@hydra-acp/archiver 0.1.0

package/dist/envelope.js

@@ -0,0 +1,111 @@
+import { createHash } from "node:crypto";
+export const SYNC_VERSION = 1;
+// Canonical JSON for hashing: object keys sorted recursively. Arrays are
+// left in order — the bundle's `history` array is order-significant.
+function canonicalize(value) {
+    if (value === null || typeof value !== "object") {
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return `[${value.map(canonicalize).join(",")}]`;
+    }
+    const entries = Object.entries(value).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    return `{${entries
+        .map(([k, v]) => `${JSON.stringify(k)}:${canonicalize(v)}`)
+        .join(",")}}`;
+}
+// Fields that don't represent the session's content — they change on
+// every export or are regenerated by the daemon on import. Excluding
+// them makes the hash stable across the export → import → export
+// round-trip, which is what stops the multi-machine ping-pong loop.
+const BUNDLE_EPHEMERAL = new Set(["exportedAt", "exportedFrom"]);
+const SESSION_EPHEMERAL = new Set([
+    "sessionId",
+    "upstreamSessionId",
+    "createdAt",
+    "updatedAt",
+]);
+function stripEphemeral(bundle) {
+    if (!bundle || typeof bundle !== "object" || Array.isArray(bundle)) {
+        return bundle;
+    }
+    const out = {};
+    for (const [k, v] of Object.entries(bundle)) {
+        if (BUNDLE_EPHEMERAL.has(k)) {
+            continue;
+        }
+        if (k === "session" && v && typeof v === "object" && !Array.isArray(v)) {
+            const sessionOut = {};
+            for (const [sk, sv] of Object.entries(v)) {
+                if (SESSION_EPHEMERAL.has(sk)) {
+                    continue;
+                }
+                sessionOut[sk] = sv;
+            }
+            out[k] = sessionOut;
+        }
+        else {
+            out[k] = v;
+        }
+    }
+    return out;
+}
+export function hashBundle(bundle) {
+    return ("sha256:" +
+        createHash("sha256")
+            .update(canonicalize(stripEphemeral(bundle)))
+            .digest("hex"));
+}
+export function wrap(bundle, lineageId, host, now = new Date()) {
+    return {
+        syncVersion: SYNC_VERSION,
+        lineageId,
+        uploadedAt: now.toISOString(),
+        uploadedBy: host,
+        bundleHash: hashBundle(bundle),
+        bundle,
+    };
+}
+export function unwrap(raw) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new Error("envelope: expected JSON object");
+    }
+    const r = raw;
+    if (r.syncVersion !== SYNC_VERSION) {
+        throw new Error(`envelope: unsupported syncVersion ${String(r.syncVersion)}; expected ${SYNC_VERSION}`);
+    }
+    if (typeof r.lineageId !== "string" || !r.lineageId) {
+        throw new Error("envelope: missing lineageId");
+    }
+    if (typeof r.uploadedAt !== "string" || !r.uploadedAt) {
+        throw new Error("envelope: missing uploadedAt");
+    }
+    if (typeof r.bundleHash !== "string" || !r.bundleHash) {
+        throw new Error("envelope: missing bundleHash");
+    }
+    const by = r.uploadedBy;
+    if (!by ||
+        typeof by.host !== "string" ||
+        typeof by.user !== "string") {
+        throw new Error("envelope: missing uploadedBy.{host,user}");
+    }
+    return {
+        syncVersion: SYNC_VERSION,
+        lineageId: r.lineageId,
+        uploadedAt: r.uploadedAt,
+        uploadedBy: { host: by.host, user: by.user },
+        bundleHash: r.bundleHash,
+        bundle: r.bundle,
+    };
+}
+export function serialize(envelope) {
+    return Buffer.from(JSON.stringify(envelope), "utf8");
+}
+export function deserialize(data) {
+    const text = typeof data === "string" ? data : data.toString("utf8");
+    return unwrap(JSON.parse(text));
+}
+export function keyFor(lineageId) {
+    return `${lineageId}.hydra.archive`;
+}
+//# sourceMappingURL=envelope.js.map

