@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/process-identity.js

@@ -0,0 +1,185 @@
+import { spawn } from "node:child_process";
+export const DEFAULT_START_TIME_TOLERANCE_MS = 15_000;
+/**
+ * Command-line markers that identify a voltd process. Linux rewrites argv to the
+ * process title ("voltd"); macOS and Windows report the original invocation
+ * (`... daemon run --foreground`).
+ *
+ * The bare "voltd" marker is matched as a whole path/argv token, not a bare
+ * substring: an unrelated but same-user process whose command line merely
+ * contains the string (e.g. `tail -f /var/log/voltd.log`, `vim voltd.ts`,
+ * `node .../voltd-cli/x.js`) must not satisfy the identity check and be signalled.
+ */
+const VOLTD_COMMAND_MARKERS = [/(?:^|[\s/\\])voltd(?=$|[\s/\\])/, "daemon run --foreground"];
+const defaultRunner = (command, args) => new Promise((resolve) => {
+    const child = spawn(command, args, { stdio: ["ignore", "pipe", "pipe"] });
+    let output = "";
+    child.stdout?.on("data", (chunk) => {
+        output += chunk.toString("utf8");
+    });
+    child.on("error", (error) => resolve({ code: 127, output: error.message }));
+    child.on("close", (code) => resolve({ code: code ?? 1, output }));
+});
+function defaultIsProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return "alive";
+    }
+    catch (error) {
+        // EPERM: the pid exists but belongs to another user — alive (and almost
+        // certainly not our daemon; the identity check will refuse it).
+        return error instanceof Error && "code" in error && error.code === "EPERM"
+            ? "alive"
+            : "gone";
+    }
+}
+/** Parse ps etime ("[[dd-]hh:]mm:ss") into elapsed milliseconds. */
+export function parseElapsedTime(value) {
+    const match = /^(?:(\d+)-)?(?:(\d+):)?(\d{1,2}):(\d{2})$/.exec(value.trim());
+    if (!match) {
+        return undefined;
+    }
+    const [, days, hours, minutes, seconds] = match;
+    return (Number(days ?? 0) * 86_400 + Number(hours ?? 0) * 3_600 + Number(minutes) * 60 + Number(seconds)) * 1_000;
+}
+async function queryPosixProcess(pid, runner, now) {
+    // etime (not the Linux-only etimes) is in the POSIX ps keyword set and has a
+    // fixed, locale-independent format.
+    const result = await runner("ps", ["-p", String(pid), "-o", "etime=,args="]);
+    if (result.code !== 0) {
+        return undefined;
+    }
+    const line = result.output.split("\n").find((candidate) => candidate.trim().length > 0);
+    if (!line) {
+        return undefined;
+    }
+    const trimmed = line.trim();
+    const separatorIndex = trimmed.search(/\s/);
+    const etime = separatorIndex === -1 ? trimmed : trimmed.slice(0, separatorIndex);
+    const commandLine = separatorIndex === -1 ? "" : trimmed.slice(separatorIndex + 1).trim();
+    const elapsedMs = parseElapsedTime(etime);
+    return {
+        ...(elapsedMs === undefined ? {} : { startTimeMs: now() - elapsedMs }),
+        commandLine,
+    };
+}
+async function queryWindowsProcess(pid, runner) {
+    // CIM gives both an absolute creation time and the original command line.
+    const script = `$p = Get-CimInstance Win32_Process -Filter 'ProcessId=${pid}'; ` +
+        `if ($p) { ConvertTo-Json -Compress @{ startMs = [DateTimeOffset]::new($p.CreationDate).ToUnixTimeMilliseconds(); commandLine = [string]$p.CommandLine } }`;
+    const result = await runner("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", script]);
+    if (result.code !== 0) {
+        return undefined;
+    }
+    const jsonLine = result.output.split("\n").find((candidate) => candidate.trim().startsWith("{"));
+    if (!jsonLine) {
+        return undefined;
+    }
+    try {
+        const parsed = JSON.parse(jsonLine.trim());
+        return {
+            ...(typeof parsed.startMs === "number" && Number.isFinite(parsed.startMs)
+                ? { startTimeMs: parsed.startMs }
+                : {}),
+            commandLine: typeof parsed.commandLine === "string" ? parsed.commandLine : "",
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
+function commandLineLooksLikeVoltd(commandLine) {
+    return VOLTD_COMMAND_MARKERS.some((marker) => typeof marker === "string" ? commandLine.includes(marker) : marker.test(commandLine));
+}
+async function lookupProcessIdentity(pid, options) {
+    const runner = options.runner ?? defaultRunner;
+    const platform = options.platform ?? process.platform;
+    const now = () => options.now ?? Date.now();
+    const isProcessAlive = options.isProcessAlive ?? defaultIsProcessAlive;
+    if (isProcessAlive(pid) === "gone") {
+        return { kind: "gone" };
+    }
+    const identity = platform === "win32" ? await queryWindowsProcess(pid, runner) : await queryPosixProcess(pid, runner, now);
+    if (identity) {
+        return { kind: "found", identity };
+    }
+    // The process may have exited between the liveness probe and the query.
+    // Otherwise its identity is unavailable and callers must fail closed.
+    return isProcessAlive(pid) === "gone" ? { kind: "gone" } : { kind: "unknown" };
+}
+function processStartTimeMatches(startedAtMs, identity, toleranceMs) {
+    return (identity.startTimeMs !== undefined &&
+        startedAtMs > 0 &&
+        Math.abs(identity.startTimeMs - startedAtMs) <= toleranceMs);
+}
+/**
+ * Verify only process creation identity. Unlike pidfile verification, this
+ * distinguishes a verifiable recycled PID from an unavailable OS query so
+ * startup-lock recovery can reap the former while failing closed on the latter.
+ */
+export async function verifyProcessCreationTime(record, options = {}) {
+    if (!Number.isInteger(record.pid) || record.pid <= 0) {
+        return "mismatch";
+    }
+    const lookup = await lookupProcessIdentity(record.pid, options);
+    if (lookup.kind !== "found") {
+        return lookup.kind;
+    }
+    if (record.startedAtMs <= 0 || lookup.identity.startTimeMs === undefined) {
+        return "unknown";
+    }
+    const toleranceMs = options.toleranceMs ?? DEFAULT_START_TIME_TOLERANCE_MS;
+    return processStartTimeMatches(record.startedAtMs, lookup.identity, toleranceMs) ? "match" : "mismatch";
+}
+/** Verify both process creation identity and the voltd command marker. */
+export async function verifyVoltdProcessIdentity(record, options = {}) {
+    if (!Number.isInteger(record.pid) || record.pid <= 0) {
+        return "mismatch";
+    }
+    const lookup = await lookupProcessIdentity(record.pid, options);
+    if (lookup.kind !== "found") {
+        return lookup.kind;
+    }
+    if (record.startedAtMs <= 0 || lookup.identity.startTimeMs === undefined) {
+        return "unknown";
+    }
+    const toleranceMs = options.toleranceMs ?? DEFAULT_START_TIME_TOLERANCE_MS;
+    if (!processStartTimeMatches(record.startedAtMs, lookup.identity, toleranceMs)) {
+        return "mismatch";
+    }
+    // Matching creation evidence is conclusive enough to fail closed, but some
+    // supported hosts (notably direct runVoltDaemon() calls on Windows) do not
+    // expose a voltd marker in the immutable process command line.
+    return commandLineLooksLikeVoltd(lookup.identity.commandLine) ? "match" : "unknown";
+}
+/**
+ * Verify that pidfile.pid still refers to the daemon that wrote the pidfile.
+ *
+ * - "gone": no such process (or it exited mid-check) — safe to treat as stopped.
+ * - "match": alive, start time within tolerance of startedAtMs, and a
+ *   voltd-looking command line — safe to signal.
+ * - "mismatch": alive but unverifiable or verifiably different (recycled pid,
+ *   another user's process, ps/powershell unavailable) — do NOT signal.
+ */
+export async function verifyPidfileProcess(pidfile, options = {}) {
+    if (!Number.isInteger(pidfile.pid) || pidfile.pid <= 0) {
+        return "mismatch";
+    }
+    const lookup = await lookupProcessIdentity(pidfile.pid, options);
+    if (lookup.kind === "gone") {
+        return "gone";
+    }
+    if (lookup.kind === "unknown") {
+        return "mismatch";
+    }
+    // A match REQUIRES verifying the process start time against the pidfile, not
+    // just a voltd-looking command line. Without that check (a legacy pidfile
+    // missing startedAtMs, or the OS not reporting a start time) a recycled pid
+    // whose command line merely contains a voltd marker must not be signalled.
