@nordbyte/nordrelay 0.8.0 → 0.8.2

package/dist/{telegram-access-commands.js → channels/telegram/telegram-access-commands.js}

@@ -1,6 +1,6 @@
-import { consumeRateLimit, resetRateLimit } from "./bot-rendering.js";
-import { friendlyErrorText } from "./error-messages.js";
-import { escapeHTML } from "./format.js";
+import { consumeRateLimit, resetRateLimit } from "../shared/bot-rendering.js";
+import { friendlyErrorText } from "../../core/error-messages.js";
+import { escapeHTML } from "../../core/format.js";
 import { safeReply } from "./telegram-output.js";
 export function registerTelegramAccessCommands(deps) {
     const { bot, userStore, contextUsers, linkAttempts, audit, getUserRole } = deps;

package/dist/{telegram-access-middleware.js → channels/telegram/telegram-access-middleware.js}

@@ -1,8 +1,8 @@
-import { permissionForCallbackData, permissionForCommand } from "./access-control.js";
-import { extractCommandName } from "./bot-rendering.js";
-import { escapeHTML } from "./format.js";
+import { permissionForCallbackData, permissionForCommand } from "../../access/access-control.js";
+import { extractCommandName } from "../shared/bot-rendering.js";
+import { escapeHTML } from "../../core/format.js";
 import { safeReply } from "./telegram-output.js";
-import { UserStore } from "./user-management.js";
+import { UserStore } from "../../access/user-management.js";
 export function createTelegramAccessMiddleware(options) {
     const { userStore, contextUsers, audit } = options;
     return async (ctx, next) => {

package/dist/{telegram-agent-commands.js → channels/telegram/telegram-agent-commands.js}

@@ -1,13 +1,13 @@
 import { InlineKeyboard } from "grammy";
-import { agentLabel, } from "./agent.js";
-import { enabledAgents } from "./agent-factory.js";
-import { capabilitiesOf, idOf, labelOf, } from "./bot-rendering.js";
-import { checkAuthStatus } from "./codex-auth.js";
-import { contextKeyFromCtx } from "./context-key.js";
-import { friendlyErrorText } from "./error-messages.js";
-import { escapeHTML } from "./format.js";
-import { redactText } from "./redaction.js";
-import { renderSessionInfoHTML, renderSessionInfoPlain, } from "./session-format.js";
+import { agentLabel, } from "../../agents/shared/agent.js";
+import { enabledAgents } from "../../agents/shared/agent-factory.js";
+import { capabilitiesOf, idOf, labelOf, } from "../shared/bot-rendering.js";
+import { checkAuthStatus } from "../../agents/codex/codex-auth.js";
+import { contextKeyFromCtx } from "../shared/context-key.js";
+import { friendlyErrorText } from "../../core/error-messages.js";
+import { escapeHTML } from "../../core/format.js";
+import { redactText } from "../../core/redaction.js";
+import { renderSessionInfoHTML, renderSessionInfoPlain, } from "../shared/session-format.js";
 import { safeEditMessage, safeReply, } from "./telegram-output.js";
 export function registerTelegramAgentCommands(options) {
     options.bot.command("agent", async (ctx) => {

package/dist/{telegram-artifact-commands.js → channels/telegram/telegram-artifact-commands.js}

@@ -1,8 +1,8 @@
 import { InlineKeyboard } from "grammy";
-import { getArtifactTurnReport, listRecentArtifactReports, removeArtifactTurn, } from "./artifacts.js";
-import { buildArtifactActionsKeyboard, filterArtifactReports, } from "./bot-rendering.js";
-import { renderArtifactReportsAction } from "./channel-actions.js";
-import { escapeHTML } from "./format.js";
+import { getArtifactTurnReport, listRecentArtifactReports, removeArtifactTurn, } from "../../artifacts/artifacts.js";
+import { buildArtifactActionsKeyboard, filterArtifactReports, } from "../shared/bot-rendering.js";
+import { renderArtifactReportsAction } from "../shared/channel-actions.js";
+import { escapeHTML } from "../../core/format.js";
 import { NOOP_PAGE_CALLBACK_DATA } from "./telegram-channel-runtime.js";
 import { safeEditMessage, safeReply, } from "./telegram-output.js";
 export function registerTelegramArtifactCommands(options) {

package/dist/{telegram-channel-runtime.js → channels/telegram/telegram-channel-runtime.js}

