@roamcode.ai/server 1.0.23 → 1.2.0

package/dist/managed-update-helper.js

@@ -406,7 +406,10 @@ async function smokeServer(serverEntry, dataDir, nodePath, log) {
       ACCESS_TOKEN: `rc-smoke-${randomUUID()}`,
       ROAMCODE_DATA_DIR: smokeDir,
       RC_TMUX_SOCKET: `rc-smoke-${process.pid}`,
-      ROAMCODE_INSTALL_ROOT: ""
+      ROAMCODE_INSTALL_ROOT: "",
+      // The boot smoke already owns this isolated child and health-checks it directly. Never let an
+      // inherited managed-launcher marker create a second supervisor for the throwaway process.
+      ROAMCODE_DISABLE_WATCHDOG: "1"
     },
     stdio: ["ignore", "pipe", "pipe"]
   });

package/dist/relay-start.d.ts

@@ -0,0 +1,130 @@
+import { FastifyInstance } from 'fastify';
+
+type RelayAccountStoreMode = "sqlite" | "memory";
+type RelayAccountStatus = "active" | "suspended" | "deleted";
+type RelayAccountPlan = "free" | "team" | "enterprise";
+interface RelayAccountRecord {
+    id: string;
+    label: string;
+    status: RelayAccountStatus;
+    plan: RelayAccountPlan;
+    maxRoutes: number;
+    maxDevicesPerRoute: number;
+    revision: number;
+    createdAt: number;
+    updatedAt: number;
+}
+interface RelayAccountFields {
+    label: string;
+    plan?: RelayAccountPlan;
+    maxRoutes?: number;
+    maxDevicesPerRoute?: number;
+}
+interface RelayAccountCredentialMaterial {
+    credentialHash: string;
+    credentialLookup: string;
+}
+type CreateRelayAccountInput = RelayAccountFields & (({
+    credential: string;
+} & Partial<Record<keyof RelayAccountCredentialMaterial, never>>) | ({
+    credential?: never;
+} & RelayAccountCredentialMaterial));
+type RelayAccountCredentialInput = string | RelayAccountCredentialMaterial;
+interface UpdateRelayAccountInput {
+    label?: string;
+    status?: RelayAccountStatus;
+    plan?: RelayAccountPlan;
+    maxRoutes?: number;
+    maxDevicesPerRoute?: number;
+}
+interface RelayAccountStore {
+    readonly mode: RelayAccountStoreMode;
+    createAccount(input: CreateRelayAccountInput, now?: number): RelayAccountRecord;
+    getAccount(id: string): RelayAccountRecord | undefined;
+    listAccounts(options?: {
+        includeDeleted?: boolean;
+    }): RelayAccountRecord[];
+    /** Verify ownership for recovery without granting a suspended account route access. */
+    verifyCredential(credential: string): RelayAccountRecord | undefined;
+    authenticate(credential: string): RelayAccountRecord | undefined;
+    updateAccount(id: string, input: UpdateRelayAccountInput, expectedRevision: number, now?: number): RelayAccountRecord | undefined;
+    rotateCredential(id: string, credential: RelayAccountCredentialInput, expectedRevision: number, now?: number): RelayAccountRecord | undefined;
+    close(): void;
+}
+
+type RelayStoreMode = "sqlite" | "memory";
+interface RelayRouteRecord {
+    id: string;
+    label: string;
+    hostCredentialHash: string;
+    ownerAccountId?: string;
+    createdAt: number;
+    updatedAt: number;
+}
+interface RelayDeviceRouteRecord {
+    routeId: string;
+    deviceId: string;
+    credentialHash: string;
+    createdAt: number;
+    updatedAt: number;
+    /** Bootstrap credentials expire unless the host promotes the device after the E2E pairing claim. */
+    expiresAt?: number;
+}
+interface PublicRelayRouteRecord {
+    id: string;
+    label: string;
+    deviceCount: number;
+    createdAt: number;
+    updatedAt: number;
+}
+interface RelayRouteStore {
+    readonly mode: RelayStoreMode;
+    createRoute(input: {
+        id?: string;
+        label: string;
+        hostCredentialHash: string;
+        ownerAccountId?: string;
+    }, now?: number): RelayRouteRecord;
+    getRoute(id: string): RelayRouteRecord | undefined;
+    listRoutes(now?: number): PublicRelayRouteRecord[];
+    listRoutesByOwner(ownerAccountId: string, now?: number): PublicRelayRouteRecord[];
+    countDevices(routeId: string, now?: number): number;
+    rotateHostCredential(routeId: string, credentialHash: string, now?: number): boolean;
+    deleteRoute(id: string): boolean;
+    authenticateHost(routeId: string, credential: string): boolean;
+    putDevice(input: {
+        routeId: string;
+        deviceId: string;
+        credentialHash: string;
+        expiresAt?: number;
+    }, now?: number): RelayDeviceRouteRecord;
+    getDevice(routeId: string, deviceId: string, now?: number): RelayDeviceRouteRecord | undefined;
+    authenticateDevice(routeId: string, deviceId: string, credential: string, now?: number): boolean;
+    revokeDevice(routeId: string, deviceId: string): boolean;
+    close(): void;
+}
+
+interface BlindRelayMetrics {
+    activeConnections: number;
+    activeHosts: number;
+    activeDevices: number;
+    acceptedConnections: number;
+    rejectedConnections: number;
+    forwardedFrames: number;
+    forwardedBytes: number;
+    droppedFrames: number;
+}
+interface BlindRelayServer {
+    app: FastifyInstance;
+    store: RelayRouteStore;
+    accountStore?: RelayAccountStore;
+    metrics(): BlindRelayMetrics;
+}
+
+interface StartedBlindRelay extends BlindRelayServer {
+    url: string;
+}
+declare function startBlindRelay(env?: NodeJS.ProcessEnv): Promise<StartedBlindRelay>;
+declare function isRelayDirectExecution(moduleUrl: string, argv1: string | undefined, embeddedContainerBuild?: boolean): boolean;
+
+export { type StartedBlindRelay, isRelayDirectExecution, startBlindRelay };