package/dist/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAgB9B,yEAAyE;AACzE,qEAAqE;AACrE,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,IAAI,CACnE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3C,CAAC;IACF,OAAO,IAAI,OAAO;SACf,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAED,qEAAqE;AACrE,qEAAqE;AACrE,iEAAiE;AACjE,oEAAoE;AACpE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;AACjE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,WAAW;IACX,mBAAmB;IACnB,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,MAAe;IACrC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;QACvE,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,UAAU,GAA4B,EAAE,CAAC;YAC/C,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;gBACpE,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC9B,SAAS;gBACX,CAAC;gBACD,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;YACtB,CAAC;YACD,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAe;IACxC,OAAO,CACL,SAAS;QACT,UAAU,CAAC,QAAQ,CAAC;aACjB,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;aAC5C,MAAM,CAAC,KAAK,CAAC,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,IAAI,CAClB,MAAe,EACf,SAAiB,EACjB,IAAc,EACd,MAAY,IAAI,IAAI,EAAE;IAEtB,OAAO;QACL,WAAW,EAAE,YAAY;QACzB,SAAS;QACT,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;QAC7B,UAAU,EAAE,IAAI;QAChB,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC;QAC9B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAY;IACjC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,qCAAqC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc,YAAY,EAAE,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,UAAiD,CAAC;IAC/D,IACE,CAAC,EAAE;QACH,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ;QAC3B,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,WAAW,EAAE,YAAY;QACzB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;QAC5C,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAsB;IAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAqB;IAC/C,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,SAAiB;IACtC,OAAO,GAAG,SAAS,gBAAgB,CAAC;AACtC,CAAC"}

package/dist/index.js

@@ -0,0 +1,154 @@
+#!/usr/bin/env node
+import { ArchiveLoop } from "./archive-loop.js";
+import { makeBackend } from "./backend/factory.js";
+import { ArchiverBridge } from "./bridge.js";
+import { runColdSweep } from "./cold-sweep.js";
+import { loadConfig, loadLoginConfig } from "./config.js";
+import { DaemonClient } from "./daemon.js";
+import { HydraDiscovery } from "./discovery.js";
+import { runGoogleLogin } from "./oauth/google.js";
+import { PullLoop } from "./pull-loop.js";
+import { DEFAULT_RULE, loadRule } from "./rule.js";
+import { SyncState } from "./state.js";
+import { logger, setDebug } from "./util/log.js";
+const log = logger("main");
+const USAGE = `usage: hydra-acp-archiver [<command>]
+
+Commands:
+  (no args)   Run as a daemon-managed extension (the daemon spawns it
+              this way automatically when registered).
+  login       Interactive Google OAuth flow — opens a browser and writes
+              the refresh token to ~/.hydra-acp/archiver-google-token.json.
+`;
+const TRUTHY = new Set(["1", "true", "yes", "on", "t"]);
+async function runLogin() {
+    setDebug(TRUTHY.has((process.env.DEBUG ?? "").toLowerCase()));
+    const cfg = loadLoginConfig();
+    log.info(`credentials=${cfg.credentialsPath} token=${cfg.tokenPath}`);
+    await runGoogleLogin({
+        credentialsPath: cfg.credentialsPath,
+        tokenPath: cfg.tokenPath,
+    });
+    log.info("login complete — you can now start the archiver extension");
+}
+async function runExtension() {
+    const config = loadConfig();
+    setDebug(config.debug);
+    const state = new SyncState(config.statePath);
+    await state.load();
+    const backend = makeBackend(config);
+    await backend.init();
+    const daemon = new DaemonClient({
+        daemonUrl: config.hydraDaemonUrl,
+        token: config.hydraToken,
+    });
+    let currentRule = DEFAULT_RULE;
+    currentRule = await loadRule(config.ruleConfigPath);
+    const archive = new ArchiveLoop({
+        daemon,
+        backend,
+        state,
+        getRule: () => currentRule,
+        debounceMs: config.uploadDebounceMs,
+    });
+    const pull = new PullLoop({
+        daemon,
+        backend,
+        state,
+        intervalMs: config.pullIntervalMs,
+    });
+    pull.start();
+    // Backfill: archive every cold session the daemon knows about.
