@nordbyte/nordrelay 0.8.1 → 0.8.3

package/dist/{telegram-access-commands.js → channels/telegram/telegram-access-commands.js}

@@ -1,6 +1,6 @@
-import { consumeRateLimit, resetRateLimit } from "./bot-rendering.js";
-import { friendlyErrorText } from "./error-messages.js";
-import { escapeHTML } from "./format.js";
+import { consumeRateLimit, resetRateLimit } from "../shared/bot-rendering.js";
+import { friendlyErrorText } from "../../core/error-messages.js";
+import { escapeHTML } from "../../core/format.js";
 import { safeReply } from "./telegram-output.js";
 export function registerTelegramAccessCommands(deps) {
     const { bot, userStore, contextUsers, linkAttempts, audit, getUserRole } = deps;

package/dist/{telegram-access-middleware.js → channels/telegram/telegram-access-middleware.js}

@@ -1,8 +1,8 @@
-import { permissionForCallbackData, permissionForCommand } from "./access-control.js";
-import { extractCommandName } from "./bot-rendering.js";
-import { escapeHTML } from "./format.js";
+import { permissionForCallbackData, permissionForCommand } from "../../access/access-control.js";
+import { extractCommandName } from "../shared/bot-rendering.js";
+import { escapeHTML } from "../../core/format.js";
 import { safeReply } from "./telegram-output.js";
-import { UserStore } from "./user-management.js";
+import { UserStore } from "../../access/user-management.js";
 export function createTelegramAccessMiddleware(options) {
     const { userStore, contextUsers, audit } = options;
     return async (ctx, next) => {

package/dist/{telegram-agent-commands.js → channels/telegram/telegram-agent-commands.js}

@@ -1,13 +1,13 @@
 import { InlineKeyboard } from "grammy";
-import { agentLabel, } from "./agent.js";
-import { enabledAgents } from "./agent-factory.js";
-import { capabilitiesOf, idOf, labelOf, } from "./bot-rendering.js";
-import { checkAuthStatus } from "./codex-auth.js";
-import { contextKeyFromCtx } from "./context-key.js";
-import { friendlyErrorText } from "./error-messages.js";
-import { escapeHTML } from "./format.js";
-import { redactText } from "./redaction.js";
-import { renderSessionInfoHTML, renderSessionInfoPlain, } from "./session-format.js";
+import { agentLabel, } from "../../agents/shared/agent.js";
+import { enabledAgents } from "../../agents/shared/agent-factory.js";
+import { capabilitiesOf, idOf, labelOf, } from "../shared/bot-rendering.js";
+import { checkAuthStatus } from "../../agents/codex/codex-auth.js";
+import { contextKeyFromCtx } from "../shared/context-key.js";
+import { friendlyErrorText } from "../../core/error-messages.js";
+import { escapeHTML } from "../../core/format.js";
+import { redactText } from "../../core/redaction.js";
+import { renderSessionInfoHTML, renderSessionInfoPlain, } from "../shared/session-format.js";
 import { safeEditMessage, safeReply, } from "./telegram-output.js";
 export function registerTelegramAgentCommands(options) {
     options.bot.command("agent", async (ctx) => {

package/dist/{telegram-artifact-commands.js → channels/telegram/telegram-artifact-commands.js}

@@ -1,8 +1,8 @@
 import { InlineKeyboard } from "grammy";
-import { getArtifactTurnReport, listRecentArtifactReports, removeArtifactTurn, } from "./artifacts.js";
-import { buildArtifactActionsKeyboard, filterArtifactReports, } from "./bot-rendering.js";
-import { renderArtifactReportsAction } from "./channel-actions.js";
-import { escapeHTML } from "./format.js";
+import { getArtifactTurnReport, listRecentArtifactReports, removeArtifactTurn, } from "../../artifacts/artifacts.js";
+import { buildArtifactActionsKeyboard, filterArtifactReports, } from "../shared/bot-rendering.js";
+import { renderArtifactReportsAction } from "../shared/channel-actions.js";
+import { escapeHTML } from "../../core/format.js";
 import { NOOP_PAGE_CALLBACK_DATA } from "./telegram-channel-runtime.js";
 import { safeEditMessage, safeReply, } from "./telegram-output.js";
 export function registerTelegramArtifactCommands(options) {

package/dist/{telegram-channel-runtime.js → channels/telegram/telegram-channel-runtime.js}

@@ -1,6 +1,6 @@
 import { Bot, InlineKeyboard, InputFile } from "grammy";
-import { TelegramChannelAdapter, } from "./channel-adapter.js";
-import { redactText } from "./redaction.js";
+import { TelegramChannelAdapter, } from "../shared/channel-adapter.js";
+import { redactText } from "../../core/redaction.js";
 import { telegramRateLimiter } from "./telegram-rate-limit.js";
 import { chatBucket, safeEditMessage, sendChatActionSafe, sendTextMessage, } from "./telegram-output.js";
 const KEYBOARD_PAGE_SIZE = 6;

package/dist/{telegram-command-menu.js → channels/telegram/telegram-command-menu.js}

