@herbertgao/pi-extensions 2026.10.1 → 2026.10.3

package/node_modules/remote-pi/dist/mesh/types.d.ts

@@ -1,34 +0,0 @@
-/**
- * Mesh-membership types — pi-extension side. Mirrors the wire shape defined
- * in plan/24-mesh-membership.md and must stay bit-compatible with the Dart
- * (app) and Rust (relay) implementations of the same protocol.
- *
- * On the wire, JSON field names are `snake_case` (per the plan); this module
- * exposes `camelCase` for ergonomic TS use. Conversion happens at the
- * (de)serialization boundary in `verify.ts` / `canonical.ts`.
- */
-export interface MeshMember {
-    /** Pi Ed25519 pubkey, canonical RFC 4648 standard base64 with padding. */
-    remoteEpk: string;
-    /** Relay URL where this member registers. */
-    relayUrl: string;
-    /** ISO-8601 timestamp of when the pairing happened. */
-    pairedAt: string;
-    /** Optional Owner-set label. */
-    nickname?: string;
-}
-export interface MeshHeader {
-    /** Owner-scoped monotonic counter. Higher = newer. */
-    version: number;
-    /** Issued-at, ms since epoch. */
-    issuedAt: number;
-    /** Owner's Ed25519 pubkey, raw 32 bytes. */
-    ownerPk: Uint8Array;
-    members: MeshMember[];
-}
-export interface MeshEnvelope {
-    /** Canonical JSON bytes of the header (snake_case keys, sorted, no whitespace). */
-    blob: Uint8Array;
-    /** Ed25519 signature of `blob`, 64 bytes. */
-    sig: Uint8Array;
-}

package/node_modules/remote-pi/dist/mesh/types.js

@@ -1,11 +0,0 @@
-/**
- * Mesh-membership types — pi-extension side. Mirrors the wire shape defined
- * in plan/24-mesh-membership.md and must stay bit-compatible with the Dart
- * (app) and Rust (relay) implementations of the same protocol.
- *
- * On the wire, JSON field names are `snake_case` (per the plan); this module
- * exposes `camelCase` for ergonomic TS use. Conversion happens at the
- * (de)serialization boundary in `verify.ts` / `canonical.ts`.
- */
-export {};
-//# sourceMappingURL=types.js.map

package/node_modules/remote-pi/dist/mesh/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/mesh/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/node_modules/remote-pi/dist/mesh/verify.d.ts

@@ -1,17 +0,0 @@
-import type { MeshEnvelope, MeshHeader } from "./types.js";
-/**
- * Verifies the Ed25519 signature on a mesh envelope and decodes the blob
- * into a typed `MeshHeader`.
- *
- * The verification key is extracted *from the blob* (`owner_pk` field) —
- * the caller MUST then check that `sha256(header.ownerPk)` matches the
- * URL hash they queried with. Otherwise a malicious relay could serve a
- * valid-but-different-owner blob at our hash slot.
- *
- * Throws on:
- *   - JSON parse failure
- *   - Missing or wrong-type required fields
- *   - `owner_pk` not 32 bytes
- *   - Signature mismatch
- */
-export declare function verifyEnvelope(env: MeshEnvelope): Promise<MeshHeader>;