@@ -1,6 +1,6 @@
 import { Bot, InlineKeyboard, InputFile } from "grammy";
-import { TelegramChannelAdapter, } from "./channel-adapter.js";
-import { redactText } from "./redaction.js";
+import { TelegramChannelAdapter, } from "../shared/channel-adapter.js";
+import { redactText } from "../../core/redaction.js";
 import { telegramRateLimiter } from "./telegram-rate-limit.js";
 import { chatBucket, safeEditMessage, sendChatActionSafe, sendTextMessage, } from "./telegram-output.js";
 const KEYBOARD_PAGE_SIZE = 6;

package/dist/{telegram-command-menu.js → channels/telegram/telegram-command-menu.js}

@@ -1,4 +1,4 @@
-import { telegramCommandCatalog } from "./channel-command-catalog.js";
+import { telegramCommandCatalog } from "../shared/channel-command-catalog.js";
 export const TELEGRAM_COMMANDS = telegramCommandCatalog();
 export async function registerCommands(bot) {
     await bot.api.setMyCommands([...TELEGRAM_COMMANDS]);

package/dist/{telegram-diagnostics-command.js → channels/telegram/telegram-diagnostics-command.js}

@@ -1,10 +1,10 @@
-import { getAgentDiagnostics } from "./agent-activity.js";
-import { formatQuietHours } from "./bot-preferences.js";
-import { cliPathOptions } from "./channel-command-service.js";
-import { checkAuthStatus } from "./codex-auth.js";
-import { contextKeyFromCtx } from "./context-key.js";
-import { getConnectorHealth, } from "./operations.js";
-import { renderAgentDiagnostics, renderDiagnosticsHTML, renderDiagnosticsPlain, renderHealthHTML, renderHealthPlain, } from "./bot-rendering.js";
+import { getAgentDiagnostics } from "../../agents/shared/agent-activity.js";
+import { formatQuietHours } from "../../state/bot-preferences.js";
+import { cliPathOptions } from "../shared/channel-command-service.js";
+import { checkAuthStatus } from "../../agents/codex/codex-auth.js";
+import { contextKeyFromCtx } from "../shared/context-key.js";
+import { getConnectorHealth, } from "../../support/operations.js";
+import { renderAgentDiagnostics, renderDiagnosticsHTML, renderDiagnosticsPlain, renderHealthHTML, renderHealthPlain, } from "../shared/bot-rendering.js";
 import { getTelegramRateLimitMetrics } from "./telegram-rate-limit.js";
 import { safeReply } from "./telegram-output.js";
 export function registerTelegramDiagnosticsCommands(options) {

package/dist/{telegram-general-commands.js → channels/telegram/telegram-general-commands.js}

@@ -1,8 +1,8 @@
 import { renderWelcomeFirstTime, renderWelcomeReturning, renderHelpMessage, } from "./bot-ui.js";
-import { authHelpText, capabilitiesOf, labelOf, } from "./bot-rendering.js";
-import { escapeHTML } from "./format.js";
-import { spawnConnectorRestart } from "./operations.js";
-import { renderLaunchSummaryHTML, renderLaunchSummaryPlain, renderSessionInfoHTML, renderSessionInfoPlain, } from "./session-format.js";
+import { authHelpText, capabilitiesOf, labelOf, } from "../shared/bot-rendering.js";
+import { escapeHTML } from "../../core/format.js";
+import { spawnConnectorRestart } from "../../support/operations.js";
+import { renderLaunchSummaryHTML, renderLaunchSummaryPlain, renderSessionInfoHTML, renderSessionInfoPlain, } from "../shared/session-format.js";
 import { safeReply } from "./telegram-output.js";
 export function registerTelegramGeneralCommands(options) {
     options.bot.command("start", async (ctx) => {

package/dist/{telegram-operational-commands.js → channels/telegram/telegram-operational-commands.js}

