@shieldedtech/moth-wallet 0.2.0

package/dist/daemon/client.js

@@ -0,0 +1,214 @@
+// Daemon client: opens a Unix-domain socket connection, performs the
+// version handshake, exposes a typed call() interface and clean shutdown.
+//
+// connectDaemon() is intentionally forgiving — if there's no socket file,
+// or the connect is refused, it returns null instead of throwing. Callers
+// (the CLI) treat null as "no daemon available, run standalone", which
+// keeps the daemon optional rather than a hard dependency.
+import { createConnection } from 'node:net';
+import { randomUUID } from 'node:crypto';
+import { encodeFrame, FrameDecoder, PROTOCOL_VERSION, DaemonProtocolError, } from './protocol.js';
+/**
+ * Try to connect to the daemon at the given Unix-socket path. Stage-1
+ * entry point — kept for backwards compatibility. For TCP transports
+ * use `connectDaemonTcp(host, port)` or the unified
+ * `connectDaemonBind(bind)`.
+ *
+ * Returns:
+ *   - DaemonClient on successful connect + handshake
+ *   - null if the file doesn't exist, the connect is refused, or the
+ *     handshake reports an incompatible protocol version
+ *
+ * Throws only on genuinely-unexpected conditions (filesystem error,
+ * malformed daemon response). Network-style failures are folded into
+ * null so the CLI can fall back to standalone without a try/catch.
+ */
+export async function connectDaemon(socketPath, opts = {}) {
+    return connectDaemonBind({ transport: 'unix', socketPath }, opts);
+}
+/**
+ * Stage-2 entry point. Connect to a daemon listening on loopback TCP
+ * (or, at stage 3, a TLS-terminating reverse proxy in front of the
+ * daemon's loopback bind). Same fall-back-to-null semantics as
+ * `connectDaemon`.
+ */
+export async function connectDaemonTcp(host, port, opts = {}) {
+    return connectDaemonBind({ transport: 'tcp', host, port }, opts);
+}
+/**
+ * Transport-agnostic entry point. Both `connectDaemon` and
+ * `connectDaemonTcp` route through here. The handshake + dispatcher
+ * setup is identical across transports — only the underlying socket
+ * factory differs.
+ */
+export async function connectDaemonBind(bind, opts = {}) {
+    const log = opts.onLog ?? (() => { });
+    const defaultTimeoutMs = opts.defaultTimeoutMs ?? 10_000;
+    const sock = await openSocket(bind, log);
+    if (!sock)
+        return null;
+    const dispatcher = new ClientDispatcher(sock, defaultTimeoutMs, log);
+    let handshake;
+    try {
+        handshake = await dispatcher.call('version', undefined, {
+            timeoutMs: 2000,
+        });
+    }
+    catch (err) {
+        log('warn', `daemon handshake failed: ${err.message}`);
+        dispatcher.close();
+        return null;
+    }
+    if (handshake.protocol !== PROTOCOL_VERSION) {
+        log('warn', `daemon speaks protocol ${handshake.protocol}; client expects ${PROTOCOL_VERSION}`);
+        dispatcher.close();
+        return null;
+    }
+    // Stage-2 auth handshake. Only performed when the caller passes
+    // a token; daemons running without an auth handler (typical Unix
+    // case) will reject an `auth` call with METHOD_NOT_FOUND, so we
+    // gate on the token's presence rather than probing.
+    let apiKeyId;
+    if (opts.token) {
+        try {
+            const authResult = await dispatcher.call('auth', { token: opts.token }, { timeoutMs: 2000 });
+            apiKeyId = authResult.apiKeyId;
+        }
+        catch (err) {
+            const code = err instanceof DaemonProtocolError ? err.code : 'INTERNAL_ERROR';
+            log('warn', `daemon auth failed (${code}): ${err.message}`);
+            dispatcher.close();
+            return null;
+        }
+    }
+    return {
+        call: dispatcher.call.bind(dispatcher),
+        close: dispatcher.close.bind(dispatcher),
+        get closed() {
+            return dispatcher.closed;
+        },
+        daemonVersion: handshake.daemon,
+        apiKeyId,
+    };
+}
+function openSocket(bind, log) {
+    const target = bind.transport === 'unix'
+        ? bind.socketPath
+        : `${bind.host}:${bind.port}`;
+    return new Promise((resolve) => {
+        const sock = bind.transport === 'unix'
+            ? createConnection(bind.socketPath)
+            : createConnection({ host: bind.host, port: bind.port });
+        const onConnect = () => {
+            sock.off('error', onError);
+            resolve(sock);
+        };
+        const onError = (err) => {
+            sock.off('connect', onConnect);
+            sock.destroy();
+            // ENOENT (no socket file) and ECONNREFUSED (no listener) both
+            // mean "no daemon available" rather than a real error. Apply
+            // the same fall-back-to-null to both transports.
+            if (err.code === 'ENOENT' || err.code === 'ECONNREFUSED') {
+                log('info', `no daemon at ${target} (${err.code})`);
+            }
+            else {
+                log('warn', `daemon connect failed: ${err.message}`);
+            }
+            resolve(null);
+        };
+        sock.once('connect', onConnect);
+        sock.once('error', onError);
+    });
+}
+class ClientDispatcher {
+    closed = false;
+    sock;
+    defaultTimeoutMs;
+    decoder = new FrameDecoder();
+    pending = new Map();
+    log;
+    constructor(sock, defaultTimeoutMs, log) {
+        this.sock = sock;
+        this.defaultTimeoutMs = defaultTimeoutMs;
+        this.log = log;
+        sock.on('data', (chunk) => this.onData(chunk));
+        sock.on('close', () => this.failAllPending(new DaemonProtocolError('CLOSED', 'daemon connection closed')));
+        sock.on('error', (err) => {
+            this.log('warn', `daemon socket error: ${err.message}`);
+            this.failAllPending(new DaemonProtocolError('CLOSED', err.message));
+        });
+    }
+    call(method, params, opts = {}) {
+        if (this.closed) {
+            return Promise.reject(new DaemonProtocolError('CLOSED', 'daemon client is closed'));
+        }
+        const id = randomUUID();
+        const timeoutMs = opts.timeoutMs ?? this.defaultTimeoutMs;
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                reject(new DaemonProtocolError('TIMEOUT', `call ${method} timed out after ${timeoutMs}ms`));
+            }, timeoutMs);
+            this.pending.set(id, {
+                resolve: resolve,
+                reject,