+    const toleranceMs = options.toleranceMs ?? DEFAULT_START_TIME_TOLERANCE_MS;
+    if (!processStartTimeMatches(pidfile.startedAtMs, lookup.identity, toleranceMs)) {
+        return "mismatch";
+    }
+    return commandLineLooksLikeVoltd(lookup.identity.commandLine) ? "match" : "mismatch";
+}
+//# sourceMappingURL=process-identity.js.map

package/dist/daemon/process-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-identity.js","sourceRoot":"","sources":["../../src/daemon/process-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAkC3C,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,qBAAqB,GAAG,CAAC,iCAAiC,EAAE,yBAAyB,CAAU,CAAC;AAEtG,MAAM,aAAa,GAAuB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAC3D,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1E,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAA,CACjC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC5E,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAAA,CAClE,CAAC,CAAC;AAEJ,SAAS,qBAAqB,CAAC,GAAW,EAAoB;IAC7D,IAAI,CAAC;QACJ,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,OAAO,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,0EAAwE;QACxE,gEAAgE;QAChE,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;YACpG,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,MAAM,CAAC;IACX,CAAC;AAAA,CACD;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAsB;IACnE,MAAM,KAAK,GAAG,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;IAChD,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC;AAAA,CAClH;AAED,KAAK,UAAU,iBAAiB,CAC/B,GAAW,EACX,MAA0B,EAC1B,GAAiB,EACsB;IACvC,6EAA6E;IAC7E,oCAAoC;IACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IACjF,MAAM,WAAW,GAAG,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1F,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO;QACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QACtE,WAAW;KACX,CAAC;AAAA,CACF;AAED,KAAK,UAAU,mBAAmB,CAAC,GAAW,EAAE,MAA0B,EAAwC;IACjH,0EAA0E;IAC1E,MAAM,MAAM,GACX,yDAAyD,GAAG,KAAK;QACjE,2JAA2J,CAAC;IAC7J,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IACrG,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAiD,CAAC;QAC3F,OAAO;YACN,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;gBACxE,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE;gBACjC,CAAC,CAAC,EAAE,CAAC;YACN,WAAW,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;SAC7E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AAAA,CACD;AAED,SAAS,yBAAyB,CAAC,WAAmB,EAAW;IAChE,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC5C,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CACpF,CAAC;AAAA,CACF;AAID,KAAK,UAAU,qBAAqB,CAAC,GAAW,EAAE,OAA6B,EAAkC;IAChH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,qBAAqB,CAAC;IACvE,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,QAAQ,GACb,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3G,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACpC,CAAC;IACD,wEAAwE;IACxE,sEAAsE;IACtE,OAAO,cAAc,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAAA,CAC/E;AAED,SAAS,uBAAuB,CAAC,WAAmB,EAAE,QAAyB,EAAE,WAAmB,EAAW;IAC9G,OAAO,CACN,QAAQ,CAAC,WAAW,KAAK,SAAS;QAClC,WAAW,GAAG,CAAC;QACf,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,GAAG,WAAW,CAAC,IAAI,WAAW,CAC3D,CAAC;AAAA,CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,MAA4C,EAC5C,OAAO,GAAyB,EAAE,EACK;IACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC1E,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,+BAA+B,CAAC;IAC3E,OAAO,uBAAuB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;AAAA,CACxG;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,MAA4C,EAC5C,OAAO,GAAyB,EAAE,EACK;IACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC1E,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,+BAA+B,CAAC;IAC3E,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QAChF,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,+DAA+D;IAC/D,OAAO,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CACpF;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,OAAqD,EACrD,OAAO,GAAyB,EAAE,EACH;IAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,+BAA+B,CAAC;IAC3E,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QACjF,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,OAAO,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;AAAA,CACrF","sourcesContent":["import { spawn } from \"node:child_process\";\nimport type { PidfileContents } from \"./main.ts\";\n\n/**\n * Process-identity verification for the pidfile SIGTERM fallbacks: a pidfile\n * outlives its daemon, and the recorded pid can be recycled by an unrelated\n * process. Before killing, verify the live process (a) started when the\n * pidfile says the daemon started and (b) has a voltd-looking command line.\n *\n * Platform-aware by design (Windows daemon support is planned): POSIX queries\n * `ps -o etime=,args=`; Windows queries Win32_Process via PowerShell CIM.\n */\n\nexport type ProcessQueryRunner = (command: string, args: string[]) => Promise<{ code: number; output: string }>;\n\nexport interface ProcessIdentity {\n\t/** Absolute process start time; undefined when the platform query lacks it. */\n\tstartTimeMs?: number;\n\tcommandLine: string;\n}\n\nexport type PidfileVerification = \"match\" | \"mismatch\" | \"gone\";\nexport type ProcessCreationVerification = \"match\" | \"mismatch\" | \"gone\" | \"unknown\";\n\nexport interface VerifyPidfileOptions {\n\trunner?: ProcessQueryRunner;\n\tplatform?: NodeJS.Platform;\n\tnow?: number;\n\t/** Allowed |actual start - pidfile.startedAtMs| skew (spawn-to-record delay, etime rounding). */\n\ttoleranceMs?: number;\n\t/** Injectable liveness probe (kill(pid, 0)). */\n\tisProcessAlive?: (pid: number) => \"alive\" | \"gone\";\n}\n\nexport const DEFAULT_START_TIME_TOLERANCE_MS = 15_000;\n\n/**\n * Command-line markers that identify a voltd process. Linux rewrites argv to the\n * process title (\"voltd\"); macOS and Windows report the original invocation\n * (`... daemon run --foreground`).\n *\n * The bare \"voltd\" marker is matched as a whole path/argv token, not a bare\n * substring: an unrelated but same-user process whose command line merely\n * contains the string (e.g. `tail -f /var/log/voltd.log`, `vim voltd.ts`,\n * `node .../voltd-cli/x.js`) must not satisfy the identity check and be signalled.\n */\nconst VOLTD_COMMAND_MARKERS = [/(?:^|[\\s/\\\\])voltd(?=$|[\\s/\\\\])/, \"daemon run --foreground\"] as const;\n\nconst defaultRunner: ProcessQueryRunner = (command, args) =>\n\tnew Promise((resolve) => {\n\t\tconst child = spawn(command, args, { stdio: [\"ignore\", \"pipe\", \"pipe\"] });\n\t\tlet output = \"\";\n\t\tchild.stdout?.on(\"data\", (chunk: Buffer) => {\n\t\t\toutput += chunk.toString(\"utf8\");\n\t\t});\n\t\tchild.on(\"error\", (error) => resolve({ code: 127, output: error.message }));\n\t\tchild.on(\"close\", (code) => resolve({ code: code ?? 1, output }));\n\t});\n\nfunction defaultIsProcessAlive(pid: number): \"alive\" | \"gone\" {\n\ttry {\n\t\tprocess.kill(pid, 0);\n\t\treturn \"alive\";\n\t} catch (error) {\n\t\t// EPERM: the pid exists but belongs to another user — alive (and almost\n\t\t// certainly not our daemon; the identity check will refuse it).\n\t\treturn error instanceof Error && \"code\" in error && (error as NodeJS.ErrnoException).code === \"EPERM\"\n\t\t\t? \"alive\"\n\t\t\t: \"gone\";\n\t}\n}\n\n/** Parse ps etime (\"[[dd-]hh:]mm:ss\") into elapsed milliseconds. */\nexport function parseElapsedTime(value: string): number | undefined {\n\tconst match = /^(?:(\\d+)-)?(?:(\\d+):)?(\\d{1,2}):(\\d{2})$/.exec(value.trim());\n\tif (!match) {\n\t\treturn undefined;\n\t}\n\tconst [, days, hours, minutes, seconds] = match;\n\treturn (Number(days ?? 0) * 86_400 + Number(hours ?? 0) * 3_600 + Number(minutes) * 60 + Number(seconds)) * 1_000;\n}\n\nasync function queryPosixProcess(\n\tpid: number,\n\trunner: ProcessQueryRunner,\n\tnow: () => number,\n): Promise<ProcessIdentity | undefined> {\n\t// etime (not the Linux-only etimes) is in the POSIX ps keyword set and has a\n\t// fixed, locale-independent format.\n\tconst result = await runner(\"ps\", [\"-p\", String(pid), \"-o\", \"etime=,args=\"]);\n\tif (result.code !== 0) {\n\t\treturn undefined;\n\t}\n\tconst line = result.output.split(\"\\n\").find((candidate) => candidate.trim().length > 0);\n\tif (!line) {\n\t\treturn undefined;\n\t}\n\tconst trimmed = line.trim();\n\tconst separatorIndex = trimmed.search(/\\s/);\n\tconst etime = separatorIndex === -1 ? trimmed : trimmed.slice(0, separatorIndex);\n\tconst commandLine = separatorIndex === -1 ? \"\" : trimmed.slice(separatorIndex + 1).trim();\n\tconst elapsedMs = parseElapsedTime(etime);\n\treturn {\n\t\t...