@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/control-protocol.js

@@ -0,0 +1,395 @@
+import { Buffer } from "node:buffer";
+import { isIrohRemoteAccessPresetName, parseIrohRemoteRpcCapabilities, parseIrohRemoteRpcGrant, } from "../core/remote/iroh/access-grant.js";
+/**
+ * Wire types and framing for the voltd control plane: JSONL over the unix
+ * socket ~/.volt/agent/daemon/voltd.sock. Shared by the daemon, the TUI, and
+ * the CLI. Zero runtime deps beyond node:buffer.
+ */
+export const PROTOCOL_VERSION = 1;
+/** Hard cap per JSONL line; longer lines close the connection with a fatal frame. */
+export const CONTROL_MAX_LINE_BYTES = 8 * 1024 * 1024;
+/**
+ * Control-hello capability advertised by TUIs that can serve worktree-bound
+ * conversations over the byte relay (worktree-cwd sanitization). The daemon
+ * never offers worktree-session relays to control clients without it.
+ */
+export const CONTROL_WORKTREES_CAPABILITY = "worktrees";
+/** Status capability for cancellable, immediately-invalidated pairing tickets. */
+export const CONTROL_PAIR_CANCEL_CAPABILITY = "pair_cancel";
+/** TUI/CLI understands per-device tool + RPC grant control messages and relay preambles. */
+export const CONTROL_RPC_GRANTS_CAPABILITY = "rpc_grants";
+/** RPC command types the daemon executes on behalf of a TUI relay. */
+export const RELAY_RPC_COMMAND_TYPES = new Set([
+    "register_push_target",
+    "register_live_activity",
+    "unregister_live_activity",
+    "unregister_workspace",
+    // worktrees.v1: create/list only — remove_worktree is management-stream-only.
+    "create_worktree",
+    "list_worktrees",
+    "set_keep_awake",
+    "get_keep_awake",
+    "set_web_search_key",
+    "get_web_search_status",
+]);
+// ============================================================================
+// Framing
+// ============================================================================
+export function encodeControlLine(message) {
+    return Buffer.from(`${JSON.stringify(message)}\n`, "utf8");
+}
+export class ControlFrameTooLargeError extends Error {
+    constructor(byteLength) {
+        super(`control frame of ${byteLength} bytes exceeds the ${CONTROL_MAX_LINE_BYTES} byte cap`);
+        this.name = "ControlFrameTooLargeError";
+    }
+}
+/**
+ * Incremental JSONL decoder with the 8 MiB line cap. Feed raw socket chunks;
+ * complete lines come back parsed. Throws ControlFrameTooLargeError when the
+ * buffered partial line exceeds the cap (callers must close the connection).
+ */
+export class ControlLineDecoder {
+    buffered = Buffer.alloc(0);
+    push(chunk) {
+        this.buffered = this.buffered.length === 0 ? Buffer.from(chunk) : Buffer.concat([this.buffered, chunk]);
+        const messages = [];
+        while (true) {
+            const newlineIndex = this.buffered.indexOf(0x0a);
+            if (newlineIndex === -1) {
+                if (this.buffered.length > CONTROL_MAX_LINE_BYTES) {
+                    throw new ControlFrameTooLargeError(this.buffered.length);
+                }
+                return messages;
+            }
+            if (newlineIndex > CONTROL_MAX_LINE_BYTES) {
+                throw new ControlFrameTooLargeError(newlineIndex);
+            }
+            const line = this.buffered.subarray(0, newlineIndex).toString("utf8");
+            this.buffered = this.buffered.subarray(newlineIndex + 1);
+            if (line.trim().length === 0) {
+                continue;
+            }
+            messages.push(JSON.parse(line));
+        }
+    }
+    /**
+     * Parse complete lines one at a time, invoking handle per message. When
+     * handle returns "stop" (relay handoff), decoding halts immediately and any
+     * bytes past the consumed line stay buffered for drainRemainder(). Unlike
+     * push(), bytes arriving after a stop are never JSON-decoded — required for
+     * relay hellos, where everything after the hello line is opaque payload.
+     */
+    pushEach(chunk, handle) {
+        this.buffered = this.buffered.length === 0 ? Buffer.from(chunk) : Buffer.concat([this.buffered, chunk]);
+        while (true) {
+            const newlineIndex = this.buffered.indexOf(0x0a);
+            if (newlineIndex === -1) {
+                if (this.buffered.length > CONTROL_MAX_LINE_BYTES) {
+                    throw new ControlFrameTooLargeError(this.buffered.length);
+                }
+                return;
+            }
+            if (newlineIndex > CONTROL_MAX_LINE_BYTES) {
+                throw new ControlFrameTooLargeError(newlineIndex);
+            }
+            const line = this.buffered.subarray(0, newlineIndex).toString("utf8");
+            this.buffered = this.buffered.subarray(newlineIndex + 1);
+            if (line.trim().length === 0) {
+                continue;
+            }
+            if (handle(JSON.parse(line)) === "stop") {
+                return;
+            }
+        }
+    }
+    /** Bytes buffered past the last complete line (used when switching a relay conn to raw mode). */
+    drainRemainder() {
+        const remainder = this.buffered;
+        this.buffered = Buffer.alloc(0);
+        return remainder;
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isOptionalString(value) {
+    return value === undefined || typeof value === "string";
+}
+function isOptionalNumber(value) {
+    return value === undefined || typeof value === "number";
+}
+function isControlAccessSelection(value, allowDefault) {
+    if (value.access !== undefined) {
+        return (isIrohRemoteAccessPresetName(value.access) &&
+            value.allowedTools === undefined &&
+            value.rpcCapabilities === undefined);
+    }
+    if (value.allowedTools === undefined && value.rpcCapabilities === undefined) {
+        return allowDefault;
+    }
+    if (!Array.isArray(value.allowedTools) || !value.allowedTools.every((entry) => typeof entry === "string")) {
+        return false;
+    }
+    try {
+        parseIrohRemoteRpcCapabilities(value.rpcCapabilities);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function isPushDeliveryStatus(value) {
+    return (value === "sent" ||
+        value === "no_push_target" ||
+        value === "duplicate" ||
+        value === "failed" ||
+        value === "invalid_target");
+}
+function isLiveActivityToolGlyph(value) {
+    return (isRecord(value) &&
+        typeof value.name === "string" &&
+        typeof value.symbolName === "string" &&
+        (value.status === "started" || value.status === "completed" || value.status === "failed"));
+}
+function isLiveActivityContentState(value) {
+    return (isRecord(value) &&
+        (value.status === "running" ||
+            value.status === "completed" ||
+            value.status === "failed" ||
+            value.status === "waiting") &&
+        typeof value.statusText === "string" &&
+        (value.currentTool === undefined || isLiveActivityToolGlyph(value.currentTool)) &&
+        Array.isArray(value.recentTools) &&
+        value.recentTools.every(isLiveActivityToolGlyph) &&
+        isOptionalString(value.sessionID) &&
+        isOptionalString(value.workspaceName) &&
+        typeof value.updatedAtEpochSeconds === "number");
+}
+function isPushNotificationIntent(value) {
+    return (isRecord(value) &&
+        typeof value.eventId === "string" &&
+        typeof value.kind === "string" &&
+        typeof value.title === "string" &&
+        typeof value.body === "string" &&
+        isOptionalString(value.sessionId) &&
+        isOptionalString(value.workspace));
+}
+function isLiveActivityUpdateIntent(value) {
+    return (isRecord(value) &&
+        typeof value.eventId === "string" &&
+        typeof value.kind === "string" &&
+        (value.activityEvent === undefined || value.activityEvent === "update" || value.activityEvent === "end") &&
+        isLiveActivityContentState(value.contentState) &&
+        isOptionalNumber(value.staleDateEpochSeconds) &&
+        isOptionalNumber(value.dismissalDateEpochSeconds));
+}
+export function parseHelloMessage(value) {
+    if (!isRecord(value) || value.type !== "hello") {
+        return undefined;
+    }
+    if (typeof value.protocolVersion !== "number") {
+        return undefined;
+    }
+    if (value.role === "control") {
+        if (typeof value.pid !== "number" ||
+            typeof value.version !== "string" ||
+            (value.client !== "tui" && value.client !== "cli")) {
+            return undefined;
+        }
+        if (value.capabilities !== undefined &&
+            (!Array.isArray(value.capabilities) || !value.capabilities.every((entry) => typeof entry === "string"))) {
+            return undefined;
+        }
+        if (value.controlToken !== undefined && typeof value.controlToken !== "string") {
+            return undefined;
+        }
+        return {
+            type: "hello",
+            role: "control",
+            protocolVersion: value.protocolVersion,
+            pid: value.pid,
+            version: value.version,
+            client: value.client,
+            ...(value.controlToken === undefined ? {} : { controlToken: value.controlToken }),
+            ...(value.capabilities === undefined ? {} : { capabilities: value.capabilities }),
+        };
+    }
+    if (value.role === "relay") {
+        if (typeof value.relayId !== "string" || typeof value.relayToken !== "string") {
+            return undefined;
+        }
+        return {
+            type: "hello",
+            role: "relay",
+            protocolVersion: value.protocolVersion,
+            relayId: value.relayId,
+            relayToken: value.relayToken,
+        };
+    }
+    return undefined;
+}
+export function isControlRequest(value) {
+    if (!isRecord(value) || typeof value.type !== "string" || typeof value.id !== "string") {
+        return false;
+    }
+    switch (value.type) {
+        case "status":