@@ -1,4 +1,4 @@
-import { telegramCommandCatalog } from "./channel-command-catalog.js";
+import { telegramCommandCatalog } from "../shared/channel-command-catalog.js";
 export const TELEGRAM_COMMANDS = telegramCommandCatalog();
 export async function registerCommands(bot) {
     await bot.api.setMyCommands([...TELEGRAM_COMMANDS]);

package/dist/{telegram-diagnostics-command.js → channels/telegram/telegram-diagnostics-command.js}

@@ -1,10 +1,10 @@
-import { getAgentDiagnostics } from "./agent-activity.js";
-import { formatQuietHours } from "./bot-preferences.js";
-import { cliPathOptions } from "./channel-command-service.js";
-import { checkAuthStatus } from "./codex-auth.js";
-import { contextKeyFromCtx } from "./context-key.js";
-import { getConnectorHealth, } from "./operations.js";
-import { renderAgentDiagnostics, renderDiagnosticsHTML, renderDiagnosticsPlain, renderHealthHTML, renderHealthPlain, } from "./bot-rendering.js";
+import { getAgentDiagnostics } from "../../agents/shared/agent-activity.js";
+import { formatQuietHours } from "../../state/bot-preferences.js";
+import { cliPathOptions } from "../shared/channel-command-service.js";
+import { checkAuthStatus } from "../../agents/codex/codex-auth.js";
+import { contextKeyFromCtx } from "../shared/context-key.js";
+import { getConnectorHealth, } from "../../support/operations.js";
+import { renderAgentDiagnostics, renderDiagnosticsHTML, renderDiagnosticsPlain, renderHealthHTML, renderHealthPlain, } from "../shared/bot-rendering.js";
 import { getTelegramRateLimitMetrics } from "./telegram-rate-limit.js";
 import { safeReply } from "./telegram-output.js";
 export function registerTelegramDiagnosticsCommands(options) {

package/dist/{telegram-general-commands.js → channels/telegram/telegram-general-commands.js}

@@ -1,8 +1,8 @@
 import { renderWelcomeFirstTime, renderWelcomeReturning, renderHelpMessage, } from "./bot-ui.js";
-import { authHelpText, capabilitiesOf, labelOf, } from "./bot-rendering.js";
-import { escapeHTML } from "./format.js";
-import { spawnConnectorRestart } from "./operations.js";
-import { renderLaunchSummaryHTML, renderLaunchSummaryPlain, renderSessionInfoHTML, renderSessionInfoPlain, } from "./session-format.js";
+import { authHelpText, capabilitiesOf, labelOf, } from "../shared/bot-rendering.js";
+import { escapeHTML } from "../../core/format.js";
+import { spawnConnectorRestart } from "../../support/operations.js";
+import { renderLaunchSummaryHTML, renderLaunchSummaryPlain, renderSessionInfoHTML, renderSessionInfoPlain, } from "../shared/session-format.js";
 import { safeReply } from "./telegram-output.js";
 export function registerTelegramGeneralCommands(options) {
     options.bot.command("start", async (ctx) => {

package/dist/{telegram-operational-commands.js → channels/telegram/telegram-operational-commands.js}

@@ -3,11 +3,11 @@ import { unlink, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { InputFile } from "grammy";
-import { getAgentActivityLog } from "./agent-activity.js";
-import { capabilitiesOf, filterActivityEvents, formatLocalDateTime, formatLockOwner, labelOf, parseActivityOptions, renderActivityTimeline, renderAuditEvents, renderProgressHTML, renderProgressPlain, renderSessionLocks, } from "./bot-rendering.js";
-import { escapeHTML } from "./format.js";
-import { renderSessionInfoHTML, renderSessionInfoPlain } from "./session-format.js";
-import { canWriteWithLock } from "./session-locks.js";
+import { getAgentActivityLog } from "../../agents/shared/agent-activity.js";
+import { capabilitiesOf, filterActivityEvents, formatLocalDateTime, formatLockOwner, labelOf, parseActivityOptions, renderActivityTimeline, renderAuditEvents, renderProgressHTML, renderProgressPlain, renderSessionLocks, } from "../shared/bot-rendering.js";
+import { escapeHTML } from "../../core/format.js";
+import { renderSessionInfoHTML, renderSessionInfoPlain } from "../shared/session-format.js";
+import { canWriteWithLock } from "../../access/session-locks.js";
 import { chatBucket, safeReply } from "./telegram-output.js";
 import { telegramRateLimiter } from "./telegram-rate-limit.js";
 export function registerTelegramOperationalCommands(options) {

package/dist/{telegram-output.js → channels/telegram/telegram-output.js}

@@ -3,8 +3,8 @@ import { writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
 import { Bot, InlineKeyboard } from "grammy";
-import { formatTelegramHTML } from "./format.js";
-import { redactText } from "./redaction.js";
+import { formatTelegramHTML } from "../../core/format.js";
+import { redactText } from "../../core/redaction.js";
 import { telegramRateLimiter } from "./telegram-rate-limit.js";
 const TELEGRAM_MESSAGE_LIMIT = 4000;
 const FORMATTED_CHUNK_TARGET = 3000;

package/dist/{telegram-preference-commands.js → channels/telegram/telegram-preference-commands.js}

