@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/control-server.js

@@ -0,0 +1,327 @@
+import { chmodSync, lstatSync, rmSync } from "node:fs";
+import { createConnection, createServer } from "node:net";
+import { CONTROL_MAX_LINE_BYTES, ControlLineDecoder, encodeControlLine, isControlRequest, isHelloAck, PROTOCOL_VERSION, parseHelloMessage, } from "./control-protocol.js";
+let controlConnectionSequence = 0;
+export async function startControlServer(options) {
+    const { socketPath, version, authToken, handlers } = options;
+    const connections = new Map();
+    class ControlConnectionImpl {
+        connectionId;
+        client;
+        pid;
+        version;
+        capabilities;
+        socket;
+        constructor(socket, hello) {
+            this.connectionId = `c-${++controlConnectionSequence}`;
+            this.client = hello.client;
+            this.pid = hello.pid;
+            this.version = hello.version;
+            this.capabilities = new Set(hello.capabilities ?? []);
+            this.socket = socket;
+        }
+        send(message) {
+            if (!this.socket.destroyed) {
+                this.socket.write(encodeControlLine(message));
+            }
+        }
+        close() {
+            this.socket.destroy();
+        }
+    }
+    const server = createServer((socket) => {
+        const decoder = new ControlLineDecoder();
+        let established;
+        let handedOffToRelay = false;
+        const fatal = (error) => {
+            try {
+                socket.write(encodeControlLine({ type: "fatal", error }));
+            }
+            catch {
+                // best-effort
+            }
+            socket.destroy();
+        };
+        const handleHello = (hello) => {
+            if (!hello) {
+                fatal("invalid_hello");
+                return false;
+            }
+            if (handlers.isShuttingDown?.()) {
+                const ack = {
+                    type: "hello_ack",
+                    ok: false,
+                    error: "shutting_down",
+                    version,
+                    protocolVersion: PROTOCOL_VERSION,
+                };
+                socket.end(encodeControlLine(ack));
+                return false;
+            }
+            if (hello.protocolVersion !== PROTOCOL_VERSION) {
+                const ack = {
+                    type: "hello_ack",
+                    ok: false,
+                    error: "protocol_mismatch",
+                    version,
+                    protocolVersion: PROTOCOL_VERSION,
+                };
+                socket.end(encodeControlLine(ack));
+                return false;
+            }
+            if (hello.role === "control" && authToken !== undefined && hello.controlToken !== authToken) {
+                const ack = {
+                    type: "hello_ack",
+                    ok: false,
+                    error: "auth_failed",
+                    version,
+                    protocolVersion: PROTOCOL_VERSION,
+                };
+                socket.end(encodeControlLine(ack));
+                return false;
+            }
+            if (hello.role === "relay") {
+                const remainder = decoder.drainRemainder();
+                socket.removeListener("data", onData);
+                handedOffToRelay = true;
+                let admitted = false;
+                try {
+                    admitted = handlers.relayAdmission?.admitRelay(hello, socket, remainder) ?? false;
+                }
+                catch (error) {
+                    // admitRelay may have partly taken ownership of the socket before
+                    // throwing, and the socket now carries raw relay bytes — so a
+                    // synchronous failure must NOT fall through to onData's generic catch,
+                    // which would inject a misleading fatal("frame_too_large") control
+                    // frame into the raw stream and destroy a socket the relay path may
+                    // own. Log the real reason and tear down cleanly instead.
+                    handlers.log?.("error", `relay admission threw: ${error instanceof Error ? error.message : String(error)}`);
+                    socket.destroy();
+                    return false;
+                }
+                if (!admitted) {
+                    const ack = { type: "hello_ack", ok: false, error: "bad_relay_token" };
+                    socket.end(encodeControlLine(ack));
+                }
+                return false;
+            }
+            established = new ControlConnectionImpl(socket, hello);
+            connections.set(established.connectionId, established);
+            const ack = {
+                type: "hello_ack",
+                ok: true,
+                connectionId: established.connectionId,
+                version,
+                protocolVersion: PROTOCOL_VERSION,
+            };
+            socket.write(encodeControlLine(ack));
+            return true;
+        };
+        const handleMessage = (message) => {
+            const connection = established;
+            if (!connection) {
+                if (!handleHello(parseHelloMessage(message))) {
+                    return;
+                }
+                return;
+            }
+            if (!isControlRequest(message)) {
+                const id = typeof message === "object" && message !== null && typeof message.id === "string"
+                    ? (message.id ?? "")
+                    : "";
+                connection.send({ type: "error", id, code: "invalid_request", message: "unrecognized control request" });
+                return;
+            }
+            Promise.resolve(handlers.onRequest(connection, message)).catch((error) => {
+                connection.send({
+                    type: "error",
+                    id: message.id,
+                    code: "internal_error",
+                    message: error instanceof Error ? error.message : String(error),
+                });
+            });
+        };
+        const onData = (chunk) => {
+            try {
+                // One line at a time: a relay hello hands the socket off mid-chunk and
+                // any trailing bytes must stay undecoded (they are raw relay payload).
+                decoder.pushEach(chunk, (message) => {
+                    handleMessage(message);
+                    return handedOffToRelay ? "stop" : "continue";
+                });
+            }
+            catch {
+                fatal("frame_too_large");
+            }
+        };
+        socket.on("data", onData);
+        socket.on("error", () => {
+            socket.destroy();
+        });
+        socket.on("close", () => {
+            if (established) {
+                connections.delete(established.connectionId);
+                handlers.onConnectionClosed?.(established);
+            }
+        });
+    });
+    server.maxConnections = 256;
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(socketPath, () => {
+            server.removeListener("error", reject);
+            resolve();
+        });
+    });
+    let boundSocketStats;
+    try {
+        boundSocketStats = lstatSync(socketPath);
+    }
+    catch {
+        // Best-effort ownership check: close() will skip unlinking when it cannot
+        // prove the path still belongs to this server.
+    }
+    try {
+        chmodSync(socketPath, 0o600);
+    }
+    catch {
+        // The socket may live on a filesystem without chmod support; directory perms still apply.