+    // Runs in the background so the rest of startup (discovery,
+    // bridges) doesn't block on it. Hash dedup means restarts are cheap.
+    void runColdSweep({
+        daemonUrl: config.hydraDaemonUrl,
+        token: config.hydraToken,
+        archive,
+    }).catch((err) => {
+        log.warn(`cold sweep failed: ${err.message}`);
+    });
+    const bridges = new Map();
+    const discovery = new HydraDiscovery({
+        daemonUrl: config.hydraDaemonUrl,
+        token: config.hydraToken,
+        pollIntervalMs: config.hydraPollIntervalMs,
+        onAdd: (session) => {
+            if (bridges.has(session.sessionId)) {
+                return;
+            }
+            log.info(`attaching to ${session.sessionId} agent=${session.agentId ?? "?"} cwd=${session.cwd}`);
+            const bridge = new ArchiverBridge({
+                daemonWsUrl: config.hydraWsUrl,
+                token: config.hydraToken,
+                sessionId: session.sessionId,
+                meta: {
+                    ...(session.cwd !== undefined ? { cwd: session.cwd } : {}),
+                    ...(session.agentId !== undefined
+                        ? { agentId: session.agentId }
+                        : {}),
+                    ...(session.title !== undefined ? { title: session.title } : {}),
+                },
+                archive,
+            });
+            bridges.set(session.sessionId, bridge);
+            bridge.start();
+        },
+        onRemove: (sessionId) => {
+            const bridge = bridges.get(sessionId);
+            if (!bridge) {
+                return;
+            }
+            log.info(`detaching from ${sessionId}`);
+            bridges.delete(sessionId);
+            bridge.stop();
+        },
+    });
+    discovery.start();
+    process.on("SIGHUP", () => {
+        log.info(`SIGHUP — reloading rule from ${config.ruleConfigPath}`);
+        loadRule(config.ruleConfigPath)
+            .then((rule) => {
+            currentRule = rule;
+            log.info("rule reload complete");
+        })
+            .catch((err) => {
+            log.warn(`rule reload failed: ${err.message}`);
+        });
+    });
+    const shutdown = (sig) => {
+        log.info(`${sig} received — shutting down`);
+        discovery.stop();
+        pull.stop();
+        archive.stop();
+        for (const bridge of bridges.values()) {
+            bridge.stop();
+        }
+        setTimeout(() => process.exit(0), 200).unref();
+    };
+    process.on("SIGINT", () => shutdown("SIGINT"));
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+    log.info(`hydra-acp-archiver up; daemon=${config.hydraDaemonUrl} backend=${config.backend} rule=${config.ruleConfigPath}`);
+}
+async function main() {
+    const cmd = process.argv[2];
+    if (cmd === undefined) {
+        await runExtension();
+        return;
+    }
+    if (cmd === "login") {
+        await runLogin();
+        return;
+    }
+    if (cmd === "-h" || cmd === "--help" || cmd === "help") {
+        process.stdout.write(USAGE);
+        return;
+    }
+    process.stderr.write(`hydra-acp-archiver: unknown command "${cmd}"\n\n${USAGE}`);
+    process.exit(2);
+}
+main().catch((err) => {
+    process.stderr.write(`hydra-acp-archiver: ${err.message}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAqB,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AAE3B,MAAM,KAAK,GAAG;;;;;;;CAOb,CAAC;AAEF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAExD,KAAK,UAAU,QAAQ;IACrB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;IAC9B,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,eAAe,UAAU,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IACtE,MAAM,cAAc,CAAC;QACnB,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEvB,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IAEnB,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAErB,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC,cAAc;QAChC,KAAK,EAAE,MAAM,CAAC,UAAU;KACzB,CAAC,CAAC;IAEH,IAAI,WAAW,GAAiB,YAAY,CAAC;IAC7C,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAEpD,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC;QAC9B,MAAM;QACN,OAAO;QACP,KAAK;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW;QAC1B,UAAU,EAAE,MAAM,CAAC,gBAAgB;KACpC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC;QACxB,MAAM;QACN,OAAO;QACP,KAAK;QACL,UAAU,EAAE,MAAM,CAAC,cAAc;KAClC,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,EAAE,CAAC;IAEb,+DAA+D;IAC/D,4DAA4D;IAC5D,qEAAqE;IACrE,KAAK,YAAY,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC,cAAc;QAChC,KAAK,EAAE,MAAM,CAAC,UAAU;QACxB,OAAO;KACR,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACxB,GAAG,CAAC,IAAI,CAAC,sBAAuB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAElD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;QACnC,SAAS,EAAE,MAAM,CAAC,cAAc;QAChC,KAAK,EAAE,MAAM,CAAC,UAAU;QACxB,cAAc,EAAE