@mulmoclaude/core 0.8.1 → 0.9.0

package/dist/remote-host/server/index.cjs

@@ -0,0 +1,194 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_errorMessage = require("../../errorMessage--LvXe_Jx.cjs");
+const require_remote_host_index = require("../index.cjs");
+let firebase_firestore = require("firebase/firestore");
+let firebase_auth = require("firebase/auth");
+let firebase_app = require("firebase/app");
+let firebase_storage = require("firebase/storage");
+//#region src/remote-host/server/hostRunner.ts
+var DEFAULT_HEARTBEAT_MS = 6e4;
+var noop$1 = () => void 0;
+var writeError = (ref, code, message) => (0, firebase_firestore.updateDoc)(ref, {
+	status: "error",
+	error: {
+		code,
+		message
+	},
+	updatedAt: (0, firebase_firestore.serverTimestamp)()
+}).catch(noop$1);
+var claimCommand = (firestore, ref) => (0, firebase_firestore.runTransaction)(firestore, async (txn) => {
+	const data = (await txn.get(ref)).data();
+	if (!data || data.status !== "queued") return null;
+	txn.update(ref, {
+		status: "processing",
+		updatedAt: (0, firebase_firestore.serverTimestamp)()
+	});
+	return {
+		method: data.method,
+		params: data.params ?? {}
+	};
+});
+var runHandler = async (ref, claim, handler) => {
+	try {
+		await (0, firebase_firestore.updateDoc)(ref, {
+			status: "done",
+			result: await handler(claim.params) ?? null,
+			updatedAt: (0, firebase_firestore.serverTimestamp)()
+		});
+		return {
+			phase: "done",
+			method: claim.method
+		};
+	} catch (error) {
+		const message = require_errorMessage.errorMessage(error);
+		await writeError(ref, "handler_error", message);
+		return {
+			phase: "error",
+			method: claim.method,
+			message
+		};
+	}
+};
+var processCommand = async (firestore, ref, handlers, onEvent) => {
+	const claim = await claimCommand(firestore, ref);
+	if (!claim) return;
+	onEvent?.({
+		phase: "received",
+		method: claim.method
+	});
+	const handler = handlers[claim.method];
+	if (!handler) {
+		await writeError(ref, "unknown_method", `No handler for method: ${claim.method}`);
+		onEvent?.({
+			phase: "error",
+			method: claim.method,
+			message: "unknown method"
+		});
+		return;
+	}
+	onEvent?.(await runHandler(ref, claim, handler));
+};
+var startHostRunner = (firestore, channel, handlers, options = {}) => {
+	const presence = require_remote_host_index.hostDoc(firestore, channel);
+	const announce = () => {
+		(0, firebase_firestore.setDoc)(presence, {
+			online: true,
+			updatedAt: (0, firebase_firestore.serverTimestamp)()
+		}).catch(noop$1);
+	};
+	announce();
+	const beat = setInterval(announce, options.heartbeatMs ?? DEFAULT_HEARTBEAT_MS);
+	const unsubscribe = (0, firebase_firestore.onSnapshot)((0, firebase_firestore.query)(require_remote_host_index.commandsCollection(firestore, channel), (0, firebase_firestore.where)("status", "==", "queued")), (snapshot) => {
+		snapshot.docChanges().forEach((change) => {
+			if (change.type === "added") processCommand(firestore, change.doc.ref, handlers, options.onEvent).catch(noop$1);
+		});
+	}, (error) => {
+		options.onEvent?.({
+			phase: "error",
+			method: "listen",
+			message: error.message
+		});
+		clearInterval(beat);
+		(0, firebase_firestore.setDoc)(presence, {
+			online: false,
+			updatedAt: (0, firebase_firestore.serverTimestamp)()
+		}).catch(noop$1);
+		options.onClosed?.();
+	});
+	return () => {
+		clearInterval(beat);
+		(0, firebase_firestore.setDoc)(presence, {
+			online: false,
+			updatedAt: (0, firebase_firestore.serverTimestamp)()
+		}).catch(noop$1);
+		unsubscribe();
+	};
+};
+//#endregion
+//#region src/remote-host/server/lifecycle.ts
+var noop = () => void 0;
+var silentLogger = {
+	info: noop,
+	warn: noop,
+	debug: noop
+};
+var createRemoteHost = (deps) => {
+	const log = deps.log ?? silentLogger;
+	let stopRunner = null;
+	let transition = Promise.resolve();
+	const serialize = (operation) => {
+		const next = transition.then(operation, operation);
+		transition = next.then(noop, noop);
+		return next;
+	};
+	const stopIfRunning = () => {
+		if (stopRunner) {
+			stopRunner();
+			stopRunner = null;
+		}
+	};
+	const status = () => ({
+		connected: stopRunner !== null,
+		uid: deps.currentUid()
+	});
+	const startRunner = (uid) => {
+		const runner = deps.startRunner({
+			uid,
+			hostId: deps.hostId
+		}, deps.handlers, {
+			onEvent: (event) => log.debug(`host event: ${event.phase} ${event.method}`),
+			onClosed: () => {
+				if (stopRunner === runner) {
+					stopRunner = null;
+					log.warn("host runner listener died; marked disconnected");
+				}
+			}
+		});
+		return runner;
+	};
+	const connect = (idToken) => serialize(async () => {
+		const uid = await deps.signIn(idToken);
+		stopIfRunning();
+		stopRunner = startRunner(uid);
+		log.info(`connected as ${uid}, host runner started (hostId=${deps.hostId})`);
+		return status();
+	});
+	const disconnect = () => serialize(async () => {
+		stopIfRunning();
+		await deps.signOut();
+		log.info("disconnected, host runner stopped");
+		return status();
+	});
+	return {
+		connect,
+		disconnect,
+		status
+	};
+};
+//#endregion
+//#region src/remote-host/server/auth.ts
+var createRemoteHostAuth = (auth) => ({
+	signInHost: async (idToken) => {
+		return (await (0, firebase_auth.signInWithCredential)(auth, firebase_auth.GoogleAuthProvider.credential(idToken))).user.uid;
+	},
+	signOutHost: () => (0, firebase_auth.signOut)(auth),
+	currentUid: () => auth.currentUser?.uid ?? null
+});
+//#endregion
+//#region src/remote-host/server/firebase.ts
+var createRemoteHostFirebase = (config) => {
+	const app = (0, firebase_app.initializeApp)(config);
+	return {
+		app,
+		auth: (0, firebase_auth.getAuth)(app),
+		firestore: (0, firebase_firestore.getFirestore)(app),
+		storage: (0, firebase_storage.getStorage)(app)
+	};
+};
+//#endregion
+exports.createRemoteHost = createRemoteHost;
+exports.createRemoteHostAuth = createRemoteHostAuth;
+exports.createRemoteHostFirebase = createRemoteHostFirebase;
+exports.startHostRunner = startHostRunner;
+
+//# sourceMappingURL=index.cjs.map