+                timer,
+            });
+            try {
+                this.sock.write(encodeFrame({ id, type: 'request', method, params }));
+            }
+            catch (err) {
+                clearTimeout(timer);
+                this.pending.delete(id);
+                reject(err);
+            }
+        });
+    }
+    close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.failAllPending(new DaemonProtocolError('CLOSED', 'client closed'));
+        this.sock.destroy();
+    }
+    onData(chunk) {
+        let frames;
+        try {
+            frames = this.decoder.push(chunk);
+        }
+        catch (err) {
+            this.log('warn', `daemon sent malformed frame: ${err.message}`);
+            this.close();
+            return;
+        }
+        for (const frame of frames) {
+            if (frame.type !== 'response') {
+                this.log('warn', `daemon sent unexpected frame type ${frame.type}`);
+                continue;
+            }
+            const waiter = this.pending.get(frame.id);
+            if (!waiter) {
+                // Unsolicited response — possible if a timeout already fired.
+                // Drop silently rather than warn; that's expected under timeout.
+                continue;
+            }
+            this.pending.delete(frame.id);
+            clearTimeout(waiter.timer);
+            if (frame.error) {
+                waiter.reject(new DaemonProtocolError(frame.error.code, frame.error.message));
+            }
+            else {
+                waiter.resolve(frame.result);
+            }
+        }
+    }
+    failAllPending(err) {
+        for (const [, waiter] of this.pending) {
+            clearTimeout(waiter.timer);
+            waiter.reject(err);
+        }
+        this.pending.clear();
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/daemon/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/daemon/client.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,0EAA0E;AAC1E,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,uEAAuE;AACvE,2DAA2D;AAE3D,OAAO,EAAC,gBAAgB,EAAc,MAAM,UAAU,CAAC;AACvD,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EACL,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,GAGpB,MAAM,eAAe,CAAC;AAkCvB;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,OAA6B,EAAE;IAE/B,OAAO,iBAAiB,CAAC,EAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAC,EAAE,IAAI,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,IAAY,EACZ,OAA6B,EAAE;IAE/B,OAAO,iBAAiB,CAAC,EAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAC,EAAE,IAAI,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAgB,EAChB,OAA6B,EAAE;IAE/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,MAAM,CAAC;IAEzD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAErE,IAAI,SAA6C,CAAC;IAClD,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CAAqC,SAAS,EAAE,SAAS,EAAE;YAC1F,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,EAAE,4BAA6B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QAC5C,GAAG,CACD,MAAM,EACN,0BAA0B,SAAS,CAAC,QAAQ,oBAAoB,gBAAgB,EAAE,CACnF,CAAC;QACF,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gEAAgE;IAChE,iEAAiE;IACjE,gEAAgE;IAChE,oDAAoD;IACpD,IAAI,QAA4B,CAAC;IACjC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,IAAI,CACtC,MAAM,EACN,EAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAC,EACnB,EAAC,SAAS,EAAE,IAAI,EAAC,CAClB,CAAC;YACF,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,YAAY,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;YAC9E,GAAG,CAAC,MAAM,EAAE,uBAAuB,IAAI,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACvE,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;QACtC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;QACxC,IAAI,MAAM;YACR,OAAO,UAAU,CAAC,MAAM,CAAC;QAC3B,CAAC;QACD,aAAa,EAAE,SAAS,CAAC,MAAM;QAC/B,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,IAAgB,EAChB,GAA4D;IAE5D,MAAM,MAAM,GACV,IAAI,CAAC,SAAS,KAAK,MAAM;QACvB,CAAC,CAAC,IAAI,CAAC,UAAU;QACjB,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;QAC5C,MAAM,IAAI,GACR,IAAI,CAAC,SAAS,KAAK,MAAM;YACvB,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC;YACnC,CAAC,CAAC,gBAAgB,CAAC,EAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAC,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,GAA0B,EAAE,EAAE;YAC7C,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,8DAA8D;YAC9D,6DAA6D;YAC7D,iDAAiD;YACjD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACzD,GAAG,CAAC,MAAM,EAAE,gBAAgB,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,EAAE,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,gBAAgB;IACpB,MAAM,GAAG,KAAK,CAAC;IAEE,IAAI,CAAS;IACb,gBAAgB,CAAS;IACzB,OAAO,GAAG,IAAI,YAAY,EAAE,CAAC;IAC7B,OAAO,GAAG,IAAI,GAAG,EAG/B,CAAC;IACa,GAAG,CAA0D;IAE9E,YACE,IAAY,EACZ,gBAAwB,EACxB,GAA4D;QAE5D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QAEf,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,mBAAmB,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC;QAC3G,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,wBAAwB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,cAAc,CAAC,IAAI,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAI,MAAc,EAAE,MAAe,EAAE,OAA6B,EAAE;QACtE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC;QAE1D,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,mBAAmB,CAAC,SAAS,EAAE,QAAQ,MAAM,oBAAoB,SAAS,IAAI,CAAC,CAAC,CAAC;YAC9F,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;gBACnB,OAAO,EAAE,OAA+B;gBACxC,MAAM;gBACN,KAAK;aACN,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAC,CAAC,CAAC,CAAC;YACtE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,GAAY,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,cAAc,CAAC,IAAI,mBAAmB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,gCAAiC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC9B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,qCAAqC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBACpE,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,8DAA8D;gBAC9D,iEAAiE;gBACjE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9B,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,IAAoB,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAChG,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,GAAU;QAC/B,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACtC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/daemon/confirmation-queue.d.ts