,MAAM,CAAC,mBAAmB;QAC1C,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;YACjB,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,GAAG,CAAC,IAAI,CACN,gBAAgB,OAAO,CAAC,SAAS,UAAU,OAAO,CAAC,OAAO,IAAI,GAAG,QAAQ,OAAO,CAAC,GAAG,EAAE,CACvF,CAAC;YACF,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;gBAChC,WAAW,EAAE,MAAM,CAAC,UAAU;gBAC9B,KAAK,EAAE,MAAM,CAAC,UAAU;gBACxB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,IAAI,EAAE;oBACJ,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1D,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;wBAC/B,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;wBAC9B,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjE;gBACD,OAAO;aACR,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QACD,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC;KACF,CAAC,CAAC;IACH,SAAS,CAAC,KAAK,EAAE,CAAC;IAElB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,GAAG,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;aAC5B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,WAAW,GAAG,IAAI,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,GAAG,CAAC,IAAI,CAAC,uBAAwB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAQ,EAAE;QACrC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,2BAA2B,CAAC,CAAC;QAC5C,SAAS,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;IACjD,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAEjD,GAAG,CAAC,IAAI,CACN,iCAAiC,MAAM,CAAC,cAAc,YAAY,MAAM,CAAC,OAAO,SAAS,MAAM,CAAC,cAAc,EAAE,CACjH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,YAAY,EAAE,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,MAAM,QAAQ,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IACD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,GAAG,QAAQ,KAAK,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAwB,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;IACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/oauth/google.js

@@ -0,0 +1,193 @@
+import { spawn } from "node:child_process";
+import { createServer } from "node:http";
+import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { google } from "googleapis";
+import { logger } from "../util/log.js";
+const log = logger("oauth");
+// drive.file is a non-sensitive scope: the app can only see files it
+// creates plus those a user explicitly hands to it via the picker. This
+// keeps the verification footprint small and the user's other Drive
+// content invisible to the archiver.
+const SCOPES = ["https://www.googleapis.com/auth/drive.file"];
+const CREDS_HINT = `
+Set up Google OAuth credentials first:
+  1. Visit https://console.cloud.google.com/
+  2. Create or select a project, then enable the Google Drive API
+  3. Configure OAuth consent screen (User type: External; add yourself as a Test User)
+  4. Create credentials -> OAuth client ID -> Application type: Desktop app
+  5. Download the JSON and save it to ~/.hydra-acp/archiver-google-credentials.json
+     (or set HYDRA_ACP_ARCHIVER_GOOGLE_CREDENTIALS)
+`;
+async function loadCredentials(path) {
+    let text;
+    try {
+        text = await readFile(path, "utf8");
+    }
+    catch (err) {
+        const e = err;
+        if (e.code === "ENOENT") {
+            throw new Error(`OAuth credentials file not found at ${path}.\n${CREDS_HINT}`);
+        }
+        throw err;
+    }
+    const parsed = JSON.parse(text);
+    const c = parsed.installed ?? parsed.web;
+    if (!c || !c.client_id || !c.client_secret) {
+        throw new Error(`OAuth credentials at ${path} missing client_id/client_secret.\n${CREDS_HINT}`);
+    }
+    return { client_id: c.client_id, client_secret: c.client_secret };
+}
+async function loadToken(path) {
+    try {
+        const text = await readFile(path, "utf8");
+        return JSON.parse(text);
+    }
+    catch (err) {
+        const e = err;
+        if (e.code === "ENOENT") {
+            return undefined;
+        }
+        throw err;
+    }
+}
+async function saveToken(path, token) {
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, JSON.stringify(token, null, 2), { mode: 0o600 });
+    await chmod(path, 0o600);
+}
+function tryOpenBrowser(url) {
+    const candidates = [
+        { cmd: "xdg-open", args: [url] },
+        { cmd: "open", args: [url] },
+        { cmd: "cmd", args: ["/c", "start", "", url] },
+    ];
+    for (const { cmd, args } of candidates) {
+        try {
+            const child = spawn(cmd, args, { stdio: "ignore", detached: true });
+            child.on("error", () => void 0);
+            child.unref();
+            return;
+        }
+        catch {
+            // try next
+        }
+    }
+    log.info("could not auto-open browser; copy the URL above into a browser");
+}
+// Runtime-side: load creds + token, return an OAuth2Client that
+// auto-refreshes its access token. Throws with a clear message if the
+// user hasn't run the login flow yet.
