@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/iroh-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iroh-service.d.ts","sourceRoot":"","sources":["../../src/daemon/iroh-service.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAC;AACjG,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAC;AAsE/F,OAAO,EAGN,KAAK,sBAAsB,EAG3B,MAAM,0BAA0B,CAAC;AAUlC,OAAO,KAAK,EAAwB,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAyC7E,MAAM,MAAM,4BAA4B,GAAG,IAAI,CAAC,sBAAsB,EAAE,cAAc,GAAG,eAAe,GAAG,WAAW,CAAC,CAAC;AAExH,wBAAgB,0CAA0C,CAAC,CAAC,SAAS,4BAA4B,EAChG,aAAa,EAAE,8BAA8B,EAC7C,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EACrB,YAAY,EAAE,MAAM,GAClB,GAAG,CAAC,CAAC,CAAC,CAWR;AAED,wBAAgB,yCAAyC,CACxD,aAAa,EAAE,8BAA8B,EAC7C,QAAQ,EAAE,QAAQ,CAAC,4BAA4B,CAAC,EAChD,YAAY,EAAE,MAAM,GAClB,GAAG,CAAC,2BAA2B,CAAC,CASlC;AAwBD,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,aAAa,GAAG,YAAY,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,UAAiD,CAAC;AAEzF,MAAM,WAAW,uBAAuB;IACvC,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACvC,SAAS,EAAE,aAAa,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACrC,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,GAAG,WAAW,CAAC,EAChE,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACnD,uBAAuB,CAiBzB;AA6FD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,GAAE,uBAA4B,GAAG,qBAAqB,CAmCnG","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport { randomUUID } from \"node:crypto\";\nimport { existsSync } from \"node:fs\";\nimport type { Socket } from \"node:net\";\nimport { relative, resolve, sep } from \"node:path\";\nimport {\n\tcreateIrohRemoteExplicitAccess,\n\tcreateIrohRemotePresetAccess,\n\tgetIrohRemoteRpcCommandCapabilities,\n\tgetIrohRemoteStreamCapability,\n\tgetMissingIrohRemoteRpcCapability,\n\thasIrohRemoteRpcCapability,\n\tparseIrohRemoteRpcCapabilities,\n\tparseIrohRemoteRpcGrant,\n} from \"../core/remote/iroh/access-grant.ts\";\nimport type { IrohRemoteActiveStreamEntry } from \"../core/remote/iroh/active-stream-registry.ts\";\nimport { IrohRemoteActiveStreamRegistry } from \"../core/remote/iroh/active-stream-registry.ts\";\nimport type { IrohRemoteClientAuthorizationSuccess } from \"../core/remote/iroh/authorization.ts\";\nimport { hashIrohRemotePairingSecret } from \"../core/remote/iroh/authorization.ts\";\nimport {\n\tDEFAULT_IROH_REMOTE_PAIRING_TICKET_TTL_MS,\n\tIrohRemoteHostEngine,\n\ttype IrohRemoteHostHandshakeResult,\n} from \"../core/remote/iroh/engine.ts\";\nimport { createIrohRemoteHandshakeFailure, type IrohRemoteHello } from \"../core/remote/iroh/handshake.ts\";\nimport {\n\tDEFAULT_IROH_REMOTE_HANDSHAKE_MAX_LINE_BYTES,\n\tDEFAULT_IROH_REMOTE_HANDSHAKE_TIMEOUT_MS,\n\twriteIrohRemoteHandshakeResponse,\n} from \"../core/remote/iroh/handshake-reader.ts\";\nimport { resolveIrohRemoteWorkspaceProjectTrusted } from \"../core/remote/iroh/host-policy.ts\";\nimport { IROH_REMOTE_ALPN, resolveIrohRemoteRuntimeToolPolicy } from \"../core/remote/iroh/protocol.ts\";\nimport {\n\tIrohRemoteInMemoryPushNotificationDeduper,\n\ttype IrohRemoteLiveActivityUpdateIntent,\n\ttype IrohRemotePushNotificationDeliveryStatus,\n\tIrohRemotePushNotificationDispatcher,\n\ttype IrohRemotePushNotificationIntent,\n\tIrohRemotePushRelayHttpClient,\n\trevokeIrohRemoteClientPushTargets,\n} from \"../core/remote/iroh/push.ts\";\nimport {\n\tcreateIrohRemoteRpcCapabilityDeniedResponse,\n\tcreateIrohRemoteRpcErrorResponse,\n} from \"../core/remote/iroh/rpc-command-filter.ts\";\nimport type { IrohRemoteClient, IrohRemoteWorkspace, IrohRemoteWorkspaceWorktree } from \"../core/remote/iroh/state.ts\";\nimport {\n\tIROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\ttype IrohRemoteHostStateManager,\n\tisIrohRemoteWorkspaceHasWorktreesError,\n} from \"../core/remote/iroh/state-manager.ts\";\nimport { getIrohRemoteWorkspaceAvailabilityStatus } from \"../core/remote/iroh/workspace.ts\";\nimport type { IrohRemoteWorktreeRpcBackend } from \"../core/remote/iroh/worktree-rpc.ts\";\nimport type { IrohBiStreamLike } from \"../core/rpc/iroh-transport.ts\";\nimport { getDefaultSessionDir } from \"../core/session-manager.ts\";\nimport { getCurrentThemeName, getResolvedThemeColors } from \"../core/theme/runtime.ts\";\nimport { ProjectTrustStore } from \"../core/trust-manager.ts\";\nimport { runIrohRemoteRpcMode } from \"../modes/rpc/iroh-remote-rpc-mode.ts\";\nimport {\n\tCONTROL_RPC_GRANTS_CAPABILITY,\n\tCONTROL_WORKTREES_CAPABILITY,\n\ttype ControlLeaseStatus,\n\ttype ControlRequest,\n\tRELAY_RPC_COMMAND_TYPES,\n\ttype RelayCloseReason,\n} from \"./control-protocol.ts\";\nimport type { ControlConnection } from \"./control-server.ts\";\nimport {\n\ttype ConversationCommandContext,\n\tcreateKeepAwakeRpcResponse,\n\tcreateRemoteRegisterLiveActivityRpcResponse,\n\tcreateRemoteUnregisterLiveActivityRpcResponse,\n\tcreateRpcSuccessResponse,\n\tcreateWebSearchKeyRpcResponse,\n\tgetRpcResponseId,\n\thandleIntegratedConversationRpcCommand,\n\thandleRemoteHostRpcCommand,\n\tREMOTE_SESSION_LIST_CURSOR_TTL_MS,\n\ttype RemoteSessionListCursorEntry,\n\ttoRpcKeepAwakeStatus,\n} from \"./conversation-commands.ts\";\nimport {\n\tcreateIntegratedConversationHandshakeResponse,\n\tdecorateRemoteHostState,\n\ttype RemoteHostResponseContext,\n} from \"./handshake-responses.ts\";\nimport {\n\tcreateConversationOpenError,\n\tgetResolvedTargetSessionId,\n\ttype IntegratedRuntimeEntry,\n\tIntegratedRuntimeRegistry,\n\ttype IntegratedRuntimeSubscriber,\n} from \"./integrated-runtimes.ts\";\nimport {\n\tformatIrohLoadError,\n\ttype IrohConnectionLike,\n\ttype IrohEndpointLike,\n\ttype IrohModuleLike,\n\tloadIrohModule,\n} from \"./iroh-native.ts\";\nimport { IrohRemoteResourceGuard } from \"./iroh-resource-guard.ts\";\nimport { type DaemonAttachClaim, LeaseBroker, type LeaseState } from \"./lease-broker.ts\";\nimport type { VoltdRuntimeServices, VoltdServiceExtension } from \"./main.ts\";\nimport { RELAY_TOKEN_TTL_MS, RelayRegistry } from \"./relay-stream.ts\";\nimport {\n\tcreateSessionManagerTargetStore,\n\ttype IrohRemoteSessionTarget,\n\tresolveIrohRemoteSessionTarget,\n} from \"./session-target.ts\";\nimport { resolveWorktreeCleanupPolicy } from \"./state.ts\";\nimport { createHostThemeTokensFrame, HOST_THEME_TOKENS_FEATURE } from \"./theme-push.ts\";\nimport { ViewerFeedRegistry } from \"./viewer-feed.ts\";\nimport { isPathInside, type WorkspaceDirectoryResolution } from \"./workspace-directory.ts\";\nimport {\n\ttype RemoteSanitizerOverrides,\n\trunWorkspaceDiscoveryStream,\n\trunWorkspaceManagementStream,\n\trunWorktreeManagementStream,\n\tWORKSPACE_UNREGISTERED_CLOSE_REASON,\n\twriteIrohRemoteJsonLine,\n} from \"./workspace-streams.ts\";\nimport {\n\tevaluateWorktreeRelayGate,\n\tgetRegisteredWorkingDirectoryForWorktree,\n\tgetWorkspaceWorktreesDir,\n\tgetWorktreesRoot,\n\thandleWorktreeControlRequest,\n\tisWorktreeControlRequest,\n\tWorktreeManager,\n\ttype WorktreeResult,\n\tWorktreeRetentionSweeper,\n} from \"./worktree-manager.ts\";\n\nconst ACTIVE_REVOKE_CLOSE_REASON = \"revoked\";\nconst ACTIVE_REPLACE_CLOSE_REASON = \"replaced\";\nconst DUPLICATE_CONVERSATION_RETRY_AFTER_MS = 500;\nconst RELAY_OFFER_RETRY_AFTER_MS = 1000;\nconst WORKSPACE_DISCOVERY_STREAM_SESSION_ID = \"$workspace-discovery\";\nconst WORKSPACE_MANAGEMENT_STREAM_SESSION_ID = \"$workspace-management\";\nconst IROH_ENDPOINT_READY_TIMEOUT_MS = 15_000;\nconst IROH_UNAUTHENTICATED_CONNECTION_TIMEOUT_MS = 15_000;\nconst SHUTDOWN_RUNTIME_IDLE_CAP_MS = 60_000;\n\nexport type AuthorityInvalidationRuntime = Pick<IntegratedRuntimeEntry, \"clientNodeId\" | \"workspaceName\" | \"sessionId\">;\n\nexport function collectClientAuthorityInvalidationRuntimes<T extends AuthorityInvalidationRuntime>(\n\tactiveStreams: IrohRemoteActiveStreamRegistry,\n\truntimes: Iterable<T>,\n\tclientNodeId: string,\n): Set<T> {\n\tconst clientEntries = activeStreams.entriesForClientNodeId(clientNodeId);\n\treturn new Set(\n\t\tArray.from(runtimes).filter(\n\t\t\t(runtime) =>\n\t\t\t\truntime.clientNodeId === clientNodeId ||\n\t\t\t\tclientEntries.some(\n\t\t\t\t\t(entry) => entry.workspaceName === runtime.workspaceName && entry.sessionId === runtime.sessionId,\n\t\t\t\t),\n\t\t),\n\t);\n}\n\nexport function collectClientAuthorityInvalidationStreams(\n\tactiveStreams: IrohRemoteActiveStreamRegistry,\n\truntimes: Iterable<AuthorityInvalidationRuntime>,\n\tclientNodeId: string,\n): Set<IrohRemoteActiveStreamEntry> {\n\tconst runtimeList = Array.from(runtimes);\n\tconst entries = new Set(activeStreams.entriesForClientNodeId(clientNodeId));\n\tfor (const runtime of collectClientAuthorityInvalidationRuntimes(activeStreams, runtimeList, clientNodeId)) {\n\t\tfor (const entry of activeStreams.entriesForConversationKey(runtime.workspaceName, runtime.sessionId)) {\n\t\t\tentries.add(entry);\n\t\t}\n\t}\n\treturn entries;\n}\n\nfunction getRelativeWorkingDirectoryForRoot(rootPath: string, cwd: string): string | null | undefined {\n\tconst root = resolve(rootPath);\n\tconst child = resolve(cwd);\n\tif (!isPathInside(root, child)) {\n\t\treturn null;\n\t}\n\tconst relativePath = relative(root, child);\n\treturn relativePath.length === 0 || relativePath === \".\" ? undefined : relativePath.split(sep).join(\"/\");\n}\n\n/**\n * Defensive cap on concurrent in-flight bi-streams per client connection. A\n * well-behaved client keeps only a handful open (one conversation + a few\n * utility streams); an authenticated-but-misbehaving client could otherwise open\n * unbounded concurrent streams, each spawning a runtime attach, and exhaust\n * daemon resources. Hitting the cap closes the connection.\n */\nconst MAX_CONCURRENT_STREAMS_PER_CONNECTION = 64;\n\nlet activeConnectionSequence = 0;\nlet activeStreamSequence = 0;\n\nexport type IrohRelayMode = \"disabled\" | \"development\" | \"production\";\n\n/**\n * The Volt-operated relay fleet. Endpoints bind against these by default\n * (\"production\" mode); the n0 public relays (\"development\" mode) are for\n * development only and must be opted into via VOLT_IROH_RELAY_MODE=development.\n */\nexport const VOLT_PRODUCTION_RELAY_URLS = [\"https://iroh-relay-us-central.volt-cli.dev\"];\n\nexport interface IrohDaemonServiceConfig {\n\trelayMode?: IrohRelayMode;\n\t/**\n\t * Relay server URLs (e.g. \"https://relay.example.com\"). When set (or via\n\t * VOLT_IROH_RELAY_URLS, comma-separated), production mode binds against\n\t * these instead of the built-in Volt fleet, and pairing tickets carry the\n\t * URLs so clients bind against the same relays.\n\t */\n\trelayUrls?: string[];\n\t/**\n\t * Bearer token presented to relay servers configured with\n\t * access.shared_token. Falls back to VOLT_IROH_RELAY_AUTH_TOKEN, then the\n\t * token persisted in daemon state from a previous start.\n\t */\n\trelayAuthToken?: string;\n\tpushRelayUrl?: string;\n\tpushRelayAuthToken?: string;\n\tprofile?: string;\n}\n\nexport interface ResolvedIrohRelayConfig {\n\trelayMode: IrohRelayMode;\n\trelayUrls: string[];\n\twarning?: string;\n}\n\n/**\n * Resolves the effective relay configuration. Precedence: explicit service\n * config, then VOLT_IROH_RELAY_MODE / VOLT_IROH_RELAY_URLS, then the Volt\n * production relay fleet.\n */\nexport function resolveIrohRelayConfig(\n\tconfig: Pick<IrohDaemonServiceConfig, \"relayMode\" | \"relayUrls\">,\n\tenv: Record<string, string | undefined> = process.env,\n): ResolvedIrohRelayConfig {\n\tconst envUrls = parseRelayUrlsEnv(env.VOLT_IROH_RELAY_URLS);\n\tconst envModeValue = env.VOLT_IROH_RELAY_MODE?.trim();\n\tlet envMode: IrohRelayMode | undefined;\n\tlet warning: string | undefined;\n\tif (envModeValue !== undefined && envModeValue !== \"\") {\n\t\tif (envModeValue === \"disabled\" || envModeValue === \"development\" || envModeValue === \"production\") {\n\t\t\tenvMode = envModeValue;\n\t\t} else {\n\t\t\twarning = `ignoring invalid VOLT_IROH_RELAY_MODE \"${envModeValue}\" (expected disabled, development, or production)`;\n\t\t}\n\t}\n\tconst relayMode = config.relayMode ?? envMode ?? \"production\";\n\tconst configuredUrls = config.relayUrls ?? envUrls;\n\tconst relayUrls =\n\t\trelayMode === \"production\" ? (configuredUrls ?? VOLT_PRODUCTION_RELAY_URLS) : (configuredUrls ?? []);\n\treturn { relayMode, relayUrls, ...(warning === undefined ? {} : { warning }) };\n}\n\nfunction parseRelayUrlsEnv(value: string | undefined): string[] | undefined {\n\tif (value === undefined) {\n\t\treturn undefined;\n\t}\n\tconst urls = value\n\t\t.split(\",\")\n\t\t.map((url) => url.trim())\n\t\t.filter((url) => url.length > 0);\n\treturn urls.length > 0 ? urls : undefined;\n}\n\ninterface PendingPairRequest {\n\trequestId: string;\n\tconnectionId: string;\n\tsecretHash: string;\n\texpiresAt: number;\n\ttimer: NodeJS.Timeout;\n}\n\ninterface ClientConnectionRecord {\n\tconnectionId: string;\n\tclose(reason: string): void;\n}\n\ntype RelayPushDeliveryResult =\n\t| { ok: true; status: IrohRemotePushNotificationDeliveryStatus }\n\t| { ok: false; code: string; message: string };\n\nfunction isExpectedApplicationClose(error: unknown): boolean {\n\tconst message = error instanceof Error ? error.message : String(error);\n\treturn (\n\t\tmessage.includes(\"ConnectionLost(ApplicationClosed\") &&\n\t\tmessage.includes(\"error_code: 0\") &&\n\t\t(message.includes('reason: b\"done\"') ||\n\t\t\tmessage.includes(`reason: b\"${ACTIVE_REVOKE_CLOSE_REASON}\"`) ||\n\t\t\tmessage.includes(`reason: b\"${ACTIVE_REPLACE_CLOSE_REASON}\"`) ||\n\t\t\tmessage.includes(`reason: b\"${WORKSPACE_UNREGISTERED_CLOSE_REASON}\"`))\n\t);\n}\n\nfunction closeConnection(connection: IrohConnectionLike, reason: string): void {\n\ttry {\n\t\tconnection.close(0n, Array.from(Buffer.from(reason, \"utf8\")));\n\t} catch {\n\t\t// Transport closure is best-effort; registry/task cleanup must still run.\n\t}\n}\n\nasync function waitForConnectionClose(connection: IrohConnectionLike): Promise<void> {\n\tawait Promise.race([\n\t\tconnection.closed().catch(() => {}),\n\t\tnew Promise((resolveDelay) => {\n\t\t\tsetTimeout(resolveDelay, 500);\n\t\t}),\n\t]);\n}\n\nasync function withTimeout<T>(promise: Promise<T>, timeoutMs: number, message: string): Promise<T> {\n\tlet timeoutId: NodeJS.Timeout | undefined;\n\ttry {\n\t\treturn await Promise.race([\n\t\t\tpromise,\n\t\t\tnew Promise<never>((_, reject) => {\n\t\t\t\ttimeoutId = setTimeout(() => reject(new Error(message)), timeoutMs);\n\t\t\t}),\n\t\t]);\n\t} finally {\n\t\tclearTimeout(timeoutId);\n\t}\n}\n\nfunction closeIrohRemoteStream(stream: IrohBiStreamLike, _reason?: string): void {\n\tvoid Promise.resolve(stream.send.finish?.()).catch(() => {});\n\tvoid Promise.resolve(stream.recv.stop?.(0n)).catch(() => {});\n}\n\nfunction getRemoteTerminalReason(reason: string): string | undefined {\n\tif (reason === ACTIVE_REVOKE_CLOSE_REASON) {\n\t\treturn \"client_revoked\";\n\t}\n\tif (\n\t\treason === WORKSPACE_UNREGISTERED_CLOSE_REASON ||\n\t\treason === \"workspace_authorization_removed\" ||\n\t\treason === \"lease_transferred\" ||\n\t\treason === \"session_rekeyed_reconnect\"\n\t) {\n\t\treturn reason;\n\t}\n\treturn undefined;\n}\n\n/**\n * The daemon's Iroh host: owns the endpoint identity, pairing, revocation,\n * headless integrated runtimes, workspace/device streams, push dispatch, and\n * the accept loop. Ported from the dissolved src/remote/iroh-host.mjs.