@shieldedtech/moth-wallet 0.2.0

package/dist/daemon/server.d.ts

@@ -0,0 +1,158 @@
+import { type Server } from 'node:net';
+/**
+ * Transport binding. Stage 1 supports only `unix`. Stage 2 adds
+ * `tcp` for loopback / private-network exposure; the JSON-RPC frame
+ * format and verb surface stay identical. See
+ * docs/spec/wallet-service/01-architecture.md D-ARCH-1.
+ */
+export type DaemonBind = {
+    readonly transport: 'unix';
+    readonly socketPath: string;
+} | {
+    readonly transport: 'tcp';
+    readonly host: string;
+    readonly port: number;
+};
+/**
+ * Stage-2.5 scope set. Each API key declares which of these it
+ * holds; the daemon's per-method gate checks the required scope
+ * (declared by the handler factory) against the connection's set.
+ *
+ *   'read'  → getState (and any other read-only verbs we add)
+ *   'write' → every L3-gated write verb (transfer, deploy, call,
+ *             dust, maintenance, submitTransaction, clearSyncCache)
+ *
+ * Unix connections without an auth handler skip the scope check —
+ * kernel UID is the AuthN and granular scoping inside a single UID
+ * is theatre. The check only fires on connections that actually
+ * authenticated through `auth`.
+ */
+export type Scope = 'read' | 'write';
+export type ConnectionContext = {
+    /** Numeric id local to the daemon; useful for logs. */
+    readonly id: number;
+    /** Transport this connection arrived on. Reserved for stage-2
+     *  AuthN to enforce "Bearer required on TCP, not on Unix" rules. */
+    readonly remote: 'unix' | 'tcp';
+    /** Best-effort peer label — `unix` for Unix sockets, the
+     *  `host:port` of the peer for TCP. */
+    readonly peer?: string;
+    /** API key id once the `auth` RPC succeeds on this connection.
+     *  Absent on the Unix transport (kernel UID is the AuthN there)
+     *  and on TCP connections that haven't authenticated yet — those
+     *  are blocked from every method besides `auth` and `version`. */
+    apiKeyId?: string;
+    /** Friendly label of the authenticated key, stamped at `auth`
+     *  time. Surfaced in audit log + connect logs. */
+    apiKeyLabel?: string;
+    /** Scope set carried by the authenticated key. Used by the
+     *  per-method gate to enforce read vs write. */
+    scopes?: readonly Scope[];
+};
+/**
+ * Stage-2 AuthN hook. Takes the wire token (`<id>.<secret>` shape
+ * generated by `moth daemon key gen`), returns the authenticated
+ * identity on success or null on any failure. The server only
+ * accepts an `auth` RPC on a connection when this handler is set;
+ * once it has accepted one, all other methods carry the resulting
+ * `apiKeyId` in their ConnectionContext.
+ *
+ * Unix-transport daemons typically run without an auth handler —
+ * kernel UID on the 0600 socket is sufficient. TCP daemons MUST
+ * supply one or `startDaemon` refuses to bind.
+ */
+export type AuthHandler = (token: string) => Promise<AuthResult | null> | AuthResult | null;
+export interface AuthResult {
+    readonly apiKeyId: string;
+    readonly label?: string;
+    readonly scopes?: readonly string[];
+}
+export type RpcHandler<P = unknown, R = unknown> = ((params: P, ctx: ConnectionContext) => Promise<R> | R) & {
+    /**
+     * Scope required to invoke this handler when an auth handler is
+     * configured. When absent, defaults to `'write'` — every
+     * historically-existing handler is treated as a write op so a
+     * read-only key cannot accidentally unlock spend verbs. The
+     * `version` and `auth` built-ins are always reachable regardless
+     * of scope (the gate special-cases them).
+     */
+    scope?: Scope;
+};
+export interface DaemonOptions {
+    /**
+     * Transport binding. Use either this OR the legacy `socketPath`
+     * field (mutually exclusive). When both are absent, startDaemon
+     * throws.
