arisa 5.1.9 → 5.1.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arisa",
-  "version": "5.1.9",
+  "version": "5.1.10",
   "description": "Telegram + Pi Agent modular assistant",
   "type": "module",
   "main": "src/index.js",

package/src/runtime/slave-cli.js

@@ -165,6 +165,14 @@ export function formatSlaveStatus({ systemd, diagnostic }) {
   ].join("\n");
 }
 
+function explainSlaveBootstrapError(error) {
+  if (error?.message !== "Socket closed before the protocol completed") return error;
+  return new Error(
+    "Master ended the pairing handshake before it completed. The bootstrap URL may be expired, rotated, already used, or invalid. Generate a new bootstrap URL on Master and retry before it expires.",
+    { cause: error }
+  );
+}
+
 export async function runSlaveBootstrap(url, {
   paths = getSlavePaths(resolveSlaveHome()),
   ask = askFromTerminal,
@@ -181,11 +189,16 @@ export async function runSlaveBootstrap(url, {
   const account = await selectAccount({ ask });
   await ensureSlaveConfig(paths);
   await ensureTool(paths);
-  const result = await withSecureRequestFile({
-    directory: paths.tmpDir,
-    prefix: "bootstrap",
-    value: { url }
-  }, (bootstrapFile) => invokeTool(paths, { action: "slave.bootstrap", bootstrapFile }));
+  let result;
+  try {
+    result = await withSecureRequestFile({
+      directory: paths.tmpDir,
+      prefix: "bootstrap",
+      value: { url }
+    }, (bootstrapFile) => invokeTool(paths, { action: "slave.bootstrap", bootstrapFile }));
+  } catch (error) {
+    throw explainSlaveBootstrapError(error);
+  }
   await installService({ account, slaveHome: paths.home, entryFile });
   await writeSlaveServiceDescriptor(paths, { version: 1, account, installedAt: new Date().toISOString() });
   output.log(`Arisa Slave paired and running as ${account.user}${account.root ? " (root)" : ""}.`);

package/test/slave-cli.test.js

@@ -176,6 +176,26 @@ test("validates before effects and keeps the bootstrap secret out of service met
   assert.deepEqual(calls, []);
 });
 
+test("explains an incomplete Master pairing handshake", async (t) => {
+  const home = await mkdtemp(path.join(os.tmpdir(), "arisa-slave-handshake-"));
+  t.after(() => rm(home, { recursive: true, force: true }));
+  await assert.rejects(
+    () => runSlaveBootstrap(`tcp://198.51.100.12:4719/${secret}`, {
+      paths: getSlavePaths(home),
+      entryFile: "/opt/arisa/src/index.js",
+      platform: "linux",
+      selectAccount: async () => ({ scope: "user", user: "tester", root: false, dedicated: false }),
+      ensureTool: async () => {},
+      installService: async () => assert.fail("service must not be installed after a failed handshake"),
+      invokeTool: async () => {
+        throw new Error("Socket closed before the protocol completed");
+      },
+      output: { log: () => {} }
+    }),
+    /bootstrap URL may be expired, rotated, already used, or invalid.*before it expires/i
+  );
+});
+
 test("ships an immutable verified master-slave bootstrap lock", async (t) => {
   const home = await mkdtemp(path.join(os.tmpdir(), "arisa-slave-lock-"));
   t.after(() => rm(home, { recursive: true, force: true }));