@openagt/dashboard 0.0.0-stage → 0.8.0

package/dist/dashboard/relay-endpoints.d.ts

@@ -0,0 +1,32 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { FrameworkEvent } from '../events.js';
+import type { StartAgentOptions, StartAgentResult } from './types.js';
+/**
+ * The device-side of the remote-agent relay (#1067): the two endpoints a daemon exposes so another
+ * daemon (holding this device's token) can run a session here and watch it. They live under
+ * `/_relay`, behind the shared-token guard (#1051) in {@link startDashboard}. The guard admits a matching
+ * `fw_daemon` cookie without the browser-only `?token=` 302, so a daemon-to-daemon call passes with
+ * a cookie and a token-less caller is already 401'd before it reaches here.
+ *
+ * - `POST /_relay/start`  starts an ordinary local agent and returns its {@link StartAgentResult}. It
+ *   runs in this device's own home checkout (slice 1); which project it targets is a later slice.
+ * - `GET  /_relay/events?run=<id>` streams that agent's events as newline-delimited JSON until it
+ *   ends or the caller disconnects.
+ * - `GET  /_relay/ping` (#1072) a cookie-guarded reachability probe: 200 and an empty body, starts
+ *   nothing. The online/offline status the dashboard shows is the local daemon calling this on each
+ *   saved device with its token; a token-less caller is already 401'd by the shared-token guard (#1051) above.
+ * - `POST /_relay/rpc` (#1067 slice 2) runs one whitelisted run-scoped RPC (a read/diff/steer/handoff/
+ *   push/PR) against this device's own checkout for the daemon relaying an agent here, answering {result}.
+ */
+export declare const RELAY_PREFIX = "/_relay";
+/** What the daemon wires behind the relay endpoints: its own start closure and an events tail. */
+export interface RelayHandlers {
+    start: (prompt: string, options: StartAgentOptions, projectId?: string) => StartAgentResult | Promise<StartAgentResult>;
+    tailEvents: (agentId: string, onEvent: (event: FrameworkEvent) => void) => () => void;
+    /** Run one whitelisted read/steer/handoff RPC against THIS device's own checkout, for the daemon
+     *  relaying an agent here (#1067 slice 2); the caller wraps the result as {result}. */
+    rpc?: (fn: string, args: unknown[]) => Promise<unknown>;
+}
+/** Route a `/_relay/*` request. A host that wired no relay handlers 404s every relay route. */
+export declare function handleRelayRequest(req: IncomingMessage, res: ServerResponse, pathname: string, handlers: RelayHandlers | undefined): Promise<void>;
+//# sourceMappingURL=relay-endpoints.d.ts.map

package/dist/dashboard/relay-endpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-endpoints.d.ts","sourceRoot":"","sources":["../../src/dashboard/relay-endpoints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAGrE;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,YAAY,YAAY,CAAA;AAErC,kGAAkG;AAClG,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACvH,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,KAAK,MAAM,IAAI,CAAA;IACrF;2FACuF;IACvF,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACxD;AAUD,+FAA+F;AAC/F,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,aAAa,GAAG,SAAS,GAClC,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/dashboard/relay-endpoints.js

@@ -0,0 +1,115 @@
+import { end, readJsonBody, requireGet, sendJson } from './http.js';
+/**
+ * The device-side of the remote-agent relay (#1067): the two endpoints a daemon exposes so another
+ * daemon (holding this device's token) can run a session here and watch it. They live under
+ * `/_relay`, behind the shared-token guard (#1051) in {@link startDashboard}. The guard admits a matching
+ * `fw_daemon` cookie without the browser-only `?token=` 302, so a daemon-to-daemon call passes with
+ * a cookie and a token-less caller is already 401'd before it reaches here.
+ *
+ * - `POST /_relay/start`  starts an ordinary local agent and returns its {@link StartAgentResult}. It
+ *   runs in this device's own home checkout (slice 1); which project it targets is a later slice.
+ * - `GET  /_relay/events?run=<id>` streams that agent's events as newline-delimited JSON until it
+ *   ends or the caller disconnects.
+ * - `GET  /_relay/ping` (#1072) a cookie-guarded reachability probe: 200 and an empty body, starts
+ *   nothing. The online/offline status the dashboard shows is the local daemon calling this on each
+ *   saved device with its token; a token-less caller is already 401'd by the shared-token guard (#1051) above.
+ * - `POST /_relay/rpc` (#1067 slice 2) runs one whitelisted run-scoped RPC (a read/diff/steer/handoff/
+ *   push/PR) against this device's own checkout for the daemon relaying an agent here, answering {result}.
+ */
+export const RELAY_PREFIX = '/_relay';
+const MAX_START_BODY = 256 * 1024;
+/** Route a `/_relay/*` request. A host that wired no relay handlers 404s every relay route. */
+export async function handleRelayRequest(req, res, pathname, handlers) {
+    // Ping is a pure reachability + auth probe (#1072): it needs no wired handlers and starts nothing,
+    // so it answers even on a host that enabled no relay. Reaching here means the cookie already passed.
