@thenewlabs/entangle-serve 2.1.0

package/dist/stream-manager.d.ts

@@ -0,0 +1,122 @@
+import { OutputHandler } from '@thenewlabs/entangle-utils';
+import { ChildProcess } from 'child_process';
+import { EventEmitter } from 'events';
+import * as pty from '@homebridge/node-pty-prebuilt-multiarch';
+import { StreamMode, StreamMetadata, StreamUsage, StreamPtyOptions, StreamExecOptions, Policy } from '@thenewlabs/entangle-protocol';
+export interface Stream {
+    sid: string;
+    mode: StreamMode;
+    startedAt: number;
+    endedAt?: number;
+    process?: ChildProcess | pty.IPty;
+    usage: StreamUsage;
+    aborted: boolean;
+    limits: {
+        cpuMs?: number;
+        memMB?: number;
+        wallMs?: number;
+        maxOutBytes?: number;
+    };
+    wallTimer?: ReturnType<typeof setTimeout>;
+    idleTimer?: ReturnType<typeof setTimeout>;
+    resourceTimer?: ReturnType<typeof setInterval>;
+}
+interface StreamManagerOptions {
+    policy: Policy;
+    output: OutputHandler;
+    onStreamData?: (sid: string, data: Uint8Array, channel: 'stdout' | 'stderr') => void;
+    onStreamExit?: (sid: string, code: number | null, signal: string | null, usage?: StreamUsage) => void;
+    onStreamError?: (sid: string, error: string) => void;
+}
+export declare class StreamManager extends EventEmitter {
+    private options;
+    private streams;
+    private policy;
+    private output;
+    private aggregateUsage;
+    constructor(options: StreamManagerOptions);
+    /**
+     * Generate a unique stream ID
+     */
+    private generateStreamId;
+    /**
+     * Resolve a requested cwd and confine it to AGENT_DEFAULT_CWD (the working
+     * directory doubles as the execution boundary). Symlinks are resolved
+     * (realpath) BEFORE the prefix check so a symlink inside the dir can't point
+     * the process outside it. Throws if the resolved path is outside the boundary.
+     * NOTE: this only constrains the initial cwd, not a full filesystem sandbox.
+     */
+    private resolveCwd;
+    /**
+     * Check if we can open a new stream
+     */
+    private canOpenStream;
+    /**
+     * Get stream-specific limits.
+     *
+     * Interactive PTYs are deliberately exempt from ALL command-oriented caps —
+     * wall-clock, cumulative output ceiling, and CPU/memory guards. A legitimate
+     * terminal session can stay open for hours, stream far more than
+     * MAX_OUT_BYTES, and burn CPU interactively, so any of these would force-close
+     * it mid-use. A PTY is bounded solely by the idle timeout (see
+     * armIdleTimeout). Command ('cmd') streams keep every limit.
+     */
+    private getStreamLimits;
+    /**
+     * Arm a wall-clock deadline that force-closes the stream if it outlives its
+     * limit. Unref'd so the timer never keeps the process alive on its own.
+     */
+    private armWallClock;
+    /**
+     * (Re)arm the PTY idle timeout. Called on every byte of PTY output so an
+     * interactive session is only reaped after genuine inactivity.