+        case "shutdown":
+        case "clients_list":
+            return true;
+        case "pair_request":
+            return ((value.workspaceName === undefined || typeof value.workspaceName === "string") &&
+                isControlAccessSelection(value, true));
+        case "lease_acquire":
+        case "lease_release":
+            return typeof value.workspaceName === "string" && typeof value.sessionId === "string";
+        case "lease_rekey":
+            return (typeof value.workspaceName === "string" &&
+                typeof value.oldSessionId === "string" &&
+                typeof value.newSessionId === "string");
+        case "pair_cancel":
+            return typeof value.requestId === "string";
+        case "client_access_update":
+            return (typeof value.clientNodeId === "string" &&
+                typeof value.expectedRevision === "number" &&
+                Number.isSafeInteger(value.expectedRevision) &&
+                value.expectedRevision >= 1 &&
+                isControlAccessSelection(value, false));
+        case "client_revoke":
+        case "client_approve_repair":
+            return typeof value.clientNodeId === "string";
+        case "workspace_register":
+            return typeof value.name === "string" && typeof value.path === "string";
+        case "workspace_unregister":
+            return typeof value.name === "string";
+        case "worktree_create":
+            return (typeof value.workspaceName === "string" &&
+                (value.worktreeName === undefined || typeof value.worktreeName === "string") &&
+                (value.branch === undefined || typeof value.branch === "string") &&
+                (value.baseRef === undefined || typeof value.baseRef === "string"));
+        case "worktree_adopt":
+            return (typeof value.workspaceName === "string" &&
+                typeof value.path === "string" &&
+                (value.worktreeName === undefined || typeof value.worktreeName === "string") &&
+                (value.baseRef === undefined || typeof value.baseRef === "string"));
+        case "worktree_list":
+        case "worktree_prune":
+            return value.workspaceName === undefined || typeof value.workspaceName === "string";
+        case "worktree_remove":
+            return (typeof value.workspaceName === "string" &&
+                typeof value.worktreeId === "string" &&
+                (value.force === undefined || typeof value.force === "boolean"));
+        case "worktree_resolve":
+            return typeof value.path === "string";
+        case "worktree_bind":
+            return (typeof value.workspaceName === "string" &&
+                typeof value.worktreeId === "string" &&
+                typeof value.sessionId === "string");
+        case "theme_set":
+            return typeof value.theme === "string";
+        case "keep_awake_set":
+            return typeof value.enabled === "boolean";
+        case "viewer_subscribe":
+        case "viewer_unsubscribe":
+        case "viewer_abort":
+            return typeof value.viewerFeedId === "string";
+        case "relay_rpc":
+            return (typeof value.relayId === "string" &&
+                typeof value.clientNodeId === "string" &&
+                typeof value.workspaceName === "string" &&
+                typeof value.sessionId === "string" &&
+                isRecord(value.command) &&
+                typeof value.command.type === "string");
+        case "relay_notification_delivery":
+            return (typeof value.clientNodeId === "string" &&
+                typeof value.workspaceName === "string" &&
+                typeof value.sessionId === "string" &&
+                isPushNotificationIntent(value.notification));
+        case "relay_live_activity_delivery":
+            return (typeof value.clientNodeId === "string" &&
+                typeof value.workspaceName === "string" &&
+                typeof value.sessionId === "string" &&
+                isLiveActivityUpdateIntent(value.update));
+        default:
+            return false;
+    }
+}
+export function isControlResponse(value) {
+    if (!isRecord(value) || typeof value.type !== "string" || typeof value.id !== "string") {
+        return false;
+    }
+    switch (value.type) {
+        case "ok":
+        case "error":
+        case "lease_granted":
+        case "lease_pending":
+        case "lease_denied":
+        case "status_result":
+        case "clients_result":
+        case "client_access_updated":
+        case "pair_started":
+            return true;
+        case "worktree_result":
+            return isRecord(value.worktree);
+        case "worktrees_result":
+            return Array.isArray(value.worktrees);
+        case "worktree_prune_result":
+            return Array.isArray(value.results);
+        case "worktree_resolve_result":
+            return (typeof value.workspaceName === "string" &&
+                typeof value.workspacePath === "string" &&
+                typeof value.worktreeId === "string" &&
+                typeof value.worktreePath === "string");
+        case "keep_awake_result":
+            return isRecord(value.keepAwake);
+        case "relay_rpc_result":
+            return isRecord(value.response);
+        case "relay_push_delivery_result":
+            return isPushDeliveryStatus(value.status);
+        default:
+            return false;
+    }
+}
+export function isControlEvent(value) {
+    if (!isRecord(value) || typeof value.type !== "string") {
+        return false;
+    }
+    switch (value.type) {
+        case "relay_offer":
+        case "relay_closed":
+        case "viewer_event":
+        case "viewer_end":
+        case "theme_snapshot":
+        case "pairing_progress":
+        case "daemon_shutdown":
+            return true;
+        case "keep_awake_changed":
+            return isRecord(value.keepAwake);
+        default:
+            return false;
+    }
+}
+export function isHelloAck(value) {
+    return isRecord(value) && value.type === "hello_ack" && typeof value.ok === "boolean";
+}
+export function isRelayPreamble(value) {
+    if (!isRecord(value) ||
+        value.type !== "relay_preamble" ||
+        typeof value.relayId !== "string" ||
+        !isRecord(value.authorization) ||
+        !isRecord(value.resolvedTarget)) {
+        return false;
+    }
+    try {
+        if (typeof value.authorization.allowedTools !== "string") {
+            return false;
+        }
+        parseIrohRemoteRpcGrant(value.authorization.rpcGrant, "relay rpcGrant");
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=control-protocol.js.map

package/dist/daemon/control-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-protocol.js","sourceRoot":"","sources":["../../src/daemon/control-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAIN,4BAA4B,EAC5B,8BAA8B,EAC9B,uBAAuB,GACvB,MAAM,qCAAqC,CAAC;AAO7C;;;;GAIG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,qFAAqF;AACrF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAMtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAW,CAAC;AACxD,kFAAkF;AAClF,MAAM,CAAC,MAAM,8BAA8B,GAAG,aAAa,CAAC;AAC5D,4FAA4F;AAC5F,MAAM,CAAC,MAAM,6BAA6B,GAAG,YAAY,CAAC;AAuI1D,sEAAsE;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC;IACnE,sBAAsB;IACtB,wBAAwB;IACxB,0BAA0B;IAC1B,sBAAsB;IACtB,gFAA8E;IAC9E,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,uBAAuB;CACvB,CAAC,CAAC;AAsOH,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAU;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAAA,CAC3D;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACnD,YAAY,UAAkB,EAAE;QAC/B,KAAK,CAAC,oBAAoB,UAAU,sBAAsB,sBAAsB,WAAW,CAAC,CAAC;QAC7F,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAAA,CACxC;CACD;AAED;;;;GAIG;AACH,MAAM,OAAO,kBAAkB;IACtB,QAAQ,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3C,IAAI,CAAC,KAAa,EAAa;QAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACxG,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,OAAO,IAAI,EAAE,CAAC;YACb,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;oBACnD,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,QAAQ,CAAC;YACjB,CAAC;YACD,IAAI,YAAY,GAAG,sBAAsB,EAAE,CAAC;gBAC3C,MAAM,IAAI,yBAAyB,CAAC,YAAY,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,SAAS;YACV,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC;IAAA,CACD;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,KAAa,EAAE,MAAiD,EAAQ;QAChF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACxG,OAAO,IAAI,EAAE,CAAC;YACb,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;oBACnD,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO;YACR,CAAC;YACD,IAAI,YAAY,GAAG,sBAAsB,EAAE,CAAC;gBAC3C,MAAM,IAAI,yBAAyB,CAAC,YAAY,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,SAAS;YACV,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;gBACzC,OAAO;YACR,CAAC;QACF,CAAC;IAAA,CACD;IAED,iGAAiG;IACjG,cAAc,GAAW;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,SAAS,CAAC;IAAA,CACjB;CACD;AAED,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAW;IAClD,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAAA,CACxD;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAW;IAClD,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAAA,CACxD;AAED,SAAS,wBAAwB,CAAC,KAA8B,EAAE,YAAqB,EAAW;IACjG,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CACN,4BAA4B,CAAC,KAAK,CAAC,MAAM,CAAC;YAC1C,KAAK,CAAC,YAAY,KAAK,SAAS;YAChC,KAAK,CAAC,eAAe,KAAK,SAAS,CACnC,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC7E,OAAO,YAAY,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC3G,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACJ,8BAA8B,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AAAA,CACD;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAqD;IAChG,OAAO,CACN,KAAK,KAAK,MAAM;QAChB,KAAK,KAAK,gBAAgB;QAC1B,KAAK,KAAK,WAAW;QACrB,KAAK,KAAK,QAAQ;QAClB,KAAK,KAAK,gBAAgB,CAC1B,CAAC;AAAA,CACF;