crbro-memory 2.4.0 → 2.5.0

package/dist/daemon/endpoint.js

@@ -0,0 +1,308 @@
+"use strict";
+// ─── Where the daemon lives, and how a client proves who it is ────
+//
+// One brain, one build, one endpoint. The name is derived, never configured:
+// every client of the same brain running the same build computes the same
+// pipe (Windows) or socket (elsewhere) and therefore finds the same daemon —
+// and a client on ANOTHER build computes a different one and gets its own,
+// so "the process keeps the version it started with" stays true and an
+// upgrade never has to kill anything: the old daemon drains and exits idle.
+//
+// Trust is a shared secret on disk. The daemon writes a random token to
+// <brain>/.daemon/<id>.json, readable by the owner only; a client reads it
+// and both sides prove knowledge of it with an HMAC over a fresh nonce.
+// That covers the two ways a local socket goes wrong: another user of the
+// machine connecting to it, and another process squatting the name first
+// and collecting what clients send.
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DAEMON_PROTOCOL = void 0;
+exports.packageVersion = packageVersion;
+exports.buildId = buildId;
+exports.daemonDir = daemonDir;
+exports.endpointFor = endpointFor;
+exports.privateTmpDir = privateTmpDir;
+exports.secureSocketDir = secureSocketDir;
+exports.stateFile = stateFile;
+exports.configFingerprint = configFingerprint;
+exports.blockedFile = blockedFile;
+exports.markBlocked = markBlocked;
+exports.blockedSince = blockedSince;
+exports.clearBlocked = clearBlocked;
+exports.acquireStartLock = acquireStartLock;
+exports.newToken = newToken;
+exports.writeState = writeState;
+exports.readState = readState;
+exports.removeState = removeState;
+exports.listStates = listStates;
+exports.proof = proof;
+exports.sameProof = sameProof;
+exports.newNonce = newNonce;
+exports.daemonEnabled = daemonEnabled;
+exports.setDaemonEnabled = setDaemonEnabled;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+exports.DAEMON_PROTOCOL = 1;
+const DAEMON_DIR = '.daemon';
+const ENABLED_FLAG = 'enabled';
+function packageVersion() {
+    try {
+        const here = __dirname; // CommonJS output: dist/daemon, or src/daemon under the test runner
+        for (const up of ['..', node_path_1.default.join('..', '..')]) {
+            try {
+                const pkg = JSON.parse((0, node_fs_1.readFileSync)(node_path_1.default.join(here, up, 'package.json'), 'utf8'));
+                if (pkg?.name === 'crbro-memory' && pkg.version)
+                    return String(pkg.version);
+            }
+            catch { /* try the next level */ }
+        }
+    }
+    catch { /* fall through */ }
+    return '0.0.0';
+}
+/**
+ * Version plus the build's own timestamp. The version alone would let a
+ * developer's half-built dist serve the clients that launched the published
+ * package; the timestamp alone would not survive a reinstall of the same
+ * release on another path. Together: you are served by the code you launched.
+ */
+function buildId() {
+    let stamp = '0';
+    try {
+        const here = __dirname; // CommonJS output: dist/daemon, or src/daemon under the test runner
+        for (const f of ['../server.js', '../server.ts']) {
+            try {
+                stamp = Math.floor((0, node_fs_1.statSync)(node_path_1.default.join(here, f)).mtimeMs).toString(36);
+                break;
+            }
+            catch { /* next */ }
+        }
+    }
+    catch { /* keep 0 */ }
+    return `${packageVersion()}-${stamp}`;
+}
+function daemonDir(brainRoot) {
+    return node_path_1.default.join(brainRoot, DAEMON_DIR);
+}
+function endpointKey(brainRoot, build) {
+    const root = node_path_1.default.resolve(brainRoot);
+    const canon = process.platform === 'win32' ? root.toLowerCase() : root;
+    return (0, node_crypto_1.createHash)('sha256').update(`${canon}|${build}`).digest('hex').slice(0, 16);
+}
+/** The pipe or socket path for this brain and build. */
+function endpointFor(brainRoot, build = buildId()) {
+    const key = endpointKey(brainRoot, build);
+    if (process.platform === 'win32')
+        return `\\\\.\\pipe\\crbro-${key}`;
+    const inBrain = node_path_1.default.join(daemonDir(brainRoot), `${key}.sock`);
+    // sun_path is ~104 bytes on macOS and 108 on Linux: a deep brain path falls back to tmp —
+    // into a folder of this user's own, because tmp itself is everybody's.
