@herbertgao/pi-extensions 2026.8.2 → 2026.8.3

package/node_modules/remote-pi/dist/mesh/types.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Mesh-membership types — pi-extension side. Mirrors the wire shape defined
+ * in plan/24-mesh-membership.md and must stay bit-compatible with the Dart
+ * (app) and Rust (relay) implementations of the same protocol.
+ *
+ * On the wire, JSON field names are `snake_case` (per the plan); this module
+ * exposes `camelCase` for ergonomic TS use. Conversion happens at the
+ * (de)serialization boundary in `verify.ts` / `canonical.ts`.
+ */
+export interface MeshMember {
+    /** Pi Ed25519 pubkey, canonical RFC 4648 standard base64 with padding. */
+    remoteEpk: string;
+    /** Relay URL where this member registers. */
+    relayUrl: string;
+    /** ISO-8601 timestamp of when the pairing happened. */
+    pairedAt: string;
+    /** Optional Owner-set label. */
+    nickname?: string;
+}
+export interface MeshHeader {
+    /** Owner-scoped monotonic counter. Higher = newer. */
+    version: number;
+    /** Issued-at, ms since epoch. */
+    issuedAt: number;
+    /** Owner's Ed25519 pubkey, raw 32 bytes. */
+    ownerPk: Uint8Array;
+    members: MeshMember[];
+}
+export interface MeshEnvelope {
+    /** Canonical JSON bytes of the header (snake_case keys, sorted, no whitespace). */
+    blob: Uint8Array;
+    /** Ed25519 signature of `blob`, 64 bytes. */
+    sig: Uint8Array;
+}

package/node_modules/remote-pi/dist/mesh/types.js

@@ -0,0 +1,11 @@
+/**
+ * Mesh-membership types — pi-extension side. Mirrors the wire shape defined
+ * in plan/24-mesh-membership.md and must stay bit-compatible with the Dart
+ * (app) and Rust (relay) implementations of the same protocol.
+ *
+ * On the wire, JSON field names are `snake_case` (per the plan); this module
+ * exposes `camelCase` for ergonomic TS use. Conversion happens at the
+ * (de)serialization boundary in `verify.ts` / `canonical.ts`.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/node_modules/remote-pi/dist/mesh/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/mesh/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/node_modules/remote-pi/dist/mesh/verify.d.ts

@@ -0,0 +1,17 @@
+import type { MeshEnvelope, MeshHeader } from "./types.js";
+/**
+ * Verifies the Ed25519 signature on a mesh envelope and decodes the blob
+ * into a typed `MeshHeader`.
+ *
+ * The verification key is extracted *from the blob* (`owner_pk` field) —
+ * the caller MUST then check that `sha256(header.ownerPk)` matches the
+ * URL hash they queried with. Otherwise a malicious relay could serve a
+ * valid-but-different-owner blob at our hash slot.
+ *
+ * Throws on:
+ *   - JSON parse failure
+ *   - Missing or wrong-type required fields
+ *   - `owner_pk` not 32 bytes
+ *   - Signature mismatch
+ */
+export declare function verifyEnvelope(env: MeshEnvelope): Promise<MeshHeader>;