+    }
+    return {
+        socketPath,
+        connections() {
+            return Array.from(connections.values());
+        },
+        broadcast(event) {
+            for (const connection of connections.values()) {
+                connection.send(event);
+            }
+        },
+        sendTo(connectionId, event) {
+            const connection = connections.get(connectionId);
+            if (!connection) {
+                return false;
+            }
+            connection.send(event);
+            return true;
+        },
+        async close() {
+            for (const connection of connections.values()) {
+                connection.close();
+            }
+            await new Promise((resolve) => {
+                server.close(() => resolve());
+            });
+            if (process.platform !== "win32" && boundSocketStats) {
+                try {
+                    const currentStats = lstatSync(socketPath);
+                    if (currentStats.isSocket() &&
+                        currentStats.dev === boundSocketStats.dev &&
+                        currentStats.ino === boundSocketStats.ino) {
+                        rmSync(socketPath, { force: true });
+                    }
+                }
+                catch {
+                    // Already gone or not ours.
+                }
+            }
+        },
+    };
+}
+/**
+ * Probe an existing socket with a status request. The result distinguishes a
+ * provably dead/stale path from a live daemon that answered but rejected us;
+ * callers must only unlink a socket after a no-listener result.
+ */
+export async function probeControlSocket(socketPath, options = { version: "0.0.0" }) {
+    const timeoutMs = options.timeoutMs ?? 2000;
+    return new Promise((resolve) => {
+        let settled = false;
+        let connected = false;
+        let lastError;
+        const classifyNoListener = (error) => {
+            const code = error instanceof Error && "code" in error ? error.code : undefined;
+            if (code === "ENOENT") {
+                return { kind: "no-listener", cause: "not-found", ...(error ? { error: error.message } : {}) };
+            }
+            if (code === "ECONNREFUSED") {
+                return { kind: "no-listener", cause: "refused", ...(error ? { error: error.message } : {}) };
+            }
+            if (code === "ECONNRESET") {
+                return { kind: "no-listener", cause: "reset", ...(error ? { error: error.message } : {}) };
+            }
+            return { kind: "no-listener", cause: "error", ...(error ? { error: error.message } : {}) };
+        };
+        const settle = (value) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            clearTimeout(timer);
+            socket.destroy();
+            resolve(value);
+        };
+        const timer = setTimeout(() => settle({ kind: "unresponsive" }), timeoutMs);
+        const socket = createConnection(socketPath);
+        const decoder = new ControlLineDecoder();
+        socket.on("error", (error) => {
+            lastError = error instanceof Error ? error : new Error(String(error));
+            settle(connected ? { kind: "unresponsive", error: lastError.message } : classifyNoListener(lastError));
+        });
+        socket.on("close", () => {
+            settle(connected
+                ? { kind: "unresponsive", ...(lastError ? { error: lastError.message } : {}) }
+                : classifyNoListener(lastError));
+        });
+        socket.on("connect", () => {
+            connected = true;
+            const hello = {
+                type: "hello",
+                role: "control",
+                protocolVersion: PROTOCOL_VERSION,
+                pid: process.pid,
+                version: options.version,
+                client: "cli",
+                ...(options.authToken === undefined ? {} : { controlToken: options.authToken }),
+            };
+            socket.write(encodeControlLine(hello));
+            socket.write(encodeControlLine({ type: "status", id: "probe" }));
+        });
+        socket.on("data", (chunk) => {
+            let messages;
+            try {
+                messages = decoder.push(chunk);
+            }
+            catch (error) {
+                settle({ kind: "unresponsive", error: error instanceof Error ? error.message : String(error) });
+                return;
+            }
+            for (const message of messages) {
+                if (isControlStatusProbe(message)) {
+                    settle({ kind: "healthy", status: message });
+                    return;
+                }
+                if (isHelloAck(message) && !message.ok) {
+                    settle({
+                        kind: "live-rejected",
+                        reason: message.error ?? "other",
+                        ...(message.error === undefined ? {} : { error: message.error }),
+                        ...(message.version === undefined ? {} : { version: message.version }),
+                        ...(message.protocolVersion === undefined ? {} : { protocolVersion: message.protocolVersion }),
+                    });
+                    return;
+                }
+                if (typeof message === "object" && message !== null && message.type === "fatal") {
+                    const error = message.error;
+                    settle({ kind: "live-rejected", reason: "fatal", ...(typeof error === "string" ? { error } : {}) });
+                    return;
+                }
+            }
+        });
+    });
+}
+function isControlStatusProbe(value) {
+    return typeof value === "object" && value !== null && value.type === "status_result";
+}
+export { CONTROL_MAX_LINE_BYTES };
+//# sourceMappingURL=control-server.js.map