(elapsedMs === undefined ? {} : { startTimeMs: now() - elapsedMs }),\n\t\tcommandLine,\n\t};\n}\n\nasync function queryWindowsProcess(pid: number, runner: ProcessQueryRunner): Promise<ProcessIdentity | undefined> {\n\t// CIM gives both an absolute creation time and the original command line.\n\tconst script =\n\t\t`$p = Get-CimInstance Win32_Process -Filter 'ProcessId=${pid}'; ` +\n\t\t`if ($p) { ConvertTo-Json -Compress @{ startMs = [DateTimeOffset]::new($p.CreationDate).ToUnixTimeMilliseconds(); commandLine = [string]$p.CommandLine } }`;\n\tconst result = await runner(\"powershell.exe\", [\"-NoProfile\", \"-NonInteractive\", \"-Command\", script]);\n\tif (result.code !== 0) {\n\t\treturn undefined;\n\t}\n\tconst jsonLine = result.output.split(\"\\n\").find((candidate) => candidate.trim().startsWith(\"{\"));\n\tif (!jsonLine) {\n\t\treturn undefined;\n\t}\n\ttry {\n\t\tconst parsed = JSON.parse(jsonLine.trim()) as { startMs?: unknown; commandLine?: unknown };\n\t\treturn {\n\t\t\t...(typeof parsed.startMs === \"number\" && Number.isFinite(parsed.startMs)\n\t\t\t\t? { startTimeMs: parsed.startMs }\n\t\t\t\t: {}),\n\t\t\tcommandLine: typeof parsed.commandLine === \"string\" ? parsed.commandLine : \"\",\n\t\t};\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction commandLineLooksLikeVoltd(commandLine: string): boolean {\n\treturn VOLTD_COMMAND_MARKERS.some((marker) =>\n\t\ttypeof marker === \"string\" ? commandLine.includes(marker) : marker.test(commandLine),\n\t);\n}\n\ntype ProcessIdentityLookup = { kind: \"found\"; identity: ProcessIdentity } | { kind: \"gone\" } | { kind: \"unknown\" };\n\nasync function lookupProcessIdentity(pid: number, options: VerifyPidfileOptions): Promise<ProcessIdentityLookup> {\n\tconst runner = options.runner ?? defaultRunner;\n\tconst platform = options.platform ?? process.platform;\n\tconst now = () => options.now ?? Date.now();\n\tconst isProcessAlive = options.isProcessAlive ?? defaultIsProcessAlive;\n\tif (isProcessAlive(pid) === \"gone\") {\n\t\treturn { kind: \"gone\" };\n\t}\n\tconst identity =\n\t\tplatform === \"win32\" ? await queryWindowsProcess(pid, runner) : await queryPosixProcess(pid, runner, now);\n\tif (identity) {\n\t\treturn { kind: \"found\", identity };\n\t}\n\t// The process may have exited between the liveness probe and the query.\n\t// Otherwise its identity is unavailable and callers must fail closed.\n\treturn isProcessAlive(pid) === \"gone\" ? { kind: \"gone\" } : { kind: \"unknown\" };\n}\n\nfunction processStartTimeMatches(startedAtMs: number, identity: ProcessIdentity, toleranceMs: number): boolean {\n\treturn (\n\t\tidentity.startTimeMs !== undefined &&\n\t\tstartedAtMs > 0 &&\n\t\tMath.abs(identity.startTimeMs - startedAtMs) <= toleranceMs\n\t);\n}\n\n/**\n * Verify only process creation identity. Unlike pidfile verification, this\n * distinguishes a verifiable recycled PID from an unavailable OS query so\n * startup-lock recovery can reap the former while failing closed on the latter.\n */\nexport async function verifyProcessCreationTime(\n\trecord: { pid: number; startedAtMs: number },\n\toptions: VerifyPidfileOptions = {},\n): Promise<ProcessCreationVerification> {\n\tif (!Number.isInteger(record.pid) || record.pid <= 0) {\n\t\treturn \"mismatch\";\n\t}\n\tconst lookup = await lookupProcessIdentity(record.pid, options);\n\tif (lookup.kind !== \"found\") {\n\t\treturn lookup.kind;\n\t}\n\tif (record.startedAtMs <= 0 || lookup.identity.startTimeMs === undefined) {\n\t\treturn \"unknown\";\n\t}\n\tconst toleranceMs = options.toleranceMs ?? DEFAULT_START_TIME_TOLERANCE_MS;\n\treturn processStartTimeMatches(record.startedAtMs, lookup.identity, toleranceMs) ? \"match\" : \"mismatch\";\n}\n\n/** Verify both process creation identity and the voltd command marker. */\nexport async function verifyVoltdProcessIdentity(\n\trecord: { pid: number; startedAtMs: number },\n\toptions: VerifyPidfileOptions = {},\n): Promise<ProcessCreationVerification> {\n\tif (!Number.isInteger(record.pid) || record.pid <= 0) {\n\t\treturn \"mismatch\";\n\t}\n\tconst lookup = await lookupProcessIdentity(record.pid, options);\n\tif (lookup.kind !== \"found\") {\n\t\treturn lookup.kind;\n\t}\n\tif (record.startedAtMs <= 0 || lookup.identity.startTimeMs === undefined) {\n\t\treturn \"unknown\";\n\t}\n\tconst toleranceMs = options.toleranceMs ?? DEFAULT_START_TIME_TOLERANCE_MS;\n\tif (!processStartTimeMatches(record.startedAtMs, lookup.identity, toleranceMs)) {\n\t\treturn \"mismatch\";\n\t}\n\t// Matching creation evidence is conclusive enough to fail closed, but some\n\t// supported hosts (notably direct runVoltDaemon() calls on Windows) do not\n\t// expose a voltd marker in the immutable process command line.\n\treturn commandLineLooksLikeVoltd(lookup.identity.commandLine) ? \"match\" : \"unknown\";\n}\n\n/**\n * Verify that pidfile.pid still refers to the daemon that wrote the pidfile.\n *\n * - \"gone\": no such process (or it exited mid-check) — safe to treat as stopped.\n * - \"match\": alive, start time within tolerance of startedAtMs, and a\n *   voltd-looking command line — safe to signal.\n * - \"mismatch\": alive but unverifiable or verifiably different (recycled pid,\n *   another user's process, ps/powershell unavailable) — do NOT signal.\n */\nexport async function verifyPidfileProcess(\n\tpidfile: Pick<PidfileContents, \"pid\" | \"startedAtMs\">,\n\toptions: VerifyPidfileOptions = {},\n): Promise<PidfileVerification> {\n\tif (!Number.isInteger(pidfile.pid) || pidfile.pid <= 0) {\n\t\treturn \"mismatch\";\n\t}\n\tconst lookup = await lookupProcessIdentity(pidfile.pid, options);\n\tif (lookup.kind === \"gone\") {\n\t\treturn \"gone\";\n\t}\n\tif (lookup.kind === \"unknown\") {\n\t\treturn \"mismatch\";\n\t}\n\t// A match REQUIRES verifying the process start time against the pidfile, not\n\t// just a voltd-looking command line. Without that check (a legacy pidfile\n\t// missing startedAtMs, or the OS not reporting a start time) a recycled pid\n\t// whose command line merely contains a voltd marker must not be signalled.\n\tconst toleranceMs = options.toleranceMs ?? DEFAULT_START_TIME_TOLERANCE_MS;\n\tif (!processStartTimeMatches(pidfile.startedAtMs, lookup.identity, toleranceMs)) {\n\t\treturn \"mismatch\";\n\t}\n\treturn commandLineLooksLikeVoltd(lookup.identity.commandLine) ? \"match\" : \"mismatch\";\n}\n"]}

package/dist/daemon/relay-stream.d.ts

@@ -0,0 +1,89 @@
+import { Buffer } from "node:buffer";
+import type { Socket } from "node:net";
+import type { IrohBiStreamLike } from "../core/rpc/iroh-transport.ts";
+import { type RelayCloseReason, type RelayPreamble } from "./control-protocol.ts";
+export declare const RELAY_TOKEN_TTL_MS = 10000;
+export interface PendingRelay {
+    relayId: string;
+    relayToken: string;
+    workspaceName: string;
+    sessionId: string;
+    clientNodeId: string;
+    connectionId: string;
+    ownerControlConnectionId: string;
+    streamId: string;
+    /** The phone's Iroh stream, paused until the TUI redeems the token. */
+    stream: IrohBiStreamLike;
+    preamble: RelayPreamble;
+    expiresAt: number;
+    used: boolean;
+    /** Resolves when the relay finishes (either side closed). */
+    settle(outcome: RelayOutcome): void;
+}
+export interface RelayOutcome {
+    reason: RelayCloseReason;
+    bytesUp: number;
+    bytesDown: number;
+    durationMs: number;
+    error?: string;
+}
+export interface ActiveRelay {
+    relayId: string;
+    workspaceName: string;
+    sessionId: string;
+    clientNodeId: string;
+    connectionId: string;
+    ownerControlConnectionId: string;
+    streamId: string;
+    close(reason: RelayCloseReason): void;
+}
+export type RelayRpcAuthorizationResult = {
+    ok: true;
+    relay: ActiveRelay;
+} | {
+    ok: false;
+    code: "not_found" | "not_held" | "session_mismatch";
+    message: string;
+};
+export interface MintRelayOptions {
+    workspaceName: string;
+    sessionId: string;
+    clientNodeId: string;
+    connectionId: string;
+    ownerControlConnectionId: string;
+    streamId: string;
+    stream: IrohBiStreamLike;
+    preamble: Omit<RelayPreamble, "type" | "relayId">;
+    now?: number;
+    settle(outcome: RelayOutcome): void;
+}
+/**
+ * Daemon-side relay lifecycle: token mint/expiry (10s, single-use), preamble
+ * write, and the bidirectional raw byte pump between the phone's Iroh stream
+ * and the TUI's relay unix connection. No inspection, no reframing.
