@leemour/max-cli 0.5.0 → 0.7.0

package/dist/server/server.js

@@ -0,0 +1,297 @@
+import { chmodSync, mkdirSync, rmSync } from "node:fs";
+import { connect, createServer } from "node:net";
+import { dirname } from "node:path";
+import { CliError } from "@leemour/cli-core";
+import { MaxClient } from "../client.js";
+import { Connection, ProtocolError } from "../protocol/connection.js";
+import { fromLine, lineReader, toLine } from "./lines.js";
+import { READS } from "./server-connection.js";
+/** The web client's keep-alive interval (web.max.ru bundle, 2026-09-24). A different one is a fingerprint. */
+const PING_EVERY_MS = 30_000;
+/** A login MAX counts; after one, the next background login waits at least this long. */
+const REFRESH_EVERY_MS = 60_000;
+/**
+ * **One logged-in connection per profile, kept open** (`MAX-16`), and a Unix socket beside the
+ * profile's state for local readers.
+ *
+ * It reopens REQUIREMENTS §3 and §18 on purpose and only here: every other command stays one-shot.
+ * What it does on the wire copies web.max.ru — a ping every 30 s, MAX's pings answered, each new
+ * message acknowledged (`Connection` with `live`). It never marks anything read and never sends.
+ *
+ * The socket answers `{"subscribe": true}` with a stream of `ServerEvent` lines and
+ * `{"status": true}` with one. For a command reusing the connection (`ServerConnection`) it answers
+ * `{"id", "login": true}` with the login it holds, and `{"id", "opcode", "payload"}` by passing the
+ * request to MAX — **reads only** (`NEED-185`). Anything that writes goes on the command's own
+ * connection, through the send guards, which live in the client and nowhere else.
+ */
+export class MaxServer {
+    #options;
+    #subscribers = new Set();
+    #listener;
+    #client;
+    #ping;
+    #retry;
+    #attempt = 0;
+    #stopped = false;
+    /** A push touched the chats in a way the login snapshot cannot follow; it is not handed out. */
+    #stale = false;
+    #refresh;
+    #lastRefresh = 0;
+    #lastUse = Date.now();
+    #idle;
+    #finish;
+    /** Settles when the server stops — cleanly, or with the error that stopped it. */
+    done;
+    constructor(options) {
+        this.#options = options;
+        this.done = new Promise((resolve, reject) => {
+            this.#finish = (error) => (error ? reject(error) : resolve());
+        });
+    }
+    get connected() {
+        return this.#client !== undefined;
+    }
+    /** Logs in first: a token that does not work should fail here, before anything listens. */
+    async start() {
+        try {
+            await this.#connect();
+            await this.#listen();
+        }
+        finally {
+            rmSync(startingPath(this.#options.store), { force: true });
+        }
+        const { idleMs } = this.#options;
+        if (idleMs !== undefined) {
+            this.#idle = setInterval(() => {
+                if (this.#subscribers.size === 0 && Date.now() - this.#lastUse >= idleMs) {
+                    this.#options.note(`nobody has used it for ${Math.round(idleMs / 60_000)} min — stopping`);
+                    void this.stop();
+                }
+            }, Math.min(idleMs, 30_000));
+        }
+    }
+    async stop(error) {
+        if (this.#stopped)
+            return;
+        this.#stopped = true;
+        clearInterval(this.#ping);
+        clearTimeout(this.#retry);
+        clearTimeout(this.#refresh);
+        clearInterval(this.#idle);
+        for (const socket of this.#subscribers)
+            socket.destroy();
+        this.#subscribers.clear();
+        await new Promise((resolve) => (this.#listener ? this.#listener.close(() => resolve()) : resolve()));
+        rmSync(this.#options.store.socketPath(), { force: true });
+        await this.#client?.close();
+        this.#client = undefined;
+        this.#finish?.(error);
+    }
+    /**
+     * Logs in on a new connection and, once that worked, makes it the server's — closing the one it
+     * replaces, if any. Pushes that arrive before the login finishes are held and replayed, not
+     * dropped: `Connection` has already acknowledged them, so MAX will not send them again.
+     */
+    async #connect() {
+        const { store, cache, timeoutMs, events } = this.#options;