package/node_modules/remote-pi/dist/mesh/verify.js

@@ -0,0 +1,86 @@
+import { ed25519Verify } from "../pairing/crypto.js";
+import { canonicalizeEd25519PublicKey, decodeEd25519PublicKey, } from "./encoding.js";
+/**
+ * Verifies the Ed25519 signature on a mesh envelope and decodes the blob
+ * into a typed `MeshHeader`.
+ *
+ * The verification key is extracted *from the blob* (`owner_pk` field) —
+ * the caller MUST then check that `sha256(header.ownerPk)` matches the
+ * URL hash they queried with. Otherwise a malicious relay could serve a
+ * valid-but-different-owner blob at our hash slot.
+ *
+ * Throws on:
+ *   - JSON parse failure
+ *   - Missing or wrong-type required fields
+ *   - `owner_pk` not 32 bytes
+ *   - Signature mismatch
+ */
+export async function verifyEnvelope(env) {
+    let parsed;
+    try {
+        parsed = JSON.parse(new TextDecoder().decode(env.blob));
+    }
+    catch {
+        throw new Error("mesh: blob is not valid JSON");
+    }
+    if (!parsed || typeof parsed !== "object") {
+        throw new Error("mesh: blob is not a JSON object");
+    }
+    const o = parsed;
+    if (typeof o["owner_pk"] !== "string") {
+        throw new Error("mesh: owner_pk missing or not a string");
+    }
+    if (typeof o["version"] !== "number" || !Number.isInteger(o["version"])) {
+        throw new Error("mesh: version missing or not an integer");
+    }
+    if (typeof o["issued_at"] !== "number" || !Number.isInteger(o["issued_at"])) {
+        throw new Error("mesh: issued_at missing or not an integer");
+    }
+    if (!Array.isArray(o["members"])) {
+        throw new Error("mesh: members missing or not an array");
+    }
+    const rawMembers = o["members"].map((raw, index) => {
+        if (!raw || typeof raw !== "object") {
+            throw new Error(`mesh: members[${index}] is not an object`);
+        }
+        const member = raw;
+        if (typeof member["remote_epk"] !== "string") {
+            throw new Error(`mesh: members[${index}].remote_epk invalid`);
+        }
+        if (typeof member["relay_url"] !== "string") {
+            throw new Error(`mesh: members[${index}].relay_url invalid`);
+        }
+        if (typeof member["paired_at"] !== "string") {
+            throw new Error(`mesh: members[${index}].paired_at invalid`);
+        }
+        const nickname = member["nickname"];
+        if (nickname !== undefined &&
+            nickname !== null &&
+            typeof nickname !== "string") {
+            throw new Error(`mesh: members[${index}].nickname invalid`);
+        }
+        return {
+            remoteEpk: member["remote_epk"],
+            relayUrl: member["relay_url"],
+            pairedAt: member["paired_at"],
+            ...(typeof nickname === "string" ? { nickname } : {}),
+        };
+    });
+    const ownerPk = decodeEd25519PublicKey(o["owner_pk"], "owner_pk");
+    if (!ed25519Verify(ownerPk, env.blob, env.sig)) {
+        throw new Error("mesh: signature verification failed");
+    }
+    const members = rawMembers.map((member, index) => ({
+        remoteEpk: canonicalizeEd25519PublicKey(member.remoteEpk, `members[${index}].remote_epk`),
+        relayUrl: member.relayUrl,
+        pairedAt: member.pairedAt,
+        ...(member.nickname !== undefined ? { nickname: member.nickname } : {}),
+    }));
+    return {
+        version: o["version"],
+        issuedAt: o["issued_at"],
+        ownerPk,
+        members,
+    };
+}
+//# sourceMappingURL=verify.js.map

package/node_modules/remote-pi/dist/mesh/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/mesh/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,eAAe,CAAC;AAUvB;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAiB;IACpD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAE5C,IAAI,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAqB,CAAC,CAAC,SAAS,CAAe,CAAC,GAAG,CACjE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACb,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,oBAAoB,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,GAA8B,CAAC;QAC9C,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,sBAAsB,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,qBAAqB,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACpC,IACE,QAAQ,KAAK,SAAS;YACtB,QAAQ,KAAK,IAAI;YACjB,OAAO,QAAQ,KAAK,QAAQ,EAC5B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,oBAAoB,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC;YAC/B,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC;YAC7B,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC;YAC7B,GAAG,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,OAAO,GAAG,sBAAsB,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;IAClE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,OAAO,GAAiB,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/D,SAAS,EAAE,4BAA4B,CACrC,MAAM,CAAC,SAAS,EAChB,WAAW,KAAK,cAAc,CAC/B;QACD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxE,CAAC,CAAC,CAAC;IAEJ,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,SAAS,CAAW;QAC/B,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAW;QAClC,OAAO;QACP,OAAO;KACR,CAAC;AACJ,CAAC"}

package/node_modules/remote-pi/dist/pairing/crypto.d.ts

@@ -0,0 +1,8 @@
+export interface Ed25519Keypair {
+    publicKey: Uint8Array;
+    secretKey: Uint8Array;
+}
+/** Generates an Ed25519 keypair for relay challenge-response auth. */
+export declare function generateEd25519Keypair(): Ed25519Keypair;
+export declare function ed25519Sign(sk: Uint8Array, msg: Uint8Array): Uint8Array;
+export declare function ed25519Verify(pk: Uint8Array, msg: Uint8Array, sig: Uint8Array): boolean;

