@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/core/remote/iroh/ticket.js

@@ -0,0 +1,267 @@
+import { Buffer } from "node:buffer";
+import { createHash } from "node:crypto";
+import { isIP } from "node:net";
+import { IROH_REMOTE_ALPN, IROH_REMOTE_TICKET_PREFIX, IrohRemoteOutcomeError, isIrohRemoteRelayMode, isIrohRemoteRelayUrls, } from "./protocol.js";
+/**
+ * Match the iOS pairing confirmation fingerprint: the first 128 bits of the
+ * SHA-256 digest, rendered as four uppercase 32-bit groups.
+ */
+export function formatIrohRemoteHostFingerprint(endpointIdBytes) {
+    if (endpointIdBytes.length !== 32) {
+        throw new Error("Iroh endpoint identity must be exactly 32 bytes");
+    }
+    const bytes = new Uint8Array(endpointIdBytes.length);
+    for (let index = 0; index < endpointIdBytes.length; index++) {
+        const value = endpointIdBytes[index];
+        if (value === undefined || !Number.isInteger(value) || value < 0 || value > 0xff) {
+            throw new Error("Iroh endpoint identity contains an invalid byte");
+        }
+        bytes[index] = value;
+    }
+    const digest = createHash("sha256").update(bytes).digest("hex").slice(0, 32).toUpperCase();
+    return digest.match(/.{8}/g).join("-");
+}
+/** Decode a ticket into only the values that are safe to display for comparison. */
+export function getIrohRemotePairingVerificationDetails(ticket) {
+    const payload = decodeIrohRemoteTicketPayload(ticket);
+    if (payload.nodeId === undefined) {
+        throw new Error("ticket nodeId is required for pairing verification");
+    }
+    const hostNodeId = payload.nodeId.trim().toLowerCase();
+    if (!/^[0-9a-f]{64}$/.test(hostNodeId)) {
+        throw new Error("ticket nodeId must be a 32-byte hexadecimal Iroh endpoint identity");
+    }
+    const workspace = payload.workspace.trim();
+    if (workspace.length === 0) {
+        throw new Error("ticket workspace is required for pairing verification");
+    }
+    const relayMode = payload.relayMode ?? "disabled";
+    return {
+        ...(payload.expiresAt === undefined ? {} : { expiresAt: payload.expiresAt }),
+        hostFingerprint: formatIrohRemoteHostFingerprint(Buffer.from(hostNodeId, "hex")),
+        hostNodeId,
+        relayMode,
+        relayOrigins: normalizePairingRelayOrigins(payload.relayUrls ?? [], relayMode),
+        workspace,
+    };
+}
+function normalizePairingRelayOrigins(values, relayMode) {
+    const nonEmptyValues = values.filter((value) => value.trim().length > 0);
+    if (relayMode !== "production") {
+        if (nonEmptyValues.length > 0) {
+            throw new Error("ticket relay URLs are only valid in production relay mode");
+        }
+        return [];
+    }
+    if (nonEmptyValues.length === 0) {
+        throw new Error("ticket production relay mode requires HTTPS relay origins");
+    }
+    return [...new Set(nonEmptyValues.map(normalizeHttpsRelayOrigin))].sort();
+}
+function normalizeHttpsRelayOrigin(value) {
+    let url;
+    try {
+        url = new URL(value.trim());
+    }
+    catch {
+        throw new Error("ticket relay URL must be a valid HTTPS origin");
+    }
+    if (url.protocol !== "https:" ||
+        url.username.length > 0 ||
+        url.password.length > 0 ||
+        url.search.length > 0 ||
+        url.hash.length > 0 ||
+        (url.pathname !== "" && url.pathname !== "/")) {
+        throw new Error("ticket relay URL must be an HTTPS origin without credentials, path, query, or fragment");
+    }
+    const bracketed = url.hostname.startsWith("[") && url.hostname.endsWith("]");
+    const rawHostname = bracketed ? url.hostname.slice(1, -1) : url.hostname;
+    const hostname = rawHostname.toLowerCase().replace(/\.+$/, "");
+    if (hostname.length === 0 || isUnsafeLocalRelayHost(hostname)) {
+        throw new Error("ticket relay URL must not target a local or private host");
+    }
+    const formattedHostname = isIP(hostname) === 6 ? `[${hostname}]` : hostname;
+    return `https://${formattedHostname}${url.port.length === 0 || url.port === "443" ? "" : `:${url.port}`}`;
+}
+function isUnsafeLocalRelayHost(hostname) {
+    if (hostname === "localhost" ||
+        hostname.endsWith(".localhost") ||
+        hostname === "local" ||
+        hostname.endsWith(".local") ||
+        hostname.includes("%")) {
+        return true;
+    }
+    if (isIP(hostname) === 4) {
+        return isUnsafeIpv4(hostname.split(".").map(Number));
+    }
+    if (isIP(hostname) !== 6) {
+        return false;
+    }
+    const bytes = parseIpv6Bytes(hostname);
+    if (bytes === undefined)
+        return true;
+    const unspecified = bytes.every((byte) => byte === 0);
+    const loopback = bytes.slice(0, 15).every((byte) => byte === 0) && bytes[15] === 1;
+    const linkLocal = bytes[0] === 0xfe && (bytes[1] & 0xc0) === 0x80;
+    const uniqueLocal = (bytes[0] & 0xfe) === 0xfc;
+    const multicast = bytes[0] === 0xff;
+    if (unspecified || loopback || linkLocal || uniqueLocal || multicast)
+        return true;
+    const ipv4Mapped = bytes.slice(0, 10).every((byte) => byte === 0) && bytes[10] === 0xff && bytes[11] === 0xff;
+    return ipv4Mapped && isUnsafeIpv4(bytes.slice(12));
+}
+function isUnsafeIpv4(bytes) {
+    if (bytes.length !== 4 || bytes.some((byte) => !Number.isInteger(byte) || byte < 0 || byte > 0xff))
+        return true;
+    return (bytes[0] === 0 ||
+        bytes[0] === 10 ||
+        bytes[0] === 127 ||
+        (bytes[0] === 100 && bytes[1] >= 64 && bytes[1] <= 127) ||
+        (bytes[0] === 169 && bytes[1] === 254) ||
+        (bytes[0] === 172 && bytes[1] >= 16 && bytes[1] <= 31) ||
+        (bytes[0] === 192 && bytes[1] === 168) ||
+        (bytes[0] === 198 && (bytes[1] === 18 || bytes[1] === 19)) ||
+        bytes[0] >= 224);
+}
+function parseIpv6Bytes(address) {
+    const halves = address.split("::");
+    if (halves.length > 2)
+        return undefined;
+    const parseHalf = (value) => {
+        if (value.length === 0)
+            return [];
+        const words = [];
+        for (const part of value.split(":")) {
+            if (!/^[0-9a-f]{1,4}$/i.test(part))
+                return undefined;
+            words.push(Number.parseInt(part, 16));
+        }
+        return words;
+    };
+    const head = parseHalf(halves[0]);
+    const tail = parseHalf(halves[1] ?? "");
+    if (head === undefined || tail === undefined)
+        return undefined;
+    const omitted = 8 - head.length - tail.length;
+    if ((halves.length === 1 && omitted !== 0) || (halves.length === 2 && omitted < 1))
+        return undefined;
+    const words = [...head, ...Array.from({ length: omitted }, () => 0), ...tail];
+    if (words.length !== 8)
+        return undefined;
+    return words.flatMap((word) => [word >> 8, word & 0xff]);
+}
+export function encodeIrohRemoteTicketPayload(payload) {
+    return `${IROH_REMOTE_TICKET_PREFIX}${Buffer.from(JSON.stringify(payload), "utf8").toString("base64url")}`;
+}
+export function decodeIrohRemoteTicketPayload(ticket) {
+    if (!ticket.startsWith(IROH_REMOTE_TICKET_PREFIX)) {
+        throw new Error(`Expected ticket prefix ${IROH_REMOTE_TICKET_PREFIX}`);
+    }
+    const encoded = ticket.slice(IROH_REMOTE_TICKET_PREFIX.length);
+    let parsed;
+    try {
+        parsed = JSON.parse(Buffer.from(encoded, "base64url").toString("utf8"));
+    }
+    catch (error) {
+        throw new Error(`Failed to decode Iroh remote ticket: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    return parseIrohRemoteTicketPayload(parsed);
+}
+export function parseIrohRemoteTicketPayload(value) {
+    const payload = expectRecord(value, "Iroh remote ticket payload");
+    const alpn = expectString(payload.alpn, "ticket alpn");
+    if (alpn !== IROH_REMOTE_ALPN) {
+        throw new Error(`Unsupported ticket ALPN: ${alpn}`);
+    }
+    const expiresAt = expectOptionalNumber(payload.expiresAt, "ticket expiresAt");
+    const irohTicket = expectString(payload.irohTicket, "ticket irohTicket");
+    const nodeId = expectOptionalString(payload.nodeId, "ticket nodeId");
+    const relayModeValue = payload.relayMode;
+    if (relayModeValue !== undefined && !isIrohRemoteRelayMode(relayModeValue)) {
+        throw new Error("ticket relayMode must be disabled, development, or production");
+    }
+    const relayUrlsValue = payload.relayUrls;
+    if (relayUrlsValue !== undefined && !isIrohRemoteRelayUrls(relayUrlsValue)) {
+        throw new Error("ticket relayUrls must be a non-empty array of relay URLs");
+    }
+    if (relayModeValue === "production" && relayUrlsValue === undefined) {
+        throw new Error("ticket relayMode production requires relayUrls");
+    }
+    const relayAuthToken = expectOptionalString(payload.relayAuthToken, "ticket relayAuthToken");
+    const secret = expectOptionalString(payload.secret, "ticket secret");
+    const workspace = expectString(payload.workspace, "ticket workspace");
+    return {
+        alpn,
+        expiresAt,
+        irohTicket,
+        nodeId,
+        relayMode: relayModeValue,
+        relayUrls: relayUrlsValue,
+        relayAuthToken,
+        secret,
+        workspace,
+    };
+}
+export function assertIrohRemoteTicketNotExpired(payload, now = Date.now()) {
+    if (payload.expiresAt !== undefined && now > payload.expiresAt) {
+        throw new Error("Pairing ticket has expired");
+    }
+}
+export function createIrohRemoteSanitizedReconnectTicketPayload(payload) {
+    if (payload.nodeId === undefined) {
+        throw new IrohRemoteOutcomeError("saved_host_invalid", "ticket nodeId is required for saved-host reconnect");
+    }
+    if (payload.relayMode === undefined) {
+        throw new IrohRemoteOutcomeError("saved_host_invalid", "ticket relayMode is required for saved-host reconnect");
+    }
+    if (payload.relayMode === "production" && payload.relayUrls === undefined) {
+        throw new IrohRemoteOutcomeError("saved_host_invalid", "ticket relayUrls are required for production relayMode");
+    }
+    return {
+        alpn: payload.alpn,
+        irohTicket: payload.irohTicket,
+        nodeId: payload.nodeId,
+        relayMode: payload.relayMode,
+        ...(payload.relayUrls === undefined ? {} : { relayUrls: payload.relayUrls }),
+        workspace: payload.workspace,
+    };
+}
+export function createIrohRemoteSanitizedReconnectTicket(ticket) {
+    return encodeIrohRemoteTicketPayload(createIrohRemoteSanitizedReconnectTicketPayload(decodeIrohRemoteTicketPayload(ticket)));
+}
+export function assertIrohRemoteTicketPayloadHostIdentity(payload, expectedHostNodeId) {
+    if (payload.nodeId === undefined) {
+        throw new IrohRemoteOutcomeError("saved_host_invalid", "ticket nodeId is required for host identity verification");
+    }
+    if (payload.nodeId !== expectedHostNodeId) {
+        throw new IrohRemoteOutcomeError("host_identity_mismatch", `expected ${expectedHostNodeId}, got ${payload.nodeId}`);
+    }
+}
+function expectRecord(value, label) {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new Error(`${label} must be an object`);
+    }
+    return value;
+}
+function expectString(value, label) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new Error(`${label} must be a non-empty string`);
+    }
+    return value;
+}
+function expectOptionalString(value, label) {
+    if (value === undefined) {
+        return undefined;
+    }
+    return expectString(value, label);
+}
+function expectOptionalNumber(value, label) {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (typeof value !== "number" || !Number.isFinite(value)) {
+        throw new Error(`${label} must be a finite number`);
+    }
+    return value;
+}
+//# sourceMappingURL=ticket.js.map