+ */
+export declare class RelayRegistry {
+    private readonly pending;
+    private readonly active;
+    mint(options: MintRelayOptions): PendingRelay;
+    /** Invalidate an unredeemed offer (rekey, duplicate replacement, expiry). */
+    invalidatePending(relayId: string): PendingRelay | undefined;
+    pendingForConversation(clientNodeId: string, workspaceName: string, sessionId: string): PendingRelay[];
+    activeForConversation(clientNodeId: string, workspaceName: string, sessionId: string): ActiveRelay[];
+    activeRelays(): ActiveRelay[];
+    pendingRelays(): PendingRelay[];
+    activeCount(): number;
+    authorizeRpc(relayId: string, ownerControlConnectionId: string, scope: {
+        clientNodeId: string;
+        workspaceName: string;
+        sessionId: string;
+    }): RelayRpcAuthorizationResult;
+    closeActive(relayId: string, reason: RelayCloseReason): void;
+    /**
+     * Redeem a relay token from a TUI relay hello. On success, acks the socket,
+     * writes the preamble line, and starts the byte pump. Returns false when the
+     * token is invalid/expired/used (caller sends bad_relay_token).
+     */
+    admit(relayId: string, relayToken: string, socket: Socket, bufferedRemainder: Buffer, now?: number): boolean;
+}
+//# sourceMappingURL=relay-stream.d.ts.map

package/dist/daemon/relay-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-stream.d.ts","sourceRoot":"","sources":["../../src/daemon/relay-stream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEvC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAqB,KAAK,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAErG,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAIzC,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB,EAAE,MAAM,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,aAAa,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,6DAA6D;IAC7D,MAAM,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB,EAAE,MAAM,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,MAAM,2BAA2B,GACpC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GAChC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,WAAW,GAAG,UAAU,GAAG,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvF,MAAM,WAAW,gBAAgB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB,EAAE,MAAM,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;CACpC;AAED;;;;GAIG;AACH,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IAEzD,IAAI,CAAC,OAAO,EAAE,gBAAgB,GAAG,YAAY,CAmB5C;IAED,6EAA6E;IAC7E,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAO3D;IAED,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE,CAOrG;IAED,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,CAOnG;IAED,YAAY,IAAI,WAAW,EAAE,CAE5B;IAED,aAAa,IAAI,YAAY,EAAE,CAE9B;IAED,WAAW,IAAI,MAAM,CAEpB;IAED,YAAY,CACX,OAAO,EAAE,MAAM,EACf,wBAAwB,EAAE,MAAM,EAChC,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GACvE,2BAA2B,CAgB7B;IAED,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAE3D;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO,CAwH/G;CACD","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport { randomBytes, randomUUID } from \"node:crypto\";\nimport type { Socket } from \"node:net\";\nimport { DuplexWriteGate, StreamClosedError } from \"../core/rpc/duplex-write-gate.ts\";\nimport type { IrohBiStreamLike } from \"../core/rpc/iroh-transport.ts\";\nimport { encodeControlLine, type RelayCloseReason, type RelayPreamble } from \"./control-protocol.ts\";\n\nexport const RELAY_TOKEN_TTL_MS = 10_000;\n\nconst RELAY_READ_LIMIT = 64 * 1024;\n\nexport interface PendingRelay {\n\trelayId: string;\n\trelayToken: string;\n\tworkspaceName: string;\n\tsessionId: string;\n\tclientNodeId: string;\n\tconnectionId: string;\n\townerControlConnectionId: string;\n\tstreamId: string;\n\t/** The phone's Iroh stream, paused until the TUI redeems the token. */\n\tstream: IrohBiStreamLike;\n\tpreamble: RelayPreamble;\n\texpiresAt: number;\n\tused: boolean;\n\t/** Resolves when the relay finishes (either side closed). */\n\tsettle(outcome: RelayOutcome): void;\n}\n\nexport interface RelayOutcome {\n\treason: RelayCloseReason;\n\tbytesUp: number;\n\tbytesDown: number;\n\tdurationMs: number;\n\terror?: string;\n}\n\nexport interface ActiveRelay {\n\trelayId: string;\n\tworkspaceName: string;\n\tsessionId: string;\n\tclientNodeId: string;\n\tconnectionId: string;\n\townerControlConnectionId: string;\n\tstreamId: string;\n\tclose(reason: RelayCloseReason): void;\n}\n\nexport type RelayRpcAuthorizationResult =\n\t| { ok: true; relay: ActiveRelay }\n\t| { ok: false; code: \"not_found\" | \"not_held\" | \"session_mismatch\"; message: string };\n\nexport interface MintRelayOptions {\n\tworkspaceName: string;\n\tsessionId: string;\n\tclientNodeId: string;\n\tconnectionId: string;\n\townerControlConnectionId: string;\n\tstreamId: string;\n\tstream: IrohBiStreamLike;\n\tpreamble: Omit<RelayPreamble, \"type\" | \"relayId\">;\n\tnow?: number;\n\tsettle(outcome: RelayOutcome): void;\n}\n\n/**\n * Daemon-side relay lifecycle: token mint/expiry (10s, single-use), preamble\n * write, and the bidirectional raw byte pump between the phone's Iroh stream\n * and the TUI's relay unix connection. No inspection, no reframing.\n */\nexport class RelayRegistry {\n\tprivate readonly pending = new Map<string, PendingRelay>();\n\tprivate readonly active = new Map<string, ActiveRelay>();\n\n\tmint(options: MintRelayOptions): PendingRelay {\n\t\tconst relayId = `rl-${randomUUID()}`;\n\t\tconst relay: PendingRelay = {\n\t\t\trelayId,\n\t\t\trelayToken: randomBytes(32).toString(\"base64url\"),\n\t\t\tworkspaceName: options.workspaceName,\n\t\t\tsessionId: options.sessionId,\n\t\t\tclientNodeId: options.clientNodeId,\n\t\t\tconnectionId: options.connectionId,\n\t\t\townerControlConnectionId: options.ownerControlConnectionId,\n\t\t\tstreamId: options.streamId,\n\t\t\tstream: options.stream,\n\t\t\tpreamble: { ...options.preamble, type: \"relay_preamble\", relayId },\n\t\t\texpiresAt: (options.now ?? Date.now()) + RELAY_TOKEN_TTL_MS,\n\t\t\tused: false,\n\t\t\tsettle: options.settle,\n\t\t};\n\t\tthis.pending.set(relayId, relay);\n\t\treturn relay;\n\t}\n\n\t/** Invalidate an unredeemed offer (rekey, duplicate replacement, expiry). */\n\tinvalidatePending(relayId: string): PendingRelay | undefined {\n\t\tconst relay = this.pending.get(relayId);\n\t\tif (relay) {\n\t\t\trelay.used = true;\n\t\t\tthis.pending.delete(relayId);\n\t\t}\n\t\treturn relay;\n\t}\n\n\tpendingForConversation(clientNodeId: string, workspaceName: string, sessionId: string): PendingRelay[] {\n\t\treturn Array.from(this.pending.values()).filter(\n\t\t\t(relay) =>\n\t\t\t\trelay.clientNodeId === clientNodeId &&\n\t\t\t\trelay.workspaceName === workspaceName &&\n\t\t\t\trelay.sessionId === sessionId,\n\t\t);\n\t}\n\n\tactiveForConversation(clientNodeId: string, workspaceName: string, sessionId: string): ActiveRelay[] {\n\t\treturn Array.from(this.active.values()).filter(\n\t\t\t(relay) =>\n\t\t\t\trelay.clientNodeId === clientNodeId &&\n\t\t\t\trelay.workspaceName === workspaceName &&\n\t\t\t\trelay.sessionId === sessionId,\n\t\t);\n\t}\n\n\tactiveRelays(): ActiveRelay[] {\n\t\treturn Array.from(this.active.values());\n\t}\n\n\tpendingRelays(): PendingRelay[] {\n\t\treturn Array.from(this.pending.values());\n\t}\n\n\tactiveCount(): number {\n\t\treturn this.active.size;\n\t}\n\n\tauthorizeRpc(\n\t\trelayId: string,\n\t\townerControlConnectionId: string,\n\t\tscope: { clientNodeId: string; workspaceName: string; sessionId: string },\n\t): RelayRpcAuthorizationResult {\n\t\tconst relay = this.active.get(relayId);\n\t\tif (!relay) {\n\t\t\treturn { ok: false, code: \"not_found\", message: \"active relay not found\" };\n\t\t}\n\t\tif (relay.ownerControlConnectionId !