@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/control-protocol.d.ts

@@ -0,0 +1,507 @@
+import { Buffer } from "node:buffer";
+import { type IrohRemoteAccessPresetName, type IrohRemoteRpcCapability, type IrohRemoteRpcGrant } from "../core/remote/iroh/access-grant.ts";
+import type { IrohRemoteLiveActivityUpdateIntent, IrohRemotePushNotificationDeliveryStatus, IrohRemotePushNotificationIntent } from "../core/remote/iroh/push.ts";
+/**
+ * Wire types and framing for the voltd control plane: JSONL over the unix
+ * socket ~/.volt/agent/daemon/voltd.sock. Shared by the daemon, the TUI, and
+ * the CLI. Zero runtime deps beyond node:buffer.
+ */
+export declare const PROTOCOL_VERSION = 1;
+/** Hard cap per JSONL line; longer lines close the connection with a fatal frame. */
+export declare const CONTROL_MAX_LINE_BYTES: number;
+export type LeaseState = "unowned" | "daemon-active" | "daemon-detached" | "daemon-draining" | "tui-owned";
+export type ControlClientKind = "tui" | "cli";
+/**
+ * Control-hello capability advertised by TUIs that can serve worktree-bound
+ * conversations over the byte relay (worktree-cwd sanitization). The daemon
+ * never offers worktree-session relays to control clients without it.
+ */
+export declare const CONTROL_WORKTREES_CAPABILITY = "worktrees";
+/** Status capability for cancellable, immediately-invalidated pairing tickets. */
+export declare const CONTROL_PAIR_CANCEL_CAPABILITY = "pair_cancel";
+/** TUI/CLI understands per-device tool + RPC grant control messages and relay preambles. */
+export declare const CONTROL_RPC_GRANTS_CAPABILITY = "rpc_grants";
+export type HelloMessage = {
+    type: "hello";
+    role: "control";
+    protocolVersion: number;
+    pid: number;
+    version: string;
+    client: ControlClientKind;
+    /** Per-daemon instance token read from the local pidfile. */
+    controlToken?: string;
+    /** Optional client capabilities (e.g. "worktrees"); absent for old clients. */
+    capabilities?: string[];
+} | {
+    type: "hello";
+    role: "relay";
+    protocolVersion: number;
+    relayId: string;
+    relayToken: string;
+};
+export interface HelloAck {
+    type: "hello_ack";
+    ok: boolean;
+    error?: "protocol_mismatch" | "shutting_down" | "bad_relay_token" | "auth_failed";
+    /** daemon-assigned, present when ok (control role) */
+    connectionId?: string;
+    /** daemon package version */
+    version?: string;
+    protocolVersion?: number;
+}
+export type ControlAccessSelection = {
+    access?: IrohRemoteAccessPresetName;
+    allowedTools?: never;
+    rpcCapabilities?: never;
+} | {
+    access?: never;
+    allowedTools: string[];
+    rpcCapabilities: IrohRemoteRpcCapability[];
+};
+export type ControlRequest = {
+    type: "status";
+    id: string;
+} | {
+    type: "shutdown";
+    id: string;
+} | {
+    type: "lease_acquire";
+    id: string;
+    workspaceName: string;
+    sessionId: string;
+    /** reserved; true => lease_denied{force_unsupported} */
+    force?: boolean;
+} | {
+    type: "lease_release";
+    id: string;
+    workspaceName: string;
+    sessionId: string;
+} | {
+    type: "lease_rekey";
+    id: string;
+    workspaceName: string;
+    oldSessionId: string;
+    newSessionId: string;
+} | ({
+    type: "pair_request";
+    id: string;
+    workspaceName?: string;
+} & ControlAccessSelection) | {
+    type: "pair_cancel";
+    id: string;
+    requestId: string;
+} | {
+    type: "clients_list";
+    id: string;
+} | ({
+    type: "client_access_update";
+    id: string;
+    clientNodeId: string;
+    expectedRevision: number;
+} & ControlAccessSelection) | {
+    type: "client_revoke";
+    id: string;
+    clientNodeId: string;
+} | {
+    type: "client_approve_repair";
+    id: string;
+    clientNodeId: string;
+} | {
+    type: "workspace_register";
+    id: string;
+    name: string;
+    path: string;
+} | {
+    type: "workspace_unregister";
+    id: string;
+    name: string;
+} | {
+    type: "worktree_create";
+    id: string;
+    workspaceName: string;
+    worktreeName?: string;
+    branch?: string;
+    baseRef?: string;
+} | {
+    type: "worktree_adopt";
+    id: string;
+    workspaceName: string;
+    path: string;
+    worktreeName?: string;
+    baseRef?: string;
+} | {
+    type: "worktree_list";
+    id: string;
+    workspaceName?: string;
+} | {
+    type: "worktree_remove";
+    id: string;
+    workspaceName: string;
+    worktreeId: string;
+    force?: boolean;
+} | {
+    type: "worktree_prune";
+    id: string;
+    workspaceName?: string;
+}
+/** Resolve a filesystem path to the daemon-managed worktree containing it. */
+ | {
+    type: "worktree_resolve";
+    id: string;
+    path: string;
+}
+/** Bind a session id to a worktree (TUI-created worktree sessions). */
+ | {
+    type: "worktree_bind";
+    id: string;
+    workspaceName: string;
+    worktreeId: string;
+    sessionId: string;
+} | {
+    type: "theme_set";
+    id: string;
+    theme: string;
+} | {
+    type: "keep_awake_set";
+    id: string;
+    enabled: boolean;
+} | {
+    type: "viewer_subscribe";
+    id: string;
+    viewerFeedId: string;
+} | {
+    type: "viewer_unsubscribe";
+    id: string;
+    viewerFeedId: string;
+} | {
+    type: "viewer_abort";
+    id: string;
+    viewerFeedId: string;
+} | {
+    type: "relay_rpc";
+    id: string;
+    /** Active relay whose phone command is being forwarded. */
+    relayId: string;
+    /** paired phone client the relayed conversation belongs to */
+    clientNodeId: string;
+    workspaceName: string;
+    /** the TUI's current session id for the relayed conversation */
+    sessionId: string;
+    /**
+     * Verbatim phone RPC command forwarded from a TUI-owned conversation.
+     * The daemon executes it against its real state (push targets, live
+     * activities, workspace registry) and returns the RPC response in
+     * relay_rpc_result.
+     */
+    command: Record<string, unknown> & {
+        type: string;
+    };
+} | {
+    type: "relay_notification_delivery";
+    id: string;
+    /** paired phone client the relayed conversation belongs to */
+    clientNodeId: string;
+    workspaceName: string;
+    /** the TUI's current session id for the relayed conversation */
+    sessionId: string;
+    notification: IrohRemotePushNotificationIntent;
+} | {
+    type: "relay_live_activity_delivery";
+    id: string;
+    /** paired phone client the relayed conversation belongs to */
+    clientNodeId: string;
+    workspaceName: string;
+    /** the TUI's current session id for the relayed conversation */
+    sessionId: string;
+    update: IrohRemoteLiveActivityUpdateIntent;
+};
+/** RPC command types the daemon executes on behalf of a TUI relay. */
+export declare const RELAY_RPC_COMMAND_TYPES: ReadonlySet<string>;
+/** Host keep-awake assertion state as reported over the control plane. */
+export interface ControlKeepAwakeStatus {
+    /** Desired (persisted) state. */
+    enabled: boolean;
+    /** Actual state; `degraded` means enabled but the assertion is not held. */
+    state: "disabled" | "active" | "degraded";
+    method?: string;
+    reason?: string;
+}
+export interface ControlLeaseStatus {
+    workspaceName: string;
+    sessionId: string;
+    state: LeaseState;
+    relayCount: number;
+    streamCount: number;
+}
+export interface ControlWorkspaceStatus {
+    name: string;
+    path: string;
+    /** Workspace-specific headless tool grant, when configured. */
+    allowedTools?: string[];
+}
+/**
+ * Worktree status over the LOCAL control socket. Unlike the iroh wire, the
+ * control plane is trusted (same user), so checkout paths are included for
+ * display.