package/node_modules/remote-pi/dist/pairing/crypto.js

@@ -0,0 +1,22 @@
+import { createHash, randomBytes } from "node:crypto";
+import * as ed from "@noble/ed25519";
+// Configure @noble/ed25519 v3 to use Node.js built-in SHA-512
+ed.hashes["sha512"] = (...msgs) => {
+    const h = createHash("sha512");
+    for (const m of msgs)
+        h.update(m);
+    return Uint8Array.from(h.digest());
+};
+/** Generates an Ed25519 keypair for relay challenge-response auth. */
+export function generateEd25519Keypair() {
+    const secretKey = randomBytes(32);
+    const publicKey = ed.getPublicKey(secretKey);
+    return { secretKey, publicKey: Buffer.from(publicKey) };
+}
+export function ed25519Sign(sk, msg) {
+    return Buffer.from(ed.sign(msg, sk));
+}
+export function ed25519Verify(pk, msg, sig) {
+    return ed.verify(sig, msg, pk);
+}
+//# sourceMappingURL=crypto.js.map

package/node_modules/remote-pi/dist/pairing/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/pairing/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAErC,8DAA8D;AAC7D,EAAE,CAAC,MAAkC,CAAC,QAAQ,CAAC,GAAG,CACjD,GAAG,IAAkB,EACrB,EAAE;IACF,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACrC,CAAC,CAAC;AAOF,sEAAsE;AACtE,MAAM,UAAU,sBAAsB;IACpC,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAC7C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAc,EAAE,GAAe;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,EAAc,EACd,GAAe,EACf,GAAe;IAEf,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC"}

package/node_modules/remote-pi/dist/pairing/handshake.d.ts

@@ -0,0 +1,28 @@
+import { type X25519Keypair } from "./crypto.js";
+export interface SessionKeys {
+    /** Cipher state for sending (ChaCha20-Poly1305). First 32 bytes = key. */
+    tx: Uint8Array;
+    /** Cipher state for receiving (ChaCha20-Poly1305). First 32 bytes = key. */
+    rx: Uint8Array;
+    /** 6-emoji safety number derived from the handshake hash. */
+    safetyNumber: string;
+    /** Raw 32-byte SHA-256 handshake hash, usable for further derivation. */
+    handshakeHash: Buffer;
+    /**
+     * Curve25519 static public key received from the initiator (app).
+     * Extracted from state.rs before destroy() — use for peer identity validation.
+     */
+    remoteStaticKey?: Uint8Array;
+}
+/**
+ * Runs Noise_XX_25519_ChaChaPoly_SHA256 as **responder** (the Mac side).
+ * Pattern: receive msg1 (→e), send msg2 (←e,ee,s,es), receive msg3 (→s,se)
+ * @param prologue Optional prologue bytes mixed into handshake hash (default: empty).
+ */
+export declare function runHandshakeResponder(localStatic: X25519Keypair, sendFn: (msg: Buffer) => Promise<void>, recvFn: () => Promise<Buffer>, prologue?: Uint8Array): Promise<SessionKeys>;
+/**
+ * Runs Noise_XX_25519_ChaChaPoly_SHA256 as **initiator** (the mobile side).
+ * Exported for use in tests — production initiator is the app (Dart).
+ * @param prologue Optional prologue bytes mixed into handshake hash (default: empty).
+ */
+export declare function runHandshakeInitiator(localStatic: X25519Keypair, sendFn: (msg: Buffer) => Promise<void>, recvFn: () => Promise<Buffer>, prologue?: Uint8Array): Promise<SessionKeys>;