package/dist/core/remote/iroh/ticket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ticket.js","sourceRoot":"","sources":["../../../../src/core/remote/iroh/ticket.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EACN,gBAAgB,EAChB,yBAAyB,EACzB,sBAAsB,EAEtB,qBAAqB,EACrB,qBAAqB,GACrB,MAAM,eAAe,CAAC;AAmCvB;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,eAAkC,EAAU;IAC3F,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACrD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3F,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CACxC;AAED,oFAAoF;AACpF,MAAM,UAAU,uCAAuC,CAAC,MAAc,EAAwC;IAC7G,MAAM,OAAO,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;IAClD,OAAO;QACN,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5E,eAAe,EAAE,+BAA+B,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAChF,UAAU;QACV,SAAS;QACT,YAAY,EAAE,4BAA4B,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,SAAS,CAAC;QAC9E,SAAS;KACT,CAAC;AAAA,CACF;AAED,SAAS,4BAA4B,CAAC,MAAgB,EAAE,SAA8B,EAAY;IACjG,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzE,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAChC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,EAAE,CAAC;IACX,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAAA,CAC1E;AAED,SAAS,yBAAyB,CAAC,KAAa,EAAU;IACzD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAClE,CAAC;IACD,IACC,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACvB,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACnB,CAAC,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,EAC5C,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC3G,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IACzE,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5E,OAAO,WAAW,iBAAiB,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;AAAA,CAC1G;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAW;IAC1D,IACC,QAAQ,KAAK,WAAW;QACxB,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC/B,QAAQ,KAAK,OAAO;QACpB,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EACrB,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;IACnE,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;IAChD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IACpC,IAAI,WAAW,IAAI,QAAQ,IAAI,SAAS,IAAI,WAAW,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAClF,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC;IAC9G,OAAO,UAAU,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAAA,CACnD;AAED,SAAS,YAAY,CAAC,KAAe,EAAW;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChH,OAAO,CACN,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACd,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE;QACf,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;QAChB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,IAAI,KAAK,CAAC,CAAC,CAAE,IAAI,GAAG,CAAC;QACzD,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;QACtC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,IAAI,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC;QACxD,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;QACtC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1D,KAAK,CAAC,CAAC,CAAE,IAAI,GAAG,CAChB,CAAC;AAAA,CACF;AAED,SAAS,cAAc,CAAC,OAAe,EAAwB;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,SAAS,GAAG,CAAC,KAAa,EAAwB,EAAE,CAAC;QAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,KAAK,CAAC;IAAA,CACb,CAAC;IACF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/D,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACrG,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;AAAA,CACzD;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAgC,EAAU;IACvF,OAAO,GAAG,yBAAyB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAAA,CAC3G;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAc,EAA2B;IACtF,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,0BAA0B,yBAAyB,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,4BAA4B,CAAC,MAAM,CAAC,CAAC;AAAA,CAC5C;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc,EAA2B;IACrF,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,4BAA4B,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;IACzC,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;IACzC,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,cAAc,KAAK,YAAY,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,cAAc,GAAG,oBAAoB,CAAC,OAAO,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAEtE,OAAO;QACN,IAAI;QACJ,SAAS;QACT,UAAU;QACV,MAAM;QACN,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,cAAc;QACzB,cAAc;QACd,MAAM;QACN,SAAS;KACT,CAAC;AAAA,CACF;AAED,MAAM,UAAU,gCAAgC,CAAC,OAAgC,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAQ;IAC1G,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/C,CAAC;AAAA,CACD;AAED,MAAM,UAAU,+CAA+C,CAC9D,OAAgC,EACY;IAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,sBAAsB,CAAC,oBAAoB,EAAE,oDAAoD,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,sBAAsB,CAAC,oBAAoB,EAAE,uDAAuD,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,YAAY,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC3E,MAAM,IAAI,sBAAsB,CAAC,oBAAoB,EAAE,wDAAwD,CAAC,CAAC;IAClH,CAAC;IACD,OAAO;QACN,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5E,SAAS,EAAE,OAAO,CAAC,SAAS;KAC5B,CAAC;AAAA,CACF;AAED,MAAM,UAAU,wCAAwC,CAAC,MAAc,EAAU;IAChF,OAAO,6BAA6B,CACnC,+CAA+C,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC,CACtF,CAAC;AAAA,CACF;AAED,MAAM,UAAU,yCAAyC,CACxD,OAAgC,EAChC,kBAA0B,EACnB;IACP,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,sBAAsB,CAC/B,oBAAoB,EACpB,0DAA0D,CAC1D,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC3C,MAAM,IAAI,sBAAsB,CAC/B,wBAAwB,EACxB,YAAY,kBAAkB,SAAS,OAAO,CAAC,MAAM,EAAE,CACvD,CAAC;IACH,CAAC;AAAA,CACD;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa,EAA2B;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAgC,CAAC;AAAA,CACxC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,KAAa,EAAU;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa,EAAsB;IAChF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAAA,CAClC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,KAAa,EAAsB;IAChF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport { createHash } from \"node:crypto\";\nimport { isIP } from \"node:net\";\nimport {\n\tIROH_REMOTE_ALPN,\n\tIROH_REMOTE_TICKET_PREFIX,\n\tIrohRemoteOutcomeError,\n\ttype IrohRemoteRelayMode,\n\tisIrohRemoteRelayMode,\n\tisIrohRemoteRelayUrls,\n} from \"./protocol.ts\";\n\nexport interface IrohRemoteTicketPayload {\n\talpn: typeof IROH_REMOTE_ALPN;\n\texpiresAt?: number;\n\tirohTicket: string;\n\tnodeId?: string;\n\trelayMode?: IrohRemoteRelayMode;\n\t/** Relay server URLs the client should use; required when relayMode is \"production\". */\n\trelayUrls?: string[];\n\t/**\n\t * Bearer token for relays behind access.shared_token. Secret-like: carried\n\t * in pairing tickets (clients keychain it) and stripped from sanitized\n\t * reconnect tickets.\n\t */\n\trelayAuthToken?: string;\n\tsecret?: string;\n\tworkspace: string;\n}\n\nexport interface IrohRemoteSanitizedReconnectTicketPayload extends IrohRemoteTicketPayload {\n\tnodeId: string;\n\trelayMode: IrohRemoteRelayMode;\n}\n\n/** Non-secret values a user can compare before accepting a pairing ticket. */\nexport interface IrohRemotePairingVerificationDetails {\n\texpiresAt?: number;\n\thostFingerprint: string;\n\thostNodeId: string;\n\trelayMode: IrohRemoteRelayMode;\n\trelayOrigins: string[];\n\tworkspace: string;\n}\n\n/**\n * Match the iOS pairing confirmation fingerprint: the first 128 bits of the\n * SHA-256 digest, rendered as four uppercase 32-bit groups.\n */\nexport function formatIrohRemoteHostFingerprint(endpointIdBytes: ArrayLike<number>): string {\n\tif (endpointIdBytes.length !== 32) {\n\t\tthrow new Error(\"Iroh endpoint identity must be exactly 32 bytes\");\n\t}\n\tconst bytes = new Uint8Array(endpointIdBytes.length);\n\tfor (let index = 0; index < endpointIdBytes.length; index++) {\n\t\tconst value = endpointIdBytes[index];\n\t\tif (value === undefined || !Number.isInteger(value) || value < 0 || value > 0xff) {\n\t\t\tthrow new Error(\"Iroh endpoint identity contains an invalid byte\");\n\t\t}\n\t\tbytes[index] = value;\n\t}\n\tconst digest = createHash(\"sha256\").update(bytes).digest(\"hex\").slice(0, 32).toUpperCase();\n\treturn digest.match(/.{8}/g)!.join(\"-\");\n}\n\n/** Decode a ticket into only the values that are safe to display for comparison. */\nexport function getIrohRemotePairingVerificationDetails(ticket: string): IrohRemotePairingVerificationDetails {\n\tconst payload = decodeIrohRemoteTicketPayload(ticket);\n\tif (payload.nodeId === undefined) {\n\t\tthrow new Error(\"ticket nodeId is required for pairing verification\");\n\t}\n\tconst hostNodeId = payload.nodeId.trim().toLowerCase();\n\tif (!/^[0-9a-f]{64}$/.test(hostNodeId)) {\n\t\tthrow new Error(\"ticket nodeId must be a 32-byte hexadecimal Iroh endpoint identity\");\n\t}\n\tconst workspace = payload.workspace.trim();\n\tif (workspace.length === 0) {\n\t\tthrow new Error(\"ticket workspace is required for pairing verification\");\n\t}\n\tconst relayMode = payload.relayMode ?? \"disabled\";\n\treturn {\n\t\t...(payload.expiresAt === undefined ? {} : { expiresAt: payload.expiresAt }),\n\t\thostFingerprint: formatIrohRemoteHostFingerprint(Buffer.from(hostNodeId, \"hex\")),\n\t\thostNodeId,\n\t\trelayMode,\n\t\trelayOrigins: normalizePairingRelayOrigins(payload.relayUrls ?? [], relayMode),\n\t\tworkspace,\n\t};\n}\n\nfunction normalizePairingRelayOrigins(values: string[], relayMode: IrohRemoteRelayMode): string[] {\n\tconst nonEmptyValues = values.filter((value) => value.trim().length > 0);\n\tif (relayMode !