package/dist/daemon/control-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-server.js","sourceRoot":"","sources":["../../src/daemon/control-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAc,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAC;AACpF,OAAO,EACN,sBAAsB,EAGtB,kBAAkB,EAGlB,iBAAiB,EAGjB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,uBAAuB,CAAC;AA6D/B,IAAI,yBAAyB,GAAG,CAAC,CAAC;AAElC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA6B,EAA0B;IAC/F,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;IAE7D,MAAM,qBAAqB;QACjB,YAAY,CAAS;QACrB,MAAM,CAAoB;QAC1B,GAAG,CAAS;QACZ,OAAO,CAAS;QAChB,YAAY,CAAsB;QAC1B,MAAM,CAAS;QAEhC,YAAY,MAAc,EAAE,KAAiD,EAAE;YAC9E,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,yBAAyB,EAAE,CAAC;YACvD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YAC3B,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;YACrB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAAA,CACrB;QAED,IAAI,CAAC,OAAuC,EAAQ;YACnD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/C,CAAC;QAAA,CACD;QAED,KAAK,GAAS;YACb,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAA,CACtB;KACD;IAED,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,WAA8C,CAAC;QACnD,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAE7B,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC;gBACJ,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACR,cAAc;YACf,CAAC;YACD,MAAM,CAAC,OAAO,EAAE,CAAC;QAAA,CACjB,CAAC;QAEF,MAAM,WAAW,GAAG,CAAC,KAA+B,EAAW,EAAE,CAAC;YACjE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,KAAK,CAAC,eAAe,CAAC,CAAC;gBACvB,OAAO,KAAK,CAAC;YACd,CAAC;YACD,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC;gBACjC,MAAM,GAAG,GAAa;oBACrB,IAAI,EAAE,WAAW;oBACjB,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,eAAe;oBACtB,OAAO;oBACP,eAAe,EAAE,gBAAgB;iBACjC,CAAC;gBACF,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;gBACnC,OAAO,KAAK,CAAC;YACd,CAAC;YACD,IAAI,KAAK,CAAC,eAAe,KAAK,gBAAgB,EAAE,CAAC;gBAChD,MAAM,GAAG,GAAa;oBACrB,IAAI,EAAE,WAAW;oBACjB,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,mBAAmB;oBAC1B,OAAO;oBACP,eAAe,EAAE,gBAAgB;iBACjC,CAAC;gBACF,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;gBACnC,OAAO,KAAK,CAAC;YACd,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7F,MAAM,GAAG,GAAa;oBACrB,IAAI,EAAE,WAAW;oBACjB,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,aAAa;oBACpB,OAAO;oBACP,eAAe,EAAE,gBAAgB;iBACjC,CAAC;gBACF,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;gBACnC,OAAO,KAAK,CAAC;YACd,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC3C,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACtC,gBAAgB,GAAG,IAAI,CAAC;gBACxB,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,IAAI,CAAC;oBACJ,QAAQ,GAAG,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC;gBACnF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,kEAAkE;oBAClE,gEAA8D;oBAC9D,uEAAuE;oBACvE,mEAAmE;oBACnE,oEAAoE;oBACpE,0DAA0D;oBAC1D,QAAQ,CAAC,GAAG,EAAE,CACb,OAAO,EACP,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClF,CAAC;oBACF,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACf,MAAM,GAAG,GAAa,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;oBACjF,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO,KAAK,CAAC;YACd,CAAC;YACD,WAAW,GAAG,IAAI,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACvD,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YACvD,MAAM,GAAG,GAAa;gBACrB,IAAI,EAAE,WAAW;gBACjB,EAAE,EAAE,IAAI;gBACR,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,OAAO;gBACP,eAAe,EAAE,gBAAgB;aACjC,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC;QAAA,CACZ,CAAC;QAEF,MAAM,aAAa,GAAG,CAAC,OAAgB,EAAQ,EAAE,CAAC;YACjD,MAAM,UAAU,GAAG,WAAW,CAAC;YAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;oBAC9C,OAAO;gBACR,CAAC;gBACD,OAAO;YACR,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,MAAM,EAAE,GACP,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,OAAQ,OAA4B,CAAC,EAAE,KAAK,QAAQ;oBACtG,CAAC,CAAC,CAAE,OAA0B,CAAC,EAAE,IAAI,EAAE,CAAC;oBACxC,CAAC,CAAC,EAAE,CAAC;gBACP,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;gBACzG,OAAO;YACR,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBACzE,UAAU,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,OAAO;oBACb,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC/D,CAAC,CAAC;YAAA,CACH,CAAC,CAAC;QAAA,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC;gBACJ,uEAAuE;gBACvE,uEAAuE;gBACvE,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;oBACpC,aAAa,CAAC,OAAO,CAAC,CAAC;oBACvB,OAAO,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;gBAAA,CAC9C,CAAC,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACR,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC1B,CAAC;QAAA,CACD,CAAC;QAEF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;YACxB,MAAM,CAAC,OAAO,EAAE,CAAC;QAAA,CACjB,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;YACxB,IAAI,WAAW,EAAE,CAAC;gBACjB,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;gBAC7C,QAAQ,CAAC,kBAAkB,EAAE,CAAC,WAAW,CAAC,CAAC;YAC5C,CAAC;QAAA,CACD,CAAC,CAAC;IAAA,CACH,CAAC,CAAC;IAEH,MAAM,CAAC,cAAc,GAAG,GAAG,CAAC;IAE5B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC;YAC/B,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,EAAE,CAAC;QAAA,CACV,CAAC,CAAC;IAAA,CACH,CAAC,CAAC;IACH,IAAI,gBAAmC,CAAC;IACxC,IAAI,CAAC;QACJ,gBAAgB,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACR,0EAA0E;QAC1E,+CAA+C;IAChD,CAAC;IACD,IAAI,CAAC;QACJ,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACR,0FAA0F;IAC3F,CAAC;IAED,OAAO;QACN,UAAU;QACV,WAAW,GAAG;YACb,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAAA,CACxC;QACD,SAAS,CAAC,KAAmB,EAAE;YAC9B,KAAK,MAAM,UAAU,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/C,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QAAA,CACD;QACD,MAAM,CAAC,YAAoB,EAAE,KAAmB,EAAE;YACjD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,OAAO,KAAK,CAAC;YACd,