+    if (pathname === `${RELAY_PREFIX}/ping`)
+        return handlePing(req, res);
+    if (!handlers)
+        return end(res, 404, 'relay not enabled');
+    if (pathname === `${RELAY_PREFIX}/start`)
+        return handleStart(req, res, handlers);
+    if (pathname === `${RELAY_PREFIX}/events`)
+        return handleEvents(req, res, handlers);
+    if (pathname === `${RELAY_PREFIX}/rpc`)
+        return handleRpc(req, res, handlers);
+    end(res, 404, 'not found');
+}
+/** `GET /_relay/ping` (#1072): answer 200 with an empty body. Starts nothing; only proves this
+ * daemon is reachable and the caller's cookie is valid (the shared-token guard (#1051) already enforced that). */
+function handlePing(req, res) {
+    if (!requireGet(req, res))
+        return;
+    end(res, 200, '');
+}
+/** `POST /_relay/start`: read the agent request, start it locally, and answer with the result JSON. */
+async function handleStart(req, res, handlers) {
+    if (req.method !== 'POST')
+        return end(res, 405, 'method not allowed', { allow: 'POST' });
+    let body;
+    try {
+        body = (await readJsonBody(req, MAX_START_BODY));
+    }
+    catch {
+        return end(res, 400, 'invalid request body');
+    }
+    const prompt = typeof body.prompt === 'string' ? body.prompt : '';
+    const options = (body.options && typeof body.options === 'object' ? body.options : {});
+    // Never relay onward from a relayed agent: strip any nested target before starting it here.
+    // And a start relayed to a device never names a branch: the caller's branches are not this machine's.
+    const { remote: _drop, base: _callers, ...local } = options;
+    let result;
+    try {
+        result = await handlers.start(prompt, local, undefined);
+    }
+    catch (err) {
+        result = { ok: false, error: err instanceof Error ? err.message : String(err) };
+    }
+    sendJson(res, result);
+}
+/** `GET /_relay/events?run=<id>`: stream the agent's events as newline-delimited JSON. */
+function handleEvents(req, res, handlers) {
+    if (!requireGet(req, res))
+        return;
+    const agentId = new URL(req.url ?? '/', 'http://localhost').searchParams.get('run');
+    if (!agentId)
+        return end(res, 400, 'missing run id');
+    res.writeHead(200, { 'content-type': 'application/x-ndjson', 'cache-control': 'no-cache' });
+    const stop = handlers.tailEvents(agentId, event => {
+        // A dropped write (the caller went away mid-line) must not throw out of the tail callback.
+        try {
+            res.write(`${JSON.stringify(event)}\n`);
+        }
+        catch {
+            // the socket is gone; the close handler below tears the tail down
+        }
+    });
+    const close = () => stop();
+    res.on('close', close);
+    req.on('close', close);
+}
+const MAX_RPC_BODY = 256 * 1024;
+/** POST /_relay/rpc: run one whitelisted RPC on this device and answer {result}. */
+async function handleRpc(req, res, handlers) {
+    if (req.method !== 'POST')
+        return end(res, 405, 'method not allowed', { allow: 'POST' });
+    if (!handlers.rpc)
+        return end(res, 404, 'relay rpc not enabled');
+    let body;
+    try {
+        body = (await readJsonBody(req, MAX_RPC_BODY));
+    }
+    catch {
+        return end(res, 400, 'invalid request body');
+    }
+    const fn = typeof body.fn === 'string' ? body.fn : '';
+    const args = Array.isArray(body.args) ? body.args : [];
+    if (!fn)
+        return end(res, 400, 'missing rpc name');
+    try {
+        sendJson(res, { result: await handlers.rpc(fn, args) });
+    }
+    catch (err) {
+        end(res, 500, err instanceof Error ? err.message : 'rpc failed');
+    }
+}
+//# sourceMappingURL=relay-endpoints.js.map

package/dist/dashboard/relay-endpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-endpoints.js","sourceRoot":"","sources":["../../src/dashboard/relay-endpoints.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAEnE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAA;AAiBrC,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAA;AAEjC,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAoB,EACpB,GAAmB,EACnB,QAAgB,EAChB,QAAmC;IAEnC,mGAAmG;IACnG,qGAAqG;IACrG,IAAI,QAAQ,KAAK,GAAG,YAAY,OAAO;QAAE,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACpE,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAA;IACxD,IAAI,QAAQ,KAAK,GAAG,YAAY,QAAQ;QAAE,OAAO,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;IAChF,IAAI,QAAQ,KAAK,GAAG,YAAY,SAAS;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;IAClF,IAAI,QAAQ,KAAK,GAAG,YAAY,MAAM;QAAE,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;IAC5E,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAA;AAC5B,CAAC;AAED;kHACkH;AAClH,SAAS,UAAU,CAAC,GAAoB,EAAE,GAAmB;IAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;QAAE,OAAM;IACjC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;AACnB,CAAC;AAED,uGAAuG;AACvG,KAAK,UAAU,WAAW,CAAC,GAAoB,EAAE,GAAmB,EAAE,QAAuB;IAC3F,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACxF,IAAI,IAAoB,CAAA;IACxB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,cAAc,CAAC,CAAmB,CAAA;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;IAC9C,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;IACjE,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAsB,CAAA;IAC3G,4FAA4F;IAC5F,sGAAsG;IACtG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,CAAA;IAC3D,IAAI,MAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;IACjF,CAAC;IACD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AACvB,CAAC;AAED,0FAA0F;AAC1F,SAAS,YAAY,CAAC,GAAoB,EAAE,GAAmB,EAAE,QAAuB;IACtF,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