crewly 1.8.7 → 1.8.9

package/dist/backend/backend/src/services/browser/browser-relay-adapter.service.js

@@ -54,6 +54,18 @@ export class BrowserRelayAdapter {
     boundDeviceOnlineHandler = null;
     boundDeviceOfflineHandler = null;
     boundDevicesUpdatedHandler = null;
+    /**
+     * Bound handlers for the BrowserProxy event channel — the primary
+     * signal source after 2026-05-23. The Sync handlers above remain wired
+     * as a belt-and-suspenders fallback for legacy code paths that still
+     * push browser devices through Sync, but in current production those
+     * events never fire (CloudSyncService only tracks orchestrator-role
+     * devices). The proxy listens directly to the Cloud relay's browser_list
+     * / browser_event channel, which is the canonical source of truth for
+     * extension presence.
+     */
+    boundProxyConnectedHandler = null;
+    boundProxyDisconnectedHandler = null;
     constructor() {
         this.logger = LoggerService.getInstance().createComponentLogger('BrowserRelayAdapter');
     }
@@ -96,17 +108,29 @@ export class BrowserRelayAdapter {
         return this.extensionDeviceId;
     }
     /**
-     * Whether the relay adapter is ready to send commands.
-     * Requires an Extension device ID and an active CloudSyncService.
+     * Whether the relay adapter has a known extension target via the
+     * BrowserProxy event channel.
+     *
+     * Single liveness definition (2026-05-28 browser-relay fix): availability is
+     * derived from the BrowserProxy — the canonical source of truth for browser
+     * presence on the Cloud relay — NOT from the CloudSyncService state. The
+     * former CloudSync `getState() === 'syncing'` gate was dead in production
+     * (Sync only tracks orchestrator-role devices, never browser-role), so it
+     * reported a liveness that disagreed with `proxy.isAvailable()`. Collapsing
+     * to the proxy removes that disagreement (REGISTRY-TRUTH invariant).
      *
-     * @returns True if relay is available
+     * @returns True if the proxy reports a drivable browser and we have a target
      */
     isAvailable() {
         if (!this.extensionDeviceId)
             return false;
         try {
-            const sync = CloudSyncService.getInstance();
-            return sync.getState() === 'syncing';
+            // Lazy require to avoid an import-time circular dep — proxy and adapter
+            // both live under backend/src/services/browser/.
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            const mod = require('./browser-proxy.service.js');
+            const proxy = mod?.BrowserProxyService?.getInstance?.();
+            return proxy ? proxy.isAvailable() : false;
         }
         catch {
             return false;
@@ -196,28 +220,69 @@ export class BrowserRelayAdapter {
         if (this.discoveryActive)
             return;
         try {
+            // ---- Primary signal source: BrowserProxy events (2026-05-23) ----
+            // The proxy listens directly to the Cloud relay's browser channel
+            // (browser_list / browser_event). It's the only path that reliably
+            // sees the extension; the Sync-driven path below is kept for
+            // backward compat but typically observes nothing.
+            // Dynamic import to avoid circular-dep at module load (proxy and
+            // adapter both live under backend/src/services/browser/).
+            void (async () => {
+                try {
+                    const { BrowserProxyService } = await import('./browser-proxy.service.js');
+                    const proxy = BrowserProxyService.getInstance();
+                    this.boundProxyConnectedHandler = (evt) => {
+                        this.onProxyInstanceConnected(evt);
+                    };
+                    this.boundProxyDisconnectedHandler = (evt) => {
+                        this.onProxyInstanceDisconnected(evt);
+                    };
+                    proxy.events.on('instance_connected', this.boundProxyConnectedHandler);
+                    proxy.events.on('instance_disconnected', this.boundProxyDisconnectedHandler);
+                    // Catch-up scan: if the proxy already has instances at the time
+                    // we subscribe (e.g. boot ordering or adapter restart), seed our
+                    // target now so we don't wait for the next browser_event.
+                    const seed = proxy.getInstances();
+                    if (seed.length > 0 && this.extensionDeviceId === null) {
+                        const first = seed[0];
+                        this.extensionDeviceId = first.instanceId;
+                        this.logger.info('Browser extension seeded from existing proxy instances', {
+                            instanceId: first.instanceId,
+                            instanceName: first.instanceName,
+                        });
+                    }
+                }
+                catch (err) {
+                    this.logger.warn('Failed to subscribe to BrowserProxy events', {
+                        error: err instanceof Error ? err.message : String(err),
+                    });
+                }
+            })();
+            // ---- Fallback signal source: CloudSyncService device events ----
+            // Kept for compat with any deployment that still routes browser
+            // device announcements through Sync; harmless when Sync omits them.