+    return Buffer.byteLength(inBrain) < 100 ? inBrain : node_path_1.default.join(privateTmpDir(), `${key}.sock`);
+}
+/** <tmp>/crbro-<uid>: where the socket goes when the brain path is too long for one. */
+function privateTmpDir() {
+    const uid = typeof process.getuid === 'function' ? process.getuid() : 'u';
+    return node_path_1.default.join(node_os_1.default.tmpdir(), `crbro-${uid}`);
+}
+/**
+ * Make the socket's folder and make sure it is ours alone. In the brain that
+ * is a given; in tmp somebody else may have made `crbro-<our uid>` first, as a
+ * folder they own or as a link to one — and a socket placed there is theirs.
+ */
+async function secureSocketDir(endpoint) {
+    if (process.platform === 'win32')
+        return;
+    const dir = node_path_1.default.dirname(endpoint);
+    await node_fs_1.promises.mkdir(dir, { recursive: true, mode: 0o700 });
+    const st = await node_fs_1.promises.lstat(dir);
+    const mine = typeof process.getuid !== 'function' || st.uid === process.getuid();
+    if (!st.isDirectory() || st.isSymbolicLink() || !mine || (st.mode & 0o077) !== 0) {
+        if (mine && st.isDirectory() && !st.isSymbolicLink()) {
+            await node_fs_1.promises.chmod(dir, 0o700);
+            return;
+        }
+        throw new Error(`DAEMON_ENDPOINT_BLOCKED: ${dir} is not a private folder of this user`);
+    }
+}
+function stateFile(brainRoot, build = buildId()) {
+    return node_path_1.default.join(daemonDir(brainRoot), `${endpointKey(brainRoot, build)}.json`);
+}
+/**
+ * What a daemon would do differently from the client asking for it. One
+ * process serves every client, but each client was configured on its own —
+ * CRBRO_BACKUP_DIR pointing at a synced folder in one, CRBRO_SEMANTIC=0 in
+ * another — and whose settings win must not depend on who happened to start
+ * first. A client whose fingerprint differs from the daemon's serves itself,
+ * exactly as it did before daemons: its settings keep meaning what they said.
+ */
+function configFingerprint(env = process.env) {
+    const v = (k) => (env[k] || '').trim();
+    const semantic = ['0', 'off', 'false', 'no'].includes(v('CRBRO_SEMANTIC').toLowerCase()) ? 'off'
+        : ['1', 'on', 'true', 'yes', 'force'].includes(v('CRBRO_SEMANTIC').toLowerCase()) ? 'on' : 'auto';
+    const parts = [
+        semantic, v('CRBRO_SEMANTIC_MODEL'), v('CRBRO_SEMANTIC_DTYPE'), v('CRBRO_SEMANTIC_HOME'), v('CRBRO_SEMANTIC_FLOOR'),
+        v('CRBRO_RECENCY'), v('CRBRO_SYNONYMS'), v('CRBRO_AUTOBACKUP') === '0' ? 'nobackup' : '', v('CRBRO_BACKUP_DIR'),
+    ];
+    return (0, node_crypto_1.createHash)('sha256').update(parts.join('\u0000')).digest('hex').slice(0, 12);
+}
+// ─── Two small files that keep start-up honest ───────────────────
+/** Written by a daemon that found its endpoint held by something that is not a CRBRO daemon of this brain. */
+function blockedFile(brainRoot, build = buildId()) {
+    return node_path_1.default.join(daemonDir(brainRoot), `${endpointKey(brainRoot, build)}.blocked`);
+}
+async function markBlocked(brainRoot, build, reason) {
+    try {
+        await node_fs_1.promises.mkdir(daemonDir(brainRoot), { recursive: true, mode: 0o700 });
+        await node_fs_1.promises.writeFile(blockedFile(brainRoot, build), JSON.stringify({ pid: process.pid, at: Date.now(), reason }));
+    }
+    catch { /* the marker is a courtesy to the proxy's patience */ }
+}
+/** A marker newer than `since` (ms): the daemon we just asked for could not be had, and waiting will not change it. */
+async function blockedSince(brainRoot, build, since) {
+    try {
+        const m = JSON.parse(await node_fs_1.promises.readFile(blockedFile(brainRoot, build), 'utf8'));
+        return typeof m?.at === 'number' && m.at >= since ? String(m.reason || 'blocked') : null;
+    }
+    catch {
+        return null;
+    }
+}
+async function clearBlocked(brainRoot, build) {
+    await node_fs_1.promises.rm(blockedFile(brainRoot, build), { force: true }).catch(() => undefined);
+}
+const START_LOCK_STALE_MS = 10_000;
+/**
+ * One daemon at a time through the dangerous part of starting: finding the
+ * endpoint busy, deciding the holder is dead, unlinking its socket, listening.