;QAAE,OAAM;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACnF,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAA;IACpD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,sBAAsB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAA;IAC3F,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;QAChD,2FAA2F;QAC3F,IAAI,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;IACH,CAAC,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,IAAI,EAAE,CAAA;IAChC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACtB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,YAAY,GAAG,GAAG,GAAG,IAAI,CAAA;AAC/B,oFAAoF;AACpF,KAAK,UAAU,SAAS,CAAC,GAAoB,EAAE,GAAmB,EAAE,QAAuB;IACzF,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACxF,IAAI,CAAC,QAAQ,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAA;IAChE,IAAI,IAAsC,CAAA;IAC1C,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,CAAqC,CAAA;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;IAC9C,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACrD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IACtD,IAAI,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAA;IACjD,IAAI,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAClE,CAAC;AACH,CAAC"}

package/dist/dashboard/remote-run.d.ts

@@ -0,0 +1,95 @@
+import { EventStream } from '../event-stream.js';
+import type { FrameworkEvent } from '../events.js';
+import type { AgentMeta } from '../store/index.js';
+import type { StartAgentOptions, StartAgentResult } from './types.js';
+/**
+ * The server-side half of "run on a connected device" (#1067). The local daemon holds the saved
+ * device's token, so it - not the browser - drives the remote daemon: it POSTs the agent to the
+ * remote's `/_relay/start` and then fetch-streams the remote's `/_relay/events` back into a local
+ * {@link EventStream}, which the dashboard reads over its normal same-origin `onEvents` channel. So
+ * the browser never talks cross-origin and the token never leaves the two daemons (issue #1067 (b)).
+ *
+ * Authentication is the shared-token cookie (#1051), sent daemon-to-daemon: `Cookie: fw_daemon=<token>` with no
+ * `Origin` header. The remote's guard admits a matching cookie without the browser-only `?token=`
+ * 302, and its `/_rpc` CSRF check (absent Origin passes) is not even on these raw routes.
+ */
+/** Where a relayed agent executes: the remote daemon's origin and its #1051 token. Memory-only. */
+export interface RemoteTarget {
+    url: string;
+    token: string;
+}
+/** The body a relay start forwards to the remote's `/_relay/start`. */
+export interface RelayStartBody {
+    prompt: string;
+    options: StartAgentOptions;
+}
+/**
+ * Health-check a saved device (#1072): a cookie'd `GET /_relay/ping`, true on any 2xx, false on a
+ * non-2xx, an unreachable host, or the timeout. The token stays in memory for the check only, never
+ * persisted, same as {@link startRemoteAgent}. This is how the browser's status dots learn reachable
+ * from not: it has the tokens, the daemon does the cross-origin request.
+ */
+export declare function pingRemote(target: RemoteTarget): Promise<boolean>;
+/**
+ * Start an agent on the remote daemon and return its {@link StartAgentResult} (with the remote's own run
+ * id). A non-2xx or a transport failure surfaces as an `ok: false` result the dashboard shows, the
+ * same shape a local refusal has, so the caller does not special-case remote errors.
+ */
+export declare function startRemoteAgent(target: RemoteTarget, body: RelayStartBody): Promise<StartAgentResult>;
+/**
+ * Relay one run-scoped RPC to the device that owns a remote agent (#1067 slice 2). The local daemon
+ * holds the device token, so a read/diff/handoff/push/PR for a relayed agent runs ON the device: POST
+ * {fn, args} to the remote's /_relay/rpc over the shared-token cookie (#1051) (no Origin), returning the device's
+ * result. Throws on an unreachable device or a non-2xx so the caller falls back to its own empty/error
+ * shape, the same way a failed local read does.
+ */
+export declare function relayRpc(target: RemoteTarget, fn: string, args: unknown[]): Promise<unknown>;
+/**
+ * Fetch-stream a remote agent's newline-delimited events into `onEvent` until the remote closes the
+ * body, the agent ends, or `cancel()` is called. A 401 (the token was rotated) ends the stream
+ * cleanly rather than as an error, so the dashboard sees a normal `done`, not a lost connection.
+ * Returns a cancel function; calling it aborts the fetch and releases the reader.
+ */
+export declare function streamRemoteEvents(target: RemoteTarget, agentId: string, onEvent: (event: FrameworkEvent) => void, onEnd?: () => void): () => void;
+/**
+ * The local daemon's live relayed runs (#1067), keyed by the remote agent id. Registering an agent opens
+ * an {@link EventStream} the dashboard reads through `onEvents`, fed by {@link streamRemoteEvents}
+ * from the remote. This map is where a saved device's token lives daemon-side: in memory, for the
+ * run's lifetime.
+ *
+ * The `targets` map outlives the event pump (#1067 slice 2): a finished remote agent's post-run reads,
+ * open-PR and merge still have to reach the device after its event stream has ended, so the device
+ * target is kept until {@link dispose} clears it, not dropped when the stream closes.
+ *
+ * The `metas` map (#1077) holds a local {@link AgentMeta} stub per relayed agent so `onAgents` can show a
+ * remote run in the session list and re-open it after a dashboard reload; {@link list} projects it
+ * per project. Same lifetime as `targets`: it outlives the event stream and is cleared on dispose.