package/dist/remote-host/server/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../src/remote-host/server/hostRunner.ts","../../../src/remote-host/server/lifecycle.ts","../../../src/remote-host/server/auth.ts","../../../src/remote-host/server/firebase.ts"],"sourcesContent":["// Host side of the command channel: claim queued commands, run handlers, write\n// results back, and announce presence via heartbeat.\n//\n// Extracted into core from MulmoClaude's server/remoteHost/hostRunner.ts (itself\n// ported from ../mulmoserver). The only signature change vs. that copy: the\n// `firestore` instance is a parameter (each host supplies its own Firebase init),\n// and the heartbeat interval is an option (defaults to one minute).\nimport { DocumentReference, Firestore, onSnapshot, query, runTransaction, serverTimestamp, setDoc, updateDoc, where } from \"firebase/firestore\";\n\nimport { errorMessage } from \"../../collection/core/errorMessage.js\";\nimport { Channel, Command, CommandHandler, CommandHandlers, JsonObject, commandsCollection, hostDoc } from \"../index.js\";\n\nconst DEFAULT_HEARTBEAT_MS = 60_000;\n\nexport interface HostEvent {\n  phase: \"received\" | \"done\" | \"error\";\n  method: string;\n  message?: string;\n}\n\nexport interface HostRunnerOptions {\n  onEvent?: (event: HostEvent) => void;\n  // Called once when the listener dies fatally (after presence has been set\n  // offline), so the lifecycle owner can reconcile its own state — e.g. clear\n  // the runner handle so status() no longer reports connected. NOT called on a\n  // normal stop().\n  onClosed?: () => void;\n  // Presence heartbeat interval; defaults to one minute.\n  heartbeatMs?: number;\n}\n\ninterface Claim {\n  method: string;\n  params: JsonObject;\n}\n\nconst noop = () => undefined;\n\n// The remote may have deleted the doc on timeout, so ignore write-after-delete.\nconst writeError = (ref: DocumentReference, code: string, message: string) =>\n  updateDoc(ref, { status: \"error\", error: { code, message }, updatedAt: serverTimestamp() }).catch(noop);\n\n// Atomically move a command queued -> processing so it is handled exactly once.\n// Returns the method/params to run, or null if another handler already took it.\nconst claimCommand = (firestore: Firestore, ref: DocumentReference): Promise<Claim | null> =>\n  runTransaction(firestore, async (txn) => {\n    const data = (await txn.get(ref)).data() as Command | undefined;\n    if (!data || data.status !== \"queued\") {\n      return null;\n    }\n    txn.update(ref, { status: \"processing\", updatedAt: serverTimestamp() });\n    return { method: data.method, params: data.params ?? {} };\n  });\n\nconst runHandler = async (ref: DocumentReference, claim: Claim, handler: CommandHandler): Promise<HostEvent> => {\n  try {\n    const result = await handler(claim.params);\n    await updateDoc(ref, { status: \"done\", result: result ?? null, updatedAt: serverTimestamp() });\n    return { phase: \"done\", method: claim.method };\n  } catch (error) {\n    const message = errorMessage(error);\n    await writeError(ref, \"handler_error\", message);\n    return { phase: \"error\", method: claim.method, message };\n  }\n};\n\nconst processCommand = async (firestore: Firestore, ref: DocumentReference, handlers: CommandHandlers, onEvent?: HostRunnerOptions[\"onEvent\"]) => {\n  const claim = await claimCommand(firestore, ref);\n  if (!claim) {\n    return;\n  }\n  onEvent?.({ phase: \"received\", method: claim.method });\n  const handler: CommandHandler | undefined = handlers[claim.method];\n  if (!handler) {\n    await writeError(ref, \"unknown_method\", `No handler for method: ${claim.method}`);\n    onEvent?.({ phase: \"error\", method: claim.method, message: \"unknown method\" });\n    return;\n  }\n  onEvent?.(await runHandler(ref, claim, handler));\n};\n\n// startHostRunner subscribes to queued commands for the given channel and runs\n// each one through the supplied handler table. It also announces presence (a\n// heartbeat on users/{uid}/hosts/{hostId}) so the remote can tell it is online.\n// Returns a stop function that goes offline and detaches the listener.\nexport const startHostRunner = (firestore: Firestore, channel: Channel, handlers: CommandHandlers, options: HostRunnerOptions = {}): (() => void) => {\n  const presence = hostDoc(firestore, channel);\n  const announce = () => {\n    setDoc(presence, { online: true, updatedAt: serverTimestamp() }).catch(noop);\n  };\n  announce();\n  const beat = setInterval(announce, options.heartbeatMs ?? DEFAULT_HEARTBEAT_MS);\n\n  const queuedCommands = query(commandsCollection(firestore, channel), where(\"status\", \"==\", \"queued\"));\n  const unsubscribe = onSnapshot(\n    queuedCommands,\n    (snapshot) => {\n      snapshot.docChanges().forEach((change) => {\n        if (change.type === \"added\") {\n          processCommand(firestore, change.doc.ref, handlers, options.onEvent).catch(noop);\n        }\n      });\n    },\n    (error) => {\n      options.onEvent?.({ phase: \"error\", method: \"listen\", message: error.message });\n      // A Firestore onSnapshot error terminates the listener and it does not\n      // recover on its own. Stop advertising presence (clear the heartbeat +\n      // write online:false) so remotes see the host as offline instead of a\n      // live host that silently consumes no commands.\n      clearInterval(beat);\n      setDoc(presence, { online: false, updatedAt: serverTimestamp() }).catch(noop);\n      options.onClosed?.();\n    },\n  );\n\n  return () => {\n    clearInterval(beat);\n    setDoc(presence, { online: false, updatedAt: serverTimestamp() }).catch(noop);\n    unsubscribe();\n  };\n};\n","// Remote-host lifecycle: wire a Firebase session to the Firestore host runner so\n// connecting starts the command loop + presence heartbeat, and disconnecting\n// stops both.\n//\n// Extracted into core from MulmoClaude's server/remoteHost/index.ts. The factory\n// takes injected collaborators — real hosts bind them to Firebase; tests pass\n// fakes to exercise the invariants (non-destructive connect, serialized\n// transitions, status/liveness reconciliation on fatal listener death) without a\n// network. `hostId` and the logger are injected too, so this file imports no\n// Firebase and no host logger and stays trivially unit-testable.\n//\n// Single-account, single-host per instance, in-memory session: a host restart\n// drops the session and needs a re-connect.\nimport type { Channel, CommandHandlers } from \"../index.js\";\nimport type { HostRunnerOptions } from \"./hostRunner.js\";\n\nexport interface RemoteHostStatus {\n  connected: boolean;\n  uid: string | null;\n}\n\n// Minimal logger the factory calls; each host adapts its own logger to this\n// shape (or omits it to run silently, as the tests do).\nexport interface RemoteHostLogger {\n  info: (msg: string) => void;\n  warn: (msg: string) => void;\n  debug: (msg: string) => void;\n}\n\n// Injectable collaborators — a real host binds these to Firebase + its own\n// hostId; tests pass fakes to exercise the lifecycle without a network.\n// `startRunner` is the host's `startHostRunner` pre-bound with its Firestore\n// instance, so this module needs no Firebase of its own.\nexport interface RemoteHostDeps {\n  hostId: string;\n  signIn: (idToken: string) => Promise<string>;\n  signOut: () => Promise<void>;\n  currentUid: () => string | null;\n  startRunner: (channel: Channel, handlers: CommandHandlers, options: HostRunnerOptions) => () => void;\n  handlers: CommandHandlers;\n  log?: RemoteHostLogger;\n}\n\nexport interface RemoteHostLifecycle {\n  connect: (idToken: string) => Promise<RemoteHostStatus>;\n  disconnect: () => Promise<RemoteHostStatus>;\n  status: () => RemoteHostStatus;\n}\n\nconst noop = () => undefined;\nconst silentLogger: RemoteHostLogger = { info: noop, warn: noop, debug: noop };\n\nexport const createRemoteHost = (deps: RemoteHostDeps): RemoteHostLifecycle => {\n  const log = deps.log ?? silentLogger;\n\n  // The running host runner's stop() handle, or null when disconnected. Keeps\n  // the single-host invariant — one runner at a time.