@@ -0,0 +1,46 @@
+export type ConfirmationRequest = {
+    readonly id: string;
+    readonly summary: string;
+    readonly details?: readonly string[];
+};
+export interface ConfirmationQueueOptions {
+    /**
+     * When true, every request() resolves immediately with true. Intended
+     * for non-interactive contexts (tests, server-mode daemons). The
+     * onAutoApprove callback, if provided, is invoked for each
+     * auto-approval so callers can log it.
+     */
+    readonly autoApprove?: boolean;
+    /** Hook called for every auto-approved request — useful for audit. */
+    readonly onAutoApprove?: (req: ConfirmationRequest) => void;
+}
+export declare class ConfirmationQueue {
+    private readonly items;
+    private readonly listeners;
+    private readonly autoApprove;
+    private readonly onAutoApprove?;
+    constructor(opts?: ConfirmationQueueOptions);
+    /** Push a request and resolve once the user answers (or immediately
+     *  if autoApprove is enabled). */
+    request(summary: string, details?: readonly string[]): Promise<boolean>;
+    /** Head of the queue, or null when empty. The modal uses this to
+     *  decide whether to render. */
+    peek(): ConfirmationRequest | null;
+    /** Resolve the head with the given verdict and advance. No-op when
+     *  empty. */
+    resolve(approved: boolean): void;
+    /** Resolve every pending request as denied. Used on shutdown so any
+     *  in-flight RPC calls fail cleanly instead of hanging the daemon. */
+    drainAsDenied(): void;
+    /** Subscribe to "queue changed" notifications. Returns an
+     *  unsubscribe function. */
+    subscribe(listener: () => void): () => void;
+    /** Current depth; primarily for tests and logs. */
+    get size(): number;
+    /** Whether the queue is in auto-approve mode. The audit log uses
+     *  this to record `auto-approve` vs `user-approve` decisions on
+     *  the same code path. */
+    get isAutoApprove(): boolean;
+    private notify;
+}
+//# sourceMappingURL=confirmation-queue.d.ts.map