+ */
+export declare class RelayedAgents {
+    private readonly agents;
+    private readonly targets;
+    private readonly metas;
+    /** Open a local stream for a remote agent and start pumping the remote's events into it. */
+    register(agentId: string, target: RemoteTarget, meta: AgentMeta, projectId: string): void;
+    /** The live event stream for a relayed agent, or undefined when this daemon is not relaying it. */
+    get(agentId: string | undefined): EventStream<FrameworkEvent> | undefined;
+    /** The device a relayed agent runs on, kept past the event stream so post-run push/PR still reach it. */
+    target(agentId: string | undefined): RemoteTarget | undefined;
+    /** A project's relayed run stubs (#1077), newest-first, so `onAgents` can surface them in the list. */
+    list(projectId: string): AgentMeta[];
+    /** Fold each relayed event into the agent's list row via the store's own reducer (#1077), so the
+     *  local stub mirrors the device: the terminal status on `end`, the waiting flag while it is parked
+     *  (#785), the driver once its session starts. Events carry no write time, so this stamps its own. */
+    private apply;
+    /** Close a relayed agent's event stream (not its target). Idempotent. */
+    private endStream;
+    /** Stop every pump, close every stream, and forget every device target + list stub, on daemon shutdown. */
+    dispose(): void;
+}
+/**
+ * Fold one relayed event into the memory-only row of a run on a device: what the device's own
+ * card would say, kept here because that card is on the device. The events are the ones a run's
+ * diary yields: the agent's session id, its cost, its end.
+ */
+export declare function foldRelayedEvent(meta: AgentMeta, event: FrameworkEvent, at: string): AgentMeta;
+//# sourceMappingURL=remote-run.d.ts.map

package/dist/dashboard/remote-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-run.d.ts","sourceRoot":"","sources":["../../src/dashboard/remote-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAGrE;;;;;;;;;;GAUG;AAEH,mGAAmG;AACnG,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;CACd;AAED,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,iBAAiB,CAAA;CAC3B;AAOD;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAUvE;AAOD;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAa5G;AAID;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAUlG;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,EACxC,KAAK,CAAC,EAAE,MAAM,IAAI,GACjB,MAAM,IAAI,CAwCZ;AAmBD;;;;;;;;;;;;;GAaG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkC;IACzD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAG1D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4D;IAElF,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAUxF;IAED,mGAAmG;IACnG,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC,cAAc,CAAC,GAAG,SAAS,CAExE;IAED,yGAAyG;IACzG,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAE5D;IAED,uGAAuG;IACvG,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,CAKnC;IAED;;0GAEsG;IACtG,OAAO,CAAC,KAAK;IAMb,yEAAyE;IACzE,OAAO,CAAC,SAAS;IAUjB,2GAA2G;IAC3G,OAAO,IAAI,IAAI,CAQd;CACF;AAOD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,GAAG,SAAS,CAS9F"}

package/dist/dashboard/remote-run.js

@@ -0,0 +1,235 @@
+import { EventStream } from '../event-stream.js';
+import { errorMessage } from '../error-message.js';
+const START_TIMEOUT_MS = 15_000;
+/** How long a status ping waits before calling a device offline (#1072): short, since it polls. */
+const PING_TIMEOUT_MS = 3_000;
+/**
+ * Health-check a saved device (#1072): a cookie'd `GET /_relay/ping`, true on any 2xx, false on a
+ * non-2xx, an unreachable host, or the timeout. The token stays in memory for the check only, never
+ * persisted, same as {@link startRemoteAgent}. This is how the browser's status dots learn reachable
+ * from not: it has the tokens, the daemon does the cross-origin request.
+ */
+export async function pingRemote(target) {
+    try {
+        const res = await fetch(`${trimSlashes(target.url)}/_relay/ping`, {
+            headers: { cookie: `fw_daemon=${target.token}` },
+            signal: AbortSignal.timeout(PING_TIMEOUT_MS),
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+}
+/** The two headers every relay request carries: JSON, and the shared-token cookie (#1051). No Origin on purpose. */
+function relayHeaders(token) {
+    return { 'content-type': 'application/json', cookie: `fw_daemon=${token}` };
+}
+/**
+ * Start an agent on the remote daemon and return its {@link StartAgentResult} (with the remote's own run
+ * id). A non-2xx or a transport failure surfaces as an `ok: false` result the dashboard shows, the
+ * same shape a local refusal has, so the caller does not special-case remote errors.
+ */
+export async function startRemoteAgent(target, body) {
+    try {
+        const res = await fetch(`${trimSlashes(target.url)}/_relay/start`, {
+            method: 'POST',
+            headers: relayHeaders(target.token),
+            body: JSON.stringify(body),
+            signal: AbortSignal.timeout(START_TIMEOUT_MS),
+        });
+        if (!res.ok)
+            return { ok: false, error: `the device refused the run (${res.status})` };
+        return (await res.json());
+    }
+    catch (err) {
+        return { ok: false, error: `could not reach the device: ${errorMessage(err)}` };
+    }
+}
+const RPC_TIMEOUT_MS = 60_000; // a relayed git push/PR runs over the network on the device
+/**
+ * Relay one run-scoped RPC to the device that owns a remote agent (#1067 slice 2). The local daemon
+ * holds the device token, so a read/diff/handoff/push/PR for a relayed agent runs ON the device: POST
+ * {fn, args} to the remote's /_relay/rpc over the shared-token cookie (#1051) (no Origin), returning the device's
+ * result. Throws on an unreachable device or a non-2xx so the caller falls back to its own empty/error
+ * shape, the same way a failed local read does.