+ * Two starters doing that interleaved can each delete the other's live socket.
+ * The lock names its holder, so a starter that was killed does not hold it forever.
+ */
+async function acquireStartLock(brainRoot, build) {
+    const file = node_path_1.default.join(daemonDir(brainRoot), `${endpointKey(brainRoot, build)}.lock`);
+    await node_fs_1.promises.mkdir(daemonDir(brainRoot), { recursive: true, mode: 0o700 });
+    for (let attempt = 0; attempt < 2; attempt++) {
+        try {
+            const h = await node_fs_1.promises.open(file, 'wx', 0o600);
+            await h.writeFile(String(process.pid));
+            await h.close();
+            return async () => { await node_fs_1.promises.rm(file, { force: true }).catch(() => undefined); };
+        }
+        catch (err) {
+            if (err.code !== 'EEXIST')
+                throw err;
+            let stale = false;
+            try {
+                const st = await node_fs_1.promises.stat(file);
+                const pid = Number((await node_fs_1.promises.readFile(file, 'utf8')).trim());
+                let alive = true;
+                try {
+                    if (pid > 0)
+                        process.kill(pid, 0);
+                    else
+                        alive = false;
+                }
+                catch (e) {
+                    alive = e.code === 'EPERM';
+                }
+                stale = !alive || Date.now() - st.mtimeMs > START_LOCK_STALE_MS;
+            }
+            catch {
+                stale = true;
+            }
+            if (!stale)
+                return null;
+            await node_fs_1.promises.rm(file, { force: true }).catch(() => undefined);
+        }
+    }
+    return null;
+}
+function newToken() {
+    return (0, node_crypto_1.randomBytes)(32).toString('hex');
+}
+async function writeState(brainRoot, state) {
+    const dir = daemonDir(brainRoot);
+    await node_fs_1.promises.mkdir(dir, { recursive: true, mode: 0o700 });
+    const file = stateFile(brainRoot, state.build);
+    const tmp = `${file}.${process.pid}.tmp`;
+    await node_fs_1.promises.writeFile(tmp, JSON.stringify(state), { mode: 0o600 });
+    await node_fs_1.promises.rename(tmp, file);
+}
+async function readState(brainRoot, build = buildId()) {
+    try {
+        const s = JSON.parse(await node_fs_1.promises.readFile(stateFile(brainRoot, build), 'utf8'));
+        return s && s.protocol === exports.DAEMON_PROTOCOL && typeof s.token === 'string' && s.token.length >= 32 ? s : null;
+    }
+    catch {
+        return null;
+    }
+}
+async function removeState(brainRoot, build, pid) {
+    // Only our own: a newer daemon of the same build may have replaced the file already.
+    const s = await readState(brainRoot, build);
+    if (s && s.pid !== pid)
+        return;
+    await node_fs_1.promises.rm(stateFile(brainRoot, build), { force: true }).catch(() => undefined);
+}
+/** Every daemon that left a state file for this brain, whatever its build. */
+async function listStates(brainRoot) {
+    const out = [];
+    try {
+        for (const f of await node_fs_1.promises.readdir(daemonDir(brainRoot))) {
+            if (!f.endsWith('.json'))
+                continue;
+            try {
+                const s = JSON.parse(await node_fs_1.promises.readFile(node_path_1.default.join(daemonDir(brainRoot), f), 'utf8'));
+                if (s?.protocol === exports.DAEMON_PROTOCOL && s.endpoint)
+                    out.push(s);
+            }
+            catch { /* a half-written file is not a daemon */ }
+        }
+    }
+    catch { /* no folder, no daemons */ }
+    return out;
+}
+function proof(token, role, nonce) {
+    return (0, node_crypto_1.createHmac)('sha256', token).update(`${role}:${nonce}`).digest('hex');
+}
+function sameProof(a, b) {
+    const x = Buffer.from(String(a), 'utf8'), y = Buffer.from(String(b), 'utf8');
+    return x.length === y.length && (0, node_crypto_1.timingSafeEqual)(x, y);
+}
+function newNonce() {
+    return (0, node_crypto_1.randomBytes)(16).toString('hex');
+}
+// ─── On or off ───────────────────────────────────────────────────
+//
+// A flag in the brain, not an environment variable: the environment would
+// have to be set in every client's config, and the point is that every client
+// of this brain switches together. CRBRO_DAEMON=1 / =0 still wins for one
+// process — for a test, or to keep one client out.