package/dist/daemon/confirmation-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation-queue.d.ts","sourceRoot":"","sources":["../../src/daemon/confirmation-queue.ts"],"names":[],"mappings":"AAoBA,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC,CAAC;AAMF,MAAM,WAAW,wBAAwB;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,mBAAmB,KAAK,IAAI,CAAC;CAC7D;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyB;IAC/C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAqC;gBAExD,IAAI,GAAE,wBAA6B;IAK/C;sCACkC;IAClC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAYvE;oCACgC;IAChC,IAAI,IAAI,mBAAmB,GAAG,IAAI;IAKlC;iBACa;IACb,OAAO,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI;IAOhC;0EACsE;IACtE,aAAa,IAAI,IAAI;IAMrB;gCAC4B;IAC5B,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAO3C,mDAAmD;IACnD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;8BAE0B;IAC1B,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED,OAAO,CAAC,MAAM;CASf"}

package/dist/daemon/confirmation-queue.js

@@ -0,0 +1,92 @@
+// FIFO queue of pending confirmation requests from the daemon's RPC
+// handlers. A handler that needs human approval pushes an entry via
+// request() and awaits the returned Promise. Two execution modes:
+//
+//   - interactive (default): consumers like the TUI's ConfirmationModal
+//     subscribe to the queue, render the head entry, and resolve the
+//     promise once the user answers y/n.
+//
+//   - auto-approve (test-only / Web2 service later): every request()
+//     resolves immediately with true. Used by `moth daemon serve
+//     --auto-approve` to run the daemon without a human in the loop.
+//     The summary + details are still emitted via the onAutoApprove
+//     callback so they can be logged for audit.
+//
+// Lives in @shieldedtech/moth-wallet so the TUI host and the
+// headless serve command can both depend on it without crossing
+// the TUI's React layer.
+import { randomUUID } from 'node:crypto';
+export class ConfirmationQueue {
+    items = [];
+    listeners = new Set();
+    autoApprove;
+    onAutoApprove;
+    constructor(opts = {}) {
+        this.autoApprove = opts.autoApprove ?? false;
+        this.onAutoApprove = opts.onAutoApprove;
+    }
+    /** Push a request and resolve once the user answers (or immediately
+     *  if autoApprove is enabled). */
+    request(summary, details) {
+        if (this.autoApprove) {
+            const req = { id: randomUUID(), summary, details };
+            this.onAutoApprove?.(req);
+            return Promise.resolve(true);
+        }
+        return new Promise((resolve) => {
+            this.items.push({ id: randomUUID(), summary, details, resolve });
+            this.notify();
+        });
+    }
+    /** Head of the queue, or null when empty. The modal uses this to
+     *  decide whether to render. */
+    peek() {
+        const head = this.items[0];
+        return head ? { id: head.id, summary: head.summary, details: head.details } : null;
+    }
+    /** Resolve the head with the given verdict and advance. No-op when
+     *  empty. */
+    resolve(approved) {
+        const head = this.items.shift();
+        if (!head)
+            return;
+        head.resolve(approved);
+        this.notify();
+    }
+    /** Resolve every pending request as denied. Used on shutdown so any
+     *  in-flight RPC calls fail cleanly instead of hanging the daemon. */
+    drainAsDenied() {
+        while (this.items.length > 0) {
+            this.resolve(false);
+        }
+    }
+    /** Subscribe to "queue changed" notifications. Returns an
+     *  unsubscribe function. */
+    subscribe(listener) {
+        this.listeners.add(listener);
+        return () => {
+            this.listeners.delete(listener);
+        };
+    }
+    /** Current depth; primarily for tests and logs. */
+    get size() {
+        return this.items.length;
+    }
+    /** Whether the queue is in auto-approve mode. The audit log uses
+     *  this to record `auto-approve` vs `user-approve` decisions on
+     *  the same code path. */
+    get isAutoApprove() {
+        return this.autoApprove;
+    }
+    notify() {
+        for (const l of this.listeners) {
+            try {
+                l();
+            }
+            catch {
+                // listener errors must not affect other listeners or the queue
+            }
+        }
+    }
+}
+//# sourceMappingURL=confirmation-queue.js.map