\n  let stopRunner: (() => void) | null = null;\n\n  // Serialize connect/disconnect so overlapping requests can't both mutate\n  // stopRunner (which would leak a second runner) or race auth against teardown.\n  // Each transition runs only after the previous one settles; a failed\n  // transition does not block the next (both handlers run the next op).\n  let transition: Promise<unknown> = Promise.resolve();\n\n  const serialize = <T>(operation: () => Promise<T>): Promise<T> => {\n    const next = transition.then(operation, operation);\n    transition = next.then(noop, noop);\n    return next;\n  };\n\n  const stopIfRunning = () => {\n    if (stopRunner) {\n      stopRunner();\n      stopRunner = null;\n    }\n  };\n\n  const status = (): RemoteHostStatus => ({ connected: stopRunner !== null, uid: deps.currentUid() });\n\n  const startRunner = (uid: string) => {\n    const runner = deps.startRunner({ uid, hostId: deps.hostId }, deps.handlers, {\n      onEvent: (event) => log.debug(`host event: ${event.phase} ${event.method}`),\n      // The listener died fatally (heartbeat already stopped + offline written);\n      // clear the handle so status() stops reporting connected — but only if it\n      // still points at THIS runner (a later reconnect may have replaced it).\n      onClosed: () => {\n        if (stopRunner === runner) {\n          stopRunner = null;\n          log.warn(\"host runner listener died; marked disconnected\");\n        }\n      },\n    });\n    return runner;\n  };\n\n  const connect = (idToken: string): Promise<RemoteHostStatus> =>\n    serialize(async () => {\n      // Authenticate BEFORE any teardown, so a failed connect (expired/rejected\n      // token) leaves an existing healthy session untouched instead of dropping it.\n      const uid = await deps.signIn(idToken);\n      stopIfRunning();\n      stopRunner = startRunner(uid);\n      log.info(`connected as ${uid}, host runner started (hostId=${deps.hostId})`);\n      return status();\n    });\n\n  const disconnect = (): Promise<RemoteHostStatus> =>\n    serialize(async () => {\n      stopIfRunning();\n      await deps.signOut();\n      log.info(\"disconnected, host runner stopped\");\n      return status();\n    });\n\n  return { connect, disconnect, status };\n};\n","// Firebase credential exchange for the remote-host runner.\n//\n// The host authenticates to Firestore *as the user* (Option B) using the\n// Firebase JS SDK's signInWithCredential with a browser-minted Google OAuth ID\n// token — no Admin SDK, no project service account. Security rules keep the host\n// scoped to that user's own users/{uid}/… subtree.\n//\n// Extracted into core from MulmoClaude's server/remoteHost/auth.ts. The `auth`\n// instance is a parameter so each host binds its own Firebase init; the factory\n// returns the low-level credential primitives (the connect/disconnect lifecycle\n// that starts/stops the host runner lives in createRemoteHost).\nimport { Auth, GoogleAuthProvider, signInWithCredential, signOut } from \"firebase/auth\";\n\nexport interface RemoteHostAuth {\n  // Establish the Firebase session from a browser-minted Google OAuth ID token.\n  // The token is used once here; the JS SDK then holds its own refresh token for\n  // the process lifetime. Resolves to the authenticated uid.\n  signInHost: (idToken: string) => Promise<string>;\n  // Tear down the Firebase session (in-memory persistence → re-login on restart).\n  signOutHost: () => Promise<void>;\n  // The currently signed-in uid, or null when disconnected.\n  currentUid: () => string | null;\n}\n\nexport const createRemoteHostAuth = (auth: Auth): RemoteHostAuth => ({\n  signInHost: async (idToken: string): Promise<string> => {\n    const credential = GoogleAuthProvider.credential(idToken);\n    const userCredential = await signInWithCredential(auth, credential);\n    return userCredential.user.uid;\n  },\n  signOutHost: (): Promise<void> => signOut(auth),\n  currentUid: (): string | null => auth.currentUser?.uid ?? null,\n});\n","// Firebase init for a remote-host runner.\n//\n// A host acts as a *host*: it signs in to Firebase as the user (via\n// signInWithCredential, see auth.ts) and listens to that user's command queue in\n// Firestore. The modular firebase/firestore + firebase/auth SDKs run in Node, so\n// this mirrors a browser init but also exposes Firestore (default database,\n// which must be in Native mode) and Storage.\n//\n// Extracted into core from MulmoClaude's server/remoteHost/firebase.ts. The\n// public web config is a parameter so each host supplies its own (both hosts\n// reuse the shared mulmoserver project).\nimport { FirebaseApp, FirebaseOptions, initializeApp } from \"firebase/app\";\nimport { Auth, getAuth } from \"firebase/auth\";\nimport { Firestore, getFirestore } from \"firebase/firestore\";\nimport { FirebaseStorage, getStorage } from \"firebase/storage\";\n\nexport interface RemoteHostFirebase {\n  app: FirebaseApp;\n  auth: Auth;\n  firestore: Firestore;\n  // Storage carries the full-res attachment bytes the command channel can't (a\n  // Firestore command doc caps at ~1 MiB). The host, signed in as the user,\n  // pulls each staged upload from `users/{uid}/uploads/{id}` and deletes it\n  // after ingest.\n  storage: FirebaseStorage;\n}\n\nexport const createRemoteHostFirebase = (config: FirebaseOptions): RemoteHostFirebase => {\n  const app = initializeApp(config);\n  return { app, auth: getAuth(app), firestore: getFirestore(app), storage: getStorage(app) };\n};\n"],"mappings":";;;;;;;;AAYA,IAAM,uBAAuB;AAwB7B,IAAM,eAAa,KAAA;AAGnB,IAAM,cAAc,KAAwB,MAAc,aAAA,GAAA,mBAAA,UAAA,CAC9C,KAAK;CAAE,QAAQ;CAAS,OAAO;EAAE;EAAM;CAAQ;CAAG,YAAA,GAAA,mBAAA,gBAAA,CAA2B;AAAE,CAAC,CAAC,CAAC,MAAM,MAAI;AAIxG,IAAM,gBAAgB,WAAsB,SAAA,GAAA,mBAAA,eAAA,CAC3B,WAAW,OAAO,QAAQ;CACvC,MAAM,QAAQ,MAAM,IAAI,IAAI,GAAG,EAAA,CAAG,KAAK;CACvC,IAAI,CAAC,QAAQ,KAAK,WAAW,UAC3B,OAAO;CAET,IAAI,OAAO,KAAK;EAAE,QAAQ;EAAc,YAAA,GAAA,mBAAA,gBAAA,CAA2B;CAAE,CAAC;CACtE,OAAO;EAAE,QAAQ,KAAK;EAAQ,QAAQ,KAAK,UAAU,CAAC;CAAE;AAC1D,CAAC;AAEH,IAAM,aAAa,OAAO,KAAwB,OAAc,YAAgD;CAC9G,IAAI;EAEF,OAAA,GAAA,mBAAA,UAAA,CAAgB,KAAK;GAAE,QAAQ;GAAQ,QAAQ,MAD1B,QAAQ,MAAM,MAAM,KACgB;GAAM,YAAA,GAAA,mBAAA,gBAAA,CAA2B;EAAE,CAAC;EAC7F,OAAO;GAAE,OAAO;GAAQ,QAAQ,MAAM;EAAO;CAC/C,SAAS,OAAO;EACd,MAAM,UAAU,qBAAA,aAAa,KAAK;EAClC,MAAM,WAAW,KAAK,iBAAiB,OAAO;EAC9C,OAAO;GAAE,OAAO;GAAS,QAAQ,MAAM;GAAQ;EAAQ;CACzD;AACF;AAEA,IAAM,iBAAiB,OAAO,WAAsB,KAAwB,UAA2B,YAA2C;CAChJ,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;CAC/C,IAAI,CAAC,OACH;CAEF,UAAU;EAAE,OAAO;EAAY,QAAQ,MAAM;CAAO,CAAC;CACrD,MAAM,UAAsC,SAAS,MAAM;CAC3D,IAAI,CAAC,SAAS;EACZ,MAAM,WAAW,KAAK,kBAAkB,0BAA0