+     */
+    readonly bind?: DaemonBind;
+    /**
+     * Legacy Unix-socket path. Equivalent to
+     * `bind: {transport: 'unix', socketPath}`. Kept for backwards
+     * compatibility with stage-1 call sites; new code should prefer
+     * `bind`.
+     */
+    readonly socketPath?: string;
+    /** Map of method name → handler. The reserved method `version` is
+     *  installed automatically and cannot be overridden. */
+    readonly handlers: Readonly<Record<string, RpcHandler>>;
+    /** Daemon build identifier surfaced in the `version` handshake. */
+    readonly daemonVersion: string;
+    /** Optional logger hook. Defaults to silent. */
+    readonly onLog?: (level: 'info' | 'warn' | 'error', msg: string) => void;
+    /**
+     * Stage-2 AuthN handler. When set, the daemon installs an `auth`
+     * RPC and gates every other method behind a successful auth call
+     * on the same connection. When omitted, the daemon accepts every
+     * connection unauthenticated (the stage-1 / Unix-transport model).
+     *
+     * **TCP transport requires this**: `startDaemon` throws if
+     * `bind.transport === 'tcp'` and `auth` is undefined. Without it,
+     * exposing the daemon's write verbs over the network would have
+     * no AuthN at all.
+     */
+    readonly auth?: AuthHandler;
+    /**
+     * Fired on every `auth` RPC outcome so the host can write a
+     * permanent audit record of authentication successes and failures
+     * (the live log alone leaves no lasting trail of break-in attempts).
+     */
+    readonly onAuthEvent?: (event: {
+        readonly outcome: 'success' | 'failure';
+        readonly apiKeyId?: string;
+        readonly peer?: string;
+    }) => void;
+    /**
+     * Fired on inbound client activity (connect + each data chunk). The
+     * host uses this to drive an idle auto-lock so a long-running daemon
+     * isn't a permanently-unlocked key.
+     */
+    readonly onActivity?: () => void;
+}
+export interface DaemonHandle {
+    /** Normalised binding the daemon listens on. */
+    readonly bind: DaemonBind;
+    /**
+     * Legacy: Unix socket path if `bind.transport === 'unix'`, else
+     * empty string. Preserved so existing callers reading
+     * `handle.socketPath` keep working.
+     */
+    readonly socketPath: string;
+    /**
+     * Operator-friendly label of where the daemon is listening, e.g.
+     * `unix:///Users/.../wallet.sock` or `tcp://127.0.0.1:8765`.
+     */
+    readonly listenAddress: string;
+    /** Stop accepting new connections, close all active ones, and
+     *  clean transport-specific artifacts (the Unix socket file).
+     *  Resolves once everything is torn down. */
+    close(): Promise<void>;
+}
+export declare function startDaemon(opts: DaemonOptions): Promise<DaemonHandle>;
+/** Test-only helper. Exported for unit tests that need to bind a temporary
+ *  socket without ensuring the directory exists. Production code should
+ *  always go through startDaemon. */
+export declare function _stat(path: string): Promise<{
+    mode: number;
+}>;
+export type { Server };
+//# sourceMappingURL=server.d.ts.map

package/dist/daemon/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/daemon/server.ts"],"names":[],"mappings":"AAeA,OAAO,EAAe,KAAK,MAAM,EAAc,MAAM,UAAU,CAAC;AAchE;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAClB;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAC,GACzD;IAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAC,CAAC;AAE9E;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;AAErC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,uDAAuD;IACvD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;wEACoE;IACpE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IAChC;2CACuC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;sEAGkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;sDACkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;oDACgD;IAChD,MAAM,CAAC,EAAE,SAAS,KAAK,EAAE,CAAC;CAC3B,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC;AAE5F,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,MAAM,UAAU,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO,IAAI,CAAC,CAClD,MAAM,EAAE,CAAC,EACT,GAAG,EAAE,iBAAiB,KACnB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG;IACrB;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;4DACwD;IACxD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IACxD,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,gDAAgD;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACzE;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE;QAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;KACxB,KAAK,IAAI,CAAC;IACX;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;iDAE6C;IAC7C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAoL5E;AAoID;;qCAEqC;AACrC,wBAAsB,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAC,CAAC,CAGjE;AAED,YAAY,EAAC,MAAM,EAAC,CAAC"}

package/dist/daemon/server.js

@@ -0,0 +1,297 @@
+// Daemon server: binds a Unix-domain socket, applies L1 filesystem perms,
+// accepts client connections, and dispatches RPC requests to registered
+// handlers.