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QAAA,CACZ;QACD,KAAK,CAAC,KAAK,GAAG;YACb,KAAK,MAAM,UAAU,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC/C,UAAU,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC;gBACpC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAAA,CAC9B,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,gBAAgB,EAAE,CAAC;gBACtD,IAAI,CAAC;oBACJ,MAAM,YAAY,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;oBAC3C,IACC,YAAY,CAAC,QAAQ,EAAE;wBACvB,YAAY,CAAC,GAAG,KAAK,gBAAgB,CAAC,GAAG;wBACzC,YAAY,CAAC,GAAG,KAAK,gBAAgB,CAAC,GAAG,EACxC,CAAC;wBACF,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACrC,CAAC;gBACF,CAAC;gBAAC,MAAM,CAAC;oBACR,4BAA4B;gBAC7B,CAAC;YACF,CAAC;QAAA,CACD;KACD,CAAC;AAAA,CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,UAAkB,EAClB,OAAO,GAAgE,EAAE,OAAO,EAAE,OAAO,EAAE,EAC7D;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,SAA4B,CAAC;QACjC,MAAM,kBAAkB,GAAG,CAAC,KAAwB,EAAsB,EAAE,CAAC;YAC5E,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAE,KAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3G,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAChG,CAAC;YACD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC7B,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9F,CAAC;YACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC3B,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5F,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAAA,CAC3F,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,KAAyB,EAAE,EAAE,CAAC;YAC7C,IAAI,OAAO,EAAE,CAAC;gBACb,OAAO;YACR,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,CAAC;QAAA,CACf,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7B,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QAAA,CACvG,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;YACxB,MAAM,CACL,SAAS;gBACR,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBAC9E,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAChC,CAAC;QAAA,CACF,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC;YAC1B,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,KAAK,GAAiB;gBAC3B,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,SAAS;gBACf,eAAe,EAAE,gBAAgB;gBACjC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,KAAK;gBACb,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;aAC/E,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAAA,CACjE,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;YAC5B,IAAI,QAAmB,CAAC;YACxB,IAAI,CAAC;gBACJ,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAChG,OAAO;YACR,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAChC,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;oBACnC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC7C,OAAO;gBACR,CAAC;gBACD,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBACxC,MAAM,CAAC;wBACN,IAAI,EAAE,eAAe;wBACrB,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO;wBAChC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;wBAChE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;wBACtE,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;qBAC9F,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;gBACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAK,OAA8B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACzG,MAAM,KAAK,GAAI,OAA+B,CAAC,KAAK,CAAC;oBACrD,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBACpG,OAAO;gBACR,CAAC;YACF,CAAC;QAAA,CACD,CAAC,CAAC;IAAA,CACH,CAAC,CAAC;AAAA,CACH;AAED,SAAS,oBAAoB,CAAC,KAAc,EAA+B;IAC1E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAA4B,CAAC,IAAI,KAAK,eAAe,CAAC;AAAA,CAC7G;AAED,OAAO,EAAE,sBAAsB,EAAE,CAAC","sourcesContent":["import { chmodSync, lstatSync, rmSync, type Stats } from \"node:fs\";\nimport { createConnection, createServer, type Server, type Socket } from \"node:net\";\nimport {\n\tCONTROL_MAX_LINE_BYTES,\n\ttype ControlClientKind,\n\ttype ControlEvent,\n\tControlLineDecoder,\n\ttype ControlRequest,\n\ttype ControlResponse,\n\tencodeControlLine,\n\ttype HelloAck,\n\ttype HelloMessage,\n\tisControlRequest,\n\tisHelloAck,\n\tPROTOCOL_VERSION,\n\tparseHelloMessage,\n} from \"./control-protocol.ts\";\n\nexport interface ControlConnection {\n\treadonly connectionId: string;\n\treadonly client: ControlClientKind;\n\treadonly pid: number;\n\treadonly version: string;\n\t/** Capabilities from the control hello (empty for old clients). */\n\treadonly capabilities: ReadonlySet<string>;\n\tsend(message: ControlResponse | ControlEvent): void;\n\tclose(): void;\n}\n\nexport interface RelayAdmission {\n\t/** Validate a relay hello; on success the server hands over the raw socket. */\n\tadmitRelay(hello: Extract<HelloMessage, { role: \"relay\" }>, socket: Socket, bufferedRemainder: Buffer): boolean;\n}\n\nexport interface ControlServerHandlers {\n\t/**\n\t * Handle one request; respond via connection.send (possibly multiple times\n\t * for provisional responses). Thrown errors become error responses.\n\t */\n\tonRequest(connection: ControlConnection, request: ControlRequest): Promise<void> | void;\n\tonConnectionClosed?(connection: ControlConnection): void;\n\trelayAdmission?: RelayAdmission;\n\t/** When true, hellos are rejected with error \"shutting_down\". */\n\tisShuttingDown?(): boolean;\n\tlog?