== \"production\") {\n\t\tif (nonEmptyValues.length > 0) {\n\t\t\tthrow new Error(\"ticket relay URLs are only valid in production relay mode\");\n\t\t}\n\t\treturn [];\n\t}\n\tif (nonEmptyValues.length === 0) {\n\t\tthrow new Error(\"ticket production relay mode requires HTTPS relay origins\");\n\t}\n\treturn [...new Set(nonEmptyValues.map(normalizeHttpsRelayOrigin))].sort();\n}\n\nfunction normalizeHttpsRelayOrigin(value: string): string {\n\tlet url: URL;\n\ttry {\n\t\turl = new URL(value.trim());\n\t} catch {\n\t\tthrow new Error(\"ticket relay URL must be a valid HTTPS origin\");\n\t}\n\tif (\n\t\turl.protocol !== \"https:\" ||\n\t\turl.username.length > 0 ||\n\t\turl.password.length > 0 ||\n\t\turl.search.length > 0 ||\n\t\turl.hash.length > 0 ||\n\t\t(url.pathname !== \"\" && url.pathname !== \"/\")\n\t) {\n\t\tthrow new Error(\"ticket relay URL must be an HTTPS origin without credentials, path, query, or fragment\");\n\t}\n\n\tconst bracketed = url.hostname.startsWith(\"[\") && url.hostname.endsWith(\"]\");\n\tconst rawHostname = bracketed ? url.hostname.slice(1, -1) : url.hostname;\n\tconst hostname = rawHostname.toLowerCase().replace(/\\.+$/, \"\");\n\tif (hostname.length === 0 || isUnsafeLocalRelayHost(hostname)) {\n\t\tthrow new Error(\"ticket relay URL must not target a local or private host\");\n\t}\n\tconst formattedHostname = isIP(hostname) === 6 ? `[${hostname}]` : hostname;\n\treturn `https://${formattedHostname}${url.port.length === 0 || url.port === \"443\" ? \"\" : `:${url.port}`}`;\n}\n\nfunction isUnsafeLocalRelayHost(hostname: string): boolean {\n\tif (\n\t\thostname === \"localhost\" ||\n\t\thostname.endsWith(\".localhost\") ||\n\t\thostname === \"local\" ||\n\t\thostname.endsWith(\".local\") ||\n\t\thostname.includes(\"%\")\n\t) {\n\t\treturn true;\n\t}\n\tif (isIP(hostname) === 4) {\n\t\treturn isUnsafeIpv4(hostname.split(\".\").map(Number));\n\t}\n\tif (isIP(hostname) !== 6) {\n\t\treturn false;\n\t}\n\tconst bytes = parseIpv6Bytes(hostname);\n\tif (bytes === undefined) return true;\n\tconst unspecified = bytes.every((byte) => byte === 0);\n\tconst loopback = bytes.slice(0, 15).every((byte) => byte === 0) && bytes[15] === 1;\n\tconst linkLocal = bytes[0] === 0xfe && (bytes[1]! & 0xc0) === 0x80;\n\tconst uniqueLocal = (bytes[0]! & 0xfe) === 0xfc;\n\tconst multicast = bytes[0] === 0xff;\n\tif (unspecified || loopback || linkLocal || uniqueLocal || multicast) return true;\n\tconst ipv4Mapped = bytes.slice(0, 10).every((byte) => byte === 0) && bytes[10] === 0xff && bytes[11] === 0xff;\n\treturn ipv4Mapped && isUnsafeIpv4(bytes.slice(12));\n}\n\nfunction isUnsafeIpv4(bytes: number[]): boolean {\n\tif (bytes.length !== 4 || bytes.some((byte) => !Number.isInteger(byte) || byte < 0 || byte > 0xff)) return true;\n\treturn (\n\t\tbytes[0] === 0 ||\n\t\tbytes[0] === 10 ||\n\t\tbytes[0] === 127 ||\n\t\t(bytes[0] === 100 && bytes[1]! >= 64 && bytes[1]! <= 127) ||\n\t\t(bytes[0] === 169 && bytes[1] === 254) ||\n\t\t(bytes[0] === 172 && bytes[1]! >= 16 && bytes[1]! <= 31) ||\n\t\t(bytes[0] === 192 && bytes[1] === 168) ||\n\t\t(bytes[0] === 198 && (bytes[1] === 18 || bytes[1] === 19)) ||\n\t\tbytes[0]! >= 224\n\t);\n}\n\nfunction parseIpv6Bytes(address: string): number[] | undefined {\n\tconst halves = address.split(\"::\");\n\tif (halves.length > 2) return undefined;\n\tconst parseHalf = (value: string): number[] | undefined => {\n\t\tif (value.length === 0) return [];\n\t\tconst words: number[] = [];\n\t\tfor (const part of value.split(\":\")) {\n\t\t\tif (!/^[0-9a-f]{1,4}$/i.test(part)) return undefined;\n\t\t\twords.push(Number.parseInt(part, 16));\n\t\t}\n\t\treturn words;\n\t};\n\tconst head = parseHalf(halves[0]!);\n\tconst tail = parseHalf(halves[1] ?? \"\");\n\tif (head === undefined || tail === undefined) return undefined;\n\tconst omitted = 8 - head.length - tail.length;\n\tif ((halves.length === 1 && omitted !== 0) || (halves.length === 2 && omitted < 1)) return undefined;\n\tconst words = [...head, ...Array.from({ length: omitted }, () => 0), ...tail];\n\tif (words.length !== 8) return undefined;\n\treturn words.flatMap((word) => [word >> 8, word & 0xff]);\n}\n\nexport function encodeIrohRemoteTicketPayload(payload: IrohRemoteTicketPayload): string {\n\treturn `${IROH_REMOTE_TICKET_PREFIX}${Buffer.from(JSON.stringify(payload), \"utf8\").toString(\"base64url\")}`;\n}\n\nexport function decodeIrohRemoteTicketPayload(ticket: string): IrohRemoteTicketPayload {\n\tif (!ticket.startsWith(IROH_REMOTE_TICKET_PREFIX)) {\n\t\tthrow new Error(`Expected ticket prefix ${IROH_REMOTE_TICKET_PREFIX}`);\n\t}\n\n\tconst encoded = ticket.slice(IROH_REMOTE_TICKET_PREFIX.length);\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(Buffer.from(encoded, \"base64url\").toString(\"utf8\"));\n\t} catch (error: unknown) {\n\t\tthrow new Error(`Failed to decode Iroh remote ticket: ${error instanceof Error ? error.message : String(error)}`);\n\t}\n\treturn parseIrohRemoteTicketPayload(parsed);\n}\n\nexport function parseIrohRemoteTicketPayload(value: unknown): IrohRemoteTicketPayload {\n\tconst payload = expectRecord(value, \"Iroh remote ticket payload\");\n\tconst alpn = expectString(payload.alpn, \"ticket alpn\");\n\tif (alpn !== IROH_REMOTE_ALPN) {\n\t\tthrow new Error(`Unsupported ticket ALPN: ${alpn}`);\n\t}\n\n\tconst expiresAt = expectOptionalNumber(payload.expiresAt, \"ticket expiresAt\");\n\tconst irohTicket = expectString(payload.irohTicket, \"ticket irohTicket\");\n\tconst nodeId = expectOptionalString(payload.nodeId, \"ticket nodeId\");\n\tconst relayModeValue = payload.relayMode;\n\tif (relayModeValue !== undefined && !isIrohRemoteRelayMode(relayModeValue)) {\n\t\tthrow new Error(\"ticket relayMode must be disabled, development, or production\");\n\t}\n\tconst relayUrlsValue = payload.relayUrls;\n\tif (relayUrlsValue !== undefined && !isIrohRemoteRelayUrls(relayUrlsValue)) {\n\t\tthrow new Error(\"ticket relayUrls must be a non-empty array of relay URLs\");\n\t}\n\tif (relayModeValue === \"production\" && relayUrlsValue === undefined) {\n\t\tthrow new Error(\"ticket relayMode production requires relayUrls\");\n\t}\n\tconst relayAuthToken = expectOptionalString(payload.relayAuthToken, \"ticket relayAuthToken\");\n\tconst secret = expectOptionalString(payload.secret, \"ticket secret\");\n\tconst workspace = expectString(payload.workspace, \"ticket workspace\");\n\n\treturn {\n\t\talpn,\n\t\texpiresAt,\n\t\tirohTicket,\n\t\tnodeId,\n\t\trelayMode: relayModeValue,\n\t\trelayUrls: relayUrlsValue,\n\t\trelayAuthToken,\n\t\tsecret,\n\t\tworkspace,\n\t};\n}\n\nexport function assertIrohRemoteTicketNotExpired(payload: IrohRemoteTicketPayload, now = Date.now()): void {\n\tif (payload.expiresAt !== undefined && now > payload.expiresAt) {\n\t\tthrow new Error(\"Pairing ticket has expired\");\n\t}\n}\n\nexport function createIrohRemoteSanitizedReconnectTicketPayload(\n\tpayload: IrohRemoteTicketPayload,\n): IrohRemoteSanitizedReconnectTicketPayload {\n\tif (payload.nodeId === undefined) {\n\t\tthrow new IrohRemoteOutcomeError(\"saved_host_invalid\", \"ticket nodeId is required for saved-host reconnect\");\n\t}\n\tif (payload.relayMode === undefined) {\n\t\tthrow new IrohRemoteOutcomeError(\"saved_host_invalid\", \"ticket relayMode is required for saved-host reconnect\");\n\t}\n\tif (payload.relayMode === \"production\" && payload.relayUrls === undefined) {\n\t\tthrow new IrohRemoteOutcomeError(\"saved_host_invalid\", \"ticket relayUrls are required for production relayMode\");\n\t}\n\treturn {\n\t\talpn: payload.alpn,\n\t\tirohTicket: payload.irohTicket,\n\t\tnodeId: payload.nodeId,\n\t\trelayMode: payload.relayMode,\n\t\t...(payload.relayUrls === undefined ? {} : { relayUrls: payload.relayUrls }),\n\t\tworkspace: payload.workspace,\n\t};\n}\n\nexport function createIrohRemoteSanitizedReconnectTicket(ticket: string): string {\n\treturn encodeIrohRemoteTicketPayload(\n\t\tcreateIrohRemoteSanitizedReconnectTicketPayload(decodeIrohRemoteTicketPayload(ticket)),\n\t);\n}\n\nexport function assertIrohRemoteTicketPayloadHostIdentity(\n\tpayload: IrohRemoteTicketPayload,\n\texpectedHostNodeId: string,\n): void {\n\tif (payload.nodeId === undefined) {\n\t\tthrow new IrohRemoteOutcomeError(\n\t\t\t\"saved_host_invalid\",\n\t\t\t\"ticket nodeId is required for host identity verification\",\n\t\t);\n\t}\n\tif (payload.nodeId !== expectedHostNodeId) {\n\t\tthrow new IrohRemoteOutcomeError(\n\t\t\t\"host_identity_mismatch\",\n\t\t\t`expected ${expectedHostNodeId}, got ${payload.nodeId}`,\n\t\t);\n\t}\n}\n\nfunction expectRecord(value: unknown, label: string): Record<string, unknown> {\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value)) {\n\t\tthrow new Error(`${label} must be an object`);\n\t}\n\treturn value as Record<string, unknown>;\n}\n\nfunction expectString(value: unknown, label: string): string {\n\tif (typeof value !== \"string\" || value.length === 0) {\n\t\tthrow new Error(`${label} must be a non-empty string`);\n\t}\n\treturn value;\n}\n\nfunction expectOptionalString(value: unknown, label: string): string | undefined {\n\tif (value === undefined) {\n\t\treturn undefined;\n\t}\n\treturn expectString(value, label);\n}\n\nfunction expectOptionalNumber(value: unknown, label: string): number | undefined {\n\tif (value === undefined) {\n\t\treturn undefined;\n\t}\n\tif (typeof value !== \"number\" || !Number.isFinite(value)) {\n\t\tthrow new Error(`${label} must be a finite number`);\n\t}\n\treturn value;\n}\n"]}