package/node_modules/remote-pi/dist/pairing/handshake.js

@@ -0,0 +1,113 @@
+import { deriveSafetyNumber } from "./crypto.js";
+import { HASH_LEN_SHA256, HASH_OFFSET_SHA256, NoiseXX_SHA256, } from "./noise-sha256.js";
+// Noise_XX_25519_ChaChaPoly_SHA256 — SHA-256 HASHLEN=32
+// symmetricState layout: [ck(32), h(32), cipher_state(40)] = 104 bytes
+// h (handshake hash) lives at bytes [32..64].
+const HASH_OFFSET = HASH_OFFSET_SHA256; // 32
+const HASH_LEN = HASH_LEN_SHA256; // 32
+const MSG_BUF_SIZE = 4096;
+function _logStep(label, ss) {
+    const h = Buffer.from(ss.subarray(32, 64)).toString("hex");
+    const ck = Buffer.from(ss.subarray(0, 32)).toString("hex");
+    const k = Buffer.from(ss.subarray(64, 96)).toString("hex");
+    const n = Buffer.from(ss.subarray(96, 104)).readBigUInt64LE(0).toString();
+    console.error(`== RT STEP ${label} ==`);
+    console.error(`h:  ${h}`);
+    console.error(`ck: ${ck}`);
+    console.error(`k:  ${k}`);
+    console.error(`n:  ${n}`);
+}
+/**
+ * Runs Noise_XX_25519_ChaChaPoly_SHA256 as **responder** (the Mac side).
+ * Pattern: receive msg1 (→e), send msg2 (←e,ee,s,es), receive msg3 (→s,se)
+ * @param prologue Optional prologue bytes mixed into handshake hash (default: empty).
+ */
+export async function runHandshakeResponder(localStatic, sendFn, recvFn, prologue = Buffer.alloc(0)) {
+    const state = NoiseXX_SHA256.initialize("XX", false, prologue, localStatic);
+    // Payload buffers: allocate generously so non-empty payloads from the app
+    // don't cause RangeError. We don't use handshake payloads in the protocol,
+    // but the Dart side might include app-level data. 1 KiB is ample.
+    const PAYLOAD_BUF = 1024;
+    // msg1: -> e  (receive from initiator)
+    const msg1 = await recvFn();
+    console.error(`[remote-pi] msg1 received: ${msg1.length} bytes (expected: 32)`);
+    NoiseXX_SHA256.readMessage(state, msg1, Buffer.alloc(PAYLOAD_BUF));
+    _logStep("after readMessage1", state.symmetricState);
+    // msg2: <- e, ee, s, es  (send to initiator)
+    const msg2buf = Buffer.alloc(MSG_BUF_SIZE);
+    NoiseXX_SHA256.writeMessage(state, Buffer.alloc(0), msg2buf);
+    const msg2bytes = NoiseXX_SHA256.writeMessage.bytes;
+    await sendFn(msg2buf.subarray(0, msg2bytes));
+    console.error(`[remote-pi] msg2 sent: ${msg2bytes} bytes (expected: 96)`);
+    _logStep("after writeMessage2", state.symmetricState);
+    // msg3: -> s, se  (receive → handshake complete)
+    const msg3 = await recvFn();
+    console.error(`[remote-pi] msg3 received: ${msg3.length} bytes (expected: 64)`);
+    // Noise XX msg3 must be ≥ 64 bytes: 48 (encrypted static key) + 16 (MAC of
+    // empty payload). An AssertionError otherwise. Clear diagnostic if too short.
+    if (msg3.length < 64) {
+        const hexDump = msg3.toString("hex");
+        // Decode what 45/48 bytes might indicate:
+        //   48 bytes → static key encrypted (32 + 16 MAC) but NO payload MAC
+        //   <48 bytes → static key may be unencrypted (32 B) + partial tag, or wrong format
+        const hint = msg3.length === 48
+            ? "static key encrypted OK but payload MAC (16 B) missing — call EncryptAndHash([]) after SE"
+            : msg3.length >= 32
+                ? `${msg3.length - 32} extra bytes after 32 B key — key may be unencrypted (no AEAD) or wrong cipher`
+                : "message shorter than a 32-byte key — framing or encoding error";
+        NoiseXX_SHA256.destroy(state);
+        throw new Error(`handshake_failed: msg3 too short (${msg3.length} B, need ≥64 B)\n` +
+            `  hint: ${hint}\n` +
+            `  hex:  ${hexDump}\n` +
+            `  expected structure: [encrypt(s_pk)=48 B][encrypt([])=16 B]\n` +
+            `  ensure Dart calls EncryptAndHash with empty payload after SE token`);
+    }
+    const result = NoiseXX_SHA256.readMessage(state, msg3, Buffer.alloc(PAYLOAD_BUF));
+    _logStep("after readMessage3", state.symmetricState);
+    const handshakeHash = Buffer.from(state.symmetricState.subarray(HASH_OFFSET, HASH_OFFSET + HASH_LEN));
+    // Capture initiator's static public key BEFORE destroy().
+    // state.rs is set during readMessage of msg3 (TOK_S token).
+    const remoteStaticKey = state.rs
+        ? new Uint8Array(state.rs.subarray(0, 32))
+        : undefined;
+    NoiseXX_SHA256.destroy(state);
+    if (!result)
+        throw new Error("handshake_failed: split did not occur");
+    return {
+        tx: result.tx,
+        rx: result.rx,
+        safetyNumber: deriveSafetyNumber(handshakeHash),
+        handshakeHash,
+        remoteStaticKey,
+    };
+}
+/**
+ * Runs Noise_XX_25519_ChaChaPoly_SHA256 as **initiator** (the mobile side).
+ * Exported for use in tests — production initiator is the app (Dart).
+ * @param prologue Optional prologue bytes mixed into handshake hash (default: empty).
+ */
+export async function runHandshakeInitiator(localStatic, sendFn, recvFn, prologue = Buffer.alloc(0)) {
+    const state = NoiseXX_SHA256.initialize("XX", true, prologue, localStatic);
+    // msg1: -> e
+    const msg1buf = Buffer.alloc(MSG_BUF_SIZE);
+    NoiseXX_SHA256.writeMessage(state, Buffer.alloc(0), msg1buf);
+    await sendFn(msg1buf.subarray(0, NoiseXX_SHA256.writeMessage.bytes));
+    // msg2: <- e, ee, s, es
+    const msg2 = await recvFn();
+    NoiseXX_SHA256.readMessage(state, msg2, Buffer.alloc(0));
+    // msg3: -> s, se  (handshake complete)
+    const msg3buf = Buffer.alloc(MSG_BUF_SIZE);
+    const result = NoiseXX_SHA256.writeMessage(state, Buffer.alloc(0), msg3buf);
+    await sendFn(msg3buf.subarray(0, NoiseXX_SHA256.writeMessage.bytes));
+    const handshakeHash = Buffer.from(state.symmetricState.subarray(HASH_OFFSET, HASH_OFFSET + HASH_LEN));
+    NoiseXX_SHA256.destroy(state);
+    if (!result)
+        throw new Error("handshake_failed: split did not occur");
+    return {
+        tx: result.tx,
+        rx: result.rx,
+        safetyNumber: deriveSafetyNumber(handshakeHash),
+        handshakeHash,
+    };
+}
+//# sourceMappingURL=handshake.js.map