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAW;IACzD,OAAO,CACN,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CACzF,CAAC;AAAA,CACF;AAED,SAAS,0BAA0B,CAAC,KAAc,EAAW;IAC5D,OAAO,CACN,QAAQ,CAAC,KAAK,CAAC;QACf,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAC1B,KAAK,CAAC,MAAM,KAAK,WAAW;YAC5B,KAAK,CAAC,MAAM,KAAK,QAAQ;YACzB,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;QAC5B,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/E,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAChC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,uBAAuB,CAAC;QAChD,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;QACjC,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC;QACrC,OAAO,KAAK,CAAC,qBAAqB,KAAK,QAAQ,CAC/C,CAAC;AAAA,CACF;AAED,SAAS,wBAAwB,CAAC,KAAc,EAA6C;IAC5F,OAAO,CACN,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC;QACjC,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,CACjC,CAAC;AAAA,CACF;AAED,SAAS,0BAA0B,CAAC,KAAc,EAA+C;IAChG,OAAO,CACN,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC;QACxG,0BAA0B,CAAC,KAAK,CAAC,YAAY,CAAC;QAC9C,gBAAgB,CAAC,KAAK,CAAC,qBAAqB,CAAC;QAC7C,gBAAgB,CAAC,KAAK,CAAC,yBAAyB,CAAC,CACjD,CAAC;AAAA,CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAA4B;IAC3E,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,IACC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;YAC7B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,EACjD,CAAC;YACF,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,IACC,KAAK,CAAC,YAAY,KAAK,SAAS;YAChC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,EACtG,CAAC;YACF,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAChF,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,OAAO;YACN,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,SAAS;YACf,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;YACjF,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAwB,EAAE,CAAC;SAC7F,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC/E,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,OAAO;YACN,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,OAAO;YACb,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC5B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAA2B;IACzE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACxF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU,CAAC;QAChB,KAAK,cAAc;YAClB,OAAO,IAAI,CAAC;QACb,KAAK,cAAc;YAClB,OAAO,CACN,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC;gBAC9E,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,CACrC,CAAC;QACH,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe;YACnB,OAAO,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;QACvF,KAAK,aAAa;YACjB,OAAO,CACN,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;gBACvC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;gBACtC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CACtC,CAAC;QACH,KAAK,aAAa;YACjB,OAAO,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;QAC5C,KAAK,sBAAsB;YAC1B,OAAO,CACN,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;gBACtC,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;gBAC1C,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,gBAAgB,CAAC;gBAC5C,KAAK,CAAC,gBAAgB,IAAI,CAAC;gBAC3B,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CACtC,CAAC;QACH,KAAK,eAAe,CAAC;QACrB,KAAK,uBAAuB;YAC3B,OAAO,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC;QAC/C,KAAK,oBAAoB;YACxB,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;QACzE,KAAK,sBAAsB;YAC1B,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;QACvC,KAAK,iBAAiB;YACrB,OAAO,CACN,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;gBACvC,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC;gBAC5E,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC;gBAChE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAClE,CAAC;QACH,KAAK,gBAAgB;YACpB,OAAO,CACN,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;gBACvC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC9B,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC;gBAC5E,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAClE,CAAC;QACH,KAAK,eAAe,CAAC;QACrB,KAAK,gBAAgB;YACpB,OAAO,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC;QACrF,KAAK,iBAAiB;YACrB,OAAO,CACN,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;gBACvC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;gBACpC,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAC/D,CAAC;QACH,KAAK,kBAAkB;YACtB,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;QACvC,KAAK,eAAe;YACnB,OAAO,CACN,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;gBACvC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;gBACpC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CACnC,CAAC;QACH,KAAK,WAAW;YACf,OAAO,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;QACxC,KAAK,gBAAgB;YACpB,OAAO,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;QAC3C,KAAK,kBAAkB,CAAC;QACxB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,cAAc;YAClB,OAAO,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC;QAC/C,KAAK,WAAW;YACf,OAAO,CACN,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBACjC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;gBACtC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;gBACvC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;gBACnC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;gBACvB,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CACtC,CAAC;QACH,KAAK,6BAA6B;YACjC,OAAO,CACN,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;gBACtC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;gBACvC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;gBACnC,wBAAwB,CAAC,KAAK,CAAC,YAAY,CAAC,CAC5C,CAAC;QACH,KAAK,8BAA8B;YAClC,OAAO,CACN,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;gBACtC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;gBACvC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;gBACnC,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CACxC,CAAC;QACH;YACC,OAAO,KAAK,CAAC;IACf,CAAC;AAAA,CACD;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAA4B;IAC3E,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACxF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,IAAI,CAAC;QACV,KAAK,OAAO,CAAC;QACb,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe,CAAC;QACrB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe,CAAC;QACrB,KAAK,gBAAgB,CAAC;QACtB,KAAK,uBAAuB,CAAC;QAC7B,KAAK,cAAc;YAClB,OAAO,IAAI,CAAC;QACb,KAAK,iBAAiB;YACrB,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,KAAK,kBAAkB;YACtB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,KAAK,uBAAuB;YAC3B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,KAAK,yBAAyB;YAC7B,OAAO,CACN,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;gBACvC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;gBACvC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;gBACpC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,CACtC,CAAC;QACH,KAAK,mBAAmB;YACvB,OAAO,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAClC,KAAK,kBAAkB;YACtB,OAAO,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjC,KAAK,4BAA4B;YAChC,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C;YACC,OAAO,KAAK,CAAC;IACf,CAAC;AAAA,CACD;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,EAAyB;IACrE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,aAAa,CAAC;QACnB,KAAK,cAAc,CAAC;QACpB,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY,CAAC;QAClB,KAAK,gBAAgB,CAAC;QACtB,KAAK,kBAAkB,CAAC;QACxB,KAAK,iBAAiB;YACrB,OAAO,IAAI,CAAC;QACb,KAAK,oBAAoB;YACxB,OAAO,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAClC;YACC,OAAO,KAAK,CAAC;IACf,CAAC;AAAA,CACD;AAED,MAAM,UAAU,UAAU,CAAC,KAAc,EAAqB;IAC7D,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC;AAAA,CACtF;AAED,MAAM,UAAU,eAAe,CAAC,KAAc,EAA0B;IACvE,IACC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAC/B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC;QAC9B,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,EAC9B,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACJ,IAAI,OAAO,KAAK,CAAC,aAAa,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACd,CAAC;QACD,uBAAuB,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AAAA,CACD","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport {\n\ttype IrohRemoteAccessPresetName,\n\ttype IrohRemoteRpcCapability,\n\ttype IrohRemoteRpcGrant,\n\tisIrohRemoteAccessPresetName,\n\tparseIrohRemoteRpcCapabilities,\n\tparseIrohRemoteRpcGrant,\n} from \"../core/remote/iroh/access-grant.ts\";\nimport type {\n\tIrohRemoteLiveActivityUpdateIntent,\n\tIrohRemotePushNotificationDeliveryStatus,\n\tIrohRemotePushNotificationIntent,\n} from \"../core/remote/iroh/push.ts\";\n\n/**\n * Wire types and framing for the voltd control plane: JSONL over the unix\n * socket ~/.volt/agent/daemon/voltd.sock. Shared by the daemon, the TUI, and\n * the CLI. Zero runtime deps beyond node:buffer.\n */\n\nexport const PROTOCOL_VERSION = 1;\n\n/** Hard cap per JSONL line; longer lines close the connection with a fatal frame. */\nexport const CONTROL_MAX_LINE_BYTES = 8 * 1024 * 1024;\n\nexport type LeaseState = \"unowned\" | \"daemon-active\" | \"daemon-detached\" | \"daemon-draining\" | \"tui-owned\";\n\nexport type ControlClientKind = \"tui\" | \"cli\";\n\n/**\n * Control-hello capability advertised by TUIs that can serve worktree-bound\n * conversations over the byte relay (worktree-cwd sanitization). The daemon\n * never offers worktree-session relays to control clients without it.