== ownerControlConnectionId) {\n\t\t\treturn { ok: false, code: \"not_held\", message: \"relay is not owned by this control connection\" };\n\t\t}\n\t\tif (\n\t\t\trelay.clientNodeId !== scope.clientNodeId ||\n\t\t\trelay.workspaceName !== scope.workspaceName ||\n\t\t\trelay.sessionId !== scope.sessionId\n\t\t) {\n\t\t\treturn { ok: false, code: \"session_mismatch\", message: \"relay RPC scope does not match active relay\" };\n\t\t}\n\t\treturn { ok: true, relay };\n\t}\n\n\tcloseActive(relayId: string, reason: RelayCloseReason): void {\n\t\tthis.active.get(relayId)?.close(reason);\n\t}\n\n\t/**\n\t * Redeem a relay token from a TUI relay hello. On success, acks the socket,\n\t * writes the preamble line, and starts the byte pump. Returns false when the\n\t * token is invalid/expired/used (caller sends bad_relay_token).\n\t */\n\tadmit(relayId: string, relayToken: string, socket: Socket, bufferedRemainder: Buffer, now = Date.now()): boolean {\n\t\tconst relay = this.pending.get(relayId);\n\t\tif (!relay || relay.used || relay.relayToken !== relayToken || now > relay.expiresAt) {\n\t\t\treturn false;\n\t\t}\n\t\trelay.used = true;\n\t\tthis.pending.delete(relayId);\n\n\t\tsocket.write(encodeControlLine({ type: \"hello_ack\", ok: true }));\n\t\tsocket.write(encodeControlLine(relay.preamble));\n\n\t\tconst startedAt = now;\n\t\tconst writeGate = new DuplexWriteGate(socket);\n\t\tlet bytesUp = 0; // TUI -> phone\n\t\tlet bytesDown = 0; // phone -> TUI\n\t\tlet settled = false;\n\t\tlet closeReason: RelayCloseReason | undefined;\n\n\t\tconst finish = (reason: RelayCloseReason, error?: string) => {\n\t\t\tif (settled) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tsettled = true;\n\t\t\tthis.active.delete(relay.relayId);\n\t\t\twriteGate.dispose();\n\t\t\tsocket.destroy();\n\t\t\tvoid Promise.resolve(relay.stream.send.finish?.()).catch(() => {});\n\t\t\tvoid Promise.resolve(relay.stream.recv.stop?.(0n)).catch(() => {});\n\t\t\trelay.settle({\n\t\t\t\treason: closeReason ?? reason,\n\t\t\t\tbytesUp,\n\t\t\t\tbytesDown,\n\t\t\t\tdurationMs: Date.now() - startedAt,\n\t\t\t\t...(error === undefined ? {} : { error }),\n\t\t\t});\n\t\t};\n\n\t\tconst activeRelay: ActiveRelay = {\n\t\t\trelayId: relay.relayId,\n\t\t\tworkspaceName: relay.workspaceName,\n\t\t\tsessionId: relay.sessionId,\n\t\t\tclientNodeId: relay.clientNodeId,\n\t\t\tconnectionId: relay.connectionId,\n\t\t\townerControlConnectionId: relay.ownerControlConnectionId,\n\t\t\tstreamId: relay.streamId,\n\t\t\tclose: (reason: RelayCloseReason) => {\n\t\t\t\tcloseReason = reason;\n\t\t\t\tfinish(reason);\n\t\t\t},\n\t\t};\n\t\tthis.active.set(relay.relayId, activeRelay);\n\n\t\t// TUI -> phone: socket bytes go straight to the Iroh send stream. The\n\t\t// socket is paused while a chunk is in flight so a slow phone link cannot\n\t\t// buffer unbounded data in the write queue.\n\t\tlet writeQueue: Promise<void> = Promise.resolve();\n\t\tconst enqueueWrite = (chunk: Buffer, pauseSocket: boolean) => {\n\t\t\tbytesUp += chunk.length;\n\t\t\tif (pauseSocket) {\n\t\t\t\tsocket.pause();\n\t\t\t}\n\t\t\tconst bytes = Array.from(chunk);\n\t\t\twriteQueue = writeQueue\n\t\t\t\t.then(() => relay.stream.send.writeAll(bytes))\n\t\t\t\t.then(() => {\n\t\t\t\t\tif (pauseSocket && !settled) {\n\t\t\t\t\t\tsocket.resume();\n\t\t\t\t\t}\n\t\t\t\t})\n\t\t\t\t.catch((error: unknown) => {\n\t\t\t\t\tfinish(\"error\", error instanceof Error ? error.message : String(error));\n\t\t\t\t});\n\t\t};\n\t\tif (bufferedRemainder.length > 0) {\n\t\t\tenqueueWrite(bufferedRemainder, false);\n\t\t}\n\t\tsocket.on(\"data\", (chunk: Buffer) => enqueueWrite(chunk, true));\n\t\tsocket.on(\"error\", (error: Error) => finish(\"error\", error.message));\n\t\t// A close without a daemon-initiated reason or a socket error is the TUI\n\t\t// going away (process exit, socket destroy).\n\t\tsocket.on(\"close\", () => finish(closeReason ?? \"tui_disconnected\"));\n\t\tsocket.on(\"end\", () => {\n\t\t\t// TUI half-closed: propagate to the phone's send side.\n\t\t\tvoid writeQueue.then(() => Promise.resolve(relay.stream.send.finish?.())).catch(() => {});\n\t\t});\n\n\t\t// Phone -> TUI: pull from the Iroh recv stream into the socket.\n\t\tvoid (async () => {\n\t\t\ttry {\n\t\t\t\twhile (!settled) {\n\t\t\t\t\tconst chunk = await relay.stream.recv.read(RELAY_READ_LIMIT);\n\t\t\t\t\tif (!chunk || chunk.length === 0) {\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t\tconst buffer = Buffer.from(Array.from(chunk));\n\t\t\t\t\tbytesDown += buffer.length;\n\t\t\t\t\tawait writeGate.write(buffer);\n\t\t\t\t\tif (settled) {\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tif (!settled) {\n\t\t\t\t\t// Phone half-closed or ended: flush any bytes still buffered in the\n\t\t\t\t\t// socket write queue and send FIN to the TUI, waiting for the write\n\t\t\t\t\t// side to drain before finish() destroys the socket. A bare\n\t\t\t\t\t// socket.end() + immediate destroy discards the unflushed tail of the\n\t\t\t\t\t// phone's final response.\n\t\t\t\t\tawait writeGate.end().catch(() => {});\n\t\t\t\t\tfinish(closeReason ?? \"phone_disconnected\");\n\t\t\t\t}\n\t\t\t} catch (error) {\n\t\t\t\tif (error instanceof StreamClosedError) {\n\t\t\t\t\tfinish(closeReason ?? \"tui_disconnected\");\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tfinish(\"error\", error instanceof Error ? error.message : String(error));\n\t\t\t}\n\t\t})();\n\n\t\treturn true;\n\t}\n}\n"]}

package/dist/daemon/relay-stream.js

@@ -0,0 +1,202 @@
+import { Buffer } from "node:buffer";
+import { randomBytes, randomUUID } from "node:crypto";
+import { DuplexWriteGate, StreamClosedError } from "../core/rpc/duplex-write-gate.js";
+import { encodeControlLine } from "./control-protocol.js";
+export const RELAY_TOKEN_TTL_MS = 10_000;
+const RELAY_READ_LIMIT = 64 * 1024;
+/**
+ * Daemon-side relay lifecycle: token mint/expiry (10s, single-use), preamble
+ * write, and the bidirectional raw byte pump between the phone's Iroh stream
+ * and the TUI's relay unix connection. No inspection, no reframing.