@@ -1,6 +1,6 @@
-import { capabilitiesOf, labelOf, } from "./bot-rendering.js";
-import { escapeHTML } from "./format.js";
-import { evaluateWorkspacePolicy, filterAllowedWorkspaces, renderWorkspacePolicyLine, } from "./workspace-policy.js";
+import { capabilitiesOf, labelOf, } from "../shared/bot-rendering.js";
+import { escapeHTML } from "../../core/format.js";
+import { evaluateWorkspacePolicy, filterAllowedWorkspaces, renderWorkspacePolicyLine, } from "../../core/workspace-policy.js";
 import { safeReply } from "./telegram-output.js";
 export function registerTelegramPreferenceCommands(options) {
     options.bot.command("mirror", async (ctx) => {

package/dist/{telegram-queue-commands.js → channels/telegram/telegram-queue-commands.js}

@@ -1,10 +1,10 @@
 import { InlineKeyboard } from "grammy";
-import { renderQueueListAction, renderQueuedPromptDetailAction, } from "./channel-actions.js";
-import { contextKeyFromCtx } from "./context-key.js";
-import { friendlyErrorText } from "./error-messages.js";
-import { escapeHTML } from "./format.js";
-import { PromptStore, toPromptEnvelope } from "./prompt-store.js";
-import { formatLocalDateTime } from "./bot-rendering.js";
+import { renderQueueListAction, renderQueuedPromptDetailAction, } from "../shared/channel-actions.js";
+import { contextKeyFromCtx } from "../shared/context-key.js";
+import { friendlyErrorText } from "../../core/error-messages.js";
+import { escapeHTML } from "../../core/format.js";
+import { PromptStore, toPromptEnvelope } from "../../state/prompt-store.js";
+import { formatLocalDateTime } from "../shared/bot-rendering.js";
 import { safeEditMessage, safeReply, } from "./telegram-output.js";
 export function queueCancelCallbackData(action, contextKey, queueId) {
     return `queue_${action}:${contextKey}:${queueId}`;

package/dist/{telegram-support-command.js → channels/telegram/telegram-support-command.js}

@@ -1,8 +1,8 @@
 import { InputFile } from "grammy";
-import { contextKeyFromCtx } from "./context-key.js";
-import { getConnectorHealth, getVersionChecks } from "./operations.js";
-import { formatLocalDateTime } from "./bot-rendering.js";
-import { createSupportBundle } from "./support-bundle.js";
+import { contextKeyFromCtx } from "../shared/context-key.js";
+import { getConnectorHealth, getVersionChecks } from "../../support/operations.js";
+import { formatLocalDateTime } from "../shared/bot-rendering.js";
+import { createSupportBundle } from "../../support/support-bundle.js";
 import { chatBucket } from "./telegram-output.js";
 import { telegramRateLimiter } from "./telegram-rate-limit.js";
 export function registerTelegramSupportCommands(options) {

package/dist/{telegram-update-commands.js → channels/telegram/telegram-update-commands.js}

@@ -1,8 +1,8 @@
-import { listAgentAdapterDescriptors } from "./agent-adapter.js";
-import { agentLabel } from "./agent.js";
-import { parseAgentUpdateId, renderAgentUpdateJobAction, renderAgentUpdateJobsAction, renderAgentUpdateLogAction, renderAgentUpdatePickerAction, renderSelfUpdateStartedAction, } from "./channel-actions.js";
-import { escapeHTML } from "./format.js";
-import { spawnSelfUpdate } from "./operations.js";
+import { listAgentAdapterDescriptors } from "../../agents/shared/agent-adapter.js";
+import { agentLabel } from "../../agents/shared/agent.js";
+import { parseAgentUpdateId, renderAgentUpdateJobAction, renderAgentUpdateJobsAction, renderAgentUpdateLogAction, renderAgentUpdatePickerAction, renderSelfUpdateStartedAction, } from "../shared/channel-actions.js";
+import { escapeHTML } from "../../core/format.js";
+import { spawnSelfUpdate } from "../../support/operations.js";
 import { safeReply } from "./telegram-output.js";
 export function registerTelegramUpdateCommands(deps) {
     const { bot, agentUpdates, replyChannelAction, startTelegramAgentUpdate } = deps;