(level: \"info\" | \"warn\" | \"error\", message: string): void;\n}\n\nexport interface ControlServerOptions {\n\tsocketPath: string;\n\tversion: string;\n\t/** Optional local control-plane token published in the daemon pidfile. */\n\tauthToken?: string;\n\thandlers: ControlServerHandlers;\n}\n\nexport interface ControlServer {\n\treadonly socketPath: string;\n\tconnections(): ControlConnection[];\n\tbroadcast(event: ControlEvent): void;\n\tsendTo(connectionId: string, event: ControlEvent): boolean;\n\tclose(): Promise<void>;\n}\n\ntype ControlStatusProbe = ControlResponse & { type: \"status_result\" };\n\nexport type ControlSocketProbe =\n\t| { kind: \"healthy\"; status: ControlStatusProbe }\n\t| {\n\t\t\tkind: \"live-rejected\";\n\t\t\treason: \"shutting_down\" | \"protocol_mismatch\" | \"bad_relay_token\" | \"auth_failed\" | \"fatal\" | \"other\";\n\t\t\terror?: string;\n\t\t\tversion?: string;\n\t\t\tprotocolVersion?: number;\n\t  }\n\t| { kind: \"unresponsive\"; error?: string }\n\t| { kind: \"no-listener\"; cause: \"not-found\" | \"refused\" | \"reset\" | \"error\"; error?: string };\n\nlet controlConnectionSequence = 0;\n\nexport async function startControlServer(options: ControlServerOptions): Promise<ControlServer> {\n\tconst { socketPath, version, authToken, handlers } = options;\n\tconst connections = new Map<string, ControlConnectionImpl>();\n\n\tclass ControlConnectionImpl implements ControlConnection {\n\t\treadonly connectionId: string;\n\t\treadonly client: ControlClientKind;\n\t\treadonly pid: number;\n\t\treadonly version: string;\n\t\treadonly capabilities: ReadonlySet<string>;\n\t\tprivate readonly socket: Socket;\n\n\t\tconstructor(socket: Socket, hello: Extract<HelloMessage, { role: \"control\" }>) {\n\t\t\tthis.connectionId = `c-${++controlConnectionSequence}`;\n\t\t\tthis.client = hello.client;\n\t\t\tthis.pid = hello.pid;\n\t\t\tthis.version = hello.version;\n\t\t\tthis.capabilities = new Set(hello.capabilities ?? []);\n\t\t\tthis.socket = socket;\n\t\t}\n\n\t\tsend(message: ControlResponse | ControlEvent): void {\n\t\t\tif (!this.socket.destroyed) {\n\t\t\t\tthis.socket.write(encodeControlLine(message));\n\t\t\t}\n\t\t}\n\n\t\tclose(): void {\n\t\t\tthis.socket.destroy();\n\t\t}\n\t}\n\n\tconst server: Server = createServer((socket) => {\n\t\tconst decoder = new ControlLineDecoder();\n\t\tlet established: ControlConnectionImpl | undefined;\n\t\tlet handedOffToRelay = false;\n\n\t\tconst fatal = (error: string) => {\n\t\t\ttry {\n\t\t\t\tsocket.write(encodeControlLine({ type: \"fatal\", error }));\n\t\t\t} catch {\n\t\t\t\t// best-effort\n\t\t\t}\n\t\t\tsocket.destroy();\n\t\t};\n\n\t\tconst handleHello = (hello: HelloMessage | undefined): boolean => {\n\t\t\tif (!hello) {\n\t\t\t\tfatal(\"invalid_hello\");\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tif (handlers.isShuttingDown?.()) {\n\t\t\t\tconst ack: HelloAck = {\n\t\t\t\t\ttype: \"hello_ack\",\n\t\t\t\t\tok: false,\n\t\t\t\t\terror: \"shutting_down\",\n\t\t\t\t\tversion,\n\t\t\t\t\tprotocolVersion: PROTOCOL_VERSION,\n\t\t\t\t};\n\t\t\t\tsocket.end(encodeControlLine(ack));\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tif (hello.protocolVersion !== PROTOCOL_VERSION) {\n\t\t\t\tconst ack: HelloAck = {\n\t\t\t\t\ttype: \"hello_ack\",\n\t\t\t\t\tok: false,\n\t\t\t\t\terror: \"protocol_mismatch\",\n\t\t\t\t\tversion,\n\t\t\t\t\tprotocolVersion: PROTOCOL_VERSION,\n\t\t\t\t};\n\t\t\t\tsocket.end(encodeControlLine(ack));\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tif (hello.role === \"control\" && authToken !== undefined && hello.controlToken !== authToken) {\n\t\t\t\tconst ack: HelloAck = {\n\t\t\t\t\ttype: \"hello_ack\",\n\t\t\t\t\tok: false,\n\t\t\t\t\terror: \"auth_failed\",\n\t\t\t\t\tversion,\n\t\t\t\t\tprotocolVersion: PROTOCOL_VERSION,\n\t\t\t\t};\n\t\t\t\tsocket.end(encodeControlLine(ack));\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tif (hello.role === \"relay\") {\n\t\t\t\tconst remainder = decoder.drainRemainder();\n\t\t\t\tsocket.removeListener(\"data\", onData);\n\t\t\t\thandedOffToRelay = true;\n\t\t\t\tlet admitted = false;\n\t\t\t\ttry {\n\t\t\t\t\tadmitted = handlers.relayAdmission?.admitRelay(hello, socket, remainder) ?? false;\n\t\t\t\t} catch (error) {\n\t\t\t\t\t// admitRelay may have partly taken ownership of the socket before\n\t\t\t\t\t// throwing, and the socket now carries raw relay bytes — so a\n\t\t\t\t\t// synchronous failure must NOT fall through to onData's generic catch,\n\t\t\t\t\t// which would inject a misleading fatal(\"frame_too_large\") control\n\t\t\t\t\t// frame into the raw stream and destroy a socket the relay path may\n\t\t\t\t\t// own. Log the real reason and tear down cleanly instead.\n\t\t\t\t\thandlers.log?.(\n\t\t\t\t\t\t\"error\",\n\t\t\t\t\t\t`relay admission threw: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t\t\t);\n\t\t\t\t\tsocket.destroy();\n\t\t\t\t\treturn false;\n\t\t\t\t}\n\t\t\t\tif (!admitted) {\n\t\t\t\t\tconst ack: HelloAck = { type: \"hello_ack\", ok: false, error: \"bad_relay_token\" };\n\t\t\t\t\tsocket.end(encodeControlLine(ack));\n\t\t\t\t}\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\testablished = new ControlConnectionImpl(socket, hello);\n\t\t\tconnections.set(established.connectionId, established);\n\t\t\tconst ack: HelloAck = {\n\t\t\t\ttype: \"hello_ack\",\n\t\t\t\tok: true,\n\t\t\t\tconnectionId: established.connectionId,\n\t\t\t\tversion,\n\t\t\t\tprotocolVersion: PROTOCOL_VERSION,\n\t\t\t};\n\t\t\tsocket.write(encodeControlLine(ack));\n\t\t\treturn true;\n\t\t};\n\n\t\tconst handleMessage = (message: unknown): void => {\n\t\t\tconst connection = established;\n\t\t\tif (!connection) {\n\t\t\t\tif (!handleHello(parseHelloMessage(message))) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tif (!isControlRequest(message)) {\n\t\t\t\tconst id =\n\t\t\t\t\ttypeof message === \"object\" && message !== null && typeof (message as { id?: unknown }).id === \"string\"\n\t\t\t\t\t\t? ((message as { id: string }).id ?? \"\")\n\t\t\t\t\t\t: \"\";\n\t\t\t\tconnection.send({ type: \"error\", id, code: \"invalid_request\", message: \"unrecognized control request\" });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tPromise.resolve(handlers.onRequest(connection, message)).catch((error) => {\n\t\t\t\tconnection.send({\n\t\t\t\t\ttype: \"error\",\n\t\t\t\t\tid: message.id,\n\t\t\t\t\tcode: \"internal_error\",\n\t\t\t\t\tmessage: error instanceof Error ? error.message : String(error),\n\t\t\t\t});\n\t\t\t});\n\t\t};\n\n\t\tconst onData = (chunk: Buffer) => {\n\t\t\ttry {\n\t\t\t\t// One line at a time: a relay hello hands the socket off mid-chunk and\n\t\t\t\t// any trailing bytes must stay undecoded (they are raw relay payload).