+function daemonEnabled(brainRoot, env = process.env) {
+    const v = (env['CRBRO_DAEMON'] || '').trim();
+    if (v === '1')
+        return true;
+    if (v === '0')
+        return false;
+    try {
+        (0, node_fs_1.statSync)(node_path_1.default.join(daemonDir(brainRoot), ENABLED_FLAG));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function setDaemonEnabled(brainRoot, on) {
+    const flag = node_path_1.default.join(daemonDir(brainRoot), ENABLED_FLAG);
+    if (on) {
+        await node_fs_1.promises.mkdir(daemonDir(brainRoot), { recursive: true, mode: 0o700 });
+        await node_fs_1.promises.writeFile(flag, `${new Date().toISOString()}\n`);
+    }
+    else {
+        await node_fs_1.promises.rm(flag, { force: true });
+    }
+}
+//# sourceMappingURL=endpoint.js.map

package/dist/daemon/endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.js","sourceRoot":"","sources":["../../src/daemon/endpoint.ts"],"names":[],"mappings":";AAAA,qEAAqE;AACrE,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,uEAAuE;AACvE,4EAA4E;AAC5E,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,wEAAwE;AACxE,0EAA0E;AAC1E,yEAAyE;AACzE,oCAAoC;;;;;;AAsBpC,wCAWC;AAQD,0BASC;AAED,8BAEC;AASD,kCAOC;AAGD,sCAGC;AAOD,0CAUC;AAED,8BAEC;AAUD,8CASC;AAKD,kCAEC;AAED,kCAKC;AAGD,oCAOC;AAED,oCAEC;AAUD,4CAwBC;AAED,4BAEC;AAED,gCAOC;AAED,8BAOC;AAED,kCAKC;AAGD,gCAYC;AAED,sBAEC;AAED,8BAGC;AAED,4BAEC;AASD,sCAKC;AAED,4CAQC;AAjQD,6CAAmF;AACnF,qCAAiE;AACjE,sDAAyB;AACzB,0DAA6B;AAEhB,QAAA,eAAe,GAAG,CAAC,CAAC;AACjC,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,YAAY,GAAG,SAAS,CAAC;AAa/B,SAAgB,cAAc;IAC5B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,CAAG,oEAAoE;QAC9F,KAAK,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBAClF,IAAI,GAAG,EAAE,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,OAAO;oBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,OAAO;IACrB,IAAI,KAAK,GAAG,GAAG,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,CAAG,oEAAoE;QAC9F,KAAK,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,kBAAQ,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAAC,MAAM;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACxB,OAAO,GAAG,cAAc,EAAE,IAAI,KAAK,EAAE,CAAC;AACxC,CAAC;AAED,SAAgB,SAAS,CAAC,SAAiB;IACzC,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,KAAa;IACnD,MAAM,IAAI,GAAG,mBAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,wDAAwD;AACxD,SAAgB,WAAW,CAAC,SAAiB,EAAE,QAAgB,OAAO,EAAE;IACtE,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,sBAAsB,GAAG,EAAE,CAAC;IACrE,MAAM,OAAO,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;IAC/D,0FAA0F;IAC1F,uEAAuE;IACvE,OAAO,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;AAChG,CAAC;AAED,wFAAwF;AACxF,SAAgB,aAAa;IAC3B,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1E,OAAO,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,SAAS,GAAG,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CAAC,QAAgB;IACpD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,MAAM,GAAG,GAAG,mBAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,kBAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,EAAE,GAAG,MAAM,kBAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;IACjF,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC;YAAC,MAAM,kBAAE,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,uCAAuC,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,SAAgB,SAAS,CAAC,SAAiB,EAAE,QAAgB,OAAO,EAAE;IACpE,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK;QAC9F,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACpG,MAAM,KAAK,GAAG;QACZ,QAAQ,EAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,sBAAsB,CAAC;QACnH,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC;KAChH,CAAC;IACF,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,oEAAoE;AAEpE,8GAA8G;AAC9G,SAAgB,WAAW,CAAC,SAAiB,EAAE,QAAgB,OAAO,EAAE;IACtE,OAAO,mBAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;AACrF,CAAC;AAEM,KAAK,UAAU,WAAW,CAAC,SAAiB,EAAE,KAAa,EAAE,MAAc;IAChF,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,kBAAE,CAAC,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAClH,CAAC;IAAC,MAAM,CAAC,CAAC,sDAAsD,CAAC,CAAC;AACpE,CAAC;AAED,uHAAuH;AAChH,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,KAAa,EAAE,KAAa;IAChF,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC,EAAE,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,KAAa;IACjE,MAAM,kBAAE,CAAC,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC;;;;;GAKG;AACI,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,KAAa;IACrE,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACtF,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,KAAK,IAAI,EAAE,GAAG,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAChE,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,IAAI,KAAK,GAAG,IAAI,CAAC;gBACjB,IAAI,CAAC;oBAAC,IAAI,GAAG,GAAG,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;;wBAAM,KAAK,GAAG,KAAK,CAAC;gBAAC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBAAC,KAAK,GAAI,CAA2B,CAAC,IAAI,KAAK,OAAO,CAAC;gBAAC,CAAC;gBACnI,KAAK,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,GAAG,mBAAmB,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC;YAAC,CAAC;YACzB,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,QAAQ;IACtB,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAEM,KAAK,UAAU,UAAU,CAAC,SAAiB,EAAE,KAAkB;IACpE,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,kBAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,MAAM,kBAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,MAAM,kBAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAEM,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,QAAgB,OAAO,EAAE;IAC1E,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,uBAAe,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,WAAW,CAAC,SAAiB,EAAE,KAAa,EAAE,GAAW;IAC7E,qFAAqF;IACrF,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG;QAAE,OAAO;IAC/B,MAAM,kBAAE,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACnF,CAAC;AAED,8EAA8E;AACvE,KAAK,UAAU,UAAU,CAAC,SAAiB;IAChD,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,MAAM,kBAAE,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC;gBACnG,IAAI,CAAC,EAAE,QAAQ,KAAK,uBAAe,IAAI,CAAC,CAAC,QAAQ;oBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC,CAAC,yCAAyC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,KAAK,CAAC,KAAa,EAAE,IAAyB,EAAE,KAAa;IAC3E,OAAO,IAAA,wBAAU,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAgB,SAAS,CAAC,CAAS,EAAE,CAAS;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7E,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,IAAA,6BAAe,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAgB,QAAQ;IACtB,OAAO,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,oEAAoE;AACpE,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,0EAA0E;AAC1E,mDAAmD;AAEnD,SAAgB,aAAa,CAAC,SAAiB,EAAE,MAAyB,OAAO,CAAC,GAAG;IACnF,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,CAAC;QAAC,IAAA,kBAAQ,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACvG,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,EAAW;IACnE,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC;IAC3D,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QACN,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/daemon/lines.d.ts

@@ -0,0 +1,55 @@
+import type { Socket } from 'node:net';
+import type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
+import type { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
+/** A line bigger than this is not a message, it is a mistake or an attack. */
+export declare const MAX_LINE_BYTES: number;
+/** Splits a byte stream into lines. Tolerates \r\n and lines split across chunks. */
+export declare class LineReader {
+    private onLine;
+    private onOverflow;
+    private buf;
+    private size;
+    constructor(onLine: (line: string) => void, onOverflow: () => void);
+    push(chunk: Buffer): void;
+}
+/**
+ * The daemon's side of one client: an MCP Transport over a socket that has
+ * already passed the handshake. `scope` wraps every incoming message, which
+ * is how per-connection state (the session tally) follows the request through
+ * shared engines without any of them knowing about connections.