+ */
+export class RelayRegistry {
+    pending = new Map();
+    active = new Map();
+    mint(options) {
+        const relayId = `rl-${randomUUID()}`;
+        const relay = {
+            relayId,
+            relayToken: randomBytes(32).toString("base64url"),
+            workspaceName: options.workspaceName,
+            sessionId: options.sessionId,
+            clientNodeId: options.clientNodeId,
+            connectionId: options.connectionId,
+            ownerControlConnectionId: options.ownerControlConnectionId,
+            streamId: options.streamId,
+            stream: options.stream,
+            preamble: { ...options.preamble, type: "relay_preamble", relayId },
+            expiresAt: (options.now ?? Date.now()) + RELAY_TOKEN_TTL_MS,
+            used: false,
+            settle: options.settle,
+        };
+        this.pending.set(relayId, relay);
+        return relay;
+    }
+    /** Invalidate an unredeemed offer (rekey, duplicate replacement, expiry). */
+    invalidatePending(relayId) {
+        const relay = this.pending.get(relayId);
+        if (relay) {
+            relay.used = true;
+            this.pending.delete(relayId);
+        }
+        return relay;
+    }
+    pendingForConversation(clientNodeId, workspaceName, sessionId) {
+        return Array.from(this.pending.values()).filter((relay) => relay.clientNodeId === clientNodeId &&
+            relay.workspaceName === workspaceName &&
+            relay.sessionId === sessionId);
+    }
+    activeForConversation(clientNodeId, workspaceName, sessionId) {
+        return Array.from(this.active.values()).filter((relay) => relay.clientNodeId === clientNodeId &&
+            relay.workspaceName === workspaceName &&
+            relay.sessionId === sessionId);
+    }
+    activeRelays() {
+        return Array.from(this.active.values());
+    }
+    pendingRelays() {
+        return Array.from(this.pending.values());
+    }
+    activeCount() {
+        return this.active.size;
+    }
+    authorizeRpc(relayId, ownerControlConnectionId, scope) {
+        const relay = this.active.get(relayId);
+        if (!relay) {
+            return { ok: false, code: "not_found", message: "active relay not found" };
+        }
+        if (relay.ownerControlConnectionId !== ownerControlConnectionId) {
+            return { ok: false, code: "not_held", message: "relay is not owned by this control connection" };
+        }
+        if (relay.clientNodeId !== scope.clientNodeId ||
+            relay.workspaceName !== scope.workspaceName ||
+            relay.sessionId !== scope.sessionId) {
+            return { ok: false, code: "session_mismatch", message: "relay RPC scope does not match active relay" };
+        }
+        return { ok: true, relay };
+    }
+    closeActive(relayId, reason) {
+        this.active.get(relayId)?.close(reason);
+    }
+    /**
+     * Redeem a relay token from a TUI relay hello. On success, acks the socket,
+     * writes the preamble line, and starts the byte pump. Returns false when the
+     * token is invalid/expired/used (caller sends bad_relay_token).
+     */
+    admit(relayId, relayToken, socket, bufferedRemainder, now = Date.now()) {
+        const relay = this.pending.get(relayId);
+        if (!relay || relay.used || relay.relayToken !== relayToken || now > relay.expiresAt) {
+            return false;
+        }
+        relay.used = true;
+        this.pending.delete(relayId);
+        socket.write(encodeControlLine({ type: "hello_ack", ok: true }));
+        socket.write(encodeControlLine(relay.preamble));
+        const startedAt = now;
+        const writeGate = new DuplexWriteGate(socket);
+        let bytesUp = 0; // TUI -> phone
+        let bytesDown = 0; // phone -> TUI
+        let settled = false;
+        let closeReason;
+        const finish = (reason, error) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            this.active.delete(relay.relayId);
+            writeGate.dispose();
+            socket.destroy();
+            void Promise.resolve(relay.stream.send.finish?.()).catch(() => { });
+            void Promise.resolve(relay.stream.recv.stop?.(0n)).catch(() => { });
+            relay.settle({
+                reason: closeReason ?? reason,
+                bytesUp,
+                bytesDown,
+                durationMs: Date.now() - startedAt,
+                ...(error === undefined ? {} : { error }),
+            });
+        };
+        const activeRelay = {
+            relayId: relay.relayId,
+            workspaceName: relay.workspaceName,
+            sessionId: relay.sessionId,
+            clientNodeId: relay.clientNodeId,
+            connectionId: relay.connectionId,
+            ownerControlConnectionId: relay.ownerControlConnectionId,
+            streamId: relay.streamId,
+            close: (reason) => {
+                closeReason = reason;
+                finish(reason);
+            },
+        };
+        this.active.set(relay.relayId, activeRelay);
+        // TUI -> phone: socket bytes go straight to the Iroh send stream. The
+        // socket is paused while a chunk is in flight so a slow phone link cannot
+        // buffer unbounded data in the write queue.
+        let writeQueue = Promise.resolve();
+        const enqueueWrite = (chunk, pauseSocket) => {
+            bytesUp += chunk.length;
+            if (pauseSocket) {
+                socket.pause();
+            }
+            const bytes = Array.from(chunk);
+            writeQueue = writeQueue
+                .then(() => relay.stream.send.writeAll(bytes))
+                .then(() => {
+                if (pauseSocket && !settled) {
+                    socket.resume();
+                }
+            })
+                .catch((error) => {
+                finish("error", error instanceof Error ? error.message : String(error));
+            });
+        };
+        if (bufferedRemainder.length > 0) {
+            enqueueWrite(bufferedRemainder, false);
+        }
+        socket.on("data", (chunk) => enqueueWrite(chunk, true));
+        socket.on("error", (error) => finish("error", error.message));
+        // A close without a daemon-initiated reason or a socket error is the TUI
+        // going away (process exit, socket destroy).
+        socket.on("close", () => finish(closeReason ?? "tui_disconnected"));
+        socket.on("end", () => {
+            // TUI half-closed: propagate to the phone's send side.
+            void writeQueue.then(() => Promise.resolve(relay.stream.send.finish?.())).catch(() => { });
+        });
+        // Phone -> TUI: pull from the Iroh recv stream into the socket.
+        void (async () => {
+            try {
+                while (!settled) {
+                    const chunk = await relay.stream.recv.read(RELAY_READ_LIMIT);
+                    if (!chunk || chunk.length === 0) {
+                        break;
+                    }
+                    const buffer = Buffer.from(Array.from(chunk));
+                    bytesDown += buffer.length;
+                    await writeGate.write(buffer);
+                    if (settled) {
+                        break;
+                    }
+                }
+                if (!settled) {
+                    // Phone half-closed or ended: flush any bytes still buffered in the
+                    // socket write queue and send FIN to the TUI, waiting for the write
+                    // side to drain before finish() destroys the socket. A bare
+                    // socket.end() + immediate destroy discards the unflushed tail of the
+                    // phone's final response.