package/node_modules/remote-pi/dist/mesh/verify.js

@@ -1,86 +0,0 @@
-import { ed25519Verify } from "../pairing/crypto.js";
-import { canonicalizeEd25519PublicKey, decodeEd25519PublicKey, } from "./encoding.js";
-/**
- * Verifies the Ed25519 signature on a mesh envelope and decodes the blob
- * into a typed `MeshHeader`.
- *
- * The verification key is extracted *from the blob* (`owner_pk` field) —
- * the caller MUST then check that `sha256(header.ownerPk)` matches the
- * URL hash they queried with. Otherwise a malicious relay could serve a
- * valid-but-different-owner blob at our hash slot.
- *
- * Throws on:
- *   - JSON parse failure
- *   - Missing or wrong-type required fields
- *   - `owner_pk` not 32 bytes
- *   - Signature mismatch
- */
-export async function verifyEnvelope(env) {
-    let parsed;
-    try {
-        parsed = JSON.parse(new TextDecoder().decode(env.blob));
-    }
-    catch {
-        throw new Error("mesh: blob is not valid JSON");
-    }
-    if (!parsed || typeof parsed !== "object") {
-        throw new Error("mesh: blob is not a JSON object");
-    }
-    const o = parsed;
-    if (typeof o["owner_pk"] !== "string") {
-        throw new Error("mesh: owner_pk missing or not a string");
-    }
-    if (typeof o["version"] !== "number" || !Number.isInteger(o["version"])) {
-        throw new Error("mesh: version missing or not an integer");
-    }
-    if (typeof o["issued_at"] !== "number" || !Number.isInteger(o["issued_at"])) {
-        throw new Error("mesh: issued_at missing or not an integer");
-    }
-    if (!Array.isArray(o["members"])) {
-        throw new Error("mesh: members missing or not an array");
-    }
-    const rawMembers = o["members"].map((raw, index) => {
-        if (!raw || typeof raw !== "object") {
-            throw new Error(`mesh: members[${index}] is not an object`);
-        }
-        const member = raw;
-        if (typeof member["remote_epk"] !== "string") {
-            throw new Error(`mesh: members[${index}].remote_epk invalid`);
-        }
-        if (typeof member["relay_url"] !== "string") {
-            throw new Error(`mesh: members[${index}].relay_url invalid`);
-        }
-        if (typeof member["paired_at"] !== "string") {
-            throw new Error(`mesh: members[${index}].paired_at invalid`);
-        }
-        const nickname = member["nickname"];
-        if (nickname !== undefined &&
-            nickname !== null &&
-            typeof nickname !== "string") {
-            throw new Error(`mesh: members[${index}].nickname invalid`);
-        }
-        return {
-            remoteEpk: member["remote_epk"],
-            relayUrl: member["relay_url"],
-            pairedAt: member["paired_at"],
-            ...(typeof nickname === "string" ? { nickname } : {}),
-        };
-    });
-    const ownerPk = decodeEd25519PublicKey(o["owner_pk"], "owner_pk");
-    if (!ed25519Verify(ownerPk, env.blob, env.sig)) {
-        throw new Error("mesh: signature verification failed");
-    }
-    const members = rawMembers.map((member, index) => ({
-        remoteEpk: canonicalizeEd25519PublicKey(member.remoteEpk, `members[${index}].remote_epk`),
-        relayUrl: member.relayUrl,
-        pairedAt: member.pairedAt,
-        ...(member.nickname !== undefined ? { nickname: member.nickname } : {}),
-    }));
-    return {
-        version: o["version"],
-        issuedAt: o["issued_at"],
-        ownerPk,
-        members,
-    };
-}
-//# sourceMappingURL=verify.js.map

package/node_modules/remote-pi/dist/mesh/verify.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/mesh/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,eAAe,CAAC;AAUvB;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAiB;IACpD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAE5C,IAAI,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAqB,CAAC,CAAC,SAAS,CAAe,CAAC,GAAG,CACjE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACb,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,oBAAoB,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,GAA8B,CAAC;QAC9C,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,sBAAsB,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACpC,IACE,QAAQ,KAAK,SAAS;YACtB,QAAQ,KAAK,IAAI;YACjB,OAAO,QAAQ,KAAK,QAAQ,EAC5B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,oBAAoB,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC;YAC7B,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC;YAC7B,GAAG,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,OAAO,GAAG,sBAAsB,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IAClE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAiB,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/D,SAAS,EAAE,4BAA4B,CACrC,MAAM,CAAC,SAAS,EAChB,WAAW,KAAK,cAAc,CAC/B;QACD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,SAAS,CAAW;QAC/B,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAW;QAClC,OAAO;QACP,OAAO;KACR,CAAC;AACJ,CAAC"}

package/node_modules/remote-pi/dist/pairing/crypto.d.ts

@@ -1,8 +0,0 @@
-export interface Ed25519Keypair {
-    publicKey: Uint8Array;
-    secretKey: Uint8Array;
-}
-/** Generates an Ed25519 keypair for relay challenge-response auth. */
-export declare function generateEd25519Keypair(): Ed25519Keypair;
-export declare function ed25519Sign(sk: Uint8Array, msg: Uint8Array): Uint8Array;
-export declare function ed25519Verify(pk: Uint8Array, msg: Uint8Array, sig: Uint8Array): boolean;