@@ -3,11 +3,11 @@ import { unlink, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { InputFile } from "grammy";
-import { getAgentActivityLog } from "./agent-activity.js";
-import { capabilitiesOf, filterActivityEvents, formatLocalDateTime, formatLockOwner, labelOf, parseActivityOptions, renderActivityTimeline, renderAuditEvents, renderProgressHTML, renderProgressPlain, renderSessionLocks, } from "./bot-rendering.js";
-import { escapeHTML } from "./format.js";
-import { renderSessionInfoHTML, renderSessionInfoPlain } from "./session-format.js";
-import { canWriteWithLock } from "./session-locks.js";
+import { getAgentActivityLog } from "../../agents/shared/agent-activity.js";
+import { capabilitiesOf, filterActivityEvents, formatLocalDateTime, formatLockOwner, labelOf, parseActivityOptions, renderActivityTimeline, renderAuditEvents, renderProgressHTML, renderProgressPlain, renderSessionLocks, } from "../shared/bot-rendering.js";
+import { escapeHTML } from "../../core/format.js";
+import { renderSessionInfoHTML, renderSessionInfoPlain } from "../shared/session-format.js";
+import { canWriteWithLock } from "../../access/session-locks.js";
 import { chatBucket, safeReply } from "./telegram-output.js";
 import { telegramRateLimiter } from "./telegram-rate-limit.js";
 export function registerTelegramOperationalCommands(options) {

package/dist/{telegram-output.js → channels/telegram/telegram-output.js}

@@ -3,8 +3,8 @@ import { writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { Bot, InlineKeyboard } from "grammy";
-import { formatTelegramHTML } from "./format.js";
-import { redactText } from "./redaction.js";
+import { formatTelegramHTML } from "../../core/format.js";
+import { redactText } from "../../core/redaction.js";
 import { telegramRateLimiter } from "./telegram-rate-limit.js";
 const TELEGRAM_MESSAGE_LIMIT = 4000;
 const FORMATTED_CHUNK_TARGET = 3000;

package/dist/{telegram-preference-commands.js → channels/telegram/telegram-preference-commands.js}

@@ -1,6 +1,6 @@
-import { capabilitiesOf, labelOf, } from "./bot-rendering.js";
-import { escapeHTML } from "./format.js";
-import { evaluateWorkspacePolicy, filterAllowedWorkspaces, renderWorkspacePolicyLine, } from "./workspace-policy.js";
+import { capabilitiesOf, labelOf, } from "../shared/bot-rendering.js";
+import { escapeHTML } from "../../core/format.js";
+import { evaluateWorkspacePolicy, filterAllowedWorkspaces, renderWorkspacePolicyLine, } from "../../core/workspace-policy.js";
 import { safeReply } from "./telegram-output.js";
 export function registerTelegramPreferenceCommands(options) {
     options.bot.command("mirror", async (ctx) => {

package/dist/{telegram-queue-commands.js → channels/telegram/telegram-queue-commands.js}