+ */
+export async function relayRpc(target, fn, args) {
+    const res = await fetch(`${trimSlashes(target.url)}/_relay/rpc`, {
+        method: 'POST',
+        headers: relayHeaders(target.token),
+        body: JSON.stringify({ fn, args }),
+        signal: AbortSignal.timeout(RPC_TIMEOUT_MS),
+    });
+    if (!res.ok)
+        throw new Error(`the device refused the request (${res.status})`);
+    const body = (await res.json());
+    return body.result;
+}
+/**
+ * Fetch-stream a remote agent's newline-delimited events into `onEvent` until the remote closes the
+ * body, the agent ends, or `cancel()` is called. A 401 (the token was rotated) ends the stream
+ * cleanly rather than as an error, so the dashboard sees a normal `done`, not a lost connection.
+ * Returns a cancel function; calling it aborts the fetch and releases the reader.
+ */
+export function streamRemoteEvents(target, agentId, onEvent, onEnd) {
+    const controller = new AbortController();
+    let ended = false;
+    const end = () => {
+        if (ended)
+            return;
+        ended = true;
+        onEnd?.();
+    };
+    void (async () => {
+        try {
+            const url = `${trimSlashes(target.url)}/_relay/events?run=${encodeURIComponent(agentId)}`;
+            const res = await fetch(url, { headers: relayHeaders(target.token), signal: controller.signal });
+            // 401 = the device rotated its token. Nothing more will stream; end cleanly (a done, not a loss).
+            if (!res.ok || !res.body)
+                return end();
+            const reader = res.body.getReader();
+            const decoder = new TextDecoder();
+            let buffer = '';
+            for (;;) {
+                const { value, done } = await reader.read();
+                if (done)
+                    break;
+                buffer += decoder.decode(value, { stream: true });
+                // Emit every complete line, keeping the trailing partial for the next chunk.
+                let newline = buffer.indexOf('\n');
+                while (newline !== -1) {
+                    emitLine(buffer.slice(0, newline), onEvent);
+                    buffer = buffer.slice(newline + 1);
+                    newline = buffer.indexOf('\n');
+                }
+            }
+            emitLine(buffer, onEvent); // a final line with no trailing newline
+        }
+        catch {
+            // Aborted by cancel(), or the transport dropped: either way the stream is over.
+        }
+        finally {
+            end();
+        }
+    })();
+    return () => {
+        controller.abort();
+        end();
+    };
+}
+/** Parse one NDJSON line as a {@link FrameworkEvent} and forward it; a blank or malformed line is skipped. */
+function emitLine(line, onEvent) {
+    const trimmed = line.trim();
+    if (!trimmed)
+        return;
+    try {
+        onEvent(JSON.parse(trimmed));
+    }
+    catch {
+        // A partial or malformed line is dropped rather than crashing the pump.
+    }
+}
+/**
+ * The local daemon's live relayed runs (#1067), keyed by the remote agent id. Registering an agent opens
+ * an {@link EventStream} the dashboard reads through `onEvents`, fed by {@link streamRemoteEvents}
+ * from the remote. This map is where a saved device's token lives daemon-side: in memory, for the
+ * run's lifetime.
+ *
+ * The `targets` map outlives the event pump (#1067 slice 2): a finished remote agent's post-run reads,
+ * open-PR and merge still have to reach the device after its event stream has ended, so the device
+ * target is kept until {@link dispose} clears it, not dropped when the stream closes.
+ *
+ * The `metas` map (#1077) holds a local {@link AgentMeta} stub per relayed agent so `onAgents` can show a
+ * remote run in the session list and re-open it after a dashboard reload; {@link list} projects it
+ * per project. Same lifetime as `targets`: it outlives the event stream and is cleared on dispose.
+ */
+export class RelayedAgents {
+    agents = new Map();
+    targets = new Map();
+    // The local AgentMeta stub for each relayed agent, so onAgents can show a remote agent in the session list
+    // and re-open it after a reload; outlives the event stream, cleared on dispose (same lifetime as targets).
+    metas = new Map();
+    /** Open a local stream for a remote agent and start pumping the remote's events into it. */
+    register(agentId, target, meta, projectId) {
+        this.targets.set(agentId, target); // kept past the stream, for post-run reads/push/PR (slice 2)
+        this.metas.set(agentId, { meta, projectId }); // the local list row, so a reload re-opens the run (#1077)
+        this.agents.get(agentId)?.cancel(); // a re-register (same id) replaces the old pump
+        const stream = new EventStream();
+        const cancel = streamRemoteEvents(target, agentId, event => {
+            stream.push(event);
+            this.apply(agentId, event); // fold the event into the run's list row, mirroring the device
+        }, () => this.endStream(agentId));
+        this.agents.set(agentId, { target, stream, cancel });
+    }
+    /** The live event stream for a relayed agent, or undefined when this daemon is not relaying it. */
+    get(agentId) {
+        return agentId ? this.agents.get(agentId)?.stream : undefined;
+    }
+    /** The device a relayed agent runs on, kept past the event stream so post-run push/PR still reach it. */
+    target(agentId) {
+        return agentId ? this.targets.get(agentId) : undefined;
+    }
+    /** A project's relayed run stubs (#1077), newest-first, so `onAgents` can surface them in the list. */
+    list(projectId) {
+        const rows = [];
+        for (const entry of this.metas.values())
+            if (entry.projectId === projectId)
+                rows.push(entry.meta);
+        // Newest first: startedAt is ISO, so a string compare is the time order (no parse).