package/dist/{config-metadata.js → core/config-metadata.js}

@@ -140,6 +140,8 @@ export const SETTING_DEFINITIONS = [
     setting("TELEGRAM_EDIT_MIN_INTERVAL_MS", "Telegram edit interval", "Operations", "number", "Minimum edit interval.", true),
     setting("NORDRELAY_CLI_MIRROR_MODE", "Default CLI mirror mode", "Operations", "string", "Default mirror mode for chat adapters: off, status, final, or full.", false, ["off", "status", "final", "full"]),
     setting("NORDRELAY_CLI_MIRROR_MIN_UPDATE_MS", "Default mirror update interval", "Operations", "number", "Default minimum mirrored edit interval.", true),
+    setting("NORDRELAY_WEB_CLI_MIRROR_MODE", "WebUI mirror override", "Operations", "string", "Optional WebUI override for CLI mirror mode. Uses the NordRelay default when unset.", false, ["off", "status", "final", "full"]),
+    setting("NORDRELAY_WEB_CLI_MIRROR_MIN_UPDATE_MS", "WebUI mirror update override", "Operations", "number", "Optional WebUI override for mirrored status interval.", true),
     setting("NORDRELAY_NOTIFY_MODE", "Default notify mode", "Operations", "string", "Default completion notifications: off, minimal, or all.", false, ["off", "minimal", "all"]),
     setting("NORDRELAY_QUIET_HOURS", "Default quiet hours", "Operations", "string", "Default quiet hours. Use HH-HH, off, or leave blank.", false),
     setting("NORDRELAY_AUTO_SEND_ARTIFACTS", "Default auto-send artifacts", "Operations", "boolean", "Default automatic artifact summaries/uploads for chat adapters.", false),
@@ -172,6 +174,8 @@ export const SETTING_DEFINITIONS = [
     setting("NORDRELAY_PEER_PUBLIC_URL", "Peer public URL", "Peers", "string", "Optional public URL other instances should use for this node.", true),
     setting("NORDRELAY_PEER_TLS_ENABLED", "Peer TLS enabled", "Peers", "boolean", "Serve the peer API over HTTPS with an automatically generated local certificate.", true),
     setting("NORDRELAY_PEER_REQUIRE_TLS", "Require peer TLS", "Peers", "boolean", "Reject plaintext peer serving on non-loopback hosts.", true),
+    setting("NORDRELAY_PEER_HEALTH_CHECK_MS", "Peer health interval", "Peers", "number", "Background reachability check interval for configured peers. Use 0 to disable.", true),
+    setting("NORDRELAY_PEER_DISCOVERY_TIMEOUT_MS", "Peer discovery timeout", "Peers", "number", "Per-host LAN discovery timeout in milliseconds.", true),
     setting("OPENAI_API_KEY", "OpenAI API key", "Voice", "secret", "Whisper fallback API key.", true),
     setting("VOICE_PREFERRED_BACKEND", "Voice backend", "Voice", "string", "auto, parakeet, faster-whisper, or openai.", false, ["auto", "parakeet", "faster-whisper", "openai"]),
     setting("VOICE_DEFAULT_LANGUAGE", "Voice language", "Voice", "string", "Default transcription language.", false),
@@ -280,6 +284,8 @@ const EXAMPLE_VALUES = {
     "TELEGRAM_WEBHOOK_SECRET": "",
     "NORDRELAY_CLI_MIRROR_MODE": "status",
     "NORDRELAY_CLI_MIRROR_MIN_UPDATE_MS": "4000",
+    "NORDRELAY_WEB_CLI_MIRROR_MODE": "",
+    "NORDRELAY_WEB_CLI_MIRROR_MIN_UPDATE_MS": "",
     "NORDRELAY_NOTIFY_MODE": "minimal",
     "NORDRELAY_QUIET_HOURS": "",
     "NORDRELAY_AUTO_SEND_ARTIFACTS": "false",
@@ -309,6 +315,8 @@ const EXAMPLE_VALUES = {
     "NORDRELAY_PEER_PUBLIC_URL": "",
     "NORDRELAY_PEER_TLS_ENABLED": "true",
     "NORDRELAY_PEER_REQUIRE_TLS": "true",
+    "NORDRELAY_PEER_HEALTH_CHECK_MS": "60000",
+    "NORDRELAY_PEER_DISCOVERY_TIMEOUT_MS": "650",
     "NORDRELAY_DASHBOARD_HOST": "127.0.0.1",
     "NORDRELAY_DASHBOARD_PORT": "31878",
     "NORDRELAY_ENV_FILE": "",