package/dist/core/remote/iroh/transcript-text.d.ts

@@ -0,0 +1,8 @@
+import { type IrohRemoteOutboundSanitizerOptions } from "./outbound-filter.ts";
+export type IrohRemoteTranscriptTextLayout = "preserve" | "summary";
+export interface IrohRemoteSanitizedTranscriptText {
+    text: string;
+    truncated: boolean;
+}
+export declare function sanitizeIrohRemoteTranscriptText(value: string, options: IrohRemoteOutboundSanitizerOptions, layout?: IrohRemoteTranscriptTextLayout): IrohRemoteSanitizedTranscriptText;
+//# sourceMappingURL=transcript-text.d.ts.map

package/dist/core/remote/iroh/transcript-text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript-text.d.ts","sourceRoot":"","sources":["../../../../src/core/remote/iroh/transcript-text.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,kCAAkC,EAA8B,MAAM,sBAAsB,CAAC;AAI3G,MAAM,MAAM,8BAA8B,GAAG,UAAU,GAAG,SAAS,CAAC;AAEpE,MAAM,WAAW,iCAAiC;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,gCAAgC,CAC/C,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,kCAAkC,EAC3C,MAAM,GAAE,8BAA2C,GACjD,iCAAiC,CAanC","sourcesContent":["import { type IrohRemoteOutboundSanitizerOptions, sanitizeIrohRemoteOutbound } from \"./outbound-filter.ts\";\n\nconst IROH_REMOTE_TRANSCRIPT_TEXT_MAX_SCALARS = 12_000;\n\nexport type IrohRemoteTranscriptTextLayout = \"preserve\" | \"summary\";\n\nexport interface IrohRemoteSanitizedTranscriptText {\n\ttext: string;\n\ttruncated: boolean;\n}\n\nexport function sanitizeIrohRemoteTranscriptText(\n\tvalue: string,\n\toptions: IrohRemoteOutboundSanitizerOptions,\n\tlayout: IrohRemoteTranscriptTextLayout = \"preserve\",\n): IrohRemoteSanitizedTranscriptText {\n\tconst normalized = normalizeIrohRemoteTranscriptText(value, layout);\n\tconst sanitizedValue = sanitizeIrohRemoteOutbound({ value: normalized }, options) as { value?: unknown };\n\tconst sanitized = sanitizedValue.value;\n\tconst text = normalizeIrohRemoteTranscriptText(typeof sanitized === \"string\" ? sanitized : \"\", layout);\n\tconst scalars = Array.from(text);\n\tif (scalars.length <= IROH_REMOTE_TRANSCRIPT_TEXT_MAX_SCALARS) {\n\t\treturn { text, truncated: false };\n\t}\n\treturn {\n\t\ttext: scalars.slice(0, IROH_REMOTE_TRANSCRIPT_TEXT_MAX_SCALARS).join(\"\"),\n\t\ttruncated: true,\n\t};\n}\n\nfunction normalizeIrohRemoteTranscriptText(value: string, layout: IrohRemoteTranscriptTextLayout): string {\n\tconst normalized = value.replace(/\\r\\n?/g, \"\\n\").replace(/[\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f]/g, \"\");\n\treturn layout === \"summary\"\n\t\t? normalized\n\t\t\t\t.replace(/[\\n\\t]/g, \" \")\n\t\t\t\t.replace(/\\s+/gu, \" \")\n\t\t\t\t.trim()\n\t\t: normalized;\n}\n"]}