B,MAAM,QAAQ;EAChF,UAAU;GAAE,OAAO;GAAS,QAAQ,MAAM;GAAQ,SAAS;EAAiB,CAAC;EAC7E;CACF;CACA,UAAU,MAAM,WAAW,KAAK,OAAO,OAAO,CAAC;AACjD;AAMA,IAAa,mBAAmB,WAAsB,SAAkB,UAA2B,UAA6B,CAAC,MAAoB;CACnJ,MAAM,WAAW,0BAAA,QAAQ,WAAW,OAAO;CAC3C,MAAM,iBAAiB;EACrB,CAAA,GAAA,mBAAA,OAAA,CAAO,UAAU;GAAE,QAAQ;GAAM,YAAA,GAAA,mBAAA,gBAAA,CAA2B;EAAE,CAAC,CAAC,CAAC,MAAM,MAAI;CAC7E;CACA,SAAS;CACT,MAAM,OAAO,YAAY,UAAU,QAAQ,eAAe,oBAAoB;CAG9E,MAAM,eAAA,GAAA,mBAAA,WAAA,EAAA,GAAA,mBAAA,MAAA,CADuB,0BAAA,mBAAmB,WAAW,OAAO,IAAA,GAAA,mBAAA,MAAA,CAAS,UAAU,MAAM,QAAQ,CAEjG,IACC,aAAa;EACZ,SAAS,WAAW,CAAC,CAAC,SAAS,WAAW;GACxC,IAAI,OAAO,SAAS,SAClB,eAAe,WAAW,OAAO,IAAI,KAAK,UAAU,QAAQ,OAAO,CAAC,CAAC,MAAM,MAAI;EAEnF,CAAC;CACH,IACC,UAAU;EACT,QAAQ,UAAU;GAAE,OAAO;GAAS,QAAQ;GAAU,SAAS,MAAM;EAAQ,CAAC;EAK9E,cAAc,IAAI;EAClB,CAAA,GAAA,mBAAA,OAAA,CAAO,UAAU;GAAE,QAAQ;GAAO,YAAA,GAAA,mBAAA,gBAAA,CAA2B;EAAE,CAAC,CAAC,CAAC,MAAM,MAAI;EAC5E,QAAQ,WAAW;CACrB,CACF;CAEA,aAAa;EACX,cAAc,IAAI;EAClB,CAAA,GAAA,mBAAA,OAAA,CAAO,UAAU;GAAE,QAAQ;GAAO,YAAA,GAAA,mBAAA,gBAAA,CAA2B;EAAE,CAAC,CAAC,CAAC,MAAM,MAAI;EAC5E,YAAY;CACd;AACF;;;ACvEA,IAAM,aAAa,KAAA;AACnB,IAAM,eAAiC;CAAE,MAAM;CAAM,MAAM;CAAM,OAAO;AAAK;AAE7E,IAAa,oBAAoB,SAA8C;CAC7E,MAAM,MAAM,KAAK,OAAO;CAIxB,IAAI,aAAkC;CAMtC,IAAI,aAA+B,QAAQ,QAAQ;CAEnD,MAAM,aAAgB,cAA4C;EAChE,MAAM,OAAO,WAAW,KAAK,WAAW,SAAS;EACjD,aAAa,KAAK,KAAK,MAAM,IAAI;EACjC,OAAO;CACT;CAEA,MAAM,sBAAsB;EAC1B,IAAI,YAAY;GACd,WAAW;GACX,aAAa;EACf;CACF;CAEA,MAAM,gBAAkC;EAAE,WAAW,eAAe;EAAM,KAAK,KAAK,WAAW;CAAE;CAEjG,MAAM,eAAe,QAAgB;EACnC,MAAM,SAAS,KAAK,YAAY;GAAE;GAAK,QAAQ,KAAK;EAAO,GAAG,KAAK,UAAU;GAC3E,UAAU,UAAU,IAAI,MAAM,eAAe,MAAM,MAAM,GAAG,MAAM,QAAQ;GAI1E,gBAAgB;IACd,IAAI,eAAe,QAAQ;KACzB,aAAa;KACb,IAAI,KAAK,gDAAgD;IAC3D;GACF;EACF,CAAC;EACD,OAAO;CACT;CAEA,MAAM,WAAW,YACf,UAAU,YAAY;EAGpB,MAAM,MAAM,MAAM,KAAK,OAAO,OAAO;EACrC,cAAc;EACd,aAAa,YAAY,GAAG;EAC5B,IAAI,KAAK,gBAAgB,IAAI,gCAAgC,KAAK,OAAO,EAAE;EAC3E,OAAO,OAAO;CAChB,CAAC;CAEH,MAAM,mBACJ,UAAU,YAAY;EACpB,cAAc;EACd,MAAM,KAAK,QAAQ;EACnB,IAAI,KAAK,mCAAmC;EAC5C,OAAO,OAAO;CAChB,CAAC;CAEH,OAAO;EAAE;EAAS;EAAY;CAAO;AACvC;;;AC5FA,IAAa,wBAAwB,UAAgC;CACnE,YAAY,OAAO,YAAqC;EAGtD,QAAO,OAAA,GAAA,cAAA,qBAAA,CAD2C,MAD/B,cAAA,mBAAmB,WAAW,OACO,CAAU,EAAA,CAC5C,KAAK;CAC7B;CACA,oBAAA,GAAA,cAAA,QAAA,CAA0C,IAAI;CAC9C,kBAAiC,KAAK,aAAa,OAAO;AAC5D;;;ACLA,IAAa,4BAA4B,WAAgD;CACvF,MAAM,OAAA,GAAA,aAAA,cAAA,CAAoB,MAAM;CAChC,OAAO;EAAE;EAAK,OAAA,GAAA,cAAA,QAAA,CAAc,GAAG;EAAG,YAAA,GAAA,mBAAA,aAAA,CAAwB,GAAG;EAAG,UAAA,GAAA,iBAAA,WAAA,CAAoB,GAAG;CAAE;AAC3F"}

package/dist/remote-host/server/index.d.ts

@@ -0,0 +1,8 @@
+export { startHostRunner } from './hostRunner.js';
+export type { HostEvent, HostRunnerOptions } from './hostRunner.js';
+export { createRemoteHost } from './lifecycle.js';
+export type { RemoteHostStatus, RemoteHostLogger, RemoteHostDeps, RemoteHostLifecycle } from './lifecycle.js';
+export { createRemoteHostAuth } from './auth.js';
+export type { RemoteHostAuth } from './auth.js';
+export { createRemoteHostFirebase } from './firebase.js';
+export type { RemoteHostFirebase } from './firebase.js';

package/dist/remote-host/server/index.js

@@ -0,0 +1,190 @@
+import { t as errorMessage } from "../../errorMessage-DIdhheHk.js";
+import { commandsCollection, hostDoc } from "../index.js";
+import { getFirestore, onSnapshot, query, runTransaction, serverTimestamp, setDoc, updateDoc, where } from "firebase/firestore";
+import { GoogleAuthProvider, getAuth, signInWithCredential, signOut } from "firebase/auth";
+import { initializeApp } from "firebase/app";
+import { getStorage } from "firebase/storage";
+//#region src/remote-host/server/hostRunner.ts
+var DEFAULT_HEARTBEAT_MS = 6e4;
+var noop$1 = () => void 0;
+var writeError = (ref, code, message) => updateDoc(ref, {
+	status: "error",
+	error: {
+		code,
+		message
+	},
+	updatedAt: serverTimestamp()
+}).catch(noop$1);
+var claimCommand = (firestore, ref) => runTransaction(firestore, async (txn) => {
+	const data = (await txn.get(ref)).data();
+	if (!data || data.status !== "queued") return null;
+	txn.update(ref, {
+		status: "processing",
+		updatedAt: serverTimestamp()
+	});
+	return {
+		method: data.method,
+		params: data.params ?? {}
+	};
+});
+var runHandler = async (ref, claim, handler) => {
+	try {
+		await updateDoc(ref, {
+			status: "done",
+			result: await handler(claim.params) ?? null,
+			updatedAt: serverTimestamp()
+		});
+		return {
+			phase: "done",
+			method: claim.method
+		};
+	} catch (error) {
+		const message = errorMessage(error);
+		await writeError(ref, "handler_error", message);
+		return {
+			phase: "error",
+			method: claim.method,
+			message
+		};
+	}
+};
+var processCommand = async (firestore, ref, handlers, onEvent) => {
+	const claim = await claimCommand(firestore, ref);
+	if (!claim) return;
+	onEvent?.({
+		phase: "received",
+		method: claim.method
+	});
+	const handler = handlers[claim.method];
+	if (!handler) {
+		await writeError(ref, "unknown_method", `No handler for method: ${claim.method}`);
+		onEvent?.({
+			phase: "error",
+			method: claim.method,
+			message: "unknown method"
+		});
+		return;
+	}
+	onEvent?.(await runHandler(ref, claim, handler));
+};
+var startHostRunner = (firestore, channel, handlers, options = {}) => {
+	const presence = hostDoc(firestore, channel);
+	const announce = () => {
+		setDoc(presence, {
+			online: true,
+			updatedAt: serverTimestamp()
+		}).catch(noop$1);
+	};
+	announce();
+	const beat = setInterval(announce, options.heartbeatMs ?? DEFAULT_HEARTBEAT_MS);
+	const unsubscribe = onSnapshot(query(commandsCollection(firestore, channel), where("status", "==", "queued")), (snapshot) => {
+		snapshot.docChanges().forEach((change) => {
+			if (change.type === "added") processCommand(firestore, change.doc.ref, handlers, options.onEvent).catch(noop$1);
+		});
+	}, (error) => {
+		options.onEvent?.({
+			phase: "error",
+			method: "listen",
+			message: error.message
+		});
+		clearInterval(beat);
+		setDoc(presence, {
+			online: false,
+			updatedAt: serverTimestamp()
+		}).catch(noop$1);
+		options.onClosed?.();
+	});
+	return () => {
+		clearInterval(beat);
+		setDoc(presence, {
+			online: false,
+			updatedAt: serverTimestamp()
+		}).catch(noop$1);
+		unsubscribe();
+	};
+};
+//#endregion
+//#region src/remote-host/server/lifecycle.ts
+var noop = () => void 0;
+var silentLogger = {
+	info: noop,
+	warn: noop,
+	debug: noop
+};
+var createRemoteHost = (deps) => {
+	const log = deps.log ?? silentLogger;
+	let stopRunner = null;
+	let transition = Promise.resolve();
+	const serialize = (operation) => {
+		const next = transition.then(operation, operation);
+		transition = next.then(noop, noop);
+		return next;
+	};
+	const stopIfRunning = () => {
+		if (stopRunner) {
+			stopRunner();
+			stopRunner = null;
+		}
+	};
+	const status = () => ({
+		connected: stopRunner !== null,
+		uid: deps.currentUid()
+	});
+	const startRunner = (uid) => {
+		const runner = deps.startRunner({
+			uid,
+			hostId: deps.hostId
+		}, deps.handlers, {
