;
+    private accessToken;
+    private mint;
+    /** Send one message to one device token. Never throws — returns an outcome. */
+    send(token: string, msg: PushMessage): Promise<SendOutcome>;
+}
+/**
+ * The call seam the WorkspaceManager uses. Fans a wake-up out to every device
+ * token, but only when NO client socket is live — a foregrounded app already
+ * receives the event over the wire and raises its own local notification, so
+ * pushing then would double-notify. Tokens FCM reports as stale are pruned.
+ */
+export declare class PushNotifier {
+    private tokens;
+    private sender;
+    /** True while at least one client socket is attached (see Hub). */
+    private hasLiveClients;
+    constructor(tokens: PushTokenStore, sender: FcmSender, 
+    /** True while at least one client socket is attached (see Hub). */
+    hasLiveClients: () => boolean);
+    notifyPermission(ws: string, name: string, tool: string, summary: string, seq?: number): void;
+    notifyDone(ws: string, name: string, summary: string | undefined, seq?: number): void;
+    notifyLimit(ws: string, name: string, message: string): void;
+    /** Build the FCM data map: everything stringified, undefined/empty dropped. */
+    private data;
+    private dispatch;
+    private fanOut;
+}

package/dist/src/push.js

@@ -0,0 +1,339 @@
+/**
+ * FCM push — the daemon is the sender (docs/fcm-setup.md).
+ *
+ * The phone does NOT fight to hold the WebSocket open in the background: it
+ * drops the socket and reconnects on resume. So when an agent needs attention
+ * (a deferred permission request, a finished turn, a usage limit) and NO client
+ * socket is live, the daemon wakes the app via FCM. On resume the app reconnects,
+ * the socket replays state, and the actionable card is already there.
+ *
+ * Three pieces:
+ *  - {@link PushTokenStore}: the set of device FCM tokens the app registered over
+ *    the socket (`push.register`), persisted like a credential (0600).
+ *  - {@link FcmSender}: mints a short-lived OAuth2 access token from a Firebase
+ *    service account (env `FCM_SERVICE_ACCOUNT` → a JSON key file, or
+ *    `FCM_SERVICE_ACCOUNT_JSON` → the JSON inline) and POSTs to the FCM v1 API.
+ *    No `firebase-admin` dependency — a signed JWT + `fetch`, matching the
+ *    daemon's lightweight-deps rule. Disabled (a silent no-op) when no service
+ *    account is configured, so a daemon without FCM keeps running unchanged.
+ *  - {@link PushNotifier}: the seam the WorkspaceManager calls. Gated on "no live
+ *    client" so a foregrounded app (which already gets the live event + a local
+ *    notification) is never double-notified; prunes tokens FCM reports as stale.
+ */
+import { createSign } from "node:crypto";
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { logger } from "./log.js";
+const TOKENS_FILE = process.env.PUSH_TOKENS_FILE ?? join(homedir(), ".immediacy", "push-tokens.json");
+/** Cap the stored set so a buggy/hostile client can't grow the file unbounded. */
+const MAX_TOKENS = 32;
+/** FCM registration tokens are ~160 chars; refuse anything absurd. */
+const MAX_TOKEN_LEN = 4096;
+const PLATFORMS = ["android", "ios", "macos", "web"];
+function isPlatform(v) {
+    return typeof v === "string" && PLATFORMS.includes(v);
+}
+/**
+ * Durable set of device FCM tokens. Single-user, but several devices may be
+ * paired (phone + tablet), so this is a small keyed collection rather than a
+ * single value. Written 0600 (a token lets anyone holding the FCM key wake that
+ * device), mirroring credentials.ts.
+ */
+export class PushTokenStore {
+    tokens = new Map();
+    writeChain = Promise.resolve();
+    async load() {
+        try {
+            const raw = await readFile(TOKENS_FILE, "utf8");
+            const parsed = JSON.parse(raw);
+            if (Array.isArray(parsed)) {
+                for (const e of parsed) {
+                    if (e &&
+                        typeof e.token === "string" &&
+                        e.token &&
+                        isPlatform(e.platform)) {
+                        this.tokens.set(e.token, {
+                            token: e.token,
+                            platform: e.platform,
+                            updatedAt: typeof e.updatedAt === "number" ? e.updatedAt : Date.now(),
+                        });
+                    }
+                }
+            }
+            logger.info("push", `restored ${this.tokens.size} device token(s)`);
+        }
+        catch {
+            /* no prior state */
+        }
+    }
+    all() {
+        return [...this.tokens.values()];
+    }
+    /** Add/refresh a device token (idempotent; a re-register just bumps the time). */
+    async register(token, platform) {
+        const t = token.trim();
+        if (!t || t.length > MAX_TOKEN_LEN || !isPlatform(platform))
+            return false;
+        this.tokens.set(t, { token: t, platform, updatedAt: Date.now() });
+        // Evict the oldest if we somehow exceeded the cap (rotated tokens on one
+        // device pile up until FCM prunes the stale ones — bound it defensively).