package/dist/core/remote/iroh/transcript-text.js

@@ -0,0 +1,26 @@
+import { sanitizeIrohRemoteOutbound } from "./outbound-filter.js";
+const IROH_REMOTE_TRANSCRIPT_TEXT_MAX_SCALARS = 12_000;
+export function sanitizeIrohRemoteTranscriptText(value, options, layout = "preserve") {
+    const normalized = normalizeIrohRemoteTranscriptText(value, layout);
+    const sanitizedValue = sanitizeIrohRemoteOutbound({ value: normalized }, options);
+    const sanitized = sanitizedValue.value;
+    const text = normalizeIrohRemoteTranscriptText(typeof sanitized === "string" ? sanitized : "", layout);
+    const scalars = Array.from(text);
+    if (scalars.length <= IROH_REMOTE_TRANSCRIPT_TEXT_MAX_SCALARS) {
+        return { text, truncated: false };
+    }
+    return {
+        text: scalars.slice(0, IROH_REMOTE_TRANSCRIPT_TEXT_MAX_SCALARS).join(""),
+        truncated: true,
+    };
+}
+function normalizeIrohRemoteTranscriptText(value, layout) {
+    const normalized = value.replace(/\r\n?/g, "\n").replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g, "");
+    return layout === "summary"
+        ? normalized
+            .replace(/[\n\t]/g, " ")
+            .replace(/\s+/gu, " ")
+            .trim()
+        : normalized;
+}
+//# sourceMappingURL=transcript-text.js.map

package/dist/core/remote/iroh/transcript-text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript-text.js","sourceRoot":"","sources":["../../../../src/core/remote/iroh/transcript-text.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2C,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAE3G,MAAM,uCAAuC,GAAG,MAAM,CAAC;AASvD,MAAM,UAAU,gCAAgC,CAC/C,KAAa,EACb,OAA2C,EAC3C,MAAM,GAAmC,UAAU,EACf;IACpC,MAAM,UAAU,GAAG,iCAAiC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,0BAA0B,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,OAAO,CAAwB,CAAC;IACzG,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC;IACvC,MAAM,IAAI,GAAG,iCAAiC,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACvG,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,IAAI,uCAAuC,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;IACD,OAAO;QACN,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,uCAAuC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,SAAS,EAAE,IAAI;KACf,CAAC;AAAA,CACF;AAED,SAAS,iCAAiC,CAAC,KAAa,EAAE,MAAsC,EAAU;IACzG,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,iDAAiD,EAAE,EAAE,CAAC,CAAC;IAChH,OAAO,MAAM,KAAK,SAAS;QAC1B,CAAC,CAAC,UAAU;aACT,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;aACvB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;aACrB,IAAI,EAAE;QACT,CAAC,CAAC,UAAU,CAAC;AAAA,CACd","sourcesContent":["import { type IrohRemoteOutboundSanitizerOptions, sanitizeIrohRemoteOutbound } from \"./outbound-filter.ts\";\n\nconst IROH_REMOTE_TRANSCRIPT_TEXT_MAX_SCALARS = 12_000;\n\nexport type IrohRemoteTranscriptTextLayout = \"preserve\" | \"summary\";\n\nexport interface IrohRemoteSanitizedTranscriptText {\n\ttext: string;\n\ttruncated: boolean;\n}\n\nexport function sanitizeIrohRemoteTranscriptText(\n\tvalue: string,\n\toptions: IrohRemoteOutboundSanitizerOptions,\n\tlayout: IrohRemoteTranscriptTextLayout = \"preserve\",\n): IrohRemoteSanitizedTranscriptText {\n\tconst normalized = normalizeIrohRemoteTranscriptText(value, layout);\n\tconst sanitizedValue = sanitizeIrohRemoteOutbound({ value: normalized }, options) as { value?: unknown };\n\tconst sanitized = sanitizedValue.value;\n\tconst text = normalizeIrohRemoteTranscriptText(typeof sanitized === \"string\" ? sanitized : \"\", layout);\n\tconst scalars = Array.from(text);\n\tif (scalars.length <= IROH_REMOTE_TRANSCRIPT_TEXT_MAX_SCALARS) {\n\t\treturn { text, truncated: false };\n\t}\n\treturn {\n\t\ttext: scalars.slice(0, IROH_REMOTE_TRANSCRIPT_TEXT_MAX_SCALARS).join(\"\"),\n\t\ttruncated: true,\n\t};\n}\n\nfunction normalizeIrohRemoteTranscriptText(value: string, layout: IrohRemoteTranscriptTextLayout): string {\n\tconst normalized = value.replace(/\\r\\n?/g, \"\\n\").replace(/[\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f]/g, \"\");\n\treturn layout === \"summary\"\n\t\t? normalized\n\t\t\t\t.replace(/[\\n\\t]/g, \" \")\n\t\t\t\t.replace(/\\s+/gu, \" \")\n\t\t\t\t.trim()\n\t\t: normalized;\n}\n"]}

package/dist/core/remote/iroh/workspace-rpc.d.ts

@@ -0,0 +1,31 @@
+import { type IrohRemoteRpcErrorResponse } from "./rpc-command-filter.ts";
+import { type IrohRemoteHostStateManager } from "./state-manager.ts";
+import { type IrohRemoteWorkspaceAvailabilityClassifier, type IrohRemoteWorkspaceStatus } from "./workspace.ts";
+export declare const IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE = "unregister_workspace";
+export interface IrohRemoteWorkspaceMetadataSnapshot {
+    workspaceNames: string[];
+    workspaces: IrohRemoteWorkspaceStatus[];
+}
+export interface IrohRemoteWorkspaceUnregisterRpcData extends IrohRemoteWorkspaceMetadataSnapshot {
+    removedWorkspace: string;
+}
+export type IrohRemoteWorkspaceUnregisterRpcResponse = {
+    id?: string;
+    type: "response";
+    command: typeof IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE;
+    success: true;
+    data: IrohRemoteWorkspaceUnregisterRpcData;
+} | IrohRemoteRpcErrorResponse;
+export type IrohRemoteWorkspaceUnregisterRpcResult = {
+    handled: false;
+} | {
+    handled: true;
+    metadata?: IrohRemoteWorkspaceMetadataSnapshot;
+    response: IrohRemoteWorkspaceUnregisterRpcResponse;
+};
+export interface HandleIrohRemoteWorkspaceUnregisterRpcCommandOptions {
+    classifyWorkspaceAvailability?: IrohRemoteWorkspaceAvailabilityClassifier;
+    stateManager: IrohRemoteHostStateManager;
+}
+export declare function handleIrohRemoteWorkspaceUnregisterRpcCommand(command: Record<string, unknown>, options: HandleIrohRemoteWorkspaceUnregisterRpcCommandOptions): Promise<IrohRemoteWorkspaceUnregisterRpcResult>;
+//# sourceMappingURL=workspace-rpc.d.ts.map