+        return rows.sort((a, b) => (a.startedAt < b.startedAt ? 1 : a.startedAt > b.startedAt ? -1 : 0));
+    }
+    /** Fold each relayed event into the agent's list row via the store's own reducer (#1077), so the
+     *  local stub mirrors the device: the terminal status on `end`, the waiting flag while it is parked
+     *  (#785), the driver once its session starts. Events carry no write time, so this stamps its own. */
+    apply(agentId, event) {
+        const entry = this.metas.get(agentId);
+        if (!entry)
+            return;
+        entry.meta = foldRelayedEvent(entry.meta, event, new Date().toISOString());
+    }
+    /** Close a relayed agent's event stream (not its target). Idempotent. */
+    endStream(agentId) {
+        const agent = this.agents.get(agentId);
+        if (!agent)
+            return;
+        this.agents.delete(agentId);
+        agent.stream.close(); // a clean close surfaces as `done` in the browser, not a lost stream
+        // The stream dropped with no terminal event: the agent is no longer live, so stop showing it as such.
+        const entry = this.metas.get(agentId);
+        if (entry && entry.meta.status === 'running')
+            entry.meta.status = 'stopped';
+    }
+    /** Stop every pump, close every stream, and forget every device target + list stub, on daemon shutdown. */
+    dispose() {
+        for (const [agentId, agent] of this.agents) {
+            agent.cancel();
+            agent.stream.close();
+            this.agents.delete(agentId);
+        }
+        this.targets.clear();
+        this.metas.clear();
+    }
+}
+/** Trim trailing slashes off a base URL so `${base}/_relay/...` never doubles them. */
+function trimSlashes(url) {
+    return url.replace(/\/+$/, '');
+}
+/**
+ * Fold one relayed event into the memory-only row of a run on a device: what the device's own
+ * card would say, kept here because that card is on the device. The events are the ones a run's
+ * diary yields: the agent's session id, its cost, its end.
+ */
+export function foldRelayedEvent(meta, event, at) {
+    const next = { ...meta, updatedAt: at };
+    if (event.kind === 'session-update')
+        next.sessionId = event.sessionId;
+    else if (event.kind === 'usage')
+        next.cost = (next.cost ?? 0) + event.costUsd;
+    else if (event.kind === 'end') {
+        next.status = event.ok ? 'done' : event.stopped ? 'stopped' : event.waiting ? 'waiting' : 'failed';
+        next.endedAt = at;
+    }
+    return next;
+}
+//# sourceMappingURL=remote-run.js.map

package/dist/dashboard/remote-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-run.js","sourceRoot":"","sources":["../../src/dashboard/remote-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAIhD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AA0BlD,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAE/B,mGAAmG;AACnG,MAAM,eAAe,GAAG,KAAK,CAAA;AAE7B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAoB;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE;YAChE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,MAAM,CAAC,KAAK,EAAE,EAAE;YAChD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC;SAC7C,CAAC,CAAA;QACF,OAAO,GAAG,CAAC,EAAE,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,oHAAoH;AACpH,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,aAAa,KAAK,EAAE,EAAE,CAAA;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAoB,EAAE,IAAoB;IAC/E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC;YACnC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,GAAG,CAAC,MAAM,GAAG,EAAE,CAAA;QACtF,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAA;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,CAAA;IACjF,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,MAAM,CAAA,CAAC,4DAA4D;AAE1F;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAoB,EAAE,EAAU,EAAE,IAAe;IAC9E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE;QAC/D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAClC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC;KAC5C,CAAC,CAAA;IACF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IAC9E,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAA;IACvD,OAAO,IAAI,CAAC,MAAM,CAAA;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAoB,EACpB,OAAe,EACf,OAAwC,EACxC,KAAkB;IAElB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,MAAM,GAAG,GAAG,GAAS,EAAE;QACrB,IAAI,KAAK;YAAE,OAAM;QACjB,KAAK,GAAG,IAAI,CAAA;QACZ,KAAK,EAAE,EAAE,CAAA;IACX,CAAC,CAAA;IACD,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,sBAAsB,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAA;YACzF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;YAChG,kGAAkG;YAClG,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,OAAO,GAAG,EAAE,CAAA;YACtC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;YACnC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;YACjC,IAAI,MAAM,GAAG,EAAE,CAAA;YACf,SAAS,CAAC;gBACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBAC3C,IAAI,IAAI;oBAAE,MAAK;gBACf,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;gBACjD,6EAA6E;gBAC7E,IAAI,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAClC,OAAO,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC;oBACtB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;oBAC3C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;oBAClC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAChC,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA,CAAC,wCAAwC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,gFAAgF;QAClF,CAAC;gBAAS,CAAC;YACT,GAAG,EAAE