package/node_modules/remote-pi/dist/pairing/crypto.js

@@ -1,22 +0,0 @@
-import { createHash, randomBytes } from "node:crypto";
-import * as ed from "@noble/ed25519";
-// Configure @noble/ed25519 v3 to use Node.js built-in SHA-512
-ed.hashes["sha512"] = (...msgs) => {
-    const h = createHash("sha512");
-    for (const m of msgs)
-        h.update(m);
-    return Uint8Array.from(h.digest());
-};
-/** Generates an Ed25519 keypair for relay challenge-response auth. */
-export function generateEd25519Keypair() {
-    const secretKey = randomBytes(32);
-    const publicKey = ed.getPublicKey(secretKey);
-    return { secretKey, publicKey: Buffer.from(publicKey) };
-}
-export function ed25519Sign(sk, msg) {
-    return Buffer.from(ed.sign(msg, sk));
-}
-export function ed25519Verify(pk, msg, sig) {
-    return ed.verify(sig, msg, pk);
-}
-//# sourceMappingURL=crypto.js.map

package/node_modules/remote-pi/dist/pairing/crypto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/pairing/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAErC,8DAA8D;AAC7D,EAAE,CAAC,MAAkC,CAAC,QAAQ,CAAC,GAAG,CACjD,GAAG,IAAkB,EACrB,EAAE;IACF,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACrC,CAAC,CAAC;AAOF,sEAAsE;AACtE,MAAM,UAAU,sBAAsB;IACpC,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAc,EAAE,GAAe;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,EAAc,EACd,GAAe,EACf,GAAe;IAEf,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC"}

package/node_modules/remote-pi/dist/pairing/handshake.d.ts

@@ -1,28 +0,0 @@
-import { type X25519Keypair } from "./crypto.js";
-export interface SessionKeys {
-    /** Cipher state for sending (ChaCha20-Poly1305). First 32 bytes = key. */
-    tx: Uint8Array;
-    /** Cipher state for receiving (ChaCha20-Poly1305). First 32 bytes = key. */
-    rx: Uint8Array;
-    /** 6-emoji safety number derived from the handshake hash. */
-    safetyNumber: string;
-    /** Raw 32-byte SHA-256 handshake hash, usable for further derivation. */
-    handshakeHash: Buffer;
-    /**
-     * Curve25519 static public key received from the initiator (app).
-     * Extracted from state.rs before destroy() — use for peer identity validation.
-     */
-    remoteStaticKey?: Uint8Array;
-}
-/**
- * Runs Noise_XX_25519_ChaChaPoly_SHA256 as **responder** (the Mac side).
- * Pattern: receive msg1 (→e), send msg2 (←e,ee,s,es), receive msg3 (→s,se)
- * @param prologue Optional prologue bytes mixed into handshake hash (default: empty).
- */
-export declare function runHandshakeResponder(localStatic: X25519Keypair, sendFn: (msg: Buffer) => Promise<void>, recvFn: () => Promise<Buffer>, prologue?: Uint8Array): Promise<SessionKeys>;
-/**
- * Runs Noise_XX_25519_ChaChaPoly_SHA256 as **initiator** (the mobile side).
- * Exported for use in tests — production initiator is the app (Dart).
- * @param prologue Optional prologue bytes mixed into handshake hash (default: empty).
- */
-export declare function runHandshakeInitiator(localStatic: X25519Keypair, sendFn: (msg: Buffer) => Promise<void>, recvFn: () => Promise<Buffer>, prologue?: Uint8Array): Promise<SessionKeys>;