package/dist/core/remote/iroh/workspace-rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-rpc.d.ts","sourceRoot":"","sources":["../../../../src/core/remote/iroh/workspace-rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,KAAK,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAC5G,OAAO,EAEN,KAAK,0BAA0B,EAE/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEN,KAAK,yCAAyC,EAC9C,KAAK,yBAAyB,EAC9B,MAAM,gBAAgB,CAAC;AAExB,eAAO,MAAM,yCAAyC,yBAAyB,CAAC;AAEhF,MAAM,WAAW,mCAAmC;IACnD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,yBAAyB,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,oCAAqC,SAAQ,mCAAmC;IAChG,gBAAgB,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,wCAAwC,GACjD;IACA,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,OAAO,yCAAyC,CAAC;IAC1D,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,oCAAoC,CAAC;CAC1C,GACD,0BAA0B,CAAC;AAE9B,MAAM,MAAM,sCAAsC,GAC/C;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,GAClB;IACA,OAAO,EAAE,IAAI,CAAC;IACd,QAAQ,CAAC,EAAE,mCAAmC,CAAC;IAC/C,QAAQ,EAAE,wCAAwC,CAAC;CAClD,CAAC;AAEL,MAAM,WAAW,oDAAoD;IACpE,6BAA6B,CAAC,EAAE,yCAAyC,CAAC;IAC1E,YAAY,EAAE,0BAA0B,CAAC;CACzC;AAED,wBAAsB,6CAA6C,CAClE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,EAAE,oDAAoD,GAC3D,OAAO,CAAC,sCAAsC,CAAC,CA8DjD","sourcesContent":["import { createIrohRemoteRpcErrorResponse, type IrohRemoteRpcErrorResponse } from \"./rpc-command-filter.ts\";\nimport {\n\tIROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\ttype IrohRemoteHostStateManager,\n\tisIrohRemoteWorkspaceHasWorktreesError,\n} from \"./state-manager.ts\";\nimport {\n\tgetAvailableIrohRemoteWorkspaceNames,\n\ttype IrohRemoteWorkspaceAvailabilityClassifier,\n\ttype IrohRemoteWorkspaceStatus,\n} from \"./workspace.ts\";\n\nexport const IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE = \"unregister_workspace\";\n\nexport interface IrohRemoteWorkspaceMetadataSnapshot {\n\tworkspaceNames: string[];\n\tworkspaces: IrohRemoteWorkspaceStatus[];\n}\n\nexport interface IrohRemoteWorkspaceUnregisterRpcData extends IrohRemoteWorkspaceMetadataSnapshot {\n\tremovedWorkspace: string;\n}\n\nexport type IrohRemoteWorkspaceUnregisterRpcResponse =\n\t| {\n\t\t\tid?: string;\n\t\t\ttype: \"response\";\n\t\t\tcommand: typeof IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE;\n\t\t\tsuccess: true;\n\t\t\tdata: IrohRemoteWorkspaceUnregisterRpcData;\n\t  }\n\t| IrohRemoteRpcErrorResponse;\n\nexport type IrohRemoteWorkspaceUnregisterRpcResult =\n\t| { handled: false }\n\t| {\n\t\t\thandled: true;\n\t\t\tmetadata?: IrohRemoteWorkspaceMetadataSnapshot;\n\t\t\tresponse: IrohRemoteWorkspaceUnregisterRpcResponse;\n\t  };\n\nexport interface HandleIrohRemoteWorkspaceUnregisterRpcCommandOptions {\n\tclassifyWorkspaceAvailability?: IrohRemoteWorkspaceAvailabilityClassifier;\n\tstateManager: IrohRemoteHostStateManager;\n}\n\nexport async function handleIrohRemoteWorkspaceUnregisterRpcCommand(\n\tcommand: Record<string, unknown>,\n\toptions: HandleIrohRemoteWorkspaceUnregisterRpcCommandOptions,\n): Promise<IrohRemoteWorkspaceUnregisterRpcResult> {\n\tif (command.type !== IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE) {\n\t\treturn { handled: false };\n\t}\n\n\tconst id = typeof command.id === \"string\" ? command.id : undefined;\n\tconst name = parseIrohRemoteWorkspaceUnregisterName(command);\n\tif (!name.ok) {\n\t\treturn {\n\t\t\thandled: true,\n\t\t\tresponse: createIrohRemoteRpcErrorResponse(id, IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE, name.error),\n\t\t};\n\t}\n\n\tlet removedWorkspace: Awaited<ReturnType<IrohRemoteHostStateManager[\"unregisterWorkspace\"]>>;\n\ttry {\n\t\tremovedWorkspace = await options.stateManager.unregisterWorkspace(name.value);\n\t} catch (error) {\n\t\tif (!isIrohRemoteWorkspaceHasWorktreesError(error)) {\n\t\t\tthrow error;\n\t\t}\n\t\treturn {\n\t\t\thandled: true,\n\t\t\tresponse: createIrohRemoteRpcErrorResponse(\n\t\t\t\tid,\n\t\t\t\tIROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE,\n\t\t\t\tIROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\t\t\t),\n\t\t};\n\t}\n\tif (!removedWorkspace) {\n\t\treturn {\n\t\t\thandled: true,\n\t\t\tresponse: createIrohRemoteRpcErrorResponse(\n\t\t\t\tid,\n\t\t\t\tIROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE,\n\t\t\t\t`No registered Iroh remote workspace named ${name.value}`,\n\t\t\t),\n\t\t};\n\t}\n\n\tconst workspaces = await options.stateManager.listWorkspaceStatuses({\n\t\tclassifyWorkspaceAvailability: options.classifyWorkspaceAvailability,\n\t});\n\tconst metadata: IrohRemoteWorkspaceMetadataSnapshot = {\n\t\tworkspaceNames: getAvailableIrohRemoteWorkspaceNames(workspaces),\n\t\tworkspaces,\n\t};\n\treturn {\n\t\thandled: true,\n\t\tmetadata,\n\t\tresponse: {\n\t\t\tid,\n\t\t\ttype: \"response\",\n\t\t\tcommand: IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE,\n\t\t\tsuccess: true,\n\t\t\tdata: {\n\t\t\t\tremovedWorkspace: removedWorkspace.name,\n\t\t\t\t...metadata,\n\t\t\t},\n\t\t},\n\t};\n}\n\nfunction parseIrohRemoteWorkspaceUnregisterName(\n\tcommand: Record<string, unknown>,\n): { ok: true; value: string } | { ok: false; error: string } {\n\tif (command.path !== undefined || command.workspacePath !== undefined) {\n\t\treturn { ok: false, error: \"Workspace unregister accepts a workspace name only, not a path\" };\n\t}\n\t// The wire contract (iroh-remote-protocol.md) uses `workspaceName`, matching the\n\t// workspaceManagement stream; the legacy `name` field is not part of the protocol.\n\tif (typeof command.workspaceName !== \"string\") {\n\t\treturn { ok: false, error: 'Invalid RPC command payload: \"workspaceName\" must be a non-empty workspace name' };\n\t}\n\tconst name = command.workspaceName.trim();\n\tif (name.length === 0) {\n\t\treturn { ok: false, error: 'Invalid RPC command payload: \"workspaceName\" must be a non-empty workspace name' };\n\t}\n\treturn { ok: true, value: name };\n}\n"]}

package/dist/core/remote/iroh/workspace-rpc.js

@@ -0,0 +1,73 @@
+import { createIrohRemoteRpcErrorResponse } from "./rpc-command-filter.js";
+import { IROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR, isIrohRemoteWorkspaceHasWorktreesError, } from "./state-manager.js";
+import { getAvailableIrohRemoteWorkspaceNames, } from "./workspace.js";
+export const IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE = "unregister_workspace";
+export async function handleIrohRemoteWorkspaceUnregisterRpcCommand(command, options) {
+    if (command.type !== IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE) {
+        return { handled: false };
+    }
+    const id = typeof command.id === "string" ? command.id : undefined;
+    const name = parseIrohRemoteWorkspaceUnregisterName(command);
+    if (!name.ok) {
+        return {
+            handled: true,
+            response: createIrohRemoteRpcErrorResponse(id, IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE, name.error),
+        };
+    }
+    let removedWorkspace;
+    try {
+        removedWorkspace = await options.stateManager.unregisterWorkspace(name.value);
+    }
+    catch (error) {
+        if (!isIrohRemoteWorkspaceHasWorktreesError(error)) {
+            throw error;
+        }
+        return {
+            handled: true,
+            response: createIrohRemoteRpcErrorResponse(id, IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE, IROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR),
+        };
+    }
+    if (!removedWorkspace) {
+        return {
+            handled: true,
+            response: createIrohRemoteRpcErrorResponse(id, IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE, `No registered Iroh remote workspace named ${name.value}`),
+        };
+    }
+    const workspaces = await options.stateManager.listWorkspaceStatuses({
+        classifyWorkspaceAvailability: options.classifyWorkspaceAvailability,
+    });
+    const metadata = {
+        workspaceNames: getAvailableIrohRemoteWorkspaceNames(workspaces),
+        workspaces,
+    };
+    return {
+        handled: true,
+        metadata,
+        response: {
+            id,
+            type: "response",
+            command: IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE,
+            success: true,
+            data: {
+                removedWorkspace: removedWorkspace.name,
+                ...metadata,
+            },
+        },
+    };
+}
+function parseIrohRemoteWorkspaceUnregisterName(command) {
+    if (command.path !== undefined || command.workspacePath !== undefined) {
+        return { ok: false, error: "Workspace unregister accepts a workspace name only, not a path" };
+    }
+    // The wire contract (iroh-remote-protocol.md) uses `workspaceName`, matching the
+    // workspaceManagement stream; the legacy `name` field is not part of the protocol.
+    if (typeof command.workspaceName !== "string") {
+        return { ok: false, error: 'Invalid RPC command payload: "workspaceName" must be a non-empty workspace name' };
+    }
+    const name = command.workspaceName.trim();
+    if (name.length === 0) {
+        return { ok: false, error: 'Invalid RPC command payload: "workspaceName" must be a non-empty workspace name' };
+    }
+    return { ok: true, value: name };
+}
+//# sourceMappingURL=workspace-rpc.js.map