\n */\nexport const CONTROL_WORKTREES_CAPABILITY = \"worktrees\";\n/** Status capability for cancellable, immediately-invalidated pairing tickets. */\nexport const CONTROL_PAIR_CANCEL_CAPABILITY = \"pair_cancel\";\n/** TUI/CLI understands per-device tool + RPC grant control messages and relay preambles. */\nexport const CONTROL_RPC_GRANTS_CAPABILITY = \"rpc_grants\";\n\nexport type HelloMessage =\n\t| {\n\t\t\ttype: \"hello\";\n\t\t\trole: \"control\";\n\t\t\tprotocolVersion: number;\n\t\t\tpid: number;\n\t\t\tversion: string;\n\t\t\tclient: ControlClientKind;\n\t\t\t/** Per-daemon instance token read from the local pidfile. */\n\t\t\tcontrolToken?: string;\n\t\t\t/** Optional client capabilities (e.g. \"worktrees\"); absent for old clients. */\n\t\t\tcapabilities?: string[];\n\t  }\n\t| {\n\t\t\ttype: \"hello\";\n\t\t\trole: \"relay\";\n\t\t\tprotocolVersion: number;\n\t\t\trelayId: string;\n\t\t\trelayToken: string;\n\t  };\n\nexport interface HelloAck {\n\ttype: \"hello_ack\";\n\tok: boolean;\n\terror?: \"protocol_mismatch\" | \"shutting_down\" | \"bad_relay_token\" | \"auth_failed\";\n\t/** daemon-assigned, present when ok (control role) */\n\tconnectionId?: string;\n\t/** daemon package version */\n\tversion?: string;\n\tprotocolVersion?: number;\n}\n\n// ============================================================================\n// Requests and responses (control role)\n// ============================================================================\n\nexport type ControlAccessSelection =\n\t| { access?: IrohRemoteAccessPresetName; allowedTools?: never; rpcCapabilities?: never }\n\t| { access?: never; allowedTools: string[]; rpcCapabilities: IrohRemoteRpcCapability[] };\n\nexport type ControlRequest =\n\t| { type: \"status\"; id: string }\n\t| { type: \"shutdown\"; id: string }\n\t| {\n\t\t\ttype: \"lease_acquire\";\n\t\t\tid: string;\n\t\t\tworkspaceName: string;\n\t\t\tsessionId: string;\n\t\t\t/** reserved; true => lease_denied{force_unsupported} */\n\t\t\tforce?: boolean;\n\t  }\n\t| { type: \"lease_release\"; id: string; workspaceName: string; sessionId: string }\n\t| { type: \"lease_rekey\"; id: string; workspaceName: string; oldSessionId: string; newSessionId: string }\n\t| ({ type: \"pair_request\"; id: string; workspaceName?: string } & ControlAccessSelection) // progress arrives as pairing_progress events\n\t| { type: \"pair_cancel\"; id: string; requestId: string }\n\t| { type: \"clients_list\"; id: string }\n\t| ({\n\t\t\ttype: \"client_access_update\";\n\t\t\tid: string;\n\t\t\tclientNodeId: string;\n\t\t\texpectedRevision: number;\n\t  } & ControlAccessSelection)\n\t| { type: \"client_revoke\"; id: string; clientNodeId: string }\n\t| { type: \"client_approve_repair\"; id: string; clientNodeId: string }\n\t| { type: \"workspace_register\"; id: string; name: string; path: string }\n\t| { type: \"workspace_unregister\"; id: string; name: string }\n\t| {\n\t\t\ttype: \"worktree_create\";\n\t\t\tid: string;\n\t\t\tworkspaceName: string;\n\t\t\tworktreeName?: string;\n\t\t\tbranch?: string;\n\t\t\tbaseRef?: string;\n\t  }\n\t| {\n\t\t\ttype: \"worktree_adopt\";\n\t\t\tid: string;\n\t\t\tworkspaceName: string;\n\t\t\tpath: string;\n\t\t\tworktreeName?: string;\n\t\t\tbaseRef?: string;\n\t  }\n\t| { type: \"worktree_list\"; id: string; workspaceName?: string }\n\t| { type: \"worktree_remove\"; id: string; workspaceName: string; worktreeId: string; force?: boolean }\n\t| { type: \"worktree_prune\"; id: string; workspaceName?: string }\n\t/** Resolve a filesystem path to the daemon-managed worktree containing it. */\n\t| { type: \"worktree_resolve\"; id: string; path: string }\n\t/** Bind a session id to a worktree (TUI-created worktree sessions). */\n\t| { type: \"worktree_bind\"; id: string; workspaceName: string; worktreeId: string; sessionId: string }\n\t| { type: \"theme_set\"; id: string; theme: string } // name; daemon resolves + broadcasts\n\t| { type: \"keep_awake_set\"; id: string; enabled: boolean } // hold/release the host sleep-prevention assertion\n\t| { type: \"viewer_subscribe\"; id: string; viewerFeedId: string }\n\t| { type: \"viewer_unsubscribe\"; id: string; viewerFeedId: string }\n\t| { type: \"viewer_abort\"; id: string; viewerFeedId: string }\n\t| {\n\t\t\ttype: \"relay_rpc\";\n\t\t\tid: string;\n\t\t\t/** Active relay whose phone command is being forwarded. */\n\t\t\trelayId: string;\n\t\t\t/** paired phone client the relayed conversation belongs to */\n\t\t\tclientNodeId: string;\n\t\t\tworkspaceName: string;\n\t\t\t/** the TUI's current session id for the relayed conversation */\n\t\t\tsessionId: string;\n\t\t\t/**\n\t\t\t * Verbatim phone RPC command forwarded from a TUI-owned conversation.\n\t\t\t * The daemon executes it against its real state (push targets, live\n\t\t\t * activities, workspace registry) and returns the RPC response in\n\t\t\t * relay_rpc_result.\n\t\t\t */\n\t\t\tcommand: Record<string, unknown> & { type: string };\n\t  }\n\t| {\n\t\t\ttype: \"relay_notification_delivery\";\n\t\t\tid: string;\n\t\t\t/** paired phone client the relayed conversation belongs to */\n\t\t\tclientNodeId: string;\n\t\t\tworkspaceName: string;\n\t\t\t/** the TUI's current session id for the relayed conversation */\n\t\t\tsessionId: string;\n\t\t\tnotification: IrohRemotePushNotificationIntent;\n\t  }\n\t| {\n\t\t\ttype: \"relay_live_activity_delivery\";\n\t\t\tid: string;\n\t\t\t/** paired phone client the relayed conversation belongs to */\n\t\t\tclientNodeId: string;\n\t\t\tworkspaceName: string;\n\t\t\t/** the TUI's current session id for the relayed conversation */\n\t\t\tsessionId: string;\n\t\t\tupdate: IrohRemoteLiveActivityUpdateIntent;\n\t  };\n\n/** RPC command types the daemon executes on behalf of a TUI relay. */\nexport const RELAY_RPC_COMMAND_TYPES: ReadonlySet<string> = new Set([\n\t\"register_push_target\",\n\t\"register_live_activity\",\n\t\"unregister_live_activity\",\n\t\"unregister_workspace\",\n\t// worktrees.v1: create/list only — remove_worktree is management-stream-only.\n\t\"create_worktree\",\n\t\"list_worktrees\",\n\t\"set_keep_awake\",\n\t\"get_keep_awake\",\n\t\"set_web_search_key\",\n\t\"get_web_search_status\",\n]);\n\n/** Host keep-awake assertion state as reported over the control plane. */\nexport interface ControlKeepAwakeStatus {\n\t/** Desired (persisted) state. */\n\tenabled: boolean;\n\t/** Actual state; `degraded` means enabled but the assertion is not held. */\n\tstate: \"disabled\" | \"active\" | \"degraded\";\n\tmethod?: string;\n\treason?: string;\n}\n\nexport interface ControlLeaseStatus {\n\tworkspaceName: string;\n\tsessionId: string;\n\tstate: LeaseState;\n\trelayCount: number;\n\tstreamCount: number;\n}\n\nexport interface ControlWorkspaceStatus {\n\tname: string;\n\tpath: string;\n\t/** Workspace-specific headless tool grant, when configured. */\n\tallowedTools?: string[];\n}\n\n/**\n * Worktree status over the LOCAL control socket. Unlike the iroh wire, the\n * control plane is trusted (same user), so checkout paths are included for\n * display.\n */\nexport interface ControlWorktreeStatus {\n\tid: string;\n\tworkspaceName: string;\n\tpath: string;\n\tbranch: string;\n\tbaseRef?: string;\n\tcreatedAt: number;\n\tsessionIds: string[];\n\tavailable?: boolean;\n\tdirty?: boolean;\n\t/** Branch commits vs the base ref (merge-back guidance). */\n\taheadBehind?: { ahead: number; behind: number };\n}\n\nexport interface ControlClientStatus {\n\tclientNodeId: string;\n\tlabel?: string;\n\tpairedAtMs: number;\n\t/** Added to protocol v1 after launch; absent on older running daemons. */\n\tlastSeenAtMs?: number;\n\t/** Persisted headless tool grant for this paired device. */\n\tallowedTools?: string[];\n\trpcGrant?: IrohRemoteRpcGrant;\n}\n\nexport interface ControlRevokedClientStatus {\n\tclientNodeId: string;\n\tlabel?: string;\n\tpairedAtMs: number;\n\tlastSeenAtMs?: number;\n\trevokedAtMs: number;\n\t/** Present after the desktop explicitly allows this identity to use a fresh pairing ticket. */\n\trePairApprovedAtMs?: number;\n\trpcGrant?: IrohRemoteRpcGrant;\n}\n\nexport interface DaemonRemotePolicyStatus {\n\t/** Daemon-wide override; null delegates to workspace and device grants. */\n\tallowTools: string[] | null;\n\t/** Retention window for idle, detached daemon-owned runtimes. */\n\tdetachedRuntimeTtlMs: number;\n}\n\nexport type ControlResponse =\n\t| { type: \"ok\"; id: string }\n\t| { type: \"error\"; id: string; code: string; message: string }\n\t| { type: \"lease_granted\"; id: string; workspaceName: string; sessionId: string; handoff: \"cold\" | \"warm\" | \"none\" }\n\t| { type: \"lease_pending\"; id: string; viewerFeedId: string }\n\t// lease_pending is provisional; the terminal response for the same id arrives\n\t// when the drain completes (lease_granted) or fails (error{drain_failed})\n\t| { type: \"lease_denied\"; id: string; reason: \"held_by_tui\" | \"force_unsupported\" | \"draining_elsewhere\" }\n\t| {\n\t\t\ttype: \"status_result\";\n\t\t\tid: string;\n\t\t\tversion: string;\n\t\t\tprotocolVersion: number;\n\t\t\tpid: number;\n\t\t\tstartedAtMs: number;\n\t\t\t/** Optional feature flags for protocol-v1 additions. */\n\t\t\tcapabilities?: string[];\n\t\t\tleases: ControlLeaseStatus[];\n\t\t\tphoneConnections: number;\n\t\t\tworkspaces: ControlWorkspaceStatus[];\n\t\t\tclients: ControlClientStatus[];\n\t\t\t/** Revoked identities retained for explicit repair approval; absent on older running daemons. */\n\t\t\trevokedClients?: ControlRevokedClientStatus[];\n\t\t\t/** Added to protocol v1 after launch; absent on older running daemons. */\n\t\t\tremotePolicy?: DaemonRemotePolicyStatus;\n\t\t\tkeepAwake: ControlKeepAwakeStatus;\n\t  }\n\t| { type: \"keep_awake_result\"; id: string; keepAwake: ControlKeepAwakeStatus }\n\t| { type: \"clients_result\"; id: string; clients: ControlClientStatus[] }\n\t| { type: \"client_access_updated\"; id: string; client: ControlClientStatus }\n\t| { type: \"worktree_result\"; id: string; worktree: ControlWorktreeStatus }\n\t| { type: \"worktrees_result\"; id: string; worktrees: ControlWorktreeStatus[] }\n\t| {\n\t\t\ttype: \"worktree_resolve_result\";\n\t\t\tid: string;\n\t\t\t/** Parent workspace the worktree belongs to. */\n\t\t\tworkspaceName: string;\n\t\t\t/** Parent workspace checkout path (control plane is local/trusted). */\n\t\t\tworkspacePath: string;\n\t\t\tworktreeId: string;\n\t\t\tworktreePath: string;\n\t  }\n\t| {\n\t\t\ttype: \"worktree_prune_result\";\n\t\t\tid: string;\n\t\t\tresults: Array<{ workspaceName: string; removedRecords: string[]; orphanCheckouts: string[] }>;\n\t  }\n\t| { type: \"pair_started\"; id: string; requestId: string }\n\t| {\n\t\t\ttype: \"relay_rpc_result\";\n\t\t\tid: string;\n\t\t\t/** verbatim RPC response object for the TUI to forward to the phone */\n\t\t\tresponse: Record<string, unknown>;\n\t\t\t/** refreshed workspace metadata after a successful unregister_workspace */\n\t\t\tworkspaceMetadata?: { workspaceNames: string[]; workspaces: Array<{ name: string; status: string }> };\n\t  }\n\t| { type: \"relay_push_delivery_result\"; id: string; status: IrohRemotePushNotificationDeliveryStatus };\n\n// ============================================================================\n// Unsolicited events (daemon -> control clients)\n// ============================================================================\n\nexport type RelayCloseReason =\n\t| \"phone_disconnected\"\n\t| \"tui_disconnected\"\n\t| \"lease_transferred\"\n\t| \"session_rekeyed_reconnect\"\n\t| \"workspace_unregistered\"\n\t| \"host_shutdown\"\n\t| \"error\";\n\nexport type ControlEvent =\n\t| {\n\t\t\ttype: \"relay_offer\";\n\t\t\trelayId: string;\n\t\t\t/** single-use, 10s expiry */\n\t\t\trelayToken: string;\n\t\t\tworkspaceName: string;\n\t\t\tsessionId: string;\n\t\t\tclientNodeId: string;\n\t\t\tconnectionId: string;\n\t\t\tstreamId: string;\n\t  }\n\t| { type: \"relay_closed\"; relayId: string; reason: RelayCloseReason }\n\t| {\n\t\t\ttype: \"viewer_event\";\n\t\t\tviewerFeedId: string;\n\t\t\tseq: number;\n\t\t\t/** AgentSessionEvent JSON, or {kind:\"truncated\"} when the buffer overflowed */\n\t\t\tevent: unknown;\n\t  }\n\t| { type: \"viewer_end\"; viewerFeedId: string; reason: \"granted\" | \"cancelled\" | \"error\" }\n\t| { type: \"theme_snapshot\"; themeName: string; tokens: Record<string, string> }\n\t| { type: \"keep_awake_changed\"; keepAwake: ControlKeepAwakeStatus }\n\t| {\n\t\t\ttype: \"pairing_progress\";\n\t\t\trequestId: string;\n\t\t\tphase: \"ticket\" | \"qr\" | \"waiting\" | \"completed\" | \"failed\";\n\t\t\tticket?: string;\n\t\t\tqrLines?: string[];\n\t\t\tclientNodeId?: string;\n\t\t\terror?: string;\n\t  }\n\t| { type: \"daemon_shutdown\" };\n\nexport interface ControlFatal {\n\ttype: \"fatal\";\n\terror: string;\n}\n\nexport type ControlMessage = HelloMessage | HelloAck | ControlRequest | ControlResponse | ControlEvent | ControlFatal;\n\n/** One JSONL relay preamble line follows a successful relay hello_ack. */\nexport interface RelayPreamble {\n\ttype: \"relay_preamble\";\n\trelayId: string;\n\t/** verbatim phone handshake JSON as received (parsed object, re-serialized) */\n\thandshake: unknown;\n\t/** authorization subset — everything the TUI needs to serve the stream */\n\tauthorization: {\n\t\tclientNodeId: string;\n\t\tworkspaceName: string;\n\t\tworkspacePath: string;\n\t\t/** Headless agent tool grant, carried for visibility; TUI-owned sessions retain their full local tools. */\n\t\tallowedTools: string;\n\t\trpcGrant: IrohRemoteRpcGrant;\n\t\t/** Present when the conversation is bound to a daemon-managed worktree. */\n\t\tworktreeId?: string;\n\t\t/** Worktree checkout path — the TUI sanitizes with this as the root. */\n\t\tworktreePath?: string;\n\t\t/** Registered-workspace-relative git source root for nested repo worktrees. */\n\t\tworktreeSourceRootRelativePath?: string;\n\t};\n\t/**\n\t * The daemon's Iroh node id: the TUI writes it into the handshake response\n\t * so the phone's saved-host identity verification passes over the relay.\n\t */\n\thostNodeId?: string;\n\trelayMode?: \"disabled\" | \"development\" | \"production\";\n\trelayUrls?: string[];\n\tconnectionId: string;\n\tstreamId: string;\n\tresolvedTarget: {\n\t\tsessionId: string;\n\t\tsessionFilePath?: string;\n\t\tselection: \"created\" | \"created_after_missing\" | \"resumed\";\n\t\trequestedSessionId?: string;\n\t\tworkspaceName: string;\n\t\tworkspacePath: string;\n\t\tworktreeId?: string;\n\t\t/** POSIX-style path relative to the registered workspace root. */\n\t\tworkingDirectory?: string;\n\t};\n}\n\n// ============================================================================\n// Framing\n// ============================================================================\n\nexport function encodeControlLine(message: object): Buffer {\n\treturn Buffer.from(`${JSON.stringify(message)}\\n`, \"utf8\");\n}\n\nexport class ControlFrameTooLargeError extends Error {\n\tconstructor(byteLength: number) {\n\t\tsuper(`control frame of ${byteLength} bytes exceeds the ${CONTROL_MAX_LINE_BYTES} byte cap`);\n\t\tthis.name = \"ControlFrameTooLargeError\";\n\t}\n}\n\n/**\n * Incremental JSONL decoder with the 8 MiB line cap. Feed raw socket chunks;\n * complete lines come back parsed. Throws ControlFrameTooLargeError when the\n * buffered partial line exceeds the cap (callers must close the connection).\n */\nexport class ControlLineDecoder {\n\tprivate buffered: Buffer = Buffer.alloc(0);\n\n\tpush(chunk: Buffer): unknown[] {\n\t\tthis.buffered = this.buffered.length === 0 ? Buffer.from(chunk) : Buffer.concat([this.buffered, chunk]);\n\t\tconst messages: unknown[] = [];\n\t\twhile (true) {\n\t\t\tconst newlineIndex = this.buffered.indexOf(0x0a);\n\t\t\tif (newlineIndex === -1) {\n\t\t\t\tif (this.buffered.length > CONTROL_MAX_LINE_BYTES) {\n\t\t\t\t\tthrow new ControlFrameTooLargeError(this.buffered.length);\n\t\t\t\t}\n\t\t\t\treturn messages;\n\t\t\t}\n\t\t\tif (newlineIndex > CONTROL_MAX_LINE_BYTES) {\n\t\t\t\tthrow new ControlFrameTooLargeError(newlineIndex);\n\t\t\t}\n\t\t\tconst line = this.buffered.subarray(0, newlineIndex).toString(\"utf8\");\n\t\t\tthis.buffered = this.buffered.subarray(newlineIndex + 1);\n\t\t\tif (line.trim().length === 0) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tmessages.push(JSON.parse(line));\n\t\t}\n\t}\n\n\t/**\n\t * Parse complete lines one at a time, invoking handle per message. When\n\t * handle returns \"stop\" (relay handoff), decoding halts immediately and any\n\t * bytes past the consumed line stay buffered for drainRemainder(). Unlike\n\t * push(), bytes arriving after a stop are never JSON-decoded — required for\n\t * relay hellos, where everything after the hello line is opaque payload.\n\t */\n\tpushEach(chunk: Buffer, handle: (message: unknown) => \"continue\" | \"stop\"): void {\n\t\tthis.buffered = this.buffered.length === 0 ? Buffer.from(chunk) : Buffer.concat([this.buffered, chunk]);\n\t\twhile (true) {\n\t\t\tconst newlineIndex = this.buffered.indexOf(0x0a);\n\t\t\tif (newlineIndex === -1) {\n\t\t\t\tif (this.buffered.length > CONTROL_MAX_LINE_BYTES) {\n\t\t\t\t\tthrow new ControlFrameTooLargeError(this.buffered.length);\n\t\t\t\t}\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (newlineIndex > CONTROL_MAX_LINE_BYTES) {\n\t\t\t\tthrow new ControlFrameTooLargeError(newlineIndex);\n\t\t\t}\n\t\t\tconst line = this.buffered.subarray(0, newlineIndex).toString(\"utf8\");\n\t\t\tthis.buffered = this.buffered.subarray(newlineIndex + 1);\n\t\t\tif (line.trim().length === 0) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (handle(JSON.parse(line)) === \"stop\") {\n\t\t\t\treturn;\n\t\t\t}\n\t\t}\n\t}\n\n\t/** Bytes buffered past the last complete line (used when switching a relay conn to raw mode). */\n\tdrainRemainder(): Buffer {\n\t\tconst remainder = this.buffered;\n\t\tthis.buffered = Buffer.alloc(0);\n\t\treturn remainder;\n\t}\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isOptionalString(value: unknown): boolean {\n\treturn value === undefined || typeof value === \"string\";\n}\n\nfunction isOptionalNumber(value: unknown): boolean {\n\treturn value === undefined || typeof value === \"number\";\n}\n\nfunction isControlAccessSelection(value: Record<string, unknown>, allowDefault: boolean): boolean {\n\tif (value.access !== undefined) {\n\t\treturn (\n\t\t\tisIrohRemoteAccessPresetName(value.access) &&\n\t\t\tvalue.allowedTools === undefined &&\n\t\t\tvalue.rpcCapabilities === undefined\n\t\t);\n\t}\n\tif (value.allowedTools === undefined && value.rpcCapabilities === undefined) {\n\t\treturn allowDefault;\n\t}\n\tif (!Array.isArray(value.allowedTools) || !value.allowedTools.every((entry) => typeof entry === \"string\")) {\n\t\treturn false;\n\t}\n\ttry {\n\t\tparseIrohRemoteRpcCapabilities(value.rpcCapabilities);\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nfunction isPushDeliveryStatus(value: unknown): value is IrohRemotePushNotificationDeliveryStatus {\n\treturn (\n\t\tvalue === \"sent\" ||\n\t\tvalue === \"no_push_target\" ||\n\t\tvalue === \"duplicate\" ||\n\t\tvalue === \"failed\" ||\n\t\tvalue === \"invalid_target\"\n\t);\n}\n\nfunction isLiveActivityToolGlyph(value: unknown): boolean {\n\treturn (\n\t\tisRecord(value) &&\n\t\ttypeof value.name === \"string\" &&\n\t\ttypeof value.symbolName === \"string\" &&\n\t\t(value.status === \"started\" || value.status === \"completed\" || value.status === \"failed\")\n\t);\n}\n\nfunction isLiveActivityContentState(value: unknown): boolean {\n\treturn (\n\t\tisRecord(value) &&\n\t\t(value.status === \"running\" ||\n\t\t\tvalue.status === \"completed\" ||\n\t\t\tvalue.status === \"failed\" ||\n\t\t\tvalue.status === \"waiting\") &&\n\t\ttypeof value.statusText === \"string\" &&\n\t\t(value.currentTool === undefined || isLiveActivityToolGlyph(value.currentTool)) &&\n\t\tArray.isArray(value.recentTools) &&\n\t\tvalue.recentTools.every(isLiveActivityToolGlyph) &&\n\t\tisOptionalString(value.sessionID) &&\n\t\tisOptionalString(value.workspaceName) &&\n\t\ttypeof value.updatedAtEpochSeconds === \"number\"\n\t);\n}\n\nfunction isPushNotificationIntent(value: unknown): value is IrohRemotePushNotificationIntent {\n\treturn (\n\t\tisRecord(value) &&\n\t\ttypeof value.eventId === \"string\" &&\n\t\ttypeof value.kind === \"string\" &&\n\t\ttypeof value.title === \"string\" &&\n\t\ttypeof value.body === \"string\" &&\n\t\tisOptionalString(value.sessionId) &&\n\t\tisOptionalString(value.workspace)\n\t);\n}\n\nfunction isLiveActivityUpdateIntent(value: unknown): value is IrohRemoteLiveActivityUpdateIntent {\n\treturn (\n\t\tisRecord(value) &&\n\t\ttypeof value.eventId === \"string\" &&\n\t\ttypeof value.kind === \"string\" &&\n\t\t(value.activityEvent === undefined || value.activityEvent === \"update\" || value.activityEvent === \"end\") &&\n\t\tisLiveActivityContentState(value.contentState) &&\n\t\tisOptionalNumber(value.staleDateEpochSeconds) &&\n\t\tisOptionalNumber(value.dismissalDateEpochSeconds)\n\t);\n}\n\nexport function parseHelloMessage(value: unknown): HelloMessage | undefined {\n\tif (!isRecord(value) || value.type !