package/dist/{config.js → core/config.js}

@@ -1,8 +1,8 @@
 import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
-import { createBuiltinLaunchProfiles, createDefaultLaunchProfile, findLaunchProfile, isCodexApprovalPolicy, isCodexSandboxMode, parseLaunchProfilesJson, } from "./codex-launch.js";
-import { CLAUDE_CODE_EFFORT_LEVELS, HERMES_REASONING_EFFORTS, OPENCLAW_THINKING_LEVELS, isAgentId, PI_THINKING_LEVELS, } from "./agent.js";
-import { parseMirrorMode, parseNotifyMode, parseQuietHours, parseVoiceBackendPreference, } from "./bot-preferences.js";
+import { createBuiltinLaunchProfiles, createDefaultLaunchProfile, findLaunchProfile, isCodexApprovalPolicy, isCodexSandboxMode, parseLaunchProfilesJson, } from "../agents/codex/codex-launch.js";
+import { CLAUDE_CODE_EFFORT_LEVELS, HERMES_REASONING_EFFORTS, OPENCLAW_THINKING_LEVELS, isAgentId, PI_THINKING_LEVELS, } from "../agents/shared/agent.js";
+import { parseMirrorMode, parseNotifyMode, parseQuietHours, parseVoiceBackendPreference, } from "../state/bot-preferences.js";
 export function loadConfig() {
     loadEnvFile(path.resolve(process.cwd(), ".env"));
     const adapterWarnings = [];
@@ -12,6 +12,8 @@ export function loadConfig() {
     const telegramEditMinIntervalMs = parseNonNegativeIntegerEnv(optionalString(process.env.TELEGRAM_EDIT_MIN_INTERVAL_MS), 1_200, "TELEGRAM_EDIT_MIN_INTERVAL_MS");
     const mirrorMode = parseMirrorMode(optionalString(process.env.NORDRELAY_CLI_MIRROR_MODE), "status");
     const mirrorMinUpdateMs = parseNonNegativeIntegerEnv(optionalString(process.env.NORDRELAY_CLI_MIRROR_MIN_UPDATE_MS), 4_000, "NORDRELAY_CLI_MIRROR_MIN_UPDATE_MS");
+    const webMirrorMode = parseMirrorMode(optionalString(process.env.NORDRELAY_WEB_CLI_MIRROR_MODE), mirrorMode);
+    const webMirrorMinUpdateMs = parseNonNegativeIntegerEnv(optionalString(process.env.NORDRELAY_WEB_CLI_MIRROR_MIN_UPDATE_MS), mirrorMinUpdateMs, "NORDRELAY_WEB_CLI_MIRROR_MIN_UPDATE_MS");
     const notifyMode = parseNotifyMode(optionalString(process.env.NORDRELAY_NOTIFY_MODE), "minimal");
     const quietHours = parseQuietHoursOverride(process.env.NORDRELAY_QUIET_HOURS, null);
     const autoSendArtifacts = parseBooleanEnv(optionalString(process.env.NORDRELAY_AUTO_SEND_ARTIFACTS), false);
@@ -131,6 +133,8 @@ export function loadConfig() {
     const peerPublicUrl = optionalString(process.env.NORDRELAY_PEER_PUBLIC_URL);
     const peerTlsEnabled = parseBooleanEnv(optionalString(process.env.NORDRELAY_PEER_TLS_ENABLED), true);
     const peerRequireTls = parseBooleanEnv(optionalString(process.env.NORDRELAY_PEER_REQUIRE_TLS), true);
+    const peerHealthCheckMs = parseNonNegativeIntegerEnv(optionalString(process.env.NORDRELAY_PEER_HEALTH_CHECK_MS), 60_000, "NORDRELAY_PEER_HEALTH_CHECK_MS");
+    const peerDiscoveryTimeoutMs = parsePositiveIntegerEnv(optionalString(process.env.NORDRELAY_PEER_DISCOVERY_TIMEOUT_MS), 650, "NORDRELAY_PEER_DISCOVERY_TIMEOUT_MS");
     let telegramEnabled = requestedTelegramEnabled;
     if (telegramEnabled && telegramTransport === "webhook" && !telegramWebhookUrl) {
         telegramEnabled = false;
@@ -170,6 +174,8 @@ export function loadConfig() {
         telegramEditMinIntervalMs,
         mirrorMode,
         mirrorMinUpdateMs,
+        webMirrorMode,
+        webMirrorMinUpdateMs,
         notifyMode,
         quietHours,
         autoSendArtifacts,
@@ -288,6 +294,8 @@ export function loadConfig() {
         peerPublicUrl,
         peerTlsEnabled,
         peerRequireTls,
+        peerHealthCheckMs,
+        peerDiscoveryTimeoutMs,
     };
 }
 /**