+			onEvent: (event) => log.debug(`host event: ${event.phase} ${event.method}`),
+			onClosed: () => {
+				if (stopRunner === runner) {
+					stopRunner = null;
+					log.warn("host runner listener died; marked disconnected");
+				}
+			}
+		});
+		return runner;
+	};
+	const connect = (idToken) => serialize(async () => {
+		const uid = await deps.signIn(idToken);
+		stopIfRunning();
+		stopRunner = startRunner(uid);
+		log.info(`connected as ${uid}, host runner started (hostId=${deps.hostId})`);
+		return status();
+	});
+	const disconnect = () => serialize(async () => {
+		stopIfRunning();
+		await deps.signOut();
+		log.info("disconnected, host runner stopped");
+		return status();
+	});
+	return {
+		connect,
+		disconnect,
+		status
+	};
+};
+//#endregion
+//#region src/remote-host/server/auth.ts
+var createRemoteHostAuth = (auth) => ({
+	signInHost: async (idToken) => {
+		return (await signInWithCredential(auth, GoogleAuthProvider.credential(idToken))).user.uid;
+	},
+	signOutHost: () => signOut(auth),
+	currentUid: () => auth.currentUser?.uid ?? null
+});
+//#endregion
+//#region src/remote-host/server/firebase.ts
+var createRemoteHostFirebase = (config) => {
+	const app = initializeApp(config);
+	return {
+		app,
+		auth: getAuth(app),
+		firestore: getFirestore(app),
+		storage: getStorage(app)
+	};
+};
+//#endregion
+export { createRemoteHost, createRemoteHostAuth, createRemoteHostFirebase, startHostRunner };
+
+//# sourceMappingURL=index.js.map

package/dist/remote-host/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/remote-host/server/hostRunner.ts","../../../src/remote-host/server/lifecycle.ts","../../../src/remote-host/server/auth.ts","../../../src/remote-host/server/firebase.ts"],"sourcesContent":["// Host side of the command channel: claim queued commands, run handlers, write\n// results back, and announce presence via heartbeat.\n//\n// Extracted into core from MulmoClaude's server/remoteHost/hostRunner.ts (itself\n// ported from ../mulmoserver). The only signature change vs. that copy: the\n// `firestore` instance is a parameter (each host supplies its own Firebase init),\n// and the heartbeat interval is an option (defaults to one minute).\nimport { DocumentReference, Firestore, onSnapshot, query, runTransaction, serverTimestamp, setDoc, updateDoc, where } from \"firebase/firestore\";\n\nimport { errorMessage } from \"../../collection/core/errorMessage.js\";\nimport { Channel, Command, CommandHandler, CommandHandlers, JsonObject, commandsCollection, hostDoc } from \"../index.js\";\n\nconst DEFAULT_HEARTBEAT_MS = 60_000;\n\nexport interface HostEvent {\n  phase: \"received\" | \"done\" | \"error\";\n  method: string;\n  message?: string;\n}\n\nexport interface HostRunnerOptions {\n  onEvent?: (event: HostEvent) => void;\n  // Called once when the listener dies fatally (after presence has been set\n  // offline), so the lifecycle owner can reconcile its own state — e.g. clear\n  // the runner handle so status() no longer reports connected. NOT called on a\n  // normal stop().\n  onClosed?: () => void;\n  // Presence heartbeat interval; defaults to one minute.\n  heartbeatMs?: number;\n}\n\ninterface Claim {\n  method: string;\n  params: JsonObject;\n}\n\nconst noop = () => undefined;\n\n// The remote may have deleted the doc on timeout, so ignore write-after-delete.\nconst writeError = (ref: DocumentReference, code: string, message: string) =>\n  updateDoc(ref, { status: \"error\", error: { code, message }, updatedAt: serverTimestamp() }).catch(noop);\n\n// Atomically move a command queued -> processing so it is handled exactly once.\n// Returns the method/params to run, or null if another handler already took it.\nconst claimCommand = (firestore: Firestore, ref: DocumentReference): Promise<Claim | null> =>\n  runTransaction(firestore, async (txn) => {\n    const data = (await txn.get(ref)).data() as Command | undefined;\n    if (!data || data.status !== \"queued\") {\n      return null;\n    }\n    txn.update(ref, { status: \"processing\", updatedAt: serverTimestamp() });\n    return { method: data.method, params: data.params ?? {} };\n  });\n\nconst runHandler = async (ref: DocumentReference, claim: Claim, handler: CommandHandler): Promise<HostEvent> => {\n  try {\n    const result = await handler(claim.params);\n    await updateDoc(ref, { status: \"done\", result: result ?? null, updatedAt: serverTimestamp() });\n    return { phase: \"done\", method: claim.method };\n  } catch (error) {\n    const message = errorMessage(error);\n    await writeError(ref, \"handler_error\", message);\n    return { phase: \"error\", method: claim.method, message };\n  }\n};\n\nconst processCommand = async (firestore: Firestore, ref: DocumentReference, handlers: CommandHandlers, onEvent?: HostRunnerOptions[\"onEvent\"]) => {\n  const claim = await claimCommand(firestore, ref);\n  if (!claim) {\n    return;\n  }\n  onEvent?.({ phase: \"received\", method: claim.method });\n  const handler: CommandHandler | undefined = handlers[claim.method];\n  if (!handler) {\n    await writeError(ref, \"unknown_method\", `No handler for method: ${claim.method}`);\n    onEvent?.({ phase: \"error\", method: claim.method, message: \"unknown method\" });\n    return;\n  }\n  onEvent?.(await runHandler(ref, claim, handler));\n};\n\n// startHostRunner subscribes to queued commands for the given channel and runs\n// each one through the supplied handler table. It also announces presence (a\n// heartbeat on users/{uid}/hosts/{hostId}) so the remote can tell it is online.\n// Returns a stop function that goes offline and detaches the listener.\nexport const startHostRunner = (firestore: Firestore, channel: Channel, handlers: CommandHandlers, options: HostRunnerOptions = {}): (() => void) => {\n  const presence = hostDoc(firestore, channel);\n  const announce = () => {\n    setDoc(presence, { online: true, updatedAt: serverTimestamp() }).catch(noop);\n  };\n  announce();\n  const beat = setInterval(announce, options.heartbeatMs ?? DEFAULT_HEARTBEAT_MS);\n\n  const queuedCommands = query(commandsCollection(firestore, channel), where(\"status\", \"==\", \"queued\"));\n  const unsubscribe = onSnapshot(\n    queuedCommands,\n    (snapshot) => {\n      snapshot.docChanges().forEach((change) => {\n        if (change.type === \"added\") {\n          processCommand(firestore, change.doc.ref, handlers, options.onEvent).catch(noop);\n        }\n      });\n    },\n    (error) => {\n      options.onEvent?.({ phase: \"error\", method: \"listen\", message: error.message });\n      // A Firestore onSnapshot error terminates the listener and it does not\n      // recover on its own. Stop advertising presence (clear the heartbeat +\n      // write online:false) so remotes see the host as offline instead of a\n      // live host that silently consumes no commands.\n      clearInterval(beat);\n      setDoc(presence, { online: false, updatedAt: serverTimestamp() }).catch(noop);\n      options.onClosed?.