+                    await writeGate.end().catch(() => { });
+                    finish(closeReason ?? "phone_disconnected");
+                }
+            }
+            catch (error) {
+                if (error instanceof StreamClosedError) {
+                    finish(closeReason ?? "tui_disconnected");
+                    return;
+                }
+                finish("error", error instanceof Error ? error.message : String(error));
+            }
+        })();
+        return true;
+    }
+}
+//# sourceMappingURL=relay-stream.js.map

package/dist/daemon/relay-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-stream.js","sourceRoot":"","sources":["../../src/daemon/relay-stream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAEtF,OAAO,EAAE,iBAAiB,EAA6C,MAAM,uBAAuB,CAAC;AAErG,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AAwDnC;;;;GAIG;AACH,MAAM,OAAO,aAAa;IACR,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC1C,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEzD,IAAI,CAAC,OAAyB,EAAgB;QAC7C,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAiB;YAC3B,OAAO;YACP,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;YACjD,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;YAC1D,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE;YAClE,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,kBAAkB;YAC3D,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,OAAO,CAAC,MAAM;SACtB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IAAA,CACb;IAED,6EAA6E;IAC7E,iBAAiB,CAAC,OAAe,EAA4B;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,KAAK,CAAC;IAAA,CACb;IAED,sBAAsB,CAAC,YAAoB,EAAE,aAAqB,EAAE,SAAiB,EAAkB;QACtG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC9C,CAAC,KAAK,EAAE,EAAE,CACT,KAAK,CAAC,YAAY,KAAK,YAAY;YACnC,KAAK,CAAC,aAAa,KAAK,aAAa;YACrC,KAAK,CAAC,SAAS,KAAK,SAAS,CAC9B,CAAC;IAAA,CACF;IAED,qBAAqB,CAAC,YAAoB,EAAE,aAAqB,EAAE,SAAiB,EAAiB;QACpG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC7C,CAAC,KAAK,EAAE,EAAE,CACT,KAAK,CAAC,YAAY,KAAK,YAAY;YACnC,KAAK,CAAC,aAAa,KAAK,aAAa;YACrC,KAAK,CAAC,SAAS,KAAK,SAAS,CAC9B,CAAC;IAAA,CACF;IAED,YAAY,GAAkB;QAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAAA,CACxC;IAED,aAAa,GAAmB;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAAA,CACzC;IAED,WAAW,GAAW;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAAA,CACxB;IAED,YAAY,CACX,OAAe,EACf,wBAAgC,EAChC,KAAyE,EAC3C;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,KAAK,CAAC,wBAAwB,KAAK,wBAAwB,EAAE,CAAC;YACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;QAClG,CAAC;QACD,IACC,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;YACzC,KAAK,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;YAC3C,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAClC,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;QACxG,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAAA,CAC3B;IAED,WAAW,CAAC,OAAe,EAAE,MAAwB,EAAQ;QAC5D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAAA,CACxC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAe,EAAE,UAAkB,EAAE,MAAc,EAAE,iBAAyB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAW;QAChH,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACtF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE7B,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEhD,MAAM,SAAS,GAAG,GAAG,CAAC;QACtB,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,eAAe;QAChC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,eAAe;QAClC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAAyC,CAAC;QAE9C,MAAM,MAAM,GAAG,CAAC,MAAwB,EAAE,KAAc,EAAE,EAAE,CAAC;YAC5D,IAAI,OAAO,EAAE,CAAC;gBACb,OAAO;YACR,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClC,SAAS,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;YACnE,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;YACnE,KAAK,CAAC,MAAM,CAAC;gBACZ,MAAM,EAAE,WAAW,IAAI,MAAM;gBAC7B,OAAO;gBACP,SAAS;gBACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;aACzC,CAAC,CAAC;QAAA,CACH,CAAC;QAEF,MAAM,WAAW,GAAgB;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;YACxD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,CAAC,MAAwB,EAAE,EAAE,CAAC;gBACpC,WAAW,GAAG,MAAM,CAAC;gBACrB,MAAM,CAAC,MAAM,CAAC,CAAC;YAAA,CACf;SACD,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAE5C,sEAAsE;QACtE,0EAA0E;QAC1E,4CAA4C;QAC5C,IAAI,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;QAClD,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,WAAoB,EAAE,EAAE,CAAC;YAC7D,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC;YACxB,IAAI,WAAW,EAAE,CAAC;gBACjB,MAAM,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,UAAU,GAAG,UAAU;iBACrB,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;iBAC7C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACX,IAAI,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;oBAC7B,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjB,CAAC;YAAA,CACD,CAAC;iBACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC;gBAC1B,MAAM,CAAC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAAA,CACxE,CAAC,CAAC;QAAA,CACJ,CAAC;QACF,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,YAAY,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,yEAAyE;QACzE,6CAA6C;QAC7C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,kBAAkB,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;YACtB,uDAAuD;YACvD,KAAK,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAAA,CAC1F,CAAC,CAAC;QAEH,gEAAgE;QAChE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC;gBACJ,OAAO,CAAC,OAAO,EAAE,CAAC;oBACjB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;oBAC7D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAClC,MAAM;oBACP,CAAC;oBACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC9C,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC;oBAC3B,MAAM,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC9B,IAAI,OAAO,EAAE,CAAC;wBACb,MAAM;oBACP,CAAC;gBACF,CAAC;gBACD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,oEAAoE;oBACpE,oEAAoE;oBACpE,4DAA4D;oBAC5D,sEAAsE;oBACtE,0BAA0B;oBAC1B,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;oBACtC,MAAM,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;gBAC7C,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;oBACxC,MAAM,CAAC,WAAW,IAAI,kBAAkB,CAAC,CAAC;oBAC1C,OAAO;gBACR,CAAC;gBACD,MAAM,CAAC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACzE,CAAC;QAAA,CACD,CAAC,EAAE,CAAC;QAEL,OAAO,IAAI,CAAC;IAAA,CACZ;CACD","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport { randomBytes, randomUUID } from \"node:crypto\";\nimport type { Socket } from \"node:net\";\nimport { DuplexWriteGate, StreamClosedError } from \"../core/rpc/duplex-write-gate.ts\";\nimport type { IrohBiStreamLike } from \"../core/rpc/iroh-transport.ts\";\nimport { encodeControlLine, type RelayCloseReason, type RelayPreamble } from \"./control-protocol.ts\";\n\nexport const RELAY_TOKEN_TTL_MS = 10_000;\n\nconst RELAY_READ_LIMIT = 64 * 1024;\n\nexport interface PendingRelay {\n\trelayId: string;\n\trelayToken: string;\n\tworkspaceName: string;\n\tsessionId: string;\n\tclientNodeId: string;\n\tconnectionId: string;\n\townerControlConnectionId: string;\n\tstreamId: string;\n\t/** The phone's Iroh stream, paused until the TUI redeems the token. */\n\tstream: IrohBiStreamLike;\n\tpreamble: RelayPreamble;\n\texpiresAt: number;\n\tused: boolean;\n\t/** Resolves when the relay finishes (either side closed). */\n\tsettle(outcome: RelayOutcome): void;\n}\n\nexport interface RelayOutcome {\n\treason: RelayCloseReason;\n\tbytesUp: number;\n\tbytesDown: number;\n\tdurationMs: number;\n\terror?: string;\n}\n\nexport interface ActiveRelay {\n\trelayId: string;\n\tworkspaceName: string;\n\tsessionId: string;\n\tclientNodeId: string;\n\tconnectionId: string;\n\townerControlConnectionId: string;\n\tstreamId: string;\n\tclose(reason: RelayCloseReason): void;\n}\n\nexport type RelayRpcAuthorizationResult =\n\t| { ok: true; relay: ActiveRelay }\n\t| { ok: false; code: \"not_found\" | \"not_held\" | \"session_mismatch\"; message: string };\n\nexport interface MintRelayOptions {\n\tworkspaceName: string;\n\tsessionId: string;\n\tclientNodeId: string;\n\tconnectionId: string;\n\townerControlConnectionId: string;\n\tstreamId: string;\n\tstream: IrohBiStreamLike;\n\tpreamble: Omit<RelayPreamble, \"type\" | \"relayId\">;\n\tnow?: number;\n\tsettle(outcome: RelayOutcome): void;\n}\n\n/**\n * Daemon-side relay lifecycle: token mint/expiry (10s, single-use), preamble\n * write, and the bidirectional raw byte pump between the phone's Iroh stream\n * and the TUI's relay unix connection. No inspection, no reframing.