+        if (this.tokens.size > MAX_TOKENS) {
+            const oldest = [...this.tokens.values()].sort((a, b) => a.updatedAt - b.updatedAt)[0];
+            if (oldest)
+                this.tokens.delete(oldest.token);
+        }
+        await this.persist();
+        return true;
+    }
+    /** Drop a token (client signed off, or FCM reported it stale). */
+    async unregister(token) {
+        if (this.tokens.delete(token.trim()))
+            await this.persist();
+    }
+    persist() {
+        const snapshot = JSON.stringify([...this.tokens.values()], null, 2);
+        this.writeChain = this.writeChain
+            .catch(() => { })
+            .then(async () => {
+            await mkdir(dirname(TOKENS_FILE), { recursive: true });
+            const tmp = `${TOKENS_FILE}.${process.pid}.tmp`;
+            await writeFile(tmp, snapshot, { mode: 0o600 });
+            await rename(tmp, TOKENS_FILE);
+        });
+        return this.writeChain;
+    }
+}
+const SCOPE = "https://www.googleapis.com/auth/firebase.messaging";
+const DEFAULT_TOKEN_URI = "https://oauth2.googleapis.com/token";
+/**
+ * Sends messages to FCM's HTTP v1 API using a service account. Lazily mints and
+ * caches an OAuth2 access token (valid ~1h); refreshes a minute before expiry.
+ */
+export class FcmSender {
+    sa;
+    access;
+    /** Serializes token minting so a burst of sends does one token exchange. */
+    minting;
+    /** True once a service account has loaded — otherwise every send is a no-op. */
+    get enabled() {
+        return Boolean(this.sa);
+    }
+    /**
+     * Load the service account from the environment. `FCM_SERVICE_ACCOUNT` points
+     * at a JSON key file (kept OUTSIDE the repo); `FCM_SERVICE_ACCOUNT_JSON` holds
+     * the JSON inline (for container secrets). Absent → disabled (no throw).
+     */
+    async load() {
+        try {
+            let raw;
+            const path = process.env.FCM_SERVICE_ACCOUNT?.trim();
+            const inline = process.env.FCM_SERVICE_ACCOUNT_JSON?.trim();
+            if (path)
+                raw = await readFile(path, "utf8");
+            else if (inline)
+                raw = inline;
+            if (!raw) {
+                logger.info("push", "FCM disabled (no FCM_SERVICE_ACCOUNT configured)");
+                return;
+            }
+            const parsed = JSON.parse(raw);
+            if (!parsed.client_email || !parsed.private_key || !parsed.project_id) {
+                logger.warn("push", "FCM service account missing client_email/private_key/project_id — disabled");
+                return;
+            }
+            this.sa = {
+                client_email: parsed.client_email,
+                private_key: parsed.private_key,
+                project_id: parsed.project_id,
+                token_uri: parsed.token_uri ?? DEFAULT_TOKEN_URI,
+            };
+            logger.info("push", `FCM enabled for project ${parsed.project_id}`);
+        }
+        catch (err) {
+            logger.warn("push", "failed to load FCM service account — disabled", {
+                data: { message: err instanceof Error ? err.message : String(err) },
+            });
+        }
+    }
+    async accessToken() {
+        if (!this.sa)
+            return undefined;
+        const now = Math.floor(Date.now() / 1000);
+        if (this.access && this.access.expiresAt - 60 > now)
+            return this.access.token;
+        // Coalesce concurrent refreshes onto one in-flight exchange.