package/node_modules/remote-pi/dist/pairing/handshake.js

@@ -1,113 +0,0 @@
-import { deriveSafetyNumber } from "./crypto.js";
-import { HASH_LEN_SHA256, HASH_OFFSET_SHA256, NoiseXX_SHA256, } from "./noise-sha256.js";
-// Noise_XX_25519_ChaChaPoly_SHA256 — SHA-256 HASHLEN=32
-// symmetricState layout: [ck(32), h(32), cipher_state(40)] = 104 bytes
-// h (handshake hash) lives at bytes [32..64].
-const HASH_OFFSET = HASH_OFFSET_SHA256; // 32
-const HASH_LEN = HASH_LEN_SHA256; // 32
-const MSG_BUF_SIZE = 4096;
-function _logStep(label, ss) {
-    const h = Buffer.from(ss.subarray(32, 64)).toString("hex");
-    const ck = Buffer.from(ss.subarray(0, 32)).toString("hex");
-    const k = Buffer.from(ss.subarray(64, 96)).toString("hex");
-    const n = Buffer.from(ss.subarray(96, 104)).readBigUInt64LE(0).toString();
-    console.error(`== RT STEP ${label} ==`);
-    console.error(`h:  ${h}`);
-    console.error(`ck: ${ck}`);
-    console.error(`k:  ${k}`);
-    console.error(`n:  ${n}`);
-}
-/**
- * Runs Noise_XX_25519_ChaChaPoly_SHA256 as **responder** (the Mac side).
- * Pattern: receive msg1 (→e), send msg2 (←e,ee,s,es), receive msg3 (→s,se)
- * @param prologue Optional prologue bytes mixed into handshake hash (default: empty).
- */
-export async function runHandshakeResponder(localStatic, sendFn, recvFn, prologue = Buffer.alloc(0)) {
-    const state = NoiseXX_SHA256.initialize("XX", false, prologue, localStatic);
-    // Payload buffers: allocate generously so non-empty payloads from the app
-    // don't cause RangeError. We don't use handshake payloads in the protocol,
-    // but the Dart side might include app-level data. 1 KiB is ample.
-    const PAYLOAD_BUF = 1024;
-    // msg1: -> e  (receive from initiator)
-    const msg1 = await recvFn();
-    console.error(`[remote-pi] msg1 received: ${msg1.length} bytes (expected: 32)`);
-    NoiseXX_SHA256.readMessage(state, msg1, Buffer.alloc(PAYLOAD_BUF));
-    _logStep("after readMessage1", state.symmetricState);
-    // msg2: <- e, ee, s, es  (send to initiator)
-    const msg2buf = Buffer.alloc(MSG_BUF_SIZE);
-    NoiseXX_SHA256.writeMessage(state, Buffer.alloc(0), msg2buf);
-    const msg2bytes = NoiseXX_SHA256.writeMessage.bytes;
-    await sendFn(msg2buf.subarray(0, msg2bytes));
-    console.error(`[remote-pi] msg2 sent: ${msg2bytes} bytes (expected: 96)`);
-    _logStep("after writeMessage2", state.symmetricState);
-    // msg3: -> s, se  (receive → handshake complete)
-    const msg3 = await recvFn();
-    console.error(`[remote-pi] msg3 received: ${msg3.length} bytes (expected: 64)`);
-    // Noise XX msg3 must be ≥ 64 bytes: 48 (encrypted static key) + 16 (MAC of
-    // empty payload). An AssertionError otherwise. Clear diagnostic if too short.
-    if (msg3.length < 64) {
-        const hexDump = msg3.toString("hex");
-        // Decode what 45/48 bytes might indicate:
-        //   48 bytes → static key encrypted (32 + 16 MAC) but NO payload MAC
-        //   <48 bytes → static key may be unencrypted (32 B) + partial tag, or wrong format