package/dist/core/remote/iroh/workspace-rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-rpc.js","sourceRoot":"","sources":["../../../../src/core/remote/iroh/workspace-rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gCAAgC,EAAmC,MAAM,yBAAyB,CAAC;AAC5G,OAAO,EACN,yCAAyC,EAEzC,sCAAsC,GACtC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACN,oCAAoC,GAGpC,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,yCAAyC,GAAG,sBAAsB,CAAC;AAkChF,MAAM,CAAC,KAAK,UAAU,6CAA6C,CAClE,OAAgC,EAChC,OAA6D,EACX;IAClD,IAAI,OAAO,CAAC,IAAI,KAAK,yCAAyC,EAAE,CAAC;QAChE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,IAAI,GAAG,sCAAsC,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACd,OAAO;YACN,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,gCAAgC,CAAC,EAAE,EAAE,yCAAyC,EAAE,IAAI,CAAC,KAAK,CAAC;SACrG,CAAC;IACH,CAAC;IAED,IAAI,gBAAwF,CAAC;IAC7F,IAAI,CAAC;QACJ,gBAAgB,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,sCAAsC,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,gCAAgC,CACzC,EAAE,EACF,yCAAyC,EACzC,yCAAyC,CACzC;SACD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,OAAO;YACN,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,gCAAgC,CACzC,EAAE,EACF,yCAAyC,EACzC,6CAA6C,IAAI,CAAC,KAAK,EAAE,CACzD;SACD,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,qBAAqB,CAAC;QACnE,6BAA6B,EAAE,OAAO,CAAC,6BAA6B;KACpE,CAAC,CAAC;IACH,MAAM,QAAQ,GAAwC;QACrD,cAAc,EAAE,oCAAoC,CAAC,UAAU,CAAC;QAChE,UAAU;KACV,CAAC;IACF,OAAO;QACN,OAAO,EAAE,IAAI;QACb,QAAQ;QACR,QAAQ,EAAE;YACT,EAAE;YACF,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,yCAAyC;YAClD,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACL,gBAAgB,EAAE,gBAAgB,CAAC,IAAI;gBACvC,GAAG,QAAQ;aACX;SACD;KACD,CAAC;AAAA,CACF;AAED,SAAS,sCAAsC,CAC9C,OAAgC,EAC6B;IAC7D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gEAAgE,EAAE,CAAC;IAC/F,CAAC;IACD,iFAAiF;IACjF,mFAAmF;IACnF,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iFAAiF,EAAE,CAAC;IAChH,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iFAAiF,EAAE,CAAC;IAChH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAAA,CACjC","sourcesContent":["import { createIrohRemoteRpcErrorResponse, type IrohRemoteRpcErrorResponse } from \"./rpc-command-filter.ts\";\nimport {\n\tIROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\ttype IrohRemoteHostStateManager,\n\tisIrohRemoteWorkspaceHasWorktreesError,\n} from \"./state-manager.ts\";\nimport {\n\tgetAvailableIrohRemoteWorkspaceNames,\n\ttype IrohRemoteWorkspaceAvailabilityClassifier,\n\ttype IrohRemoteWorkspaceStatus,\n} from \"./workspace.ts\";\n\nexport const IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE = \"unregister_workspace\";\n\nexport interface IrohRemoteWorkspaceMetadataSnapshot {\n\tworkspaceNames: string[];\n\tworkspaces: IrohRemoteWorkspaceStatus[];\n}\n\nexport interface IrohRemoteWorkspaceUnregisterRpcData extends IrohRemoteWorkspaceMetadataSnapshot {\n\tremovedWorkspace: string;\n}\n\nexport type IrohRemoteWorkspaceUnregisterRpcResponse =\n\t| {\n\t\t\tid?: string;\n\t\t\ttype: \"response\";\n\t\t\tcommand: typeof IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE;\n\t\t\tsuccess: true;\n\t\t\tdata: IrohRemoteWorkspaceUnregisterRpcData;\n\t  }\n\t| IrohRemoteRpcErrorResponse;\n\nexport type IrohRemoteWorkspaceUnregisterRpcResult =\n\t| { handled: false }\n\t| {\n\t\t\thandled: true;\n\t\t\tmetadata?: IrohRemoteWorkspaceMetadataSnapshot;\n\t\t\tresponse: IrohRemoteWorkspaceUnregisterRpcResponse;\n\t  };\n\nexport interface HandleIrohRemoteWorkspaceUnregisterRpcCommandOptions {\n\tclassifyWorkspaceAvailability?: IrohRemoteWorkspaceAvailabilityClassifier;\n\tstateManager: IrohRemoteHostStateManager;\n}\n\nexport async function handleIrohRemoteWorkspaceUnregisterRpcCommand(\n\tcommand: Record<string, unknown>,\n\toptions: HandleIrohRemoteWorkspaceUnregisterRpcCommandOptions,\n): Promise<IrohRemoteWorkspaceUnregisterRpcResult> {\n\tif (command.type !== IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE) {\n\t\treturn { handled: false };\n\t}\n\n\tconst id = typeof command.id === \"string\" ? command.id : undefined;\n\tconst name = parseIrohRemoteWorkspaceUnregisterName(command);\n\tif (!name.ok) {\n\t\treturn {\n\t\t\thandled: true,\n\t\t\tresponse: createIrohRemoteRpcErrorResponse(id, IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE, name.error),\n\t\t};\n\t}\n\n\tlet removedWorkspace: Awaited<ReturnType<IrohRemoteHostStateManager[\"unregisterWorkspace\"]>>;\n\ttry {\n\t\tremovedWorkspace = await options.stateManager.unregisterWorkspace(name.value);\n\t} catch (error) {\n\t\tif (!isIrohRemoteWorkspaceHasWorktreesError(error)) {\n\t\t\tthrow error;\n\t\t}\n\t\treturn {\n\t\t\thandled: true,\n\t\t\tresponse: createIrohRemoteRpcErrorResponse(\n\t\t\t\tid,\n\t\t\t\tIROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE,\n\t\t\t\tIROH_REMOTE_WORKSPACE_HAS_WORKTREES_ERROR,\n\t\t\t),\n\t\t};\n\t}\n\tif (!removedWorkspace) {\n\t\treturn {\n\t\t\thandled: true,\n\t\t\tresponse: createIrohRemoteRpcErrorResponse(\n\t\t\t\tid,\n\t\t\t\tIROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE,\n\t\t\t\t`No registered Iroh remote workspace named ${name.value}`,\n\t\t\t),\n\t\t};\n\t}\n\n\tconst workspaces = await options.stateManager.listWorkspaceStatuses({\n\t\tclassifyWorkspaceAvailability: options.classifyWorkspaceAvailability,\n\t});\n\tconst metadata: IrohRemoteWorkspaceMetadataSnapshot = {\n\t\tworkspaceNames: getAvailableIrohRemoteWorkspaceNames(workspaces),\n\t\tworkspaces,\n\t};\n\treturn {\n\t\thandled: true,\n\t\tmetadata,\n\t\tresponse: {\n\t\t\tid,\n\t\t\ttype: \"response\",\n\t\t\tcommand: IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE,\n\t\t\tsuccess: true,\n\t\t\tdata: {\n\t\t\t\tremovedWorkspace: removedWorkspace.name,\n\t\t\t\t...metadata,\n\t\t\t},\n\t\t},\n\t};\n}\n\nfunction parseIrohRemoteWorkspaceUnregisterName(\n\tcommand: Record<string, unknown>,\n): { ok: true; value: string } | { ok: false; error: string } {\n\tif (command.path !== undefined || command.workspacePath !== undefined) {\n\t\treturn { ok: false, error: \"Workspace unregister accepts a workspace name only, not a path\" };\n\t}\n\t// The wire contract (iroh-remote-protocol.md) uses `workspaceName`, matching the\n\t// workspaceManagement stream; the legacy `name` field is not part of the protocol.\n\tif (typeof command.workspaceName !== \"string\") {\n\t\treturn { ok: false, error: 'Invalid RPC command payload: \"workspaceName\" must be a non-empty workspace name' };\n\t}\n\tconst name = command.workspaceName.trim();\n\tif (name.length === 0) {\n\t\treturn { ok: false, error: 'Invalid RPC command payload: \"workspaceName\" must be a non-empty workspace name' };\n\t}\n\treturn { ok: true, value: name };\n}\n"]}

package/dist/core/remote/iroh/workspace.d.ts

@@ -0,0 +1,16 @@
+import type { IrohRemoteHostState, IrohRemoteWorkspace } from "./state.ts";
+export type IrohRemoteWorkspaceAvailabilityStatus = "available" | "missing" | "unavailable";
+export interface IrohRemoteWorkspaceStatus {
+    name: string;
+    status: IrohRemoteWorkspaceAvailabilityStatus;
+}
+export type IrohRemoteWorkspaceAvailabilityClassifier = (workspace: IrohRemoteWorkspace) => IrohRemoteWorkspaceAvailabilityStatus | Promise<IrohRemoteWorkspaceAvailabilityStatus>;
+export declare function parseIrohRemoteWorkspaceSpec(value?: string, cwd?: string): IrohRemoteWorkspace;
+export declare function getIrohRemoteWorkspaceAvailabilityStatus(workspace: IrohRemoteWorkspace): Promise<IrohRemoteWorkspaceAvailabilityStatus>;
+export declare function upsertIrohRemoteWorkspace(state: IrohRemoteHostState, workspace: IrohRemoteWorkspace, allowTools?: string): IrohRemoteWorkspace;
+export declare function getIrohRemoteWorkspaceNameAlias(name: string): string;
+export declare function getIrohRemoteWorkspaceStatuses(state: IrohRemoteHostState, classifier?: IrohRemoteWorkspaceAvailabilityClassifier): Promise<IrohRemoteWorkspaceStatus[]>;
+export declare function getAvailableIrohRemoteWorkspaceNames(workspaces: readonly IrohRemoteWorkspaceStatus[]): string[];
+export declare function findIrohRemoteWorkspace(state: IrohRemoteHostState, workspaceName: string): IrohRemoteWorkspace | undefined;
+export declare function selectIrohRemoteWorkspace(state: IrohRemoteHostState, workspaceSpec: string | undefined, allowTools?: string, cwd?: string): IrohRemoteWorkspace;
+//# sourceMappingURL=workspace.d.ts.map