\n */\nexport function createIrohDaemonService(config: IrohDaemonServiceConfig = {}): VoltdServiceExtension {\n\treturn (services: VoltdRuntimeServices) => {\n\t\tconst log = services.logger.child(\"iroh\");\n\t\tconst loaded = loadIrohModule();\n\t\tif (!loaded.iroh) {\n\t\t\tlog(\"warn\", formatIrohLoadError(loaded.error));\n\t\t\treturn {\n\t\t\t\tasync handleRequest(connection, request) {\n\t\t\t\t\tif (request.type === \"pair_request\") {\n\t\t\t\t\t\tconnection.send({\n\t\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\t\tcode: \"iroh_unavailable\",\n\t\t\t\t\t\t\tmessage: formatIrohLoadError(loaded.error),\n\t\t\t\t\t\t});\n\t\t\t\t\t\treturn true;\n\t\t\t\t\t}\n\t\t\t\t\treturn false;\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\n\t\tconst service = new IrohDaemonService(loaded.iroh, services, config);\n\t\tvoid service.start();\n\t\treturn {\n\t\t\thandleRequest: (connection, request) => service.handleRequest(connection, request),\n\t\t\tonConnectionClosed: (connection) => service.onControlConnectionClosed(connection),\n\t\t\tonThemeChanged: () => service.onThemeChanged(),\n\t\t\tonKeepAwakeChanged: () => service.onKeepAwakeChanged(),\n\t\t\tstatusExtras: () => service.statusExtras(),\n\t\t\tadmitRelay: (relayId, relayToken, socket, bufferedRemainder) =>\n\t\t\t\tservice.admitRelay(relayId, relayToken, socket, bufferedRemainder),\n\t\t\tshutdown: () => service.shutdown(),\n\t\t};\n\t};\n}\n\nclass IrohDaemonService {\n\tprivate readonly iroh: IrohModuleLike;\n\tprivate readonly services: VoltdRuntimeServices;\n\tprivate readonly relayMode: IrohRelayMode;\n\tprivate readonly relayUrls: string[];\n\tprivate readonly relayAuthToken: string | undefined;\n\tprivate readonly relayConfigWarning: string | undefined;\n\tprivate readonly log: ReturnType<VoltdRuntimeServices[\"logger\"][\"child\"]>;\n\tprivate readonly stateManager: IrohRemoteHostStateManager;\n\tprivate readonly activeStreams = new IrohRemoteActiveStreamRegistry();\n\tprivate readonly clientConnections = new Map<string, Set<ClientConnectionRecord>>();\n\tprivate readonly connectionTasks = new Set<Promise<void>>();\n\tprivate readonly resourceGuard = new IrohRemoteResourceGuard();\n\tprivate readonly pendingPairRequests = new Map<string, PendingPairRequest>();\n\tprivate readonly sessionListCursors = new Map<string, RemoteSessionListCursorEntry>();\n\tprivate readonly pushRelayClient: IrohRemotePushRelayHttpClient;\n\tprivate readonly pushNotificationDeduper = new IrohRemoteInMemoryPushNotificationDeduper();\n\tprivate readonly trustStore: ProjectTrustStore;\n\tprivate readonly runtimes: IntegratedRuntimeRegistry;\n\tprivate readonly worktrees: WorktreeManager;\n\tprivate readonly worktreeRetention: WorktreeRetentionSweeper;\n\tprivate readonly leaseBroker: LeaseBroker;\n\tprivate readonly viewerFeeds: ViewerFeedRegistry;\n\tprivate readonly relays = new RelayRegistry();\n\tprivate endpoint: IrohEndpointLike | undefined;\n\tprivate engine: IrohRemoteHostEngine | undefined;\n\tprivate hostNodeId: string | undefined;\n\tprivate endpointTicket: string | undefined;\n\tprivate shuttingDown = false;\n\tprivate readonly ready: { promise: Promise<void>; resolve: () => void; reject: (error: unknown) => void };\n\n\tconstructor(iroh: IrohModuleLike, services: VoltdRuntimeServices, config: IrohDaemonServiceConfig) {\n\t\tthis.iroh = iroh;\n\t\tthis.services = services;\n\t\tconst relayConfig = resolveIrohRelayConfig(config);\n\t\tthis.relayMode = relayConfig.relayMode;\n\t\tthis.relayUrls = relayConfig.relayUrls;\n\t\tthis.relayConfigWarning = relayConfig.warning;\n\t\tconst envRelayAuthToken = process.env.VOLT_IROH_RELAY_AUTH_TOKEN?.trim();\n\t\tthis.relayAuthToken =\n\t\t\tconfig.relayAuthToken ??\n\t\t\t(envRelayAuthToken !== undefined && envRelayAuthToken !== \"\" ? envRelayAuthToken : undefined) ??\n\t\t\tservices.state.state.settings.relayAuthToken;\n\t\t// Persist a newly seen token so bare restarts keep authenticating against\n\t\t// the relay without re-exporting the env var.\n\t\tif (this.relayAuthToken !== undefined && this.relayAuthToken !== services.state.state.settings.relayAuthToken) {\n\t\t\tservices.state.updateSettings({ relayAuthToken: this.relayAuthToken });\n\t\t}\n\t\tthis.log = services.logger.child(\"iroh\");\n\t\tthis.stateManager = services.stateManager;\n\t\tthis.trustStore = new ProjectTrustStore(services.agentDir);\n\t\tthis.pushRelayClient = new IrohRemotePushRelayHttpClient({\n\t\t\tauthToken: config.pushRelayAuthToken ?? process.env.VOLT_PUSH_RELAY_AUTH_TOKEN,\n\t\t\tbaseUrl: config.pushRelayUrl ?? process.env.VOLT_PUSH_RELAY_URL,\n\t\t});\n\t\tthis.runtimes = new IntegratedRuntimeRegistry({\n\t\t\tagentDir: services.agentDir,\n\t\t\tprofile: config.profile,\n\t\t\tauditLogger: services.auditLogger,\n\t\t\tstateManager: this.stateManager,\n\t\t\tactiveStreams: this.activeStreams,\n\t\t\tdetachedRuntimeTtlMs: () => services.state.state.settings.detachedRuntimeTtlMs,\n\t\t\tgetToolPolicy: (workspace, clientAllowTools) =>\n\t\t\t\tresolveIrohRemoteRuntimeToolPolicy({\n\t\t\t\t\tclientAllowTools,\n\t\t\t\t\tworkspaceAllowTools: workspace.allowedTools,\n\t\t\t\t\tdaemonAllowTools: services.state.state.settings.allowTools,\n\t\t\t\t}),\n\t\t\tgetProjectTrustedForWorkspace: (workspace) =>\n\t\t\t\tresolveIrohRemoteWorkspaceProjectTrusted(workspace, { trustStore: this.trustStore }),\n\t\t\tsetClientLastSessionId: (nodeId, workspace, sessionId) =>\n\t\t\t\tthis.requireEngine().setClientLastSessionId(nodeId, workspace, sessionId),\n\t\t\tresolveWorktree: (workspaceName, hello, targetSessionId) =>\n\t\t\t\tthis.resolveConversationWorktree(workspaceName, hello, targetSessionId),\n\t\t\tresolveWorkingDirectory: (options) => this.resolveConversationWorkingDirectory(options),\n\t\t\tbindWorktreeSession: (workspaceName, worktreeId, sessionId) =>\n\t\t\t\tthis.worktrees.bindSession(workspaceName, worktreeId, sessionId),\n\t\t\tonRuntimeRekeyed: (workspaceName, previousSessionId, sessionId) =>\n\t\t\t\tthis.leaseBroker.rekey(workspaceName, previousSessionId, sessionId),\n\t\t\tonRuntimeDisposed: (entry, reason) => {\n\t\t\t\tthis.leaseBroker.onDaemonRuntimeDisposed(entry.workspaceName, entry.sessionId, reason);\n\t\t\t\tif (entry.worktreeId !== undefined) {\n\t\t\t\t\tthis.worktreeRetention.onRuntimeDisposed(entry.workspaceName, entry.worktreeId);\n\t\t\t\t}\n\t\t\t},\n\t\t});\n\t\tthis.worktrees = new WorktreeManager({\n\t\t\tagentDir: services.agentDir,\n\t\t\tstateManager: this.stateManager,\n\t\t\tauditLogger: services.auditLogger,\n\t\t\thasActiveRuntimeForSession: (workspaceName, sessionId) =>\n\t\t\t\tthis.runtimes.findOwner(workspaceName, sessionId) !== undefined,\n\t\t\tflushState: () => services.state.flush(),\n\t\t});\n\t\tthis.worktreeRetention = new WorktreeRetentionSweeper({\n\t\t\tmanager: this.worktrees,\n\t\t\tstateManager: this.stateManager,\n\t\t\tauditLogger: services.auditLogger,\n\t\t\tgetRetentionPolicy: () => resolveWorktreeCleanupPolicy(services.state.state.settings).retention,\n\t\t});\n\t\tthis.viewerFeeds = new ViewerFeedRegistry({\n\t\t\tsendTo: (connectionId, event) => services.controlServer.sendTo(connectionId, event),\n\t\t});\n\t\tthis.leaseBroker = new LeaseBroker({\n\t\t\tisRuntimeStreaming: (workspaceName, sessionId) =>\n\t\t\t\tthis.runtimes.findOwner(workspaceName, sessionId)?.runtime.session.isBusy ?? false,\n\t\t\twaitForRuntimeIdle: async (workspaceName, sessionId) => {\n\t\t\t\tawait this.runtimes.findOwner(workspaceName, sessionId)?.runtime.session.waitForIdle();\n\t\t\t},\n\t\t\tdisposeRuntime: async (workspaceName, sessionId, reason) => {\n\t\t\t\tconst owner = this.runtimes.findOwner(workspaceName, sessionId);\n\t\t\t\tif (owner) {\n\t\t\t\t\tawait this.runtimes.stopEntry(owner, reason);\n\t\t\t\t}\n\t\t\t},\n\t\t\tclosePhoneStreams: async (workspaceName, sessionId, reason) => {\n\t\t\t\tawait this.closeActiveStreamsForConversationKey(workspaceName, sessionId, reason);\n\t\t\t},\n\t\t\tcloseRelays: (record, reason) => {\n\t\t\t\tfor (const relayId of Array.from(record.relayIds)) {\n\t\t\t\t\tthis.relays.closeActive(relayId, reason);\n\t\t\t\t\t// Unredeemed offers must not linger until the 10s token expiry:\n\t\t\t\t\t// fail the phone's deferred handshake immediately so it retries\n\t\t\t\t\t// against the new lease owner.\n\t\t\t\t\tthis.abortPendingRelay(relayId, reason, \"relay offer cancelled; retry\", RELAY_OFFER_RETRY_AFTER_MS);\n\t\t\t\t}\n\t\t\t},\n\t\t\tonDrainStarted: (record, viewerFeedId) => {\n\t\t\t\tconst owner = this.runtimes.findOwner(record.workspaceName, record.sessionId);\n\t\t\t\tif (owner && record.tuiConnectionId) {\n\t\t\t\t\tthis.viewerFeeds.start(viewerFeedId, record.tuiConnectionId, owner.runtime.session);\n\t\t\t\t}\n\t\t\t},\n\t\t\tonDrainEnded: (_record, viewerFeedId, reason) => {\n\t\t\t\tthis.viewerFeeds.end(viewerFeedId, reason);\n\t\t\t},\n\t\t\taudit: (event) => {\n\t\t\t\tvoid this.logAudit({\n\t\t\t\t\ttype: event.type,\n\t\t\t\t\tworkspace: event.workspaceName,\n\t\t\t\t\tsuccess: true,\n\t\t\t\t\tdetails: { sessionId: event.sessionId, ...event.details },\n\t\t\t\t});\n\t\t\t},\n\t\t});\n\t\tlet readyResolve: () => void = () => {};\n\t\tlet readyReject: (error: unknown) => void = () => {};\n\t\tconst readyPromise = new Promise<void>((resolve, reject) => {\n\t\t\treadyResolve = resolve;\n\t\t\treadyReject = reject;\n\t\t});\n\t\treadyPromise.catch(() => {});\n\t\tthis.ready = { promise: readyPromise, resolve: readyResolve, reject: readyReject };\n\t}\n\n\tprivate requireEngine(): IrohRemoteHostEngine {\n\t\tif (!this.engine) {\n\t\t\tthrow new Error(\"iroh host engine is not ready\");\n\t\t}\n\t\treturn this.engine;\n\t}\n\n\tprivate async pruneWorktreesOnStart(): Promise<void> {\n\t\tif (!resolveWorktreeCleanupPolicy(this.services.state.state.settings).pruneOnStart) {\n\t\t\treturn;\n\t\t}\n\t\ttry {\n\t\t\tconst state = await this.stateManager.getState();\n\t\t\tconst workspacesWithRecords = new Set((state.worktrees ?? []).map((worktree) => worktree.workspaceName));\n\t\t\tfor (const workspace of state.workspaces) {\n\t\t\t\t// Skip workspaces with neither records nor checkout directories: no git\n\t\t\t\t// subprocesses or audit noise on the common no-worktrees start.\n\t\t\t\tif (\n\t\t\t\t\t!workspacesWithRecords.has(workspace.name) &&\n\t\t\t\t\t!existsSync(getWorkspaceWorktreesDir(this.services.agentDir, workspace.path))\n\t\t\t\t) {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\ttry {\n\t\t\t\t\tawait this.worktrees.prune(workspace);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tthis.log(\"warn\", \"worktree prune failed on start\", {\n\t\t\t\t\t\tworkspace: workspace.name,\n\t\t\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t} catch {\n\t\t\t// Startup prune is best-effort; a manual `volt remote worktree prune` covers it.\n\t\t}\n\t}\n\n\tprivate getResponseContext(): RemoteHostResponseContext {\n\t\treturn {\n\t\t\thostNodeId: this.hostNodeId,\n\t\t\trelayMode: this.relayMode,\n\t\t\t...(this.relayMode === \"production\" ? { relayUrls: this.relayUrls } : {}),\n\t\t};\n\t}\n\n\tprivate async isAuthorizationGrantCurrent(authorization: IrohRemoteClientAuthorizationSuccess): Promise<boolean> {\n\t\tconst client = await this.stateManager.getClient(authorization.client.nodeId);\n\t\treturn client?.rpcGrant.revision === authorization.client.rpcGrant.revision;\n\t}\n\n\tprivate getCommandContext(conversation?: {\n\t\tworkspaceName: string;\n\t\tworkspacePath?: string;\n\t\tentry: IntegratedRuntimeEntry;\n\t\tstreamEntry?: IrohRemoteActiveStreamEntry;\n\t}): ConversationCommandContext {\n\t\treturn {\n\t\t\tagentDir: this.services.agentDir,\n\t\t\tauditLogger: this.services.auditLogger,\n\t\t\thostEngine: this.engine,\n\t\t\tstateManager: this.stateManager,\n\t\t\tsessionListCursors: this.sessionListCursors,\n\t\t\tsessionListCursorTtlMs: REMOTE_SESSION_LIST_CURSOR_TTL_MS,\n\t\t\tlistRuntimeStates: (workspaceName) => {\n\t\t\t\tconst states = new Map<string, Exclude<LeaseState, \"unowned\">>();\n\t\t\t\tfor (const record of this.leaseBroker.list()) {\n\t\t\t\t\tif (record.workspaceName === workspaceName && record.state !== \"unowned\") {\n\t\t\t\t\t\tstates.set(record.sessionId, record.state);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\treturn states;\n\t\t\t},\n\t\t\tkeepAwake: this.services.keepAwake,\n\t\t\tonKeepAwakeSetting: (enabled) => this.services.state.updateSettings({ keepAwakeEnabled: enabled }),\n\t\t\twebSearchKey: this.services.webSearchKey,\n\t\t\tcreateWorktreeBackend: (workspace) => this.createWorktreeRpcBackend(workspace),\n\t\t\tonWorkspaceUnregistered: async (workspaceName) => {\n\t\t\t\t// Unregistering the conversation's own workspace keeps the requesting\n\t\t\t\t// stream and runtime alive so the response can still be delivered\n\t\t\t\t// (mirrors the workspace-management stream path).\n\t\t\t\tconst excludeOwn = conversation !== undefined && workspaceName === conversation.workspaceName;\n\t\t\t\tconst workspacePath = excludeOwn ? conversation.workspacePath : undefined;\n\t\t\t\tawait this.cleanupUnregisteredWorkspace(\n\t\t\t\t\tworkspaceName,\n\t\t\t\t\texcludeOwn\n\t\t\t\t\t\t? { streamEntry: conversation.streamEntry, runtimeEntry: conversation.entry, workspacePath }\n\t\t\t\t\t\t: {},\n\t\t\t\t);\n\t\t\t},\n\t\t\t...(conversation === undefined\n\t\t\t\t? {}\n\t\t\t\t: {\n\t\t\t\t\t\tisDraining: () =>\n\t\t\t\t\t\t\tthis.leaseBroker.isDraining(conversation.workspaceName, conversation.entry.sessionId),\n\t\t\t\t\t\tisSubagentSession: () =>\n\t\t\t\t\t\t\tconversation.entry.subagentId !== undefined || conversation.entry.parentSessionId !== undefined,\n\t\t\t\t\t}),\n\t\t};\n\t}\n\n\tasync start(): Promise<void> {\n\t\tlet endpoint: IrohEndpointLike | undefined;\n\t\tif (this.relayConfigWarning !== undefined) {\n\t\t\tthis.log(\"warn\", this.relayConfigWarning);\n\t\t}\n\t\t// Reconcile worktree records/checkouts before the endpoint starts taking\n\t\t// conversations (design §5.3 pruneOnStart; default on, quarantine-only).\n\t\tawait this.pruneWorktreesOnStart();\n\t\ttry {\n\t\t\tconst builder = this.iroh.Endpoint.builder();\n\t\t\tif (this.relayMode === \"development\") {\n\t\t\t\tthis.log(\n\t\t\t\t\t\"warn\",\n\t\t\t\t\t\"using public n0 relays (development only; unset VOLT_IROH_RELAY_MODE for the Volt relays)\",\n\t\t\t\t);\n\t\t\t\tthis.iroh.presetN0(builder);\n\t\t\t} else if (this.relayMode === \"production\") {\n\t\t\t\tif (this.relayUrls.length === 0) {\n\t\t\t\t\tthrow new Error(\"relayMode production requires relay URLs (config.relayUrls or VOLT_IROH_RELAY_URLS)\");\n\t\t\t\t}\n\t\t\t\tthis.iroh.presetN0DisableRelay(builder);\n\t\t\t\tif (this.relayAuthToken !== undefined) {\n\t\t\t\t\tconst relayMap = this.iroh.RelayMap.empty();\n\t\t\t\t\tfor (const url of this.relayUrls) {\n\t\t\t\t\t\trelayMap.insert({ url, authToken: this.relayAuthToken });\n\t\t\t\t\t}\n\t\t\t\t\tbuilder.relayMode(this.iroh.RelayMode.custom(relayMap));\n\t\t\t\t} else {\n\t\t\t\t\tbuilder.relayMode(this.iroh.RelayMode.customFromUrls(this.relayUrls));\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\tthis.iroh.presetMinimal(builder);\n\t\t\t\tbuilder.relayMode(this.iroh.RelayMode.disabled());\n\t\t\t}\n\t\t\tconst secretKey = this.services.state.state.irohSecretKey;\n\t\t\tif (secretKey) {\n\t\t\t\tbuilder.secretKey(secretKey);\n\t\t\t}\n\t\t\tbuilder.alpns([Array.from(Buffer.from(IROH_REMOTE_ALPN, \"utf8\"))]);\n\t\t\tendpoint = await builder.bind();\n\t\t\tif (!secretKey) {\n\t\t\t\tconst boundKey = endpoint.secretKey().toBytes();\n\t\t\t\tthis.services.state.setHostState({\n\t\t\t\t\t...this.services.state.getHostState(),\n\t\t\t\t\thostSecretKey: boundKey,\n\t\t\t\t});\n\t\t\t\t// Persist the freshly minted identity synchronously before the accept\n\t\t\t\t// loop starts taking pairings. A crash/SIGKILL inside the 250ms debounce\n\t\t\t\t// window would otherwise lose the key, and every phone paired against\n\t\t\t\t// this endpoint would be talking to a node id the daemon can never\n\t\t\t\t// reproduce on restart.\n\t\t\t\tawait this.services.state.flush();\n\t\t\t}\n\t\t\tif (this.relayMode !== \"disabled\") {\n\t\t\t\tawait endpoint.online();\n\t\t\t}\n\t\t\tthis.endpoint = endpoint;\n\t\t\tthis.hostNodeId = endpoint.id().toString();\n\t\t\tthis.endpointTicket = this.iroh.EndpointTicket.fromAddr(endpoint.addr()).toString();\n\t\t\tthis.engine = new IrohRemoteHostEngine({\n\t\t\t\tauditLogger: this.services.auditLogger,\n\t\t\t\tclassifyWorkspaceAvailability: getIrohRemoteWorkspaceAvailabilityStatus,\n\t\t\t\thostNodeId: this.hostNodeId,\n\t\t\t\trelayMode: this.relayMode,\n\t\t\t\t...(this.relayMode === \"production\" ? { relayUrls: this.relayUrls } : {}),\n\t\t\t\tstateManager: this.stateManager,\n\t\t\t\tvalidateWorkspace: async (workspace) =>\n\t\t\t\t\t(await getIrohRemoteWorkspaceAvailabilityStatus(workspace)) === \"available\",\n\t\t\t\tworkspace: { name: \"voltd\", path: this.services.agentDir },\n\t\t\t});\n\t\t\tthis.ready.resolve();\n\t\t\tthis.log(\"info\", `iroh endpoint online`, {\n\t\t\t\thostNodeId: this.hostNodeId,\n\t\t\t\trelayMode: this.relayMode,\n\t\t\t\t...(this.relayMode === \"production\" ? { relayUrls: this.relayUrls } : {}),\n\t\t\t});\n\t\t\tvoid this.acceptLoop(endpoint);\n\t\t} catch (error) {\n\t\t\tif (endpoint) {\n\t\t\t\t// bind() succeeded but a later start step (e.g. online()) failed before\n\t\t\t\t// the endpoint was adopted; close it so its QUIC socket is not leaked.