+        let mine;
+        const early = [];
+        const connection = (this.#options.connection ??
+            ((hooks) => new Connection({ ...hooks, live: true, ...(timeoutMs ? { timeoutMs } : {}) })))({
+            onEvent: (frame) => {
+                if (mine)
+                    this.#pushed(mine, frame.opcode, frame.payload ?? {});
+                else
+                    early.push([frame.opcode, frame.payload ?? {}]);
+            },
+            onClose: (error) => {
+                if (mine && mine === this.#client)
+                    this.#lost(error);
+            },
+        });
+        const client = new MaxClient({
+            store,
+            connection,
+            fullLogin: true,
+            warn: this.#options.note,
+            ...(cache ? { cache } : {}),
+            ...(events ? { events } : {}),
+        });
+        try {
+            await client.connect();
+        }
+        catch (error) {
+            // A socket left open after a refused login keeps the process alive after it said it failed.
+            await client.close();
+            throw error;
+        }
+        const replaced = this.#client;
+        mine = client;
+        this.#client = client;
+        this.#attempt = 0;
+        this.#stale = false;
+        this.#lastRefresh = Date.now();
+        clearInterval(this.#ping);
+        this.#ping = setInterval(() => {
+            client.live.ping().catch(() => { });
+        }, this.#options.pingEveryMs ?? PING_EVERY_MS);
+        if (replaced)
+            await replaced.close().catch(() => { });
+        else
+            this.#broadcast({ event: "status", connected: true, at: new Date().toISOString() });
+        for (const [opcode, payload] of early)
+            this.#pushed(client, opcode, payload);
+    }
+    #pushed(client, opcode, payload) {
+        if (!client.live.patch(opcode, payload))
+            this.#goneStale();
+        client.live
+            .message(opcode, payload)
+            .then((message) => message && this.#broadcast({ event: "message", message }))
+            .catch((error) => this.#options.note(`a pushed message could not be read: ${error.message}`));
+    }
+    /**
+     * The login can no longer be handed out. Rather than wait for a drop that may be hours away, log
+     * in again in the background — at most once a minute, since each is a login MAX counts.
+     */
+    #goneStale() {
+        this.#stale = true;
+        if (this.#refresh || this.#stopped)
+            return;
+        const every = this.#options.refreshEveryMs ?? REFRESH_EVERY_MS;
+        const wait = Math.max(0, this.#lastRefresh + every - Date.now());
+        this.#refresh = setTimeout(() => {
+            this.#connect()
+                .catch((error) => this.#options.note(`could not log in again: ${error.message}`))
+                .finally(() => {
+                this.#refresh = undefined;
+            });
+        }, wait);
+    }
+    #lost(error) {
+        clearInterval(this.#ping);
+        const client = this.#client;
+        this.#client = undefined;
+        client?.close().catch(() => { });
+        if (this.#stopped)
+            return;
+        this.#broadcast({ event: "status", connected: false, at: new Date().toISOString() });
+        this.#reconnectLater(error);
+    }
+    #reconnectLater(error) {
+        const wait = (this.#options.retryAfterMs ?? backoff)(this.#attempt);
+        this.#attempt += 1;
+        this.#options.note(`${error.message} — connecting again in ${Math.round(wait / 1000)}s`);
+        this.#retry = setTimeout(() => {
+            this.#connect().catch((failure) => {
+                // A token MAX no longer takes will not start working on the next attempt.
+                if (failure instanceof CliError && failure.code === "authentication_error")
+                    this.stop(failure);
+                else
+                    this.#reconnectLater(failure);
+            });
+        }, wait);
+    }
+    #broadcast(event) {
+        const line = toLine(event);
+        for (const socket of this.#subscribers)
+            socket.write(line);
+    }
+    async #listen() {
+        const path = this.#options.store.socketPath();