+//
+// Threat model addressed by this layer:
+//   - Other users on the same machine connecting to the socket — blocked
+//     at the kernel by 0600 socket-file perms inside a 0700 directory,
+//     both owned by the daemon's UID.
+//   - Stale socket file from a crashed previous daemon — detected on bind
+//     and removed only after probing that no one is actually listening.
+//
+// Per-operation confirmation (L3) is the handler's responsibility — server
+// passes the connection context through so handlers can ask the TUI to
+// surface a modal and only return after user consent.
+import { createServer } from 'node:net';
+import { chmod, mkdir, stat, unlink, access } from 'node:fs/promises';
+import { createConnection } from 'node:net';
+import { dirname } from 'node:path';
+import { encodeFrame, FrameDecoder, PROTOCOL_VERSION, DaemonProtocolError, } from './protocol.js';
+export async function startDaemon(opts) {
+    const { handlers, daemonVersion } = opts;
+    const log = opts.onLog ?? (() => { });
+    // Normalise the binding. Accept either `bind` (new shape) or the
+    // legacy `socketPath` string.
+    const bind = opts.bind
+        ? opts.bind
+        : opts.socketPath
+            ? { transport: 'unix', socketPath: opts.socketPath }
+            : (() => {
+                throw new Error('startDaemon: either `bind` or `socketPath` is required');
+            })();
+    // Stage-2 invariant: TCP must have an auth handler. Without it the
+    // operator would be exposing every write verb (transfer, deploy,
+    // call, dust, maintenance) to anyone who can reach the port.
+    // Unix transport stays optional — kernel UID on the 0600 socket
+    // is sufficient AuthN for the local-only model.
+    if (bind.transport === 'tcp' && !opts.auth) {
+        throw new Error('startDaemon: TCP transport requires an `auth` handler. Provision API keys via `moth daemon key gen` and pass the resulting ApiKeyStore-backed handler.');
+    }
+    // Per-transport pre-listen work (Unix only — directory perms,
+    // stale-file reap).
+    if (bind.transport === 'unix') {
+        await ensureSocketDir(dirname(bind.socketPath));
+        await reapStaleSocket(bind.socketPath, log);
+    }
+    const builtins = {
+        version: () => ({ protocol: PROTOCOL_VERSION, daemon: daemonVersion }),
+    };
+    if (opts.auth) {
+        builtins.auth = async (rawParams, ctx) => {
+            const params = rawParams;
+            if (typeof params?.token !== 'string' || params.token.length === 0) {
+                throw new DaemonProtocolError('INVALID_PARAMS', 'auth.token must be a non-empty string');
+            }
+            const result = await opts.auth(params.token);
+            if (!result) {
+                opts.onAuthEvent?.({ outcome: 'failure', peer: ctx.peer });
+                throw new DaemonProtocolError('UNAUTHORIZED', 'auth failed');
+            }
+            opts.onAuthEvent?.({ outcome: 'success', apiKeyId: result.apiKeyId, peer: ctx.peer });
+            // Mutate the per-connection context. attachConnectionHandlers
+            // hands the same `ctx` object to every subsequent dispatch, so
+            // gating later methods on `ctx.apiKeyId` is sufficient.
+            ctx.apiKeyId = result.apiKeyId;
+            ctx.apiKeyLabel = result.label;
+            // Normalise scopes to the typed set. Unknown scopes are
+            // silently dropped — they could never satisfy a known
+            // requirement anyway.