+     */
+    private armIdleTimeout;
+    private clearTimers;
+    private readProcessUsage;
+    private armResourceMonitor;
+    /**
+     * Open a new PTY stream
+     */
+    openPtyStream(options: StreamPtyOptions & {
+        cwd?: string;
+    }): Promise<string>;
+    /**
+     * Open a new command stream
+     */
+    openCmdStream(options: StreamExecOptions): Promise<string>;
+    /**
+     * Write data to a stream (stdin)
+     */
+    writeToStream(sid: string, data: Uint8Array): void;
+    /**
+     * Resize a PTY stream
+     */
+    resizePtyStream(sid: string, cols: number, rows: number): void;
+    /**
+     * Send signal to a stream
+     */
+    signalStream(sid: string, signal: NodeJS.Signals): void;
+    /**
+     * Close a stream
+     */
+    closeStream(sid: string, reason?: string): void;
+    /**
+     * Close all streams
+     */
+    closeAllStreams(reason?: string): void;
+    /**
+     * Get stream info
+     */
+    getStream(sid: string): Stream | undefined;
+    /**
+     * Get all active streams
+     */
+    getActiveStreams(): StreamMetadata[];
+    /**
+     * Get aggregate usage across all streams
+     */
+    getAggregateUsage(): StreamUsage;
+}
+export {};
+//# sourceMappingURL=stream-manager.d.ts.map

package/dist/stream-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-manager.d.ts","sourceRoot":"","sources":["../src/stream-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4D,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACrH,OAAO,EAAS,YAAY,EAAgB,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAItC,OAAO,KAAK,GAAG,MAAM,yCAAyC,CAAC;AAC/D,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,MAAM,EAEP,MAAM,+BAA+B,CAAC;AAEvC,MAAM,WAAW,MAAM;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;IAClC,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,SAAS,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IAC1C,SAAS,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IAC1C,aAAa,CAAC,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;CAChD;AAED,UAAU,oBAAoB;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC;IACrF,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,WAAW,KAAK,IAAI,CAAC;IACtG,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACtD;AAED,qBAAa,aAAc,SAAQ,YAAY;IAWjC,OAAO,CAAC,OAAO;IAV3B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,cAAc,CAKpB;gBAEkB,OAAO,EAAE,oBAAoB;IAMjD;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAkBlB;;OAEG;IACH,OAAO,CAAC,aAAa;IAUrB;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe;IAuBvB;;;OAGG;IACH,OAAO,CAAC,YAAY;IAapB;;;OAGG;IACH,OAAO,CAAC,cAAc;IAatB,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,kBAAkB;IAiB1B;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,gBAAgB,GAAG;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAmElF;;OAEG;IACG,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAwGhE;;OAEG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI;IAqBlD;;OAEG;IACH,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAe9D;;OAEG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI;IAiBvD;;OAEG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAkD/C;;OAEG;IACH,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAMtC;;OAEG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI1C;;OAEG;IACH,gBAAgB,IAAI,cAAc,EAAE;IAcpC;;OAEG;IACH,iBAAiB,IAAI,WAAW;CAGjC"}

package/dist/stream-manager.js

@@ -0,0 +1,488 @@
+import { validateArguments, validateCwd, buildChildEnv, getConfig } from '@thenewlabs/entangle-utils';
+import { spawn } from 'child_process';
+import { EventEmitter } from 'events';
+import { randomBytes } from 'crypto';
+import { readFileSync, realpathSync } from 'fs';
+import { resolve as resolvePath } from 'path';
+import * as pty from '@homebridge/node-pty-prebuilt-multiarch';
+import { DEFAULT_LIMITS } from '@thenewlabs/entangle-protocol';
+export class StreamManager extends EventEmitter {
+    options;
+    streams = new Map();
+    policy;
+    output;
+    aggregateUsage = {
+        cpuMs: 0,
+        rssMaxBytes: 0,
+        wallMs: 0,
+        outBytes: 0,
+    };
+    constructor(options) {
+        super();
+        this.options = options;
+        this.policy = options.policy;
+        this.output = options.output;
+    }
+    /**
+     * Generate a unique stream ID
+     */
+    generateStreamId() {
+        return randomBytes(8).toString('base64url');
+    }
+    /**
+     * Resolve a requested cwd and confine it to AGENT_DEFAULT_CWD (the working
+     * directory doubles as the execution boundary). Symlinks are resolved
+     * (realpath) BEFORE the prefix check so a symlink inside the dir can't point
+     * the process outside it. Throws if the resolved path is outside the boundary.
+     * NOTE: this only constrains the initial cwd, not a full filesystem sandbox.
+     */
+    resolveCwd(requestedCwd) {
+        const config = getConfig();
+        const base = requestedCwd
+            ? resolvePath(config.agentDefaultCwd, requestedCwd)
+            : config.agentDefaultCwd;
+        let real = base;
+        try {
+            real = realpathSync(base);
+        }
+        catch {
+            // Path may not exist yet; validate the resolved (non-symlink) form.
+        }
+        // Boundary-aware prefix check (see utils validateCwd).