+        if (await answers(path)) {
+            throw new CliError("validation_error", `a server is already running for profile "${this.#options.store.profile}"`);
+        }
+        // Nobody answers on it, so it is what a crashed server left behind.
+        rmSync(path, { force: true });
+        mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+        const listener = createServer((socket) => this.#serve(socket));
+        await new Promise((resolve, reject) => {
+            listener.once("error", reject);
+            listener.listen(path, () => resolve());
+        });
+        chmodSync(path, 0o600);
+        this.#listener = listener;
+    }
+    #serve(socket) {
+        socket.on("error", () => this.#subscribers.delete(socket));
+        socket.on("close", () => {
+            this.#subscribers.delete(socket);
+            this.#lastUse = Date.now();
+        });
+        socket.on("data", lineReader((line) => {
+            this.#request(socket, line).catch(() => socket.destroy());
+        }));
+    }
+    async #request(socket, line) {
+        let request;
+        try {
+            request = fromLine(line);
+        }
+        catch {
+            socket.write(toLine({ error: { code: "bad_request", message: "one JSON object per line" } }));
+            return;
+        }
+        const status = { event: "status", connected: this.connected, at: new Date().toISOString() };
+        const { id } = request;
+        this.#lastUse = Date.now();
+        if (request.subscribe === true) {
+            this.#subscribers.add(socket);
+            socket.write(toLine(status));
+        }
+        else if (request.status === true) {
+            socket.write(toLine(status));
+        }
+        else if (request.stop === true) {
+            // Only the owner can reach this socket (mode 600); `max session end` asks, so a forgotten
+            // session is not kept alive by a server still logged in with it.
+            socket.end(toLine({ id, stopped: true }));
+            await this.stop();
+        }
+        else if (request.login === true) {
+            const client = this.#client;
+            socket.write(toLine(client && !this.#stale
+                ? { id, payload: client.live.snapshot() }
+                : { id, error: { code: "unavailable", message: this.#stale ? "the login went stale" : "not connected" } }));
+        }
+        else if (typeof request.opcode === "number") {
+            socket.write(toLine({ id, ...(await this.#forward(request.opcode, request.payload)) }));
+        }
+        else {
+            socket.write(toLine({ id, error: { code: "bad_request", message: "subscribe, status, login or an opcode" } }));
+        }
+    }
+    async #forward(opcode, payload) {
+        const client = this.#client;
+        if (!READS.has(opcode)) {
+            return {
+                error: { code: "not_allowed", message: `opcode ${opcode} is not a read; send it on your own connection` },
+            };
+        }
+        if (!client)
+            return { error: { code: "unavailable", message: "not connected" } };
+        try {
+            return { payload: await client.live.forward(opcode, (payload ?? {})) };
+        }
+        catch (error) {
+            if (error instanceof ProtocolError) {
+                return { error: { code: "refused", message: error.message, payload: error.payload } };
+            }
+            return { error: { code: "unavailable", message: error instanceof Error ? error.message : String(error) } };
+        }
+    }
+}
+/** 1 s, 2 s, 4 s … a minute at most — a server that hammers MAX after a drop looks like nothing MAX knows. */
+const backoff = (attempt) => Math.min(60_000, 1000 * 2 ** attempt);
+/** Present while a server is being started in the background, so two commands do not start two. */
+export const startingPath = (store) => `${store.socketPath()}.starting`;
+/** Whether something is listening on the socket — a live server, not a leftover file. */
+export const answers = (path) => new Promise((resolve) => {
+    const probe = connect(path);
+    probe.once("connect", () => {
+        probe.destroy();
+        resolve(true);
+    });
+    probe.once("error", () => resolve(false));
+});
+//# sourceMappingURL=server.js.map