+ */
+export declare class SocketServerTransport implements Transport {
+    private socket;
+    private scope;
+    onmessage?: (message: JSONRPCMessage) => void;
+    onclose?: () => void;
+    onerror?: (error: Error) => void;
+    private closed;
+    /** Lines that arrived before the server finished connecting, in order. */
+    private pending;
+    constructor(socket: Socket, scope: <T>(fn: () => T) => T);
+    /** The server is connected: deliver what waited, in the order it came, and stop queueing. */
+    open(): void;
+    start(): Promise<void>;
+    /** Fed by the daemon, which owns the reader (the handshake used it first). */
+    receive(line: string): void;
+    send(message: JSONRPCMessage): Promise<void>;
+    close(): Promise<void>;
+    private finish;
+}
+/**
+ * An in-process backend for the proxy's fallback: the same line interface as
+ * a socket, connected to a server living in this process.
+ */
+export declare class LoopbackTransport implements Transport {
+    private deliver;
+    onmessage?: (message: JSONRPCMessage) => void;
+    onclose?: () => void;
+    onerror?: (error: Error) => void;
+    constructor(deliver: (line: string) => void);
+    start(): Promise<void>;
+    receive(line: string): void;
+    send(message: JSONRPCMessage): Promise<void>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=lines.d.ts.map

package/dist/daemon/lines.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lines.d.ts","sourceRoot":"","sources":["../../src/daemon/lines.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAC;AAC/E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEzE,8EAA8E;AAC9E,eAAO,MAAM,cAAc,QAAmB,CAAC;AAE/C,qFAAqF;AACrF,qBAAa,UAAU;IAIT,OAAO,CAAC,MAAM;IAA0B,OAAO,CAAC,UAAU;IAHtE,OAAO,CAAC,GAAG,CAAgB;IAC3B,OAAO,CAAC,IAAI,CAAK;gBAEG,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,EAAU,UAAU,EAAE,MAAM,IAAI;IAElF,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;CAmB1B;AAED;;;;;GAKG;AACH,qBAAa,qBAAsB,YAAW,SAAS;IAQzC,OAAO,CAAC,MAAM;IAAU,OAAO,CAAC,KAAK;IAPjD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACjC,OAAO,CAAC,MAAM,CAAS;IACvB,0EAA0E;IAC1E,OAAO,CAAC,OAAO,CAAuB;gBAElB,MAAM,EAAE,MAAM,EAAU,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC;IAExE,6FAA6F;IAC7F,IAAI,IAAI,IAAI;IAMN,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,8EAA8E;IAC9E,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAYrB,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAO5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,OAAO,CAAC,MAAM;CAKf;AAED;;;GAGG;AACH,qBAAa,iBAAkB,YAAW,SAAS;IAKrC,OAAO,CAAC,OAAO;IAJ3B,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9C,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;gBAEb,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI;IAE7C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAE5B,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAQrB,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B"}

package/dist/daemon/lines.js

@@ -0,0 +1,142 @@
+"use strict";
+// ─── Newline-delimited JSON over a stream ─────────────────────────
+//
+// The same framing MCP uses on stdio, so a proxy can hand a client's bytes to
+// the daemon without understanding them. One JSON value per line, UTF-8.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LoopbackTransport = exports.SocketServerTransport = exports.LineReader = exports.MAX_LINE_BYTES = void 0;
+/** A line bigger than this is not a message, it is a mistake or an attack. */
+exports.MAX_LINE_BYTES = 32 * 1024 * 1024;
+/** Splits a byte stream into lines. Tolerates \r\n and lines split across chunks. */
+class LineReader {
+    onLine;
+    onOverflow;
+    buf = [];
+    size = 0;
+    constructor(onLine, onOverflow) {
+        this.onLine = onLine;
+        this.onOverflow = onOverflow;
+    }
+    push(chunk) {
+        let start = 0;
+        for (let i = 0; i < chunk.length; i++) {
+            if (chunk[i] !== 0x0a)
+                continue;
+            const piece = chunk.subarray(start, i);
+            const whole = this.buf.length ? Buffer.concat([...this.buf, piece]) : piece;
+            this.buf = [];
+            this.size = 0;
+            start = i + 1;
+            const line = whole.toString('utf8').replace(/\r$/, '');
+            if (line)
+                this.onLine(line);
+        }
+        if (start < chunk.length) {
+            const rest = chunk.subarray(start);
+            this.buf.push(rest);
+            this.size += rest.length;
+            if (this.size > exports.MAX_LINE_BYTES) {
+                this.buf = [];
+                this.size = 0;
+                this.onOverflow();
+            }
+        }
+    }
+}
+exports.LineReader = LineReader;
+/**
+ * The daemon's side of one client: an MCP Transport over a socket that has
+ * already passed the handshake. `scope` wraps every incoming message, which
+ * is how per-connection state (the session tally) follows the request through
+ * shared engines without any of them knowing about connections.