+        validateCwd(real, config.agentAllowedCwd);
+        return real;
+    }
+    /**
+     * Check if we can open a new stream
+     */
+    canOpenStream() {
+        const maxStreams = this.policy.maxStreams || 1;
+        if (this.streams.size >= maxStreams) {
+            return { allowed: false, reason: `Maximum streams (${maxStreams}) reached` };
+        }
+        return { allowed: true };
+    }
+    /**
+     * Get stream-specific limits.
+     *
+     * Interactive PTYs are deliberately exempt from ALL command-oriented caps —
+     * wall-clock, cumulative output ceiling, and CPU/memory guards. A legitimate
+     * terminal session can stay open for hours, stream far more than
+     * MAX_OUT_BYTES, and burn CPU interactively, so any of these would force-close
+     * it mid-use. A PTY is bounded solely by the idle timeout (see
+     * armIdleTimeout). Command ('cmd') streams keep every limit.
+     */
+    getStreamLimits(mode) {
+        const limits = {};
+        if (mode === 'pty')
+            return limits;
+        const maxStreams = this.policy.maxStreams || 1;
+        const config = getConfig();
+        const perStream = this.policy.perStream;
+        // Apply defaults even when a partial per-stream policy is present.
+        const cpuMs = perStream?.maxCpuMs ?? this.policy.maxCpuMs ?? DEFAULT_LIMITS.MAX_CPU_MS;
+        const memMB = perStream?.maxMemMB ?? this.policy.maxMemMB ?? DEFAULT_LIMITS.MAX_MEM_MB;
+        limits.cpuMs = Math.max(1, Math.floor(cpuMs / maxStreams));
+        limits.memMB = Math.max(1, Math.floor(memMB / maxStreams));
+        const wallMs = perStream?.maxWallMs ?? this.policy.maxWallMs ?? config.cmdDefaultWallMs;
+        if (wallMs > 0)
+            limits.wallMs = Math.floor(wallMs / maxStreams);
+        const maxOutBytes = perStream?.maxOutBytes ?? this.policy.maxOutBytes ?? config.maxOutBytes;
+        if (maxOutBytes > 0)
+            limits.maxOutBytes = Math.floor(maxOutBytes / maxStreams);
+        return limits;
+    }
+    /**
+     * Arm a wall-clock deadline that force-closes the stream if it outlives its
+     * limit. Unref'd so the timer never keeps the process alive on its own.
+     */
+    armWallClock(stream) {
+        const wallMs = stream.limits.wallMs;
+        if (!wallMs || wallMs <= 0)
+            return;
+        stream.wallTimer = setTimeout(() => {
+            const current = this.streams.get(stream.sid);
+            if (current && current.endedAt === undefined) {
+                this.output.warn(`Stream wall-clock limit exceeded for ${stream.sid}: limit=${wallMs}ms`);
+                this.closeStream(stream.sid, 'Wall-clock limit exceeded');
+            }
+        }, wallMs);
+        if (typeof stream.wallTimer.unref === 'function')
+            stream.wallTimer.unref();
+    }
+    /**
+     * (Re)arm the PTY idle timeout. Called on every byte of PTY output so an
+     * interactive session is only reaped after genuine inactivity.