+ */
+export interface ControlWorktreeStatus {
+    id: string;
+    workspaceName: string;
+    path: string;
+    branch: string;
+    baseRef?: string;
+    createdAt: number;
+    sessionIds: string[];
+    available?: boolean;
+    dirty?: boolean;
+    /** Branch commits vs the base ref (merge-back guidance). */
+    aheadBehind?: {
+        ahead: number;
+        behind: number;
+    };
+}
+export interface ControlClientStatus {
+    clientNodeId: string;
+    label?: string;
+    pairedAtMs: number;
+    /** Added to protocol v1 after launch; absent on older running daemons. */
+    lastSeenAtMs?: number;
+    /** Persisted headless tool grant for this paired device. */
+    allowedTools?: string[];
+    rpcGrant?: IrohRemoteRpcGrant;
+}
+export interface ControlRevokedClientStatus {
+    clientNodeId: string;
+    label?: string;
+    pairedAtMs: number;
+    lastSeenAtMs?: number;
+    revokedAtMs: number;
+    /** Present after the desktop explicitly allows this identity to use a fresh pairing ticket. */
+    rePairApprovedAtMs?: number;
+    rpcGrant?: IrohRemoteRpcGrant;
+}
+export interface DaemonRemotePolicyStatus {
+    /** Daemon-wide override; null delegates to workspace and device grants. */
+    allowTools: string[] | null;
+    /** Retention window for idle, detached daemon-owned runtimes. */
+    detachedRuntimeTtlMs: number;
+}
+export type ControlResponse = {
+    type: "ok";
+    id: string;
+} | {
+    type: "error";
+    id: string;
+    code: string;
+    message: string;
+} | {
+    type: "lease_granted";
+    id: string;
+    workspaceName: string;
+    sessionId: string;
+    handoff: "cold" | "warm" | "none";
+} | {
+    type: "lease_pending";
+    id: string;
+    viewerFeedId: string;
+} | {
+    type: "lease_denied";
+    id: string;
+    reason: "held_by_tui" | "force_unsupported" | "draining_elsewhere";
+} | {
+    type: "status_result";
+    id: string;
+    version: string;
+    protocolVersion: number;
+    pid: number;
+    startedAtMs: number;
+    /** Optional feature flags for protocol-v1 additions. */
+    capabilities?: string[];
+    leases: ControlLeaseStatus[];
+    phoneConnections: number;
+    workspaces: ControlWorkspaceStatus[];
+    clients: ControlClientStatus[];
+    /** Revoked identities retained for explicit repair approval; absent on older running daemons. */
+    revokedClients?: ControlRevokedClientStatus[];
+    /** Added to protocol v1 after launch; absent on older running daemons. */
+    remotePolicy?: DaemonRemotePolicyStatus;
+    keepAwake: ControlKeepAwakeStatus;
+} | {
+    type: "keep_awake_result";
+    id: string;
+    keepAwake: ControlKeepAwakeStatus;
+} | {
+    type: "clients_result";
+    id: string;
+    clients: ControlClientStatus[];
+} | {
+    type: "client_access_updated";
+    id: string;
+    client: ControlClientStatus;
+} | {
+    type: "worktree_result";
+    id: string;
+    worktree: ControlWorktreeStatus;
+} | {
+    type: "worktrees_result";
+    id: string;
+    worktrees: ControlWorktreeStatus[];
+} | {
+    type: "worktree_resolve_result";
+    id: string;
+    /** Parent workspace the worktree belongs to. */
+    workspaceName: string;
+    /** Parent workspace checkout path (control plane is local/trusted). */
+    workspacePath: string;
+    worktreeId: string;
+    worktreePath: string;
+} | {
+    type: "worktree_prune_result";
+    id: string;
+    results: Array<{
+        workspaceName: string;
+        removedRecords: string[];
+        orphanCheckouts: string[];
+    }>;
+} | {
+    type: "pair_started";
+    id: string;
+    requestId: string;
+} | {
+    type: "relay_rpc_result";
+    id: string;
+    /** verbatim RPC response object for the TUI to forward to the phone */
+    response: Record<string, unknown>;
+    /** refreshed workspace metadata after a successful unregister_workspace */
+    workspaceMetadata?: {
+        workspaceNames: string[];
+        workspaces: Array<{
+            name: string;
+            status: string;
+        }>;
+    };
+} | {
+    type: "relay_push_delivery_result";
+    id: string;
+    status: IrohRemotePushNotificationDeliveryStatus;
+};
+export type RelayCloseReason = "phone_disconnected" | "tui_disconnected" | "lease_transferred" | "session_rekeyed_reconnect" | "workspace_unregistered" | "host_shutdown" | "error";
+export type ControlEvent = {
+    type: "relay_offer";
+    relayId: string;
+    /** single-use, 10s expiry */
+    relayToken: string;
+    workspaceName: string;
+    sessionId: string;
+    clientNodeId: string;
+    connectionId: string;
+    streamId: string;
+} | {
+    type: "relay_closed";
+    relayId: string;
+    reason: RelayCloseReason;
+} | {
+    type: "viewer_event";
+    viewerFeedId: string;
+    seq: number;
+    /** AgentSessionEvent JSON, or {kind:"truncated"} when the buffer overflowed */
+    event: unknown;
+} | {
+    type: "viewer_end";
+    viewerFeedId: string;
+    reason: "granted" | "cancelled" | "error";
+} | {
+    type: "theme_snapshot";
+    themeName: string;
+    tokens: Record<string, string>;
+} | {
+    type: "keep_awake_changed";
+    keepAwake: ControlKeepAwakeStatus;
+} | {
+    type: "pairing_progress";
+    requestId: string;
+    phase: "ticket" | "qr" | "waiting" | "completed" | "failed";
+    ticket?: string;
+    qrLines?: string[];
+    clientNodeId?: string;
+    error?: string;
+} | {
+    type: "daemon_shutdown";
+};
+export interface ControlFatal {
+    type: "fatal";
+    error: string;
+}
+export type ControlMessage = HelloMessage | HelloAck | ControlRequest | ControlResponse | ControlEvent | ControlFatal;
+/** One JSONL relay preamble line follows a successful relay hello_ack. */
+export interface RelayPreamble {
+    type: "relay_preamble";
+    relayId: string;
+    /** verbatim phone handshake JSON as received (parsed object, re-serialized) */
+    handshake: unknown;
+    /** authorization subset — everything the TUI needs to serve the stream */
+    authorization: {
+        clientNodeId: string;
+        workspaceName: string;
+        workspacePath: string;
+        /** Headless agent tool grant, carried for visibility; TUI-owned sessions retain their full local tools. */
+        allowedTools: string;
+        rpcGrant: IrohRemoteRpcGrant;
+        /** Present when the conversation is bound to a daemon-managed worktree. */
+        worktreeId?: string;
+        /** Worktree checkout path — the TUI sanitizes with this as the root. */
+        worktreePath?: string;
+        /** Registered-workspace-relative git source root for nested repo worktrees. */
+        worktreeSourceRootRelativePath?: string;
+    };
+    /**
+     * The daemon's Iroh node id: the TUI writes it into the handshake response
+     * so the phone's saved-host identity verification passes over the relay.