+ */
+class SocketServerTransport {
+    socket;
+    scope;
+    onmessage;
+    onclose;
+    onerror;
+    closed = false;
+    /** Lines that arrived before the server finished connecting, in order. */
+    pending = [];
+    constructor(socket, scope) {
+        this.socket = socket;
+        this.scope = scope;
+    }
+    /** The server is connected: deliver what waited, in the order it came, and stop queueing. */
+    open() {
+        const waiting = this.pending || [];
+        this.pending = null;
+        for (const line of waiting)
+            this.receive(line);
+    }
+    async start() {
+        this.socket.on('close', () => this.finish());
+        this.socket.on('error', err => { this.onerror?.(err); this.finish(); });
+    }
+    /** Fed by the daemon, which owns the reader (the handshake used it first). */
+    receive(line) {
+        if (this.pending) {
+            this.pending.push(line);
+            return;
+        }
+        let message;
+        try {
+            message = JSON.parse(line);
+        }
+        catch (err) {
+            this.onerror?.(err);
+            return;
+        }
+        this.scope(() => this.onmessage?.(message));
+    }
+    async send(message) {
+        if (this.closed || this.socket.destroyed)
+            return;
+        await new Promise(resolve => {
+            this.socket.write(`${JSON.stringify(message)}\n`, () => resolve());
+        });
+    }
+    async close() {
+        if (!this.socket.destroyed)
+            this.socket.end();
+        this.finish();
+    }
+    finish() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        this.onclose?.();
+    }
+}
+exports.SocketServerTransport = SocketServerTransport;
+/**
+ * An in-process backend for the proxy's fallback: the same line interface as
+ * a socket, connected to a server living in this process.
+ */
+class LoopbackTransport {
+    deliver;
+    onmessage;
+    onclose;
+    onerror;
+    constructor(deliver) {
+        this.deliver = deliver;
+    }
+    async start() { }
+    receive(line) {
+        try {
+            this.onmessage?.(JSON.parse(line));
+        }
+        catch (err) {
+            this.onerror?.(err);
+        }
+    }
+    async send(message) {
+        this.deliver(JSON.stringify(message));
+    }
+    async close() {
+        this.onclose?.();
+    }
+}
+exports.LoopbackTransport = LoopbackTransport;
+//# sourceMappingURL=lines.js.map

package/dist/daemon/lines.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lines.js","sourceRoot":"","sources":["../../src/daemon/lines.ts"],"names":[],"mappings":";AAAA,qEAAqE;AACrE,EAAE;AACF,8EAA8E;AAC9E,yEAAyE;;;AAMzE,8EAA8E;AACjE,QAAA,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C,qFAAqF;AACrF,MAAa,UAAU;IAID;IAAwC;IAHpD,GAAG,GAAa,EAAE,CAAC;IACnB,IAAI,GAAG,CAAC,CAAC;IAEjB,YAAoB,MAA8B,EAAU,UAAsB;QAA9D,WAAM,GAAN,MAAM,CAAwB;QAAU,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAEtF,IAAI,CAAC,KAAa;QAChB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,SAAS;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAC5E,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;YACd,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACvD,IAAI,IAAI;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;YACzB,IAAI,IAAI,CAAC,IAAI,GAAG,sBAAc,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;gBAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;gBAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,CAAC;QACtF,CAAC;IACH,CAAC;CACF;AAzBD,gCAyBC;AAED;;;;;GAKG;AACH,MAAa,qBAAqB;IAQZ;IAAwB;IAP5C,SAAS,CAAqC;IAC9C,OAAO,CAAc;IACrB,OAAO,CAA0B;IACzB,MAAM,GAAG,KAAK,CAAC;IACvB,0EAA0E;IAClE,OAAO,GAAoB,EAAE,CAAC;IAEtC,YAAoB,MAAc,EAAU,KAA4B;QAApD,WAAM,GAAN,MAAM,CAAQ;QAAU,UAAK,GAAL,KAAK,CAAuB;IAAG,CAAC;IAE5E,6FAA6F;IAC7F,IAAI;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,8EAA8E;IAC9E,OAAO,CAAC,IAAY;QAClB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtD,IAAI,OAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,EAAE,CAAC,GAAY,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAuB;QAChC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO;QACjD,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;YAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAEO,MAAM;QACZ,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;CACF;AApDD,sDAoDC;AAED;;;GAGG;AACH,MAAa,iBAAiB;IAKR;IAJpB,SAAS,CAAqC;IAC9C,OAAO,CAAc;IACrB,OAAO,CAA0B;IAEjC,YAAoB,OAA+B;QAA/B,YAAO,GAAP,OAAO,CAAwB;IAAG,CAAC;IAEvD,KAAK,CAAC,KAAK,KAA0C,CAAC;IAEtD,OAAO,CAAC,IAAY;QAClB,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,EAAE,CAAC,GAAY,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAuB;QAChC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACnB,CAAC;CACF;AAxBD,8CAwBC"}