();\n    },\n  );\n\n  return () => {\n    clearInterval(beat);\n    setDoc(presence, { online: false, updatedAt: serverTimestamp() }).catch(noop);\n    unsubscribe();\n  };\n};\n","// Remote-host lifecycle: wire a Firebase session to the Firestore host runner so\n// connecting starts the command loop + presence heartbeat, and disconnecting\n// stops both.\n//\n// Extracted into core from MulmoClaude's server/remoteHost/index.ts. The factory\n// takes injected collaborators — real hosts bind them to Firebase; tests pass\n// fakes to exercise the invariants (non-destructive connect, serialized\n// transitions, status/liveness reconciliation on fatal listener death) without a\n// network. `hostId` and the logger are injected too, so this file imports no\n// Firebase and no host logger and stays trivially unit-testable.\n//\n// Single-account, single-host per instance, in-memory session: a host restart\n// drops the session and needs a re-connect.\nimport type { Channel, CommandHandlers } from \"../index.js\";\nimport type { HostRunnerOptions } from \"./hostRunner.js\";\n\nexport interface RemoteHostStatus {\n  connected: boolean;\n  uid: string | null;\n}\n\n// Minimal logger the factory calls; each host adapts its own logger to this\n// shape (or omits it to run silently, as the tests do).\nexport interface RemoteHostLogger {\n  info: (msg: string) => void;\n  warn: (msg: string) => void;\n  debug: (msg: string) => void;\n}\n\n// Injectable collaborators — a real host binds these to Firebase + its own\n// hostId; tests pass fakes to exercise the lifecycle without a network.\n// `startRunner` is the host's `startHostRunner` pre-bound with its Firestore\n// instance, so this module needs no Firebase of its own.\nexport interface RemoteHostDeps {\n  hostId: string;\n  signIn: (idToken: string) => Promise<string>;\n  signOut: () => Promise<void>;\n  currentUid: () => string | null;\n  startRunner: (channel: Channel, handlers: CommandHandlers, options: HostRunnerOptions) => () => void;\n  handlers: CommandHandlers;\n  log?: RemoteHostLogger;\n}\n\nexport interface RemoteHostLifecycle {\n  connect: (idToken: string) => Promise<RemoteHostStatus>;\n  disconnect: () => Promise<RemoteHostStatus>;\n  status: () => RemoteHostStatus;\n}\n\nconst noop = () => undefined;\nconst silentLogger: RemoteHostLogger = { info: noop, warn: noop, debug: noop };\n\nexport const createRemoteHost = (deps: RemoteHostDeps): RemoteHostLifecycle => {\n  const log = deps.log ?? silentLogger;\n\n  // The running host runner's stop() handle, or null when disconnected. Keeps\n  // the single-host invariant — one runner at a time.\n  let stopRunner: (() => void) | null = null;\n\n  // Serialize connect/disconnect so overlapping requests can't both mutate\n  // stopRunner (which would leak a second runner) or race auth against teardown.\n  // Each transition runs only after the previous one settles; a failed\n  // transition does not block the next (both handlers run the next op).\n  let transition: Promise<unknown> = Promise.resolve();\n\n  const serialize = <T>(operation: () => Promise<T>): Promise<T> => {\n    const next = transition.then(operation, operation);\n    transition = next.then(noop, noop);\n    return next;\n  };\n\n  const stopIfRunning = () => {\n    if (stopRunner) {\n      stopRunner();\n      stopRunner = null;\n    }\n  };\n\n  const status = (): RemoteHostStatus => ({ connected: stopRunner !== null, uid: deps.currentUid() });\n\n  const startRunner = (uid: string) => {\n    const runner = deps.startRunner({ uid, hostId: deps.hostId }, deps.handlers, {\n      onEvent: (event) => log.debug(`host event: ${event.phase} ${event.method}`),\n      // The listener died fatally (heartbeat already stopped + offline written);\n      // clear the handle so status() stops reporting connected — but only if it\n      // still points at THIS runner (a later reconnect may have replaced it).\n      onClosed: () => {\n        if (stopRunner === runner) {\n          stopRunner = null;\n          log.warn(\"host runner listener died; marked disconnected\");\n        }\n      },\n    });\n    return runner;\n  };\n\n  const connect = (idToken: string): Promise<RemoteHostStatus> =>\n    serialize(async () => {\n      // Authenticate BEFORE any teardown, so a failed connect (expired/rejected\n      // token) leaves an existing healthy session untouched instead of dropping it.\n      const uid = await deps.signIn(idToken);\n      stopIfRunning();\n      stopRunner = startRunner(uid);\n      log.info(`connected as ${uid}, host runner started (hostId=${deps.hostId})`);\n      return status();\n    });\n\n  const disconnect = (): Promise<RemoteHostStatus> =>\n    serialize(async () => {\n      stopIfRunning();\n      await deps.signOut();\n      log.info(\"disconnected, host runner stopped\");\n      return status();\n    });\n\n  return { connect, disconnect, status };\n};\n","// Firebase credential exchange for the remote-host runner.\n//\n// The host authenticates to Firestore *as the user* (Option B) using the\n// Firebase JS SDK's signInWithCredential with a browser-minted Google OAuth ID\n// token — no Admin SDK, no project service account. Security rules keep the host\n// scoped to that user's own users/{uid}/… subtree.\n//\n// Extracted into core from MulmoClaude's server/remoteHost/auth.ts. The `auth`\n// instance is a parameter so each host binds its own Firebase init; the factory\n// returns the low-level credential primitives (the connect/disconnect lifecycle\n// that starts/stops the host runner lives in createRemoteHost).\nimport { Auth, GoogleAuthProvider, signInWithCredential, signOut } from \"firebase/auth\";\n\nexport interface RemoteHostAuth {\n  // Establish the Firebase session from a browser-minted Google OAuth ID token.\n  // The token is used once here; the JS SDK then holds its own refresh token for\n  // the process lifetime. Resolves to the authenticated uid.\n  signInHost: (idToken: string) => Promise<string>;\n  // Tear down the Firebase session (in-memory persistence → re-login on restart).\n  signOutHost: () => Promise<void>;\n  // The currently signed-in uid, or null when disconnected.\n  currentUid: () => string | null;\n}\n\nexport const createRemoteHostAuth = (auth: Auth): RemoteHostAuth => ({\n  signInHost: async (idToken: string): Promise<string> => {\n    const credential = GoogleAuthProvider.credential(idToken);\n    const userCredential = await signInWithCredential(auth, credential);\n    return userCredential.user.uid;\n  },\n  signOutHost: (): Promise<void> => signOut(auth),\n  currentUid: (): string | null => auth.currentUser?.uid ?? null,\n});\n","// Firebase init for a remote-host runner.\n//\n// A host acts as a *host*: it signs in to Firebase as the user (via\n// signInWithCredential, see auth.ts) and listens to that user's command queue in\n// Firestore. The modular firebase/firestore + firebase/auth SDKs run in Node, so\n// this mirrors a browser init but also exposes Firestore (default database,\n// which must be in Native mode) and Storage.