+     */
+    hostNodeId?: string;
+    relayMode?: "disabled" | "development" | "production";
+    relayUrls?: string[];
+    connectionId: string;
+    streamId: string;
+    resolvedTarget: {
+        sessionId: string;
+        sessionFilePath?: string;
+        selection: "created" | "created_after_missing" | "resumed";
+        requestedSessionId?: string;
+        workspaceName: string;
+        workspacePath: string;
+        worktreeId?: string;
+        /** POSIX-style path relative to the registered workspace root. */
+        workingDirectory?: string;
+    };
+}
+export declare function encodeControlLine(message: object): Buffer;
+export declare class ControlFrameTooLargeError extends Error {
+    constructor(byteLength: number);
+}
+/**
+ * Incremental JSONL decoder with the 8 MiB line cap. Feed raw socket chunks;
+ * complete lines come back parsed. Throws ControlFrameTooLargeError when the
+ * buffered partial line exceeds the cap (callers must close the connection).
+ */
+export declare class ControlLineDecoder {
+    private buffered;
+    push(chunk: Buffer): unknown[];
+    /**
+     * Parse complete lines one at a time, invoking handle per message. When
+     * handle returns "stop" (relay handoff), decoding halts immediately and any
+     * bytes past the consumed line stay buffered for drainRemainder(). Unlike
+     * push(), bytes arriving after a stop are never JSON-decoded — required for
+     * relay hellos, where everything after the hello line is opaque payload.
+     */
+    pushEach(chunk: Buffer, handle: (message: unknown) => "continue" | "stop"): void;
+    /** Bytes buffered past the last complete line (used when switching a relay conn to raw mode). */
+    drainRemainder(): Buffer;
+}
+export declare function parseHelloMessage(value: unknown): HelloMessage | undefined;
+export declare function isControlRequest(value: unknown): value is ControlRequest;
+export declare function isControlResponse(value: unknown): value is ControlResponse;
+export declare function isControlEvent(value: unknown): value is ControlEvent;
+export declare function isHelloAck(value: unknown): value is HelloAck;
+export declare function isRelayPreamble(value: unknown): value is RelayPreamble;
+//# sourceMappingURL=control-protocol.d.ts.map

package/dist/daemon/control-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-protocol.d.ts","sourceRoot":"","sources":["../../src/daemon/control-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EACN,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EAIvB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EACX,kCAAkC,EAClC,wCAAwC,EACxC,gCAAgC,EAChC,MAAM,6BAA6B,CAAC;AAErC;;;;GAIG;AAEH,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,qFAAqF;AACrF,eAAO,MAAM,sBAAsB,QAAkB,CAAC;AAEtD,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,eAAe,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,WAAW,CAAC;AAE3G,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,KAAK,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,cAAc,CAAC;AACxD,kFAAkF;AAClF,eAAO,MAAM,8BAA8B,gBAAgB,CAAC;AAC5D,4FAA4F;AAC5F,eAAO,MAAM,6BAA6B,eAAe,CAAC;AAE1D,MAAM,MAAM,YAAY,GACrB;IACA,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,SAAS,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,6DAA6D;IAC7D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,GACD;IACA,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CAClB,CAAC;AAEL,MAAM,WAAW,QAAQ;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,mBAAmB,GAAG,eAAe,GAAG,iBAAiB,GAAG,aAAa,CAAC;IAClF,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD,MAAM,MAAM,sBAAsB,GAC/B;IAAE,MAAM,CAAC,EAAE,0BAA0B,CAAC;IAAC,YAAY,CAAC,EAAE,KAAK,CAAC;IAAC,eAAe,CAAC,EAAE,KAAK,CAAA;CAAE,GACtF;IAAE,MAAM,CAAC,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,uBAAuB,EAAE,CAAA;CAAE,CAAC;AAE1F,MAAM,MAAM,cAAc,GACvB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAChC;IACA,IAAI,EAAE,eAAe,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,KAAK,CAAC,EAAE,OAAO,CAAC;CACf,GACD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACtG,CAAC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,sBAAsB,CAAC,GACvF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACpC,CAAC;IACD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CACxB,GAAG,sBAAsB,CAAC,GAC3B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1D;IACA,IAAI,EAAE,iBAAiB,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAChB,GACD;IACA,IAAI,EAAE,gBAAgB,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACnG;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE;AAChE,8EAA8E;GAC5E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACxD,uEAAuE;GACrE;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACnG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC1D;IACA,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD,GACD;IACA,IAAI,EAAE,6BAA6B,CAAC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,gCAAgC,CAAC;CAC9C,GACD;IACA,IAAI,EAAE,8BAA8B,CAAC;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,kCAAkC,CAAC;CAC1C,CAAC;AAEL,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAYtD,CAAC;AAEH,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACtC,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,4EAA4E;IAC5E,KAAK,EAAE,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,4DAA4D;IAC5D,WAAW,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED,MAAM,WAAW,mBAAmB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA0B;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,+FAA+F;IAC/F,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACxC,2EAA2E;IAC3E,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5B,iEAAiE;IACjE,oBAAoB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,eAAe,GACxB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAA;CAAE,GAClH;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAG3D;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,GAAG,mBAAmB,GAAG,oBAAoB,CAAA;CAAE,GACxG;IACA,IAAI,EAAE,eAAe,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,sBAAsB,EAAE,CAAC;IACrC,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,iGAAiG;IACjG,cAAc,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAC9C,0EAA0E;IAC1E,YAAY,CAAC,EAAE,wBAAwB,CAAC;IACxC,SAAS,EAAE,sBAAsB,CAAC;CACjC,GACD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,sBAAsB,CAAA;CAAE,GAC5E;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,mBAAmB,EAAE,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,qBAAqB,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,qBAAqB,EAAE,CAAA;CAAE,GAC5E;IACA,IAAI,EAAE,yBAAyB,CAAC;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,gDAAgD;