+export async function loadGoogleAuth(opts) {
+    const creds = await loadCredentials(opts.credentialsPath);
+    const token = await loadToken(opts.tokenPath);
+    if (!token || !token.refresh_token) {
+        throw new Error(`No Google OAuth token at ${opts.tokenPath}. Run \`hydra-acp-archiver-login\` first.`);
+    }
+    const client = new google.auth.OAuth2(creds.client_id, creds.client_secret);
+    client.setCredentials(token);
+    // Persist refreshed tokens whenever google-auth-library issues a new
+    // access token, so we keep the latest expiry on disk for future runs.
+    client.on("tokens", (next) => {
+        const merged = { ...token, ...next };
+        void saveToken(opts.tokenPath, merged).catch((err) => {
+            log.warn(`failed to persist refreshed token: ${err.message}`);
+        });
+    });
+    return client;
+}
+// Login-side: interactive flow using a loopback redirect on a
+// kernel-assigned port. Writes refresh+access tokens to tokenPath.
+export async function runGoogleLogin(opts) {
+    const creds = await loadCredentials(opts.credentialsPath);
+    // Bind loopback server first so we can build the redirect_uri with
+    // the assigned port.
+    const { port, codePromise, close } = await startCallbackServer();
+    const redirectUri = `http://127.0.0.1:${port}`;
+    const client = new google.auth.OAuth2(creds.client_id, creds.client_secret, redirectUri);
+    const authUrl = client.generateAuthUrl({
+        access_type: "offline",
+        scope: SCOPES,
+        // prompt=consent forces a refresh_token even if the user previously
+        // granted access — without it, repeat logins return only an access
+        // token.
+        prompt: "consent",
+    });
+    log.info("Open this URL in a browser to authorize the archiver:");
+    log.info(authUrl);
+    tryOpenBrowser(authUrl);
+    let code;
+    try {
+        code = await codePromise;
+    }
+    finally {
+        close();
+    }
+    const { tokens } = await client.getToken(code);
+    if (!tokens.refresh_token) {
+        throw new Error("Google did not return a refresh_token. Revoke the app at https://myaccount.google.com/permissions and try again.");
+    }
+    await saveToken(opts.tokenPath, tokens);
+    log.info(`token saved to ${opts.tokenPath}`);
+}
+async function startCallbackServer() {
+    let resolveCode = () => void 0;
+    let rejectCode = () => void 0;
+    const codePromise = new Promise((resolve, reject) => {
+        resolveCode = resolve;
+        rejectCode = reject;
+    });
+    const server = createServer((req, res) => {
+        try {
+            const url = new URL(req.url ?? "/", `http://127.0.0.1`);
+            const code = url.searchParams.get("code");
+            const error = url.searchParams.get("error");
+            if (error) {
+                res.statusCode = 400;
+                res.setHeader("content-type", "text/plain; charset=utf-8");
+                res.end(`Authorization error: ${error}\n\nYou can close this tab.`);
+                rejectCode(new Error(`OAuth error: ${error}`));
+                return;
+            }
+            if (!code) {
+                res.statusCode = 400;
+                res.setHeader("content-type", "text/plain; charset=utf-8");
+                res.end("Missing ?code parameter. You can close this tab.");
+                return;
+            }
+            res.statusCode = 200;
+            res.setHeader("content-type", "text/plain; charset=utf-8");
+            res.end("hydra-acp-archiver: authorization complete. You can close this tab.");
+            resolveCode(code);
+        }
+        catch (err) {
+            res.statusCode = 500;
+            res.end("internal error");
+            rejectCode(err);
+        }
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(0, "127.0.0.1", () => resolve());
+    });
+    const addr = server.address();
+    if (!addr || typeof addr === "string") {
+        server.close();
+        throw new Error("failed to determine callback server port");
+    }
+    const port = addr.port;
+    log.info(`listening for OAuth redirect on http://127.0.0.1:${port}`);
+    return {
+        port,
+        codePromise,
+        close: () => {
+            try {
+                server.close();
+            }
+            catch {
+                // ignore
+            }
+        },
+    };