-        const hint = msg3.length === 48
-            ? "static key encrypted OK but payload MAC (16 B) missing — call EncryptAndHash([]) after SE"
-            : msg3.length >= 32
-                ? `${msg3.length - 32} extra bytes after 32 B key — key may be unencrypted (no AEAD) or wrong cipher`
-                : "message shorter than a 32-byte key — framing or encoding error";
-        NoiseXX_SHA256.destroy(state);
-        throw new Error(`handshake_failed: msg3 too short (${msg3.length} B, need ≥64 B)\n` +
-            `  hint: ${hint}\n` +
-            `  hex:  ${hexDump}\n` +
-            `  expected structure: [encrypt(s_pk)=48 B][encrypt([])=16 B]\n` +
-            `  ensure Dart calls EncryptAndHash with empty payload after SE token`);
-    }
-    const result = NoiseXX_SHA256.readMessage(state, msg3, Buffer.alloc(PAYLOAD_BUF));
-    _logStep("after readMessage3", state.symmetricState);
-    const handshakeHash = Buffer.from(state.symmetricState.subarray(HASH_OFFSET, HASH_OFFSET + HASH_LEN));
-    // Capture initiator's static public key BEFORE destroy().
-    // state.rs is set during readMessage of msg3 (TOK_S token).
-    const remoteStaticKey = state.rs
-        ? new Uint8Array(state.rs.subarray(0, 32))
-        : undefined;
-    NoiseXX_SHA256.destroy(state);
-    if (!result)
-        throw new Error("handshake_failed: split did not occur");
-    return {
-        tx: result.tx,
-        rx: result.rx,
-        safetyNumber: deriveSafetyNumber(handshakeHash),
-        handshakeHash,
-        remoteStaticKey,
-    };
-}
-/**
- * Runs Noise_XX_25519_ChaChaPoly_SHA256 as **initiator** (the mobile side).
- * Exported for use in tests — production initiator is the app (Dart).
- * @param prologue Optional prologue bytes mixed into handshake hash (default: empty).
- */
-export async function runHandshakeInitiator(localStatic, sendFn, recvFn, prologue = Buffer.alloc(0)) {
-    const state = NoiseXX_SHA256.initialize("XX", true, prologue, localStatic);
-    // msg1: -> e
-    const msg1buf = Buffer.alloc(MSG_BUF_SIZE);
-    NoiseXX_SHA256.writeMessage(state, Buffer.alloc(0), msg1buf);
-    await sendFn(msg1buf.subarray(0, NoiseXX_SHA256.writeMessage.bytes));
-    // msg2: <- e, ee, s, es
-    const msg2 = await recvFn();
-    NoiseXX_SHA256.readMessage(state, msg2, Buffer.alloc(0));
-    // msg3: -> s, se  (handshake complete)
-    const msg3buf = Buffer.alloc(MSG_BUF_SIZE);
-    const result = NoiseXX_SHA256.writeMessage(state, Buffer.alloc(0), msg3buf);
-    await sendFn(msg3buf.subarray(0, NoiseXX_SHA256.writeMessage.bytes));
-    const handshakeHash = Buffer.from(state.symmetricState.subarray(HASH_OFFSET, HASH_OFFSET + HASH_LEN));
-    NoiseXX_SHA256.destroy(state);
-    if (!result)
-        throw new Error("handshake_failed: split did not occur");
-    return {
-        tx: result.tx,
-        rx: result.rx,
-        safetyNumber: deriveSafetyNumber(handshakeHash),
-        handshakeHash,
-    };
-}
-//# sourceMappingURL=handshake.js.map