package/dist/core/pagination.js

@@ -0,0 +1,22 @@
+export function normalizeCursorLimit(value, fallback = 100, max = 500) {
+    const parsed = typeof value === "number" ? value : Number.parseInt(String(value ?? ""), 10);
+    const selected = Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+    return Math.max(1, Math.min(max, selected));
+}
+export function cursorPage(items, cursor, limit, cursorOf) {
+    const normalizedLimit = normalizeCursorLimit(limit, limit);
+    const startIndex = cursor ? Math.max(0, items.findIndex((item) => cursorOf(item) === cursor) + 1) : 0;
+    const window = items.slice(startIndex, startIndex + normalizedLimit + 1);
+    const pageItems = window.slice(0, normalizedLimit);
+    const hasNext = window.length > normalizedLimit;
+    const last = pageItems.at(-1);
+    return {
+        items: pageItems,
+        pagination: {
+            limit: normalizedLimit,
+            nextCursor: hasNext && last ? cursorOf(last) ?? null : null,
+            hasNext,
+            total: items.length,
+        },
+    };
+}

package/dist/index.js

@@ -2,35 +2,37 @@ import { createServer } from "node:http";
 import { mkdir, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { webhookCallback } from "grammy";
-import { agentLabel } from "./agent.js";
-import { createBot, registerCommands } from "./bot.js";
-import { createDiscordBridge } from "./discord-bot.js";
-import { createSlackBridge } from "./slack-bot.js";
-import { checkAuthStatus } from "./codex-auth.js";
-import { describeCodexCli, resolveCodexCli } from "./codex-cli.js";
-import { checkClaudeCodeAuthStatus } from "./claude-code-auth.js";
-import { describeClaudeCodeCli, resolveClaudeCodeCli } from "./claude-code-cli.js";
-import { findLaunchProfile, formatLaunchProfileBehavior } from "./codex-launch.js";
-import { enabledAgents } from "./agent-factory.js";
-import { loadConfig } from "./config.js";
-import { checkHermesAuthStatus } from "./hermes-auth.js";
-import { describeHermesCli, resolveHermesCli } from "./hermes-cli.js";
-import { checkOpenClawAuthStatus } from "./openclaw-auth.js";
-import { describeOpenClawCli, resolveOpenClawCli } from "./openclaw-cli.js";
-import { installConsoleLogger } from "./logger.js";
-import { checkPiAuthStatus } from "./pi-auth.js";
-import { describePiCli, resolvePiCli } from "./pi-cli.js";
-import { startPeerServer } from "./peer-server.js";
-import { RelayRuntime } from "./relay-runtime.js";
-import { configureRedaction } from "./redaction.js";
-import { SessionRegistry } from "./session-registry.js";
-import { UserStore } from "./user-management.js";
+import { agentLabel } from "./agents/shared/agent.js";
+import { createBot, registerCommands } from "./channels/telegram/bot.js";
+import { createDiscordBridge } from "./channels/discord/discord-bot.js";
+import { createSlackBridge } from "./channels/slack/slack-bot.js";
+import { checkAuthStatus } from "./agents/codex/codex-auth.js";
+import { describeCodexCli, resolveCodexCli } from "./agents/codex/codex-cli.js";
+import { checkClaudeCodeAuthStatus } from "./agents/claude-code/claude-code-auth.js";
+import { describeClaudeCodeCli, resolveClaudeCodeCli } from "./agents/claude-code/claude-code-cli.js";
+import { findLaunchProfile, formatLaunchProfileBehavior } from "./agents/codex/codex-launch.js";
+import { enabledAgents } from "./agents/shared/agent-factory.js";
+import { loadConfig } from "./core/config.js";
+import { checkHermesAuthStatus } from "./agents/hermes/hermes-auth.js";
+import { describeHermesCli, resolveHermesCli } from "./agents/hermes/hermes-cli.js";
+import { checkOpenClawAuthStatus } from "./agents/openclaw/openclaw-auth.js";
+import { describeOpenClawCli, resolveOpenClawCli } from "./agents/openclaw/openclaw-cli.js";
+import { installConsoleLogger } from "./core/logger.js";
+import { checkPiAuthStatus } from "./agents/pi/pi-auth.js";
+import { describePiCli, resolvePiCli } from "./agents/pi/pi-cli.js";
+import { startPeerHealthMonitor } from "./peers/peer-health-monitor.js";
+import { startPeerServer } from "./peers/peer-server.js";
+import { RelayRuntime } from "./runtime/relay-runtime.js";
+import { configureRedaction } from "./core/redaction.js";
+import { SessionRegistry } from "./state/session-registry.js";
+import { UserStore } from "./access/user-management.js";
 let registry;
 let bot;
 let discordBridge;
 let slackBridge;
 let webhookServer;
 let peerServer;
+let peerHealthMonitor;
 let peerRuntime;
 let runtimeConfig;
 try {
@@ -51,6 +53,7 @@ try {
         peerRuntime = new RelayRuntime(config);
         peerServer = await startPeerServer({ config, runtime: peerRuntime });
     }
+    peerHealthMonitor = startPeerHealthMonitor({ config });
     console.log("NordRelay running");
     const userStore = new UserStore();
     if (userStore.hasAdminUser()) {
@@ -177,6 +180,7 @@ const shutdown = (signal) => {
     void peerServer?.close().catch((error) => {
         console.warn("Failed to stop peer server:", error instanceof Error ? error.message : String(error));
     });
+    peerHealthMonitor?.close();
     setTimeout(() => {
         registry?.disposeAll();
         peerRuntime?.dispose();