\n//\n// Extracted into core from MulmoClaude's server/remoteHost/firebase.ts. The\n// public web config is a parameter so each host supplies its own (both hosts\n// reuse the shared mulmoserver project).\nimport { FirebaseApp, FirebaseOptions, initializeApp } from \"firebase/app\";\nimport { Auth, getAuth } from \"firebase/auth\";\nimport { Firestore, getFirestore } from \"firebase/firestore\";\nimport { FirebaseStorage, getStorage } from \"firebase/storage\";\n\nexport interface RemoteHostFirebase {\n  app: FirebaseApp;\n  auth: Auth;\n  firestore: Firestore;\n  // Storage carries the full-res attachment bytes the command channel can't (a\n  // Firestore command doc caps at ~1 MiB). The host, signed in as the user,\n  // pulls each staged upload from `users/{uid}/uploads/{id}` and deletes it\n  // after ingest.\n  storage: FirebaseStorage;\n}\n\nexport const createRemoteHostFirebase = (config: FirebaseOptions): RemoteHostFirebase => {\n  const app = initializeApp(config);\n  return { app, auth: getAuth(app), firestore: getFirestore(app), storage: getStorage(app) };\n};\n"],"mappings":";;;;;;;AAYA,IAAM,uBAAuB;AAwB7B,IAAM,eAAa,KAAA;AAGnB,IAAM,cAAc,KAAwB,MAAc,YACxD,UAAU,KAAK;CAAE,QAAQ;CAAS,OAAO;EAAE;EAAM;CAAQ;CAAG,WAAW,gBAAgB;AAAE,CAAC,CAAC,CAAC,MAAM,MAAI;AAIxG,IAAM,gBAAgB,WAAsB,QAC1C,eAAe,WAAW,OAAO,QAAQ;CACvC,MAAM,QAAQ,MAAM,IAAI,IAAI,GAAG,EAAA,CAAG,KAAK;CACvC,IAAI,CAAC,QAAQ,KAAK,WAAW,UAC3B,OAAO;CAET,IAAI,OAAO,KAAK;EAAE,QAAQ;EAAc,WAAW,gBAAgB;CAAE,CAAC;CACtE,OAAO;EAAE,QAAQ,KAAK;EAAQ,QAAQ,KAAK,UAAU,CAAC;CAAE;AAC1D,CAAC;AAEH,IAAM,aAAa,OAAO,KAAwB,OAAc,YAAgD;CAC9G,IAAI;EAEF,MAAM,UAAU,KAAK;GAAE,QAAQ;GAAQ,QAAQ,MAD1B,QAAQ,MAAM,MAAM,KACgB;GAAM,WAAW,gBAAgB;EAAE,CAAC;EAC7F,OAAO;GAAE,OAAO;GAAQ,QAAQ,MAAM;EAAO;CAC/C,SAAS,OAAO;EACd,MAAM,UAAU,aAAa,KAAK;EAClC,MAAM,WAAW,KAAK,iBAAiB,OAAO;EAC9C,OAAO;GAAE,OAAO;GAAS,QAAQ,MAAM;GAAQ;EAAQ;CACzD;AACF;AAEA,IAAM,iBAAiB,OAAO,WAAsB,KAAwB,UAA2B,YAA2C;CAChJ,MAAM,QAAQ,MAAM,aAAa,WAAW,GAAG;CAC/C,IAAI,CAAC,OACH;CAEF,UAAU;EAAE,OAAO;EAAY,QAAQ,MAAM;CAAO,CAAC;CACrD,MAAM,UAAsC,SAAS,MAAM;CAC3D,IAAI,CAAC,SAAS;EACZ,MAAM,WAAW,KAAK,kBAAkB,0BAA0B,MAAM,QAAQ;EAChF,UAAU;GAAE,OAAO;GAAS,QAAQ,MAAM;GAAQ,SAAS;EAAiB,CAAC;EAC7E;CACF;CACA,UAAU,MAAM,WAAW,KAAK,OAAO,OAAO,CAAC;AACjD;AAMA,IAAa,mBAAmB,WAAsB,SAAkB,UAA2B,UAA6B,CAAC,MAAoB;CACnJ,MAAM,WAAW,QAAQ,WAAW,OAAO;CAC3C,MAAM,iBAAiB;EACrB,OAAO,UAAU;GAAE,QAAQ;GAAM,WAAW,gBAAgB;EAAE,CAAC,CAAC,CAAC,MAAM,MAAI;CAC7E;CACA,SAAS;CACT,MAAM,OAAO,YAAY,UAAU,QAAQ,eAAe,oBAAoB;CAG9E,MAAM,cAAc,WADG,MAAM,mBAAmB,WAAW,OAAO,GAAG,MAAM,UAAU,MAAM,QAAQ,CAEjG,IACC,aAAa;EACZ,SAAS,WAAW,CAAC,CAAC,SAAS,WAAW;GACxC,IAAI,OAAO,SAAS,SAClB,eAAe,WAAW,OAAO,IAAI,KAAK,UAAU,QAAQ,OAAO,CAAC,CAAC,MAAM,MAAI;EAEnF,CAAC;CACH,IACC,UAAU;EACT,QAAQ,UAAU;GAAE,OAAO;GAAS,QAAQ;GAAU,SAAS,MAAM;EAAQ,CAAC;EAK9E,cAAc,IAAI;EAClB,OAAO,UAAU;GAAE,QAAQ;GAAO,WAAW,gBAAgB;EAAE,CAAC,CAAC,CAAC,MAAM,MAAI;EAC5E,QAAQ,WAAW;CACrB,CACF;CAEA,aAAa;EACX,cAAc,IAAI;EAClB,OAAO,UAAU;GAAE,QAAQ;GAAO,WAAW,gBAAgB;EAAE,CAAC,CAAC,CAAC,MAAM,MAAI;EAC5E,YAAY;CACd;AACF;;;ACvEA,IAAM,aAAa,KAAA;AACnB,IAAM,eAAiC;CAAE,MAAM;CAAM,MAAM;CAAM,OAAO;AAAK;AAE7E,IAAa,oBAAoB,SAA8C;CAC7E,MAAM,MAAM,KAAK,OAAO;CAIxB,IAAI,aAAkC;CAMtC,IAAI,aAA+B,QAAQ,QAAQ;CAEnD,MAAM,aAAgB,cAA4C;EAChE,MAAM,OAAO,WAAW,KAAK,WAAW,SAAS;EACjD,aAAa,KAAK,KAAK,MAAM,IAAI;EACjC,OAAO;CACT;CAEA,MAAM,sBAAsB;EAC1B,IAAI,YAAY;GACd,WAAW;GACX,aAAa;EACf;CACF;CAEA,MAAM,gBAAkC;EAAE,WAAW,eAAe;EAAM,KAAK,KAAK,WAAW;CAAE;CAEjG,MAAM,eAAe,QAAgB;EACnC,MAAM,SAAS,KAAK,YAAY;GAAE;GAAK,QAAQ,KAAK;EAAO,GAAG,KAAK,UAAU;GAC3E,UAAU,UAAU,IAAI,MAAM,eAAe,MAAM,MAAM,GAAG,MAAM,QAAQ;GAI1E,gBAAgB;IACd,IAAI,eAAe,QAAQ;KACzB,aAAa;KACb,IAAI,KAAK,gDAAgD;IAC3D;GACF;EACF,CAAC;EACD,OAAO;CACT;CAEA,MAAM,WAAW,YACf,UAAU,YAAY;EAGpB,MAAM,MAAM,MAAM,KAAK,OAAO,OAAO;EACrC,cAAc;EACd,aAAa,YAAY,GAAG;EAC5B,IAAI,KAAK,gBAAgB,IAAI,gCAAgC,KAAK,OAAO,EAAE;EAC3E,OAAO,OAAO;CAChB,CAAC;CAEH,MAAM,mBACJ,UAAU,YAAY;EACpB,cAAc;EACd,MAAM,KAAK,QAAQ;EACnB,IAAI,KAAK,mCAAmC;EAC5C,OAAO,OAAO;CAChB,CAAC;CAEH,OAAO;EAAE;EAAS;EAAY;CAAO;AACvC;;;AC5FA,IAAa,wBAAwB,UAAgC;CACnE,YAAY,OAAO,YAAqC;EAGtD,QAAO,MADsB,qBAAqB,MAD/B,mBAAmB,WAAW,OACO,CAAU,EAAA,CAC5C,KAAK;CAC7B;CACA,mBAAkC,QAAQ,IAAI;CAC9C,kBAAiC,KAAK,aAAa,OAAO;AAC5D;;;ACLA,IAAa,4BAA4B,WAAgD;CACvF,MAAM,MAAM,cAAc,MAAM;CAChC,OAAO;EAAE;EAAK,MAAM,QAAQ,GAAG;EAAG,WAAW,aAAa,GAAG;EAAG,SAAS,WAAW,GAAG;CAAE;AAC3F"}

package/dist/remote-host/server/lifecycle.d.ts

@@ -0,0 +1,26 @@
+import { Channel, CommandHandlers } from '../index.js';
+import { HostRunnerOptions } from './hostRunner.js';
+export interface RemoteHostStatus {
+    connected: boolean;
+    uid: string | null;
+}
+export interface RemoteHostLogger {
+    info: (msg: string) => void;
+    warn: (msg: string) => void;
+    debug: (msg: string) => void;
+}
+export interface RemoteHostDeps {
+    hostId: string;
+    signIn: (idToken: string) => Promise<string>;
+    signOut: () => Promise<void>;
+    currentUid: () => string | null;
+    startRunner: (channel: Channel, handlers: CommandHandlers, options: HostRunnerOptions) => () => void;
+    handlers: CommandHandlers;
+    log?: RemoteHostLogger;
+}
+export interface RemoteHostLifecycle {
+    connect: (idToken: string) => Promise<RemoteHostStatus>;
+    disconnect: () => Promise<RemoteHostStatus>;
+    status: () => RemoteHostStatus;
+}
+export declare const createRemoteHost: (deps: RemoteHostDeps) => RemoteHostLifecycle;

package/dist/{server-BDxrLT41.js → server-DKXXFTbw.js}

@@ -1,4 +1,4 @@
-import { a as FEED_SCHEDULES, c as isFieldDrivenEvery, i as AGENT_INGEST_KIND, o as INGEST_KINDS, s as embedTargetId, t as deriveAll } from "./deriveAll-D3wFH4Tw.js";
+import { a as resolveIcon, c as AGENT_INGEST_KIND, d as embedTargetId, f as isFieldDrivenEvery, i as firstDateField, l as FEED_SCHEDULES, o as selectDynamicRecord, t as deriveAll, u as INGEST_KINDS } from "./deriveAll-CMFXDQ_G.js";
 import { isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath } from "./collection/paths.js";
 import path from "node:path";
 import { promises, realpathSync } from "node:fs";
@@ -970,6 +970,51 @@ var AgentIngestZ = z.object({
 	template: z.string().trim().min(1).refine(isSafeActionTemplatePath, "must be a safe path under `templates/` (e.g. `templates/refresh.md`; no `..`, no leading `/`, no backslash)")
 });
 var IngestSchemaZ = z.discriminatedUnion("kind", [DeclarativeIngestZ, AgentIngestZ]);
+var ValueRefZ = z.object({
+	record: z.string().trim().min(1).optional(),
+	field: z.string().trim().min(1)
+});
+var WhereCondZ = z.object({
+	field: z.string().trim().min(1),
+	op: z.enum([
+		"eq",
+		"ne",
+		"in",
+		"gt",
+		"gte",
+		"lt",
+		"lte",
+		"contains"
+	]),
+	value: z.union([z.string(), z.array(z.string())]).optional(),
+	valueFrom: ValueRefZ.optional()
+}).refine((cond) => cond.value !== void 0 !== (cond.valueFrom !== void 0), {
+	message: "a where condition must declare exactly one of `value` (a literal) or `valueFrom` (a reference to another record's field), never both or neither",