== \"hello\") {\n\t\treturn undefined;\n\t}\n\tif (typeof value.protocolVersion !== \"number\") {\n\t\treturn undefined;\n\t}\n\tif (value.role === \"control\") {\n\t\tif (\n\t\t\ttypeof value.pid !== \"number\" ||\n\t\t\ttypeof value.version !== \"string\" ||\n\t\t\t(value.client !== \"tui\" && value.client !== \"cli\")\n\t\t) {\n\t\t\treturn undefined;\n\t\t}\n\t\tif (\n\t\t\tvalue.capabilities !== undefined &&\n\t\t\t(!Array.isArray(value.capabilities) || !value.capabilities.every((entry) => typeof entry === \"string\"))\n\t\t) {\n\t\t\treturn undefined;\n\t\t}\n\t\tif (value.controlToken !== undefined && typeof value.controlToken !== \"string\") {\n\t\t\treturn undefined;\n\t\t}\n\t\treturn {\n\t\t\ttype: \"hello\",\n\t\t\trole: \"control\",\n\t\t\tprotocolVersion: value.protocolVersion,\n\t\t\tpid: value.pid,\n\t\t\tversion: value.version,\n\t\t\tclient: value.client,\n\t\t\t...(value.controlToken === undefined ? {} : { controlToken: value.controlToken }),\n\t\t\t...(value.capabilities === undefined ? {} : { capabilities: value.capabilities as string[] }),\n\t\t};\n\t}\n\tif (value.role === \"relay\") {\n\t\tif (typeof value.relayId !== \"string\" || typeof value.relayToken !== \"string\") {\n\t\t\treturn undefined;\n\t\t}\n\t\treturn {\n\t\t\ttype: \"hello\",\n\t\t\trole: \"relay\",\n\t\t\tprotocolVersion: value.protocolVersion,\n\t\t\trelayId: value.relayId,\n\t\t\trelayToken: value.relayToken,\n\t\t};\n\t}\n\treturn undefined;\n}\n\nexport function isControlRequest(value: unknown): value is ControlRequest {\n\tif (!isRecord(value) || typeof value.type !== \"string\" || typeof value.id !== \"string\") {\n\t\treturn false;\n\t}\n\tswitch (value.type) {\n\t\tcase \"status\":\n\t\tcase \"shutdown\":\n\t\tcase \"clients_list\":\n\t\t\treturn true;\n\t\tcase \"pair_request\":\n\t\t\treturn (\n\t\t\t\t(value.workspaceName === undefined || typeof value.workspaceName === \"string\") &&\n\t\t\t\tisControlAccessSelection(value, true)\n\t\t\t);\n\t\tcase \"lease_acquire\":\n\t\tcase \"lease_release\":\n\t\t\treturn typeof value.workspaceName === \"string\" && typeof value.sessionId === \"string\";\n\t\tcase \"lease_rekey\":\n\t\t\treturn (\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.oldSessionId === \"string\" &&\n\t\t\t\ttypeof value.newSessionId === \"string\"\n\t\t\t);\n\t\tcase \"pair_cancel\":\n\t\t\treturn typeof value.requestId === \"string\";\n\t\tcase \"client_access_update\":\n\t\t\treturn (\n\t\t\t\ttypeof value.clientNodeId === \"string\" &&\n\t\t\t\ttypeof value.expectedRevision === \"number\" &&\n\t\t\t\tNumber.isSafeInteger(value.expectedRevision) &&\n\t\t\t\tvalue.expectedRevision >= 1 &&\n\t\t\t\tisControlAccessSelection(value, false)\n\t\t\t);\n\t\tcase \"client_revoke\":\n\t\tcase \"client_approve_repair\":\n\t\t\treturn typeof value.clientNodeId === \"string\";\n\t\tcase \"workspace_register\":\n\t\t\treturn typeof value.name === \"string\" && typeof value.path === \"string\";\n\t\tcase \"workspace_unregister\":\n\t\t\treturn typeof value.name === \"string\";\n\t\tcase \"worktree_create\":\n\t\t\treturn (\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\t(value.worktreeName === undefined || typeof value.worktreeName === \"string\") &&\n\t\t\t\t(value.branch === undefined || typeof value.branch === \"string\") &&\n\t\t\t\t(value.baseRef === undefined || typeof value.baseRef === \"string\")\n\t\t\t);\n\t\tcase \"worktree_adopt\":\n\t\t\treturn (\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.path === \"string\" &&\n\t\t\t\t(value.worktreeName === undefined || typeof value.worktreeName === \"string\") &&\n\t\t\t\t(value.baseRef === undefined || typeof value.baseRef === \"string\")\n\t\t\t);\n\t\tcase \"worktree_list\":\n\t\tcase \"worktree_prune\":\n\t\t\treturn value.workspaceName === undefined || typeof value.workspaceName === \"string\";\n\t\tcase \"worktree_remove\":\n\t\t\treturn (\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.worktreeId === \"string\" &&\n\t\t\t\t(value.force === undefined || typeof value.force === \"boolean\")\n\t\t\t);\n\t\tcase \"worktree_resolve\":\n\t\t\treturn typeof value.path === \"string\";\n\t\tcase \"worktree_bind\":\n\t\t\treturn (\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.worktreeId === \"string\" &&\n\t\t\t\ttypeof value.sessionId === \"string\"\n\t\t\t);\n\t\tcase \"theme_set\":\n\t\t\treturn typeof value.theme === \"string\";\n\t\tcase \"keep_awake_set\":\n\t\t\treturn typeof value.enabled === \"boolean\";\n\t\tcase \"viewer_subscribe\":\n\t\tcase \"viewer_unsubscribe\":\n\t\tcase \"viewer_abort\":\n\t\t\treturn typeof value.viewerFeedId === \"string\";\n\t\tcase \"relay_rpc\":\n\t\t\treturn (\n\t\t\t\ttypeof value.relayId === \"string\" &&\n\t\t\t\ttypeof value.clientNodeId === \"string\" &&\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.sessionId === \"string\" &&\n\t\t\t\tisRecord(value.command) &&\n\t\t\t\ttypeof value.command.type === \"string\"\n\t\t\t);\n\t\tcase \"relay_notification_delivery\":\n\t\t\treturn (\n\t\t\t\ttypeof value.clientNodeId === \"string\" &&\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.sessionId === \"string\" &&\n\t\t\t\tisPushNotificationIntent(value.notification)\n\t\t\t);\n\t\tcase \"relay_live_activity_delivery\":\n\t\t\treturn (\n\t\t\t\ttypeof value.clientNodeId === \"string\" &&\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.sessionId === \"string\" &&\n\t\t\t\tisLiveActivityUpdateIntent(value.update)\n\t\t\t);\n\t\tdefault:\n\t\t\treturn false;\n\t}\n}\n\nexport function isControlResponse(value: unknown): value is ControlResponse {\n\tif (!isRecord(value) || typeof value.type !== \"string\" || typeof value.id !== \"string\") {\n\t\treturn false;\n\t}\n\tswitch (value.type) {\n\t\tcase \"ok\":\n\t\tcase \"error\":\n\t\tcase \"lease_granted\":\n\t\tcase \"lease_pending\":\n\t\tcase \"lease_denied\":\n\t\tcase \"status_result\":\n\t\tcase \"clients_result\":\n\t\tcase \"client_access_updated\":\n\t\tcase \"pair_started\":\n\t\t\treturn true;\n\t\tcase \"worktree_result\":\n\t\t\treturn isRecord(value.worktree);\n\t\tcase \"worktrees_result\":\n\t\t\treturn Array.isArray(value.worktrees);\n\t\tcase \"worktree_prune_result\":\n\t\t\treturn Array.isArray(value.results);\n\t\tcase \"worktree_resolve_result\":\n\t\t\treturn (\n\t\t\t\ttypeof value.workspaceName === \"string\" &&\n\t\t\t\ttypeof value.workspacePath === \"string\" &&\n\t\t\t\ttypeof value.worktreeId === \"string\" &&\n\t\t\t\ttypeof value.worktreePath === \"string\"\n\t\t\t);\n\t\tcase \"keep_awake_result\":\n\t\t\treturn isRecord(value.keepAwake);\n\t\tcase \"relay_rpc_result\":\n\t\t\treturn isRecord(value.response);\n\t\tcase \"relay_push_delivery_result\":\n\t\t\treturn isPushDeliveryStatus(value.status);\n\t\tdefault:\n\t\t\treturn false;\n\t}\n}\n\nexport function isControlEvent(value: unknown): value is ControlEvent {\n\tif (!isRecord(value) || typeof value.type !== \"string\") {\n\t\treturn false;\n\t}\n\tswitch (value.type) {\n\t\tcase \"relay_offer\":\n\t\tcase \"relay_closed\":\n\t\tcase \"viewer_event\":\n\t\tcase \"viewer_end\":\n\t\tcase \"theme_snapshot\":\n\t\tcase \"pairing_progress\":\n\t\tcase \"daemon_shutdown\":\n\t\t\treturn true;\n\t\tcase \"keep_awake_changed\":\n\t\t\treturn isRecord(value.keepAwake);\n\t\tdefault:\n\t\t\treturn false;\n\t}\n}\n\nexport function isHelloAck(value: unknown): value is HelloAck {\n\treturn isRecord(value) && value.type === \"hello_ack\" && typeof value.ok === \"boolean\";\n}\n\nexport function isRelayPreamble(value: unknown): value is RelayPreamble {\n\tif (\n\t\t!isRecord(value) ||\n\t\tvalue.type !== \"relay_preamble\" ||\n\t\ttypeof value.relayId !== \"string\" ||\n\t\t!isRecord(value.authorization) ||\n\t\t!isRecord(value.resolvedTarget)\n\t) {\n\t\treturn false;\n\t}\n\ttry {\n\t\tif (typeof value.authorization.allowedTools !== \"string\") {\n\t\t\treturn false;\n\t\t}\n\t\tparseIrohRemoteRpcGrant(value.authorization.rpcGrant, \"relay rpcGrant\");\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n"]}

package/dist/daemon/control-server.d.ts

@@ -0,0 +1,77 @@
+import { type Socket } from "node:net";
+import { CONTROL_MAX_LINE_BYTES, type ControlClientKind, type ControlEvent, type ControlRequest, type ControlResponse, type HelloMessage } from "./control-protocol.ts";
+export interface ControlConnection {
+    readonly connectionId: string;
+    readonly client: ControlClientKind;
+    readonly pid: number;
+    readonly version: string;
+    /** Capabilities from the control hello (empty for old clients). */
+    readonly capabilities: ReadonlySet<string>;
+    send(message: ControlResponse | ControlEvent): void;
+    close(): void;
+}
+export interface RelayAdmission {
+    /** Validate a relay hello; on success the server hands over the raw socket. */
+    admitRelay(hello: Extract<HelloMessage, {
+        role: "relay";
+    }>, socket: Socket, bufferedRemainder: Buffer): boolean;
+}
+export interface ControlServerHandlers {
+    /**
+     * Handle one request; respond via connection.send (possibly multiple times
+     * for provisional responses). Thrown errors become error responses.