@@ -1,10 +1,10 @@
 import { InlineKeyboard } from "grammy";
-import { renderQueueListAction, renderQueuedPromptDetailAction, } from "./channel-actions.js";
-import { contextKeyFromCtx } from "./context-key.js";
-import { friendlyErrorText } from "./error-messages.js";
-import { escapeHTML } from "./format.js";
-import { PromptStore, toPromptEnvelope } from "./prompt-store.js";
-import { formatLocalDateTime } from "./bot-rendering.js";
+import { renderQueueListAction, renderQueuedPromptDetailAction, } from "../shared/channel-actions.js";
+import { contextKeyFromCtx } from "../shared/context-key.js";
+import { friendlyErrorText } from "../../core/error-messages.js";
+import { escapeHTML } from "../../core/format.js";
+import { PromptStore, toPromptEnvelope } from "../../state/prompt-store.js";
+import { formatLocalDateTime } from "../shared/bot-rendering.js";
 import { safeEditMessage, safeReply, } from "./telegram-output.js";
 export function queueCancelCallbackData(action, contextKey, queueId) {
     return `queue_${action}:${contextKey}:${queueId}`;

package/dist/{telegram-support-command.js → channels/telegram/telegram-support-command.js}

@@ -1,8 +1,8 @@
 import { InputFile } from "grammy";
-import { contextKeyFromCtx } from "./context-key.js";
-import { getConnectorHealth, getVersionChecks } from "./operations.js";
-import { formatLocalDateTime } from "./bot-rendering.js";
-import { createSupportBundle } from "./support-bundle.js";
+import { contextKeyFromCtx } from "../shared/context-key.js";
+import { getConnectorHealth, getVersionChecks } from "../../support/operations.js";
+import { formatLocalDateTime } from "../shared/bot-rendering.js";
+import { createSupportBundle } from "../../support/support-bundle.js";
 import { chatBucket } from "./telegram-output.js";
 import { telegramRateLimiter } from "./telegram-rate-limit.js";
 export function registerTelegramSupportCommands(options) {

package/dist/{telegram-update-commands.js → channels/telegram/telegram-update-commands.js}

@@ -1,8 +1,8 @@
-import { listAgentAdapterDescriptors } from "./agent-adapter.js";
-import { agentLabel } from "./agent.js";
-import { parseAgentUpdateId, renderAgentUpdateJobAction, renderAgentUpdateJobsAction, renderAgentUpdateLogAction, renderAgentUpdatePickerAction, renderSelfUpdateStartedAction, } from "./channel-actions.js";
-import { escapeHTML } from "./format.js";
-import { spawnSelfUpdate } from "./operations.js";
+import { listAgentAdapterDescriptors } from "../../agents/shared/agent-adapter.js";
+import { agentLabel } from "../../agents/shared/agent.js";
+import { parseAgentUpdateId, renderAgentUpdateJobAction, renderAgentUpdateJobsAction, renderAgentUpdateLogAction, renderAgentUpdatePickerAction, renderSelfUpdateStartedAction, } from "../shared/channel-actions.js";
+import { escapeHTML } from "../../core/format.js";
+import { spawnSelfUpdate } from "../../support/operations.js";
 import { safeReply } from "./telegram-output.js";
 export function registerTelegramUpdateCommands(deps) {
     const { bot, agentUpdates, replyChannelAction, startTelegramAgentUpdate } = deps;