package/dist/server/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AACtD,OAAO,EAAE,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAE5C,OAAO,EAAE,SAAS,EAAyB,MAAM,cAAc,CAAA;AAE/D,OAAO,EAAE,UAAU,EAA0B,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAE7F,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAA;AA2B9C,8GAA8G;AAC9G,MAAM,aAAa,GAAG,MAAM,CAAA;AAE5B,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAE/B;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,SAAS;IACX,QAAQ,CAAkB;IAC1B,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;IACzC,SAAS,CAAoB;IAC7B,OAAO,CAAuB;IAC9B,KAAK,CAA4C;IACjD,MAAM,CAA2C;IACjD,QAAQ,GAAG,CAAC,CAAA;IACZ,QAAQ,GAAG,KAAK,CAAA;IAChB,gGAAgG;IAChG,MAAM,GAAG,KAAK,CAAA;IACd,QAAQ,CAA2C;IACnD,YAAY,GAAG,CAAC,CAAA;IAChB,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACrB,KAAK,CAA4C;IACjD,OAAO,CAAuC;IAC9C,kFAAkF;IACzE,IAAI,CAAe;IAE5B,YAAY,OAAyB;QACnC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,OAAO,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/D,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,CAAA;IACnC,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;YACrB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5D,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAA;QAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,WAAW,CACtB,GAAG,EAAE;gBACH,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,EAAE,CAAC;oBACzE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAA;oBAC1F,KAAK,IAAI,CAAC,IAAI,EAAE,CAAA;gBAClB,CAAC;YACH,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CACzB,CAAA;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAM;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACzB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC3B,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,CAAC,OAAO,EAAE,CAAA;QACxD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAA;QACzB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAC1G,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;QACxB,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAA;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAA;QACzD,IAAI,IAA2B,CAAA;QAC/B,MAAM,KAAK,GAAwC,EAAE,CAAA;QACrD,MAAM,UAAU,GAAG,CACjB,IAAI,CAAC,QAAQ,CAAC,UAAU;YACxB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAC3F,CAAC;YACA,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,IAAI,IAAI;oBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;;oBAC1D,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;YACtD,CAAC;YACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,OAAO;oBAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACtD,CAAC;SACF,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;YAC3B,KAAK;YACL,UAAU;YACV,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YACxB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAA;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4FAA4F;YAC5F,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;YACpB,MAAM,KAAK,CAAA;QACb,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAA;QAC7B,IAAI,GAAG,MAAM,CAAA;QACb,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;QACrB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAA;QACjB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;QACnB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC9B,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACpC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,aAAa,CAAC,CAAA;QAC9C,IAAI,QAAQ;YAAE,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;;YAC/C,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACxF,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9E,CAAC;IAED,OAAO,CAAC,MAAiB,EAAE,MAAc,EAAE,OAAgC;QACzE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC;YAAE,IAAI,CAAC,UAAU,EAAE,CAAA;QAC1D,MAAM,CAAC,IAAI;aACR,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;aACxB,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;aAC5E,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,uCAAuC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACxG,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAM;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,IAAI,gBAAgB,CAAA;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,GAAG,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;QAChE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,IAAI,CAAC,QAAQ,EAAE;iBACZ,KAAK,