package/dist/peers/peer-discovery-jobs.js

@@ -0,0 +1,206 @@
+import { randomUUID } from "node:crypto";
+import os from "node:os";
+import path from "node:path";
+import { readJsonFileWithBackup, writeJsonFileAtomic } from "../state/persistence.js";
+import { countDiscoveryTargets, discoverLanPeers } from "./peer-discovery.js";
+const MAX_JOBS = 25;
+const MAX_LOG_LINES = 300;
+const DEFAULT_HOME = path.join(os.homedir(), ".nordrelay");
+export class PeerDiscoveryJobManager {
+    config;
+    jobs = new Map();
+    filePath;
+    constructor(config, home = process.env.NORDRELAY_HOME || DEFAULT_HOME) {
+        this.config = config;
+        this.filePath = path.join(home, "peer-discovery-jobs.json");
+        this.load();
+    }
+    list() {
+        return [...this.jobs.values()].map((entry) => cloneJob(entry.snapshot))
+            .sort((left, right) => Date.parse(right.createdAt) - Date.parse(left.createdAt));
+    }
+    get(id) {
+        const entry = this.jobs.get(id);
+        return entry ? cloneJob(entry.snapshot) : null;
+    }
+    log(id) {
+        return this.jobs.get(id)?.snapshot.log.join("\n") ?? "";
+    }
+    async start(input = {}) {
+        this.prune();
+        const controller = new AbortController();
+        const options = normalizeInput(this.config, input);
+        const id = randomUUID().replace(/-/g, "").slice(0, 12);
+        const snapshot = {
+            id,
+            status: "queued",
+            createdAt: new Date().toISOString(),
+            scanned: 0,
+            total: await countDiscoveryTargets(this.config, options).catch(() => 0),
+            candidates: [],
+            warnings: [],
+            log: [],
+            options,
+        };
+        const entry = { snapshot, controller };
+        this.jobs.set(id, entry);
+        this.append(entry, `Queued peer discovery job ${id}.`);
+        void this.run(entry).catch((error) => {
+            entry.snapshot.status = controller.signal.aborted ? "cancelled" : "failed";
+            entry.snapshot.error = error instanceof Error ? error.message : String(error);
+            entry.snapshot.completedAt = new Date().toISOString();
+            this.append(entry, entry.snapshot.error);
+        });
+        return cloneJob(snapshot);
+    }
+    cancel(id) {
+        const entry = this.jobs.get(id);
+        if (!entry)
+            return null;
+        if (entry.snapshot.status === "queued" || entry.snapshot.status === "running") {
+            entry.controller.abort();
+            entry.snapshot.status = "cancelled";
+            entry.snapshot.completedAt = new Date().toISOString();
+            this.append(entry, "Cancellation requested.");
+        }
+        return cloneJob(entry.snapshot);
+    }
+    async run(entry) {
+        entry.snapshot.status = "running";
+        entry.snapshot.startedAt = new Date().toISOString();
+        this.append(entry, `Scanning ${entry.snapshot.total} peer endpoint candidate(s).`);
+        const result = await discoverLanPeers(this.config, {
+            ...entry.snapshot.options,
+            signal: entry.controller.signal,
+            onProgress: (progress) => {
+                entry.snapshot.scanned = progress.scanned;
+                if (progress.candidate) {
+                    entry.snapshot.candidates = mergeCandidates(entry.snapshot.candidates, progress.candidate);
+                    this.append(entry, `Found ${progress.candidate.name || progress.candidate.host} at ${progress.candidate.url}.`);
+                }
+                else if (progress.scanned % 25 === 0 || progress.scanned === entry.snapshot.total) {
+                    this.append(entry, `Scanned ${progress.scanned}/${progress.total}.`);
+                }
+            },
+        });
+        entry.snapshot.scanned = result.scanned;
+        entry.snapshot.candidates = result.candidates;
+        entry.snapshot.warnings = result.warnings;
+        entry.snapshot.status = entry.controller.signal.aborted ? "cancelled" : "completed";
+        entry.snapshot.completedAt = new Date().toISOString();
+        this.append(entry, `${entry.snapshot.status === "completed" ? "Completed" : "Cancelled"} with ${result.candidates.length} candidate(s).`);
+        for (const warning of result.warnings) {
+            this.append(entry, `Warning: ${warning}`);
+        }
+    }
+    append(entry, line) {
+        entry.snapshot.log.push(`[${new Date().toLocaleString()}] ${line}`);
+        if (entry.snapshot.log.length > MAX_LOG_LINES) {
+            entry.snapshot.log.splice(0, entry.snapshot.log.length - MAX_LOG_LINES);