package/dist/{config-metadata.js → core/config-metadata.js}

@@ -140,6 +140,8 @@ export const SETTING_DEFINITIONS = [
     setting("TELEGRAM_EDIT_MIN_INTERVAL_MS", "Telegram edit interval", "Operations", "number", "Minimum edit interval.", true),
     setting("NORDRELAY_CLI_MIRROR_MODE", "Default CLI mirror mode", "Operations", "string", "Default mirror mode for chat adapters: off, status, final, or full.", false, ["off", "status", "final", "full"]),
     setting("NORDRELAY_CLI_MIRROR_MIN_UPDATE_MS", "Default mirror update interval", "Operations", "number", "Default minimum mirrored edit interval.", true),
+    setting("NORDRELAY_WEB_CLI_MIRROR_MODE", "WebUI mirror override", "Operations", "string", "Optional WebUI override for CLI mirror mode. Uses the NordRelay default when unset.", false, ["off", "status", "final", "full"]),
+    setting("NORDRELAY_WEB_CLI_MIRROR_MIN_UPDATE_MS", "WebUI mirror update override", "Operations", "number", "Optional WebUI override for mirrored status interval.", true),
     setting("NORDRELAY_NOTIFY_MODE", "Default notify mode", "Operations", "string", "Default completion notifications: off, minimal, or all.", false, ["off", "minimal", "all"]),
     setting("NORDRELAY_QUIET_HOURS", "Default quiet hours", "Operations", "string", "Default quiet hours. Use HH-HH, off, or leave blank.", false),
     setting("NORDRELAY_AUTO_SEND_ARTIFACTS", "Default auto-send artifacts", "Operations", "boolean", "Default automatic artifact summaries/uploads for chat adapters.", false),
@@ -172,6 +174,8 @@ export const SETTING_DEFINITIONS = [
     setting("NORDRELAY_PEER_PUBLIC_URL", "Peer public URL", "Peers", "string", "Optional public URL other instances should use for this node.", true),
     setting("NORDRELAY_PEER_TLS_ENABLED", "Peer TLS enabled", "Peers", "boolean", "Serve the peer API over HTTPS with an automatically generated local certificate.", true),
     setting("NORDRELAY_PEER_REQUIRE_TLS", "Require peer TLS", "Peers", "boolean", "Reject plaintext peer serving on non-loopback hosts.", true),
+    setting("NORDRELAY_PEER_HEALTH_CHECK_MS", "Peer health interval", "Peers", "number", "Background reachability check interval for configured peers. Use 0 to disable.", true),
+    setting("NORDRELAY_PEER_DISCOVERY_TIMEOUT_MS", "Peer discovery timeout", "Peers", "number", "Per-host LAN discovery timeout in milliseconds.", true),
     setting("OPENAI_API_KEY", "OpenAI API key", "Voice", "secret", "Whisper fallback API key.", true),
     setting("VOICE_PREFERRED_BACKEND", "Voice backend", "Voice", "string", "auto, parakeet, faster-whisper, or openai.", false, ["auto", "parakeet", "faster-whisper", "openai"]),
     setting("VOICE_DEFAULT_LANGUAGE", "Voice language", "Voice", "string", "Default transcription language.", false),
@@ -280,6 +284,8 @@ const EXAMPLE_VALUES = {
     "TELEGRAM_WEBHOOK_SECRET": "",
     "NORDRELAY_CLI_MIRROR_MODE": "status",
     "NORDRELAY_CLI_MIRROR_MIN_UPDATE_MS": "4000",
+    "NORDRELAY_WEB_CLI_MIRROR_MODE": "",
+    "NORDRELAY_WEB_CLI_MIRROR_MIN_UPDATE_MS": "",
     "NORDRELAY_NOTIFY_MODE": "minimal",
     "NORDRELAY_QUIET_HOURS": "",
     "NORDRELAY_AUTO_SEND_ARTIFACTS": "false",
@@ -309,6 +315,8 @@ const EXAMPLE_VALUES = {
     "NORDRELAY_PEER_PUBLIC_URL": "",
     "NORDRELAY_PEER_TLS_ENABLED": "true",
     "NORDRELAY_PEER_REQUIRE_TLS": "true",
+    "NORDRELAY_PEER_HEALTH_CHECK_MS": "60000",
+    "NORDRELAY_PEER_DISCOVERY_TIMEOUT_MS": "650",
     "NORDRELAY_DASHBOARD_HOST": "127.0.0.1",
     "NORDRELAY_DASHBOARD_PORT": "31878",
     "NORDRELAY_ENV_FILE": "",