\n\t\t\t\ttry {\n\t\t\t\t\tawait endpoint.close();\n\t\t\t\t} catch {}\n\t\t\t\tif (this.endpoint === endpoint) {\n\t\t\t\t\tthis.endpoint = undefined;\n\t\t\t\t}\n\t\t\t}\n\t\t\tthis.ready.reject(error);\n\t\t\tthis.log(\"error\", `failed to start iroh endpoint: ${error instanceof Error ? error.message : String(error)}`);\n\t\t}\n\t}\n\n\tprivate async acceptLoop(endpoint: IrohEndpointLike): Promise<void> {\n\t\twhile (!this.shuttingDown) {\n\t\t\tlet incoming: Awaited<ReturnType<IrohEndpointLike[\"acceptNext\"]>>;\n\t\t\ttry {\n\t\t\t\tincoming = await endpoint.acceptNext();\n\t\t\t} catch (error) {\n\t\t\t\tif (this.shuttingDown) {\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t\tthis.log(\"error\", `accept failed: ${error instanceof Error ? error.message : String(error)}`);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (!incoming) {\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tconst connectionAdmission = this.resourceGuard.tryAcquireConnectionTask();\n\t\t\tif (!connectionAdmission.ok) {\n\t\t\t\tlet refused = true;\n\t\t\t\ttry {\n\t\t\t\t\tawait incoming.refuse();\n\t\t\t\t} catch {\n\t\t\t\t\trefused = false;\n\t\t\t\t}\n\t\t\t\tawait this.logAudit({\n\t\t\t\t\ttype: \"iroh_security_connection_limit\",\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: \"incoming connection refused at daemon connection-task limit\",\n\t\t\t\t\tdetails: {\n\t\t\t\t\t\tlimit: connectionAdmission.limit,\n\t\t\t\t\t\trefused,\n\t\t\t\t\t\tscope: connectionAdmission.scope,\n\t\t\t\t\t},\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst task = this.handleConnection(incoming)\n\t\t\t\t.catch((error) => {\n\t\t\t\t\tif (!isExpectedApplicationClose(error)) {\n\t\t\t\t\t\tthis.log(\n\t\t\t\t\t\t\t\"error\",\n\t\t\t\t\t\t\t`connection error: ${error instanceof Error ? (error.stack ?? error.message) : String(error)}`,\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t})\n\t\t\t\t.finally(() => {\n\t\t\t\t\tthis.connectionTasks.delete(task);\n\t\t\t\t\tconnectionAdmission.lease.release();\n\t\t\t\t});\n\t\t\tthis.connectionTasks.add(task);\n\t\t}\n\t}\n\n\tprivate async handleConnection(\n\t\tincoming: NonNullable<Awaited<ReturnType<IrohEndpointLike[\"acceptNext\"]>>>,\n\t): Promise<void> {\n\t\tlet connection: IrohConnectionLike;\n\t\ttry {\n\t\t\tconst accepting = await incoming.accept();\n\t\t\tconnection = await accepting.connect();\n\t\t} catch {\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"iroh_security_transport_rejected\",\n\t\t\t\tsuccess: false,\n\t\t\t\terror: \"incoming transport handshake failed\",\n\t\t\t\tdetails: { phase: \"transport_connect\" },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\ttry {\n\t\t\tconnection.setMaxConcurrentBiStreams(BigInt(MAX_CONCURRENT_STREAMS_PER_CONNECTION));\n\t\t} catch {\n\t\t\tcloseConnection(connection, \"stream_limit_configuration_failed\");\n\t\t\tawait waitForConnectionClose(connection);\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"iroh_security_transport_rejected\",\n\t\t\t\tsuccess: false,\n\t\t\t\terror: \"connected transport could not enforce the inbound stream limit\",\n\t\t\t\tdetails: { phase: \"stream_limit_configuration\" },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tlet remoteId: string;\n\t\ttry {\n\t\t\tremoteId = connection.remoteId().toString();\n\t\t} catch {\n\t\t\tcloseConnection(connection, \"invalid_remote_identity\");\n\t\t\tawait waitForConnectionClose(connection);\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"iroh_security_transport_rejected\",\n\t\t\t\tsuccess: false,\n\t\t\t\terror: \"connected transport did not expose a valid remote identity\",\n\t\t\t\tdetails: { phase: \"remote_identity\" },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tconst nodeConnectionAdmission = this.resourceGuard.tryAcquireNodeConnection(remoteId);\n\t\tif (!nodeConnectionAdmission.ok) {\n\t\t\tcloseConnection(connection, \"node_connection_limit\");\n\t\t\tawait waitForConnectionClose(connection);\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"iroh_security_connection_limit\",\n\t\t\t\tclientNodeId: remoteId,\n\t\t\t\tsuccess: false,\n\t\t\t\terror: \"connection refused at per-node connection limit\",\n\t\t\t\tdetails: { limit: nodeConnectionAdmission.limit, scope: nodeConnectionAdmission.scope },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tconst unauthenticatedAdmission = this.resourceGuard.tryAcquireUnauthenticatedConnection(remoteId);\n\t\tif (!unauthenticatedAdmission.ok) {\n\t\t\tnodeConnectionAdmission.lease.release();\n\t\t\tcloseConnection(connection, \"unauthenticated_connection_limit\");\n\t\t\tawait waitForConnectionClose(connection);\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"iroh_security_unauthenticated_connection_limit\",\n\t\t\t\tclientNodeId: remoteId,\n\t\t\t\tsuccess: false,\n\t\t\t\terror: \"unauthenticated connection refused at admission limit\",\n\t\t\t\tdetails: { limit: unauthenticatedAdmission.limit, scope: unauthenticatedAdmission.scope },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tconst connectionId = `conn-${++activeConnectionSequence}`;\n\t\tconst removeClientConnection = this.registerClientConnection(remoteId, connection, connectionId);\n\t\tconst streamTasks = new Set<Promise<void>>();\n\t\tlet acceptedStreamCount = 0;\n\t\tlet closeRequested = false;\n\t\tlet authenticated = false;\n\t\tconst unauthenticatedTimer = setTimeout(() => {\n\t\t\tif (authenticated || closeRequested) return;\n\t\t\tcloseRequested = true;\n\t\t\tcloseConnection(connection, \"handshake_timeout\");\n\t\t\tvoid this.logAudit({\n\t\t\t\ttype: \"iroh_security_handshake_timeout\",\n\t\t\t\tclientNodeId: remoteId,\n\t\t\t\tsuccess: false,\n\t\t\t\terror: \"connection did not authenticate before the handshake deadline\",\n\t\t\t\tdetails: { connectionId, timeoutMs: IROH_UNAUTHENTICATED_CONNECTION_TIMEOUT_MS },\n\t\t\t});\n\t\t}, IROH_UNAUTHENTICATED_CONNECTION_TIMEOUT_MS);\n\t\tunauthenticatedTimer.unref?.();\n\n\t\tconst markAuthenticated = async (): Promise<boolean> => {\n\t\t\tif (authenticated) return true;\n\t\t\tif (closeRequested) return false;\n\t\t\tauthenticated = true;\n\t\t\tclearTimeout(unauthenticatedTimer);\n\t\t\tunauthenticatedAdmission.lease.release();\n\t\t\tthis.log(\"info\", `client connection opened: ${remoteId} (${connectionId})`);\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"client_connected\",\n\t\t\t\tclientNodeId: remoteId,\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: { connectionId },\n\t\t\t});\n\t\t\treturn true;\n\t\t};\n\n\t\tconst requestCloseWhenIdle = () => {\n\t\t\tif (closeRequested || acceptedStreamCount === 0 || streamTasks.size > 0) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tcloseRequested = true;\n\t\t\tcloseConnection(connection, \"done\");\n\t\t};\n\n\t\ttry {\n\t\t\twhile (!closeRequested) {\n\t\t\t\tconst stream = await (!authenticated\n\t\t\t\t\t? withTimeout(connection.acceptBi(), DEFAULT_IROH_REMOTE_HANDSHAKE_TIMEOUT_MS, \"handshake timed out\")\n\t\t\t\t\t: connection.acceptBi());\n\t\t\t\tacceptedStreamCount++;\n\t\t\t\tif (streamTasks.size >= MAX_CONCURRENT_STREAMS_PER_CONNECTION) {\n\t\t\t\t\t// One connection is holding too many concurrent streams open. Refuse\n\t\t\t\t\t// further work and close the connection rather than let\n\t\t\t\t\t// it exhaust daemon resources; the just-accepted stream is torn down\n\t\t\t\t\t// with the connection. A legitimate client never reaches this.\n\t\t\t\t\tcloseRequested = true;\n\t\t\t\t\tcloseConnection(connection, \"stream_limit_exceeded\");\n\t\t\t\t\tawait this.logAudit({\n\t\t\t\t\t\ttype: \"iroh_security_stream_limit\",\n\t\t\t\t\t\tclientNodeId: remoteId,\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: \"connection exceeded concurrent stream limit\",\n\t\t\t\t\t\tdetails: { connectionId, limit: MAX_CONCURRENT_STREAMS_PER_CONNECTION, scope: \"connection\" },\n\t\t\t\t\t});\n\t\t\t\t\tbreak;\n\t\t\t\t}\n\t\t\t\tconst streamAdmission = this.resourceGuard.tryAcquireActiveStream(remoteId);\n\t\t\t\tif (!streamAdmission.ok) {\n\t\t\t\t\tcloseIrohRemoteStream(stream, \"stream_limit_exceeded\");\n\t\t\t\t\tawait this.logAudit({\n\t\t\t\t\t\ttype: \"iroh_security_stream_limit\",\n\t\t\t\t\t\tclientNodeId: remoteId,\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: \"stream refused at daemon active-stream limit\",\n\t\t\t\t\t\tdetails: { connectionId, limit: streamAdmission.limit, scope: streamAdmission.scope },\n\t\t\t\t\t});\n\t\t\t\t\trequestCloseWhenIdle();\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst streamId = `stream-${++activeStreamSequence}`;\n\t\t\t\tconst task = this.handleConnectionStream(\n\t\t\t\t\tstream,\n\t\t\t\t\tconnection,\n\t\t\t\t\tremoteId,\n\t\t\t\t\tconnectionId,\n\t\t\t\t\tstreamId,\n\t\t\t\t\tmarkAuthenticated,\n\t\t\t\t)\n\t\t\t\t\t.catch(async (error) => {\n\t\t\t\t\t\tif (!isExpectedApplicationClose(error)) {\n\t\t\t\t\t\t\tif (authenticated) {\n\t\t\t\t\t\t\t\tthis.log(\n\t\t\t\t\t\t\t\t\t\"error\",\n\t\t\t\t\t\t\t\t\t`stream error: ${error instanceof Error ? (error.stack ?? error.message) : String(error)}`,\n\t\t\t\t\t\t\t\t);\n\t\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t\tawait this.logAudit({\n\t\t\t\t\t\t\t\t\ttype: \"iroh_security_transport_rejected\",\n\t\t\t\t\t\t\t\t\tclientNodeId: remoteId,\n\t\t\t\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\t\t\t\terror: \"unauthenticated stream failed\",\n\t\t\t\t\t\t\t\t\tdetails: { connectionId, phase: \"stream_handshake\" },\n\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t}\n\t\t\t\t\t})\n\t\t\t\t\t.finally(() => {\n\t\t\t\t\t\tstreamAdmission.lease.release();\n\t\t\t\t\t\tstreamTasks.delete(task);\n\t\t\t\t\t\trequestCloseWhenIdle();\n\t\t\t\t\t});\n\t\t\t\tstreamTasks.add(task);\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tif (acceptedStreamCount === 0 && authenticated) {\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\tif (acceptedStreamCount === 0 && !closeRequested) {\n\t\t\t\tawait this.logAudit({\n\t\t\t\t\ttype: \"iroh_security_handshake_timeout\",\n\t\t\t\t\tclientNodeId: remoteId,\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: \"connection closed or timed out before opening a handshake stream\",\n\t\t\t\t\tdetails: { connectionId, timeoutMs: DEFAULT_IROH_REMOTE_HANDSHAKE_TIMEOUT_MS },\n\t\t\t\t});\n\t\t\t}\n\t\t} finally {\n\t\t\tclearTimeout(unauthenticatedTimer);\n\t\t\tunauthenticatedAdmission.lease.release();\n\t\t\tnodeConnectionAdmission.lease.release();\n\t\t\tawait this.closeActiveStreamsForConnection(connectionId, \"connection_closed\");\n\t\t\tawait Promise.allSettled(streamTasks);\n\t\t\tremoveClientConnection();\n\t\t\tif (!closeRequested) {\n\t\t\t\tcloseConnection(connection, \"done\");\n\t\t\t}\n\t\t\tawait waitForConnectionClose(connection);\n\t\t\tif (authenticated) {\n\t\t\t\tthis.log(\"info\", `client connection closed: ${remoteId} (${connectionId})`);\n\t\t\t\tawait this.logAudit({\n\t\t\t\t\ttype: \"client_disconnected\",\n\t\t\t\t\tclientNodeId: remoteId,\n\t\t\t\t\tsuccess: true,\n\t\t\t\t\tdetails: { connectionId },\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n\n\tprivate async handleConnectionStream(\n\t\tstream: IrohBiStreamLike,\n\t\tconnection: IrohConnectionLike,\n\t\tremoteId: string,\n\t\tconnectionId: string,\n\t\tstreamId: string,\n\t\tmarkAuthenticated: () => Promise<boolean>,\n\t): Promise<void> {\n\t\tconst engine = this.requireEngine();\n\t\tconst handshakeAdmission = this.resourceGuard.tryAcquireHandshake(remoteId);\n\t\tif (!handshakeAdmission.ok) {\n\t\t\tcloseIrohRemoteStream(stream, \"handshake_limit_exceeded\");\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"iroh_security_handshake_limit\",\n\t\t\t\tclientNodeId: remoteId,\n\t\t\t\tsuccess: false,\n\t\t\t\terror: \"stream refused at concurrent handshake limit\",\n\t\t\t\tdetails: { connectionId, limit: handshakeAdmission.limit, scope: handshakeAdmission.scope },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tlet handshake: IrohRemoteHostHandshakeResult;\n\t\ttry {\n\t\t\thandshake = await engine.readHandshake(stream, remoteId, {\n\t\t\t\tchild: \"volt\",\n\t\t\t\tmaxLineBytes: DEFAULT_IROH_REMOTE_HANDSHAKE_MAX_LINE_BYTES,\n\t\t\t\ttimeoutMs: DEFAULT_IROH_REMOTE_HANDSHAKE_TIMEOUT_MS,\n\t\t\t\twriteSuccessResponse: false,\n\t\t\t});\n\t\t} finally {\n\t\t\thandshakeAdmission.lease.release();\n\t\t}\n\t\tif (!handshake.ok) {\n\t\t\tif (\n\t\t\t\thandshake.response.outcome === \"workspace_authorization_removed\" &&\n\t\t\t\ttypeof handshake.response.workspace === \"string\"\n\t\t\t) {\n\t\t\t\tawait this.closeWorkspaceAuthorizationRemovedStreams(remoteId, handshake.response.workspace);\n\t\t\t}\n\t\t\tawait Promise.resolve(stream.send.finish?.()).catch(() => {});\n\t\t\tawait Promise.resolve(stream.recv.stop?.(0n)).catch(() => {});\n\t\t\treturn;\n\t\t}\n\t\tif (!(await markAuthenticated())) {\n\t\t\tcloseIrohRemoteStream(stream, \"handshake_timeout\");\n\t\t\treturn;\n\t\t}\n\n\t\tconst streamCapability = getIrohRemoteStreamCapability({\n\t\t\tmode: handshake.hello.mode,\n\t\t\t...(handshake.hello.mode === \"workspaceManagement\"\n\t\t\t\t? { purpose: handshake.hello.workspaceManagement.purpose }\n\t\t\t\t: {}),\n\t\t});\n\t\tif (\n\t\t\tstreamCapability !== undefined &&\n\t\t\t!hasIrohRemoteRpcCapability(\n\t\t\t\tparseIrohRemoteRpcGrant(handshake.authorization.client.rpcGrant, \"client rpcGrant\"),\n\t\t\t\tstreamCapability,\n\t\t\t)\n\t\t) {\n\t\t\tawait writeIrohRemoteHandshakeResponse(\n\t\t\t\tstream.send,\n\t\t\t\tcreateIrohRemoteHandshakeFailure(`rpc_capability_denied: ${streamCapability}`, {\n\t\t\t\t\thostNodeId: this.hostNodeId,\n\t\t\t\t\tworkspace: handshake.authorization.workspace.name,\n\t\t\t\t}),\n\t\t\t);\n\t\t\tcloseIrohRemoteStream(stream, \"rpc_capability_denied\");\n\t\t\treturn;\n\t\t}\n\n\t\tthis.notifyPairingConsumed(handshake, remoteId);\n\n\t\tif (handshake.authorization.paired) {\n\t\t\tthis.log(\"info\", `paired client stream: ${handshake.authorization.client.label} (${remoteId}, ${streamId})`);\n\t\t}\n\n\t\tif (handshake.hello.mode === \"workspaceDiscovery\") {\n\t\t\tawait this.runWorkspaceDiscovery(stream, handshake, connection, connectionId, streamId);\n\t\t\treturn;\n\t\t}\n\t\tif (handshake.hello.mode === \"workspaceManagement\") {\n\t\t\tif (handshake.hello.workspaceManagement.purpose === \"manage_worktrees\") {\n\t\t\t\tawait this.runWorktreeManagement(stream, handshake, connection, connectionId, streamId);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tawait this.runWorkspaceManagement(stream, handshake, connection, connectionId, streamId);\n\t\t\treturn;\n\t\t}\n\t\tawait this.runIntegratedConversation(stream, handshake, connection, connectionId, streamId);\n\t}\n\n\t// ==========================================================================\n\t// Workspace streams\n\t// ==========================================================================\n\n\tprivate registerActiveStream(\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t\tsessionId: string,\n\t\tstream: IrohBiStreamLike,\n\t\tconnection: IrohConnectionLike,\n\t\tconnectionId: string,\n\t\tstreamId: string,\n\t\tdetails: { terminalSessionId?: string | undefined; sanitizerOverrides?: RemoteSanitizerOverrides } = {},\n\t): { entry: IrohRemoteActiveStreamEntry; remove: () => void } {\n\t\tconst entry: IrohRemoteActiveStreamEntry = {\n\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\tconnectionId,\n\t\t\tsessionId,\n\t\t\tstreamId,\n\t\t\tworkspaceName: authorization.workspace.name,\n\t\t\tclose: (reason: string) =>\n\t\t\t\tthis.closeStreamWithTerminal(stream, reason, {\n\t\t\t\t\tauthorization,\n\t\t\t\t\tsessionId: Object.hasOwn(details, \"terminalSessionId\") ? details.terminalSessionId : entry.sessionId,\n\t\t\t\t}),\n\t\t\tcloseConnection: (reason: string) => closeConnection(connection, reason),\n\t\t\twrite: (value: object) =>\n\t\t\t\twriteIrohRemoteJsonLine(stream.send, value, authorization, details.sanitizerOverrides ?? {}),\n\t\t};\n\t\tconst remove = this.activeStreams.register(entry);\n\t\treturn { entry, remove };\n\t}\n\n\t// ==========================================================================\n\t// iOS theme token push (§9.5) — flag off by default, capability gated\n\t// ==========================================================================\n\n\tprivate isThemeTokenPushEnabled(): boolean {\n\t\treturn this.services.state.state.settings.themeTokenPush === true || process.env.VOLT_HOST_THEME_TOKENS === \"1\";\n\t}\n\n\t/** Send the current sanitized theme tokens to one capable stream. */\n\tprivate pushThemeTokensToStream(entry: IrohRemoteActiveStreamEntry): void {\n\t\tif (!this.isThemeTokenPushEnabled() || !entry.capabilities?.has(HOST_THEME_TOKENS_FEATURE)) {\n\t\t\treturn;\n\t\t}\n\t\tconst frame = createHostThemeTokensFrame(getCurrentThemeName() ?? \"dark\", getResolvedThemeColors());\n\t\tvoid Promise.resolve(entry.write?.(frame)).catch(() => {});\n\t}\n\n\t/** Theme changed: fan the new tokens out to every capable phone stream. */\n\tonThemeChanged(): void {\n\t\tif (!this.isThemeTokenPushEnabled()) {\n\t\t\treturn;\n\t\t}\n\t\tfor (const entry of this.activeStreams.allEntries()) {\n\t\t\tthis.pushThemeTokensToStream(entry);\n\t\t}\n\t}\n\n\t/**\n\t * Keep-awake status changed (control toggle, phone toggle, or degradation):\n\t * fan the new state to every phone stream. Clients that ignore the frame are\n\t * fully supported, so no capability gating.\n\t */\n\tonKeepAwakeChanged(): void {\n\t\tconst frame = {\n\t\t\ttype: \"keep_awake_changed\",\n\t\t\tdata: { keepAwake: toRpcKeepAwakeStatus(this.services.keepAwake.status) },\n\t\t};\n\t\tfor (const entry of this.activeStreams.allEntries()) {\n\t\t\tvoid Promise.resolve(entry.write?.