package/dist/daemon/confirmation-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation-queue.js","sourceRoot":"","sources":["../../src/daemon/confirmation-queue.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,oEAAoE;AACpE,kEAAkE;AAClE,EAAE;AACF,wEAAwE;AACxE,qEAAqE;AACrE,yCAAyC;AACzC,EAAE;AACF,qEAAqE;AACrE,iEAAiE;AACjE,qEAAqE;AACrE,oEAAoE;AACpE,gDAAgD;AAChD,EAAE;AACF,6DAA6D;AAC7D,gEAAgE;AAChE,yBAAyB;AAEzB,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AAwBvC,MAAM,OAAO,iBAAiB;IACX,KAAK,GAAsB,EAAE,CAAC;IAC9B,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;IAClC,WAAW,CAAU;IACrB,aAAa,CAAsC;IAEpE,YAAY,OAAiC,EAAE;QAC7C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAC1C,CAAC;IAED;sCACkC;IAClC,OAAO,CAAC,OAAe,EAAE,OAA2B;QAClD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,GAAG,GAAwB,EAAC,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,OAAO,EAAC,CAAC;YACtE,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAC,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;oCACgC;IAChC,IAAI;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC,CAAC,CAAC,EAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,CAAC;IAED;iBACa;IACb,OAAO,CAAC,QAAiB;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvB,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED;0EACsE;IACtE,aAAa;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED;gCAC4B;IAC5B,SAAS,CAAC,QAAoB;QAC5B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED;;8BAE0B;IAC1B,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,MAAM;QACZ,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,CAAC,EAAE,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACP,+DAA+D;YACjE,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/daemon/index.d.ts

@@ -0,0 +1,23 @@
+export { PROTOCOL_VERSION, MAX_FRAME_BYTES, DaemonProtocolError, encodeFrame, FrameDecoder, } from './protocol.js';
+export type { Frame, RequestFrame, ResponseFrame, RpcErrorCode } from './protocol.js';
+export { startDaemon } from './server.js';
+export type { DaemonHandle, DaemonOptions, RpcHandler, ConnectionContext, DaemonBind, AuthHandler, AuthResult, Scope } from './server.js';
+export { ApiKeyStore } from './api-keys.js';
+export type { ApiKeyRecord, ApiKeyGenerated, ApiKeyAuthResult } from './api-keys.js';
+export { connectDaemon, connectDaemonTcp, connectDaemonBind } from './client.js';
+export type { DaemonClient, ConnectDaemonOptions } from './client.js';
+export { ConfirmationQueue } from './confirmation-queue.js';
+export type { ConfirmationRequest, ConfirmationQueueOptions } from './confirmation-queue.js';
+export { buildWalletHandlers } from './wallet-handlers.js';
+export type { WalletHandlerDeps } from './wallet-handlers.js';
+export { AuditLog } from './audit-log.js';
+export type { AuditEntry, AuditRpcEntry, AuditLifecycleEntry, AuditDecision, AuditLogOptions, } from './audit-log.js';
+export { parseSubmitTransactionParams, parseTransferTokensParams, parseCallCircuitParams, parseDeployContractParams, parseDustRegisterParams, parseDustDeregisterParams, parseInsertVerifierKeyParams, parseInsertVerifierKeysBatchParams, shortenHex, shortenAddress, } from './wallet-rpc-parsers.js';
+export type { DaemonGetStateResult, DaemonSubmitTransactionParams, DaemonSubmitTransactionResult, DaemonTransferTokensParams, DaemonTransferTokensResult, DaemonCallCircuitParams, DaemonCallCircuitResult, DaemonDeployContractParams, DaemonDeployContractResult, DaemonDustRegisterParams, DaemonDustRegisterResult, DaemonDustDeregisterParams, DaemonDustDeregisterResult, DaemonInsertVerifierKeyParams, DaemonInsertVerifierKeyResult, DaemonInsertVerifierKeysBatchParams, DaemonInsertVerifierKeysBatchResult, } from './wallet-rpc-types.js';
+/**
+ * Canonical socket path for a (network, wallet) pair. Sits inside the same
+ * `~/.moth/sync/<network>/` directory tree that the wallet sync cache uses,
+ * so the L1 0700 directory perms protect both atomically.
+ */
+export declare function daemonSocketPath(networkId: string, walletName: string): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/daemon/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/daemon/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,WAAW,EACX,YAAY,GACb,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAC,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAC,MAAM,eAAe,CAAC;AAEpF,OAAO,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AACxC,YAAY,EAAC,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAC,MAAM,aAAa,CAAC;AAExI,OAAO,EAAC,WAAW,EAAC,MAAM,eAAe,CAAC;AAC1C,YAAY,EAAC,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAC,MAAM,eAAe,CAAC;AAEnF,OAAO,EAAC,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAC,MAAM,aAAa,CAAC;AAC/E,YAAY,EAAC,YAAY,EAAE,oBAAoB,EAAC,MAAM,aAAa,CAAC;AAEpE,OAAO,EAAC,iBAAiB,EAAC,MAAM,yBAAyB,CAAC;AAC1D,YAAY,EAAC,mBAAmB,EAAE,wBAAwB,EAAC,MAAM,yBAAyB,CAAC;AAK3F,OAAO,EAAC,mBAAmB,EAAC,MAAM,sBAAsB,CAAC;AACzD,YAAY,EAAC,iBAAiB,EAAC,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EAAC,QAAQ,EAAC,MAAM,gBAAgB,CAAC;AACxC,YAAY,EACV,UAAU,EACV,aAAa,EACb,mBAAmB,EACnB,aAAa,EACb,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,EACzB,4BAA4B,EAC5B,kCAAkC,EAClC,UAAU,EACV,cAAc,GACf,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,oBAAoB,EACpB,6BAA6B,EAAE,6BAA6B,EAC5D,0BAA0B,EAAE,0BAA0B,EACtD,uBAAuB,EAAE,uBAAuB,EAChD,0BAA0B,EAAE,0BAA0B,EACtD,wBAAwB,EAAE,wBAAwB,EAClD,0BAA0B,EAAE,0BAA0B,EACtD,6BAA6B,EAAE,6BAA6B,EAC5D,mCAAmC,EAAE,mCAAmC,GACzE,MAAM,uBAAuB,CAAC;AAK/B;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE9E"}