package/dist/{config.js → core/config.js}

@@ -1,8 +1,8 @@
 import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
-import { createBuiltinLaunchProfiles, createDefaultLaunchProfile, findLaunchProfile, isCodexApprovalPolicy, isCodexSandboxMode, parseLaunchProfilesJson, } from "./codex-launch.js";
-import { CLAUDE_CODE_EFFORT_LEVELS, HERMES_REASONING_EFFORTS, OPENCLAW_THINKING_LEVELS, isAgentId, PI_THINKING_LEVELS, } from "./agent.js";
-import { parseMirrorMode, parseNotifyMode, parseQuietHours, parseVoiceBackendPreference, } from "./bot-preferences.js";
+import { createBuiltinLaunchProfiles, createDefaultLaunchProfile, findLaunchProfile, isCodexApprovalPolicy, isCodexSandboxMode, parseLaunchProfilesJson, } from "../agents/codex/codex-launch.js";
+import { CLAUDE_CODE_EFFORT_LEVELS, HERMES_REASONING_EFFORTS, OPENCLAW_THINKING_LEVELS, isAgentId, PI_THINKING_LEVELS, } from "../agents/shared/agent.js";
+import { parseMirrorMode, parseNotifyMode, parseQuietHours, parseVoiceBackendPreference, } from "../state/bot-preferences.js";
 export function loadConfig() {
     loadEnvFile(path.resolve(process.cwd(), ".env"));
     const adapterWarnings = [];
@@ -12,6 +12,8 @@ export function loadConfig() {
     const telegramEditMinIntervalMs = parseNonNegativeIntegerEnv(optionalString(process.env.TELEGRAM_EDIT_MIN_INTERVAL_MS), 1_200, "TELEGRAM_EDIT_MIN_INTERVAL_MS");
     const mirrorMode = parseMirrorMode(optionalString(process.env.NORDRELAY_CLI_MIRROR_MODE), "status");
     const mirrorMinUpdateMs = parseNonNegativeIntegerEnv(optionalString(process.env.NORDRELAY_CLI_MIRROR_MIN_UPDATE_MS), 4_000, "NORDRELAY_CLI_MIRROR_MIN_UPDATE_MS");
+    const webMirrorMode = parseMirrorMode(optionalString(process.env.NORDRELAY_WEB_CLI_MIRROR_MODE), mirrorMode);
+    const webMirrorMinUpdateMs = parseNonNegativeIntegerEnv(optionalString(process.env.NORDRELAY_WEB_CLI_MIRROR_MIN_UPDATE_MS), mirrorMinUpdateMs, "NORDRELAY_WEB_CLI_MIRROR_MIN_UPDATE_MS");
     const notifyMode = parseNotifyMode(optionalString(process.env.NORDRELAY_NOTIFY_MODE), "minimal");
     const quietHours = parseQuietHoursOverride(process.env.NORDRELAY_QUIET_HOURS, null);
     const autoSendArtifacts = parseBooleanEnv(optionalString(process.env.NORDRELAY_AUTO_SEND_ARTIFACTS), false);
@@ -131,6 +133,8 @@ export function loadConfig() {
     const peerPublicUrl = optionalString(process.env.NORDRELAY_PEER_PUBLIC_URL);
     const peerTlsEnabled = parseBooleanEnv(optionalString(process.env.NORDRELAY_PEER_TLS_ENABLED), true);
     const peerRequireTls = parseBooleanEnv(optionalString(process.env.NORDRELAY_PEER_REQUIRE_TLS), true);
+    const peerHealthCheckMs = parseNonNegativeIntegerEnv(optionalString(process.env.NORDRELAY_PEER_HEALTH_CHECK_MS), 60_000, "NORDRELAY_PEER_HEALTH_CHECK_MS");
+    const peerDiscoveryTimeoutMs = parsePositiveIntegerEnv(optionalString(process.env.NORDRELAY_PEER_DISCOVERY_TIMEOUT_MS), 650, "NORDRELAY_PEER_DISCOVERY_TIMEOUT_MS");
     let telegramEnabled = requestedTelegramEnabled;
     if (telegramEnabled && telegramTransport === "webhook" && !telegramWebhookUrl) {
         telegramEnabled = false;
@@ -170,6 +174,8 @@ export function loadConfig() {
         telegramEditMinIntervalMs,
         mirrorMode,
         mirrorMinUpdateMs,
+        webMirrorMode,
+        webMirrorMinUpdateMs,
         notifyMode,
         quietHours,
         autoSendArtifacts,
@@ -288,6 +294,8 @@ export function loadConfig() {
         peerPublicUrl,
         peerTlsEnabled,
         peerRequireTls,
+        peerHealthCheckMs,
+        peerDiscoveryTimeoutMs,
     };
 }
 /**