+     */
+    armIdleTimeout(stream, idleMs) {
+        if (!idleMs || idleMs <= 0)
+            return;
+        if (stream.idleTimer)
+            clearTimeout(stream.idleTimer);
+        stream.idleTimer = setTimeout(() => {
+            const current = this.streams.get(stream.sid);
+            if (current && current.endedAt === undefined) {
+                this.output.warn(`PTY idle timeout for ${stream.sid}: idle=${idleMs}ms`);
+                this.closeStream(stream.sid, 'Idle timeout');
+            }
+        }, idleMs);
+        if (typeof stream.idleTimer.unref === 'function')
+            stream.idleTimer.unref();
+    }
+    clearTimers(stream) {
+        if (stream.wallTimer) {
+            clearTimeout(stream.wallTimer);
+            delete stream.wallTimer;
+        }
+        if (stream.idleTimer) {
+            clearTimeout(stream.idleTimer);
+            delete stream.idleTimer;
+        }
+        if (stream.resourceTimer) {
+            clearInterval(stream.resourceTimer);
+            delete stream.resourceTimer;
+        }
+    }
+    readProcessUsage(pid) {
+        if (process.platform !== 'linux')
+            return undefined;
+        try {
+            const stat = readFileSync(`/proc/${pid}/stat`, 'utf8');
+            const endComm = stat.lastIndexOf(')');
+            if (endComm < 0)
+                return undefined;
+            const fields = stat.slice(endComm + 2).trim().split(/\s+/);
+            const userTicks = Number(fields[11]);
+            const systemTicks = Number(fields[12]);
+            const rssPages = Number(fields[21]);
+            if (![userTicks, systemTicks, rssPages].every(Number.isFinite))
+                return undefined;
+            return { cpuMs: ((userTicks + systemTicks) * 1000) / 100, rssBytes: rssPages * 4096 };
+        }
+        catch {
+            return undefined;
+        }
+    }
+    armResourceMonitor(stream) {
+        const pid = stream.process && 'pid' in stream.process ? stream.process.pid : undefined;
+        if (!pid || (!stream.limits.cpuMs && !stream.limits.memMB))
+            return;
+        stream.resourceTimer = setInterval(() => {
+            const usage = this.readProcessUsage(pid);
+            if (!usage)
+                return;
+            stream.usage.cpuMs = usage.cpuMs;
+            stream.usage.rssMaxBytes = Math.max(stream.usage.rssMaxBytes, usage.rssBytes);
+            if (stream.limits.cpuMs && usage.cpuMs > stream.limits.cpuMs) {
+                this.closeStream(stream.sid, 'CPU limit exceeded');
+            }
+            else if (stream.limits.memMB && usage.rssBytes > stream.limits.memMB * 1024 * 1024) {
+                this.closeStream(stream.sid, 'Memory limit exceeded');
+            }
+        }, 100);
+        if (typeof stream.resourceTimer.unref === 'function')
+            stream.resourceTimer.unref();
+    }
+    /**
+     * Open a new PTY stream
+     */
+    async openPtyStream(options) {
+        const check = this.canOpenStream();
+        if (!check.allowed) {
+            throw new Error(check.reason);
+        }
+        const sid = this.generateStreamId();
+        const limits = this.getStreamLimits('pty');
+        const config = getConfig();
+        const cwd = this.resolveCwd(options.cwd);
+        const env = buildChildEnv(config.agentEnvPassthrough, options.env);
+        env.TERM = 'xterm-256color';
+        // Create PTY
+        const ptyProcess = pty.spawn(config.agentShell, [], {
+            name: 'xterm-256color',
+            cols: options.cols,
+            rows: options.rows,
+            cwd,
+            env,
+        });
+        const stream = {
+            sid,
+            mode: 'pty',
+            startedAt: Date.now(),
+            process: ptyProcess,
+            usage: { cpuMs: 0, rssMaxBytes: 0, wallMs: 0, outBytes: 0 },
+            aborted: false,
+            limits,
+        };
+        const idleMs = config.ttyIdleTimeoutMs;
+        // Handle PTY data
+        ptyProcess.onData((data) => {
+            if (stream.aborted)
+                return;
+            const chunk = Buffer.from(data);
+            // Track bytes for usage reporting only; PTYs have no cumulative output
+            // ceiling (limits.maxOutBytes is unset for pty streams).
+            stream.usage.outBytes += chunk.length;
+            this.armIdleTimeout(stream, idleMs);
+            this.options.onStreamData?.(sid, chunk, 'stdout');
+        });
+        // Handle PTY exit
+        ptyProcess.onExit((exitCode) => {
+            stream.endedAt = Date.now();
+            stream.usage.wallMs = stream.endedAt - stream.startedAt;
+            this.clearTimers(stream);
+            this.output.info(`PTY stream exited for ${sid}: code=${exitCode.exitCode}, signal=${exitCode.signal}`);
+            this.options.onStreamExit?.(sid, exitCode.exitCode ?? null, exitCode.signal ? String(exitCode.signal) : null, stream.usage);
+            this.streams.delete(sid);
+        });
+        this.streams.set(sid, stream);
+        // No wall-clock or resource monitor for PTYs — only the idle timeout bounds
+        // an interactive session (see getStreamLimits).