+            const VALID = ['read', 'write'];
+            const parsed = (result.scopes ?? ['write'])
+                .filter((s) => VALID.includes(s));
+            ctx.scopes = parsed;
+            log('info', `client ${ctx.id} authed as key ${result.apiKeyId} (${result.label ?? '-'}) scopes=[${parsed.join(',')}]`);
+            return { apiKeyId: result.apiKeyId, label: result.label, scopes: parsed };
+        };
+    }
+    const allHandlers = { ...handlers, ...builtins };
+    // Methods always reachable without auth. `version` is the
+    // handshake (clients call it before auth to verify protocol
+    // version), `auth` itself obviously can't require auth.
+    const ALWAYS_OPEN = new Set(['version', 'auth']);
+    // Wrap every other handler with an auth + scope check when auth
+    // is on. The auth check is per-call on the connection context (not
+    // per method registration), so a single connection that
+    // successfully authenticates unlocks every method it has scope for
+    // for the rest of its lifetime. The scope check looks at the
+    // handler's declared `scope` (defaulting to 'write' when absent,
+    // so a new handler without the annotation cannot be accidentally
+    // called by a read-only key).
+    const gated = {};
+    for (const [name, h] of Object.entries(allHandlers)) {
+        if (ALWAYS_OPEN.has(name) || !opts.auth) {
+            gated[name] = h;
+            continue;
+        }
+        const required = h.scope ?? 'write';
+        const wrapper = async (params, ctx) => {
+            if (!ctx.apiKeyId) {
+                throw new DaemonProtocolError('UNAUTHORIZED', `method "${name}" requires authentication — call \`auth\` with a valid \`<id>.<secret>\` token first`);
+            }
+            if (ctx.scopes && !ctx.scopes.includes(required)) {
+                throw new DaemonProtocolError('UNAUTHORIZED', `method "${name}" requires the "${required}" scope; key ${ctx.apiKeyId} has [${(ctx.scopes ?? []).join(', ')}]`);
+            }
+            return h(params, ctx);
+        };
+        // Forward the scope annotation in case a future inspector reads
+        // it back off the gated map.
+        wrapper.scope = required;
+        gated[name] = wrapper;
+    }
+    const server = createServer();
+    let nextConnId = 1;
+    const liveSockets = new Set();
+    server.on('connection', (sock) => {
+        const remote = bind.transport === 'tcp' ? 'tcp' : 'unix';
+        const peer = bind.transport === 'tcp'
+            ? `${sock.remoteAddress ?? '?'}:${sock.remotePort ?? '?'}`
+            : 'unix';
+        const ctx = { id: nextConnId++, remote, peer };
+        liveSockets.add(sock);
+        opts.onActivity?.();
+        log('info', `client ${ctx.id} connected (${peer})`);
+        attachConnectionHandlers(sock, ctx, gated, log, opts.onActivity);
+        sock.on('close', () => {
+            liveSockets.delete(sock);
+            log('info', `client ${ctx.id} disconnected`);
+        });
+    });
+    server.on('error', (err) => {
+        log('error', `daemon server error: ${err.message}`);
+    });
+    await new Promise((resolve, reject) => {
+        const onListen = () => {
+            server.off('error', onError);
+            resolve();
+        };
+        const onError = (err) => {
+            server.off('listening', onListen);
+            reject(err);
+        };
+        server.once('listening', onListen);
+        server.once('error', onError);
+        if (bind.transport === 'unix') {
+            server.listen(bind.socketPath);
+        }
+        else {
+            // TCP: bind to the requested host (caller is responsible for
+            // restricting to loopback — 127.0.0.1 — at stage 2; only
+            // stage-3 deployments behind a reverse proxy should bind 0.0.0.0
+            // and rely on the proxy's firewall + AuthN for safety).