package/dist/index.js

@@ -2,35 +2,37 @@ import { createServer } from "node:http";
 import { mkdir, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { webhookCallback } from "grammy";
-import { agentLabel } from "./agent.js";
-import { createBot, registerCommands } from "./bot.js";
-import { createDiscordBridge } from "./discord-bot.js";
-import { createSlackBridge } from "./slack-bot.js";
-import { checkAuthStatus } from "./codex-auth.js";
-import { describeCodexCli, resolveCodexCli } from "./codex-cli.js";
-import { checkClaudeCodeAuthStatus } from "./claude-code-auth.js";
-import { describeClaudeCodeCli, resolveClaudeCodeCli } from "./claude-code-cli.js";
-import { findLaunchProfile, formatLaunchProfileBehavior } from "./codex-launch.js";
-import { enabledAgents } from "./agent-factory.js";
-import { loadConfig } from "./config.js";
-import { checkHermesAuthStatus } from "./hermes-auth.js";
-import { describeHermesCli, resolveHermesCli } from "./hermes-cli.js";
-import { checkOpenClawAuthStatus } from "./openclaw-auth.js";
-import { describeOpenClawCli, resolveOpenClawCli } from "./openclaw-cli.js";
-import { installConsoleLogger } from "./logger.js";
-import { checkPiAuthStatus } from "./pi-auth.js";
-import { describePiCli, resolvePiCli } from "./pi-cli.js";
-import { startPeerServer } from "./peer-server.js";
-import { RelayRuntime } from "./relay-runtime.js";
-import { configureRedaction } from "./redaction.js";
-import { SessionRegistry } from "./session-registry.js";
-import { UserStore } from "./user-management.js";
+import { agentLabel } from "./agents/shared/agent.js";
+import { createBot, registerCommands } from "./channels/telegram/bot.js";
+import { createDiscordBridge } from "./channels/discord/discord-bot.js";
+import { createSlackBridge } from "./channels/slack/slack-bot.js";
+import { checkAuthStatus } from "./agents/codex/codex-auth.js";
+import { describeCodexCli, resolveCodexCli } from "./agents/codex/codex-cli.js";
+import { checkClaudeCodeAuthStatus } from "./agents/claude-code/claude-code-auth.js";
+import { describeClaudeCodeCli, resolveClaudeCodeCli } from "./agents/claude-code/claude-code-cli.js";
+import { findLaunchProfile, formatLaunchProfileBehavior } from "./agents/codex/codex-launch.js";
+import { enabledAgents } from "./agents/shared/agent-factory.js";
+import { loadConfig } from "./core/config.js";
+import { checkHermesAuthStatus } from "./agents/hermes/hermes-auth.js";
+import { describeHermesCli, resolveHermesCli } from "./agents/hermes/hermes-cli.js";
+import { checkOpenClawAuthStatus } from "./agents/openclaw/openclaw-auth.js";
+import { describeOpenClawCli, resolveOpenClawCli } from "./agents/openclaw/openclaw-cli.js";
+import { installConsoleLogger } from "./core/logger.js";
+import { checkPiAuthStatus } from "./agents/pi/pi-auth.js";
+import { describePiCli, resolvePiCli } from "./agents/pi/pi-cli.js";
+import { startPeerHealthMonitor } from "./peers/peer-health-monitor.js";
+import { startPeerServer } from "./peers/peer-server.js";
+import { RelayRuntime } from "./runtime/relay-runtime.js";
+import { configureRedaction } from "./core/redaction.js";
+import { SessionRegistry } from "./state/session-registry.js";
+import { UserStore } from "./access/user-management.js";
 let registry;
 let bot;
 let discordBridge;
 let slackBridge;
 let webhookServer;
 let peerServer;
+let peerHealthMonitor;
 let peerRuntime;
 let runtimeConfig;
 try {
@@ -51,6 +53,7 @@ try {
         peerRuntime = new RelayRuntime(config);
         peerServer = await startPeerServer({ config, runtime: peerRuntime });
     }
+    peerHealthMonitor = startPeerHealthMonitor({ config });
     console.log("NordRelay running");
     const userStore = new UserStore();
     if (userStore.hasAdminUser()) {
@@ -177,6 +180,7 @@ const shutdown = (signal) => {
     void peerServer?.close().catch((error) => {
         console.warn("Failed to stop peer server:", error instanceof Error ? error.message : String(error));
     });
+    peerHealthMonitor?.close();
     setTimeout(() => {
         registry?.disposeAll();
         peerRuntime?.dispose();