(frame)).catch(() => {});\n\t\t}\n\t}\n\n\tprivate async closeStreamWithTerminal(\n\t\tstream: IrohBiStreamLike,\n\t\treason: string,\n\t\tterminal: { authorization: IrohRemoteClientAuthorizationSuccess; sessionId: string | undefined },\n\t): Promise<void> {\n\t\tconst terminalReason = getRemoteTerminalReason(reason);\n\t\tif (terminalReason) {\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\t{\n\t\t\t\t\ttype: \"remote_terminal\",\n\t\t\t\t\treason: terminalReason,\n\t\t\t\t\tworkspace: terminal.authorization.workspace.name,\n\t\t\t\t\t...(terminal.sessionId === undefined ? {} : { sessionId: terminal.sessionId }),\n\t\t\t\t\thostNodeId: this.hostNodeId,\n\t\t\t\t},\n\t\t\t\tterminal.authorization,\n\t\t\t).catch(() => {});\n\t\t}\n\t\tcloseIrohRemoteStream(stream, reason);\n\t}\n\n\tprivate async runWorkspaceDiscovery(\n\t\tstream: IrohBiStreamLike,\n\t\thandshake: Extract<IrohRemoteHostHandshakeResult, { ok: true }>,\n\t\tconnection: IrohConnectionLike,\n\t\tconnectionId: string,\n\t\tstreamId: string,\n\t): Promise<void> {\n\t\tawait writeIrohRemoteHandshakeResponse(stream.send, handshake.response);\n\t\tconst activeStream = this.registerActiveStream(\n\t\t\thandshake.authorization,\n\t\t\tWORKSPACE_DISCOVERY_STREAM_SESSION_ID,\n\t\t\tstream,\n\t\t\tconnection,\n\t\t\tconnectionId,\n\t\t\tstreamId,\n\t\t\t{ terminalSessionId: undefined },\n\t\t);\n\t\ttry {\n\t\t\tawait runWorkspaceDiscoveryStream(\n\t\t\t\t{\n\t\t\t\t\tstream,\n\t\t\t\t\tinitialInput: handshake.initialInput,\n\t\t\t\t\tauthorization: handshake.authorization,\n\t\t\t\t\tisRpcGrantCurrent: () => this.isAuthorizationGrantCurrent(handshake.authorization),\n\t\t\t\t\tcloseStream: (reason) => closeIrohRemoteStream(stream, reason),\n\t\t\t\t},\n\t\t\t\t{ commandContext: this.getCommandContext() },\n\t\t\t);\n\t\t} finally {\n\t\t\tactiveStream.remove();\n\t\t}\n\t}\n\n\tprivate async runWorkspaceManagement(\n\t\tstream: IrohBiStreamLike,\n\t\thandshake: Extract<IrohRemoteHostHandshakeResult, { ok: true }>,\n\t\tconnection: IrohConnectionLike,\n\t\tconnectionId: string,\n\t\tstreamId: string,\n\t): Promise<void> {\n\t\tawait writeIrohRemoteHandshakeResponse(stream.send, handshake.response);\n\t\tconst activeStream = this.registerActiveStream(\n\t\t\thandshake.authorization,\n\t\t\tWORKSPACE_MANAGEMENT_STREAM_SESSION_ID,\n\t\t\tstream,\n\t\t\tconnection,\n\t\t\tconnectionId,\n\t\t\tstreamId,\n\t\t\t{ terminalSessionId: undefined },\n\t\t);\n\t\ttry {\n\t\t\tawait runWorkspaceManagementStream(\n\t\t\t\t{\n\t\t\t\t\tstream,\n\t\t\t\t\tinitialInput: handshake.initialInput,\n\t\t\t\t\tauthorization: handshake.authorization,\n\t\t\t\t\tisRpcGrantCurrent: () => this.isAuthorizationGrantCurrent(handshake.authorization),\n\t\t\t\t\tcloseStream: (reason) => {\n\t\t\t\t\t\tactiveStream.remove();\n\t\t\t\t\t\tcloseIrohRemoteStream(stream, reason);\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tauditLogger: this.services.auditLogger,\n\t\t\t\t\tcommandContext: this.getCommandContext(),\n\t\t\t\t\tunregisterWorkspace: async (workspaceName) => {\n\t\t\t\t\t\tlet removedWorkspace: Awaited<ReturnType<IrohRemoteHostStateManager[\"unregisterWorkspace\"]>>;\n\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\tremovedWorkspace = await this.stateManager.unregisterWorkspace(workspaceName);\n\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\tif (!isIrohRemoteWorkspaceHasWorktreesError(error)) {\n\t\t\t\t\t\t\t\tthrow error;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\treturn {\n\t\t\t\t\t\t\t\tok: false,\n\t\t\t\t\t\t\t\terror: IROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\t\t\t\t\t\t\t\tdetails: {\n\t\t\t\t\t\t\t\t\tworktreeCount: error.worktreeIds.length,\n\t\t\t\t\t\t\t\t\tworktreeIds: error.worktreeIds,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t};\n\t\t\t\t\t\t}\n\t\t\t\t\t\tif (!removedWorkspace) {\n\t\t\t\t\t\t\treturn { ok: false, error: \"workspace_unregistered\" };\n\t\t\t\t\t\t}\n\t\t\t\t\t\tthis.engine?.clearPairingSecretForWorkspace(workspaceName);\n\t\t\t\t\t\tconst { closedStreamCount, stoppedRuntimeCount } = await this.cleanupUnregisteredWorkspace(\n\t\t\t\t\t\t\tworkspaceName,\n\t\t\t\t\t\t\t{ streamEntry: activeStream.entry, workspacePath: removedWorkspace.path },\n\t\t\t\t\t\t);\n\t\t\t\t\t\treturn { ok: true, closedStreamCount, stoppedRuntimeCount };\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t);\n\t\t} finally {\n\t\t\tactiveStream.remove();\n\t\t}\n\t}\n\n\t/** Serve a manage_worktrees workspaceManagement stream (worktrees.v1). */\n\tprivate async runWorktreeManagement(\n\t\tstream: IrohBiStreamLike,\n\t\thandshake: Extract<IrohRemoteHostHandshakeResult, { ok: true }>,\n\t\tconnection: IrohConnectionLike,\n\t\tconnectionId: string,\n\t\tstreamId: string,\n\t): Promise<void> {\n\t\tawait writeIrohRemoteHandshakeResponse(stream.send, handshake.response);\n\t\tconst sanitizerOverrides: RemoteSanitizerOverrides = {\n\t\t\tadditionalRedactedPaths: [getWorktreesRoot(this.services.agentDir)],\n\t\t};\n\t\tconst activeStream = this.registerActiveStream(\n\t\t\thandshake.authorization,\n\t\t\tWORKSPACE_MANAGEMENT_STREAM_SESSION_ID,\n\t\t\tstream,\n\t\t\tconnection,\n\t\t\tconnectionId,\n\t\t\tstreamId,\n\t\t\t{ terminalSessionId: undefined, sanitizerOverrides },\n\t\t);\n\t\ttry {\n\t\t\tawait runWorktreeManagementStream(\n\t\t\t\t{\n\t\t\t\t\tstream,\n\t\t\t\t\tinitialInput: handshake.initialInput,\n\t\t\t\t\tauthorization: handshake.authorization,\n\t\t\t\t\tisRpcGrantCurrent: () => this.isAuthorizationGrantCurrent(handshake.authorization),\n\t\t\t\t\tcloseStream: (reason) => closeIrohRemoteStream(stream, reason),\n\t\t\t\t},\n\t\t\t\t{\n\t\t\t\t\tauditLogger: this.services.auditLogger,\n\t\t\t\t\tadditionalRedactedPaths: sanitizerOverrides.additionalRedactedPaths,\n\t\t\t\t\tworktrees: this.createWorktreeRpcBackend(handshake.authorization.workspace),\n\t\t\t\t},\n\t\t\t);\n\t\t} finally {\n\t\t\tactiveStream.remove();\n\t\t}\n\t}\n\n\t/** Backend for the worktree RPC helpers, bound to the stream's authorized workspace. */\n\tprivate createWorktreeRpcBackend(workspace: IrohRemoteWorkspace): IrohRemoteWorktreeRpcBackend {\n\t\treturn {\n\t\t\tcreateWorktree: async (_workspaceName, options) => {\n\t\t\t\tconst created = await this.worktrees.create(workspace, options);\n\t\t\t\tif (!created.ok) {\n\t\t\t\t\treturn {\n\t\t\t\t\t\tok: false,\n\t\t\t\t\t\terror: created.error,\n\t\t\t\t\t\t...(created.detail === undefined ? {} : { detail: created.detail }),\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\treturn { ok: true, worktree: created.worktree };\n\t\t\t},\n\t\t\tlistWorktrees: async () => ({ ok: true, worktrees: await this.worktrees.list(workspace) }),\n\t\t\tremoveWorktree: async (_workspaceName, worktreeId, force) =>\n\t\t\t\tthis.removeWorkspaceWorktree(workspace, worktreeId, force),\n\t\t};\n\t}\n\n\t/**\n\t * Runtime-aware worktree removal: refuses busy worktrees without force; with\n\t * force, closes bound phone streams and stops bound runtimes first.\n\t */\n\tprivate async removeWorkspaceWorktree(\n\t\tworkspace: IrohRemoteWorkspace,\n\t\tworktreeId: string,\n\t\tforce: boolean,\n\t): Promise<WorktreeResult<{ stoppedRuntimeCount: number; closedStreamCount: number }>> {\n\t\tconst record = await this.worktrees.findWorktree(workspace.name, worktreeId);\n\t\tif (!record) {\n\t\t\treturn { ok: false, error: \"worktree_not_found\" };\n\t\t}\n\t\tlet stoppedRuntimeCount = 0;\n\t\tlet closedStreamCount = 0;\n\t\tconst boundEntries = record.sessionIds\n\t\t\t.map((sessionId) => this.runtimes.findOwner(workspace.name, sessionId))\n\t\t\t.filter((entry): entry is IntegratedRuntimeEntry => entry !== undefined);\n\t\tif (boundEntries.length > 0) {\n\t\t\tif (!force) {\n\t\t\t\treturn { ok: false, error: \"worktree_busy\" };\n\t\t\t}\n\t\t\tfor (const entry of boundEntries) {\n\t\t\t\tclosedStreamCount += await this.closeActiveStreamsForConversationKey(\n\t\t\t\t\tworkspace.name,\n\t\t\t\t\tentry.sessionId,\n\t\t\t\t\t\"worktree_removed\",\n\t\t\t\t);\n\t\t\t\tawait this.runtimes.stopEntry(entry, \"worktree_removed\");\n\t\t\t\tstoppedRuntimeCount++;\n\t\t\t}\n\t\t}\n\t\tconst removed = await this.worktrees.remove(workspace, worktreeId, { force });\n\t\tif (!removed.ok) {\n\t\t\treturn removed;\n\t\t}\n\t\treturn { ok: true, stoppedRuntimeCount, closedStreamCount };\n\t}\n\n\t/**\n\t * Worktree resolution for conversation opens: explicit worktreeId on \"new\"\n\t * (must exist AND be on disk), persisted binding on resume (missing checkout\n\t * fails with session_unavailable). Availability is an open-time failure, not\n\t * an authorization failure.\n\t */\n\tprivate async resolveConversationWorktree(\n\t\tworkspaceName: string,\n\t\thello: IrohRemoteHello,\n\t\ttargetSessionId: string | undefined,\n\t): Promise<IrohRemoteWorkspaceWorktree | undefined> {\n\t\tif (hello.mode !== \"conversation\") {\n\t\t\treturn undefined;\n\t\t}\n\t\tif (hello.conversation.target === \"new\") {\n\t\t\tconst worktreeId = hello.conversation.worktreeId;\n\t\t\tif (worktreeId === undefined) {\n\t\t\t\treturn undefined;\n\t\t\t}\n\t\t\tconst worktree = await this.worktrees.findWorktree(workspaceName, worktreeId);\n\t\t\tif (!worktree || !existsSync(worktree.path)) {\n\t\t\t\tthrow createConversationOpenError(\"invalid_conversation_target\", \"unknown or unavailable worktree\", {\n\t\t\t\t\tworkspace: workspaceName,\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn worktree;\n\t\t}\n\t\tif (targetSessionId === undefined) {\n\t\t\treturn undefined;\n\t\t}\n\t\tconst worktree = await this.worktrees.resolveSessionWorktree(workspaceName, targetSessionId);\n\t\tif (worktree === undefined) {\n\t\t\treturn undefined;\n\t\t}\n\t\tif (!existsSync(worktree.path)) {\n\t\t\tthrow createConversationOpenError(\"session_unavailable\", \"worktree checkout is unavailable\", {\n\t\t\t\tworkspace: workspaceName,\n\t\t\t\tsessionId: targetSessionId,\n\t\t\t});\n\t\t}\n\t\treturn worktree;\n\t}\n\n\tprivate async resolveConversationWorkingDirectory(options: {\n\t\tworkspace: IrohRemoteWorkspace;\n\t\trootPath: string;\n\t\tworkingDirectory?: string;\n\t\tworktree?: IrohRemoteWorkspaceWorktree;\n\t}): Promise<WorkspaceDirectoryResolution> {\n\t\tif (options.worktree === undefined) {\n\t\t\tconst parentDirectory = await this.worktrees.validateWorkingDirectory(\n\t\t\t\toptions.workspace,\n\t\t\t\toptions.workingDirectory,\n\t\t\t);\n\t\t\tif (!parentDirectory.ok) {\n\t\t\t\tconst message = parentDirectory.detail ?? parentDirectory.error;\n\t\t\t\tthrow createConversationOpenError(\"invalid_conversation_target\", message, {\n\t\t\t\t\tworkspace: options.workspace.name,\n\t\t\t\t});\n\t\t\t}\n\t\t\treturn parentDirectory.directory;\n\t\t}\n\t\tconst worktreeDirectory = await this.worktrees.resolveWorktreeWorkingDirectory(\n\t\t\toptions.workspace,\n\t\t\toptions.worktree,\n\t\t\toptions.workingDirectory,\n\t\t);\n\t\tif (!worktreeDirectory.ok) {\n\t\t\tthrow createConversationOpenError(\n\t\t\t\t\"invalid_conversation_target\",\n\t\t\t\tworktreeDirectory.detail ?? worktreeDirectory.error,\n\t\t\t\t{\n\t\t\t\t\tworkspace: options.workspace.name,\n\t\t\t\t\tworktreeId: options.worktree.id,\n\t\t\t\t},\n\t\t\t);\n\t\t}\n\t\treturn worktreeDirectory.directory;\n\t}\n\n\t// ==========================================================================\n\t// Integrated conversation serving\n\t// ==========================================================================\n\n\tprivate createPushNotificationDispatcher(\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): IrohRemotePushNotificationDispatcher {\n\t\treturn new IrohRemotePushNotificationDispatcher({\n\t\t\tauditLogger: this.services.auditLogger,\n\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\tdeduper: this.pushNotificationDeduper,\n\t\t\trelayClient: this.pushRelayClient,\n\t\t\tstateManager: this.stateManager,\n\t\t\tworkspace: authorization.workspace.name,\n\t\t});\n\t}\n\n\tprivate async revokeClientPushTargets(client: IrohRemoteClient | undefined): Promise<void> {\n\t\tif ((client?.pushTargets?.length ?? 0) === 0) return;\n\t\ttry {\n\t\t\tconst summary = await revokeIrohRemoteClientPushTargets(client, this.pushRelayClient);\n\t\t\tconst complete = summary.failed === 0 && summary.skipped === 0;\n\t\t\tif (!complete) {\n\t\t\t\tthis.log(\"warn\", \"remote push-target cleanup incomplete after client revoke\", { ...summary });\n\t\t\t}\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"push_targets_revoked\",\n\t\t\t\tclientNodeId: client?.nodeId,\n\t\t\t\tsuccess: complete,\n\t\t\t\terror: complete ? undefined : \"remote push-target cleanup incomplete; relay TTL remains the lifetime bound\",\n\t\t\t\tdetails: { ...summary, remainingLifetimeBound: \"relay_target_ttl\" },\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tconst message = error instanceof Error ? error.message : String(error);\n\t\t\tthis.log(\"warn\", \"remote push-target cleanup failed after client revoke\", { error: message });\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"push_targets_revoked\",\n\t\t\t\tclientNodeId: client?.nodeId,\n\t\t\t\tsuccess: false,\n\t\t\t\terror: \"remote push-target cleanup failed; relay TTL remains the lifetime bound\",\n\t\t\t\tdetails: { remainingLifetimeBound: \"relay_target_ttl\" },\n\t\t\t});\n\t\t}\n\t}\n\n\tprivate async sendHandshakeError(stream: IrohBiStreamLike, error: unknown): Promise<void> {\n\t\tconst record = (error ?? {}) as Record<string, unknown>;\n\t\t// Plain {message, ...} records (abortPendingRelay, lease re-check) must not\n\t\t// stringify to \"[object Object]\".\n\t\tconst message =\n\t\t\terror instanceof Error ? error.message : typeof record.message === \"string\" ? record.message : String(error);\n\t\tconst outcome = typeof record.outcome === \"string\" ? record.outcome : undefined;\n\t\tconst workspace = typeof record.workspace === \"string\" ? record.workspace : undefined;\n\t\tconst sessionId = typeof record.sessionId === \"string\" ? record.sessionId : undefined;\n\t\tconst retryAfterMs = typeof record.retryAfterMs === \"number\" ? record.retryAfterMs : undefined;\n\t\tawait writeIrohRemoteHandshakeResponse(\n\t\t\tstream.send,\n\t\t\tcreateIrohRemoteHandshakeFailure(message, {\n\t\t\t\thostNodeId: this.hostNodeId,\n\t\t\t\t...(outcome === undefined ? {} : { outcome: outcome as never }),\n\t\t\t\t...(workspace === undefined ? {} : { workspace }),\n\t\t\t\t...(sessionId === undefined ? {} : { sessionId }),\n\t\t\t\t...(retryAfterMs === undefined ? {} : { retryAfterMs }),\n\t\t\t}),\n\t\t);\n\t\tawait Promise.resolve(stream.send.finish?.()).catch(() => {});\n\t\tawait Promise.resolve(stream.recv.stop?.(0n)).catch(() => {});\n\t}\n\n\tprivate async rejectDuplicateActiveConnection(\n\t\tstream: IrohBiStreamLike,\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t\tsessionId: string,\n\t\tsource = \"active_stream_registry\",\n\t): Promise<void> {\n\t\tconst error = \"duplicate conversation connection\";\n\t\tawait this.logAudit({\n\t\t\ttype: \"duplicate_connection_rejected\",\n\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\tworkspace: authorization.workspace.name,\n\t\t\tsuccess: false,\n\t\t\terror,\n\t\t\tdetails: {\n\t\t\t\tretryAfterMs: DUPLICATE_CONVERSATION_RETRY_AFTER_MS,\n\t\t\t\tsessionId,\n\t\t\t\tsource,\n\t\t\t},\n\t\t});\n\t\tawait writeIrohRemoteHandshakeResponse(\n\t\t\tstream.send,\n\t\t\tcreateIrohRemoteHandshakeFailure(error, {\n\t\t\t\thostNodeId: this.hostNodeId,\n\t\t\t\toutcome: \"duplicate_conversation_connection\",\n\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\tsessionId,\n\t\t\t\tretryAfterMs: DUPLICATE_CONVERSATION_RETRY_AFTER_MS,\n\t\t\t}),\n\t\t);\n\t\tawait Promise.resolve(stream.send.finish?.()).catch(() => {});\n\t\tawait Promise.resolve(stream.recv.stop?.(0n)).catch(() => {});\n\t}\n\n\tprivate async closeReplacedActiveStreams(\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t\treplacementStreamId: string,\n\t\treplacedEntries: IrohRemoteActiveStreamEntry[],\n\t): Promise<void> {\n\t\tif (replacedEntries.length === 0) {\n\t\t\treturn;\n\t\t}\n\t\tconst replacedStreamIds = replacedEntries.map((entry) => entry.streamId);\n\t\tfor (const entry of replacedEntries) {\n\t\t\tawait Promise.resolve(entry.close(ACTIVE_REPLACE_CLOSE_REASON)).catch(() => {});\n\t\t}\n\t\tawait this.closeIdleConnectionsForEntries(replacedEntries, ACTIVE_REPLACE_CLOSE_REASON);\n\t\tthis.log(\n\t\t\t\"info\",\n\t\t\t`client stream replaced: ${authorization.client.nodeId}/${authorization.workspace.name} (${replacedStreamIds.join(\", \")} -> ${replacementStreamId})`,\n\t\t);\n\t\tawait this.logAudit({\n\t\t\ttype: \"duplicate_connection_replaced\",\n\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\tworkspace: authorization.workspace.name,\n\t\t\tsuccess: true,\n\t\t\tdetails: {\n\t\t\t\tcloseReason: ACTIVE_REPLACE_CLOSE_REASON,\n\t\t\t\tclosedCount: replacedEntries.length,\n\t\t\t\treplacedStreamIds,\n\t\t\t\treplacementStreamId,\n\t\t\t\tsource: \"active_stream_registry\",\n\t\t\t},\n\t\t});\n\t}\n\n\t/**\n\t * Relay a phone conversation stream to the owning TUI (§5.6): the daemon\n\t * has already authenticated the phone; the TUI serves the framed RPC from\n\t * its in-process runtime over a dedicated relay unix connection.