package/node_modules/remote-pi/dist/pairing/handshake.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handshake.js","sourceRoot":"","sources":["../../src/pairing/handshake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAsB,MAAM,aAAa,CAAC;AACrE,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAE3B,wDAAwD;AACxD,uEAAuE;AACvE,8CAA8C;AAC9C,MAAM,WAAW,GAAG,kBAAkB,CAAC,CAAC,KAAK;AAC7C,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,KAAK;AAEvC,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,SAAS,QAAQ,CAAC,KAAa,EAAE,EAAc;IAC7C,MAAM,CAAC,GAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3E,OAAO,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,CAAC;IACxC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1B,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC;AAkBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAA0B,EAC1B,MAAsC,EACtC,MAA6B,EAC7B,WAAuB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAE5E,0EAA0E;IAC1E,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,WAAW,GAAG,IAAI,CAAC;IAEzB,uCAAuC;IACvC,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,8BAA8B,IAAI,CAAC,MAAM,uBAAuB,CAAC,CAAC;IAChF,cAAc,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAErD,6CAA6C;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,cAAc,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC;IACpD,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,CAAC,0BAA0B,SAAS,uBAAuB,CAAC,CAAC;IAC1E,QAAQ,CAAC,qBAAqB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAEtD,iDAAiD;IACjD,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,8BAA8B,IAAI,CAAC,MAAM,uBAAuB,CAAC,CAAC;IAEhF,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,0CAA0C;QAC1C,qEAAqE;QACrE,oFAAoF;QACpF,MAAM,IAAI,GACR,IAAI,CAAC,MAAM,KAAK,EAAE;YAChB,CAAC,CAAC,2FAA2F;YAC7F,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;gBACnB,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,gFAAgF;gBACrG,CAAC,CAAC,gEAAgE,CAAC;QACvE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,MAAM,mBAAmB;YACnE,WAAW,IAAI,IAAI;YACnB,WAAW,OAAO,IAAI;YACtB,gEAAgE;YAChE,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAClF,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAErD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAC/B,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,QAAQ,CAAC,CACnE,CAAC;IAEF,0DAA0D;IAC1D,4DAA4D;IAC5D,MAAM,eAAe,GAA2B,KAAK,CAAC,EAAE;QACtD,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC,SAAS,CAAC;IAEd,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE9B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACtE,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,YAAY,EAAE,kBAAkB,CAAC,aAAa,CAAC;QAC/C,aAAa;QACb,eAAe;KAChB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAA0B,EAC1B,MAAsC,EACtC,MAA6B,EAC7B,WAAuB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAE3E,aAAa;IACb,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,cAAc,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAErE,wBAAwB;IACxB,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzD,uCAAuC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5E,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAErE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAC/B,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,QAAQ,CAAC,CACnE,CAAC;IACF,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE9B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACtE,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,YAAY,EAAE,kBAAkB,CAAC,aAAa,CAAC;QAC/C,aAAa;KACd,CAAC;AACJ,CAAC"}