+     */
+    onRequest(connection: ControlConnection, request: ControlRequest): Promise<void> | void;
+    onConnectionClosed?(connection: ControlConnection): void;
+    relayAdmission?: RelayAdmission;
+    /** When true, hellos are rejected with error "shutting_down". */
+    isShuttingDown?(): boolean;
+    log?(level: "info" | "warn" | "error", message: string): void;
+}
+export interface ControlServerOptions {
+    socketPath: string;
+    version: string;
+    /** Optional local control-plane token published in the daemon pidfile. */
+    authToken?: string;
+    handlers: ControlServerHandlers;
+}
+export interface ControlServer {
+    readonly socketPath: string;
+    connections(): ControlConnection[];
+    broadcast(event: ControlEvent): void;
+    sendTo(connectionId: string, event: ControlEvent): boolean;
+    close(): Promise<void>;
+}
+type ControlStatusProbe = ControlResponse & {
+    type: "status_result";
+};
+export type ControlSocketProbe = {
+    kind: "healthy";
+    status: ControlStatusProbe;
+} | {
+    kind: "live-rejected";
+    reason: "shutting_down" | "protocol_mismatch" | "bad_relay_token" | "auth_failed" | "fatal" | "other";
+    error?: string;
+    version?: string;
+    protocolVersion?: number;
+} | {
+    kind: "unresponsive";
+    error?: string;
+} | {
+    kind: "no-listener";
+    cause: "not-found" | "refused" | "reset" | "error";
+    error?: string;
+};
+export declare function startControlServer(options: ControlServerOptions): Promise<ControlServer>;
+/**
+ * Probe an existing socket with a status request. The result distinguishes a
+ * provably dead/stale path from a live daemon that answered but rejected us;
+ * callers must only unlink a socket after a no-listener result.
+ */
+export declare function probeControlSocket(socketPath: string, options?: {
+    version: string;
+    timeoutMs?: number;
+    authToken?: string;
+}): Promise<ControlSocketProbe>;
+export { CONTROL_MAX_LINE_BYTES };
+//# sourceMappingURL=control-server.d.ts.map

package/dist/daemon/control-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-server.d.ts","sourceRoot":"","sources":["../../src/daemon/control-server.ts"],"names":[],"mappings":"AACA,OAAO,EAA+C,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AACpF,OAAO,EACN,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAEjB,KAAK,cAAc,EACnB,KAAK,eAAe,EAGpB,KAAK,YAAY,EAKjB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,YAAY,GAAG,IAAI,CAAC;IACpD,KAAK,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC9B,+EAA+E;IAC/E,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAAC;CAChH;AAED,MAAM,WAAW,qBAAqB;IACrC;;;OAGG;IACH,SAAS,CAAC,UAAU,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACxF,kBAAkB,CAAC,CAAC,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACzD,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,iEAAiE;IACjE,cAAc,CAAC,IAAI,OAAO,CAAC;IAC3B,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9D;AAED,MAAM,WAAW,oBAAoB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,qBAAqB,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,WAAW,IAAI,iBAAiB,EAAE,CAAC;IACnC,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IACrC,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC;IAC3D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAED,KAAK,kBAAkB,GAAG,eAAe,GAAG;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAEtE,MAAM,MAAM,kBAAkB,GAC3B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,GAC/C;IACA,IAAI,EAAE,eAAe,CAAC;IACtB,MAAM,EAAE,eAAe,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;IACtG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CACxB,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAI/F,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CA8O9F;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACvC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAyB,GACzF,OAAO,CAAC,kBAAkB,CAAC,CAuF7B;AAMD,OAAO,EAAE,sBAAsB,EAAE,CAAC","sourcesContent":["import { chmodSync, lstatSync, rmSync, type Stats } from \"node:fs\";\nimport { createConnection, createServer, type Server, type Socket } from \"node:net\";\nimport {\n\tCONTROL_MAX_LINE_BYTES,\n\ttype ControlClientKind,\n\ttype ControlEvent,\n\tControlLineDecoder,\n\ttype ControlRequest,\n\ttype ControlResponse,\n\tencodeControlLine,\n\ttype HelloAck,\n\ttype HelloMessage,\n\tisControlRequest,\n\tisHelloAck,\n\tPROTOCOL_VERSION,\n\tparseHelloMessage,\n} from \"./control-protocol.ts\";\n\nexport interface ControlConnection {\n\treadonly connectionId: string;\n\treadonly client: ControlClientKind;\n\treadonly pid: number;\n\treadonly version: string;\n\t/** Capabilities from the control hello (empty for old clients). */\n\treadonly capabilities: ReadonlySet<string>;\n\tsend(message: ControlResponse | ControlEvent): void;\n\tclose(): void;\n}\n\nexport interface RelayAdmission {\n\t/** Validate a relay hello; on success the server hands over the raw socket. */\n\tadmitRelay(hello: Extract<HelloMessage, { role: \"relay\" }>, socket: Socket, bufferedRemainder: Buffer): boolean;\n}\n\nexport interface ControlServerHandlers {\n\t/**\n\t * Handle one request; respond via connection.send (possibly multiple times\n\t * for provisional responses). Thrown errors become error responses.\n\t */\n\tonRequest(connection: ControlConnection, request: ControlRequest): Promise<void> | void;\n\tonConnectionClosed?(connection: ControlConnection): void;\n\trelayAdmission?: RelayAdmission;\n\t/** When true, hellos are rejected with error \"shutting_down\". */\n\tisShuttingDown?(): boolean;\n\tlog?(level: \"info\" | \"warn\" | \"error\", message: string): void;\n}\n\nexport interface ControlServerOptions {\n\tsocketPath: string;\n\tversion: string;\n\t/** Optional local control-plane token published in the daemon pidfile. */\n\tauthToken?: string;\n\thandlers: ControlServerHandlers;\n}\n\nexport interface ControlServer {\n\treadonly socketPath: string;\n\tconnections(): ControlConnection[];\n\tbroadcast(event: ControlEvent): void;\n\tsendTo(connectionId: string, event: ControlEvent): boolean;\n\tclose(): Promise<void>;\n}\n\ntype ControlStatusProbe = ControlResponse & { type: \"status_result\" };\n\nexport type ControlSocketProbe =\n\t| { kind: \"healthy\"; status: ControlStatusProbe }\n\t| {\n\t\t\tkind: \"live-rejected\";\n\t\t\treason: \"shutting_down\" | \"protocol_mismatch\" | \"bad_relay_token\" | \"auth_failed\" | \"fatal\" | \"other\";\n\t\t\terror?: string;\n\t\t\tversion?: string;\n\t\t\tprotocolVersion?: number;\n\t  }\n\t| { kind: \"unresponsive\"; error?: string }\n\t| { kind: \"no-listener\"; cause: \"not-found\" | \"refused\" | \"reset\" | \"error\"; error?: string };\n\nlet controlConnectionSequence = 0;\n\nexport async function startControlServer(options: ControlServerOptions): Promise<ControlServer> {\n\tconst { socketPath, version, authToken, handlers } = options;\n\tconst connections = new Map<string, ControlConnectionImpl>();\n\n\tclass ControlConnectionImpl implements ControlConnection {\n\t\treadonly connectionId: string;\n\t\treadonly client: ControlClientKind;\n\t\treadonly pid: number;\n\t\treadonly version: string;\n\t\treadonly capabilities: ReadonlySet<string>;\n\t\tprivate readonly socket: Socket;\n\n\t\tconstructor(socket: Socket, hello: Extract<HelloMessage, { role: \"control\" }>) {\n\t\t\tthis.connectionId = `c-${++controlConnectionSequence}`;\n\t\t\tthis.client = hello.client;\n\t\t\tthis.pid = hello.pid;\n\t\t\tthis.version = hello.version;\n\t\t\tthis.capabilities = new Set(hello.capabilities ?? []);\n\t\t\tthis.socket = socket;\n\t\t}\n\n\t\tsend(message: ControlResponse | ControlEvent): void {\n\t\t\tif (!this.socket.destroyed) {\n\t\t\t\tthis.socket.write(encodeControlLine(message));\n\t\t\t}\n\t\t}\n\n\t\tclose(): void {\n\t\t\tthis.socket.destroy();\n\t\t}\n\t}\n\n\tconst server: Server = createServer((socket) => {\n\t\tconst decoder = new ControlLineDecoder();\n\t\tlet established: ControlConnectionImpl | undefined;\n\t\tlet handedOffToRelay = false;\n\n\t\tconst fatal = (error: string) => {\n\t\t\ttry {\n\t\t\t\tsocket.write(encodeControlLine({ type: \"fatal\", error }));\n\t\t\t} catch {\n\t\t\t\t// best-effort\n\t\t\t}\n\t\t\tsocket.destroy();\n\t\t};\n\n\t\tconst handleHello = (hello: HelloMessage | undefined): boolean => {\n\t\t\tif (!hello) {\n\t\t\t\tfatal(\"invalid_hello\");\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tif (handlers.isShuttingDown?.()) {\n\t\t\t\tconst ack: HelloAck = {\n\t\t\t\t\ttype: \"hello_ack\",\n\t\t\t\t\tok: false,\n\t\t\t\t\terror: \"shutting_down\",\n\t\t\t\t\tversion,\n\t\t\t\t\tprotocolVersion: PROTOCOL_VERSION,\n\t\t\t\t};\n\t\t\t\tsocket.end(encodeControlLine(ack));\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tif (hello.protocolVersion !== PROTOCOL_VERSION) {\n\t\t\t\tconst ack: HelloAck = {\n\t\t\t\t\ttype: \"hello_ack\",\n\t\t\t\t\tok: false,\n\t\t\t\t\terror: \"protocol_mismatch\",\n\t\t\t\t\tversion,\n\t\t\t\t\tprotocolVersion: PROTOCOL_VERSION,\n\t\t\t\t};\n\t\t\t\tsocket.end(encodeControlLine(ack));\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tif (hello.role === \"control\" && authToken !== undefined && hello.controlToken !