+            server.listen(bind.port, bind.host);
+        }
+    });
+    let listenAddress;
+    if (bind.transport === 'unix') {
+        // L1: tighten the socket file to owner-only access. createServer
+        // doesn't do this for us; the file is created with the process
+        // umask, which is typically too permissive. The TCP transport
+        // has no equivalent — relies on loopback bind + AuthN at stage 2.
+        await chmod(bind.socketPath, 0o600);
+        listenAddress = `unix://${bind.socketPath}`;
+    }
+    else {
+        listenAddress = `tcp://${bind.host}:${bind.port}`;
+    }
+    log('info', `daemon listening at ${listenAddress}`);
+    return {
+        bind,
+        socketPath: bind.transport === 'unix' ? bind.socketPath : '',
+        listenAddress,
+        async close() {
+            log('info', 'daemon shutting down');
+            for (const sock of liveSockets)
+                sock.destroy();
+            liveSockets.clear();
+            await new Promise((resolve) => server.close(() => resolve()));
+            if (bind.transport === 'unix') {
+                await unlink(bind.socketPath).catch(() => { });
+            }
+        },
+    };
+}
+async function ensureSocketDir(dir) {
+    await mkdir(dir, { recursive: true, mode: 0o700 });
+    // chmod separately so that an existing dir gets its perms tightened too;
+    // mkdir({mode}) only applies to newly-created directories.
+    await chmod(dir, 0o700);
+}
+/**
+ * If the socket file already exists, probe whether anyone is actually
+ * listening. If a peer accepts our connect, fail loud — another daemon is
+ * alive. If the connect is refused or times out quickly, treat the file as
+ * a leftover from a crashed previous instance and unlink it.
+ */
+async function reapStaleSocket(socketPath, log) {
+    try {
+        await access(socketPath);
+    }
+    catch {
+        return; // no file, nothing to reap
+    }
+    const alive = await probeListener(socketPath);
+    if (alive) {
+        throw new Error(`another moth daemon is already listening at ${socketPath}; refusing to bind`);
+    }
+    log('warn', `removing stale socket at ${socketPath}`);
+    await unlink(socketPath).catch(() => { });
+}
+function probeListener(socketPath) {
+    return new Promise((resolve) => {
+        const probe = createConnection(socketPath);
+        const cleanup = (alive) => {
+            probe.removeAllListeners();
+            probe.destroy();
+            resolve(alive);
+        };
+        probe.once('connect', () => cleanup(true));
+        probe.once('error', () => cleanup(false));
+        // Defensive: 2s is plenty for a local socket; if we hang past that
+        // assume something is wrong and treat as dead so the daemon can boot.
+        setTimeout(() => cleanup(false), 2000).unref();
+    });
+}
+function attachConnectionHandlers(sock, ctx, handlers, log, onActivity) {
+    const decoder = new FrameDecoder();
+    sock.on('data', async (chunk) => {
+        onActivity?.();
+        let frames;
+        try {
+            frames = decoder.push(chunk);
+        }
+        catch (err) {
+            log('warn', `client ${ctx.id} sent malformed frame: ${err.message}`);
+            sock.destroy();
+            return;
+        }
+        for (const frame of frames) {
+            if (frame.type !== 'request') {
+                // Servers don't currently accept response frames from clients —
+                // the protocol is request/response, not bidirectional RPC.
+                sendFrame(sock, {
+                    id: frame.id,
+                    type: 'response',
+                    error: { code: 'INVALID_REQUEST', message: 'server only accepts requests' },
+                });
+                continue;
+            }
+            await dispatchRequest(sock, ctx, frame, handlers, log);
+        }
+    });
+    sock.on('error', (err) => {
+        log('warn', `client ${ctx.id} socket error: ${err.message}`);
+    });
+}
+async function dispatchRequest(sock, ctx, req, handlers, log) {
+    const handler = handlers[req.method];
+    if (!handler) {
+        sendFrame(sock, errorResponse(req.id, 'METHOD_NOT_FOUND', `no handler for ${req.method}`));
+        return;
+    }
+    try {
+        const result = await handler(req.params, ctx);
+        sendFrame(sock, { id: req.id, type: 'response', result });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        // Preserve the handler's intended RpcErrorCode when it threw a
+        // DaemonProtocolError — otherwise clients can't distinguish e.g.