package/node_modules/remote-pi/dist/pairing/handshake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.js","sourceRoot":"","sources":["../../src/pairing/handshake.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAsB,MAAM,aAAa,CAAC;AACrE,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAE3B,wDAAwD;AACxD,uEAAuE;AACvE,8CAA8C;AAC9C,MAAM,WAAW,GAAG,kBAAkB,CAAC,CAAC,KAAK;AAC7C,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,KAAK;AAEvC,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,SAAS,QAAQ,CAAC,KAAa,EAAE,EAAc;IAC7C,MAAM,CAAC,GAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3E,OAAO,CAAC,KAAK,CAAC,cAAc,KAAK,KAAK,CAAC,CAAC;IACxC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1B,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC;AAkBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAA0B,EAC1B,MAAsC,EACtC,MAA6B,EAC7B,WAAuB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAE5E,0EAA0E;IAC1E,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,WAAW,GAAG,IAAI,CAAC;IAEzB,uCAAuC;IACvC,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,8BAA8B,IAAI,CAAC,MAAM,uBAAuB,CAAC,CAAC;IAChF,cAAc,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAErD,6CAA6C;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,cAAc,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC;IACpD,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,CAAC,0BAA0B,SAAS,uBAAuB,CAAC,CAAC;IAC1E,QAAQ,CAAC,qBAAqB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAEtD,iDAAiD;IACjD,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,KAAK,CAAC,8BAA8B,IAAI,CAAC,MAAM,uBAAuB,CAAC,CAAC;IAEhF,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,0CAA0C;QAC1C,qEAAqE;QACrE,oFAAoF;QACpF,MAAM,IAAI,GACR,IAAI,CAAC,MAAM,KAAK,EAAE;YAChB,CAAC,CAAC,2FAA2F;YAC7F,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE;gBACnB,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE,gFAAgF;gBACrG,CAAC,CAAC,gEAAgE,CAAC;QACvE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,MAAM,mBAAmB;YACnE,WAAW,IAAI,IAAI;YACnB,WAAW,OAAO,IAAI;YACtB,gEAAgE;YAChE,sEAAsE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAClF,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAErD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAC/B,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,QAAQ,CAAC,CACnE,CAAC;IAEF,0DAA0D;IAC1D,4DAA4D;IAC5D,MAAM,eAAe,GAA2B,KAAK,CAAC,EAAE;QACtD,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC,SAAS,CAAC;IAEd,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE9B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACtE,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,YAAY,EAAE,kBAAkB,CAAC,aAAa,CAAC;QAC/C,aAAa;QACb,eAAe;KAChB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAA0B,EAC1B,MAAsC,EACtC,MAA6B,EAC7B,WAAuB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IAE3E,aAAa;IACb,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,cAAc,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAErE,wBAAwB;IACxB,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;IAC5B,cAAc,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzD,uCAAuC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5E,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAErE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAC/B,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,QAAQ,CAAC,CACnE,CAAC;IACF,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE9B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACtE,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,YAAY,EAAE,kBAAkB,CAAC,aAAa,CAAC;QAC/C,aAAa;KACd,CAAC;AACJ,CAAC"}

