@threadbase-sh/streamer 1.55.3 → 1.56.0

package/dist/cli.cjs

@@ -6249,6 +6249,12 @@ var init_feature_flags = __esm({
         default: false,
         env: "THREADBASE_FEATURE_LIVE_ACTIVITY_PUSH"
       },
+      {
+        id: "e2ee",
+        description: "Application-layer encryption between a paired device and this server, independent of TLS, so a tunnel or a LAN observer on the path carries ciphertext. Off by default: it is negotiated per device, never forced, because released mobile builds cannot be force-updated and a server that demanded it would break every one of them.",
+        default: false,
+        env: "THREADBASE_FEATURE_E2EE"
+      },
       {
         id: "ptyHost",
         description: "Keep live PTYs in a separate host process so a streamer restart can reconnect without restarting the agents. Off by default until cross-platform behavior is qualified.",
@@ -108227,7 +108233,7 @@ function createScreen() {
 function stripAnsi(str) {
   return str.replace(/\x1b\[[0-9;]*[a-zA-Z]/g, "").replace(/\x1b\][^\x07]*\x07/g, "");
 }
-var import_headless, PTY_COLS, PTY_ROWS, SCREEN_SCROLLBACK, pty;
+var import_headless, PTY_COLS, PTY_ROWS, SCREEN_SCROLLBACK, REPLAY_MAX_LINES, pty;
 var init_pty_shared = __esm({
   "src/pty-shared.ts"() {
     "use strict";
@@ -108235,6 +108241,7 @@ var init_pty_shared = __esm({
     PTY_COLS = 120;
     PTY_ROWS = 40;
     SCREEN_SCROLLBACK = 1e3;
+    REPLAY_MAX_LINES = SCREEN_SCROLLBACK + PTY_ROWS;
     pty = null;
   }
 });
@@ -135774,6 +135781,25 @@ function describePushCapability(liveActivityEnabled, env = process.env) {
     liveActivityReason: describeMissingApnsCredentials(env) ?? "APNs credentials are set but the push token store is unavailable, so Live Activity push is disabled."
   };
 }
+var E2EE_PROTOCOL_VERSION = 1;
+var E2EE_SUPPORTED = false;
+function describeE2eeCapability(flagEnabled) {
+  const enabled = E2EE_SUPPORTED && flagEnabled;
+  const base = {
+    supported: E2EE_SUPPORTED,
+    enabled,
+    version: E2EE_PROTOCOL_VERSION,
+    required: false
+  };
+  if (enabled) return base;
+  return {
+    ...base,
+    // Always says why, including when `supported` is false. An operator who set
+    // the flag and saw nothing happen has exactly one question, and a field that
+    // goes absent in the case they hit is the field not answering it.
+    reason: E2EE_SUPPORTED ? "disabled by the e2ee feature flag \u2014 set THREADBASE_FEATURE_E2EE=1, --feature e2ee=true, or feature_flags: in server.yaml" : "this build carries the capability negotiation but not yet the handshake it gates"
+  };
+}
 var identityKeyFailureLogged = false;
 function describeServerIdentityKey() {
   try {
@@ -135828,7 +135854,11 @@ var createMiscRoutes = (deps) => {
       // learn it without re-scanning. Additive: absent means a server with no
       // readable identity key, which a client must read as "cannot verify this
       // server" — never as a reason to fail the rest of this response.
-      serverIdentityKey: describeServerIdentityKey()
+      serverIdentityKey: describeServerIdentityKey(),
+      // Whether to encrypt to this server. Additive, same contract as `push`:
+      // absent means an older server, which a client must read as "unknown" and
+      // resolve as today's plaintext path — never as a reason to fail.
+      e2ee: describeE2eeCapability(deps.featureFlagsConfig().values.e2ee)
     });
   });
   app.get("/api/profiles", (c) => c.json([]));
@@ -149858,6 +149888,7 @@ function handleListProjects(url2, res) {
 
 // src/server-wiring.ts
 init_logger();
+init_pty_shared();
 init_capabilities();
 function wsAllows(principal, required2) {
   return principal === null || hasCapability(principal, required2);
@@ -150173,7 +150204,7 @@ function createApiDeps(deps) {
           }
           deps.addSessionSubscriber(msg.sessionId, ws2);
           if (deps.ptyManager.hasSession(msg.sessionId)) {
-            const lines = await deps.ptyManager.getOutputLines(msg.sessionId, 200);
+            const lines = await deps.ptyManager.getOutputLines(msg.sessionId, REPLAY_MAX_LINES);
             const userMessages = deps.ptyManager.getInputHistory(msg.sessionId);
             ws2.send(
               JSON.stringify({