+        }
+        this.save();
+    }
+    prune() {
+        const completed = this.list()
+            .filter((job) => job.status !== "running" && job.status !== "queued")
+            .slice(MAX_JOBS);
+        for (const job of completed) {
+            this.jobs.delete(job.id);
+        }
+        this.save();
+    }
+    load() {
+        const result = readJsonFileWithBackup(this.filePath);
+        const jobs = Array.isArray(result.value?.jobs) ? result.value.jobs : [];
+        let changed = false;
+        for (const job of jobs) {
+            const snapshot = normalizePersistedJob(job);
+            if (!snapshot)
+                continue;
+            if (snapshot.status === "queued" || snapshot.status === "running") {
+                snapshot.status = "failed";
+                snapshot.completedAt = new Date().toISOString();
+                snapshot.error = "Discovery job was interrupted by a NordRelay restart.";
+                snapshot.log = [
+                    ...snapshot.log,
+                    `[${new Date().toLocaleString()}] Discovery job was interrupted by a NordRelay restart.`,
+                ].slice(-MAX_LOG_LINES);
+                changed = true;
+            }
+            this.jobs.set(snapshot.id, { snapshot, controller: new AbortController() });
+        }
+        this.prune();
+        if (changed) {
+            this.save();
+        }
+    }
+    save() {
+        const jobs = this.list().slice(0, MAX_JOBS);
+        writeJsonFileAtomic(this.filePath, { version: 1, jobs });
+    }
+}
+function normalizePersistedJob(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return null;
+    const record = value;
+    if (typeof record.id !== "string" || typeof record.createdAt !== "string")
+        return null;
+    const status = typeof record.status === "string" && ["queued", "running", "completed", "failed", "cancelled"].includes(record.status)
+        ? record.status
+        : "failed";
+    const optionsRecord = record.options && typeof record.options === "object" && !Array.isArray(record.options)
+        ? record.options
+        : {};
+    return {
+        id: record.id,
+        status,
+        createdAt: record.createdAt,
+        startedAt: typeof record.startedAt === "string" ? record.startedAt : undefined,
+        completedAt: typeof record.completedAt === "string" ? record.completedAt : undefined,
+        scanned: integerField(record.scanned),
+        total: integerField(record.total),
+        candidates: Array.isArray(record.candidates) ? record.candidates : [],
+        warnings: Array.isArray(record.warnings) ? record.warnings.filter((item) => typeof item === "string") : [],
+        log: Array.isArray(record.log) ? record.log.filter((item) => typeof item === "string").slice(-MAX_LOG_LINES) : [],
+        error: typeof record.error === "string" ? record.error : undefined,
+        options: {
+            targets: Array.isArray(optionsRecord.targets) ? optionsRecord.targets.filter((item) => typeof item === "string") : [],
+            timeoutMs: integerField(optionsRecord.timeoutMs),
+            concurrency: integerField(optionsRecord.concurrency),
+            maxHosts: integerField(optionsRecord.maxHosts),
+        },
+    };
+}
+function integerField(value) {
+    const parsed = typeof value === "number" ? value : Number(value);
+    return Number.isInteger(parsed) && parsed >= 0 ? parsed : 0;
+}
+function normalizeInput(config, input) {
+    return {
+        targets: (input.targets ?? []).map((target) => target.trim()).filter(Boolean),
+        timeoutMs: clampInteger(input.timeoutMs, config.peerDiscoveryTimeoutMs, 100, 30_000),
+        concurrency: clampInteger(input.concurrency, 32, 1, 128),
+        maxHosts: clampInteger(input.maxHosts, 512, 1, 65_536),
+    };
+}
+function clampInteger(value, fallback, min, max) {
+    const parsed = Number(value);
+    return Number.isInteger(parsed) ? Math.max(min, Math.min(max, parsed)) : fallback;
+}
+function mergeCandidates(existing, candidate) {
+    const byNode = new Map(existing.map((item) => [item.nodeId, item]));
+    byNode.set(candidate.nodeId, candidate);
+    return [...byNode.values()].sort((left, right) => (left.name || left.host).localeCompare(right.name || right.host));
+}
+function cloneJob(job) {
+    return {
+        ...job,
+        candidates: job.candidates.map((candidate) => ({ ...candidate })),
+        warnings: [...job.warnings],
+        log: [...job.log],
+        options: {
+            ...job.options,
+            targets: [...job.options.targets],
+        },
+    };
+}