package/node_modules/remote-pi/dist/pairing/noise-sha256.d.ts

@@ -0,0 +1,16 @@
+import Noise from "noise-protocol";
+import type { X25519Keypair } from "./crypto.js";
+export declare const HASH_OFFSET_SHA256 = 32;
+export declare const HASH_LEN_SHA256 = 32;
+/**
+ * Test-only: makes the NEXT internal ephemeral `generateKeypair` call use
+ * the provided fixed keys instead of random ones. Consumes after one use.
+ * Required to reproduce official Noise test vectors.
+ */
+export declare function setNextEphemeralForTest(pk: Uint8Array, sk: Uint8Array): void;
+export declare const NoiseXX_SHA256: typeof Noise;
+/**
+ * Builds a noise-protocol keypair from a raw 32-byte X25519 private scalar.
+ * Computes the public key via X25519 base-point multiplication.
+ */
+export declare function keypairFromRawSk(rawSk: Uint8Array): X25519Keypair;

package/node_modules/remote-pi/dist/pairing/noise-sha256.js

@@ -0,0 +1,103 @@
+/**
+ * Assembles Noise_XX_25519_ChaChaPoly_SHA256 using noise-protocol's
+ * createHandshake factory with a plugged-in SHA-256 hash module.
+ *
+ * The default noise-protocol uses BLAKE2b — incompatible with the Dart side
+ * which needs a zero-dependency SHA-256 path.
+ */
+import { createHash, createHmac } from "node:crypto";
+import { createRequire } from "node:module";
+import Noise from "noise-protocol";
+// Resolve sodium-universal through noise-protocol's dependency tree.
+// sodium-universal is not hoisted into pi-extension's own node_modules.
+const _reqNoise = createRequire(import.meta.resolve("noise-protocol"));
+// Internal noise-protocol factories (CJS modules, no TS types)
+const _createDH = _reqNoise("noise-protocol/dh");
+const _createCipher = _reqNoise("noise-protocol/cipher");
+const _createCipherState = _reqNoise("noise-protocol/cipher-state");
+const _createSymmetricState = _reqNoise("noise-protocol/symmetric-state");
+const _sm = _reqNoise("sodium-universal/crypto_scalarmult");
+// ── SHA-256 hash module ──────────────────────────────────────────────────────
+// With SHA-256: symmetricState layout = [ck(32), h(32), cipher_state(40)]
+// The handshake hash h is at bytes [32..64] in state.symmetricState.
+export const HASH_OFFSET_SHA256 = 32;
+export const HASH_LEN_SHA256 = 32;
+const _tempHK = Buffer.alloc(32);
+const _B = [Buffer.from([0x01]), Buffer.from([0x02]), Buffer.from([0x03])];
+function _hash(out, data) {
+    const h = createHash("sha256");
+    for (const d of data)
+        h.update(d);
+    out.set(h.digest());
+}
+function _hmac(out, key, parts) {
+    const h = createHmac("sha256", key);
+    for (const p of parts)
+        h.update(p);
+    out.set(h.digest());
+}
+function _hkdf(out1, out2, out3, ck, ikm) {
+    _hmac(_tempHK, ck, [ikm]);
+    _hmac(out1, _tempHK, [_B[0]]);
+    _hmac(out2, _tempHK, [out1, _B[1]]);
+    if (out3 != null)
+        _hmac(out3, _tempHK, [out2, _B[2]]);
+    _tempHK.fill(0);
+}
+const _sha256Hash = {
+    HASHLEN: 32,
+    BLOCKLEN: 64,
+    ALG: "SHA256",
+    hash: _hash,
+    hkdf: _hkdf,
+};
+// ── DH wrapper with test key-injection hook ───────────────────────────────────
+let _nextEph = null;
+/**
+ * Test-only: makes the NEXT internal ephemeral `generateKeypair` call use
+ * the provided fixed keys instead of random ones. Consumes after one use.
+ * Required to reproduce official Noise test vectors.
+ */
+export function setNextEphemeralForTest(pk, sk) {
+    _nextEph = { pk: Buffer.from(pk), sk: Buffer.from(sk) };
+}
+const _baseDH = _createDH();
+const _patchedDH = {
+    ..._baseDH,
+    generateKeypair(pk, sk) {
+        if (_nextEph) {
+            pk.set(_nextEph.pk);