\n\t\t\t\tdecoder.pushEach(chunk, (message) => {\n\t\t\t\t\thandleMessage(message);\n\t\t\t\t\treturn handedOffToRelay ? \"stop\" : \"continue\";\n\t\t\t\t});\n\t\t\t} catch {\n\t\t\t\tfatal(\"frame_too_large\");\n\t\t\t}\n\t\t};\n\n\t\tsocket.on(\"data\", onData);\n\t\tsocket.on(\"error\", () => {\n\t\t\tsocket.destroy();\n\t\t});\n\t\tsocket.on(\"close\", () => {\n\t\t\tif (established) {\n\t\t\t\tconnections.delete(established.connectionId);\n\t\t\t\thandlers.onConnectionClosed?.(established);\n\t\t\t}\n\t\t});\n\t});\n\n\tserver.maxConnections = 256;\n\n\tawait new Promise<void>((resolve, reject) => {\n\t\tserver.once(\"error\", reject);\n\t\tserver.listen(socketPath, () => {\n\t\t\tserver.removeListener(\"error\", reject);\n\t\t\tresolve();\n\t\t});\n\t});\n\tlet boundSocketStats: Stats | undefined;\n\ttry {\n\t\tboundSocketStats = lstatSync(socketPath);\n\t} catch {\n\t\t// Best-effort ownership check: close() will skip unlinking when it cannot\n\t\t// prove the path still belongs to this server.\n\t}\n\ttry {\n\t\tchmodSync(socketPath, 0o600);\n\t} catch {\n\t\t// The socket may live on a filesystem without chmod support; directory perms still apply.\n\t}\n\n\treturn {\n\t\tsocketPath,\n\t\tconnections() {\n\t\t\treturn Array.from(connections.values());\n\t\t},\n\t\tbroadcast(event: ControlEvent) {\n\t\t\tfor (const connection of connections.values()) {\n\t\t\t\tconnection.send(event);\n\t\t\t}\n\t\t},\n\t\tsendTo(connectionId: string, event: ControlEvent) {\n\t\t\tconst connection = connections.get(connectionId);\n\t\t\tif (!connection) {\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tconnection.send(event);\n\t\t\treturn true;\n\t\t},\n\t\tasync close() {\n\t\t\tfor (const connection of connections.values()) {\n\t\t\t\tconnection.close();\n\t\t\t}\n\t\t\tawait new Promise<void>((resolve) => {\n\t\t\t\tserver.close(() => resolve());\n\t\t\t});\n\t\t\tif (process.platform !== \"win32\" && boundSocketStats) {\n\t\t\t\ttry {\n\t\t\t\t\tconst currentStats = lstatSync(socketPath);\n\t\t\t\t\tif (\n\t\t\t\t\t\tcurrentStats.isSocket() &&\n\t\t\t\t\t\tcurrentStats.dev === boundSocketStats.dev &&\n\t\t\t\t\t\tcurrentStats.ino === boundSocketStats.ino\n\t\t\t\t\t) {\n\t\t\t\t\t\trmSync(socketPath, { force: true });\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\t// Already gone or not ours.\n\t\t\t\t}\n\t\t\t}\n\t\t},\n\t};\n}\n\n/**\n * Probe an existing socket with a status request. The result distinguishes a\n * provably dead/stale path from a live daemon that answered but rejected us;\n * callers must only unlink a socket after a no-listener result.\n */\nexport async function probeControlSocket(\n\tsocketPath: string,\n\toptions: { version: string; timeoutMs?: number; authToken?: string } = { version: \"0.0.0\" },\n): Promise<ControlSocketProbe> {\n\tconst timeoutMs = options.timeoutMs ?? 2000;\n\treturn new Promise((resolve) => {\n\t\tlet settled = false;\n\t\tlet connected = false;\n\t\tlet lastError: Error | undefined;\n\t\tconst classifyNoListener = (error: Error | undefined): ControlSocketProbe => {\n\t\t\tconst code = error instanceof Error && \"code\" in error ? (error as NodeJS.ErrnoException).code : undefined;\n\t\t\tif (code === \"ENOENT\") {\n\t\t\t\treturn { kind: \"no-listener\", cause: \"not-found\", ...(error ? { error: error.message } : {}) };\n\t\t\t}\n\t\t\tif (code === \"ECONNREFUSED\") {\n\t\t\t\treturn { kind: \"no-listener\", cause: \"refused\", ...(error ? { error: error.message } : {}) };\n\t\t\t}\n\t\t\tif (code === \"ECONNRESET\") {\n\t\t\t\treturn { kind: \"no-listener\", cause: \"reset\", ...(error ? { error: error.message } : {}) };\n\t\t\t}\n\t\t\treturn { kind: \"no-listener\", cause: \"error\", ...(error ? { error: error.message } : {}) };\n\t\t};\n\t\tconst settle = (value: ControlSocketProbe) => {\n\t\t\tif (settled) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tsettled = true;\n\t\t\tclearTimeout(timer);\n\t\t\tsocket.destroy();\n\t\t\tresolve(value);\n\t\t};\n\t\tconst timer = setTimeout(() => settle({ kind: \"unresponsive\" }), timeoutMs);\n\t\tconst socket = createConnection(socketPath);\n\t\tconst decoder = new ControlLineDecoder();\n\t\tsocket.on(\"error\", (error) => {\n\t\t\tlastError = error instanceof Error ? error : new Error(String(error));\n\t\t\tsettle(connected ? { kind: \"unresponsive\", error: lastError.message } : classifyNoListener(lastError));\n\t\t});\n\t\tsocket.on(\"close\", () => {\n\t\t\tsettle(\n\t\t\t\tconnected\n\t\t\t\t\t? { kind: \"unresponsive\", ...(lastError ? { error: lastError.message } : {}) }\n\t\t\t\t\t: classifyNoListener(lastError),\n\t\t\t);\n\t\t});\n\t\tsocket.on(\"connect\", () => {\n\t\t\tconnected = true;\n\t\t\tconst hello: HelloMessage = {\n\t\t\t\ttype: \"hello\",\n\t\t\t\trole: \"control\",\n\t\t\t\tprotocolVersion: PROTOCOL_VERSION,\n\t\t\t\tpid: process.pid,\n\t\t\t\tversion: options.version,\n\t\t\t\tclient: \"cli\",\n\t\t\t\t...(options.authToken === undefined ? {} : { controlToken: options.authToken }),\n\t\t\t};\n\t\t\tsocket.write(encodeControlLine(hello));\n\t\t\tsocket.write(encodeControlLine({ type: \"status\", id: \"probe\" }));\n\t\t});\n\t\tsocket.on(\"data\", (chunk) => {\n\t\t\tlet messages: unknown[];\n\t\t\ttry {\n\t\t\t\tmessages = decoder.push(chunk);\n\t\t\t} catch (error) {\n\t\t\t\tsettle({ kind: \"unresponsive\", error: error instanceof Error ? error.message : String(error) });\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tfor (const message of messages) {\n\t\t\t\tif (isControlStatusProbe(message)) {\n\t\t\t\t\tsettle({ kind: \"healthy\", status: message });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (isHelloAck(message) && !message.ok) {\n\t\t\t\t\tsettle({\n\t\t\t\t\t\tkind: \"live-rejected\",\n\t\t\t\t\t\treason: message.error ?? \"other\",\n\t\t\t\t\t\t...