,CAAA;QACP,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IACJ,OAAO,GAAG,EAAE;QACV,UAAU,CAAC,KAAK,EAAE,CAAA;QAClB,GAAG,EAAE,CAAA;IACP,CAAC,CAAA;AACH,CAAC;AAED,8GAA8G;AAC9G,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAwC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAM;IACpB,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;AACH,CAAC;AAQD;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,aAAa;IACP,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAA;IACxC,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC1D,2GAA2G;IAC3G,2GAA2G;IAC1F,KAAK,GAAG,IAAI,GAAG,EAAkD,CAAA;IAElF,4FAA4F;IAC5F,QAAQ,CAAC,OAAe,EAAE,MAAoB,EAAE,IAAe,EAAE,SAAiB;QAChF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA,CAAC,6DAA6D;QAC/F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA,CAAC,2DAA2D;QACxG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA,CAAC,gDAAgD;QACnF,MAAM,MAAM,GAAG,IAAI,WAAW,EAAkB,CAAA;QAChD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;YACzD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAClB,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA,CAAC,+DAA+D;QAC5F,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;QACjC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,mGAAmG;IACnG,GAAG,CAAC,OAA2B;QAC7B,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/D,CAAC;IAED,yGAAyG;IACzG,MAAM,CAAC,OAA2B;QAChC,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,CAAC;IAED,uGAAuG;IACvG,IAAI,CAAC,SAAiB;QACpB,MAAM,IAAI,GAAgB,EAAE,CAAA;QAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YAAE,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACjG,oFAAoF;QACpF,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAClG,CAAC;IAED;;0GAEsG;IAC9F,KAAK,CAAC,OAAe,EAAE,KAAqB;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACrC,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,KAAK,CAAC,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;IAC5E,CAAC;IAED,yEAAyE;IACjE,SAAS,CAAC,OAAe;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACtC,IAAI,CAAC,KAAK;YAAE,OAAM;QAClB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC3B,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA,CAAC,qEAAqE;QAC1F,sGAAsG;QACtG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACrC,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;IAC7E,CAAC;IAED,2GAA2G;IAC3G,OAAO;QACL,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3C,KAAK,CAAC,MAAM,EAAE,CAAA;YACd,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;YACpB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC7B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACpB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;CACF;AAED,uFAAuF;AACvF,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAe,EAAE,KAAqB,EAAE,EAAU;IACjF,MAAM,IAAI,GAAc,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAClD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAA;SAChE,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAA;SACxE,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;QAClG,IAAI,CAAC,OAAO,GAAG,EAAE,CAAA;IACnB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/dashboard/rpc-serve.d.ts

@@ -0,0 +1,103 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { FrameworkEvent } from '../events.js';
+import type { PreferencesStore } from '../registry.js';
+import type { QuotaSource } from './quota.js';
+import type { ModelsSource } from './models.js';
+import type { BridgeBrowserOwner } from '../bridge-browser.js';
+import type { ProjectErrorsReader } from '../project-errors.js';
+import type { AddProjectResult, StartAgentOptions, StartAgentResult } from './types.js';
+import type { AgentMeta } from '../store/index.js';
+/** Wired by the daemon so `sendStart` can reach the daemon's own `startAgent` closure. */
+export type StartAgentHandler = (prompt: string, options: StartAgentOptions, projectId?: string) => StartAgentResult | Promise<StartAgentResult>;
+/** Wired by the daemon so `sendAddProject` can install + register a repo (#433). */
+export type AddProjectHandler = (path: string) => AddProjectResult | Promise<AddProjectResult>;
+/** Resolve an agent to its live event stream: the relay feeds `onEvents` from its own in-memory stream
+ * rather than a file on disk (#426), and the daemon feeds an agent it is relaying from a device (#1067).
+ * Returns undefined when there is no in-memory stream, so `onEvents` falls back to tailing the log. */
+export type EventsSource = (projectId: string, agentId?: string) => AsyncIterable<FrameworkEvent> | undefined;
+/** Look up the device a relayed agent (#1067) executes on, or undefined for an ordinary local agent. The
+ *  daemon wires this from its live relayed-agent map; a run-scoped RPC uses it to forward a remote agent's
+ *  read/steer/handoff to that device instead of resolving a (nonexistent) local checkout. */
+export interface RemoteAgents {
+    target(agentId: string | undefined): {
+        url: string;
+        token: string;
+    } | undefined;
+    /** A project's relayed run stubs (#1077), so `onAgents` can show a remote agent in the list and re-open it after a reload. */
+    list(projectId: string): AgentMeta[];
+}
+/**
+ * What every RPC acts through.
+ *
+ * Every field is required (D3). These used to be optional because three hosts served this same
+ * surface — the daemon, a per-session foreground dashboard, and a public relay — each wiring a
+ * different subset, so every RPC carried an "absent capability" branch and the client rendered a
+ * degradation matrix. There is one host now, and it wires all of it.