CAAC,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;iBACvF,OAAO,CAAC,GAAG,EAAE;gBACZ,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;YAC3B,CAAC,CAAC,CAAA;QACN,CAAC,EAAE,IAAI,CAAC,CAAA;IACV,CAAC;IAED,KAAK,CAAC,KAAY;QAChB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAA;QAC3B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;QACxB,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC/B,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAM;QAEzB,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;QACpF,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,CAAC;IAED,eAAe,CAAC,KAAY;QAC1B,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnE,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAA;QAClB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,0BAA0B,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;QACxF,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,OAAc,EAAE,EAAE;gBACvC,0EAA0E;gBAC1E,IAAI,OAAO,YAAY,QAAQ,IAAI,OAAO,CAAC,IAAI,KAAK,sBAAsB;oBAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;;oBACzF,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;YACpC,CAAC,CAAC,CAAA;QACJ,CAAC,EAAE,IAAI,CAAC,CAAA;IACV,CAAC;IAED,UAAU,CAAC,KAAkB;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAC1B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,CAAA;QAC7C,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,4CAA4C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAA;QACpH,CAAC;QACD,oEAAoE;QACpE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QAE1D,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAC9D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC9B,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QACF,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACtB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;IAC3B,CAAC;IAED,MAAM,CAAC,MAAc;QACnB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1D,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CACP,MAAM,EACN,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE;YAClB,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;QAC3D,CAAC,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,IAAY;QACzC,IAAI,OAAgC,CAAA;QACpC,IAAI,CAAC;YACH,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,CAAC,CAAC,CAAA;YAC7F,OAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAA;QAC3F,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAE1B,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC7B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAC9B,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAC9B,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,0FAA0F;YAC1F,iEAAiE;YACjE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YACzC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;QACnB,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAA;YAC3B,MAAM,CAAC,KAAK,CACV,MAAM,CACJ,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;gBACpB,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE;gBACzC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,eAAe,EAAE,EAAE,CAC5G,CACF,CAAA;QACH,CAAC;aAAM,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACzF,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,uCAAuC,EAAE,EAAE,CAAC,CAAC,CAAA;QAChH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAAgB;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAA;QAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,MAAM,gDAAgD,EAAE;aAC1G,CAAA;QACH,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,CAAA;QAChF,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC,EAAE,CAAA;QACnG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;gBACnC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAA;YACvF,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAA;QAC5G,CAAC;IACH,CAAC;CACF;AAED,8GAA8G;AAC9G,MAAM,OAAO,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,CAAA;AAElF,mGAAmG;AACnG,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAmB,EAAU,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,WAAW,CAAA;AAE7F,yFAAyF;AACzF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAoB,EAAE,CACxD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACtB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,KAAK,CAAC,OAAO,EAAE,CAAA;QACf,OAAO,CAAC,IAAI,CAAC,CAAA;IACf,CAAC,CAAC,CAAA;IACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;AAC3C,CAAC,CAAC,CAAA"}