(message.error === undefined ? {} : { error: message.error }),\n\t\t\t\t\t\t...(message.version === undefined ? {} : { version: message.version }),\n\t\t\t\t\t\t...(message.protocolVersion === undefined ? {} : { protocolVersion: message.protocolVersion }),\n\t\t\t\t\t});\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tif (typeof message === \"object\" && message !== null && (message as { type?: unknown }).type === \"fatal\") {\n\t\t\t\t\tconst error = (message as { error?: unknown }).error;\n\t\t\t\t\tsettle({ kind: \"live-rejected\", reason: \"fatal\", ...(typeof error === \"string\" ? { error } : {}) });\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t}\n\t\t});\n\t});\n}\n\nfunction isControlStatusProbe(value: unknown): value is ControlStatusProbe {\n\treturn typeof value === \"object\" && value !== null && (value as { type?: unknown }).type === \"status_result\";\n}\n\nexport { CONTROL_MAX_LINE_BYTES };\n"]}

package/dist/daemon/conversation-commands.d.ts

@@ -0,0 +1,176 @@
+import type { IrohRemoteAuditLogger } from "../core/remote/iroh/audit.ts";
+import type { IrohRemoteClientAuthorizationSuccess } from "../core/remote/iroh/authorization.ts";
+import { type IrohRemoteRpcErrorResponse } from "../core/remote/iroh/rpc-command-filter.ts";
+import type { IrohRemoteHostStateManager } from "../core/remote/iroh/state-manager.ts";
+import { type IrohRemoteWorktreeRpcBackend } from "../core/remote/iroh/worktree-rpc.ts";
+import type { RpcKeepAwakeStatus } from "../core/rpc/types.ts";
+import { SessionManager } from "../core/session-manager.ts";
+import type { KeepAwakeStatus } from "./keep-awake.ts";
+import type { LeaseState } from "./lease-broker.ts";
+export declare const INTEGRATED_CONVERSATION_UNSUPPORTED_RPC_TYPES: ReadonlySet<string>;
+/**
+ * Commands that start or extend a turn. While a lease is draining to a TUI,
+ * these are rejected with `lease_draining` so the drain converges; read-only
+ * commands and abort pass through.
+ */
+export declare const TURN_INITIATING_RPC_TYPES: ReadonlySet<string>;
+export declare const LEASE_DRAINING_RETRY_AFTER_MS = 1000;
+export declare const REMOTE_SESSION_LIST_DEFAULT_LIMIT = 50;
+export declare const REMOTE_SESSION_LIST_MAX_LIMIT = 200;
+export declare const REMOTE_SESSION_LIST_CURSOR_TTL_MS: number;
+export declare const REMOTE_SESSION_LIST_CURSOR_MAX_BYTES = 512;
+/**
+ * Per-client cap on retained pagination cursors. The cursor map is shared across
+ * every stream on the daemon; without a bound a client that never echoes the
+ * returned cursor (each no-cursor list_sessions mints a fresh snapshot of up to
+ * REMOTE_SESSION_LIST_MAX_LIMIT summaries) would grow it without limit for the
+ * whole TTL window. Bounding per client (rather than globally) prevents one client
+ * from evicting another's cursors — mirrors the push deduper's per-client cap.
+ */
+export declare const REMOTE_SESSION_LIST_MAX_CURSORS_PER_CLIENT = 64;
+export declare const REMOTE_TOOL_OUTPUT_MAX_SCALARS = 8000;
+export type RemoteRpcCommand = Record<string, unknown> & {
+    type: string;
+};
+export type RemoteSessionRuntimeState = Exclude<LeaseState, "unowned">;
+export interface RemoteSessionListEntry {
+    sessionId: string;
+    title: string;
+    createdAt: string;
+    updatedAt: string;
+    messageCount: number;
+    /** "subagent" when this session was created for a delegated subagent run. */
+    origin?: "subagent";
+    /** Live host ownership for this session. Omitted when no runtime is currently owned. */
+    runtimeState?: RemoteSessionRuntimeState;
+    /** Present when the session is bound to a daemon-managed worktree (worktrees.v1). */
+    worktreeId?: string;
+    /** POSIX-style path relative to the registered workspace root. Omitted for root. */
+    workingDirectory?: string;
+}
+export interface RemoteSessionListCursorEntry {
+    clientNodeId: string;
+    workspaceName: string;
+    sessions: RemoteSessionListEntry[];
+    nextIndex: number;
+    expiresAt: number;
+}
+/** Minimal runtime surface the conversation command handlers consume. */
+export interface ConversationCommandRuntime {
+    session: {
+        sessionId: string;
+        sessionManager: Pick<SessionManager, "getBranch">;
+    };
+    listSessions(): Promise<Array<{
+        sessionId: string;
+        sessionName?: string;
+        createdAt: string;
+        modifiedAt: string;
+        messageCount: number;
+        firstMessage: string;
+        cwd?: string;
+        origin?: "subagent";
+    }>>;
+}
+export interface ConversationCommandContext {
+    agentDir?: string;
+    auditLogger?: IrohRemoteAuditLogger;
+    hostEngine?: {
+        clearPairingSecretForWorkspace(workspaceName: string): void;
+    };
+    stateManager: IrohRemoteHostStateManager;
+    sessionListCursors: Map<string, RemoteSessionListCursorEntry>;
+    sessionListCursorTtlMs: number;
+    now?: () => number;
+    /** Batch live-runtime presence for list_sessions; absent on hosts without a daemon broker. */
+    listRuntimeStates?: (workspaceName: string) => Promise<ReadonlyMap<string, RemoteSessionRuntimeState>> | ReadonlyMap<string, RemoteSessionRuntimeState>;
+    /** True while this conversation's lease is draining to a TUI (§4.5 rejection). */
+    isDraining?: () => boolean;
+    /**
+     * True when this conversation runtime is a subagent child session. Subagent
+     * sessions are observe-only for remote clients: the parent agent owns the
+     * delegated turn, so turn-initiating commands are rejected.