\n\t */\n\tprivate async relayConversationToTui(\n\t\tstream: IrohBiStreamLike,\n\t\thandshake: Extract<IrohRemoteHostHandshakeResult, { ok: true }>,\n\t\tconnectionId: string,\n\t\tstreamId: string,\n\t\ttargetSessionId: string,\n\t\ttuiConnectionId: string,\n\t): Promise<void> {\n\t\tconst authorization = handshake.authorization;\n\t\tconst workspaceName = authorization.workspace.name;\n\n\t\t// Duplicate handling per clientNodeId + key: duplicates already on this\n\t\t// Iroh connection are real duplicates; entries on older connections are\n\t\t// stale for this conversation and may be replaced independently of any\n\t\t// sibling subagent streams that opened first on the new connection.\n\t\tconst liveRelays = this.relays.activeForConversation(authorization.client.nodeId, workspaceName, targetSessionId);\n\t\tconst pendingRelays = this.relays.pendingForConversation(\n\t\t\tauthorization.client.nodeId,\n\t\t\tworkspaceName,\n\t\t\ttargetSessionId,\n\t\t);\n\t\tif (\n\t\t\tliveRelays.some((relay) => relay.connectionId === connectionId) ||\n\t\t\tpendingRelays.some((pending) => pending.connectionId === connectionId)\n\t\t) {\n\t\t\tawait this.rejectDuplicateActiveConnection(stream, authorization, targetSessionId, \"relay_registry\");\n\t\t\treturn;\n\t\t}\n\t\tfor (const relay of liveRelays) {\n\t\t\trelay.close(\"error\");\n\t\t}\n\t\t// Unredeemed offers for the same conversation on older connections are\n\t\t// superseded by this one: fail their deferred handshakes and settle them\n\t\t// (relay_closed to the TUI, lease bookkeeping) instead of leaking tasks.\n\t\tfor (const pending of pendingRelays) {\n\t\t\tthis.abortPendingRelay(pending.relayId, \"error\", \"relay offer superseded; retry\", RELAY_OFFER_RETRY_AFTER_MS);\n\t\t}\n\n\t\t// Resolve the concrete session target for the preamble (§3.7).\n\t\tconst target: IrohRemoteSessionTarget =\n\t\t\thandshake.hello.mode === \"conversation\" && handshake.hello.conversation.target === \"session\"\n\t\t\t\t? { kind: \"session\", sessionId: handshake.hello.conversation.sessionId }\n\t\t\t\t: { kind: \"last\", resumeSessionId: targetSessionId };\n\t\t// A worktree-bound session must resolve against the worktree cwd (the\n\t\t// parent-keyed session dir plus a non-matching cwd makes SessionManager.list\n\t\t// filter by header cwd, restricting resolution to that worktree's sessions).\n\t\tconst boundWorktree = await this.stateManager.findWorktreeForSession(workspaceName, targetSessionId);\n\t\tconst relayOwnerCapabilities = this.services.controlServer\n\t\t\t.connections()\n\t\t\t.find((controlConnection) => controlConnection.connectionId === tuiConnectionId)?.capabilities;\n\t\tif (!relayOwnerCapabilities?.has(CONTROL_RPC_GRANTS_CAPABILITY)) {\n\t\t\tawait this.sendHandshakeError(stream, {\n\t\t\t\tmessage: \"conversation owner is not grant-aware; retry\",\n\t\t\t\tretryAfterMs: RELAY_OFFER_RETRY_AFTER_MS,\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\t// Worktree-bound conversations are only relayed to TUIs that advertised the\n\t\t// worktrees control capability (an old TUI would sanitize with the parent\n\t\t// root and leak host paths), and never when the checkout has vanished.\n\t\tconst relayGate = evaluateWorktreeRelayGate(boundWorktree, relayOwnerCapabilities, CONTROL_WORKTREES_CAPABILITY);\n\t\tif (!relayGate.ok) {\n\t\t\tif (relayGate.reason === \"checkout_missing\") {\n\t\t\t\tawait this.sendHandshakeError(stream, {\n\t\t\t\t\tmessage: \"worktree checkout is unavailable\",\n\t\t\t\t\toutcome: \"session_unavailable\",\n\t\t\t\t\tworkspace: workspaceName,\n\t\t\t\t\tsessionId: targetSessionId,\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tawait this.sendHandshakeError(stream, {\n\t\t\t\tmessage: \"conversation owner cannot serve worktree sessions; retry\",\n\t\t\t\tretryAfterMs: RELAY_OFFER_RETRY_AFTER_MS,\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tlet resolvedTarget: Awaited<ReturnType<typeof resolveIrohRemoteSessionTarget>>;\n\t\ttry {\n\t\t\tresolvedTarget = await resolveIrohRemoteSessionTarget(\n\t\t\t\ttarget,\n\t\t\t\t{ name: workspaceName, path: authorization.workspace.path },\n\t\t\t\tcreateSessionManagerTargetStore(\n\t\t\t\t\tboundWorktree?.path ?? authorization.workspace.path,\n\t\t\t\t\tgetDefaultSessionDir(authorization.workspace.path, this.services.agentDir),\n\t\t\t\t\t{ listAll: true, preserveSessionCwd: true },\n\t\t\t\t),\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tawait this.sendHandshakeError(stream, error);\n\t\t\treturn;\n\t\t}\n\t\tconst resolvedSessionManager = resolvedTarget.sessionManager as { getCwd?: () => string };\n\t\tconst resolvedSessionCwd =\n\t\t\tresolvedSessionManager.getCwd?.() ?? boundWorktree?.path ?? authorization.workspace.path;\n\t\tconst relayWorkingDirectoryRelativeToRoot = getRelativeWorkingDirectoryForRoot(\n\t\t\tboundWorktree?.path ?? authorization.workspace.path,\n\t\t\tresolvedSessionCwd,\n\t\t);\n\t\tif (relayWorkingDirectoryRelativeToRoot === null) {\n\t\t\tawait this.sendHandshakeError(stream, {\n\t\t\t\tmessage: \"stored session working directory is outside the authorized workspace\",\n\t\t\t\toutcome: \"session_unavailable\",\n\t\t\t\tworkspace: workspaceName,\n\t\t\t\tsessionId: targetSessionId,\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tconst relayWorkingDirectory =\n\t\t\tboundWorktree === undefined\n\t\t\t\t? relayWorkingDirectoryRelativeToRoot\n\t\t\t\t: getRegisteredWorkingDirectoryForWorktree(boundWorktree, relayWorkingDirectoryRelativeToRoot);\n\n\t\t// Session-target resolution awaited; the lease can have moved (release,\n\t\t// rekey, connection loss) in the meantime. Re-check before minting so the\n\t\t// offer cannot go to a stale or dead owner.\n\t\tconst lease = this.leaseBroker.lookup(workspaceName, targetSessionId);\n\t\tif (lease?.state !== \"tui-owned\" || lease.tuiConnectionId !== tuiConnectionId) {\n\t\t\tawait this.sendHandshakeError(stream, {\n\t\t\t\tmessage: \"conversation lease owner changed; retry\",\n\t\t\t\tretryAfterMs: RELAY_OFFER_RETRY_AFTER_MS,\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\t// The target-resolution awaits above can race an access update or revoke.\n\t\t// Recheck immediately before the synchronous mint so stale authorization\n\t\t// cannot create a new pending offer after control-plane invalidation acks.\n\t\tif (!(await this.isAuthorizationGrantCurrent(authorization))) {\n\t\t\tawait this.sendHandshakeError(stream, { message: \"client access changed; reconnect\" });\n\t\t\treturn;\n\t\t}\n\n\t\t// A sibling stream can resolve/redeem while this stream awaits target\n\t\t// resolution. Re-check immediately before minting the offer.\n\t\tconst currentLiveRelays = this.relays.activeForConversation(\n\t\t\tauthorization.client.nodeId,\n\t\t\tworkspaceName,\n\t\t\ttargetSessionId,\n\t\t);\n\t\tconst currentPendingRelays = this.relays.pendingForConversation(\n\t\t\tauthorization.client.nodeId,\n\t\t\tworkspaceName,\n\t\t\ttargetSessionId,\n\t\t);\n\t\tif (\n\t\t\tcurrentLiveRelays.some((relay) => relay.connectionId === connectionId) ||\n\t\t\tcurrentPendingRelays.some((pending) => pending.connectionId === connectionId)\n\t\t) {\n\t\t\tawait this.rejectDuplicateActiveConnection(stream, authorization, targetSessionId, \"relay_registry\");\n\t\t\treturn;\n\t\t}\n\t\tfor (const relay of currentLiveRelays) {\n\t\t\trelay.close(\"error\");\n\t\t}\n\t\tfor (const pending of currentPendingRelays) {\n\t\t\tthis.abortPendingRelay(pending.relayId, \"error\", \"relay offer superseded; retry\", RELAY_OFFER_RETRY_AFTER_MS);\n\t\t}\n\n\t\tconst settled = new Promise<void>((resolveSettled) => {\n\t\t\tconst relay = this.relays.mint({\n\t\t\t\tworkspaceName,\n\t\t\t\tsessionId: targetSessionId,\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tconnectionId,\n\t\t\t\townerControlConnectionId: tuiConnectionId,\n\t\t\t\tstreamId,\n\t\t\t\tstream,\n\t\t\t\tpreamble: {\n\t\t\t\t\thandshake: {\n\t\t\t\t\t\thello: handshake.hello,\n\t\t\t\t\t\tresponse: handshake.response,\n\t\t\t\t\t\tinitialInput: Array.from(handshake.initialInput),\n\t\t\t\t\t},\n\t\t\t\t\tauthorization: {\n\t\t\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\t\t\tallowedTools: authorization.client.allowedTools,\n\t\t\t\t\t\trpcGrant: authorization.client.rpcGrant,\n\t\t\t\t\t\tworkspaceName,\n\t\t\t\t\t\tworkspacePath: authorization.workspace.path,\n\t\t\t\t\t\t...(boundWorktree === undefined\n\t\t\t\t\t\t\t? {}\n\t\t\t\t\t\t\t: {\n\t\t\t\t\t\t\t\t\tworktreeId: boundWorktree.id,\n\t\t\t\t\t\t\t\t\tworktreePath: boundWorktree.path,\n\t\t\t\t\t\t\t\t\t...(boundWorktree.sourceRootRelativePath === undefined\n\t\t\t\t\t\t\t\t\t\t? {}\n\t\t\t\t\t\t\t\t\t\t: { worktreeSourceRootRelativePath: boundWorktree.sourceRootRelativePath }),\n\t\t\t\t\t\t\t\t}),\n\t\t\t\t\t},\n\t\t\t\t\t// The phone verifies the saved host's node id in the handshake\n\t\t\t\t\t// response the TUI writes; without this the relay path fails the\n\t\t\t\t\t// client's identity check.\n\t\t\t\t\t...(this.hostNodeId === undefined ? {} : { hostNodeId: this.hostNodeId }),\n\t\t\t\t\trelayMode: this.relayMode,\n\t\t\t\t\t...(this.relayMode === \"production\" ? { relayUrls: this.relayUrls } : {}),\n\t\t\t\t\tconnectionId,\n\t\t\t\t\tstreamId,\n\t\t\t\t\tresolvedTarget: {\n\t\t\t\t\t\tsessionId: resolvedTarget.sessionId,\n\t\t\t\t\t\t...(resolvedTarget.sessionFilePath === undefined\n\t\t\t\t\t\t\t? {}\n\t\t\t\t\t\t\t: { sessionFilePath: resolvedTarget.sessionFilePath }),\n\t\t\t\t\t\tselection: resolvedTarget.selection,\n\t\t\t\t\t\t...(resolvedTarget.requestedSessionId === undefined\n\t\t\t\t\t\t\t? {}\n\t\t\t\t\t\t\t: { requestedSessionId: resolvedTarget.requestedSessionId }),\n\t\t\t\t\t\tworkspaceName: resolvedTarget.workspaceName,\n\t\t\t\t\t\tworkspacePath: resolvedTarget.workspacePath,\n\t\t\t\t\t\t...(boundWorktree === undefined ? {} : { worktreeId: boundWorktree.id }),\n\t\t\t\t\t\t...(relayWorkingDirectory === undefined ? {} : { workingDirectory: relayWorkingDirectory }),\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t\tsettle: (outcome) => {\n\t\t\t\t\tthis.leaseBroker.unregisterRelay(workspaceName, targetSessionId, relay.relayId);\n\t\t\t\t\tthis.services.controlServer.sendTo(tuiConnectionId, {\n\t\t\t\t\t\ttype: \"relay_closed\",\n\t\t\t\t\t\trelayId: relay.relayId,\n\t\t\t\t\t\treason: outcome.reason,\n\t\t\t\t\t});\n\t\t\t\t\tvoid this.logAudit({\n\t\t\t\t\t\ttype: \"relay_closed\",\n\t\t\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\t\t\tworkspace: workspaceName,\n\t\t\t\t\t\tsuccess: outcome.error === undefined,\n\t\t\t\t\t\terror: outcome.error,\n\t\t\t\t\t\tdetails: {\n\t\t\t\t\t\t\trelayId: relay.relayId,\n\t\t\t\t\t\t\treason: outcome.reason,\n\t\t\t\t\t\t\tbytesUp: outcome.bytesUp,\n\t\t\t\t\t\t\tbytesDown: outcome.bytesDown,\n\t\t\t\t\t\t\tdurationMs: outcome.durationMs,\n\t\t\t\t\t\t},\n\t\t\t\t\t});\n\t\t\t\t\tresolveSettled();\n\t\t\t\t},\n\t\t\t});\n\n\t\t\t// The offer is single-use with a 10s expiry; the phone's handshake\n\t\t\t// response is deferred until the TUI redeems the token.\n\t\t\tconst expiryTimer = setTimeout(() => {\n\t\t\t\tthis.abortPendingRelay(relay.relayId, \"error\", \"relay offer expired; retry\", RELAY_OFFER_RETRY_AFTER_MS);\n\t\t\t}, RELAY_TOKEN_TTL_MS);\n\t\t\texpiryTimer.unref?.();\n\n\t\t\tthis.leaseBroker.registerRelay(workspaceName, targetSessionId, relay.relayId);\n\t\t\tvoid this.logAudit({\n\t\t\t\ttype: \"relay_opened\",\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspace: workspaceName,\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: {\n\t\t\t\t\trelayId: relay.relayId,\n\t\t\t\t\tworkspaceName,\n\t\t\t\t\tsessionId: targetSessionId,\n\t\t\t\t\tconnectionId,\n\t\t\t\t\tstreamId,\n\t\t\t\t},\n\t\t\t});\n\t\t\tconst delivered = this.services.controlServer.sendTo(tuiConnectionId, {\n\t\t\t\ttype: \"relay_offer\",\n\t\t\t\trelayId: relay.relayId,\n\t\t\t\trelayToken: relay.relayToken,\n\t\t\t\tworkspaceName,\n\t\t\t\tsessionId: targetSessionId,\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tconnectionId,\n\t\t\t\tstreamId,\n\t\t\t});\n\t\t\tif (!delivered) {\n\t\t\t\t// The TUI connection vanished between the lease check and the offer;\n\t\t\t\t// fail the phone's deferred handshake now instead of after the TTL.\n\t\t\t\tthis.abortPendingRelay(\n\t\t\t\t\trelay.relayId,\n\t\t\t\t\t\"error\",\n\t\t\t\t\t\"relay offer undeliverable; retry\",\n\t\t\t\t\tRELAY_OFFER_RETRY_AFTER_MS,\n\t\t\t\t);\n\t\t\t}\n\t\t});\n\t\tawait settled;\n\t}\n\n\tprivate async runIntegratedConversation(\n\t\tstream: IrohBiStreamLike,\n\t\thandshake: Extract<IrohRemoteHostHandshakeResult, { ok: true }>,\n\t\tconnection: IrohConnectionLike,\n\t\tconnectionId: string,\n\t\tstreamId: string,\n\t): Promise<void> {\n\t\tconst authorization = handshake.authorization;\n\t\tconst targetSessionId = getResolvedTargetSessionId(handshake.hello, authorization);\n\t\tconst daemonAttach = this.leaseBroker.beginDaemonAttach(authorization.workspace.name, targetSessionId);\n\t\tif (daemonAttach.kind === \"relay\") {\n\t\t\tif (!targetSessionId) {\n\t\t\t\tawait this.sendHandshakeError(stream, {\n\t\t\t\t\tmessage: \"conversation lease owner changed; retry\",\n\t\t\t\t\tretryAfterMs: RELAY_OFFER_RETRY_AFTER_MS,\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tawait this.relayConversationToTui(\n\t\t\t\tstream,\n\t\t\t\thandshake,\n\t\t\t\tconnectionId,\n\t\t\t\tstreamId,\n\t\t\t\ttargetSessionId,\n\t\t\t\tdaemonAttach.tuiConnectionId,\n\t\t\t);\n\t\t\treturn;\n\t\t}\n\t\tif (daemonAttach.kind === \"retry\") {\n\t\t\tawait this.sendHandshakeError(stream, {\n\t\t\t\tmessage: \"conversation lease is draining; retry\",\n\t\t\t\tretryAfterMs: daemonAttach.retryAfterMs,\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tconst daemonAttachClaim: DaemonAttachClaim = daemonAttach.claim;\n\t\tlet entry: IntegratedRuntimeEntry;\n\t\tlet sessionSelection: Awaited<ReturnType<IntegratedRuntimeRegistry[\"getOrCreateEntry\"]>>[\"sessionSelection\"];\n\t\tlet createdRuntime = false;\n\t\ttry {\n\t\t\t({\n\t\t\t\tentry,\n\t\t\t\tsessionSelection,\n\t\t\t\tcreated: createdRuntime,\n\t\t\t} = await this.runtimes.getOrCreateEntry(\n\t\t\t\t{ hello: handshake.hello, response: handshake.response },\n\t\t\t\tauthorization,\n\t\t\t));\n\t\t} catch (error) {\n\t\t\tthis.leaseBroker.abortDaemonAttach(daemonAttachClaim);\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"runtime_failure\",\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\tsuccess: false,\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t\tdetails: { runtime: \"integrated-volt\" },\n\t\t\t});\n\t\t\tawait this.sendHandshakeError(stream, error);\n\t\t\treturn;\n\t\t}\n\n\t\tif (\n\t\t\tthis.activeStreams.hasConversationOnConnection(\n\t\t\t\tauthorization.client.nodeId,\n\t\t\t\tauthorization.workspace.name,\n\t\t\t\tentry.sessionId,\n\t\t\t\tconnectionId,\n\t\t\t)\n\t\t) {\n\t\t\tthis.leaseBroker.abortDaemonAttach(daemonAttachClaim);\n\t\t\tif (createdRuntime) {\n\t\t\t\tawait this.runtimes.cleanupUncommittedEntry(entry, sessionSelection);\n\t\t\t} else {\n\t\t\t\t// Reattach: getOrCreateEntry cancelled the detached-runtime retention\n\t\t\t\t// timer up front. Re-arm it (no-op unless the entry is still detached\n\t\t\t\t// with no timer) so aborting here never leaves the runtime unswept.\n\t\t\t\tawait this.runtimes.detachWithoutSubscriber(entry, \"reattach_superseded\");\n\t\t\t}\n\t\t\tawait this.rejectDuplicateActiveConnection(stream, authorization, entry.sessionId);\n\t\t\treturn;\n\t\t}\n\n\t\tlet activeStream: { entry: IrohRemoteActiveStreamEntry; remove: () => void } | undefined;\n\t\tlet subscriber: IntegratedRuntimeSubscriber | undefined;\n\t\tlet subscriberError: unknown;\n\t\tlet handshakeCommitted = false;\n\t\ttry {\n\t\t\tconst brokerCommit = this.leaseBroker.commitDaemonRuntime(\n\t\t\t\tdaemonAttachClaim,\n\t\t\t\tauthorization.workspace.name,\n\t\t\t\tentry.sessionId,\n\t\t\t);\n\t\t\tif (!brokerCommit.ok) {\n\t\t\t\tif (createdRuntime) {\n\t\t\t\t\tawait this.runtimes.cleanupUncommittedEntry(entry, sessionSelection);\n\t\t\t\t}\n\t\t\t\tif (\n\t\t\t\t\tbrokerCommit.reason === \"tui_owned\" &&\n\t\t\t\t\tbrokerCommit.tuiConnectionId &&\n\t\t\t\t\ttargetSessionId === entry.sessionId\n\t\t\t\t) {\n\t\t\t\t\tawait this.relayConversationToTui(\n\t\t\t\t\t\tstream,\n\t\t\t\t\t\thandshake,\n\t\t\t\t\t\tconnectionId,\n\t\t\t\t\t\tstreamId,\n\t\t\t\t\t\tentry.sessionId,\n\t\t\t\t\t\tbrokerCommit.tuiConnectionId,\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait this.sendHandshakeError(stream, {\n\t\t\t\t\tmessage: \"conversation lease owner changed; retry\",\n\t\t\t\t\tretryAfterMs: RELAY_OFFER_RETRY_AFTER_MS,\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tawait this.runtimes.commitEntry(entry, sessionSelection, authorization);\n\t\t\t} catch (error) {\n\t\t\t\tthis.leaseBroker.rollbackDaemonRuntimeCommit(\n\t\t\t\t\tauthorization.workspace.name,\n\t\t\t\t\tentry.sessionId,\n\t\t\t\t\tbrokerCommit.previousState,\n\t\t\t\t);\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\tif (\n\t\t\t\tthis.activeStreams.hasConversationOnConnection(\n\t\t\t\t\tauthorization.client.nodeId,\n\t\t\t\t\tauthorization.workspace.name,\n\t\t\t\t\tentry.sessionId,\n\t\t\t\t\tconnectionId,\n\t\t\t\t)\n\t\t\t) {\n\t\t\t\tthis.leaseBroker.rollbackDaemonRuntimeCommit(\n\t\t\t\t\tauthorization.workspace.name,\n\t\t\t\t\tentry.sessionId,\n\t\t\t\t\tbrokerCommit.previousState,\n\t\t\t\t);\n\t\t\t\tif (createdRuntime) {\n\t\t\t\t\tawait this.runtimes.cleanupUncommittedEntry(entry, sessionSelection);\n\t\t\t\t} else {\n\t\t\t\t\tawait this.runtimes.detachWithoutSubscriber(entry, \"reattach_superseded\");\n\t\t\t\t}\n\t\t\t\tawait this.rejectDuplicateActiveConnection(stream, authorization, entry.sessionId);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\thandshakeCommitted = true;\n\t\t\t// Worktree-bound conversations sanitize with the worktree checkout as the\n\t\t\t// root; the parent checkout and the worktrees root must ALSO redact (bash\n\t\t\t// output like `git worktree list` prints both).