+        this.armIdleTimeout(stream, idleMs);
+        this.output.info(`Opened PTY stream ${sid}: cols=${options.cols}, rows=${options.rows}`);
+        return sid;
+    }
+    /**
+     * Open a new command stream
+     */
+    async openCmdStream(options) {
+        const check = this.canOpenStream();
+        if (!check.allowed) {
+            throw new Error(check.reason);
+        }
+        // Validate arguments
+        try {
+            const config = getConfig();
+            validateArguments(options.argv, config.maxArgCount, config.maxArgLen);
+        }
+        catch (err) {
+            throw new Error(`Invalid arguments: ${err.message}`);
+        }
+        const sid = this.generateStreamId();
+        const limits = this.getStreamLimits('cmd');
+        const config = getConfig();
+        // Spawn process with a validated cwd and a minimal, curated environment.
+        const spawnOptions = {
+            shell: false,
+            detached: process.platform !== 'win32',
+            stdio: ['pipe', 'pipe', 'pipe'],
+            cwd: this.resolveCwd(options.cwd),
+            env: buildChildEnv(config.agentEnvPassthrough, options.env),
+        };
+        if (!options.argv || options.argv.length === 0) {
+            throw new Error('No command specified');
+        }
+        const [command, ...args] = options.argv;
+        if (!command) {
+            throw new Error('No command specified');
+        }
+        const childProcess = spawn(command, args, spawnOptions);
+        const stream = {
+            sid,
+            mode: 'cmd',
+            startedAt: Date.now(),
+            process: childProcess,
+            usage: { cpuMs: 0, rssMaxBytes: 0, wallMs: 0, outBytes: 0 },
+            aborted: false,
+            limits,
+        };
+        // Handle stdout / stderr (both count toward the output ceiling, but are
+        // tagged so the invoker can route them to the right fd).
+        const handleOutput = (channel) => (chunk) => {
+            if (stream.aborted)
+                return;
+            stream.usage.outBytes += chunk.length;
+            // Check output limit
+            if (limits.maxOutBytes && stream.usage.outBytes > limits.maxOutBytes) {
+                this.output.warn(`Stream output limit exceeded for ${sid}: limit=${limits.maxOutBytes}`);
+                this.closeStream(sid, 'Output limit exceeded');
+                return;
+            }
+            this.options.onStreamData?.(sid, chunk, channel);
+        };
+        if (childProcess.stdout) {
+            childProcess.stdout.on('data', handleOutput('stdout'));
+        }
+        if (childProcess.stderr) {
+            childProcess.stderr.on('data', handleOutput('stderr'));
+        }
+        // Use 'close' (not 'exit') so all stdout/stderr 'data' events have been
+        // emitted before we report exit. Otherwise a fast command can emit EXIT
+        // ahead of its final output, and the client — which tears the stream down
+        // on exit — would drop that trailing data.
+        childProcess.on('close', (code, signal) => {
+            stream.endedAt = Date.now();
+            stream.usage.wallMs = stream.endedAt - stream.startedAt;
+            this.clearTimers(stream);
+            this.output.info(`Command stream exited for ${sid}: code=${code}, signal=${signal}`);
+            this.options.onStreamExit?.(sid, code, signal, stream.usage);
+            this.streams.delete(sid);
+        });
+        // Handle process errors
+        childProcess.on('error', (err) => {
+            this.clearTimers(stream);
+            this.output.error(`Command stream error for ${sid}`, err.message);
+            this.options.onStreamError?.(sid, err.message);
+            this.streams.delete(sid);
+        });
+        this.streams.set(sid, stream);
+        this.armWallClock(stream);
+        this.armResourceMonitor(stream);
+        // Log the command name and arg count only; full argv can carry secrets.
+        this.output.info(`Opened command stream ${sid}: ${command} (${args.length} args)`);
+        return sid;
+    }
+    /**
+     * Write data to a stream (stdin)
+     */
+    writeToStream(sid, data) {
+        const stream = this.streams.get(sid);
+        if (!stream) {
+            throw new Error(`Unknown stream: ${sid}`);
+        }
+        if (stream.aborted) {
+            throw new Error(`Stream ${sid} is aborted`);
+        }
+        if (stream.mode === 'pty') {
+            const ptyProcess = stream.process;
+            ptyProcess.write(Buffer.from(data).toString());
+        }
+        else {
+            const childProcess = stream.process;
+            if (childProcess.stdin && !childProcess.stdin.destroyed) {
+                childProcess.stdin.write(data);
+            }
+        }
+    }
+    /**
+     * Resize a PTY stream
+     */
+    resizePtyStream(sid, cols, rows) {
+        const stream = this.streams.get(sid);
+        if (!stream) {
+            throw new Error(`Unknown stream: ${sid}`);
+        }
+        if (stream.mode !== 'pty') {
+            throw new Error(`Stream ${sid} is not a PTY`);
+        }
+        const ptyProcess = stream.process;
+        ptyProcess.resize(cols, rows);
+        this.output.debug(`Resized PTY stream ${sid}: cols=${cols}, rows=${rows}`);
+    }
+    /**
+     * Send signal to a stream
+     */
+    signalStream(sid, signal) {
+        const stream = this.streams.get(sid);
+        if (!stream) {
+            throw new Error(`Unknown stream: ${sid}`);
+        }
+        if (stream.mode === 'pty') {
+            const ptyProcess = stream.process;
+            ptyProcess.kill(signal);
+        }
+        else {
+            const childProcess = stream.process;
+            childProcess.kill(signal);
+        }
+        this.output.info(`Sent signal ${signal} to stream ${sid}`);
+    }
+    /**
+     * Close a stream
+     */
+    closeStream(sid, reason) {
+        const stream = this.streams.get(sid);
+        if (!stream) {
+            return; // Already closed
+        }
+        stream.aborted = true;
+        this.clearTimers(stream);
+        if (stream.mode === 'pty') {
+            const ptyProcess = stream.process;
+            try {
+                ptyProcess.kill();
+            }
+            catch (err) {
+                this.output.error(`Failed to kill PTY for stream ${sid}`, err instanceof Error ? err.message : String(err));
+            }
+        }
+        else {
+            const childProcess = stream.process;
+            try {
+                // Signal the whole process group (child was spawned detached) so shell
+                // pipelines and descendants are torn down, not just the direct child.
+                try {
+                    if (process.platform !== 'win32' && childProcess.pid)
+                        process.kill(-childProcess.pid, 'SIGTERM');
+                    else
+                        childProcess.kill('SIGTERM');
+                }
+                catch {
+                    childProcess.kill('SIGTERM');
+                }
+                // Escalate to SIGKILL if the process has not actually exited. Note:
+                // childProcess.killed only means "a signal was delivered", so it is
+                // true right after SIGTERM and must NOT gate escalation. We key off the
+                // real exit state instead: the 'close' handler deletes the stream from
+                // the map and sets endedAt, so a still-present, not-yet-ended stream is
+                // one that ignored SIGTERM.
+                const timer = setTimeout(() => {
+                    const current = this.streams.get(sid);
+                    if (current && current.endedAt === undefined) {
+                        try {
+                            if (process.platform !== 'win32' && childProcess.pid)
+                                process.kill(-childProcess.pid, 'SIGKILL');
+                            else
+                                childProcess.kill('SIGKILL');
+                        }
+                        catch { }
+                    }
+                }, 5000);
+                // Don't keep the event loop alive just for the escalation timer.