package/dist/server/start.d.ts

@@ -0,0 +1,12 @@
+import type { SessionStore } from "../session/store.js";
+/** A server a command started stops after this long unused. */
+export declare const IDLE_MS: number;
+/**
+ * Starts `max serve` for this profile in the background, detached, and returns at once — the
+ * command that asked goes on with its own connection and the next one finds the server.
+ *
+ * Its stderr goes to `<state>/profiles/<profile>.serve.log`, mode 600: nobody is watching a
+ * terminal for it, and that file is where a login that failed says so.
+ */
+export declare const startInBackground: (store: SessionStore, entry?: string | undefined) => boolean;
+//# sourceMappingURL=start.d.ts.map

package/dist/server/start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/server/start.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAGvD,+DAA+D;AAC/D,eAAO,MAAM,OAAO,QAAc,CAAA;AAKlC;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAI,OAAO,YAAY,EAAE,0BAAuB,KAAG,OAuBhF,CAAA"}

package/dist/server/start.js

@@ -0,0 +1,41 @@
+import { spawn } from "node:child_process";
+import { closeSync, mkdirSync, openSync, rmSync, statSync } from "node:fs";
+import { dirname } from "node:path";
+import { startingPath } from "./server.js";
+/** A server a command started stops after this long unused. */
+export const IDLE_MS = 15 * 60_000;
+/** A start that has not listened by now crashed; the next command may try again. */
+const START_GRACE_MS = 30_000;
+/**
+ * Starts `max serve` for this profile in the background, detached, and returns at once — the
+ * command that asked goes on with its own connection and the next one finds the server.
+ *
+ * Its stderr goes to `<state>/profiles/<profile>.serve.log`, mode 600: nobody is watching a
+ * terminal for it, and that file is where a login that failed says so.
+ */
+export const startInBackground = (store, entry = process.argv[1]) => {
+    if (!entry || store.readToken() === undefined)
+        return false;
+    const lock = startingPath(store);
+    mkdirSync(dirname(lock), { recursive: true, mode: 0o700 });
+    try {
+        closeSync(openSync(lock, "wx", 0o600));
+    }
+    catch {
+        const since = statSync(lock, { throwIfNoEntry: false })?.mtimeMs ?? 0;
+        if (Date.now() - since <= START_GRACE_MS)
+            return false;
+        rmSync(lock, { force: true });
+        closeSync(openSync(lock, "wx", 0o600));
+    }
+    const log = openSync(`${store.socketPath().replace(/\.sock$/, "")}.serve.log`, "a", 0o600);
+    const child = spawn(process.execPath, [entry, "--no-record", "serve", "--idle", `${IDLE_MS / 60_000}m`], {
+        detached: true,
+        stdio: ["ignore", "ignore", log],
+        env: { ...process.env, MAX_PROFILE: store.profile },
+    });
+    child.unref();
+    closeSync(log);
+    return true;
+};
+//# sourceMappingURL=start.js.map

package/dist/server/start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../src/server/start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAE1C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,CAAA;AAElC,oFAAoF;AACpF,MAAM,cAAc,GAAG,MAAM,CAAA;AAE7B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAmB,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAW,EAAE;IACzF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,EAAE,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAE3D,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IAChC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1D,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,IAAI,CAAC,CAAA;QACrE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,cAAc;YAAE,OAAO,KAAK,CAAA;QACtD,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7B,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IACxC,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IAC1F,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE;QACvG,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC;QAChC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE;KACpD,CAAC,CAAA;IACF,KAAK,CAAC,KAAK,EAAE,CAAA;IACb,SAAS,CAAC,GAAG,CAAC,CAAA;IACd,OAAO,IAAI,CAAA;AACb,CAAC,CAAA"}

package/dist/server/subscribe.d.ts

@@ -0,0 +1,9 @@
+import type { ServerEvent } from "./server.js";
+/**
+ * Listens to a running `max serve` until it goes away or `signal` fires.
+ *
+ * No server is an error that names the command to start one — starting it silently would leave a
+ * long-lived connection nobody asked for.
+ */
+export declare const subscribe: (path: string, profile: string, onEvent: (event: ServerEvent) => void, signal?: AbortSignal) => Promise<void>;
+//# sourceMappingURL=subscribe.d.ts.map

package/dist/server/subscribe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscribe.d.ts","sourceRoot":"","sources":["../../src/server/subscribe.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C;;;;;GAKG;AACH,eAAO,MAAM,SAAS,GACpB,MAAM,MAAM,EACZ,SAAS,MAAM,EACf,SAAS,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,EACrC,SAAS,WAAW,KACnB,OAAO,CAAC,IAAI,CAmBX,CAAA"}

package/dist/server/subscribe.js

@@ -0,0 +1,26 @@
+import { connect } from "node:net";
+import { CliError } from "@leemour/cli-core";
+import { asFirstWord } from "../profile.js";
+import { fromLine, lineReader } from "./lines.js";
+/**
+ * Listens to a running `max serve` until it goes away or `signal` fires.
+ *
+ * No server is an error that names the command to start one — starting it silently would leave a
+ * long-lived connection nobody asked for.
+ */
+export const subscribe = (path, profile, onEvent, signal) => new Promise((resolve, reject) => {
+    const socket = connect(path);
+    signal?.addEventListener("abort", () => socket.end(), { once: true });
+    socket.once("connect", () => socket.write(`${JSON.stringify({ subscribe: true })}\n`));
+    socket.on("data", lineReader((line) => onEvent(fromLine(line))));
+    socket.once("error", (error) => {
+        if (error.code === "ENOENT" || error.code === "ECONNREFUSED") {
+            const command = `max ${asFirstWord(profile)}serve`;
+            reject(new CliError("not_found", `no server is running for profile "${profile}" — start one with \`${command}\``));
+        }
+        else
+            reject(error);
+    });
+    socket.once("close", () => resolve());
+});
+//# sourceMappingURL=subscribe.js.map