\n */\nexport class RelayRegistry {\n\tprivate readonly pending = new Map<string, PendingRelay>();\n\tprivate readonly active = new Map<string, ActiveRelay>();\n\n\tmint(options: MintRelayOptions): PendingRelay {\n\t\tconst relayId = `rl-${randomUUID()}`;\n\t\tconst relay: PendingRelay = {\n\t\t\trelayId,\n\t\t\trelayToken: randomBytes(32).toString(\"base64url\"),\n\t\t\tworkspaceName: options.workspaceName,\n\t\t\tsessionId: options.sessionId,\n\t\t\tclientNodeId: options.clientNodeId,\n\t\t\tconnectionId: options.connectionId,\n\t\t\townerControlConnectionId: options.ownerControlConnectionId,\n\t\t\tstreamId: options.streamId,\n\t\t\tstream: options.stream,\n\t\t\tpreamble: { ...options.preamble, type: \"relay_preamble\", relayId },\n\t\t\texpiresAt: (options.now ?? Date.now()) + RELAY_TOKEN_TTL_MS,\n\t\t\tused: false,\n\t\t\tsettle: options.settle,\n\t\t};\n\t\tthis.pending.set(relayId, relay);\n\t\treturn relay;\n\t}\n\n\t/** Invalidate an unredeemed offer (rekey, duplicate replacement, expiry). */\n\tinvalidatePending(relayId: string): PendingRelay | undefined {\n\t\tconst relay = this.pending.get(relayId);\n\t\tif (relay) {\n\t\t\trelay.used = true;\n\t\t\tthis.pending.delete(relayId);\n\t\t}\n\t\treturn relay;\n\t}\n\n\tpendingForConversation(clientNodeId: string, workspaceName: string, sessionId: string): PendingRelay[] {\n\t\treturn Array.from(this.pending.values()).filter(\n\t\t\t(relay) =>\n\t\t\t\trelay.clientNodeId === clientNodeId &&\n\t\t\t\trelay.workspaceName === workspaceName &&\n\t\t\t\trelay.sessionId === sessionId,\n\t\t);\n\t}\n\n\tactiveForConversation(clientNodeId: string, workspaceName: string, sessionId: string): ActiveRelay[] {\n\t\treturn Array.from(this.active.values()).filter(\n\t\t\t(relay) =>\n\t\t\t\trelay.clientNodeId === clientNodeId &&\n\t\t\t\trelay.workspaceName === workspaceName &&\n\t\t\t\trelay.sessionId === sessionId,\n\t\t);\n\t}\n\n\tactiveRelays(): ActiveRelay[] {\n\t\treturn Array.from(this.active.values());\n\t}\n\n\tpendingRelays(): PendingRelay[] {\n\t\treturn Array.from(this.pending.values());\n\t}\n\n\tactiveCount(): number {\n\t\treturn this.active.size;\n\t}\n\n\tauthorizeRpc(\n\t\trelayId: string,\n\t\townerControlConnectionId: string,\n\t\tscope: { clientNodeId: string; workspaceName: string; sessionId: string },\n\t): RelayRpcAuthorizationResult {\n\t\tconst relay = this.active.get(relayId);\n\t\tif (!relay) {\n\t\t\treturn { ok: false, code: \"not_found\", message: \"active relay not found\" };\n\t\t}\n\t\tif (relay.ownerControlConnectionId !== ownerControlConnectionId) {\n\t\t\treturn { ok: false, code: \"not_held\", message: \"relay is not owned by this control connection\" };\n\t\t}\n\t\tif (\n\t\t\trelay.clientNodeId !== scope.clientNodeId ||\n\t\t\trelay.workspaceName !== scope.workspaceName ||\n\t\t\trelay.sessionId !== scope.sessionId\n\t\t) {\n\t\t\treturn { ok: false, code: \"session_mismatch\", message: \"relay RPC scope does not match active relay\" };\n\t\t}\n\t\treturn { ok: true, relay };\n\t}\n\n\tcloseActive(relayId: string, reason: RelayCloseReason): void {\n\t\tthis.active.get(relayId)?.close(reason);\n\t}\n\n\t/**\n\t * Redeem a relay token from a TUI relay hello. On success, acks the socket,\n\t * writes the preamble line, and starts the byte pump. Returns false when the\n\t * token is invalid/expired/used (caller sends bad_relay_token).\n\t */\n\tadmit(relayId: string, relayToken: string, socket: Socket, bufferedRemainder: Buffer, now = Date.now()): boolean {\n\t\tconst relay = this.pending.get(relayId);\n\t\tif (!relay || relay.used || relay.relayToken !== relayToken || now > relay.expiresAt) {\n\t\t\treturn false;\n\t\t}\n\t\trelay.used = true;\n\t\tthis.pending.delete(relayId);\n\n\t\tsocket.write(encodeControlLine({ type: \"hello_ack\", ok: true }));\n\t\tsocket.write(encodeControlLine(relay.preamble));\n\n\t\tconst startedAt = now;\n\t\tconst writeGate = new DuplexWriteGate(socket);\n\t\tlet bytesUp = 0; // TUI -> phone\n\t\tlet bytesDown = 0; // phone -> TUI\n\t\tlet settled = false;\n\t\tlet closeReason: RelayCloseReason | undefined;\n\n\t\tconst finish = (reason: RelayCloseReason, error?: string) => {\n\t\t\tif (settled) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tsettled = true;\n\t\t\tthis.active.delete(relay.relayId);\n\t\t\twriteGate.dispose();\n\t\t\tsocket.destroy();\n\t\t\tvoid Promise.resolve(relay.stream.send.finish?.()).catch(() => {});\n\t\t\tvoid Promise.resolve(relay.stream.recv.stop?.(0n)).catch(() => {});\n\t\t\trelay.settle({\n\t\t\t\treason: closeReason ?? reason,\n\t\t\t\tbytesUp,\n\t\t\t\tbytesDown,\n\t\t\t\tdurationMs: Date.now() - startedAt,\n\t\t\t\t...(error === undefined ? {} : { error }),\n\t\t\t});\n\t\t};\n\n\t\tconst activeRelay: ActiveRelay = {\n\t\t\trelayId: relay.relayId,\n\t\t\tworkspaceName: relay.workspaceName,\n\t\t\tsessionId: relay.sessionId,\n\t\t\tclientNodeId: relay.clientNodeId,\n\t\t\tconnectionId: relay.connectionId,\n\t\t\townerControlConnectionId: relay.ownerControlConnectionId,\n\t\t\tstreamId: relay.streamId,\n\t\t\tclose: (reason: RelayCloseReason) => {\n\t\t\t\tcloseReason = reason;\n\t\t\t\tfinish(reason);\n\t\t\t},\n\t\t};\n\t\tthis.active.set(relay.relayId, activeRelay);\n\n\t\t// TUI -> phone: socket bytes go straight to the Iroh send stream. The\n\t\t// socket is paused while a chunk is in flight so a slow phone link cannot\n\t\t// buffer unbounded data in the write queue.\n\t\tlet writeQueue: Promise<void> = Promise.resolve();\n\t\tconst enqueueWrite = (chunk: Buffer, pauseSocket: boolean) => {\n\t\t\tbytesUp += chunk.length;\n\t\t\tif (pauseSocket) {\n\t\t\t\tsocket.pause();\n\t\t\t}\n\t\t\tconst bytes = Array.from(chunk);\n\t\t\twriteQueue = writeQueue\n\t\t\t\t.then(() => relay.stream.send.writeAll(bytes))\n\t\t\t\t.then(() => {\n\t\t\t\t\tif (pauseSocket && !settled) {\n\t\t\t\t\t\tsocket.resume();\n\t\t\t\t\t}\n\t\t\t\t})\n\t\t\t\t.catch((error: unknown) => {\n\t\t\t\t\tfinish(\"error\", error instanceof Error ? error.message : String(error));\n\t\t\t\t});\n\t\t};\n\t\tif (bufferedRemainder.length > 0) {\n\t\t\tenqueueWrite(bufferedRemainder, false);\n\t\t}\n\t\tsocket.on(\"data\", (chunk: Buffer) => enqueueWrite(chunk, true));\n\t\tsocket.on(\"error\", (error: Error) => finish(\"error\", error.message));\n\t\t// A close without a daemon-initiated reason or a socket error is the TUI\n\t\t// going away (process exit, socket destroy).\n\t\tsocket.on(\"close\", () => finish(closeReason ?? \"tui_disconnected\"));\n\t\tsocket.on(\"end\", () => {\n\t\t\t// TUI half-closed: propagate to the phone's send side.\n\t\t\tvoid writeQueue.then(() => Promise.resolve(relay.stream.send.finish?.())).catch(() => {});\n\t\t});\n\n\t\t// Phone -> TUI: pull from the Iroh recv stream into the socket.\n\t\tvoid (async () => {\n\t\t\ttry {\n\t\t\t\twhile (!settled) {\n\t\t\t\t\tconst chunk = await relay.stream.recv.read(RELAY_READ_LIMIT);\n\t\t\t\t\tif (!chunk || chunk.length === 0) {\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t\tconst buffer = Buffer.from(Array.from(chunk));\n\t\t\t\t\tbytesDown += buffer.length;\n\t\t\t\t\tawait writeGate.write(buffer);\n\t\t\t\t\tif (settled) {\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tif (!settled) {\n\t\t\t\t\t// Phone half-closed or ended: flush any bytes still buffered in the\n\t\t\t\t\t// socket write queue and send FIN to the TUI, waiting for the write\n\t\t\t\t\t// side to drain before finish() destroys the socket. A bare\n\t\t\t\t\t// socket.end() + immediate destroy discards the unflushed tail of the\n\t\t\t\t\t// phone's final response.\n\t\t\t\t\tawait writeGate.end().catch(() => {});\n\t\t\t\t\tfinish(closeReason ?? \"phone_disconnected\");\n\t\t\t\t}\n\t\t\t} catch (error) {\n\t\t\t\tif (error instanceof StreamClosedError) {\n\t\t\t\t\tfinish(closeReason ?? \"tui_disconnected\");\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tfinish(\"error\", error instanceof Error ? error.message : String(error));\n\t\t\t}\n\t\t})();\n\n\t\treturn true;\n\t}\n}\n"]}

package/dist/daemon/remote-cli.d.ts

@@ -0,0 +1,7 @@
+/** Render only the non-secret ticket fields a user should compare in Volt. */
+export declare function formatRemotePairingVerificationLines(ticket: string): string[];
+/** Router for `volt remote <command>` (daemon control clients); returns true when handled. */
+export declare function handleRemoteControlCommand(args: string[], options: {
+    isStandaloneBinary: boolean;
+}): Promise<boolean>;
+//# sourceMappingURL=remote-cli.d.ts.map