\n\t\t\tconst worktreeSanitizerOverrides: RemoteSanitizerOverrides | undefined =\n\t\t\t\tentry.worktreePath === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: {\n\t\t\t\t\t\t\tremoteWorkspacePath:\n\t\t\t\t\t\t\t\tentry.worktreeSourceRootRelativePath === undefined\n\t\t\t\t\t\t\t\t\t? \"/workspace\"\n\t\t\t\t\t\t\t\t\t: `/workspace/${entry.worktreeSourceRootRelativePath}`,\n\t\t\t\t\t\t\tworkspacePath: entry.worktreePath,\n\t\t\t\t\t\t\tadditionalRedactedPaths: [authorization.workspace.path, getWorktreesRoot(this.services.agentDir)],\n\t\t\t\t\t\t};\n\t\t\tif (!(await this.isAuthorizationGrantCurrent(authorization))) {\n\t\t\t\tawait this.runtimes.stopEntry(entry, \"access_updated_during_attach\");\n\t\t\t\tthrow new Error(\"client access changed during conversation attach; reconnect\");\n\t\t\t}\n\t\t\tconst replacedEntries = this.activeStreams.takeEntriesForConversationOnOtherConnections(\n\t\t\t\tauthorization.client.nodeId,\n\t\t\t\tauthorization.workspace.name,\n\t\t\t\tentry.sessionId,\n\t\t\t\tconnectionId,\n\t\t\t);\n\t\t\tactiveStream = this.registerActiveStream(\n\t\t\t\tauthorization,\n\t\t\t\tentry.sessionId,\n\t\t\t\tstream,\n\t\t\t\tconnection,\n\t\t\t\tconnectionId,\n\t\t\t\tstreamId,\n\t\t\t\tworktreeSanitizerOverrides === undefined ? {} : { sanitizerOverrides: worktreeSanitizerOverrides },\n\t\t\t);\n\t\t\tawait this.closeReplacedActiveStreams(authorization, streamId, replacedEntries);\n\t\t\tawait writeIrohRemoteHandshakeResponse(\n\t\t\t\tstream.send,\n\t\t\t\tcreateIntegratedConversationHandshakeResponse(\n\t\t\t\t\t{ hello: handshake.hello, response: handshake.response },\n\t\t\t\t\tauthorization,\n\t\t\t\t\tentry.sessionId,\n\t\t\t\t\tsessionSelection,\n\t\t\t\t\tthis.getResponseContext(),\n\t\t\t\t\tentry.worktreeId,\n\t\t\t\t\tentry.workingDirectory,\n\t\t\t\t),\n\t\t\t);\n\t\t\tsubscriber = await this.runtimes.attachSubscriber(entry);\n\t\t\tthis.leaseBroker.onDaemonRuntimeStreamCountChanged(\n\t\t\t\tauthorization.workspace.name,\n\t\t\t\tentry.sessionId,\n\t\t\t\tentry.subscribers.size,\n\t\t\t);\n\t\t\tawait this.runtimes.replayWorkflowEvents(activeStream.entry, entry);\n\t\t\tconst pushDispatcher = this.createPushNotificationDispatcher(authorization);\n\t\t\tawait runIrohRemoteRpcMode(entry.runtime, {\n\t\t\t\trpcGrant: authorization.client.rpcGrant,\n\t\t\t\tisRpcGrantCurrent: () => this.isAuthorizationGrantCurrent(authorization),\n\t\t\t\tdecorateOutbound: (value) => decorateRemoteHostState(value, authorization, this.getResponseContext()),\n\t\t\t\tdisposeRuntimeOnClose: false,\n\t\t\t\tnotificationDelivery: pushDispatcher,\n\t\t\t\tonClientCapabilitiesChanged: (features) => {\n\t\t\t\t\tconst streamEntry = activeStream?.entry;\n\t\t\t\t\tif (streamEntry) {\n\t\t\t\t\t\tstreamEntry.capabilities = new Set(features);\n\t\t\t\t\t\tthis.pushThemeTokensToStream(streamEntry);\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\tonSessionChanged: async (session) => {\n\t\t\t\t\tawait this.runtimes.handleSessionChanged(entry, activeStream?.entry, session, authorization);\n\t\t\t\t},\n\t\t\t\tonWorkflowEvent: async (event) => {\n\t\t\t\t\tawait this.runtimes.handleWorkflowEvent(\n\t\t\t\t\t\tentry,\n\t\t\t\t\t\tevent as unknown as Record<string, unknown>,\n\t\t\t\t\t\tactiveStream?.entry,\n\t\t\t\t\t);\n\t\t\t\t},\n\t\t\t\tregisterPushTarget: (args) => pushDispatcher.registerPushTarget(args),\n\t\t\t\tremoteCommandHandler: (command) =>\n\t\t\t\t\thandleIntegratedConversationRpcCommand(\n\t\t\t\t\t\tcommand as { type: string } & Record<string, unknown>,\n\t\t\t\t\t\tauthorization,\n\t\t\t\t\t\tthis.getCommandContext({\n\t\t\t\t\t\t\tworkspaceName: authorization.workspace.name,\n\t\t\t\t\t\t\tworkspacePath: authorization.workspace.path,\n\t\t\t\t\t\t\tentry,\n\t\t\t\t\t\t\tstreamEntry: activeStream?.entry,\n\t\t\t\t\t\t}),\n\t\t\t\t\t\tentry.runtime,\n\t\t\t\t\t),\n\t\t\t\tstream,\n\t\t\t\tinitialInput: handshake.initialInput,\n\t\t\t\tworkspaceName: authorization.workspace.name,\n\t\t\t\tworkspacePath: entry.worktreePath ?? authorization.workspace.path,\n\t\t\t\t...(worktreeSanitizerOverrides?.remoteWorkspacePath === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: { remoteWorkspacePath: worktreeSanitizerOverrides.remoteWorkspacePath }),\n\t\t\t\t...(worktreeSanitizerOverrides?.additionalRedactedPaths === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: { additionalRedactedPaths: worktreeSanitizerOverrides.additionalRedactedPaths }),\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tsubscriberError = error;\n\t\t\tif (!handshakeCommitted) {\n\t\t\t\tif (createdRuntime) {\n\t\t\t\t\tawait this.runtimes.cleanupUncommittedEntry(entry, sessionSelection);\n\t\t\t\t}\n\t\t\t\tawait this.sendHandshakeError(stream, error);\n\t\t\t\treturn;\n\t\t\t}\n\t\t} finally {\n\t\t\tif (subscriber) {\n\t\t\t\tawait this.runtimes.detachSubscriber(\n\t\t\t\t\tentry,\n\t\t\t\t\tsubscriber,\n\t\t\t\t\tsubscriberError ? \"transport_error\" : \"transport_closed\",\n\t\t\t\t\tsubscriberError,\n\t\t\t\t);\n\t\t\t\tthis.leaseBroker.onDaemonRuntimeStreamCountChanged(\n\t\t\t\t\tauthorization.workspace.name,\n\t\t\t\t\tentry.sessionId,\n\t\t\t\t\tentry.subscribers.size,\n\t\t\t\t);\n\t\t\t} else if (handshakeCommitted || !createdRuntime) {\n\t\t\t\t// handshakeCommitted: normal detach after the runtime ran. !createdRuntime:\n\t\t\t\t// a reattach that failed before attachSubscriber, whose retention timer\n\t\t\t\t// getOrCreateEntry cancelled up front — re-arm it so the runtime is still\n\t\t\t\t// swept at TTL instead of leaking forever. detachWithoutSubscriber no-ops\n\t\t\t\t// when the entry was replaced or still has other subscribers.\n\t\t\t\tawait this.runtimes.detachWithoutSubscriber(\n\t\t\t\t\tentry,\n\t\t\t\t\tsubscriberError ? \"transport_error\" : \"transport_closed\",\n\t\t\t\t);\n\t\t\t\t// Sync the lease's stream count to reality. Without this, a handshake\n\t\t\t\t// write that failed after commitDaemonRuntime but before attachSubscriber\n\t\t\t\t// leaves the lease stuck at daemon-active with no live stream until the\n\t\t\t\t// detached-runtime retention TTL expires.\n\t\t\t\tthis.leaseBroker.onDaemonRuntimeStreamCountChanged(\n\t\t\t\t\tauthorization.workspace.name,\n\t\t\t\t\tentry.sessionId,\n\t\t\t\t\tentry.subscribers.size,\n\t\t\t\t);\n\t\t\t}\n\t\t\tactiveStream?.remove();\n\t\t}\n\t}\n\n\t// ==========================================================================\n\t// Stream/connection registries\n\t// ==========================================================================\n\n\tprivate registerClientConnection(nodeId: string, connection: IrohConnectionLike, connectionId: string): () => void {\n\t\tconst record: ClientConnectionRecord = {\n\t\t\tconnectionId,\n\t\t\tclose: (reason: string) => closeConnection(connection, reason),\n\t\t};\n\t\tlet records = this.clientConnections.get(nodeId);\n\t\tif (!records) {\n\t\t\trecords = new Set();\n\t\t\tthis.clientConnections.set(nodeId, records);\n\t\t}\n\t\trecords.add(record);\n\t\tlet removed = false;\n\t\treturn () => {\n\t\t\tif (removed) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tremoved = true;\n\t\t\trecords.delete(record);\n\t\t\tif (records.size === 0 && this.clientConnections.get(nodeId) === records) {\n\t\t\t\tthis.clientConnections.delete(nodeId);\n\t\t\t}\n\t\t};\n\t}\n\n\tprivate closeClientConnectionsForClient(nodeId: string, reason: string): number {\n\t\tconst records = Array.from(this.clientConnections.get(nodeId) ?? []);\n\t\tif (records.length === 0) {\n\t\t\treturn 0;\n\t\t}\n\t\tthis.clientConnections.delete(nodeId);\n\t\tfor (const record of records) {\n\t\t\ttry {\n\t\t\t\trecord.close(reason);\n\t\t\t} catch {\n\t\t\t\t// Connection closure is best-effort; the transport may already be closing.\n\t\t\t}\n\t\t}\n\t\treturn records.length;\n\t}\n\n\tprivate async closeEntryConnection(entry: IrohRemoteActiveStreamEntry, reason: string): Promise<void> {\n\t\ttry {\n\t\t\tawait Promise.resolve(entry.closeConnection?.(reason));\n\t\t} catch {\n\t\t\t// Connection closure is best-effort. Stream teardown still drives task cleanup.\n\t\t}\n\t}\n\n\tprivate async closeIdleConnectionsForEntries(entries: IrohRemoteActiveStreamEntry[], reason: string): Promise<void> {\n\t\tconst closedConnectionIds = new Set<string>();\n\t\tfor (const entry of entries) {\n\t\t\tif (closedConnectionIds.has(entry.connectionId)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tif (this.activeStreams.entriesForConnection(entry.connectionId).length > 0) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tclosedConnectionIds.add(entry.connectionId);\n\t\t\tawait this.closeEntryConnection(entry, reason);\n\t\t}\n\t}\n\n\tprivate async closeActiveStreamsForConnection(connectionId: string, reason: string): Promise<void> {\n\t\tconst entries = this.activeStreams.entriesForConnection(connectionId);\n\t\tfor (const entry of entries) {\n\t\t\tthis.activeStreams.unregister(entry);\n\t\t\tawait Promise.resolve(entry.close(reason)).catch(() => {});\n\t\t}\n\t}\n\n\tprivate async closeActiveStreamsForConversationKey(\n\t\tworkspaceName: string,\n\t\tsessionId: string,\n\t\treason: string,\n\t): Promise<number> {\n\t\tconst entries = this.activeStreams.entriesForConversationKey(workspaceName, sessionId);\n\t\tfor (const entry of entries) {\n\t\t\tthis.activeStreams.unregister(entry);\n\t\t\tawait Promise.resolve(entry.close(reason)).catch(() => {});\n\t\t}\n\t\tawait this.closeIdleConnectionsForEntries(entries, reason);\n\t\treturn entries.length;\n\t}\n\n\tprivate async closeActiveStreamsForWorkspace(\n\t\tworkspaceName: string,\n\t\treason: string,\n\t\texcludedEntry?: IrohRemoteActiveStreamEntry,\n\t): Promise<number> {\n\t\tconst entries = this.activeStreams\n\t\t\t.entriesForWorkspaceName(workspaceName)\n\t\t\t.filter((entry) => entry !== excludedEntry);\n\t\tif (entries.length === 0) {\n\t\t\treturn 0;\n\t\t}\n\t\tfor (const entry of entries) {\n\t\t\tthis.activeStreams.unregister(entry);\n\t\t\tawait Promise.resolve(entry.close(reason)).catch(() => {});\n\t\t}\n\t\tawait this.closeIdleConnectionsForEntries(entries, reason);\n\t\treturn entries.length;\n\t}\n\n\t/**\n\t * Invalidate an unredeemed relay offer: fail the phone's deferred handshake\n\t * immediately and settle the relay (lease bookkeeping, relay_closed to the\n\t * TUI, audit).\n\t */\n\tprivate abortPendingRelay(relayId: string, reason: RelayCloseReason, message: string, retryAfterMs?: number): void {\n\t\tconst pending = this.relays.invalidatePending(relayId);\n\t\tif (!pending) {\n\t\t\treturn;\n\t\t}\n\t\tvoid this.sendHandshakeError(pending.stream, {\n\t\t\tmessage,\n\t\t\t...(retryAfterMs === undefined ? {} : { retryAfterMs }),\n\t\t}).finally(() => pending.settle({ reason, bytesUp: 0, bytesDown: 0, durationMs: 0 }));\n\t}\n\n\tprivate closeRelaysForWorkspace(workspaceName: string, excludeRelayIds?: ReadonlySet<string>): void {\n\t\tfor (const relay of this.relays.activeRelays()) {\n\t\t\tif (relay.workspaceName === workspaceName && !excludeRelayIds?.has(relay.relayId)) {\n\t\t\t\trelay.close(\"workspace_unregistered\");\n\t\t\t}\n\t\t}\n\t\tfor (const pending of this.relays.pendingRelays()) {\n\t\t\tif (pending.workspaceName === workspaceName && !excludeRelayIds?.has(pending.relayId)) {\n\t\t\t\tthis.abortPendingRelay(pending.relayId, \"workspace_unregistered\", \"workspace unregistered\");\n\t\t\t}\n\t\t}\n\t}\n\n\t/**\n\t * Post-unregister host cleanup shared by the control, workspace-management,\n\t * and conversation RPC unregister paths: closes phone streams, stops\n\t * runtimes, drops live activities, and closes TUI relays for the workspace.\n\t * Exclusions keep the requesting stream/runtime/relays alive so the\n\t * unregister response can still be delivered.\n\t */\n\tprivate async cleanupUnregisteredWorkspace(\n\t\tworkspaceName: string,\n\t\texclusions: {\n\t\t\tstreamEntry?: IrohRemoteActiveStreamEntry;\n\t\t\truntimeEntry?: IntegratedRuntimeEntry;\n\t\t\trelayIds?: ReadonlySet<string>;\n\t\t\t/** Enables a non-destructive audit of preserved checkout directories. */\n\t\t\tworkspacePath?: string;\n\t\t} = {},\n\t): Promise<{ closedStreamCount: number; stoppedRuntimeCount: number }> {\n\t\tconst closedStreamCount = await this.closeActiveStreamsForWorkspace(\n\t\t\tworkspaceName,\n\t\t\tWORKSPACE_UNREGISTERED_CLOSE_REASON,\n\t\t\texclusions.streamEntry,\n\t\t);\n\t\tconst stoppedRuntimeCount = await this.runtimes.stopForWorkspace(\n\t\t\tworkspaceName,\n\t\t\tWORKSPACE_UNREGISTERED_CLOSE_REASON,\n\t\t\texclusions.runtimeEntry,\n\t\t);\n\t\tawait this.stateManager.removeLiveActivitiesForWorkspace(workspaceName);\n\t\tthis.closeRelaysForWorkspace(workspaceName, exclusions.relayIds);\n\t\tif (exclusions.workspacePath !== undefined) {\n\t\t\tawait this.worktrees\n\t\t\t\t.cleanupUnregisteredWorkspace({ name: workspaceName, path: exclusions.workspacePath })\n\t\t\t\t.catch(() => {});\n\t\t}\n\t\treturn { closedStreamCount, stoppedRuntimeCount };\n\t}\n\n\tprivate async closeActiveStreamsForClientWorkspace(\n\t\tnodeId: string,\n\t\tworkspaceName: string,\n\t\treason: string,\n\t): Promise<number> {\n\t\tconst entries = this.activeStreams\n\t\t\t.entriesForClientNodeId(nodeId)\n\t\t\t.filter((entry) => entry.workspaceName === workspaceName);\n\t\tif (entries.length === 0) {\n\t\t\treturn 0;\n\t\t}\n\t\tfor (const entry of entries) {\n\t\t\tthis.activeStreams.unregister(entry);\n\t\t\tawait Promise.resolve(entry.close(reason)).catch(() => {});\n\t\t}\n\t\tawait this.closeIdleConnectionsForEntries(entries, reason);\n\t\treturn entries.length;\n\t}\n\n\tprivate async closeClientForAccessUpdate(nodeId: string): Promise<void> {\n\t\tconst runtimeEntries = collectClientAuthorityInvalidationRuntimes(\n\t\t\tthis.activeStreams,\n\t\t\tthis.runtimes.values(),\n\t\t\tnodeId,\n\t\t);\n\t\tconst entries = collectClientAuthorityInvalidationStreams(this.activeStreams, runtimeEntries, nodeId);\n\t\tfor (const entry of entries) {\n\t\t\tthis.activeStreams.unregister(entry);\n\t\t}\n\t\t// Invalidate transport and relay authority synchronously. Terminal writes\n\t\t// below are best-effort and must never keep old commands or buffered prompts\n\t\t// alive behind backpressure.\n\t\tthis.closeClientConnectionsForClient(nodeId, \"access_updated\");\n\t\tfor (const entry of entries) {\n\t\t\ttry {\n\t\t\t\tentry.closeConnection?.(\"access_updated\");\n\t\t\t} catch {}\n\t\t}\n\t\tfor (const relay of this.relays.activeRelays()) {\n\t\t\tif (relay.clientNodeId === nodeId) relay.close(\"error\");\n\t\t}\n\t\tfor (const pending of this.relays.pendingRelays()) {\n\t\t\tif (pending.clientNodeId === nodeId) {\n\t\t\t\tthis.abortPendingRelay(pending.relayId, \"error\", \"client access updated; reconnect\");\n\t\t\t}\n\t\t}\n\t\tconst streamClosures = Promise.allSettled(\n\t\t\tArray.from(entries, (entry) => Promise.resolve(entry.close(\"access_updated\"))),\n\t\t);\n\t\tawait Promise.allSettled(\n\t\t\tArray.from(runtimeEntries, (runtimeEntry) => this.runtimes.stopEntry(runtimeEntry, \"access_updated\")),\n\t\t);\n\t\tawait streamClosures;\n\t}\n\n\tprivate async closeWorkspaceAuthorizationRemovedStreams(nodeId: string, workspaceName: string): Promise<void> {\n\t\tconst reason = \"workspace_authorization_removed\";\n\t\tconst closedStreamCount = await this.closeActiveStreamsForClientWorkspace(nodeId, workspaceName, reason);\n\t\tconst stoppedRuntimeCount = await this.runtimes.stopForClientWorkspace(nodeId, workspaceName, reason);\n\t\tconst removedLiveActivityCount = await this.stateManager.removeClientLiveActivitiesForWorkspace(\n\t\t\tnodeId,\n\t\t\tworkspaceName,\n\t\t);\n\t\tawait this.logAudit({\n\t\t\ttype: \"workspace_authorization_removed\",\n\t\t\tclientNodeId: nodeId,\n\t\t\tworkspace: workspaceName,\n\t\t\tsuccess: closedStreamCount > 0 || stoppedRuntimeCount > 0 || removedLiveActivityCount > 0,\n\t\t\tdetails: {\n\t\t\t\tclosedStreamCount,\n\t\t\t\tremovedLiveActivityCount,\n\t\t\t\tsource: \"authorization_failure\",\n\t\t\t\tstoppedRuntimeCount,\n\t\t\t},\n\t\t});\n\t}\n\n\tasync closeActiveStreamsForClient(nodeId: string): Promise<{ closed: boolean; closedCount: number }> {\n\t\tconst runtimeEntries = collectClientAuthorityInvalidationRuntimes(\n\t\t\tthis.activeStreams,\n\t\t\tthis.runtimes.values(),\n\t\t\tnodeId,\n\t\t);\n\t\tconst entries = collectClientAuthorityInvalidationStreams(this.activeStreams, runtimeEntries, nodeId);\n\t\tfor (const entry of entries) {\n\t\t\tthis.activeStreams.unregister(entry);\n\t\t}\n\n\t\t// Match access-update ordering: synchronously make active and unredeemed TUI\n\t\t// relays unusable before any terminal write, runtime disposal, or control ack.