package/dist/daemon/index.js

@@ -0,0 +1,26 @@
+// Public surface of the wallet daemon module.
+// L1 (filesystem perms) lives in server.ts; L3 (per-op confirmation) is the
+// host application's responsibility — it composes its own modal-driven
+// handlers and registers them with startDaemon().
+export { PROTOCOL_VERSION, MAX_FRAME_BYTES, DaemonProtocolError, encodeFrame, FrameDecoder, } from './protocol.js';
+export { startDaemon } from './server.js';
+export { ApiKeyStore } from './api-keys.js';
+export { connectDaemon, connectDaemonTcp, connectDaemonBind } from './client.js';
+export { ConfirmationQueue } from './confirmation-queue.js';
+// Shared RPC handler factory + wire types + parsers. Both the TUI
+// host and the headless serve mode build their handler map by
+// calling buildWalletHandlers(deps) with the same dependency bundle.
+export { buildWalletHandlers } from './wallet-handlers.js';
+export { AuditLog } from './audit-log.js';
+export { parseSubmitTransactionParams, parseTransferTokensParams, parseCallCircuitParams, parseDeployContractParams, parseDustRegisterParams, parseDustDeregisterParams, parseInsertVerifierKeyParams, parseInsertVerifierKeysBatchParams, shortenHex, shortenAddress, } from './wallet-rpc-parsers.js';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+/**
+ * Canonical socket path for a (network, wallet) pair. Sits inside the same
+ * `~/.moth/sync/<network>/` directory tree that the wallet sync cache uses,
+ * so the L1 0700 directory perms protect both atomically.
+ */
+export function daemonSocketPath(networkId, walletName) {
+    return join(homedir(), '.moth', 'sync', networkId, `${walletName}.sock`);
+}
+//# sourceMappingURL=index.js.map

package/dist/daemon/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/daemon/index.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,4EAA4E;AAC5E,uEAAuE;AACvE,kDAAkD;AAElD,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,WAAW,EACX,YAAY,GACb,MAAM,eAAe,CAAC;AAIvB,OAAO,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAGxC,OAAO,EAAC,WAAW,EAAC,MAAM,eAAe,CAAC;AAG1C,OAAO,EAAC,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAC,MAAM,aAAa,CAAC;AAG/E,OAAO,EAAC,iBAAiB,EAAC,MAAM,yBAAyB,CAAC;AAG1D,kEAAkE;AAClE,8DAA8D;AAC9D,qEAAqE;AACrE,OAAO,EAAC,mBAAmB,EAAC,MAAM,sBAAsB,CAAC;AAGzD,OAAO,EAAC,QAAQ,EAAC,MAAM,gBAAgB,CAAC;AAQxC,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,EACzB,4BAA4B,EAC5B,kCAAkC,EAClC,UAAU,EACV,cAAc,GACf,MAAM,yBAAyB,CAAC;AAajC,OAAO,EAAC,IAAI,EAAC,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAC,OAAO,EAAC,MAAM,SAAS,CAAC;AAEhC;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,UAAkB;IACpE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;AAC3E,CAAC"}