+	path: ["value"]
+}).refine((cond) => cond.value === void 0 || cond.op === "in" === Array.isArray(cond.value), {
+	message: "`in` requires an array `value` (the allowed set); every other op requires a single string `value`",
+	path: ["value"]
+});
+var WhereZ = z.array(WhereCondZ);
+var DynamicIconSourceZ = z.object({
+	collection: z.string().trim().min(1),
+	from: z.enum([
+		"latest",
+		"first",
+		"when"
+	]).optional(),
+	orderBy: z.string().trim().min(1).optional(),
+	where: WhereZ.optional()
+});
+var DynamicIconRuleZ = z.object({
+	where: WhereZ,
+	icon: z.string().trim().min(1)
+});
+var DynamicIconSpecZ = z.object({
+	source: DynamicIconSourceZ,
+	rules: z.array(DynamicIconRuleZ),
+	fallback: z.string().trim().min(1).optional()
+});
 var CollectionSchemaZ = z.object({
 	title: z.string().min(1),
 	icon: z.string().min(1),
@@ -991,7 +1036,8 @@ var CollectionSchemaZ = z.object({
 	kanbanField: z.string().trim().min(1).optional(),
 	views: z.array(CustomViewSchema).optional(),
 	notifyWhen: WhenSchema.optional(),
-	ingest: IngestSchemaZ.optional()
+	ingest: IngestSchemaZ.optional(),
+	dynamicIcon: DynamicIconSpecZ.optional()
 }).refine((schema) => schema.singleton === void 0 || safeRecordId(schema.singleton) !== null, {
 	message: "schema `singleton` must be a valid item id (alphanumeric / hyphen / underscore / interior dot, no `..` or path separators)",
 	path: ["singleton"]
@@ -1347,6 +1393,52 @@ async function enrichItems(collection, items, opts = {}) {
 	return items.map((item) => projectComputed(schema, deriveAll(schema, item, refRecords), linked));
 }
 //#endregion
+//#region src/collection/server/dynamicIcon.ts
+/** Index `items` by their `primaryKey` value — the `recordsById` map a
+*  `valueFrom` reference (e.g. `_config.defaultCity`) resolves against.
+*  Items whose primary key isn't a string (shouldn't happen for a valid
+*  schema, but records are untyped storage) are skipped rather than
+*  coerced, so a broken key never silently shadows a real one. */
+function buildRecordsById(items, primaryKey) {
+	const entries = items.filter((item) => typeof item[primaryKey] === "string").map((item) => [String(item[primaryKey]), item]);
+	return Object.fromEntries(entries);
+}
+/** Order records by their `primaryKey` so record selection is deterministic:
+*  `listItems` returns filesystem `readdir` order (arbitrary across machines),
+*  which would let `from: "first"`, the no-`orderBy` `latest`, and `orderBy`
+*  ties pick a different record — and thus a different icon — between
+*  reconciles. A stable id sort pins one answer. */
+function sortByPrimaryKey(items, primaryKey) {
+	return [...items].sort((left, right) => String(left[primaryKey] ?? "").localeCompare(String(right[primaryKey] ?? "")));
+}
+/** Compute the effective launcher icon for `collection`: its static
+*  `schema.icon` when it declares no `dynamicIcon`, else the icon
+*  resolved from `dynamicIcon.source`'s RAW stored records (no
+*  derive/enrich — the icon rules match against stored values) via the
+*  pure resolver. Fails soft on any read/discovery error (missing source
+*  collection, filesystem error): falls back to `dynamicIcon.fallback ??
+*  schema.icon` rather than surfacing to the collections list. */
+async function computeCollectionIcon(collection, opts = {}) {
+	const { schema } = collection;
+	const spec = schema.dynamicIcon;
+	if (!spec) return schema.icon;
+	try {
+		const source = await loadCollection(spec.source.collection, opts);
+		if (!source) return spec.fallback ?? schema.icon;
+		const ordered = sortByPrimaryKey(await listItems(source.dataDir, { workspaceRoot: opts.workspaceRoot }), source.schema.primaryKey);
+		const orderBy = spec.source.orderBy ?? firstDateField(source.schema);
+		const recordsById = buildRecordsById(ordered, source.schema.primaryKey);
+		return resolveIcon(selectDynamicRecord(ordered, spec.source, orderBy, recordsById), spec, schema.icon, recordsById);
+	} catch (err) {
+		log.warn("collections", "dynamic icon compute failed, falling back", {
+			slug: collection.slug,
+			source: spec.source.collection,
+			error: String(err)
+		});
+		return spec.fallback ?? schema.icon;
+	}
+}
+//#endregion
 //#region src/collection/server/util.ts
 /** Human-readable message from an unknown thrown value. */
 function errorMessage(err) {
@@ -1823,6 +1915,6 @@ async function deleteCustomView(collection, viewId, opts = {}) {
 	};
 }
 //#endregion
-export { promptPathsFor as A, isContainedInWorkspace as B, validateCollectionRecords as C, deleteItem as D, buildCollectionActionSeedPrompt as E, resolveCreateItemId as F, safeSlugName as G, resolveDataDir as H, writeItem as I, getWorkspaceRoot as J, collectionsRegistriesConfigPath as K, writeFileAtomic as L, readCustomViewI18n as M, readItem as N, generateItemId as O, readSkillTemplate as P, SCHEMA_FILE as R, COMPUTED_TYPES as S, buildActionSeedPrompt as T, resolveTemplatePath as U, itemFilePath as V, safeRecordId as W, publishCollectionChange as X, log as Y, setCollectionChangePublisher as Z, acceptParsedSchema as _, computeSuccessor as a, toDetail as b, isTriggerDue as c, resolveEvery as d, successorId as f, CollectionSchemaZ as g, enrichItems as h, advanceTriggerDate as i, readCustomViewHtml as j, listItems as k, maybeSpawnSuccessor as l, errorMessage as m, deleteCollection as n, daysInMonth as o, ONE_SECOND_MS as p, configureCollectionHost as q, deleteCollectionRefusalMessage as r, formatCivil as s, deleteCustomView as t, parseCivil as u, discoverCollections as v, validateRecordObject as w, toSummary as x, loadCollection as y, isContainedInRoot as z };
+export { listItems as A, isContainedInRoot as B, COMPUTED_TYPES as C, buildCollectionActionSeedPrompt as D, buildActionSeedPrompt as E, readSkillTemplate as F, safeRecordId as G, itemFilePath as H, resolveCreateItemId as I, configureCollectionHost as J, safeSlugName as K, writeItem as L, readCustomViewHtml as M, readCustomViewI18n as N, deleteItem as O, readItem as P, setCollectionChangePublisher as Q, writeFileAtomic as R, toSummary as S, validateRecordObject as T, resolveDataDir as U, isContainedInWorkspace as V, resolveTemplatePath as W, log as X, getWorkspaceRoot as Y, publishCollectionChange as Z, CollectionSchemaZ as _, computeSuccessor as a, loadCollection as b, isTriggerDue as c, resolveEvery as d, successorId as f, enrichItems as g, computeCollectionIcon as h, advanceTriggerDate as i, promptPathsFor as j, generateItemId as k, maybeSpawnSuccessor as l, errorMessage as m, deleteCollection as n, daysInMonth as o, ONE_SECOND_MS as p, collectionsRegistriesConfigPath as q, deleteCollectionRefusalMessage as r, formatCivil as s, deleteCustomView as t, parseCivil as u, acceptParsedSchema as v, validateCollectionRecords as w, toDetail as x, discoverCollections as y, SCHEMA_FILE as z };
 
-//# sourceMappingURL=server-BDxrLT41.js.map
+//# sourceMappingURL=server-DKXXFTbw.js.map