== authToken) {\n\t\t\t\tconst ack: HelloAck = {\n\t\t\t\t\ttype: \"hello_ack\",\n\t\t\t\t\tok: false,\n\t\t\t\t\terror: \"auth_failed\",\n\t\t\t\t\tversion,\n\t\t\t\t\tprotocolVersion: PROTOCOL_VERSION,\n\t\t\t\t};\n\t\t\t\tsocket.end(encodeControlLine(ack));\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tif (hello.role === \"relay\") {\n\t\t\t\tconst remainder = decoder.drainRemainder();\n\t\t\t\tsocket.removeListener(\"data\", onData);\n\t\t\t\thandedOffToRelay = true;\n\t\t\t\tlet admitted = false;\n\t\t\t\ttry {\n\t\t\t\t\tadmitted = handlers.relayAdmission?.admitRelay(hello, socket, remainder) ?? false;\n\t\t\t\t} catch (error) {\n\t\t\t\t\t// admitRelay may have partly taken ownership of the socket before\n\t\t\t\t\t// throwing, and the socket now carries raw relay bytes — so a\n\t\t\t\t\t// synchronous failure must NOT fall through to onData's generic catch,\n\t\t\t\t\t// which would inject a misleading fatal(\"frame_too_large\") control\n\t\t\t\t\t// frame into the raw stream and destroy a socket the relay path may\n\t\t\t\t\t// own. Log the real reason and tear down cleanly instead.\n\t\t\t\t\thandlers.log?.(\n\t\t\t\t\t\t\"error\",\n\t\t\t\t\t\t`relay admission threw: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t\t\t);\n\t\t\t\t\tsocket.destroy();\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t\tif (!admitted) {\n\t\t\t\t\tconst ack: HelloAck = { type: \"hello_ack\", ok: false, error: \"bad_relay_token\" };\n\t\t\t\t\tsocket.end(encodeControlLine(ack));\n\t\t\t\t}\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\testablished = new ControlConnectionImpl(socket, hello);\n\t\t\tconnections.set(established.connectionId, established);\n\t\t\tconst ack: HelloAck = {\n\t\t\t\ttype: \"hello_ack\",\n\t\t\t\tok: true,\n\t\t\t\tconnectionId: established.connectionId,\n\t\t\t\tversion,\n\t\t\t\tprotocolVersion: PROTOCOL_VERSION,\n\t\t\t};\n\t\t\tsocket.write(encodeControlLine(ack));\n\t\t\treturn true;\n\t\t};\n\n\t\tconst handleMessage = (message: unknown): void => {\n\t\t\tconst connection = established;\n\t\t\tif (!connection) {\n\t\t\t\tif (!handleHello(parseHelloMessage(message))) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (!isControlRequest(message)) {\n\t\t\t\tconst id =\n\t\t\t\t\ttypeof message === \"object\" && message !== null && typeof (message as { id?: unknown }).id === \"string\"\n\t\t\t\t\t\t? ((message as { id: string }).id ?? \"\")\n\t\t\t\t\t\t: \"\";\n\t\t\t\tconnection.send({ type: \"error\", id, code: \"invalid_request\", message: \"unrecognized control request\" });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tPromise.resolve(handlers.onRequest(connection, message)).catch((error) => {\n\t\t\t\tconnection.send({\n\t\t\t\t\ttype: \"error\",\n\t\t\t\t\tid: message.id,\n\t\t\t\t\tcode: \"internal_error\",\n\t\t\t\t\tmessage: error instanceof Error ? error.message : String(error),\n\t\t\t\t});\n\t\t\t});\n\t\t};\n\n\t\tconst onData = (chunk: Buffer) => {\n\t\t\ttry {\n\t\t\t\t// One line at a time: a relay hello hands the socket off mid-chunk and\n\t\t\t\t// any trailing bytes must stay undecoded (they are raw relay payload).\n\t\t\t\tdecoder.pushEach(chunk, (message) => {\n\t\t\t\t\thandleMessage(message);\n\t\t\t\t\treturn handedOffToRelay ? \"stop\" : \"continue\";\n\t\t\t\t});\n\t\t\t} catch {\n\t\t\t\tfatal(\"frame_too_large\");\n\t\t\t}\n\t\t};\n\n\t\tsocket.on(\"data\", onData);\n\t\tsocket.on(\"error\", () => {\n\t\t\tsocket.destroy();\n\t\t});\n\t\tsocket.on(\"close\", () => {\n\t\t\tif (established) {\n\t\t\t\tconnections.delete(established.connectionId);\n\t\t\t\thandlers.onConnectionClosed?.(established);\n\t\t\t}\n\t\t});\n\t});\n\n\tserver.maxConnections = 256;\n\n\tawait new Promise<void>((resolve, reject) => {\n\t\tserver.once(\"error\", reject);\n\t\tserver.listen(socketPath, () => {\n\t\t\tserver.removeListener(\"error\", reject);\n\t\t\tresolve();\n\t\t});\n\t});\n\tlet boundSocketStats: Stats | undefined;\n\ttry {\n\t\tboundSocketStats = lstatSync(socketPath);\n\t} catch {\n\t\t// Best-effort ownership check: close() will skip unlinking when it cannot\n\t\t// prove the path still belongs to this server.\n\t}\n\ttry {\n\t\tchmodSync(socketPath, 0o600);\n\t} catch {\n\t\t// The socket may live on a filesystem without chmod support; directory perms still apply.\n\t}\n\n\treturn {\n\t\tsocketPath,\n\t\tconnections() {\n\t\t\treturn Array.from(connections.values());\n\t\t},\n\t\tbroadcast(event: ControlEvent) {\n\t\t\tfor (const connection of connections.values()) {\n\t\t\t\tconnection.send(event);\n\t\t\t}\n\t\t},\n\t\tsendTo(connectionId: string, event: ControlEvent) {\n\t\t\tconst connection = connections.get(connectionId);\n\t\t\tif (!connection) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tconnection.send(event);\n\t\t\treturn true;\n\t\t},\n\t\tasync close() {\n\t\t\tfor (const connection of connections.values()) {\n\t\t\t\tconnection.close();\n\t\t\t}\n\t\t\tawait new Promise<void>((resolve) => {\n\t\t\t\tserver.close(() => resolve());\n\t\t\t});\n\t\t\tif (process.platform !== \"win32\" && boundSocketStats) {\n\t\t\t\ttry {\n\t\t\t\t\tconst currentStats = lstatSync(socketPath);\n\t\t\t\t\tif (\n\t\t\t\t\t\tcurrentStats.isSocket() &&\n\t\t\t\t\t\tcurrentStats.dev === boundSocketStats.dev &&\n\t\t\t\t\t\tcurrentStats.ino === boundSocketStats.ino\n\t\t\t\t\t) {\n\t\t\t\t\t\trmSync(socketPath, { force: true });\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\t// Already gone or not ours.\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t};\n}\n\n/**\n * Probe an existing socket with a status request. The result distinguishes a\n * provably dead/stale path from a live daemon that answered but rejected us;\n * callers must only unlink a socket after a no-listener result.\n */\nexport async function probeControlSocket(\n\tsocketPath: string,\n\toptions: { version: string; timeoutMs?: number; authToken?: string } = { version: \"0.0.0\" },\n): Promise<ControlSocketProbe> {\n\tconst timeoutMs = options.timeoutMs ?? 2000;\n\treturn new Promise((resolve) => {\n\t\tlet settled = false;\n\t\tlet connected = false;\n\t\tlet lastError: Error | undefined;\n\t\tconst classifyNoListener = (error: Error | undefined): ControlSocketProbe => {\n\t\t\tconst code = error instanceof Error && \"code\" in error ? (error as NodeJS.ErrnoException).code : undefined;\n\t\t\tif (code === \"ENOENT\") {\n\t\t\t\treturn { kind: \"no-listener\", cause: \"not-found\", ...(error ? { error: error.message } : {}) };\n\t\t\t}\n\t\t\tif (code === \"ECONNREFUSED\") {\n\t\t\t\treturn { kind: \"no-listener\", cause: \"refused\", ...(error ? { error: error.message } : {}) };\n\t\t\t}\n\t\t\tif (code === \"ECONNRESET\") {\n\t\t\t\treturn { kind: \"no-listener\", cause: \"reset\", ...(error ? { error: error.message } : {}) };\n\t\t\t}\n\t\t\treturn { kind: \"no-listener\", cause: \"error\", ...(error ? { error: error.message } : {}) };\n\t\t};\n\t\tconst settle = (value: ControlSocketProbe) => {\n\t\t\tif (settled) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tsettled = true;\n\t\t\tclearTimeout(timer);\n\t\t\tsocket.destroy();\n\t\t\tresolve(value);\n\t\t};\n\t\tconst timer = setTimeout(() => settle({ kind: \"unresponsive\" }), timeoutMs);\n\t\tconst socket = createConnection(socketPath);\n\t\tconst decoder = new ControlLineDecoder();\n\t\tsocket.on(\"error\", (error) => {\n\t\t\tlastError = error instanceof Error ? error : new Error(String(error));\n\t\t\tsettle(connected ? { kind: \"unresponsive\", error: lastError.message } : classifyNoListener(lastError));\n\t\t});\n\t\tsocket.on(\"close\", () => {\n\t\t\tsettle(\n\t\t\t\tconnected\n\t\t\t\t\t? { kind: \"unresponsive\", ...(lastError ? { error: lastError.message } : {}) }\n\t\t\t\t\t: classifyNoListener(lastError),\n\t\t\t);\n\t\t});\n\t\tsocket.on(\"connect\", () => {\n\t\t\tconnected = true;\n\t\t\tconst hello: HelloMessage = {\n\t\t\t\ttype: \"hello\",\n\t\t\t\trole: \"control\",\n\t\t\t\tprotocolVersion: PROTOCOL_VERSION,\n\t\t\t\tpid: process.pid,\n\t\t\t\tversion: options.version,\n\t\t\t\tclient: \"cli\",\n\t\t\t\t...(options.authToken === undefined ? {} : { controlToken: options.authToken }),\n\t\t\t};\n\t\t\tsocket.write(encodeControlLine(hello));\n\t\t\tsocket.write(encodeControlLine({ type: \"status\", id: \"probe\" }));\n\t\t});\n\t\tsocket.on(\"data\", (chunk) => {\n\t\t\tlet messages: unknown[];\n\t\t\ttry {\n\t\t\t\tmessages = decoder.push(chunk);\n\t\t\t} catch (error) {\n\t\t\t\tsettle({ kind: \"unresponsive\", error: error instanceof Error ? error.message : String(error) });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tfor (const message of messages) {\n\t\t\t\tif (isControlStatusProbe(message)) {\n\t\t\t\t\tsettle({ kind: \"healthy\", status: message });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (isHelloAck(message) && !message.ok) {\n\t\t\t\t\tsettle({\n\t\t\t\t\t\tkind: \"live-rejected\",\n\t\t\t\t\t\treason: message.error ?? \"other\",\n\t\t\t\t\t\t...(message.error === undefined ? {} : { error: message.error }),\n\t\t\t\t\t\t...(message.version === undefined ? {} : { version: message.version }),\n\t\t\t\t\t\t...(message.protocolVersion === undefined ? {} : { protocolVersion: message.protocolVersion }),\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (typeof message === \"object\" && message !== null && (message as { type?: unknown }).type === \"fatal\") {\n\t\t\t\t\tconst error = (message as { error?: unknown }).error;\n\t\t\t\t\tsettle({ kind: \"live-rejected\", reason: \"fatal\", ...(typeof error === \"string\" ? { error } : {}) });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t}\n\t\t});\n\t});\n}\n\nfunction isControlStatusProbe(value: unknown): value is ControlStatusProbe {\n\treturn typeof value === \"object\" && value !== null && (value as { type?: unknown }).type === \"status_result\";\n}\n\nexport { CONTROL_MAX_LINE_BYTES };\n"]}