+            sk.set(_nextEph.sk);
+            _nextEph = null;
+        }
+        else {
+            _baseDH.generateKeypair(pk, sk);
+        }
+    },
+};
+// ── Assembles the full Noise_XX_25519_ChaChaPoly_SHA256 instance ─────────────
+const _cipher = _createCipher();
+const _cipherState = _createCipherState({ cipher: _cipher });
+const _symmetricState = _createSymmetricState({
+    hash: _sha256Hash,
+    cipherState: _cipherState,
+});
+export const NoiseXX_SHA256 = Noise.createHandshake({
+    dh: _patchedDH,
+    hash: _sha256Hash,
+    cipher: _cipher,
+    cipherState: _cipherState,
+    symmetricState: _symmetricState,
+});
+// ── Key-building utility ─────────────────────────────────────────────────────
+/**
+ * Builds a noise-protocol keypair from a raw 32-byte X25519 private scalar.
+ * Computes the public key via X25519 base-point multiplication.
+ */
+export function keypairFromRawSk(rawSk) {
+    const kp = NoiseXX_SHA256.keygen(); // sodium-allocated buffers of correct size
+    kp.secretKey.set(Buffer.from(rawSk));
+    _sm.crypto_scalarmult_base(kp.publicKey, kp.secretKey);
+    return kp;
+}
+//# sourceMappingURL=noise-sha256.js.map

package/node_modules/remote-pi/dist/pairing/noise-sha256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noise-sha256.js","sourceRoot":"","sources":["../../src/pairing/noise-sha256.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,MAAM,gBAAgB,CAAC;AAGnC,qEAAqE;AACrE,wEAAwE;AACxE,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAKvE,+DAA+D;AAC/D,MAAM,SAAS,GAAG,SAAS,CAAC,mBAAmB,CAAiB,CAAC;AACjE,MAAM,aAAa,GAAG,SAAS,CAAC,uBAAuB,CAAiB,CAAC;AACzE,MAAM,kBAAkB,GAAG,SAAS,CAClC,6BAA6B,CACL,CAAC;AAC3B,MAAM,qBAAqB,GAAG,SAAS,CACrC,gCAAgC,CACR,CAAC;AAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,oCAAoC,CAEzD,CAAC;AAEF,gFAAgF;AAEhF,0EAA0E;AAC1E,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAElC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACjC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE3E,SAAS,KAAK,CAAC,GAAe,EAAE,IAAkB;IAChD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,KAAK,CAAC,GAAe,EAAE,GAAe,EAAE,KAAmB;IAClE,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,KAAK,CACZ,IAAgB,EAChB,IAAgB,EAChB,IAAuB,EACvB,EAAc,EACd,GAAe;IAEf,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,IAAI,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,WAAW,GAAW;IAC1B,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,EAAE;IACZ,GAAG,EAAE,QAAQ;IACb,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK;CACZ,CAAC;AAEF,iFAAiF;AAEjF,IAAI,QAAQ,GAA8C,IAAI,CAAC;AAE/D;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAc,EAAE,EAAc;IACpE,QAAQ,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;AAC5B,MAAM,UAAU,GAAW;IACzB,GAAG,OAAO;IACV,eAAe,CAAC,EAAc,EAAE,EAAc;QAC5C,IAAI,QAAQ,EAAE,CAAC;YACb,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,CAAC;YACL,OAAO,CAAC,eAA4D,CACnE,EAAE,EACF,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC;AAEF,gFAAgF;AAEhF,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;AAChC,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAC7D,MAAM,eAAe,GAAG,qBAAqB,CAAC;IAC5C,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,YAAY;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC,eAAe,CAAC;IAClD,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,WAAW;IACjB,MAAM,EAAE,OAAO;IACf,WAAW,EAAE,YAAY;IACzB,cAAc,EAAE,eAAe;CAChC,CAAC,CAAC;AAEH,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,2CAA2C;IAC/E,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;IACvD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/node_modules/remote-pi/dist/pairing/qr.d.ts