package/dist/server/subscribe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscribe.js","sourceRoot":"","sources":["../../src/server/subscribe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAGjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,IAAY,EACZ,OAAe,EACf,OAAqC,EACrC,MAAoB,EACL,EAAE,CACjB,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE5B,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACrE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IACtF,MAAM,CAAC,EAAE,CACP,MAAM,EACN,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA2B,CAAC,CAAC,CACxE,CAAA;IACD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;QACpD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,OAAO,WAAW,CAAC,OAAO,CAAC,OAAO,CAAA;YAClD,MAAM,CACJ,IAAI,QAAQ,CAAC,WAAW,EAAE,qCAAqC,OAAO,wBAAwB,OAAO,IAAI,CAAC,CAC3G,CAAA;QACH,CAAC;;YAAM,MAAM,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;AACvC,CAAC,CAAC,CAAA"}

package/dist/session/adopt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adopt.d.ts","sourceRoot":"","sources":["../../src/session/adopt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,UAAU,GAAU,QAAQ,SAAS,EAAE,OAAO,YAAY,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC,IAAI,CASpG,CAAA"}
+{"version":3,"file":"adopt.d.ts","sourceRoot":"","sources":["../../src/session/adopt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,UAAU,GAAU,QAAQ,SAAS,EAAE,OAAO,YAAY,EAAE,OAAO,MAAM,KAAG,OAAO,CAAC,IAAI,CAUpG,CAAA"}

package/dist/session/adopt.js

@@ -17,13 +17,14 @@
  * cannot be driven by a test — and this ordering is too expensive to hold on trust.
  */
 export const adoptToken = async (client, store, token) => {
+    const before = store.readToken();
     await client.connect({ token });
-    // ⚠ **Only if the login did not already leave a better one.** MAX answers every login with a
-    // fresh token and `connect` now keeps it (`MAX-11`); writing the pasted one here unconditionally
-    // would replace that with the credential the person copied out of a browser, which is the older
-    // of the two. The check also covers the case where the keyring write failed inside `connect`:
-    // then there is nothing stored, and what was pasted is better than nothing.
-    if (store.readToken() === undefined)
+    // ⚠ **Only if the login did not already leave a better one.** MAX answers a login with a fresh
+    // token when the one presented has aged, and `connect` keeps it (`MAX-11`); overwriting that here
+    // would put back the older credential. Comparing with what was stored before, rather than asking
+    // whether anything is stored, is what lets a new login replace an old session at all — until
+    // 2026-09-24 a profile that already held a token kept it, and the command still said "stored".
+    if (store.readToken() === before)
         store.writeToken(token);
 };
 //# sourceMappingURL=adopt.js.map

package/dist/session/adopt.js.map

@@ -1 +1 @@
-{"version":3,"file":"adopt.js","sourceRoot":"","sources":["../../src/session/adopt.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,MAAiB,EAAE,KAAmB,EAAE,KAAa,EAAiB,EAAE;IACvG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAE/B,6FAA6F;IAC7F,iGAAiG;IACjG,gGAAgG;IAChG,8FAA8F;IAC9F,4EAA4E;IAC5E,IAAI,KAAK,CAAC,SAAS,EAAE,KAAK,SAAS;QAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;AAC9D,CAAC,CAAA"}
+{"version":3,"file":"adopt.js","sourceRoot":"","sources":["../../src/session/adopt.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,MAAiB,EAAE,KAAmB,EAAE,KAAa,EAAiB,EAAE;IACvG,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAA;IAChC,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IAE/B,+FAA+F;IAC/F,kGAAkG;IAClG,iGAAiG;IACjG,6FAA6F;IAC7F,+FAA+F;IAC/F,IAAI,KAAK,CAAC,SAAS,EAAE,KAAK,MAAM;QAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;AAC3D,CAAC,CAAA"}