+     */
+    isSubagentSession?: () => boolean;
+    /** Host cleanup after a successful workspace unregister (streams, runtimes, live activities, relays). */
+    onWorkspaceUnregistered?: (workspaceName: string) => Promise<void>;
+    /** Host keep-awake control; absent when no daemon owns the host (e.g. plain rpc mode). */
+    keepAwake?: {
+        setEnabled(enabled: boolean): KeepAwakeStatus;
+        readonly status: KeepAwakeStatus;
+    };
+    /** Persist the desired keep-awake setting after a successful set_keep_awake. */
+    onKeepAwakeSetting?: (enabled: boolean) => void;
+    /** Host web-search key control; absent when no daemon owns the host (e.g. plain rpc mode). */
+    webSearchKey?: {
+        set(apiKey: string | null): void;
+        readonly configured: boolean;
+    };
+    /**
+     * Worktree RPC backend for the stream-bound workspace (worktrees.v1);
+     * absent when no daemon owns the host (create/list_worktrees then fail
+     * with unsupported_remote_command).
+     */
+    createWorktreeBackend?: (workspace: {
+        name: string;
+        path: string;
+    }) => IrohRemoteWorktreeRpcBackend;
+}
+export declare function createLeaseDrainingRpcErrorResponse(command: RemoteRpcCommand): Record<string, unknown>;
+export declare function createSubagentSessionReadOnlyRpcErrorResponse(command: RemoteRpcCommand): Record<string, unknown>;
+export declare function getRpcResponseId(command: Record<string, unknown>): string | undefined;
+export declare function createRpcSuccessResponse(id: string | undefined, command: string, data?: Record<string, unknown>): Record<string, unknown>;
+export interface RemoteTranscriptItem {
+    entryId: string;
+    createdAt: string;
+    role: "user" | "assistant" | "system" | "tool";
+    text: string;
+    truncated: boolean;
+    /** Inline image blocks persisted on the message (user attachments or tool
+     *  results such as image reads); recoverable per entry via
+     *  get_message_images. */
+    imageCount?: number;
+    toolName?: string;
+    status?: "completed" | "failed";
+    summary?: string;
+    path?: string;
+    args?: Record<string, unknown>;
+    details?: Record<string, unknown>;
+    output?: string;
+    outputTruncated?: boolean;
+}
+export declare function createRemoteGetTranscriptRpcResponse(command: RemoteRpcCommand, authorization: IrohRemoteClientAuthorizationSuccess, runtime: ConversationCommandRuntime): object;
+export declare function createRemoteGetMessageImagesRpcResponse(command: RemoteRpcCommand, authorization: IrohRemoteClientAuthorizationSuccess, runtime: ConversationCommandRuntime): object;
+interface RemoteSessionSummary {
+    sortUpdatedAtMs: number;
+    session: RemoteSessionListEntry;
+    cwd?: string;
+}
+export declare function listRemoteWorkspaceSessionSummaries(authorization: IrohRemoteClientAuthorizationSuccess, context: ConversationCommandContext, runtime?: ConversationCommandRuntime): Promise<RemoteSessionSummary[]>;
+export declare function createRemoteListSessionsRpcResponse(command: RemoteRpcCommand, authorization: IrohRemoteClientAuthorizationSuccess, context: ConversationCommandContext, runtime?: ConversationCommandRuntime): Promise<object>;
+export declare function createRemoteRegisterLiveActivityRpcResponse(command: RemoteRpcCommand, authorization: IrohRemoteClientAuthorizationSuccess, context: ConversationCommandContext, expectedSessionId: string): Promise<object>;
+export declare function createRemoteUnregisterLiveActivityRpcResponse(command: RemoteRpcCommand, authorization: IrohRemoteClientAuthorizationSuccess, context: ConversationCommandContext, expectedSessionId: string): Promise<object>;
+export declare function getIntegratedConversationIdentityError(command: Record<string, unknown>, authorization: IrohRemoteClientAuthorizationSuccess, runtime: ConversationCommandRuntime): string | undefined;
+export declare function handleRemoteHostRpcCommand(command: RemoteRpcCommand, authorization: IrohRemoteClientAuthorizationSuccess, context: ConversationCommandContext): Promise<object | undefined>;
+/**
+ * `set_keep_awake` / `get_keep_awake` from a phone. Host-level (not
+ * conversation-level): any paired client with stream access may toggle it. The
+ * wire status strips the host-local mechanism name.
+ */
+export declare function createKeepAwakeRpcResponse(command: RemoteRpcCommand, context: ConversationCommandContext): Record<string, unknown> | IrohRemoteRpcErrorResponse;
+/**
+ * `set_web_search_key` / `get_web_search_status` from a phone. Host-level (not
+ * conversation-level): any paired client with stream access may set it. The
+ * wire status never includes the key itself, only whether one is stored.
+ */
+export declare function createWebSearchKeyRpcResponse(command: RemoteRpcCommand, context: ConversationCommandContext): Record<string, unknown> | IrohRemoteRpcErrorResponse;
+export declare function toRpcKeepAwakeStatus(status: KeepAwakeStatus): RpcKeepAwakeStatus;
+/**
+ * Host-side handler for conversation-stream RPC commands that are not served
+ * directly by the runtime's rpc mode. Returns undefined for commands the rpc
+ * mode should handle itself — including abort, which stops the turn while the
+ * stream stays open and the runtime stays live.
+ */
+export declare function handleIntegratedConversationRpcCommand(command: RemoteRpcCommand, authorization: IrohRemoteClientAuthorizationSuccess, context: ConversationCommandContext, runtime: ConversationCommandRuntime): Promise<object | undefined>;
+export {};
+//# sourceMappingURL=conversation-commands.d.ts.map