+ */
+export interface DashboardContext {
+    startAgent: StartAgentHandler;
+    addProject: AddProjectHandler;
+    /** The in-memory event stream for an agent relayed from a connected device (#1067), else undefined. */
+    eventsSource: EventsSource;
+    /** The relayed-agent lookup (#1067 slice 2), so a run-scoped RPC can tell a local agent from one
+     *  running on a connected device and forward the call there. */
+    remote: RemoteAgents;
+    /** The user-preferences store (#410), over the registry file. */
+    preferences: PreferencesStore;
+    /** The quota source behind the usage panel (#533). */
+    quota: QuotaSource;
+    /** Which models each coding agent offers, for the agent and model menu. */
+    models: ModelsSource;
+    /** What a project currently suffers from (#1500): the daemon's error state, read per project. */
+    projectErrors: ProjectErrorsReader;
+    /** The daemon's own bridge browser (#1332): status, and show/hide/restart on request. */
+    bridgeBrowser: BridgeBrowserOwner;
+}
+/**
+ * CSRF guard for the state-changing RPCs. A browser attaches an `Origin`
+ * header to every cross-site request, so we reject any POST whose Origin is not this
+ * same server (or a loopback host) — otherwise a page on `evil.com` could `fetch()` the
+ * localhost dashboard and start or steer a run. An absent Origin means a non-browser caller
+ * (curl, the test suite) with no ambient session to abuse, so it passes. Lives here beside
+ * the mount, its only caller.
+ */
+export declare function isSameOriginRequest(req: IncomingMessage): boolean;
+/**
+ * DNS-rebinding guard, the other half of the CSRF check above. A page on `evil.com` whose DNS
+ * re-answers as `127.0.0.1` is *same-origin* with this server as far as the browser is concerned,
+ * so its `fetch()` takes the passing branch of {@link isSameOriginRequest} — and every RPC behind
+ * the mount, `sendStart` included, is reachable from a page the user merely visited.
+ *
+ * The `Host` header is what still gives the attacker away: it carries the name the browser was
+ * asked for (`evil.com`), not the address it resolved to. So when we are bound to loopback, the
+ * only `Host` a real user's browser can send is a loopback one (or the bound address itself) —
+ * anything else is a rebound name and is rejected. An absent `Host` is rejected too when we are
+ * enforcing: HTTP/1.1 requires it, and every browser sends it.
+ *
+ * A non-loopback bind (`--host`, #1051) is reached by a hostname we cannot predict, so there is
+ * no allowlist to check against; that case gates behind the shared daemon token instead. Hosts
+ * that never pass a bind host at all (the relay, which serves a public domain) are unaffected.
+ */
+export declare function isExpectedHost(req: IncomingMessage, boundHost: string | undefined): boolean;
+/** Where the dashboard's RPCs live. One prefix, so the static handler can decline it by path. */
+export declare const RPC_PREFIX = "/_rpc";
+/**
+ * Mount the dashboard's RPC surface (#405) on the daemon's `node:http` server: `POST /_rpc/<name>`
+ * for the calls, `GET /_rpc/events` for the live stream. It runs in the daemon process, so
+ * `sendStart` reaches the daemon's own `startAgent` through the wired {@link DashboardContext}.
+ *
+ * Cross-origin POSTs are rejected (CSRF: a page on evil.com must not steer or start a session), as
+ * are requests carrying someone else's `Host` when we are bound to loopback (DNS rebinding: the
+ * same page must not reach us by pointing its own name at `127.0.0.1`). Pass `opts.host` — the
+ * address the server is bound to — to enable that second check. Returns whether the request was
+ * the RPC surface's.
+ *
+ * This replaced Telefunc (F3), which required a build-time transform over every `.telefunc.ts`
+ * file, a registration table pinning each RPC to the client-baked key of the *dashboard* source
+ * path it was re-exported from, and a request-context indirection for wiring that never varied
+ * per request. What it bought over this was type-safety across a package boundary that A7 removed.
+ */
+export declare function makeRpcMount(context: DashboardContext, opts?: {
+    host?: string;
+}): (req: IncomingMessage, res: ServerResponse) => Promise<boolean>;
+//# sourceMappingURL=rpc-serve.d.ts.map

package/dist/dashboard/rpc-serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-serve.d.ts","sourceRoot":"","sources":["../../src/dashboard/rpc-serve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAKhE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AACvF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAElD,0FAA0F;AAC1F,MAAM,MAAM,iBAAiB,GAAG,CAC9B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,EAC1B,SAAS,CAAC,EAAE,MAAM,KACf,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;AAEjD,oFAAoF;AACpF,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;AAE9F;;uGAEuG;AACvG,MAAM,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,aAAa,CAAC,cAAc,CAAC,GAAG,SAAS,CAAA;AAE7G;;6FAE6F;AAC7F,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;IAC/E,8HAA8H;IAC9H,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,CAAA;CACrC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,iBAAiB,CAAA;IAC7B,UAAU,EAAE,iBAAiB,CAAA;IAC7B,uGAAuG;IACvG,YAAY,EAAE,YAAY,CAAA;IAC1B;oEACgE;IAChE,MAAM,EAAE,YAAY,CAAA;IACpB,iEAAiE;IACjE,WAAW,EAAE,gBAAgB,CAAA;IAC7B,sDAAsD;IACtD,KAAK,EAAE,WAAW,CAAA;IAClB,2EAA2E;IAC3E,MAAM,EAAE,YAAY,CAAA;IACpB,iGAAiG;IACjG,aAAa,EAAE,mBAAmB,CAAA;IAClC,yFAAyF;IACzF,aAAa,EAAE,kBAAkB,CAAA;CAClC;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAYjE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAM3F;AAED,iGAAiG;AACjG,eAAO,MAAM,UAAU,UAAU,CAAA;AAmEjC;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,gBAAgB,EACzB,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAC3B,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CA6CjE"}