@@ -0,0 +1,59 @@
+/** Default ephemeral-token lifetime (also the QR rotation period). */
+export declare const TOKEN_TTL_MS = 60000;
+/** Bounds for a caller-supplied pairing TTL (e.g. `/remote-pi pair --ttl <s>`). */
+export declare const PAIR_TTL_MIN_MS = 10000;
+export declare const PAIR_TTL_MAX_MS = 600000;
+/** Clamp an arbitrary ttl (ms) into the safe pairing range; NaN → default. */
+export declare function clampPairTtlMs(ttlMs: number): number;
+/** Encapsulates the single active QR token. One instance per Pi process. */
+export declare class QRSession {
+    private active;
+    /** Generates a fresh 16-byte random token encoded as base64url. */
+    generateToken(): string;
+    /**
+     * Issues a new active token, invalidating any previous one.
+     * Returns the token and its expiry timestamp.
+     */
+    issueToken(ttlMs?: number): {
+        token: string;
+        expiresAt: number;
+    };
+    /** Validates and atomically consumes a token. */
+    consumeToken(token: string): "ok" | "expired" | "consumed" | "unknown";
+    clear(): void;
+}
+export declare const qrSession: QRSession;
+export declare function buildQRUri(token: string, longtermEdPk: Uint8Array, // Ed25519 — only peer ID after E2E rollback
+sessionName: string, 
+/**
+ * Pi room id (12 chars, base64url) derived from cwd. App routes pair_request
+ * to this room so the relay delivers it to the right Pi instance among N
+ * paralelos com mesmo epk. Adicionado no fix do plano 17 (sem `rm` o app
+ * cai em room=main e o relay drops com "dest not found").
+ */
+roomId?: string): string;
+/**
+ * Returns the QR ASCII as a string (pure Unicode block characters —
+ * `█ ▀ ▄` and space, NO ANSI escapes — qrcode-terminal v0.12 small mode
+ * is escape-free, see lib/main.js:48-53).
+ *
+ * The caller can either write the string to stderr (legacy path, breaks
+ * the Pi TUI layout) or inject it via `pi.sendMessage` (renders inside
+ * the chat panel as proper content).
+ */
+export declare function renderQRAscii(uri: string): string;
+/**
+ * Legacy stderr writer — kept for the standalone CLI mode
+ * (`pi-extension/src/index.ts` bottom block, which runs outside a Pi TUI).
+ * Inside the Pi TUI extension flow, use `renderQRAscii` + `pi.sendMessage`
+ * instead — direct stderr writes from inside an extension break the TUI's
+ * scrollable output widget (the QR overflows the panel and other writes
+ * collide with the prompt area).
+ */
+export declare function displayQR(uri: string): void;
+/**
+ * Starts a rotating QR session: generates a new QR every 60s, printing it
+ * to stdout. Returns a `stop()` function that cancels the rotation and clears
+ * the active token.
+ */
+export declare function startQRRotation(longtermEdPk: Uint8Array, sessionName: string, roomId?: string): () => void;