package/dist/daemon/protocol.d.ts

@@ -0,0 +1,40 @@
+export declare const PROTOCOL_VERSION = "moth-wallet-daemon/1";
+/** Bound on a single frame's payload size. Practical state snapshots are well
+ *  under 1MB today; cap above lets the wire format grow without immediate
+ *  ceiling changes. */
+export declare const MAX_FRAME_BYTES: number;
+export type RequestFrame = {
+    readonly id: string;
+    readonly type: 'request';
+    readonly method: string;
+    readonly params?: unknown;
+};
+export type ResponseFrame = {
+    readonly id: string;
+    readonly type: 'response';
+    readonly result?: unknown;
+    readonly error?: {
+        readonly code: string;
+        readonly message: string;
+    };
+};
+export type Frame = RequestFrame | ResponseFrame;
+export type RpcErrorCode = 'METHOD_NOT_FOUND' | 'INVALID_REQUEST' | 'INVALID_PARAMS' | 'INTERNAL_ERROR' | 'CLOSED' | 'TIMEOUT' | 'UNAUTHORIZED';
+export declare class DaemonProtocolError extends Error {
+    readonly code: RpcErrorCode;
+    constructor(code: RpcErrorCode, message: string);
+}
+export declare function encodeFrame(frame: Frame): Buffer;
+/**
+ * Streaming decoder. push() accepts arbitrary chunks; complete frames come
+ * out in order, partial bytes stay buffered. Throws DaemonProtocolError on
+ * an over-large declared length so the caller can disconnect the peer
+ * before allocating.
+ */
+export declare class FrameDecoder {
+    private buffer;
+    push(chunk: Buffer): Frame[];
+    /** Bytes still buffered (incomplete frame). Useful for diagnostics/tests. */
+    get pending(): number;
+}
+//# sourceMappingURL=protocol.d.ts.map

package/dist/daemon/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/daemon/protocol.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,gBAAgB,yBAAyB,CAAC;AAEvD;;uBAEuB;AACvB,eAAO,MAAM,eAAe,QAAmB,CAAC;AAEhD,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAC,CAAC;CACpE,CAAC;AAEF,MAAM,MAAM,KAAK,GAAG,YAAY,GAAG,aAAa,CAAC;AAEjD,MAAM,MAAM,YAAY,GACpB,kBAAkB,GAClB,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,GAChB,QAAQ,GACR,SAAS,GACT,cAAc,CAAC;AAEnB,qBAAa,mBAAoB,SAAQ,KAAK;IAE1C,QAAQ,CAAC,IAAI,EAAE,YAAY;gBAAlB,IAAI,EAAE,YAAY,EAC3B,OAAO,EAAE,MAAM;CAKlB;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAWhD;AAED;;;;;GAKG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAA2B;IAEzC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE;IAuB5B,6EAA6E;IAC7E,IAAI,OAAO,IAAI,MAAM,CAEpB;CACF"}