+        // UNAUTHORIZED, INVALID_PARAMS, METHOD_NOT_FOUND from a generic
+        // INTERNAL_ERROR. Any other error class is mapped to INTERNAL_ERROR
+        // so a buggy handler can't leak unexpected codes onto the wire.
+        const code = err instanceof DaemonProtocolError ? err.code : 'INTERNAL_ERROR';
+        log('warn', `client ${ctx.id} method ${req.method} threw [${code}]: ${message}`);
+        sendFrame(sock, errorResponse(req.id, code, message));
+    }
+}
+function errorResponse(id, code, message) {
+    return { id, type: 'response', error: { code, message } };
+}
+function sendFrame(sock, frame) {
+    if (sock.destroyed || !sock.writable)
+        return;
+    try {
+        sock.write(encodeFrame(frame));
+    }
+    catch {
+        // socket errors will surface via the 'error' listener; nothing to do here
+    }
+}
+/** Test-only helper. Exported for unit tests that need to bind a temporary
+ *  socket without ensuring the directory exists. Production code should
+ *  always go through startDaemon. */
+export async function _stat(path) {
+    const s = await stat(path);
+    return { mode: s.mode };
+}
+//# sourceMappingURL=server.js.map

package/dist/daemon/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/daemon/server.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,wEAAwE;AACxE,YAAY;AACZ,EAAE;AACF,wCAAwC;AACxC,yEAAyE;AACzE,uEAAuE;AACvE,sCAAsC;AACtC,0EAA0E;AAC1E,wEAAwE;AACxE,EAAE;AACF,2EAA2E;AAC3E,uEAAuE;AACvE,sDAAsD;AAEtD,OAAO,EAAC,YAAY,EAA2B,MAAM,UAAU,CAAC;AAChE,OAAO,EAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAC,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,GAIpB,MAAM,eAAe,CAAC;AA4JvB,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAmB;IACnD,MAAM,EAAC,QAAQ,EAAE,aAAa,EAAC,GAAG,IAAI,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAErC,iEAAiE;IACjE,8BAA8B;IAC9B,MAAM,IAAI,GAAe,IAAI,CAAC,IAAI;QAChC,CAAC,CAAC,IAAI,CAAC,IAAI;QACX,CAAC,CAAC,IAAI,CAAC,UAAU;YACf,CAAC,CAAC,EAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAC;YAClD,CAAC,CAAC,CAAC,GAAG,EAAE;gBACJ,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC,CAAC,EAAE,CAAC;IAEX,mEAAmE;IACnE,iEAAiE;IACjE,6DAA6D;IAC7D,gEAAgE;IAChE,gDAAgD;IAChD,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,wJAAwJ,CACzJ,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,oBAAoB;IACpB,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC9B,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAChD,MAAM,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,QAAQ,GAA+B;QAC3C,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAC,CAAC;KACrE,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,QAAQ,CAAC,IAAI,GAAG,KAAK,EAAE,SAAkB,EAAE,GAAsB,EAAE,EAAE;YACnE,MAAM,MAAM,GAAG,SAA8B,CAAC;YAC9C,IAAI,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,uCAAuC,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,CAAC,WAAW,EAAE,CAAC,EAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAC,CAAC,CAAC;gBACzD,MAAM,IAAI,mBAAmB,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC,EAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAC,CAAC,CAAC;YACpF,8DAA8D;YAC9D,+DAA+D;YAC/D,wDAAwD;YACxD,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC/B,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;YAC/B,wDAAwD;YACxD,sDAAsD;YACtD,sBAAsB;YACtB,MAAM,KAAK,GAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;iBACxC,MAAM,CAAC,CAAC,CAAC,EAAc,EAAE,CAAE,KAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;YACpB,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,CAAC,EAAE,kBAAkB,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,IAAI,GAAG,aAAa,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvH,OAAO,EAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAC,CAAC;QAC1E,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAA+B,EAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,EAAC,CAAC;IAE3E,0DAA0D;IAC1D,4DAA4D;IAC5D,wDAAwD;IACxD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAEjD,gEAAgE;IAChE,mEAAmE;IACnE,wDAAwD;IACxD,mEAAmE;IACnE,6DAA6D;IAC7D,iEAAiE;IACjE,iEAAiE;IACjE,8BAA8B;IAC9B,