+}
+//# sourceMappingURL=google.js.map

package/dist/oauth/google.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.js","sourceRoot":"","sources":["../../src/oauth/google.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEpC,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAExC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;AAE5B,qEAAqE;AACrE,wEAAwE;AACxE,oEAAoE;AACpE,qCAAqC;AACrC,MAAM,MAAM,GAAG,CAAC,4CAA4C,CAAC,CAAC;AAqB9D,MAAM,UAAU,GAAG;;;;;;;;CAQlB,CAAC;AAEF,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA4B,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,MAAM,UAAU,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;IACnD,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC;IACzC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,sCAAsC,UAAU,EAAE,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAA4B,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,KAAkB;IACvD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,UAAU,GAAsC;QACpD,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;QAChC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE;QAC5B,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE;KAC/C,CAAC;IACF,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YAChC,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;AAC7E,CAAC;AAOD,gEAAgE;AAChE,sEAAsE;AACtE,sCAAsC;AACtC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,4BAA4B,IAAI,CAAC,SAAS,2CAA2C,CACtF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC5E,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC7B,qEAAqE;IACrE,sEAAsE;IACtE,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAgB,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;QAClD,KAAK,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC5D,GAAG,CAAC,IAAI,CAAC,sCAAuC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8DAA8D;AAC9D,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAuB;IAEvB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE1D,mEAAmE;IACnE,qBAAqB;IACrB,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACjE,MAAM,WAAW,GAAG,oBAAoB,IAAI,EAAE,CAAC;IAE/C,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CACnC,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,aAAa,EACnB,WAAW,CACZ,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC;QACrC,WAAW,EAAE,SAAS;QACtB,KAAK,EAAE,MAAM;QACb,oEAAoE;QACpE,mEAAmE;QACnE,SAAS;QACT,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IAClE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClB,cAAc,CAAC,OAAO,CAAC,CAAC;IAExB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,WAAW,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,CAAC;IACV,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,kHAAkH,CACnH,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAqB,CAAC,CAAC;IACvD,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;AAC/C,CAAC;AAQD,KAAK,UAAU,mBAAmB;IAChC,IAAI,WAAW,GAA2B,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,UAAU,GAAyB,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1D,WAAW,GAAG,OAAO,CAAC;QACtB,UAAU,GAAG,MAAM,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,KAAK,EAAE,CAAC;gBACV,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,wBAAwB,KAAK,6BAA6B,CAAC,CAAC;gBACpE,UAAU,CAAC,IAAI,KAAK,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;YAC/E,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC1B,UAAU,CAAC,GAAY,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,GAAG,CAAC,IAAI,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;IAErE,OAAO;QACL,IAAI;QACJ,WAAW;QACX,KAAK,EAAE,GAAG,EAAE;YACV,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/pull-loop.js

@@ -0,0 +1,129 @@
+import { deserialize } from "./envelope.js";
+import { logger } from "./util/log.js";
+const log = logger("pull");
+export class PullLoop {
+    opts;
+    timer;
+    stopped = false;
+    inFlight = false;
+    constructor(opts) {
+        this.opts = opts;
+    }
+    start() {
+        log.info(`polling backend every ${this.opts.intervalMs}ms for peer-uploaded bundles`);
+        void this.tick();
+        this.timer = setInterval(() => {
+            void this.tick();
+        }, this.opts.intervalMs);
+        this.timer.unref();
+    }
+    stop() {
+        this.stopped = true;
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = undefined;
+        }
+    }
+    // tickNow is exposed for tests to drive a single iteration on demand.