package/dist/daemon/protocol.js

@@ -0,0 +1,104 @@
+// Length-prefixed JSON-over-stream framing for the moth wallet daemon.
+//
+// Wire format: 4-byte big-endian uint32 payload length, then that many bytes
+// of UTF-8 JSON. Streams are bidirectional and full-duplex; either side may
+// emit Request or Response frames at any time, correlated by `id`. There is
+// no built-in keepalive — the underlying Unix stream socket detects
+// peer-close cleanly and that's enough.
+//
+// All sizes are bounded. A frame larger than MAX_FRAME_BYTES is rejected
+// without buffering, so a misbehaving peer can't drive the daemon into an
+// unbounded allocation.
+export const PROTOCOL_VERSION = 'moth-wallet-daemon/1';
+/** Bound on a single frame's payload size. Practical state snapshots are well
+ *  under 1MB today; cap above lets the wire format grow without immediate
+ *  ceiling changes. */
+export const MAX_FRAME_BYTES = 16 * 1024 * 1024;
+export class DaemonProtocolError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'DaemonProtocolError';
+    }
+}
+export function encodeFrame(frame) {
+    const json = Buffer.from(JSON.stringify(frame), 'utf-8');
+    if (json.length > MAX_FRAME_BYTES) {
+        throw new DaemonProtocolError('INVALID_REQUEST', `frame too large: ${json.length} bytes (max ${MAX_FRAME_BYTES})`);
+    }
+    const lenHeader = Buffer.alloc(4);
+    lenHeader.writeUInt32BE(json.length, 0);
+    return Buffer.concat([lenHeader, json]);
+}
+/**
+ * Streaming decoder. push() accepts arbitrary chunks; complete frames come
+ * out in order, partial bytes stay buffered. Throws DaemonProtocolError on
+ * an over-large declared length so the caller can disconnect the peer
+ * before allocating.
+ */
+export class FrameDecoder {
+    buffer = Buffer.alloc(0);
+    push(chunk) {
+        this.buffer = this.buffer.length === 0 ? chunk : Buffer.concat([this.buffer, chunk]);
+        const out = [];
+        while (this.buffer.length >= 4) {
+            const payloadLen = this.buffer.readUInt32BE(0);
+            if (payloadLen > MAX_FRAME_BYTES) {
+                throw new DaemonProtocolError('INVALID_REQUEST', `declared frame length ${payloadLen} exceeds max ${MAX_FRAME_BYTES}`);
+            }
+            if (this.buffer.length < 4 + payloadLen)
+                break;
+            const json = this.buffer.subarray(4, 4 + payloadLen).toString('utf-8');
+            this.buffer = this.buffer.subarray(4 + payloadLen);
+            const parsed = parseFrame(json);
+            out.push(parsed);
+        }
+        return out;
+    }
+    /** Bytes still buffered (incomplete frame). Useful for diagnostics/tests. */
+    get pending() {
+        return this.buffer.length;
+    }
+}
+function parseFrame(json) {
+    let raw;
+    try {
+        raw = JSON.parse(json);
+    }
+    catch (err) {
+        throw new DaemonProtocolError('INVALID_REQUEST', `frame is not valid JSON: ${err.message}`);
+    }
+    if (!raw || typeof raw !== 'object') {
+        throw new DaemonProtocolError('INVALID_REQUEST', 'frame is not a JSON object');
+    }
+    const f = raw;
+    if (typeof f.id !== 'string') {
+        throw new DaemonProtocolError('INVALID_REQUEST', 'frame.id must be a string');
+    }
+    if (f.type === 'request') {
+        if (typeof f.method !== 'string') {
+            throw new DaemonProtocolError('INVALID_REQUEST', 'request.method must be a string');
+        }
+        return { id: f.id, type: 'request', method: f.method, params: f.params };
+    }
+    if (f.type === 'response') {
+        if (f.error !== undefined && f.result !== undefined) {
+            throw new DaemonProtocolError('INVALID_REQUEST', 'response cannot carry both result and error');
+        }
+        if (f.error !== undefined) {
+            const e = f.error;
+            if (typeof e.code !== 'string' || typeof e.message !== 'string') {
+                throw new DaemonProtocolError('INVALID_REQUEST', 'response.error must have string code and message');
+            }
+            return {
+                id: f.id,
+                type: 'response',
+                error: { code: e.code, message: e.message },
+            };
+        }
+        return { id: f.id, type: 'response', result: f.result };
+    }
+    throw new DaemonProtocolError('INVALID_REQUEST', `frame.type must be "request" or "response", got ${String(f.type)}`);
+}
+//# sourceMappingURL=protocol.js.map

package/dist/daemon/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/daemon/protocol.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,oEAAoE;AACpE,wCAAwC;AACxC,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,wBAAwB;AAExB,MAAM,CAAC,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAEvD;;uBAEuB;AACvB,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AA2BhD,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAEjC;IADX,YACW,IAAkB,EAC3B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAc;QAI3B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,KAAY;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAClC,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,oBAAoB,IAAI,CAAC,MAAM,eAAe,eAAe,GAAG,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IACf,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEzC,IAAI,CAAC,KAAa;QAChB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACrF,MAAM,GAAG,GAAY,EAAE,CAAC;QAExB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;gBACjC,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,yBAAyB,UAAU,gBAAgB,eAAe,EAAE,CACrE,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,UAAU;gBAAE,MAAM;YAE/C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED,6EAA6E;IAC7E,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,4BAA6B,GAAa,CAAC,OAAO,EAAE,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,4BAA4B,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,EAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,6CAA6C,CAC9C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAgC,CAAC;YAC7C,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChE,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,kDAAkD,CACnD,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,EAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAC;aAC1C,CAAC;QACJ,CAAC;QACD,OAAO,EAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,mDAAmD,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CACpE,CAAC;AACJ,CAAC"}