package/node_modules/remote-pi/dist/pairing/noise-sha256.d.ts

@@ -1,16 +0,0 @@
-import Noise from "noise-protocol";
-import type { X25519Keypair } from "./crypto.js";
-export declare const HASH_OFFSET_SHA256 = 32;
-export declare const HASH_LEN_SHA256 = 32;
-/**
- * Test-only: makes the NEXT internal ephemeral `generateKeypair` call use
- * the provided fixed keys instead of random ones. Consumes after one use.
- * Required to reproduce official Noise test vectors.
- */
-export declare function setNextEphemeralForTest(pk: Uint8Array, sk: Uint8Array): void;
-export declare const NoiseXX_SHA256: typeof Noise;
-/**
- * Builds a noise-protocol keypair from a raw 32-byte X25519 private scalar.
- * Computes the public key via X25519 base-point multiplication.
- */
-export declare function keypairFromRawSk(rawSk: Uint8Array): X25519Keypair;

package/node_modules/remote-pi/dist/pairing/noise-sha256.js

@@ -1,103 +0,0 @@
-/**
- * Assembles Noise_XX_25519_ChaChaPoly_SHA256 using noise-protocol's
- * createHandshake factory with a plugged-in SHA-256 hash module.
- *
- * The default noise-protocol uses BLAKE2b — incompatible with the Dart side
- * which needs a zero-dependency SHA-256 path.
- */
-import { createHash, createHmac } from "node:crypto";
-import { createRequire } from "node:module";
-import Noise from "noise-protocol";
-// Resolve sodium-universal through noise-protocol's dependency tree.
-// sodium-universal is not hoisted into pi-extension's own node_modules.
-const _reqNoise = createRequire(import.meta.resolve("noise-protocol"));
-// Internal noise-protocol factories (CJS modules, no TS types)
-const _createDH = _reqNoise("noise-protocol/dh");
-const _createCipher = _reqNoise("noise-protocol/cipher");
-const _createCipherState = _reqNoise("noise-protocol/cipher-state");
-const _createSymmetricState = _reqNoise("noise-protocol/symmetric-state");
-const _sm = _reqNoise("sodium-universal/crypto_scalarmult");
-// ── SHA-256 hash module ──────────────────────────────────────────────────────
-// With SHA-256: symmetricState layout = [ck(32), h(32), cipher_state(40)]
-// The handshake hash h is at bytes [32..64] in state.symmetricState.
-export const HASH_OFFSET_SHA256 = 32;
-export const HASH_LEN_SHA256 = 32;
-const _tempHK = Buffer.alloc(32);
-const _B = [Buffer.from([0x01]), Buffer.from([0x02]), Buffer.from([0x03])];
-function _hash(out, data) {
-    const h = createHash("sha256");
-    for (const d of data)
-        h.update(d);
-    out.set(h.digest());
-}
-function _hmac(out, key, parts) {
-    const h = createHmac("sha256", key);
-    for (const p of parts)
-        h.update(p);
-    out.set(h.digest());
-}
-function _hkdf(out1, out2, out3, ck, ikm) {
-    _hmac(_tempHK, ck, [ikm]);
-    _hmac(out1, _tempHK, [_B[0]]);
-    _hmac(out2, _tempHK, [out1, _B[1]]);
-    if (out3 != null)
-        _hmac(out3, _tempHK, [out2, _B[2]]);
-    _tempHK.fill(0);
-}
-const _sha256Hash = {
-    HASHLEN: 32,
-    BLOCKLEN: 64,
-    ALG: "SHA256",
-    hash: _hash,
-    hkdf: _hkdf,
-};
-// ── DH wrapper with test key-injection hook ───────────────────────────────────
-let _nextEph = null;
-/**
- * Test-only: makes the NEXT internal ephemeral `generateKeypair` call use
- * the provided fixed keys instead of random ones. Consumes after one use.
- * Required to reproduce official Noise test vectors.
- */
-export function setNextEphemeralForTest(pk, sk) {
-    _nextEph = { pk: Buffer.from(pk), sk: Buffer.from(sk) };
-}
-const _baseDH = _createDH();
-const _patchedDH = {
-    ..._baseDH,
-    generateKeypair(pk, sk) {
-        if (_nextEph) {
-            pk.set(_nextEph.pk);
-            sk.set(_nextEph.sk);
-            _nextEph = null;
-        }
-        else {
-            _baseDH.generateKeypair(pk, sk);
-        }
-    },
-};
-// ── Assembles the full Noise_XX_25519_ChaChaPoly_SHA256 instance ─────────────
-const _cipher = _createCipher();
-const _cipherState = _createCipherState({ cipher: _cipher });
-const _symmetricState = _createSymmetricState({
-    hash: _sha256Hash,
-    cipherState: _cipherState,
-});
-export const NoiseXX_SHA256 = Noise.createHandshake({
-    dh: _patchedDH,
-    hash: _sha256Hash,
-    cipher: _cipher,
-    cipherState: _cipherState,
-    symmetricState: _symmetricState,
-});
-// ── Key-building utility ─────────────────────────────────────────────────────
-/**
- * Builds a noise-protocol keypair from a raw 32-byte X25519 private scalar.
- * Computes the public key via X25519 base-point multiplication.
- */
-export function keypairFromRawSk(rawSk) {
-    const kp = NoiseXX_SHA256.keygen(); // sodium-allocated buffers of correct size
-    kp.secretKey.set(Buffer.from(rawSk));
-    _sm.crypto_scalarmult_base(kp.publicKey, kp.secretKey);
-    return kp;
-}
-//# sourceMappingURL=noise-sha256.js.map