MAAM,KAAK,GAA+B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACpD,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAU,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC;QAC3C,MAAM,OAAO,GAAe,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;YAChD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAClB,MAAM,IAAI,mBAAmB,CAC3B,cAAc,EACd,WAAW,IAAI,sFAAsF,CACtG,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,mBAAmB,CAC3B,cAAc,EACd,WAAW,IAAI,mBAAmB,QAAQ,gBAAgB,GAAG,CAAC,QAAQ,SAAS,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAChH,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,gEAAgE;QAChE,6BAA6B;QAC7B,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IACxB,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAgC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACtF,MAAM,IAAI,GACR,IAAI,CAAC,SAAS,KAAK,KAAK;YACtB,CAAC,CAAC,GAAG,IAAI,CAAC,aAAa,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,IAAI,GAAG,EAAE;YAC1D,CAAC,CAAC,MAAM,CAAC;QACb,MAAM,GAAG,GAAsB,EAAC,EAAE,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAC,CAAC;QAChE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,CAAC,EAAE,eAAe,IAAI,GAAG,CAAC,CAAC;QACpD,wBAAwB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzB,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACzB,GAAG,CAAC,OAAO,EAAE,wBAAwB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;YAC7B,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,6DAA6D;YAC7D,yDAAyD;YACzD,iEAAiE;YACjE,wDAAwD;YACxD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,aAAqB,CAAC;IAC1B,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC9B,iEAAiE;QACjE,+DAA+D;QAC/D,8DAA8D;QAC9D,kEAAkE;QAClE,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACpC,aAAa,GAAG,UAAU,IAAI,CAAC,UAAU,EAAE,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,aAAa,GAAG,SAAS,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,GAAG,CAAC,MAAM,EAAE,uBAAuB,aAAa,EAAE,CAAC,CAAC;IAEpD,OAAO;QACL,IAAI;QACJ,UAAU,EAAE,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;QAC5D,aAAa;QACb,KAAK,CAAC,KAAK;YACT,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;YACpC,KAAK,MAAM,IAAI,IAAI,WAAW;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/C,WAAW,CAAC,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACpE,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;gBAC9B,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAC,CAAC,CAAC;IACjD,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,GAA4D;IAE5D,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,2BAA2B;IACrC,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,+CAA+C,UAAU,oBAAoB,CAC9E,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,MAAM,EAAE,4BAA4B,UAAU,EAAE,CAAC,CAAC;IACtD,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,UAAkB;IACvC,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;QACtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE;YACjC,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC3B,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,mEAAmE;QACnE,sEAAsE;QACtE,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAC/B,IAAY,EACZ,GAAsB,EACtB,QAA8C,EAC9C,GAA4D,EAC5D,UAAuB;IAEvB,MAAM,OAAO,GAAG,IAAI,YAAY,EAAE,CAAC;IAEnC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;QACtC,UAAU,EAAE,EAAE,CAAC;QACf,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,CAAC,EAAE,0BAA2B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,gEAAgE;gBAChE,2DAA2D;gBAC3D,SAAS,CAAC,IAAI,EAAE;oBACd,EAAE,EAAE,KAAK,CAAC,EAAE;oBACZ,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,EAAC,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8BAA8B,EAAC;iBAC1E,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACvB,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,CAAC,EAAE,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAY,EACZ,GAAsB,EACtB,GAAiB,EACjB,QAA8C,EAC9C,GAA4D;IAE5D,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,kBAAkB,EAAE,kBAAkB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3F,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9C,SAAS,CAAC,IAAI,EAAE,EAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,+DAA+D;QAC/D,iEAAiE;QACjE,gEAAgE;QAChE,oEAAoE;QACpE,gEAAgE;QAChE,MAAM,IAAI,GAAiB,GAAG,YAAY,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC5F,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,CAAC,EAAE,WAAW,GAAG,CAAC,MAAM,WAAW,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;QACjF,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,EAAU,EAAE,IAAkB,EAAE,OAAe;IACpE,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAC,IAAI,EAAE,OAAO,EAAC,EAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAY;IAC3C,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO;IAC7C,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC;AAED;;qCAEqC;AACrC,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAY;IACtC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,EAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAC,CAAC;AACxB,CAAC"}

package/dist/daemon/wallet-handlers.d.ts

@@ -0,0 +1,37 @@
+import type { WalletFacade } from '@midnightntwrk/wallet-sdk/facade';
+import type { ConfirmationQueue } from './confirmation-queue.js';
+import type { RpcHandler } from './server.js';
+import type { AuditLog } from './audit-log.js';
+import type { WalletKeys } from '../sync/operations.js';
+import type { WalletBalances } from '../sync/wallet-sync.js';
+import type { NetworkConfig } from '../types/network.js';
+export interface WalletHandlerDeps {
+    /** Identifier echoed in modal payloads. */
+    readonly walletName: string;
+    /** Network config — also identifies which socket-bound wallet this is. */
+    readonly network: NetworkConfig;
+    /** Returns the live WalletFacade or null when not yet ready. */
+    readonly getFacade: () => WalletFacade | null;
+    /** Returns the typed key bundle or null when not yet ready. */
+    readonly getWalletKeys: () => WalletKeys | null;
+    /** Returns the latest WalletBalances snapshot or null. */
+    readonly getBalances: () => WalletBalances | null;
+    /** Queue used to surface L3 confirmation prompts. */
+    readonly queue: ConfirmationQueue;
+    /** Logger forwarded to long-running operation progress callbacks. */
+    readonly log?: (level: 'info' | 'warn' | 'error', msg: string) => void;
+    /** Optional persistent audit sink. Every write verb's
+     *  request/decision/outcome is appended to it when present;
+     *  omitted handlers run with stderr-only logging (stage 1). */
+    readonly auditLog?: AuditLog;
+    /** Per-transaction NIGHT spend cap (raw base units). When set (headless
+     *  auto-approve mode), a NIGHT transfer above this is refused. Undefined
+     *  in interactive hosts, where a human approves each transfer instead. */
+    readonly maxSpendRaw?: bigint;
+}
+/**
+ * Build the wallet daemon's RPC handler map. Same map for both hosting
+ * sites; differences are entirely in the deps object.
+ */
+export declare function buildWalletHandlers(deps: WalletHandlerDeps): Record<string, RpcHandler>;
+//# sourceMappingURL=wallet-handlers.d.ts.map

package/dist/daemon/wallet-handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-handlers.d.ts","sourceRoot":"","sources":["../../src/daemon/wallet-handlers.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,kCAAkC,CAAC;AAGnE,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAC,UAAU,EAAoB,MAAM,aAAa,CAAC;AAC/D,OAAO,KAAK,EAAC,QAAQ,EAAgB,MAAM,gBAAgB,CAAC;AA0B5D,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAStD,OAAO,KAAK,EAAe,cAAc,EAAC,MAAM,wBAAwB,CAAC;AACzE,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAoBvD,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,MAAM,YAAY,GAAG,IAAI,CAAC;IAC9C,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,EAAE,MAAM,UAAU,GAAG,IAAI,CAAC;IAChD,0DAA0D;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,cAAc,GAAG,IAAI,CAAC;IAClD,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,qEAAqE;IACrE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACvE;;mEAE+D;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B;;8EAE0E;IAC1E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAsmBvF"}