\n\t\tconst activeRelays = this.relays.activeRelays().filter((relay) => relay.clientNodeId === nodeId);\n\t\tconst pendingRelays = this.relays.pendingRelays().filter((relay) => relay.clientNodeId === nodeId);\n\t\tfor (const relay of activeRelays) {\n\t\t\trelay.close(\"error\");\n\t\t}\n\t\tfor (const pending of pendingRelays) {\n\t\t\tthis.abortPendingRelay(pending.relayId, \"error\", \"client revoked; re-pair required\");\n\t\t}\n\n\t\tconst closedConnectionCount = this.closeClientConnectionsForClient(nodeId, ACTIVE_REVOKE_CLOSE_REASON);\n\t\tfor (const entry of entries) {\n\t\t\ttry {\n\t\t\t\tentry.closeConnection?.(ACTIVE_REVOKE_CLOSE_REASON);\n\t\t\t} catch {}\n\t\t}\n\t\tconst streamClosures = Promise.allSettled(\n\t\t\tArray.from(entries, (entry) => Promise.resolve(entry.close(ACTIVE_REVOKE_CLOSE_REASON))),\n\t\t);\n\t\tawait Promise.allSettled(\n\t\t\tArray.from(runtimeEntries, (runtimeEntry) => this.runtimes.stopEntry(runtimeEntry, \"client_revoked\")),\n\t\t);\n\t\tawait streamClosures;\n\t\tconst stoppedRuntimeCount = runtimeEntries.size;\n\t\tconst closed =\n\t\t\tentries.size > 0 || closedConnectionCount > 0 || activeRelays.length > 0 || pendingRelays.length > 0;\n\t\tif (entries.size === 0) {\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"active_connection_revoked\",\n\t\t\t\tclientNodeId: nodeId,\n\t\t\t\tsuccess: closed || stoppedRuntimeCount > 0,\n\t\t\t\terror: closed || stoppedRuntimeCount > 0 ? undefined : \"no active connection found\",\n\t\t\t\tdetails: {\n\t\t\t\t\tactiveRelayCount: activeRelays.length,\n\t\t\t\t\tcloseReason: ACTIVE_REVOKE_CLOSE_REASON,\n\t\t\t\t\tclosedConnectionCount,\n\t\t\t\t\tpendingRelayCount: pendingRelays.length,\n\t\t\t\t\tsource: \"control_channel\",\n\t\t\t\t\tstoppedRuntimeCount,\n\t\t\t\t},\n\t\t\t});\n\t\t\treturn { closed, closedCount: closedConnectionCount + activeRelays.length + pendingRelays.length };\n\t\t}\n\n\t\tfor (const entry of entries) {\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"active_connection_revoked\",\n\t\t\t\tclientNodeId: nodeId,\n\t\t\t\tworkspace: entry.workspaceName,\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: {\n\t\t\t\t\tactiveRelayCount: activeRelays.length,\n\t\t\t\t\tcloseReason: ACTIVE_REVOKE_CLOSE_REASON,\n\t\t\t\t\tclosedConnectionCount,\n\t\t\t\t\tpendingRelayCount: pendingRelays.length,\n\t\t\t\t\tsource: \"control_channel\",\n\t\t\t\t\tstreamId: entry.streamId,\n\t\t\t\t\tstoppedRuntimeCount,\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\t\treturn { closed: true, closedCount: entries.size + activeRelays.length + pendingRelays.length };\n\t}\n\n\t// ==========================================================================\n\t// Pairing over the control plane\n\t// ==========================================================================\n\n\tprivate notifyPairingConsumed(\n\t\thandshake: { ok: true; authorization: IrohRemoteClientAuthorizationSuccess },\n\t\tremoteId: string,\n\t): void {\n\t\tconst consumed = handshake.authorization.consumedPairingTicket;\n\t\tif (!consumed) {\n\t\t\treturn;\n\t\t}\n\t\tfor (const [requestId, pending] of this.pendingPairRequests) {\n\t\t\tif (pending.secretHash !== consumed.secretHash) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tclearTimeout(pending.timer);\n\t\t\tthis.pendingPairRequests.delete(requestId);\n\t\t\tthis.services.controlServer.sendTo(pending.connectionId, {\n\t\t\t\ttype: \"pairing_progress\",\n\t\t\t\trequestId,\n\t\t\t\tphase: \"completed\",\n\t\t\t\tclientNodeId: remoteId,\n\t\t\t});\n\t\t}\n\t}\n\n\tprivate async handlePairRequest(\n\t\tconnection: ControlConnection,\n\t\trequest: ControlRequest & { type: \"pair_request\" },\n\t): Promise<void> {\n\t\ttry {\n\t\t\tawait withTimeout(\n\t\t\t\tthis.ready.promise,\n\t\t\t\tIROH_ENDPOINT_READY_TIMEOUT_MS,\n\t\t\t\t\"Iroh endpoint did not become ready within 15s\",\n\t\t\t);\n\t\t} catch (error) {\n\t\t\tconnection.send({\n\t\t\t\ttype: \"error\",\n\t\t\t\tid: request.id,\n\t\t\t\tcode: \"iroh_unavailable\",\n\t\t\t\tmessage: error instanceof Error ? error.message : String(error),\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tconst engine = this.requireEngine();\n\t\tconst endpoint = this.endpoint;\n\t\tif (!endpoint || !this.endpointTicket) {\n\t\t\tconnection.send({ type: \"error\", id: request.id, code: \"iroh_unavailable\", message: \"endpoint not ready\" });\n\t\t\treturn;\n\t\t}\n\t\tconst workspaceName =\n\t\t\ttypeof (request as Record<string, unknown>).workspaceName === \"string\"\n\t\t\t\t? ((request as Record<string, unknown>).workspaceName as string)\n\t\t\t\t: undefined;\n\t\tconst requestId = randomUUID();\n\t\ttry {\n\t\t\tconst access =\n\t\t\t\trequest.access !== undefined\n\t\t\t\t\t? createIrohRemotePresetAccess(request.access)\n\t\t\t\t\t: request.allowedTools !== undefined && request.rpcCapabilities !== undefined\n\t\t\t\t\t\t? createIrohRemoteExplicitAccess(\n\t\t\t\t\t\t\t\trequest.allowedTools,\n\t\t\t\t\t\t\t\tparseIrohRemoteRpcCapabilities(request.rpcCapabilities),\n\t\t\t\t\t\t\t)\n\t\t\t\t\t\t: createIrohRemotePresetAccess(\"coding\");\n\t\t\tconst pairing = await engine.pair({\n\t\t\t\tallowTools: access.allowedTools,\n\t\t\t\trpcGrant: access.rpcGrant,\n\t\t\t\tirohTicket: this.endpointTicket,\n\t\t\t\tnodeId: this.hostNodeId,\n\t\t\t\trelayMode: this.relayMode,\n\t\t\t\t...(this.relayMode === \"production\" ? { relayUrls: this.relayUrls } : {}),\n\t\t\t\t...(this.relayMode === \"production\" && this.relayAuthToken !== undefined\n\t\t\t\t\t? { relayAuthToken: this.relayAuthToken }\n\t\t\t\t\t: {}),\n\t\t\t\t...(workspaceName === undefined ? {} : { workspace: workspaceName }),\n\t\t\t});\n\t\t\tconnection.send({ type: \"pair_started\", id: request.id, requestId });\n\t\t\tconnection.send({\n\t\t\t\ttype: \"pairing_progress\",\n\t\t\t\trequestId,\n\t\t\t\tphase: \"ticket\",\n\t\t\t\tticket: pairing.ticket,\n\t\t\t});\n\t\t\tconnection.send({ type: \"pairing_progress\", requestId, phase: \"waiting\" });\n\t\t\tconst ttlMs = Math.max(0, pairing.expiresAt - Date.now());\n\t\t\tconst timer = setTimeout(\n\t\t\t\t() => {\n\t\t\t\t\tif (!this.pendingPairRequests.delete(requestId)) {\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tthis.services.controlServer.sendTo(connection.connectionId, {\n\t\t\t\t\t\ttype: \"pairing_progress\",\n\t\t\t\t\t\trequestId,\n\t\t\t\t\t\tphase: \"failed\",\n\t\t\t\t\t\terror: \"pairing ticket expired\",\n\t\t\t\t\t});\n\t\t\t\t},\n\t\t\t\tttlMs > 0 ? ttlMs : DEFAULT_IROH_REMOTE_PAIRING_TICKET_TTL_MS,\n\t\t\t);\n\t\t\ttimer.unref?.();\n\t\t\tthis.pendingPairRequests.set(requestId, {\n\t\t\t\trequestId,\n\t\t\t\tconnectionId: connection.connectionId,\n\t\t\t\tsecretHash: hashIrohRemotePairingSecret(pairing.secret),\n\t\t\t\texpiresAt: pairing.expiresAt,\n\t\t\t\ttimer,\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tconnection.send({\n\t\t\t\ttype: \"error\",\n\t\t\t\tid: request.id,\n\t\t\t\tcode: \"pair_failed\",\n\t\t\t\tmessage: error instanceof Error ? error.message : String(error),\n\t\t\t});\n\t\t}\n\t}\n\n\t// ==========================================================================\n\t// Control plane integration\n\t// ==========================================================================\n\n\tasync handleRequest(connection: ControlConnection, request: ControlRequest): Promise<boolean> {\n\t\tswitch (request.type) {\n\t\t\tcase \"lease_acquire\": {\n\t\t\t\tconst outcome = await this.leaseBroker.acquireForTui({\n\t\t\t\t\tconnectionId: connection.connectionId,\n\t\t\t\t\tworkspaceName: request.workspaceName,\n\t\t\t\t\tsessionId: request.sessionId,\n\t\t\t\t\tforce: request.force,\n\t\t\t\t});\n\t\t\t\tif (outcome.kind === \"granted\") {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"lease_granted\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tworkspaceName: request.workspaceName,\n\t\t\t\t\t\tsessionId: request.sessionId,\n\t\t\t\t\t\thandoff: outcome.handoff,\n\t\t\t\t\t});\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tif (outcome.kind === \"denied\") {\n\t\t\t\t\tconnection.send({ type: \"lease_denied\", id: request.id, reason: outcome.reason });\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tconnection.send({ type: \"lease_pending\", id: request.id, viewerFeedId: outcome.viewerFeedId });\n\t\t\t\toutcome.granted.then(\n\t\t\t\t\t(granted) => {\n\t\t\t\t\t\tconnection.send({\n\t\t\t\t\t\t\ttype: \"lease_granted\",\n\t\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\t\tworkspaceName: request.workspaceName,\n\t\t\t\t\t\t\tsessionId: request.sessionId,\n\t\t\t\t\t\t\thandoff: granted.handoff,\n\t\t\t\t\t\t});\n\t\t\t\t\t},\n\t\t\t\t\t(error: unknown) => {\n\t\t\t\t\t\tconnection.send({\n\t\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\t\tcode: \"drain_failed\",\n\t\t\t\t\t\t\tmessage: error instanceof Error ? error.message : String(error),\n\t\t\t\t\t\t});\n\t\t\t\t\t},\n\t\t\t\t);\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase \"lease_release\": {\n\t\t\t\tconst result = this.leaseBroker.releaseFromTui(\n\t\t\t\t\tconnection.connectionId,\n\t\t\t\t\trequest.workspaceName,\n\t\t\t\t\trequest.sessionId,\n\t\t\t\t);\n\t\t\t\tif (!result.ok) {\n\t\t\t\t\tconnection.send({ type: \"error\", id: request.id, code: result.code, message: \"lease not held\" });\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase \"lease_rekey\": {\n\t\t\t\tthis.leaseBroker.rekey(request.workspaceName, request.oldSessionId, request.newSessionId);\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase \"viewer_subscribe\": {\n\t\t\t\tif (!this.viewerFeeds.subscribe(request.viewerFeedId, connection.connectionId)) {\n\t\t\t\t\tconnection.send({ type: \"error\", id: request.id, code: \"not_found\", message: \"unknown viewer feed\" });\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase \"viewer_unsubscribe\": {\n\t\t\t\tif (!this.viewerFeeds.unsubscribe(request.viewerFeedId, connection.connectionId)) {\n\t\t\t\t\tconnection.send({ type: \"error\", id: request.id, code: \"not_found\", message: \"unknown viewer feed\" });\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase \"viewer_abort\": {\n\t\t\t\tif (!(await this.viewerFeeds.abort(request.viewerFeedId, connection.connectionId))) {\n\t\t\t\t\tconnection.send({ type: \"error\", id: request.id, code: \"not_found\", message: \"unknown viewer feed\" });\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase \"pair_request\":\n\t\t\t\tawait this.handlePairRequest(connection, request);\n\t\t\t\treturn true;\n\t\t\tcase \"pair_cancel\": {\n\t\t\t\tconst pending = this.pendingPairRequests.get(request.requestId);\n\t\t\t\tif (!pending || pending.connectionId !== connection.connectionId) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"not_found\",\n\t\t\t\t\t\tmessage: \"pairing request not found\",\n\t\t\t\t\t});\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\ttry {\n\t\t\t\t\tawait this.cancelPendingPairing(request.requestId, pending);\n\t\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\t} catch (error) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"cancel_failed\",\n\t\t\t\t\t\tmessage: error instanceof Error ? error.message : String(error),\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase \"relay_rpc\": {\n\t\t\t\tconst result = await this.handleRelayRpc(connection, request);\n\t\t\t\tif (!result.ok) {\n\t\t\t\t\tconnection.send({ type: \"error\", id: request.id, code: result.code, message: result.message });\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tconnection.send({\n\t\t\t\t\ttype: \"relay_rpc_result\",\n\t\t\t\t\tid: request.id,\n\t\t\t\t\tresponse: result.response,\n\t\t\t\t\t...(result.workspaceMetadata === undefined ? {} : { workspaceMetadata: result.workspaceMetadata }),\n\t\t\t\t});\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase \"relay_notification_delivery\": {\n\t\t\t\tconst result = await this.handleRelayNotificationDelivery(connection, request);\n\t\t\t\tif (!result.ok) {\n\t\t\t\t\tconnection.send({ type: \"error\", id: request.id, code: result.code, message: result.message });\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tconnection.send({ type: \"relay_push_delivery_result\", id: request.id, status: result.status });\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase \"relay_live_activity_delivery\": {\n\t\t\t\tconst result = await this.handleRelayLiveActivityDelivery(connection, request);\n\t\t\t\tif (!result.ok) {\n\t\t\t\t\tconnection.send({ type: \"error\", id: request.id, code: result.code, message: result.message });\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tconnection.send({ type: \"relay_push_delivery_result\", id: request.id, status: result.status });\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase \"client_access_update\": {\n\t\t\t\tconst access =\n\t\t\t\t\trequest.access !== undefined\n\t\t\t\t\t\t? createIrohRemotePresetAccess(request.access)\n\t\t\t\t\t\t: createIrohRemoteExplicitAccess(\n\t\t\t\t\t\t\t\trequest.allowedTools ?? [],\n\t\t\t\t\t\t\t\tparseIrohRemoteRpcCapabilities(request.rpcCapabilities),\n\t\t\t\t\t\t\t);\n\t\t\t\tconst engine = this.engine;\n\t\t\t\tconst updated = engine\n\t\t\t\t\t? await engine.updateClientAccess(request.clientNodeId, request.expectedRevision, access)\n\t\t\t\t\t: await this.stateManager.updateClientAccess(request.clientNodeId, request.expectedRevision, access);\n\t\t\t\tif (!engine) {\n\t\t\t\t\tawait this.logAudit({\n\t\t\t\t\t\ttype: \"client_access_updated\",\n\t\t\t\t\t\tclientNodeId: request.clientNodeId,\n\t\t\t\t\t\tsuccess: updated.ok,\n\t\t\t\t\t\terror: updated.ok ? undefined : updated.reason,\n\t\t\t\t\t\tdetails: {\n\t\t\t\t\t\t\texpectedRevision: request.expectedRevision,\n\t\t\t\t\t\t\t...