package/node_modules/remote-pi/dist/pairing/noise-sha256.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"noise-sha256.js","sourceRoot":"","sources":["../../src/pairing/noise-sha256.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,MAAM,gBAAgB,CAAC;AAGnC,qEAAqE;AACrE,wEAAwE;AACxE,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAKvE,+DAA+D;AAC/D,MAAM,SAAS,GAAG,SAAS,CAAC,mBAAmB,CAAiB,CAAC;AACjE,MAAM,aAAa,GAAG,SAAS,CAAC,uBAAuB,CAAiB,CAAC;AACzE,MAAM,kBAAkB,GAAG,SAAS,CAClC,6BAA6B,CACL,CAAC;AAC3B,MAAM,qBAAqB,GAAG,SAAS,CACrC,gCAAgC,CACR,CAAC;AAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,oCAAoC,CAEzD,CAAC;AAEF,gFAAgF;AAEhF,0EAA0E;AAC1E,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAElC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACjC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE3E,SAAS,KAAK,CAAC,GAAe,EAAE,IAAkB;IAChD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,KAAK,CAAC,GAAe,EAAE,GAAe,EAAE,KAAmB;IAClE,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,KAAK,CACZ,IAAgB,EAChB,IAAgB,EAChB,IAAuB,EACvB,EAAc,EACd,GAAe;IAEf,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,IAAI,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,WAAW,GAAW;IAC1B,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,EAAE;IACZ,GAAG,EAAE,QAAQ;IACb,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK;CACZ,CAAC;AAEF,iFAAiF;AAEjF,IAAI,QAAQ,GAA8C,IAAI,CAAC;AAE/D;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAc,EAAE,EAAc;IACpE,QAAQ,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;AAC5B,MAAM,UAAU,GAAW;IACzB,GAAG,OAAO;IACV,eAAe,CAAC,EAAc,EAAE,EAAc;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,CAAC;YACL,OAAO,CAAC,eAA4D,CACnE,EAAE,EACF,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC;AAEF,gFAAgF;AAEhF,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;AAChC,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC7D,MAAM,eAAe,GAAG,qBAAqB,CAAC;IAC5C,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,YAAY;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC,eAAe,CAAC;IAClD,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,OAAO;IACf,WAAW,EAAE,YAAY;IACzB,cAAc,EAAE,eAAe;CAChC,CAAC,CAAC;AAEH,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,2CAA2C;IAC/E,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;IACvD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/node_modules/remote-pi/dist/pairing/qr.d.ts

@@ -1,59 +0,0 @@
-/** Default ephemeral-token lifetime (also the QR rotation period). */
-export declare const TOKEN_TTL_MS = 60000;
-/** Bounds for a caller-supplied pairing TTL (e.g. `/remote-pi pair --ttl <s>`). */
-export declare const PAIR_TTL_MIN_MS = 10000;
-export declare const PAIR_TTL_MAX_MS = 600000;
-/** Clamp an arbitrary ttl (ms) into the safe pairing range; NaN → default. */
-export declare function clampPairTtlMs(ttlMs: number): number;
-/** Encapsulates the single active QR token. One instance per Pi process. */
-export declare class QRSession {
-    private active;
-    /** Generates a fresh 16-byte random token encoded as base64url. */
-    generateToken(): string;
-    /**
-     * Issues a new active token, invalidating any previous one.
-     * Returns the token and its expiry timestamp.
-     */
-    issueToken(ttlMs?: number): {
-        token: string;
-        expiresAt: number;
-    };
-    /** Validates and atomically consumes a token. */
-    consumeToken(token: string): "ok" | "expired" | "consumed" | "unknown";
-    clear(): void;
-}
-export declare const qrSession: QRSession;
-export declare function buildQRUri(token: string, longtermEdPk: Uint8Array, // Ed25519 — only peer ID after E2E rollback
-sessionName: string, 
-/**
- * Pi room id (12 chars, base64url) derived from cwd. App routes pair_request
- * to this room so the relay delivers it to the right Pi instance among N
- * paralelos com mesmo epk. Adicionado no fix do plano 17 (sem `rm` o app
- * cai em room=main e o relay drops com "dest not found").
- */
-roomId?: string): string;
-/**
- * Returns the QR ASCII as a string (pure Unicode block characters —
- * `█ ▀ ▄` and space, NO ANSI escapes — qrcode-terminal v0.12 small mode
- * is escape-free, see lib/main.js:48-53).
- *
- * The caller can either write the string to stderr (legacy path, breaks
- * the Pi TUI layout) or inject it via `pi.sendMessage` (renders inside
- * the chat panel as proper content).
- */
-export declare function renderQRAscii(uri: string): string;
-/**
- * Legacy stderr writer — kept for the standalone CLI mode
- * (`pi-extension/src/index.ts` bottom block, which runs outside a Pi TUI).
- * Inside the Pi TUI extension flow, use `renderQRAscii` + `pi.sendMessage`
- * instead — direct stderr writes from inside an extension break the TUI's
- * scrollable output widget (the QR overflows the panel and other writes
- * collide with the prompt area).
- */
-export declare function displayQR(uri: string): void;
-/**
- * Starts a rotating QR session: generates a new QR every 60s, printing it
- * to stdout. Returns a `stop()` function that cancels the rotation and clears
- * the active token.
- */
-export declare function startQRRotation(longtermEdPk: Uint8Array, sessionName: string, roomId?: string): () => void;