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACpB,GACD;IACA,IAAI,EAAE,uBAAuB,CAAC;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,KAAK,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAC;QAAC,eAAe,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC9F,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvD;IACA,IAAI,EAAE,kBAAkB,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE;QAAE,cAAc,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CACrG,GACD;IAAE,IAAI,EAAE,4BAA4B,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,wCAAwC,CAAA;CAAE,CAAC;AAMxG,MAAM,MAAM,gBAAgB,GACzB,oBAAoB,GACpB,kBAAkB,GAClB,mBAAmB,GACnB,2BAA2B,GAC3B,wBAAwB,GACxB,eAAe,GACf,OAAO,CAAC;AAEX,MAAM,MAAM,YAAY,GACrB;IACA,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GACnE;IACA,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,KAAK,EAAE,OAAO,CAAC;CACd,GACD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,sBAAsB,CAAA;CAAE,GACjE;IACA,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CACd,GACD;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAE/B,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,QAAQ,GAAG,cAAc,GAAG,eAAe,GAAG,YAAY,GAAG,YAAY,CAAC;AAEtH,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,SAAS,EAAE,OAAO,CAAC;IACnB,4EAA0E;IAC1E,aAAa,EAAE;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;QACtB,2GAA2G;QAC3G,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,kBAAkB,CAAC;QAC7B,2EAA2E;QAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,0EAAwE;QACxE,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,+EAA+E;QAC/E,8BAA8B,CAAC,EAAE,MAAM,CAAC;KACxC,CAAC;IACF;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,UAAU,GAAG,aAAa,GAAG,YAAY,CAAC;IACtD,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,SAAS,GAAG,uBAAuB,GAAG,SAAS,CAAC;QAC3D,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,aAAa,EAAE,MAAM,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,kEAAkE;QAClE,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACF;AAMD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IACnD,YAAY,UAAU,EAAE,MAAM,EAG7B;CACD;AAED;;;;GAIG;AACH,qBAAa,kBAAkB;IAC9B,OAAO,CAAC,QAAQ,CAA2B;IAE3C,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,CAqB7B;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,UAAU,GAAG,MAAM,GAAG,IAAI,CAsB/E;IAED,iGAAiG;IACjG,cAAc,IAAI,MAAM,CAIvB;CACD;AAgGD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,GAAG,SAAS,CAgD1E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAyGxE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAqC1E;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAkBpE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAE5D;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAmBtE","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport {\n\ttype IrohRemoteAccessPresetName,\n\ttype IrohRemoteRpcCapability,\n\ttype IrohRemoteRpcGrant,\n\tisIrohRemoteAccessPresetName,\n\tparseIrohRemoteRpcCapabilities,\n\tparseIrohRemoteRpcGrant,\n} from \"../core/remote/iroh/access-grant.ts\";\nimport type {\n\tIrohRemoteLiveActivityUpdateIntent,\n\tIrohRemotePushNotificationDeliveryStatus,\n\tIrohRemotePushNotificationIntent,\n} from \"../core/remote/iroh/push.ts\";\n\n/**\n * Wire types and framing for the voltd control plane: JSONL over the unix\n * socket ~/.volt/agent/daemon/voltd.sock. Shared by the daemon, the TUI, and\n * the CLI. Zero runtime deps beyond node:buffer.\n */\n\nexport const PROTOCOL_VERSION = 1;\n\n/** Hard cap per JSONL line; longer lines close the connection with a fatal frame. */\nexport const CONTROL_MAX_LINE_BYTES = 8 * 1024 * 1024;\n\nexport type LeaseState = \"unowned\" | \"daemon-active\" | \"daemon-detached\" | \"daemon-draining\" | \"tui-owned\";\n\nexport type ControlClientKind = \"tui\" | \"cli\";\n\n/**\n * Control-hello capability advertised by TUIs that can serve worktree-bound\n * conversations over the byte relay (worktree-cwd sanitization). The daemon\n * never offers worktree-session relays to control clients without it.\n */\nexport const CONTROL_WORKTREES_CAPABILITY = \"worktrees\";\n/** Status capability for cancellable, immediately-invalidated pairing tickets. */\nexport const CONTROL_PAIR_CANCEL_CAPABILITY = \"pair_cancel\";\n/** TUI/CLI understands per-device tool + RPC grant control messages and relay preambles. */\nexport const CONTROL_RPC_GRANTS_CAPABILITY = \"rpc_grants\";\n\nexport type HelloMessage =\n\t| {\n\t\t\ttype: \"hello\";\n\t\t\trole: \"control\";\n\t\t\tprotocolVersion: number;\n\t\t\tpid: number;\n\t\t\tversion: string;\n\t\t\tclient: ControlClientKind;\n\t\t\t/** Per-daemon instance token read from the local pidfile. */\n\t\t\tcontrolToken?: string;\n\t\t\t/** Optional client capabilities (e.g. \"worktrees\"); absent for old clients. */\n\t\t\tcapabilities?: string[];\n\t  }\n\t| {\n\t\t\ttype: \"hello\";\n\t\t\trole: \"relay\";\n\t\t\tprotocolVersion: number;\n\t\t\trelayId: string;\n\t\t\trelayToken: string;\n\t  };\n\nexport interface HelloAck {\n\ttype: \"hello_ack\";\n\tok: boolean;\n\terror?: \"protocol_mismatch\" | \"shutting_down\" | \"bad_relay_token\" | \"auth_failed\";\n\t/** daemon-assigned, present when ok (control role) */\n\tconnectionId?: string;\n\t/** daemon package version */\n\tversion?: string;\n\tprotocolVersion?: number;\n}\n\n// ============================================================================\n// Requests and responses (control role)\n// ============================================================================\n\nexport type ControlAccessSelection =\n\t| { access?: IrohRemoteAccessPresetName; allowedTools?: never; rpcCapabilities?: never }\n\t| { access?: never; allowedTools: string[]; rpcCapabilities: IrohRemoteRpcCapability[] };\n\nexport type ControlRequest =\n\t| { type: \"status\"; id: string }\n\t| { type: \"shutdown\"; id: string }\n\t| {\n\t\t\ttype: \"lease_acquire\";\n\t\t\tid: string;\n\t\t\tworkspaceName: string;\n\t\t\tsessionId: string;\n\t\t\t/** reserved; true => lease_denied{force_unsupported} */\n\t\t\tforce?: boolean;\n\t  }\n\t| { type: \"lease_release\"; id: string; workspaceName: string; sessionId: string }\n\t| { type: \"lease_rekey\"; id: string; workspaceName: string; oldSessionId: string; newSessionId: string }\n\t| ({ type: \"pair_request\"; id: string; workspaceName?: string } & ControlAccessSelection) // progress arrives as pairing_progress events\n\t| { type: \"pair_cancel\"; id: string; requestId: string }\n\t| { type: \"clients_list\"; id: string }\n\t| ({\n\t\t\ttype: \"client_access_update\";\n\t\t\tid: string;\n\t\t\tclientNodeId: string;\n\t\t\texpectedRevision: number;\n\t  } & ControlAccessSelection)\n\t| { type: \"client_revoke\"; id: string; clientNodeId: string }\n\t| { type: \"client_approve_repair\"; id: string; clientNodeId: string }\n\t| { type: \"workspace_register\"; id: string; name: string; path: string }\n\t| { type: \"workspace_unregister\"; id: string; name: string }\n\t| {\n\t\t\ttype: \"worktree_create\";\n\t\t\tid: string;\n\t\t\tworkspaceName: string;\n\t\t\tworktreeName?: string;\n\t\t\tbranch?: string;\n\t\t\tbaseRef?: string;\n\t  }\n\t| {\n\t\t\ttype: \"worktree_adopt\";\n\t\t\tid: string;\n\t\t\tworkspaceName: string;\n\t\t\tpath: string;\n\t\t\tworktreeName?: string;\n\t\t\tbaseRef?: string;\n\t  }\n\t| { type: \"worktree_list\"; id: string; workspaceName?: string }\n\t| { type: \"worktree_remove\"; id: string; workspaceName: string; worktreeId: string; force?: boolean }\n\t| { type: \"worktree_prune\"; id: string; workspaceName?: string }\n\t/** Resolve a filesystem path to the daemon-managed worktree containing it. */\n\t| { type: \"worktree_resolve\"; id: string; path: string }\n\t/** Bind a session id to a worktree (TUI-created worktree sessions). */\n\t| { type: \"worktree_bind\"; id: string; workspaceName: string; worktreeId: string; sessionId: string }\n\t| { type: \"theme_set\"; id: string; theme: string } // name; daemon resolves + broadcasts\n\t| { type: \"keep_awake_set\"; id: string; enabled: boolean } // hold/release the host sleep-prevention assertion\n\t| { type: \"viewer_subscribe\"; id: string; viewerFeedId: string }\n\t| { type: \"viewer_unsubscribe\"; id: string; viewerFeedId: string }\n\t| { type: \"viewer_abort\"; id: string; viewerFeedId: string }\n\t| {\n\t\t\ttype: \"relay_rpc\";\n\t\t\tid: string;\n\t\t\t/** Active relay whose phone command is being forwarded. */\n\t\t\trelayId: string;\n\t\t\t/** paired phone client the relayed conversation belongs to */\n\t\t\tclientNodeId: string;\n\t\t\tworkspaceName: string;\n\t\t\t/** the TUI's current session id for the relayed conversation */\n\t\t\tsessionId: string;\n\t\t\t/**\n\t\t\t * Verbatim phone RPC command forwarded from a TUI-owned conversation.\n\t\t\t * The daemon executes it against its real state (push targets, live\n\t\t\t * activities, workspace registry) and returns the RPC response in\n\t\t\t * relay_rpc_result.\n\t\t\t */\n\t\t\tcommand: Record<string, unknown> & { type: string };\n\t  }\n\t| {\n\t\t\ttype: \"relay_notification_delivery\";\n\t\t\tid: string;\n\t\t\t/** paired phone client the relayed conversation belongs to */\n\t\t\tclientNodeId: string;\n\t\t\tworkspaceName: string;\n\t\t\t/** the TUI's current session id for the relayed conversation */\n\t\t\tsessionId: string;\n\t\t\tnotification: IrohRemotePushNotificationIntent;\n\t  }\n\t| {\n\t\t\ttype: \"relay_live_activity_delivery\";\n\t\t\tid: string;\n\t\t\t/** paired phone client the relayed conversation belongs to */\n\t\t\tclientNodeId: string;\n\t\t\tworkspaceName: string;\n\t\t\t/** the TUI's current session id for the relayed conversation */\n\t\t\tsessionId: string;\n\t\t\tupdate: IrohRemoteLiveActivityUpdateIntent;\n\t  };\n\n/** RPC command types the daemon executes on behalf of a TUI relay. */\nexport const RELAY_RPC_COMMAND_TYPES: ReadonlySet<string> = new Set([\n\t\"register_push_target\",\n\t\"register_live_activity\",\n\t\"unregister_live_activity\",\n\t\"unregister_workspace\",\n\t// worktrees.v1: create/list only — remove_worktree is management-stream-only.\n\t\"create_worktree\",\n\t\"list_worktrees\",\n\t\"set_keep_awake\",\n\t\"get_keep_awake\",\n\t\"set_web_search_key\",\n\t\"get_web_search_status\",\n]);\n\n/** Host keep-awake assertion state as reported over the control plane. */\nexport interface ControlKeepAwakeStatus {\n\t/** Desired (persisted) state. */\n\tenabled: boolean;\n\t/** Actual state; `degraded` means enabled but the assertion is not held. */\n\tstate: \"disabled\" | \"active\" | \"degraded\";\n\tmethod?: string;\n\treason?: string;\n}\n\nexport interface ControlLeaseStatus {\n\tworkspaceName: string;\n\tsessionId: string;\n\tstate: LeaseState;\n\trelayCount: number;\n\tstreamCount: number;\n}\n\nexport interface ControlWorkspaceStatus {\n\tname: string;\n\tpath: string;\n\t/** Workspace-specific headless tool grant, when configured. */\n\tallowedTools?: string[];\n}\n\n/**\n * Worktree status over the LOCAL control socket. Unlike the iroh wire, the\n * control plane is trusted (same user), so checkout paths are included for\n * display.\n */\nexport interface ControlWorktreeStatus {\n\tid: string;\n\tworkspaceName: string;\n\tpath: string;\n\tbranch: string;\n\tbaseRef?: string;\n\tcreatedAt: number;\n\tsessionIds: string[];\n\tavailable?: boolean;\n\tdirty?: boolean;\n\t/** Branch commits vs the base ref (merge-back guidance). */\n\taheadBehind?: { ahead: number; behind: number };\n}\n\nexport interface ControlClientStatus {\n\tclientNodeId: string;\n\tlabel?: string;\n\tpairedAtMs: number;\n\t/** Added to protocol v1 after launch; absent on older running daemons. */\n\tlastSeenAtMs?: number;\n\t/** Persisted headless tool grant for this paired device. */\n\tallowedTools?: string[];\n\trpcGrant?: IrohRemoteRpcGrant;\n}\n\nexport interface ControlRevokedClientStatus {\n\tclientNodeId: string;\n\tlabel?: string;\n\tpairedAtMs: number;\n\tlastSeenAtMs?: number;\n\trevokedAtMs: number;\n\t/** Present after the desktop explicitly allows this identity to use a fresh pairing ticket. */\n\trePairApprovedAtMs?: number;\n\trpcGrant?: IrohRemoteRpcGrant;\n}\n\nexport interface DaemonRemotePolicyStatus {\n\t/** Daemon-wide override; null delegates to workspace and device grants. */\n\tallowTools: string[] | null;\n\t/** Retention window for idle, detached daemon-owned runtimes. */\n\tdetachedRuntimeTtlMs: number;\n}\n\nexport type ControlResponse =\n\t| { type: \"ok\"; id: string }\n\t| { type: \"error\"; id: string; code: string; message: string }\n\t| { type: \"lease_granted\"; id: string; workspaceName: string; sessionId: string; handoff: \"cold\" | \"warm\" | \"none\" }\n\t| { type: \"lease_pending\"; id: string; viewerFeedId: string }\n\t// lease_pending is provisional; the terminal response for the same id arrives\n\t// when the drain completes (lease_granted) or fails (error{drain_failed})\n\t| { type: \"lease_denied\"; id: string; reason: \"held_by_tui\" | \"force_unsupported\" | \"draining_elsewhere\" }\n\t| {\n\t\t\ttype: \"status_result\";\n\t\t\tid: string;\n\t\t\tversion: string;\n\t\t\tprotocolVersion: number;\n\t\t\tpid: number;\n\t\t\tstartedAtMs: number;\n\t\t\t/** Optional feature flags for protocol-v1 additions. */\n\t\t\tcapabilities?: string[];\n\t\t\tleases: ControlLeaseStatus[];\n\t\t\tphoneConnections: number;\n\t\t\tworkspaces: ControlWorkspaceStatus[];\n\t\t\tclients: ControlClientStatus[];\n\t\t\t/** Revoked identities retained for explicit repair approval; absent on older running daemons. */\n\t\t\trevokedClients?: ControlRevokedClientStatus[];\n\t\t\t/** Added to protocol v1 after launch; absent on older running daemons. */\n\t\t\tremotePolicy?: DaemonRemotePolicyStatus;\n\t\t\tkeepAwake: ControlKeepAwakeStatus;\n\t  }\n\t| { type: \"keep_awake_result\"; id: string; keepAwake: ControlKeepAwakeStatus }\n\t| { type: \"clients_result\"; id: string; clients: ControlClientStatus[] }\n\t| { type: \"client_access_updated\"; id: string; client: ControlClientStatus }\n\t| { type: \"worktree_result\"; id: string; worktree: ControlWorktreeStatus }\n\t| { type: \"worktrees_result\"; id: string; worktrees: ControlWorktreeStatus[] }\n\t| {\n\t\t\ttype: \"worktree_resolve_result\";\n\t\t\tid: string;\n\t\t\t/** Parent workspace the worktree belongs to. */\n\t\t\tworkspaceName: string;\n\t\t\t/** Parent workspace checkout path (control plane is local/trusted). */\n\t\t\tworkspacePath: string;\n\t\t\tworktreeId: string;\n\t\t\tworktreePath: string;\n\t  }\n\t| {\n\t\t\ttype: \"worktree_prune_result\";\n\t\t\tid: string;\n\t\t\tresults: Array<{ workspaceName: string; removedRecords: string[]; orphanCheckouts: string[] }>;\n\t  }\n\t| { type: \"pair_started\"; id: string; requestId: string }\n\t| {\n\t\t\ttype: \"relay_rpc_result\";\n\t\t\tid: string;\n\t\t\t/** verbatim RPC response object for the TUI to forward to the phone */\n\t\t\tresponse: Record<string, unknown>;\n\t\t\t/** refreshed workspace metadata after a successful unregister_workspace */\n\t\t\tworkspaceMetadata?: { workspaceNames: string[]; workspaces: Array<{ name: string; status: string }> };\n\t  }\n\t| { type: \"relay_push_delivery_result\"; id: string; status: IrohRemotePushNotificationDeliveryStatus };\n\n// ============================================================================\n// Unsolicited events (daemon -> control clients)\n// ============================================================================\n\nexport type RelayCloseReason =\n\t| \"phone_disconnected\"\n\t| \"tui_disconnected\"\n\t| \"lease_transferred\"\n\t| \"session_rekeyed_reconnect\"\n\t| \"workspace_unregistered\"\n\t| \"host_shutdown\"\n\t| \"error\";\n\nexport type ControlEvent =\n\t| {\n\t\t\ttype: \"relay_offer\";\n\t\t\trelayId: string;\n\t\t\t/** single-use, 10s expiry */\n\t\t\trelayToken: string;\n\t\t\tworkspaceName: string;\n\t\t\tsessionId: string;\n\t\t\tclientNodeId: string;\n\t\t\tconnectionId: string;\n\t\t\tstreamId: string;\n\t  }\n\t| { type: \"relay_closed\"; relayId: string; reason: RelayCloseReason }\n\t| {\n\t\t\ttype: \"viewer_event\";\n\t\t\tviewerFeedId: string;\n\t\t\tseq: number;\n\t\t\t/** AgentSessionEvent JSON, or {kind:\"truncated\"} when the buffer overflowed */\n\t\t\tevent: unknown;\n\t  }\n\t| { type: \"viewer_end\"; viewerFeedId: string; reason: \"granted\" | \"cancelled\" | \"error\" }\n\t| { type: \"theme_snapshot\"; themeName: string; tokens: Record<string, string> }\n\t| { type: \"keep_awake_changed\"; keepAwake: ControlKeepAwakeStatus }\n\t| {\n\t\t\ttype: \"pairing_progress\";\n\t\t\trequestId: string;\n\t\t\tphase: \"ticket\" | \"qr\" | \"waiting\" | \"completed\" | \"failed\";\n\t\t\tticket?: string;\n\t\t\tqrLines?: string[];\n\t\t\tclientNodeId?: string;\n\t\t\terror?: string;\n\t  }\n\t| { type: \"daemon_shutdown\" };\n\nexport interface ControlFatal {\n\ttype: \"fatal\";\n\terror: string;\n}\n\nexport type ControlMessage = HelloMessage | HelloAck | ControlRequest | ControlResponse | ControlEvent | ControlFatal;\n\n/** One JSONL relay preamble line follows a successful relay hello_ack. */\nexport interface RelayPreamble {\n\ttype: \"relay_preamble\";\n\trelayId: string;\n\t/** verbatim phone handshake JSON as received (parsed object, re-serialized) */\n\thandshake: unknown;\n\t/** authorization subset — everything the TUI needs to serve the stream */\n\tauthorization: {\n\t\tclientNodeId: string;\n\t\tworkspaceName: string;\n\t\tworkspacePath: string;\n\t\t/** Headless agent tool grant, carried for visibility; TUI-owned sessions retain their full local tools. */\n\t\tallowedTools: string;\n\t\trpcGrant: IrohRemoteRpcGrant;\n\t\t/** Present when the conversation is bound to a daemon-managed worktree. */\n\t\tworktreeId?: string;\n\t\t/** Worktree checkout path — the TUI sanitizes with this as the root. */\n\t\tworktreePath?: string;\n\t\t/** Registered-workspace-relative git source root for nested repo worktrees. */\n\t\tworktreeSourceRootRelativePath?: string;\n\t};\n\t/**\n\t * The daemon's Iroh node id: the TUI writes it into the handshake response\n\t * so the phone's saved-host identity verification passes over the relay.\n\t */\n\thostNodeId?: string;\n\trelayMode?: \"disabled\" | \"development\" | \"production\";\n\trelayUrls?: string[];\n\tconnectionId: string;\n\tstreamId: string;\n\tresolvedTarget: {\n\t\tsessionId: string;\n\t\tsessionFilePath?: string;\n\t\tselection: \"created\" | \"created_after_missing\" | \"resumed\";\n\t\trequestedSessionId?: string;\n\t\tworkspaceName: string;\n\t\tworkspacePath: string;\n\t\tworktreeId?: string;\n\t\t/** POSIX-style path relative to the registered workspace root. */\n\t\tworkingDirectory?: string;\n\t};\n}\n\n// ============================================================================\n// Framing\n// ============================================================================\n\nexport function encodeControlLine(message: object): Buffer {\n\treturn Buffer.from(`${JSON.stringify(message)}\\n`, \"utf8\");\n}\n\nexport class ControlFrameTooLargeError extends Error {\n\tconstructor(byteLength: number) {\n\t\tsuper(`control frame of ${byteLength} bytes exceeds the ${CONTROL_MAX_LINE_BYTES} byte cap`);\n\t\tthis.name = \"ControlFrameTooLargeError\";\n\t}\n}\n\n/**\n * Incremental JSONL decoder with the 8 MiB line cap. Feed raw socket chunks;\n * complete lines come back parsed. Throws ControlFrameTooLargeError when the\n * buffered partial line exceeds the cap (callers must close the connection).