package/dist/{peer-client.js → peers/peer-client.js}

@@ -35,6 +35,42 @@ export async function checkPeerEndpoint(url, options = {}) {
         };
     }
 }
+export async function checkPeerIdentityEndpoint(url, options = {}) {
+    const target = joinPeerUrl(url, "/peer/identity");
+    const startedAt = Date.now();
+    try {
+        const result = await requestJson({
+            url: target,
+            method: "GET",
+            expectedTlsFingerprint: options.expectedTlsFingerprint,
+            allowSelfSigned: true,
+            timeoutMs: options.timeoutMs ?? 4_000,
+        });
+        const identity = parsePeerIdentity(result.data?.identity);
+        const protocolVersion = result.data?.protocolVersion;
+        return {
+            ok: Boolean(identity) && protocolVersion === PEER_PROTOCOL_VERSION,
+            status: "reachable",
+            url: target,
+            latencyMs: Date.now() - startedAt,
+            statusCode: result.statusCode,
+            tlsFingerprint: result.tlsFingerprint,
+            identity,
+            detail: identity && protocolVersion === PEER_PROTOCOL_VERSION
+                ? "Peer identity endpoint is reachable."
+                : "Endpoint responded, but did not return the expected peer identity payload.",
+        };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            status: "unreachable",
+            url: target,
+            latencyMs: Date.now() - startedAt,
+            detail: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
 export async function pairPeer(options, identity, store = new PeerStore()) {
     const timestamp = new Date().toISOString();
     const payload = createPairingSignaturePayload(identity.public.nodeId, timestamp, options.code);
@@ -65,7 +101,7 @@ export async function pairPeer(options, identity, store = new PeerStore()) {
         nodeId: result.data.identity.nodeId,
         publicKey: result.data.identity.publicKey,
         fingerprint: result.data.identity.fingerprint,
-        tlsFingerprint: result.tlsFingerprint,
+        tlsFingerprint: result.tlsFingerprint ?? null,
         secret: result.data.secret,
         enabled: true,
         direction: "outbound",
@@ -286,3 +322,23 @@ function normalizePeerUrl(value) {
 function normalizeFingerprint(value) {
     return value?.trim().toLowerCase();
 }
+function parsePeerIdentity(value) {
+    if (!value || typeof value !== "object") {
+        return undefined;
+    }
+    const record = value;
+    if (typeof record.nodeId !== "string" ||
+        typeof record.name !== "string" ||
+        typeof record.publicKey !== "string" ||
+        typeof record.fingerprint !== "string" ||
+        typeof record.createdAt !== "string") {
+        return undefined;
+    }
+    return {
+        nodeId: record.nodeId,
+        name: record.name,
+        publicKey: record.publicKey,
+        fingerprint: record.fingerprint,
+        createdAt: record.createdAt,
+    };
+}