package/dist/daemon/proxy.d.ts

@@ -0,0 +1,55 @@
+import net from 'node:net';
+import type { Readable, Writable } from 'node:stream';
+import { type DaemonState } from './endpoint.js';
+export interface Backend {
+    kind: 'daemon' | 'local';
+    send(line: string): void;
+    close(): Promise<void>;
+}
+type BackendEvents = {
+    onLine: (line: string) => void;
+    onClose: () => void;
+};
+export interface ProxyOptions {
+    input: Readable;
+    output: Writable;
+    brainRoot: string;
+    build?: string;
+    /** Start a daemon. Production spawns a detached process; tests start one in-process, or refuse. */
+    spawnDaemon?: (() => void | Promise<void>) | null;
+    spawnWaitMs?: number;
+    /** Is daemon mode still on? Asked again at every (re)connection, so `crbro daemon off` sticks. Default: yes. */
+    isEnabled?: () => boolean;
+    /** The in-process server. Tests replace it to see what happens when even that cannot start. */
+    local?: (ev: BackendEvents, resumed: boolean) => Promise<Backend>;
+    drainTimeoutMs?: number;
+    log?: (line: string) => void;
+}
+export interface ProxyHandle {
+    /** Resolves when the client closed its end and everything it had asked for was answered; rejects if no backend could be had at all. */
+    closed: Promise<void>;
+    backendKind(): 'daemon' | 'local' | 'none';
+    reconnects(): number;
+}
+export interface DaemonLink {
+    socket: net.Socket;
+    reader: (on: (line: string) => void) => void;
+    state: DaemonState;
+    hello: any;
+}
+/**
+ * Connect to the daemon of this brain and build, and get through the
+ * handshake. Null on any failure; 'config-mismatch' when the daemon is
+ * genuine but was started with settings that are not this client's.
+ */
+export declare function connectDaemon(brainRoot: string, build?: string, options?: {
+    checkConfig?: boolean;
+    resumed?: boolean;
+}): Promise<DaemonLink | 'config-mismatch' | null>;
+/** One control exchange: `status` or `stop`. Null when there is no daemon to talk to. */
+export declare function controlDaemon(brainRoot: string, op: 'status' | 'stop', build?: string): Promise<any | null>;
+/** The production way to start a daemon: detached, silent, surviving this process. */
+export declare function spawnDetachedDaemon(brainRoot: string): void;
+export declare function runProxy(o: ProxyOptions): ProxyHandle;
+export {};
+//# sourceMappingURL=proxy.d.ts.map

package/dist/daemon/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/daemon/proxy.ts"],"names":[],"mappings":"AAkBA,OAAO,GAAG,MAAM,UAAU,CAAC;AAI3B,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAC6F,KAAK,WAAW,EACnH,MAAM,eAAe,CAAC;AAYvB,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AACD,KAAK,aAAa,GAAG;IAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CAAC;AAE7E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,QAAQ,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mGAAmG;IACnG,WAAW,CAAC,EAAE,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gHAAgH;IAChH,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1B,+FAA+F;IAC/F,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,uIAAuI;IACvI,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,WAAW,IAAI,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;IAC3C,UAAU,IAAI,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC;IACnB,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,KAAK,IAAI,CAAC;IAC7C,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,GAAG,CAAC;CACZ;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,MAAkB,EACzB,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GACzD,OAAO,CAAC,UAAU,GAAG,iBAAiB,GAAG,IAAI,CAAC,CA2ChD;AAED,yFAAyF;AACzF,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,GAAG,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAQjH;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAY3D;AA+DD,wBAAgB,QAAQ,CAAC,CAAC,EAAE,YAAY,GAAG,WAAW,CAiKrD"}