\n */\nexport class ControlLineDecoder {\n\tprivate buffered: Buffer = Buffer.alloc(0);\n\n\tpush(chunk: Buffer): unknown[] {\n\t\tthis.buffered = this.buffered.length === 0 ? Buffer.from(chunk) : Buffer.concat([this.buffered, chunk]);\n\t\tconst messages: unknown[] = [];\n\t\twhile (true) {\n\t\t\tconst newlineIndex = this.buffered.indexOf(0x0a);\n\t\t\tif (newlineIndex === -1) {\n\t\t\t\tif (this.buffered.length > CONTROL_MAX_LINE_BYTES) {\n\t\t\t\t\tthrow new ControlFrameTooLargeError(this.buffered.length);\n\t\t\t\t}\n\t\t\t\treturn messages;\n\t\t\t}\n\t\t\tif (newlineIndex > CONTROL_MAX_LINE_BYTES) {\n\t\t\t\tthrow new ControlFrameTooLargeError(newlineIndex);\n\t\t\t}\n\t\t\tconst line = this.buffered.subarray(0, newlineIndex).toString(\"utf8\");\n\t\t\tthis.buffered = this.buffered.subarray(newlineIndex + 1);\n\t\t\tif (line.trim().length === 0) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tmessages.push(JSON.parse(line));\n\t\t}\n\t}\n\n\t/**\n\t * Parse complete lines one at a time, invoking handle per message. When\n\t * handle returns \"stop\" (relay handoff), decoding halts immediately and any\n\t * bytes past the consumed line stay buffered for drainRemainder(). Unlike\n\t * push(), bytes arriving after a stop are never JSON-decoded — required for\n\t * relay hellos, where everything after the hello line is opaque payload.\n\t */\n\tpushEach(chunk: Buffer, handle: (message: unknown) => \"continue\" | \"stop\"): void {\n\t\tthis.buffered = this.buffered.length === 0 ? Buffer.from(chunk) : Buffer.concat([this.buffered, chunk]);\n\t\twhile (true) {\n\t\t\tconst newlineIndex = this.buffered.indexOf(0x0a);\n\t\t\tif (newlineIndex === -1) {\n\t\t\t\tif (this.buffered.length > CONTROL_MAX_LINE_BYTES) {\n\t\t\t\t\tthrow new ControlFrameTooLargeError(this.buffered.length);\n\t\t\t\t}\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (newlineIndex > CONTROL_MAX_LINE_BYTES) {\n\t\t\t\tthrow new ControlFrameTooLargeError(newlineIndex);\n\t\t\t}\n\t\t\tconst line = this.buffered.subarray(0, newlineIndex).toString(\"utf8\");\n\t\t\tthis.buffered = this.buffered.subarray(newlineIndex + 1);\n\t\t\tif (line.trim().length === 0) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (handle(JSON.parse(line)) === \"stop\") {\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t}\n\n\t/** Bytes buffered past the last complete line (used when switching a relay conn to raw mode). */\n\tdrainRemainder(): Buffer {\n\t\tconst remainder = this.buffered;\n\t\tthis.buffered = Buffer.alloc(0);\n\t\treturn remainder;\n\t}\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isOptionalString(value: unknown): boolean {\n\treturn value === undefined || typeof value === \"string\";\n}\n\nfunction isOptionalNumber(value: unknown): boolean {\n\treturn value === undefined || typeof value === \"number\";\n}\n\nfunction isControlAccessSelection(value: Record<string, unknown>, allowDefault: boolean): boolean {\n\tif (value.access !== undefined) {\n\t\treturn (\n\t\t\tisIrohRemoteAccessPresetName(value.access) &&\n\t\t\tvalue.allowedTools === undefined &&\n\t\t\tvalue.rpcCapabilities === undefined\n\t\t);\n\t}\n\tif (value.allowedTools === undefined && value.rpcCapabilities === undefined) {\n\t\treturn allowDefault;\n\t}\n\tif (!Array.isArray(value.allowedTools) || !value.allowedTools.every((entry) => typeof entry === \"string\")) {\n\t\treturn false;\n\t}\n\ttry {\n\t\tparseIrohRemoteRpcCapabilities(value.rpcCapabilities);\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nfunction isPushDeliveryStatus(value: unknown): value is IrohRemotePushNotificationDeliveryStatus {\n\treturn (\n\t\tvalue === \"sent\" ||\n\t\tvalue === \"no_push_target\" ||\n\t\tvalue === \"duplicate\" ||\n\t\tvalue === \"failed\" ||\n\t\tvalue === \"invalid_target\"\n\t);\n}\n\nfunction isLiveActivityToolGlyph(value: unknown): boolean {\n\treturn (\n\t\tisRecord(value) &&\n\t\ttypeof value.name === \"string\" &&\n\t\ttypeof value.symbolName === \"string\" &&\n\t\t(value.status === \"started\" || value.status === \"completed\" || value.status === \"failed\")\n\t);\n}\n\nfunction isLiveActivityContentState(value: unknown): boolean {\n\treturn (\n\t\tisRecord(value) &&\n\t\t(value.status === \"running\" ||\n\t\t\tvalue.status === \"completed\" ||\n\t\t\tvalue.status === \"failed\" ||\n\t\t\tvalue.status === \"waiting\") &&\n\t\ttypeof value.statusText === \"string\" &&\n\t\t(value.currentTool === undefined || isLiveActivityToolGlyph(value.currentTool)) &&\n\t\tArray.isArray(value.recentTools) &&\n\t\tvalue.recentTools.every(isLiveActivityToolGlyph) &&\n\t\tisOptionalString(value.sessionID) &&\n\t\tisOptionalString(value.workspaceName) &&\n\t\ttypeof value.updatedAtEpochSeconds === \"number\"\n\t);\n}\n\nfunction isPushNotificationIntent(value: unknown): value is IrohRemotePushNotificationIntent {\n\treturn (\n\t\tisRecord(value) &&\n\t\ttypeof value.eventId === \"string\" &&\n\t\ttypeof value.kind === \"string\" &&\n\t\ttypeof value.title === \"string\" &&\n\t\ttypeof value.body === \"string\" &&\n\t\tisOptionalString(value.sessionId) &&\n\t\tisOptionalString(value.workspace)\n\t);\n}\n\nfunction isLiveActivityUpdateIntent(value: unknown): value is IrohRemoteLiveActivityUpdateIntent {\n\treturn (\n\t\tisRecord(value) &&\n\t\ttypeof value.eventId === \"string\" &&\n\t\ttypeof value.kind === \"string\" &&\n\t\t(value.activityEvent === undefined || value.activityEvent === \"update\" || value.activityEvent === \"end\") &&\n\t\tisLiveActivityContentState(value.contentState) &&\n\t\tisOptionalNumber(value.staleDateEpochSeconds) &&\n\t\tisOptionalNumber(value.dismissalDateEpochSeconds)\n\t);\n}\n\nexport function parseHelloMessage(value: unknown): HelloMessage | undefined {\n\tif (!isRecord(value) || value.type !== \"hello\") {\n\t\treturn undefined;\n\t}\n\tif (typeof value.protocolVersion !== \"number\") {\n\t\treturn undefined;\n\t}\n\tif (value.role === \"control\") {\n\t\tif (\n\t\t\ttypeof value.pid !== \"number\" ||\n\t\t\ttypeof value.version !== \"string\" ||\n\t\t\t(value.client !== \"tui\" && value.client !== \"cli\")\n\t\t) {\n\t\t\treturn undefined;\n\t\t}\n\t\tif (\n\t\t\tvalue.capabilities !== undefined &&\n\t\t\t(!Array.isArray(value.capabilities) || !value.capabilities.every((entry) => typeof entry === \"string\"))\n\t\t) {\n\t\t\treturn undefined;\n\t\t}\n\t\tif (value.controlToken !== undefined && typeof value.controlToken !== \"string\") {\n\t\t\treturn undefined;\n\t\t}\n\t\treturn {\n\t\t\ttype: \"hello\",\n\t\t\trole: \"control\",\n\t\t\tprotocolVersion: value.protocolVersion,\n\t\t\tpid: value.pid,\n\t\t\tversion: value.version,\n\t\t\tclient: value.client,\n\t\t\t...(value.controlToken === undefined ? {} : { controlToken: value.controlToken }),\n\t\t\t...(value.capabilities === undefined ? {} : { capabilities: value.capabilities as string[] }),\n\t\t};\n\t}\n\tif (value.role === \"relay\") {\n\t\tif (typeof value.relayId !== \"string\" || typeof value.relayToken !