+        if (!this.minting) {
+            this.minting = this.mint().finally(() => {
+                this.minting = undefined;
+            });
+        }
+        await this.minting;
+        return this.access?.token;
+    }
+    async mint() {
+        const sa = this.sa;
+        if (!sa)
+            return;
+        const now = Math.floor(Date.now() / 1000);
+        const tokenUri = sa.token_uri ?? DEFAULT_TOKEN_URI;
+        const header = Buffer.from(JSON.stringify({ alg: "RS256", typ: "JWT" })).toString("base64url");
+        const claims = Buffer.from(JSON.stringify({ iss: sa.client_email, scope: SCOPE, aud: tokenUri, iat: now, exp: now + 3600 })).toString("base64url");
+        const signingInput = `${header}.${claims}`;
+        const signer = createSign("RSA-SHA256");
+        signer.update(signingInput);
+        signer.end();
+        const signature = signer.sign(sa.private_key).toString("base64url");
+        const assertion = `${signingInput}.${signature}`;
+        const res = await fetch(tokenUri, {
+            method: "POST",
+            headers: { "content-type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+                grant_type: "urn:ietf:params:oauth:grant-type:jwt-bearer",
+                assertion,
+            }),
+        });
+        if (!res.ok) {
+            throw new Error(`token endpoint ${res.status}: ${(await res.text()).slice(0, 200)}`);
+        }
+        const json = (await res.json());
+        this.access = { token: json.access_token, expiresAt: now + json.expires_in };
+    }
+    /** Send one message to one device token. Never throws — returns an outcome. */
+    async send(token, msg) {
+        const sa = this.sa;
+        if (!sa)
+            return "disabled";
+        let access;
+        try {
+            access = await this.accessToken();
+        }
+        catch (err) {
+            logger.warn("push", "FCM token mint failed", {
+                data: { message: err instanceof Error ? err.message : String(err) },
+            });
+            return "error";
+        }
+        if (!access)
+            return "error";
+        const body = {
+            message: {
+                token,
+                notification: { title: msg.title, body: msg.body },
+                data: msg.data,
+                android: {
+                    priority: msg.urgent ? "high" : "normal",
+                    notification: { channel_id: msg.androidChannel },
+                },
+                apns: {
+                    headers: { "apns-priority": msg.urgent ? "10" : "5" },
+                    // content-available wakes a backgrounded app so it can reconnect;
+                    // an alert + sound covers the terminated case.
+                    payload: { aps: { sound: "default", "content-available": 1 } },
+                },
+            },
+        };
+        try {
+            const res = await fetch(`https://fcm.googleapis.com/v1/projects/${sa.project_id}/messages:send`, {
+                method: "POST",
+                headers: {
+                    authorization: `Bearer ${access}`,
+                    "content-type": "application/json",
+                },
+                body: JSON.stringify(body),
+            });
+            if (res.ok)
+                return "ok";
+            const text = (await res.text()).slice(0, 300);
+            // 404 UNREGISTERED / 400 INVALID_ARGUMENT on the token ⇒ the app was
+            // uninstalled or the token rotated; drop it so we stop trying.
+            if (res.status === 404 || /UNREGISTERED|INVALID_ARGUMENT/.test(text)) {
+                logger.info("push", "pruning stale FCM token", { data: { status: res.status } });
+                return "stale";
+            }
+            // 401 usually means our cached access token went bad — clear it so the
+            // next send re-mints.
+            if (res.status === 401)
+                this.access = undefined;
+            logger.warn("push", "FCM send failed", { data: { status: res.status, body: text } });
+            return "error";
+        }
+        catch (err) {
+            logger.warn("push", "FCM send threw", {
+                data: { message: err instanceof Error ? err.message : String(err) },
+            });
+            return "error";
+        }
+    }
+}
+/**
+ * The call seam the WorkspaceManager uses. Fans a wake-up out to every device
+ * token, but only when NO client socket is live — a foregrounded app already
+ * receives the event over the wire and raises its own local notification, so
+ * pushing then would double-notify. Tokens FCM reports as stale are pruned.
+ */
+export class PushNotifier {
+    tokens;
+    sender;
+    hasLiveClients;
+    constructor(tokens, sender, 
+    /** True while at least one client socket is attached (see Hub). */
+    hasLiveClients) {
+        this.tokens = tokens;
+        this.sender = sender;
+        this.hasLiveClients = hasLiveClients;
+    }
+    notifyPermission(ws, name, tool, summary, seq) {
+        this.dispatch({
+            title: `${name} — approval needed`,
+            body: summary || `${tool} needs your approval`,
+            data: this.data({ ws, kind: "permission", tool, seq }),
+            androidChannel: "permissions",
+            urgent: true,
+        });
+    }
+    notifyDone(ws, name, summary, seq) {
+        this.dispatch({
+            title: `${name} — done`,
+            body: summary && summary.length ? summary : "The agent finished its turn.",
+            data: this.data({ ws, kind: "done", seq }),
+            androidChannel: "activity",
+            urgent: false,
+        });
+    }
+    notifyLimit(ws, name, message) {
+        this.dispatch({
+            title: `${name} — usage limit reached`,
+            body: message || "The agent hit a usage limit.",
+            data: this.data({ ws, kind: "limit" }),
+            androidChannel: "activity",
+            urgent: true,
+        });
+    }
+    /** Build the FCM data map: everything stringified, undefined/empty dropped. */
+    data(fields) {
+        const out = {};
+        for (const [k, v] of Object.entries(fields)) {
+            if (v !== undefined && v !== "")
+                out[k] = String(v);
+        }
+        return out;
+    }
+    dispatch(msg) {
+        // A live socket already delivers this event (and the app raises its own local
+        // notification), so only remote-wake when nothing is attached.