package/dist/core/remote/iroh/workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../../../src/core/remote/iroh/workspace.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE3E,MAAM,MAAM,qCAAqC,GAAG,WAAW,GAAG,SAAS,GAAG,aAAa,CAAC;AAE5F,MAAM,WAAW,yBAAyB;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,qCAAqC,CAAC;CAC9C;AAED,MAAM,MAAM,yCAAyC,GAAG,CACvD,SAAS,EAAE,mBAAmB,KAC1B,qCAAqC,GAAG,OAAO,CAAC,qCAAqC,CAAC,CAAC;AAE5F,wBAAgB,4BAA4B,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,SAAgB,GAAG,mBAAmB,CAsBrG;AAED,wBAAsB,wCAAwC,CAC7D,SAAS,EAAE,mBAAmB,GAC5B,OAAO,CAAC,qCAAqC,CAAC,CAOhD;AAED,wBAAgB,yBAAyB,CACxC,KAAK,EAAE,mBAAmB,EAC1B,SAAS,EAAE,mBAAmB,EAC9B,UAAU,CAAC,EAAE,MAAM,GACjB,mBAAmB,CA0BrB;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpE;AAQD,wBAAsB,8BAA8B,CACnD,KAAK,EAAE,mBAAmB,EAC1B,UAAU,CAAC,EAAE,yCAAyC,GACpD,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAOtC;AAED,wBAAgB,oCAAoC,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,GAAG,MAAM,EAAE,CAE/G;AAgBD,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,MAAM,GACnB,mBAAmB,GAAG,SAAS,CAEjC;AAED,wBAAgB,yBAAyB,CACxC,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,UAAU,CAAC,EAAE,MAAM,EACnB,GAAG,SAAgB,GACjB,mBAAmB,CAarB","sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { basename, resolve } from \"node:path\";\nimport { isIrohRemoteWorkspaceName } from \"./handshake.ts\";\nimport { normalizeIrohRemoteAllowTools } from \"./protocol.ts\";\nimport type { IrohRemoteHostState, IrohRemoteWorkspace } from \"./state.ts\";\n\nexport type IrohRemoteWorkspaceAvailabilityStatus = \"available\" | \"missing\" | \"unavailable\";\n\nexport interface IrohRemoteWorkspaceStatus {\n\tname: string;\n\tstatus: IrohRemoteWorkspaceAvailabilityStatus;\n}\n\nexport type IrohRemoteWorkspaceAvailabilityClassifier = (\n\tworkspace: IrohRemoteWorkspace,\n) => IrohRemoteWorkspaceAvailabilityStatus | Promise<IrohRemoteWorkspaceAvailabilityStatus>;\n\nexport function parseIrohRemoteWorkspaceSpec(value?: string, cwd = process.cwd()): IrohRemoteWorkspace {\n\tif (!value) {\n\t\tconst name = basename(cwd) || \"workspace\";\n\t\tassertIrohRemoteWorkspaceName(name);\n\t\treturn { name, path: cwd };\n\t}\n\n\tconst separatorIndex = value.indexOf(\"=\");\n\tif (separatorIndex === -1) {\n\t\tconst path = resolve(cwd, value);\n\t\tconst name = basename(path) || \"workspace\";\n\t\tassertIrohRemoteWorkspaceName(name);\n\t\treturn { name, path };\n\t}\n\n\tconst name = value.slice(0, separatorIndex).trim();\n\tconst path = resolve(cwd, value.slice(separatorIndex + 1));\n\tif (!name) {\n\t\tthrow new Error(\"Workspace name cannot be empty\");\n\t}\n\tassertIrohRemoteWorkspaceName(name);\n\treturn { name, path };\n}\n\nexport async function getIrohRemoteWorkspaceAvailabilityStatus(\n\tworkspace: IrohRemoteWorkspace,\n): Promise<IrohRemoteWorkspaceAvailabilityStatus> {\n\ttry {\n\t\tconst workspaceStat = await stat(workspace.path);\n\t\treturn workspaceStat.isDirectory() ? \"available\" : \"unavailable\";\n\t} catch (error) {\n\t\treturn error instanceof Error && \"code\" in error && error.code === \"ENOENT\" ? \"missing\" : \"unavailable\";\n\t}\n}\n\nexport function upsertIrohRemoteWorkspace(\n\tstate: IrohRemoteHostState,\n\tworkspace: IrohRemoteWorkspace,\n\tallowTools?: string,\n): IrohRemoteWorkspace {\n\tassertIrohRemoteWorkspaceName(workspace.name);\n\tconst nameAlias = getIrohRemoteWorkspaceNameAlias(workspace.name);\n\tconst aliasConflict = state.workspaces.find(\n\t\t(entry) => entry.name !== workspace.name && getIrohRemoteWorkspaceNameAlias(entry.name) === nameAlias,\n\t);\n\tif (aliasConflict) {\n\t\tthrow new Error(`Workspace name collides with existing registered workspace: ${aliasConflict.name}`);\n\t}\n\tconst savedAllowedTools = allowTools ?? workspace.allowedTools;\n\tconst savedWorkspace: IrohRemoteWorkspace = {\n\t\tname: workspace.name,\n\t\tpath: workspace.path,\n\t\t...(savedAllowedTools === undefined ? {} : { allowedTools: normalizeIrohRemoteAllowTools(savedAllowedTools) }),\n\t};\n\tconst existing = state.workspaces.find((entry) => entry.name === workspace.name);\n\tif (!existing) {\n\t\tstate.workspaces.push(savedWorkspace);\n\t\treturn savedWorkspace;\n\t}\n\n\texisting.path = savedWorkspace.path;\n\tif (savedAllowedTools !== undefined) {\n\t\texisting.allowedTools = savedAllowedTools;\n\t}\n\treturn existing;\n}\n\nexport function getIrohRemoteWorkspaceNameAlias(name: string): string {\n\treturn name.normalize(\"NFC\").toLowerCase();\n}\n\nfunction assertIrohRemoteWorkspaceName(name: string): void {\n\tif (!isIrohRemoteWorkspaceName(name)) {\n\t\tthrow new Error(\"Workspace name is invalid\");\n\t}\n}\n\nexport async function getIrohRemoteWorkspaceStatuses(\n\tstate: IrohRemoteHostState,\n\tclassifier?: IrohRemoteWorkspaceAvailabilityClassifier,\n): Promise<IrohRemoteWorkspaceStatus[]> {\n\treturn await Promise.all(\n\t\tstate.workspaces.map(async (workspace) => ({\n\t\t\tname: workspace.name,\n\t\t\tstatus: await getIrohRemoteWorkspaceStatus(workspace, classifier),\n\t\t})),\n\t);\n}\n\nexport function getAvailableIrohRemoteWorkspaceNames(workspaces: readonly IrohRemoteWorkspaceStatus[]): string[] {\n\treturn workspaces.filter((entry) => entry.status === \"available\").map((entry) => entry.name);\n}\n\nasync function getIrohRemoteWorkspaceStatus(\n\tworkspace: IrohRemoteWorkspace,\n\tclassifier: IrohRemoteWorkspaceAvailabilityClassifier | undefined,\n): Promise<IrohRemoteWorkspaceAvailabilityStatus> {\n\tif (classifier === undefined) {\n\t\treturn \"available\";\n\t}\n\ttry {\n\t\treturn await classifier(workspace);\n\t} catch {\n\t\treturn \"unavailable\";\n\t}\n}\n\nexport function findIrohRemoteWorkspace(\n\tstate: IrohRemoteHostState,\n\tworkspaceName: string,\n): IrohRemoteWorkspace | undefined {\n\treturn state.workspaces.find((entry) => entry.name === workspaceName);\n}\n\nexport function selectIrohRemoteWorkspace(\n\tstate: IrohRemoteHostState,\n\tworkspaceSpec: string | undefined,\n\tallowTools?: string,\n\tcwd = process.cwd(),\n): IrohRemoteWorkspace {\n\tif (workspaceSpec) {\n\t\treturn upsertIrohRemoteWorkspace(state, parseIrohRemoteWorkspaceSpec(workspaceSpec, cwd), allowTools);\n\t}\n\tconst cwdWorkspace = parseIrohRemoteWorkspaceSpec(undefined, cwd);\n\tconst workspace = state.workspaces.find((entry) => entry.path === cwdWorkspace.path);\n\tif (workspace) {\n\t\tif (allowTools !== undefined) {\n\t\t\tworkspace.allowedTools = allowTools;\n\t\t}\n\t\treturn workspace;\n\t}\n\treturn upsertIrohRemoteWorkspace(state, cwdWorkspace, allowTools);\n}\n"]}