package/dist/session/browser.d.ts

@@ -0,0 +1,55 @@
+import { type ChildProcess } from "node:child_process";
+import type { Closeable } from "../deadline.js";
+/**
+ * What `session start` needs from a browser. Injected in tests, which must never open a window on
+ * the owner's desktop — the real ones refuse inside the test sandbox.
+ */
+export interface BrowserDoors {
+    /** Shows a page in whatever browser the system opens links with. */
+    open: (url: string) => Promise<void>;
+    /** Opens web.max.ru in a Chromium-family browser and waits for the page to be logged in. */
+    chromiumToken: (options: {
+        track: (closeable: Closeable) => void;
+        waitMs: number;
+    }) => Promise<string>;
+}
+export declare const realBrowser: BrowserDoors;
+/**
+ * The QR page, served from `127.0.0.1` rather than written to a file: a browser installed as a
+ * snap cannot read our temporary directory, and a file would leave the link on disk. The path is
+ * random, so another local user guessing the port finds nothing.
+ */
+export declare const serveQrPage: (link: string) => Promise<{
+    url: string;
+} & Closeable>;
+export declare const openUrl: (url: string) => Promise<void>;
+/**
+ * Chrome, Chromium, Edge or Brave — any browser that speaks the DevTools protocol. `MAX_BROWSER`
+ * names another. A snap build is skipped: it keeps its own `/tmp`, so the profile we hand it would
+ * land where we cannot delete it.
+ */
+export declare const findChromium: () => string | undefined;
+/**
+ * web.max.ru logs itself in — it asks MAX for the QR code, or sends the SMS — in a real browser with
+ * a profile of its own, and we read the token it stores once it has one. MAX sees its own web
+ * client do the login, not our socket.
+ *
+ * ⚠ The profile holds a live session, so it is deleted on every way out: success, a closed window,
+ * `--timeout`, Ctrl-C.
+ */
+export declare const tokenFromChromium: ({ track, waitMs, }: {
+    track: (closeable: Closeable) => void;
+    waitMs: number;
+}) => Promise<string>;
+export declare class ChromiumSession implements Closeable {
+    #private;
+    constructor(child: ChildProcess, profile: string, graceMs?: number);
+    waitForToken(waitMs: number): Promise<string>;
+    close(): Promise<void>;
+}
+/**
+ * The stored value is JSON holding the token, or the token itself — which one is not measured yet.
+ * Either way nothing here prints it.
+ */
+export declare const tokenIn: (stored: string) => string | undefined;
+//# sourceMappingURL=browser.d.ts.map

package/dist/session/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/session/browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,YAAY,EAAS,MAAM,oBAAoB,CAAA;AAW7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAE/C;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,oEAAoE;IACpE,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,4FAA4F;IAC5F,aAAa,EAAE,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,KAAK,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CACvG;AAED,eAAO,MAAM,WAAW,EAAE,YAGzB,CAAA;AAKD;;;;GAIG;AACH,eAAO,MAAM,WAAW,GAAU,MAAM,MAAM,KAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAkCnF,CAAA;AASD,eAAO,MAAM,OAAO,GAAU,KAAK,MAAM,KAAG,OAAO,CAAC,IAAI,CAmBvD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,QAAO,MAAM,GAAG,SA0CxC,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,GAAU,oBAGrC;IACD,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,KAAK,IAAI,CAAA;IACrC,MAAM,EAAE,MAAM,CAAA;CACf,KAAG,OAAO,CAAC,MAAM,CA4BjB,CAAA;AAED,qBAAa,eAAgB,YAAW,SAAS;;gBASnC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,SAAQ;IAW3D,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBnD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CA0CvB;AAuED;;;GAGG;AACH,eAAO,MAAM,OAAO,GAAI,QAAQ,MAAM,KAAG,MAAM,GAAG,SAWjD,CAAA"}