+                if (typeof timer.unref === 'function')
+                    timer.unref();
+            }
+            catch (err) {
+                this.output.error(`Failed to kill process for stream ${sid}`, err instanceof Error ? err.message : String(err));
+            }
+        }
+        this.output.info(`Closed stream ${sid}: reason=${reason}`);
+    }
+    /**
+     * Close all streams
+     */
+    closeAllStreams(reason) {
+        for (const sid of this.streams.keys()) {
+            this.closeStream(sid, reason);
+        }
+    }
+    /**
+     * Get stream info
+     */
+    getStream(sid) {
+        return this.streams.get(sid);
+    }
+    /**
+     * Get all active streams
+     */
+    getActiveStreams() {
+        return Array.from(this.streams.values()).map(stream => {
+            const metadata = {
+                sid: stream.sid,
+                mode: stream.mode,
+                startedAt: stream.startedAt,
+            };
+            if (stream.endedAt !== undefined) {
+                metadata.endedAt = stream.endedAt;
+            }
+            return metadata;
+        });
+    }
+    /**
+     * Get aggregate usage across all streams
+     */
+    getAggregateUsage() {
+        return this.aggregateUsage;
+    }
+}
+//# sourceMappingURL=stream-manager.js.map

package/dist/stream-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-manager.js","sourceRoot":"","sources":["../src/stream-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAiB,MAAM,4BAA4B,CAAC;AACrH,OAAO,EAAE,KAAK,EAA8B,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAChD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,KAAK,GAAG,MAAM,yCAAyC,CAAC;AAC/D,OAAO,EAOL,cAAc,EACf,MAAM,+BAA+B,CAAC;AA6BvC,MAAM,OAAO,aAAc,SAAQ,YAAY;IAWzB;IAVZ,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,MAAM,CAAS;IACf,MAAM,CAAgB;IACtB,cAAc,GAAgB;QACpC,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,CAAC;QACd,MAAM,EAAE,CAAC;QACT,QAAQ,EAAE,CAAC;KACZ,CAAC;IAEF,YAAoB,OAA6B;QAC/C,KAAK,EAAE,CAAC;QADU,YAAO,GAAP,OAAO,CAAsB;QAE/C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;OAMG;IACK,UAAU,CAAC,YAAqB;QACtC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,YAAY;YACvB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC;YACnD,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;QAE3B,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;QAED,uDAAuD;QACvD,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,aAAa;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QAE/C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,UAAU,WAAW,EAAE,CAAC;QAC/E,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;;;OASG;IACK,eAAe,CAAC,IAAgB;QACtC,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC;QAElC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAExC,mEAAmE;QACnE,MAAM,KAAK,GAAG,SAAS,EAAE,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,cAAc,CAAC,UAAU,CAAC;QACvF,MAAM,KAAK,GAAG,SAAS,EAAE,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,cAAc,CAAC,UAAU,CAAC;QACvF,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC;QAE3D,MAAM,MAAM,GAAG,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,gBAAgB,CAAC;QACxF,IAAI,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;QAEhE,MAAM,WAAW,GAAG,SAAS,EAAE,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC;QAC5F,IAAI,WAAW,GAAG,CAAC;YAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,UAAU,CAAC,CAAC;QAE/E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,MAAc;QACjC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO;QACnC,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,MAAM,CAAC,GAAG,WAAW,MAAM,IAAI,CAAC,CAAC;gBAC1F,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU;YAAE,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAC7E,CAAC;IAED;;;OAGG;IACK,cAAc,CAAC,MAAc,EAAE,MAAc;QACnD,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO;QACnC,IAAI,MAAM,CAAC,SAAS;YAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,GAAG,UAAU,MAAM,IAAI,CAAC,CAAC;gBACzE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU;YAAE,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAC7E,CAAC;IAEO,WAAW,CAAC,MAAc;QAChC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC,SAAS,CAAC;QAAC,CAAC;QAClF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC,SAAS,CAAC;QAAC,CAAC;QAClF,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YAAC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC,aAAa,CAAC;QAAC,CAAC;IACjG,CAAC;IAEO,gBAAgB,CAAC,GAAW;QAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,OAAO,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACrC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,OAAO,SAAS,CAAC;YACjF,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,EAAE,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC/B,CAAC;IAEO,kBAAkB,CAAC,MAAc;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO;QACnE,MAAM,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;YACtC,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9E,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC7D,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YACrD,CAAC;iBAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;gBACrF,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,IAAI,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,KAAK,UAAU;YAAE,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IACrF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,OAA4C;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACnE,GAAG,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAE5B,aAAa;QACb,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE;YAClD,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG;YACH,GAAG;SACJ,CAAC,CAAC;QAEH,MAAM,MAAM,GAAW;YACrB,GAAG;YACH,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,UAAU;YACnB,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;YAC3D,OAAO,EAAE,KAAK;YACd,MAAM;SACP,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAEvC,kBAAkB;QAClB,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO;YAE3B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,uEAAuE;YACvE,yDAAyD;YACzD,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;YAEtC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,kBAAkB;QAClB,UAAU,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC7B,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC;YACxD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAEzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,GAAG,UAAU,QAAQ,CAAC,QAAQ,YAAY,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACvG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5H,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9B,4EAA4E;QAC5E,gDAAgD;QAChD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,GAAG,UAAU,OAAO,CAAC,IAAI,UAAU,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAEzF,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAE3B,yEAAyE;QACzE,MAAM,YAAY,GAAiB;YACjC,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACtC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;YACjC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAsB;SACjF,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;QACxC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,CAAQ,CAAC;QAE/D,MAAM,MAAM,GAAW;YACrB,GAAG;YACH,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,OAAO,EAAE,YAAY;YACrB,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;YAC3D,OAAO,EAAE,KAAK;YACd,MAAM;SACP,CAAC;QAEF,wEAAwE;QACxE,yDAAyD;QACzD,MAAM,YAAY,GAAG,CAAC,OAA4B,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;YACvE,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO;YAE3B,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;YAEtC,qBAAqB;YACrB,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;gBACrE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,GAAG,WAAW,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;gBACzF,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YAED,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC,CAAC;QAEF,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YACxB,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YACxB,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,0EAA0E;QAC1E,2CAA2C;QAC3C,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,MAAqB,EAAE,EAAE;YACtE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC;YACxD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAEzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,GAAG,UAAU,IAAI,YAAY,MAAM,EAAE,CAAC,CAAC;YACrF,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,wBAAwB;QACxB,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YACtC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAClE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAChC,wEAAwE;QACxE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,GAAG,KAAK,OAAO,KAAK,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;QAEnF,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,GAAW,EAAE,IAAgB;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,aAAa,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAmB,CAAC;YAC9C,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,MAAM,CAAC,OAAuB,CAAC;YACpD,IAAI,YAAY,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;gBACxD,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,eAAe,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,OAAmB,CAAC;QAC9C,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,GAAG,UAAU,IAAI,UAAU,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,GAAW,EAAE,MAAsB;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAmB,CAAC;YAC9C,UAAU,CAAC,IAAI,CAAC,MAAgB,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,MAAM,CAAC,OAAuB,CAAC;YACpD,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,MAAM,cAAc,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,GAAW,EAAE,MAAe;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,iBAAiB;QAC3B,CAAC;QAED,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEzB,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAmB,CAAC;YAC9C,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,EAAE,CAAC;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,EAAE,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9G,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,MAAM,CAAC,OAAuB,CAAC;YACpD,IAAI,CAAC;gBACH,uEAAuE;gBACvE,sEAAsE;gBACtE,IAAI,CAAC;oBACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,YAAY,CAAC,GAAG;wBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;;wBAC5F,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBACzC,oEAAoE;gBACpE,oEAAoE;gBACpE,wEAAwE;gBACxE,uEAAuE;gBACvE,wEAAwE;gBACxE,4BAA4B;gBAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACtC,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC7C,IAAI,CAAC;4BACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,YAAY,CAAC,GAAG;gCAAE,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;;gCAC5F,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACpC,CAAC;wBAAC,MAAM,CAAC,CAAA,CAAC;oBACZ,CAAC;gBACH,CAAC,EAAE,IAAI,CAAC,CAAC;gBACT,iEAAiE;gBACjE,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;oBAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YACvD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,GAAG,EAAE,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAClH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,GAAG,YAAY,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,MAAe;QAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YACpD,MAAM,QAAQ,GAAmB;gBAC/B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC;YACF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjC,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YACpC,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;CACF"}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@thenewlabs/entangle-serve",
+  "version": "2.1.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "bin": {
+    "entangle-serve": "dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "dev": "tsx src/index.ts",
+    "clean": "rm -rf dist tsconfig.tsbuildinfo"
+  },
+  "dependencies": {
+    "@homebridge/node-pty-prebuilt-multiarch": "^0.13.1",
+    "@thenewlabs/entangle-crypto": "^2.1.0",
+    "@thenewlabs/entangle-protocol": "^2.1.0",
+    "@thenewlabs/entangle-utils": "^2.1.0",
+    "cborg": "^4.5.8",
+    "commander": "^15.0.0",
+    "ws": "^8.21.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.19.43",
+    "@types/ws": "^8.18.1",
+    "tsx": "^4.23.0",
+    "typescript": "^5.9.3"
+  }
+}