+        if (this.hasLiveClients())
+            return;
+        if (!this.sender.enabled)
+            return;
+        void this.fanOut(msg);
+    }
+    async fanOut(msg) {
+        for (const t of this.tokens.all()) {
+            const outcome = await this.sender.send(t.token, msg);
+            if (outcome === "stale")
+                await this.tokens.unregister(t.token);
+        }
+    }
+}
+//# sourceMappingURL=push.js.map

package/dist/src/push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../../src/push.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,MAAM,WAAW,GACf,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC;AAUpF,kFAAkF;AAClF,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,sEAAsE;AACtE,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B,MAAM,SAAS,GAAmB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;AAErE,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAK,SAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,cAAc;IACjB,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IACtC,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEtD,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;YAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,KAAK,MAAM,CAAC,IAAI,MAAqB,EAAE,CAAC;oBACtC,IACE,CAAC;wBACD,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;wBAC3B,CAAC,CAAC,KAAK;wBACP,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EACtB,CAAC;wBACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;4BACvB,KAAK,EAAE,CAAC,CAAC,KAAK;4BACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;4BACpB,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;yBACtE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IAED,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,QAAsB;QAClD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,aAAa,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAClE,yEAAyE;QACzE,0EAA0E;QAC1E,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,UAAU,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACtF,IAAI,MAAM;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAAE,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IAC7D,CAAC;IAEO,OAAO;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU;aAC9B,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;aACf,IAAI,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;YAChD,MAAM,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QACL,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF;AAwBD,MAAM,KAAK,GAAG,oDAAoD,CAAC;AACnE,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AAEhE;;;GAGG;AACH,MAAM,OAAO,SAAS;IACZ,EAAE,CAAkB;IACpB,MAAM,CAAwC;IACtD,4EAA4E;IACpE,OAAO,CAAiB;IAEhC,gFAAgF;IAChF,IAAI,OAAO;QACT,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,IAAI,GAAuB,CAAC;YAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;YAC5D,IAAI,IAAI;gBAAE,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;iBACxC,IAAI,MAAM;gBAAE,GAAG,GAAG,MAAM,CAAC;YAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,kDAAkD,CAAC,CAAC;gBACxE,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,4EAA4E,CAAC,CAAC;gBAClG,OAAO;YACT,CAAC;YACD,IAAI,CAAC,EAAE,GAAG;gBACR,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,iBAAiB;aACjD,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,2BAA2B,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,+CAA+C,EAAE;gBACnE,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,EAAE,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAC9E,6DAA6D;QAC7D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBACtC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YAC3B,CAAC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC;QACnB,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,IAAI,iBAAiB,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CACxB,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,EAAE,CAAC,CACjG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxB,MAAM,YAAY,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,GAAG,YAAY,IAAI,SAAS,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,6CAA6C;gBACzD,SAAS;aACV,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiD,CAAC;QAChF,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;IAC/E,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,GAAgB;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC;QAC3B,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,EAAE;gBAC3C,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACpE,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC;QAE5B,MAAM,IAAI,GAAG;YACX,OAAO,EAAE;gBACP,KAAK;gBACL,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE;gBAClD,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE;oBACP,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;oBACxC,YAAY,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,cAAc,EAAE;iBACjD;gBACD,IAAI,EAAE;oBACJ,OAAO,EAAE,EAAE,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE;oBACrD,kEAAkE;oBAClE,+CAA+C;oBAC/C,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,EAAE,EAAE;iBAC/D;aACF;SACF,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,0CAA0C,EAAE,CAAC,UAAU,gBAAgB,EACvE;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAM,EAAE;oBACjC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CACF,CAAC;YACF,IAAI,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9C,qEAAqE;YACrE,+DAA+D;YAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,yBAAyB,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACjF,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,uEAAuE;YACvE,sBAAsB;YACtB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACrF,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE;gBACpC,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACpE,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IAEb;IACA;IAEA;IAJV,YACU,MAAsB,EACtB,MAAiB;IACzB,mEAAmE;IAC3D,cAA6B;QAH7B,WAAM,GAAN,MAAM,CAAgB;QACtB,WAAM,GAAN,MAAM,CAAW;QAEjB,mBAAc,GAAd,cAAc,CAAe;IACpC,CAAC;IAEJ,gBAAgB,CAAC,EAAU,EAAE,IAAY,EAAE,IAAY,EAAE,OAAe,EAAE,GAAY;QACpF,IAAI,CAAC,QAAQ,CAAC;YACZ,KAAK,EAAE,GAAG,IAAI,oBAAoB;YAClC,IAAI,EAAE,OAAO,IAAI,GAAG,IAAI,sBAAsB;YAC9C,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACtD,cAAc,EAAE,aAAa;YAC7B,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,EAAU,EAAE,IAAY,EAAE,OAA2B,EAAE,GAAY;QAC5E,IAAI,CAAC,QAAQ,CAAC;YACZ,KAAK,EAAE,GAAG,IAAI,SAAS;YACvB,IAAI,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B;YAC1E,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAC1C,cAAc,EAAE,UAAU;YAC1B,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,EAAU,EAAE,IAAY,EAAE,OAAe;QACnD,IAAI,CAAC,QAAQ,CAAC;YACZ,KAAK,EAAE,GAAG,IAAI,wBAAwB;YACtC,IAAI,EAAE,OAAO,IAAI,8BAA8B;YAC/C,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACtC,cAAc,EAAE,UAAU;YAC1B,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,CAAC;IAED,+EAA+E;IACvE,IAAI,CAAC,MAAmD;QAC9D,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,QAAQ,CAAC,GAAgB;QAC/B,8EAA8E;QAC9E,+DAA+D;QAC/D,IAAI,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACjC,KAAK,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,GAAgB;QACnC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACrD,IAAI,OAAO,KAAK,OAAO;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;CACF"}

package/dist/src/relay-transport.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Relay transport (daemon side) — docs/WEBRTC_MIGRATION.md Phase 4.
+ *
+ * The daemon keeps ONE persistent WebSocket to its Durable Object (`/daemon/
+ * <rid>`) whenever it's running. The DO multiplexes every client over that single
+ * socket, tagged by client id. `RelayDaemon` demuxes: each client id gets its own
+ * `Transport` (a `SubTransport` over the shared ws), which feeds a `Mux` + the
+ * §5.3 responder handshake — exactly the same session stack the loopback and LAN
+ * paths use. The relay only ever sees sealed frames.
+ */
+import { Mux } from "./transport.js";
+import type { SecureChannel } from "./session.js";
+import type { RendezvousIdentity } from "./rendezvous.js";
+import type { DeviceTable } from "./devices.js";
+export interface RelaySession {
+    clientId: number;
+    mux: Mux;
+    channel: SecureChannel;
+    devicePub: string;
+    close(): void;
+    /** Register a callback for when this client's relay socket drops. */
+    onClose(cb: () => void): void;
+}
+export interface RelayDaemonDeps {
+    identity: RendezvousIdentity;
+    devices: DeviceTable;
+    /**
+     * Single-use pairing codes. When present, a brand-new device can pair inline
+     * during the handshake (msg1 carries a code). Omit to disable relay pairing.
+     */
+    pairing?: {
+        consume(code: string): boolean;
+    };
+}
+/**
+ * Maintains the daemon's persistent relay socket and per-client sessions. Call
+ * `connect()` to dial; it reconnects with backoff on drop so the daemon is
+ * reachable over the relay whenever it's running (the Phase-4 acceptance:
+ * "daemon restart auto-reconnects with no user action").
+ */
+export declare class RelayDaemon {
+    private readonly deps;
+    private readonly relayUrl;
+    private readonly opts?;
+    private ws;
+    private readonly subs;
+    private closed;
+    private attempt;
+    private reconnectTimer;
+    /** Called for each client that completes the handshake over the relay. */
+    onSession?: (session: RelaySession) => void;
+    constructor(deps: RelayDaemonDeps, relayUrl: string, opts?: {
+        license?: string;
+    } | undefined);
+    /** The daemon endpoint for this daemon's rendezvous id. */
+    private url;
+    connect(): void;
+    private onMessage;
+    private openClient;
+    private onClose;
+    close(): void;
+}