== \"string\") {\n\t\t\treturn undefined;\n\t\t}\n\t\treturn {\n\t\t\ttype: \"hello\",\n\t\t\trole: \"relay\",\n\t\t\tprotocolVersion: value.protocolVersion,\n\t\t\trelayId: value.relayId,\n\t\t\trelayToken: value.relayToken,\n\t\t};\n\t}\n\treturn undefined;\n}\n\nexport function isControlRequest(value: unknown): value is ControlRequest {\n\tif (!isRecord(value) || typeof value.type !== \"string\" || typeof value.id !== \"string\") {\n\t\treturn false;\n\t}\n\tswitch (value.type) {\n\t\tcase \"status\":\n\t\tcase \"shutdown\":\n\t\tcase \"clients_list\":\n\t\t\treturn true;\n\t\tcase \"pair_request\":\n\t\t\treturn (\n\t\t\t\t(value.workspaceName === undefined || typeof value.workspaceName === \"string\") &&\n\t\t\t\tisControlAccessSelection(value, true)\n\t\t\t);\n\t\tcase \"lease_acquire\":\n\t\tcase \"lease_release\":\n\t\t\treturn typeof value.workspaceName === \"string\" && typeof value.sessionId === \"string\";\n\t\tcase \"lease_rekey\":\n\t\t\treturn (\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.oldSessionId === \"string\" &&\n\t\t\t\ttypeof value.newSessionId === \"string\"\n\t\t\t);\n\t\tcase \"pair_cancel\":\n\t\t\treturn typeof value.requestId === \"string\";\n\t\tcase \"client_access_update\":\n\t\t\treturn (\n\t\t\t\ttypeof value.clientNodeId === \"string\" &&\n\t\t\t\ttypeof value.expectedRevision === \"number\" &&\n\t\t\t\tNumber.isSafeInteger(value.expectedRevision) &&\n\t\t\t\tvalue.expectedRevision >= 1 &&\n\t\t\t\tisControlAccessSelection(value, false)\n\t\t\t);\n\t\tcase \"client_revoke\":\n\t\tcase \"client_approve_repair\":\n\t\t\treturn typeof value.clientNodeId === \"string\";\n\t\tcase \"workspace_register\":\n\t\t\treturn typeof value.name === \"string\" && typeof value.path === \"string\";\n\t\tcase \"workspace_unregister\":\n\t\t\treturn typeof value.name === \"string\";\n\t\tcase \"worktree_create\":\n\t\t\treturn (\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\t(value.worktreeName === undefined || typeof value.worktreeName === \"string\") &&\n\t\t\t\t(value.branch === undefined || typeof value.branch === \"string\") &&\n\t\t\t\t(value.baseRef === undefined || typeof value.baseRef === \"string\")\n\t\t\t);\n\t\tcase \"worktree_adopt\":\n\t\t\treturn (\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.path === \"string\" &&\n\t\t\t\t(value.worktreeName === undefined || typeof value.worktreeName === \"string\") &&\n\t\t\t\t(value.baseRef === undefined || typeof value.baseRef === \"string\")\n\t\t\t);\n\t\tcase \"worktree_list\":\n\t\tcase \"worktree_prune\":\n\t\t\treturn value.workspaceName === undefined || typeof value.workspaceName === \"string\";\n\t\tcase \"worktree_remove\":\n\t\t\treturn (\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.worktreeId === \"string\" &&\n\t\t\t\t(value.force === undefined || typeof value.force === \"boolean\")\n\t\t\t);\n\t\tcase \"worktree_resolve\":\n\t\t\treturn typeof value.path === \"string\";\n\t\tcase \"worktree_bind\":\n\t\t\treturn (\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.worktreeId === \"string\" &&\n\t\t\t\ttypeof value.sessionId === \"string\"\n\t\t\t);\n\t\tcase \"theme_set\":\n\t\t\treturn typeof value.theme === \"string\";\n\t\tcase \"keep_awake_set\":\n\t\t\treturn typeof value.enabled === \"boolean\";\n\t\tcase \"viewer_subscribe\":\n\t\tcase \"viewer_unsubscribe\":\n\t\tcase \"viewer_abort\":\n\t\t\treturn typeof value.viewerFeedId === \"string\";\n\t\tcase \"relay_rpc\":\n\t\t\treturn (\n\t\t\t\ttypeof value.relayId === \"string\" &&\n\t\t\t\ttypeof value.clientNodeId === \"string\" &&\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.sessionId === \"string\" &&\n\t\t\t\tisRecord(value.command) &&\n\t\t\t\ttypeof value.command.type === \"string\"\n\t\t\t);\n\t\tcase \"relay_notification_delivery\":\n\t\t\treturn (\n\t\t\t\ttypeof value.clientNodeId === \"string\" &&\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.sessionId === \"string\" &&\n\t\t\t\tisPushNotificationIntent(value.notification)\n\t\t\t);\n\t\tcase \"relay_live_activity_delivery\":\n\t\t\treturn (\n\t\t\t\ttypeof value.clientNodeId === \"string\" &&\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.sessionId === \"string\" &&\n\t\t\t\tisLiveActivityUpdateIntent(value.update)\n\t\t\t);\n\t\tdefault:\n\t\t\treturn false;\n\t}\n}\n\nexport function isControlResponse(value: unknown): value is ControlResponse {\n\tif (!isRecord(value) || typeof value.type !== \"string\" || typeof value.id !== \"string\") {\n\t\treturn false;\n\t}\n\tswitch (value.type) {\n\t\tcase \"ok\":\n\t\tcase \"error\":\n\t\tcase \"lease_granted\":\n\t\tcase \"lease_pending\":\n\t\tcase \"lease_denied\":\n\t\tcase \"status_result\":\n\t\tcase \"clients_result\":\n\t\tcase \"client_access_updated\":\n\t\tcase \"pair_started\":\n\t\t\treturn true;\n\t\tcase \"worktree_result\":\n\t\t\treturn isRecord(value.worktree);\n\t\tcase \"worktrees_result\":\n\t\t\treturn Array.isArray(value.worktrees);\n\t\tcase \"worktree_prune_result\":\n\t\t\treturn Array.isArray(value.results);\n\t\tcase \"worktree_resolve_result\":\n\t\t\treturn (\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.workspacePath === \"string\" &&\n\t\t\t\ttypeof value.worktreeId === \"string\" &&\n\t\t\t\ttypeof value.worktreePath === \"string\"\n\t\t\t);\n\t\tcase \"keep_awake_result\":\n\t\t\treturn isRecord(value.keepAwake);\n\t\tcase \"relay_rpc_result\":\n\t\t\treturn isRecord(value.response);\n\t\tcase \"relay_push_delivery_result\":\n\t\t\treturn isPushDeliveryStatus(value.status);\n\t\tdefault:\n\t\t\treturn false;\n\t}\n}\n\nexport function isControlEvent(value: unknown): value is ControlEvent {\n\tif (!isRecord(value) || typeof value.type !== \"string\") {\n\t\treturn false;\n\t}\n\tswitch (value.type) {\n\t\tcase \"relay_offer\":\n\t\tcase \"relay_closed\":\n\t\tcase \"viewer_event\":\n\t\tcase \"viewer_end\":\n\t\tcase \"theme_snapshot\":\n\t\tcase \"pairing_progress\":\n\t\tcase \"daemon_shutdown\":\n\t\t\treturn true;\n\t\tcase \"keep_awake_changed\":\n\t\t\treturn isRecord(value.keepAwake);\n\t\tdefault:\n\t\t\treturn false;\n\t}\n}\n\nexport function isHelloAck(value: unknown): value is HelloAck {\n\treturn isRecord(value) && value.type === \"hello_ack\" && typeof value.ok === \"boolean\";\n}\n\nexport function isRelayPreamble(value: unknown): value is RelayPreamble {\n\tif (\n\t\t!isRecord(value) ||\n\t\tvalue.type !== \"relay_preamble\" ||\n\t\ttypeof value.relayId !== \"string\" ||\n\t\t!isRecord(value.authorization) ||\n\t\t!isRecord(value.resolvedTarget)\n\t) {\n\t\treturn false;\n\t}\n\ttry {\n\t\tif (typeof value.authorization.allowedTools !== \"string\") {\n\t\t\treturn false;\n\t\t}\n\t\tparseIrohRemoteRpcGrant(value.authorization.rpcGrant, \"relay rpcGrant\");\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n"]}