+    async tickNow() {
+        await this.tick();
+    }
+    async tick() {
+        if (this.stopped || this.inFlight) {
+            return;
+        }
+        this.inFlight = true;
+        try {
+            // Snapshot the daemon's session set once per tick. Any envelope
+            // whose inner bundle.session.sessionId is already present locally
+            // is one we (or a peer using our credentials) uploaded — skip it.
+            let localSessionIds;
+            try {
+                localSessionIds = await this.opts.daemon.listSessionIds();
+            }
+            catch (err) {
+                log.warn(`session list failed; skipping tick: ${err.message}`);
+                return;
+            }
+            const entries = await this.opts.backend.list();
+            for (const entry of entries) {
+                if (this.stopped) {
+                    return;
+                }
+                await this.processEntry(entry.key, localSessionIds).catch((err) => {
+                    log.warn(`processing ${entry.key} failed: ${err.message}`);
+                });
+            }
+        }
+        catch (err) {
+            log.warn(`backend.list failed: ${err.message}`);
+        }
+        finally {
+            this.inFlight = false;
+        }
+    }
+    async processEntry(key, localSessionIds) {
+        const raw = await this.opts.backend.get(key);
+        let envelope;
+        try {
+            envelope = deserialize(raw);
+        }
+        catch (err) {
+            log.warn(`malformed envelope at ${key}: ${err.message}`);
+            return;
+        }
+        const { lineageId } = envelope;
+        // Self-loop suppression: if the bundle's sessionId already exists
+        // in the local daemon, we (or a peer reflecting our upload) made
+        // this — no need to import. This survives hostname changes and
+        // race-conditions with state writes that a hostname or hash check
+        // would not.
+        const innerSessionId = readSessionId(envelope.bundle);
+        if (innerSessionId !== undefined && localSessionIds.has(innerSessionId)) {
+            return;
+        }
+        const local = this.opts.state.get(lineageId);
+        if (local.lastSeenRemoteUploadedAt !== undefined &&
+            envelope.uploadedAt <= local.lastSeenRemoteUploadedAt) {
+            return;
+        }
+        if (typeof envelope.bundle !== "object" ||
+            envelope.bundle === null) {
+            log.warn(`envelope ${key} bundle is not an object; skipping`);
+            return;
+        }
+        log.info(`importing lineage=${lineageId} from ${envelope.uploadedBy.host} uploadedAt=${envelope.uploadedAt}`);
+        try {
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            await this.opts.daemon.importBundle(envelope.bundle, {
+                replace: true,
+            });
+        }
+        catch (err) {
+            log.warn(`daemon import for lineage ${lineageId} failed: ${err.message}`);
+            return;
+        }
+        // Suppress the immediate re-upload that the daemon's
+        // import-induced turn_complete (if any) would trigger: we record
+        // the envelope hash as our last-uploaded hash so the archive-loop
+        // sees "no change" on the next export.