(updated.ok\n\t\t\t\t\t\t\t\t? { revision: updated.client.rpcGrant.revision }\n\t\t\t\t\t\t\t\t: { currentRevision: updated.currentRevision }),\n\t\t\t\t\t\t},\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t\tif (!updated.ok) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: updated.reason,\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\tupdated.reason === \"revision_conflict\"\n\t\t\t\t\t\t\t\t? `RPC grant revision conflict (current ${updated.currentRevision ?? \"unknown\"})`\n\t\t\t\t\t\t\t\t: updated.reason === \"revision_exhausted\"\n\t\t\t\t\t\t\t\t\t? \"RPC grant revision is exhausted; revoke and re-pair the client\"\n\t\t\t\t\t\t\t\t\t: \"client not found\",\n\t\t\t\t\t});\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tawait this.services.state.flush();\n\t\t\t\tawait this.closeClientForAccessUpdate(request.clientNodeId);\n\t\t\t\tconnection.send({\n\t\t\t\t\ttype: \"client_access_updated\",\n\t\t\t\t\tid: request.id,\n\t\t\t\t\tclient: {\n\t\t\t\t\t\tclientNodeId: updated.client.nodeId,\n\t\t\t\t\t\tlabel: updated.client.label,\n\t\t\t\t\t\tpairedAtMs: updated.client.pairedAt,\n\t\t\t\t\t\tlastSeenAtMs: updated.client.lastSeenAt,\n\t\t\t\t\t\tallowedTools: updated.client.allowedTools.length === 0 ? [] : updated.client.allowedTools.split(\",\"),\n\t\t\t\t\t\trpcGrant: updated.client.rpcGrant,\n\t\t\t\t\t},\n\t\t\t\t});\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase \"client_revoke\": {\n\t\t\t\tconst result = await this.requireEngineSafe();\n\t\t\t\tif (!result.ok) {\n\t\t\t\t\tconnection.send({ type: \"error\", id: request.id, code: \"iroh_unavailable\", message: result.error });\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tconst revocation = await result.engine.revokeClient(request.clientNodeId);\n\t\t\t\tif (!revocation.revoked) {\n\t\t\t\t\tconnection.send({ type: \"error\", id: request.id, code: \"not_found\", message: \"client not found\" });\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tawait this.closeActiveStreamsForClient(request.clientNodeId);\n\t\t\t\tawait this.revokeClientPushTargets(revocation.client);\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tcase \"workspace_unregister\": {\n\t\t\t\tlet removedWorkspace: Awaited<ReturnType<IrohRemoteHostStateManager[\"unregisterWorkspace\"]>>;\n\t\t\t\ttry {\n\t\t\t\t\tremovedWorkspace = await this.stateManager.unregisterWorkspace(request.name);\n\t\t\t\t} catch (error) {\n\t\t\t\t\tif (!isIrohRemoteWorkspaceHasWorktreesError(error)) {\n\t\t\t\t\t\tthrow error;\n\t\t\t\t\t}\n\t\t\t\t\tawait this.logAudit({\n\t\t\t\t\t\ttype: \"workspace_unregistered\",\n\t\t\t\t\t\tworkspace: request.name,\n\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\terror: IROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\t\t\t\t\t\tdetails: {\n\t\t\t\t\t\t\tsource: \"control\",\n\t\t\t\t\t\t\tworktreeCount: error.worktreeIds.length,\n\t\t\t\t\t\t\tworktreeIds: error.worktreeIds,\n\t\t\t\t\t\t},\n\t\t\t\t\t});\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: IROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\t\t\t\t\t\tmessage: error.message,\n\t\t\t\t\t});\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tif (!removedWorkspace) {\n\t\t\t\t\tconnection.send({\n\t\t\t\t\t\ttype: \"error\",\n\t\t\t\t\t\tid: request.id,\n\t\t\t\t\t\tcode: \"not_found\",\n\t\t\t\t\t\tmessage: `No registered workspace named ${request.name}`,\n\t\t\t\t\t});\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\tthis.engine?.clearPairingSecretForWorkspace(request.name);\n\t\t\t\tawait this.cleanupUnregisteredWorkspace(request.name, { workspacePath: removedWorkspace.path });\n\t\t\t\tawait this.logAudit({\n\t\t\t\t\ttype: \"workspace_unregistered\",\n\t\t\t\t\tworkspace: request.name,\n\t\t\t\t\tsuccess: true,\n\t\t\t\t\tdetails: { source: \"control\" },\n\t\t\t\t});\n\t\t\t\tconnection.send({ type: \"ok\", id: request.id });\n\t\t\t\treturn true;\n\t\t\t}\n\t\t\tdefault:\n\t\t\t\tif (isWorktreeControlRequest(request)) {\n\t\t\t\t\tawait handleWorktreeControlRequest(connection, request, {\n\t\t\t\t\t\tmanager: this.worktrees,\n\t\t\t\t\t\tstateManager: this.stateManager,\n\t\t\t\t\t\tremoveWorktree: (workspace, worktreeId, force) =>\n\t\t\t\t\t\t\tthis.removeWorkspaceWorktree(workspace, worktreeId, force),\n\t\t\t\t\t});\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\treturn false;\n\t\t}\n\t}\n\n\tprivate async createRelayDeliveryAuthorization(\n\t\tconnection: ControlConnection,\n\t\trequest: { clientNodeId: string; workspaceName: string; sessionId: string },\n\t): Promise<\n\t\t{ ok: true; authorization: IrohRemoteClientAuthorizationSuccess } | { ok: false; code: string; message: string }\n\t> {\n\t\tconst lease = this.leaseBroker.lookup(request.workspaceName, request.sessionId);\n\t\tif (!lease || lease.state !== \"tui-owned\" || lease.tuiConnectionId !== connection.connectionId) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\tcode: \"not_held\",\n\t\t\t\tmessage: \"relay lease is not held by this control connection\",\n\t\t\t};\n\t\t}\n\t\tconst client = await this.stateManager.getClient(request.clientNodeId);\n\t\tif (!client) {\n\t\t\treturn { ok: false, code: \"not_found\", message: \"paired client not found\" };\n\t\t}\n\t\tconst workspace = (await this.stateManager.getState()).workspaces.find(\n\t\t\t(candidate) => candidate.name === request.workspaceName,\n\t\t);\n\t\tif (!workspace) {\n\t\t\treturn { ok: false, code: \"not_found\", message: `no registered workspace named ${request.workspaceName}` };\n\t\t}\n\t\treturn {\n\t\t\tok: true,\n\t\t\tauthorization: {\n\t\t\t\tok: true,\n\t\t\t\tallowTools: client.allowedTools,\n\t\t\t\tclient,\n\t\t\t\tpaired: true,\n\t\t\t\tpairingSecretConsumed: false,\n\t\t\t\tworkspace,\n\t\t\t\tworkspaceNames: [workspace.name],\n\t\t\t\tworkspaces: [{ name: workspace.name, status: \"available\" }],\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate async handleRelayNotificationDelivery(\n\t\tconnection: ControlConnection,\n\t\trequest: Extract<ControlRequest, { type: \"relay_notification_delivery\" }>,\n\t): Promise<RelayPushDeliveryResult> {\n\t\tconst notification = request.notification;\n\t\tif (notification.sessionId !== undefined && notification.sessionId !== request.sessionId) {\n\t\t\treturn { ok: false, code: \"session_mismatch\", message: \"notification session does not match relay session\" };\n\t\t}\n\t\tif (notification.workspace !== undefined && notification.workspace !== request.workspaceName) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\tcode: \"workspace_mismatch\",\n\t\t\t\tmessage: \"notification workspace does not match relay workspace\",\n\t\t\t};\n\t\t}\n\t\tconst authorization = await this.createRelayDeliveryAuthorization(connection, request);\n\t\tif (!authorization.ok) {\n\t\t\treturn authorization;\n\t\t}\n\t\tconst scopedNotification: IrohRemotePushNotificationIntent = {\n\t\t\t...notification,\n\t\t\tsessionId: notification.sessionId ?? request.sessionId,\n\t\t\tworkspace: notification.workspace ?? request.workspaceName,\n\t\t};\n\t\ttry {\n\t\t\tconst status = await this.createPushNotificationDispatcher(authorization.authorization).deliverNotification(\n\t\t\t\tscopedNotification,\n\t\t\t);\n\t\t\treturn { ok: true, status };\n\t\t} catch {\n\t\t\treturn { ok: true, status: \"failed\" };\n\t\t}\n\t}\n\n\tprivate async handleRelayLiveActivityDelivery(\n\t\tconnection: ControlConnection,\n\t\trequest: Extract<ControlRequest, { type: \"relay_live_activity_delivery\" }>,\n\t): Promise<RelayPushDeliveryResult> {\n\t\tconst contentState = request.update.contentState;\n\t\tif (contentState.sessionID !== undefined && contentState.sessionID !== request.sessionId) {\n\t\t\treturn { ok: false, code: \"session_mismatch\", message: \"Live Activity session does not match relay session\" };\n\t\t}\n\t\tif (contentState.workspaceName !== undefined && contentState.workspaceName !== request.workspaceName) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\tcode: \"workspace_mismatch\",\n\t\t\t\tmessage: \"Live Activity workspace does not match relay workspace\",\n\t\t\t};\n\t\t}\n\t\tconst authorization = await this.createRelayDeliveryAuthorization(connection, request);\n\t\tif (!authorization.ok) {\n\t\t\treturn authorization;\n\t\t}\n\t\tconst scopedUpdate: IrohRemoteLiveActivityUpdateIntent = {\n\t\t\t...request.update,\n\t\t\tcontentState: {\n\t\t\t\t...contentState,\n\t\t\t\tsessionID: contentState.sessionID ?? request.sessionId,\n\t\t\t\tworkspaceName: contentState.workspaceName ?? request.workspaceName,\n\t\t\t},\n\t\t};\n\t\ttry {\n\t\t\tconst status = await this.createPushNotificationDispatcher(\n\t\t\t\tauthorization.authorization,\n\t\t\t).deliverLiveActivityUpdate(scopedUpdate);\n\t\t\treturn { ok: true, status };\n\t\t} catch {\n\t\t\treturn { ok: true, status: \"failed\" };\n\t\t}\n\t}\n\n\t/**\n\t * Execute a state-touching RPC command forwarded from a TUI-owned relay\n\t * against the daemon's real state (§5.6): push targets, live activities,\n\t * and workspace unregistration must land here, not in the TUI's in-memory\n\t * state copy.\n\t */\n\tprivate async handleRelayRpc(\n\t\tconnection: ControlConnection,\n\t\trequest: Extract<ControlRequest, { type: \"relay_rpc\" }>,\n\t): Promise<\n\t\t| {\n\t\t\t\tok: true;\n\t\t\t\tresponse: Record<string, unknown>;\n\t\t\t\tworkspaceMetadata?: { workspaceNames: string[]; workspaces: Array<{ name: string; status: string }> };\n\t\t  }\n\t\t| { ok: false; code: string; message: string }\n\t> {\n\t\tconst relayAuthorization = this.relays.authorizeRpc(request.relayId, connection.connectionId, request);\n\t\tif (!relayAuthorization.ok) {\n\t\t\treturn relayAuthorization;\n\t\t}\n\t\tconst command = request.command;\n\t\tif (!RELAY_RPC_COMMAND_TYPES.has(command.type)) {\n\t\t\treturn { ok: false, code: \"unsupported\", message: `unsupported relay rpc command: ${command.type}` };\n\t\t}\n\t\tconst client = await this.stateManager.getClient(request.clientNodeId);\n\t\tif (!client) {\n\t\t\treturn { ok: false, code: \"not_found\", message: \"paired client not found\" };\n\t\t}\n\t\tconst requiredCapabilities = getIrohRemoteRpcCommandCapabilities(command);\n\t\tif (requiredCapabilities === undefined) {\n\t\t\treturn { ok: false, code: \"unsupported\", message: `unsupported relay rpc command: ${command.type}` };\n\t\t}\n\t\tconst missingCapability = getMissingIrohRemoteRpcCapability(client.rpcGrant, requiredCapabilities);\n\t\tif (missingCapability !== undefined) {\n\t\t\treturn {\n\t\t\t\tok: true,\n\t\t\t\tresponse: {\n\t\t\t\t\t...createIrohRemoteRpcCapabilityDeniedResponse(\n\t\t\t\t\t\tgetRpcResponseId(command),\n\t\t\t\t\t\tcommand.type,\n\t\t\t\t\t\tmissingCapability,\n\t\t\t\t\t),\n\t\t\t\t},\n\t\t\t};\n\t\t}\n\t\tconst workspace = (await this.stateManager.getState()).workspaces.find(\n\t\t\t(candidate) => candidate.name === request.workspaceName,\n\t\t);\n\t\tif (!workspace) {\n\t\t\treturn { ok: false, code: \"not_found\", message: `no registered workspace named ${request.workspaceName}` };\n\t\t}\n\t\tconst authorization: IrohRemoteClientAuthorizationSuccess = {\n\t\t\tok: true,\n\t\t\tallowTools: client.allowedTools,\n\t\t\tclient,\n\t\t\tpaired: true,\n\t\t\tpairingSecretConsumed: false,\n\t\t\tworkspace,\n\t\t\tworkspaceNames: [workspace.name],\n\t\t\tworkspaces: [{ name: workspace.name, status: \"available\" }],\n\t\t};\n\t\tconst responseId = getRpcResponseId(command);\n\t\tif (command.type === \"set_keep_awake\" || command.type === \"get_keep_awake\") {\n\t\t\tconst response = createKeepAwakeRpcResponse(command, this.getCommandContext());\n\t\t\treturn { ok: true, response: response as Record<string, unknown> };\n\t\t}\n\t\tif (command.type === \"set_web_search_key\" || command.type === \"get_web_search_status\") {\n\t\t\tconst response = createWebSearchKeyRpcResponse(command, this.getCommandContext());\n\t\t\treturn { ok: true, response: response as Record<string, unknown> };\n\t\t}\n\t\tif (command.type === \"register_push_target\") {\n\t\t\ttry {\n\t\t\t\tconst data = await this.createPushNotificationDispatcher(authorization).registerPushTarget(command.args);\n\t\t\t\treturn { ok: true, response: createRpcSuccessResponse(responseId, command.type, { ...data }) };\n\t\t\t} catch (error) {\n\t\t\t\treturn {\n\t\t\t\t\tok: true,\n\t\t\t\t\tresponse: {\n\t\t\t\t\t\t...createIrohRemoteRpcErrorResponse(\n\t\t\t\t\t\t\tresponseId,\n\t\t\t\t\t\t\tcommand.type,\n\t\t\t\t\t\t\terror instanceof Error ? error.message : String(error),\n\t\t\t\t\t\t),\n\t\t\t\t\t},\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\t\tif (command.type === \"register_live_activity\") {\n\t\t\tconst response = await createRemoteRegisterLiveActivityRpcResponse(\n\t\t\t\tcommand,\n\t\t\t\tauthorization,\n\t\t\t\tthis.getCommandContext(),\n\t\t\t\trequest.sessionId,\n\t\t\t);\n\t\t\treturn { ok: true, response: response as Record<string, unknown> };\n\t\t}\n\t\tif (command.type === \"unregister_live_activity\") {\n\t\t\tconst response = await createRemoteUnregisterLiveActivityRpcResponse(\n\t\t\t\tcommand,\n\t\t\t\tauthorization,\n\t\t\t\tthis.getCommandContext(),\n\t\t\t\trequest.sessionId,\n\t\t\t);\n\t\t\treturn { ok: true, response: response as Record<string, unknown> };\n\t\t}\n\t\t// unregister_workspace: run against the daemon state with the shared host\n\t\t// cleanup, keeping the requesting conversation's own relays open so the\n\t\t// response can still be delivered over them.\n\t\tconst excludeRelayIds = new Set(\n\t\t\tthis.relays\n\t\t\t\t.activeForConversation(request.clientNodeId, request.workspaceName, request.sessionId)\n\t\t\t\t.map((relay) => relay.relayId),\n\t\t);\n\t\tconst context: ConversationCommandContext = {\n\t\t\t...this.getCommandContext(),\n\t\t\tonWorkspaceUnregistered: async (workspaceName) => {\n\t\t\t\tawait this.cleanupUnregisteredWorkspace(workspaceName, {\n\t\t\t\t\trelayIds: excludeRelayIds,\n\t\t\t\t\tworkspacePath: workspace.path,\n\t\t\t\t});\n\t\t\t},\n\t\t};\n\t\tconst response = await handleRemoteHostRpcCommand(command, authorization, context);\n\t\tif (!response) {\n\t\t\treturn { ok: false, code: \"unsupported\", message: `unsupported relay rpc command: ${command.type}` };\n\t\t}\n\t\treturn {\n\t\t\tok: true,\n\t\t\tresponse: response as Record<string, unknown>,\n\t\t\tworkspaceMetadata: {\n\t\t\t\tworkspaceNames: [...authorization.workspaceNames],\n\t\t\t\tworkspaces: authorization.workspaces.map((entry) => ({ name: entry.name, status: entry.status })),\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate async requireEngineSafe(): Promise<\n\t\t{ ok: true; engine: IrohRemoteHostEngine } | { ok: false; error: string }\n\t> {\n\t\ttry {\n\t\t\tawait withTimeout(\n\t\t\t\tthis.ready.promise,\n\t\t\t\tIROH_ENDPOINT_READY_TIMEOUT_MS,\n\t\t\t\t\"Iroh endpoint did not become ready within 15s\",\n\t\t\t);\n\t\t} catch (error) {\n\t\t\treturn { ok: false, error: error instanceof Error ? error.message : String(error) };\n\t\t}\n\t\tif (!this.engine) {\n\t\t\treturn { ok: false, error: \"iroh host engine is not ready\" };\n\t\t}\n\t\treturn { ok: true, engine: this.engine };\n\t}\n\n\tprivate async cancelPendingPairing(\n\t\trequestId: string,\n\t\tpending: { secretHash: string; timer: NodeJS.Timeout },\n\t): Promise<void> {\n\t\tclearTimeout(pending.timer);\n\t\tif (this.engine) {\n\t\t\tawait this.engine.cancelPairingSecretByHash(pending.secretHash);\n\t\t} else {\n\t\t\tawait this.stateManager.removePendingPairingTicket(pending.secretHash);\n\t\t}\n\t\tawait this.services.state.flush();\n\t\tthis.pendingPairRequests.delete(requestId);\n\t}\n\n\tonControlConnectionClosed(connection: ControlConnection): void {\n\t\tthis.leaseBroker.releaseAllForConnection(connection.connectionId);\n\t\tfor (const [requestId, pending] of this.pendingPairRequests) {\n\t\t\tif (pending.connectionId !== connection.connectionId) continue;\n\t\t\tvoid this.cancelPendingPairing(requestId, pending).catch((error) => {\n\t\t\t\tthis.log(\"warn\", \"failed to cancel pairing after control disconnect\", {\n\t\t\t\t\trequestId,\n\t\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t\t});\n\t\t\t});\n\t\t}\n\t}\n\n\tadmitRelay(relayId: string, relayToken: string, socket: Socket, bufferedRemainder: Buffer): boolean {\n\t\treturn this.relays.admit(relayId, relayToken, socket, bufferedRemainder);\n\t}\n\n\tstatusExtras(): { leases: ControlLeaseStatus[]; phoneConnections: number; relayCount: number } {\n\t\tconst leases: ControlLeaseStatus[] = this.leaseBroker.list().map((record) => ({\n\t\t\tworkspaceName: record.workspaceName,\n\t\t\tsessionId: record.sessionId,\n\t\t\tstate: record.state,\n\t\t\trelayCount: record.relayIds.size,\n\t\t\tstreamCount: record.streamCount,\n\t\t}));\n\t\treturn { leases, phoneConnections: this.clientConnections.size, relayCount: this.relays.activeCount() };\n\t}\n\n\tasync shutdown(): Promise<void> {\n\t\tthis.shuttingDown = true;\n\t\tthis.worktreeRetention.dispose();\n\t\t// 1. Stop accepting: close the endpoint accept loop lazily; new hellos are\n\t\t//    rejected by the control server's shutting-down gate. Close relays and\n\t\t//    unredeemed offers up front with the dedicated host_shutdown reason —\n\t\t//    otherwise they die with the endpoint and TUIs see a misleading\n\t\t//    relay_closed{error}.\n\t\tfor (const relay of this.relays.activeRelays()) {\n\t\t\trelay.close(\"host_shutdown\");\n\t\t}\n\t\tfor (const pending of this.relays.pendingRelays()) {\n\t\t\tthis.abortPendingRelay(pending.relayId, \"host_shutdown\", \"daemon shutting down\");\n\t\t}\n\t\t// 2. Wait for busy runtimes to go idle (60s cap each, concurrently);\n\t\t//    never abort prompt preflight or a turn from shutdown.\n\t\tconst drainResults = await Promise.allSettled(\n\t\t\tthis.runtimes\n\t\t\t\t.values()\n\t\t\t\t.filter((entry) => entry.runtime.session.isBusy)\n\t\t\t\t.map((entry) =>\n\t\t\t\t\twithTimeout(entry.runtime.session.waitForIdle(), SHUTDOWN_RUNTIME_IDLE_CAP_MS, \"drain cap\"),\n\t\t\t\t),\n\t\t);\n\t\tconst cappedRuntimes = drainResults.filter((result) => result.status === \"rejected\").length;\n\t\t// 3. Flush + dispose runtimes through the normal dispose path.\n\t\tawait this.runtimes.stopAll(\"host_shutdown\");\n\t\t// 4. Close all phone streams and connections with reason host_shutdown.\n\t\tfor (const nodeId of Array.from(this.clientConnections.keys())) {\n\t\t\tfor (const entry of this.activeStreams.entriesForClientNodeId(nodeId)) {\n\t\t\t\tthis.activeStreams.unregister(entry);\n\t\t\t\tawait Promise.resolve(entry.close(\"host_shutdown\")).catch(() => {});\n\t\t\t}\n\t\t\tawait this.closeClientConnectionsForClient(nodeId, \"host_shutdown\");\n\t\t}\n\t\ttry {\n\t\t\tawait this.endpoint?.close();\n\t\t} catch {\n\t\t\t// Endpoint shutdown is best-effort.\n\t\t}\n\t\tawait Promise.allSettled(this.connectionTasks);\n\t\tawait this.services.auditLogger.flush().catch(() => {});\n\t\tthis.log(\"info\", \"iroh service stopped\", { cappedRuntimes });\n\t}\n\n\tprivate async logAudit(event: Parameters<VoltdRuntimeServices[\"auditLogger\"][\"log\"]>[0]): Promise<void> {\n\t\ttry {\n\t\t\tawait this.services.auditLogger.log(event);\n\t\t} catch {\n\t\t\t// Audit logging is best-effort.\n\t\t}\n\t}\n}\n"]}