+        await this.opts.state.set(lineageId, {
+            lastSeenRemoteUploadedAt: envelope.uploadedAt,
+            lastSeenRemoteBy: envelope.uploadedBy.host,
+            lastUploadedHash: envelope.bundleHash,
+            lastUploadedAt: envelope.uploadedAt,
+        });
+    }
+}
+function readSessionId(bundle) {
+    if (!bundle || typeof bundle !== "object" || Array.isArray(bundle)) {
+        return undefined;
+    }
+    const session = bundle.session;
+    if (!session || typeof session !== "object" || Array.isArray(session)) {
+        return undefined;
+    }
+    const id = session.sessionId;
+    return typeof id === "string" ? id : undefined;
+}
+//# sourceMappingURL=pull-loop.js.map

package/dist/pull-loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull-loop.js","sourceRoot":"","sources":["../src/pull-loop.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAqB,MAAM,eAAe,CAAC;AAE/D,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AAS3B,MAAM,OAAO,QAAQ;IAKU;IAJrB,KAAK,CAA6B;IAClC,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,KAAK;QACH,GAAG,CAAC,IAAI,CACN,yBAAyB,IAAI,CAAC,IAAI,CAAC,UAAU,8BAA8B,CAC5E,CAAC;QACF,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,gEAAgE;YAChE,kEAAkE;YAClE,kEAAkE;YAClE,IAAI,eAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,eAAe,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC5D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,uCAAwC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC1E,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;oBACzE,GAAG,CAAC,IAAI,CACN,cAAc,KAAK,CAAC,GAAG,YAAa,GAAa,CAAC,OAAO,EAAE,CAC5D,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,wBAAyB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,GAAW,EACX,eAA4B;QAE5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,QAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,yBAAyB,GAAG,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;QAE/B,kEAAkE;QAClE,iEAAiE;QACjE,+DAA+D;QAC/D,kEAAkE;QAClE,aAAa;QACb,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,cAAc,KAAK,SAAS,IAAI,eAAe,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACxE,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7C,IACE,KAAK,CAAC,wBAAwB,KAAK,SAAS;YAC5C,QAAQ,CAAC,UAAU,IAAI,KAAK,CAAC,wBAAwB,EACrD,CAAC;YACD,OAAO;QACT,CAAC;QAED,IACE,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ;YACnC,QAAQ,CAAC,MAAM,KAAK,IAAI,EACxB,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,oCAAoC,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,GAAG,CAAC,IAAI,CACN,qBAAqB,SAAS,SAAS,QAAQ,CAAC,UAAU,CAAC,IAAI,eAAe,QAAQ,CAAC,UAAU,EAAE,CACpG,CAAC;QACF,IAAI,CAAC;YACH,8DAA8D;YAC9D,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAa,EAAE;gBAC1D,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,6BAA6B,SAAS,YAAa,GAAa,CAAC,OAAO,EAAE,CAC3E,CAAC;YACF,OAAO;QACT,CAAC;QACD,qDAAqD;QACrD,iEAAiE;QACjE,kEAAkE;QAClE,uCAAuC;QACvC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE;YACnC,wBAAwB,EAAE,QAAQ,CAAC,UAAU;YAC7C,gBAAgB,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI;YAC1C,gBAAgB,EAAE,QAAQ,CAAC,UAAU;YACrC,cAAc,EAAE,QAAQ,CAAC,UAAU;SACpC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,aAAa,CAAC,MAAe;IACpC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAI,MAAkC,CAAC,OAAO,CAAC;IAC5D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,GAAI,OAAmC,CAAC,SAAS,CAAC;IAC1D,OAAO,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC"}

package/dist/rule.js

@@ -0,0 +1,37 @@
+import { stat } from "node:fs/promises";
+import { pathToFileURL } from "node:url";
+import { logger } from "./util/log.js";
+const log = logger("rule");
+export const DEFAULT_RULE = () => true;
+let loadCounter = 0;
+export async function loadRule(path) {
+    try {
+        await stat(path);
+    }
+    catch (err) {
+        const e = err;
+        if (e.code === "ENOENT") {
+            log.info(`no rule config at ${path} — archiving every live session (drop a JS file at that path to opt out specific sessions)`);
+            return DEFAULT_RULE;
+        }
+        log.warn(`stat ${path} failed: ${e.message}; using DEFAULT_RULE`);
+        return DEFAULT_RULE;
+    }
+    loadCounter += 1;
+    const url = `${pathToFileURL(path).href}?v=${Date.now()}-${loadCounter}`;
+    try {
+        const mod = (await import(url));
+        const fn = mod.default;
+        if (typeof fn !== "function") {
+            log.warn(`${path} did not export a default function; using DEFAULT_RULE`);
+            return DEFAULT_RULE;
+        }
+        log.info(`loaded archiver rule from ${path}`);
+        return fn;
+    }
+    catch (err) {
+        log.warn(`import ${path} failed: ${err.message}; using DEFAULT_RULE`);
+        return DEFAULT_RULE;
+    }
+}
+//# sourceMappingURL=rule.js.map