             const sync = CloudSyncService.getInstance();
             if (!sync.isStarted()) {
-                this.logger.debug('CloudSync not started — deferring auto-discovery');
-                return;
+                this.logger.debug('CloudSync not started — proxy events only');
+            }
+            else {
+                this.boundDeviceOnlineHandler = (device) => {
+                    this.onDeviceOnline(device);
+                };
+                this.boundDeviceOfflineHandler = (device) => {
+                    this.onDeviceOffline(device);
+                };
+                this.boundDevicesUpdatedHandler = (devices) => {
+                    this.onDevicesUpdated(devices);
+                };
+                sync.on('device_online', this.boundDeviceOnlineHandler);
+                sync.on('device_offline', this.boundDeviceOfflineHandler);
+                sync.on('devices_updated', this.boundDevicesUpdatedHandler);
+                // Scan existing device list for already-online browser extensions
+                const existingDevices = sync.getDevices();
+                this.scanForBrowserDevice(existingDevices);
             }
-            // Bind event handlers
-            this.boundDeviceOnlineHandler = (device) => {
-                this.onDeviceOnline(device);
-            };
-            this.boundDeviceOfflineHandler = (device) => {
-                this.onDeviceOffline(device);
-            };
-            this.boundDevicesUpdatedHandler = (devices) => {
-                this.onDevicesUpdated(devices);
-            };
-            sync.on('device_online', this.boundDeviceOnlineHandler);
-            sync.on('device_offline', this.boundDeviceOfflineHandler);
-            sync.on('devices_updated', this.boundDevicesUpdatedHandler);
             this.discoveryActive = true;
-            // Scan existing device list for already-online browser extensions
-            const existingDevices = sync.getDevices();
-            this.scanForBrowserDevice(existingDevices);
             this.logger.info('Browser extension auto-discovery started');
         }
         catch (err) {
@@ -226,6 +291,36 @@ export class BrowserRelayAdapter {
             });
         }
     }
+    /**
+     * Handle `instance_connected` from BrowserProxy — adopt as the relay
+     * target if we don't already have one (or if the existing one is gone).
+     *
+     * @param evt - Connected instance info
+     */
+    onProxyInstanceConnected(evt) {
+        if (this.extensionDeviceId === evt.instanceId)
+            return;
+        this.extensionDeviceId = evt.instanceId;
+        this.logger.info('Browser extension auto-discovered (proxy event)', {
+            instanceId: evt.instanceId,
+            instanceName: evt.instanceName,
+        });
+    }
+    /**
+     * Handle `instance_disconnected` from BrowserProxy — clear the relay
+     * target only if it matches the disconnecting instance.
+     *
+     * @param evt - Disconnected instance info
+     */
+    onProxyInstanceDisconnected(evt) {
+        if (this.extensionDeviceId !== evt.instanceId)
+            return;
+        this.logger.info('Browser extension disconnected (proxy event), clearing relay target', {
+            instanceId: evt.instanceId,
+            instanceName: evt.instanceName,
+        });
+        this.extensionDeviceId = null;
+    }
     /**
      * Stop listening for device events.
      */
@@ -247,6 +342,28 @@ export class BrowserRelayAdapter {
         catch {
             // CloudSync may already be destroyed
         }
+        // Unsubscribe from BrowserProxy events (best-effort dynamic import to
+        // match the subscribe path; if the proxy module already collapsed
+        // during shutdown, the listeners die with it anyway).
+        void (async () => {
+            try {
+                const { BrowserProxyService } = await import('./browser-proxy.service.js');
+                const proxy = BrowserProxyService.getInstance();
+                if (this.boundProxyConnectedHandler) {
+                    proxy.events.removeListener('instance_connected', this.boundProxyConnectedHandler);
+                }
+                if (this.boundProxyDisconnectedHandler) {
+                    proxy.events.removeListener('instance_disconnected', this.boundProxyDisconnectedHandler);
+                }
+            }
+            catch {
+                // proxy may already be destroyed
+            }
+            finally {
+                this.boundProxyConnectedHandler = null;
+                this.boundProxyDisconnectedHandler = null;
+            }
+        })();
         this.boundDeviceOnlineHandler = null;
         this.boundDeviceOfflineHandler = null;
         this.boundDevicesUpdatedHandler = null;

package/dist/backend/backend/src/services/browser/browser-relay-adapter.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser-relay-adapter.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/browser/browser-relay-adapter.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAGlE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,8EAA8E;AAC9E,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAU,CAAC;AActE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,mBAAmB;IACtB,MAAM,CAAC,QAAQ,GAA+B,IAAI,CAAC;IAC1C,MAAM,CAAkB;IACjC,eAAe,GAAqC,IAAI,GAAG,EAAE,CAAC;IAC9D,cAAc,GAAG,CAAC,CAAC;IAC3B,2EAA2E;IACnE,iBAAiB,GAAkB,IAAI,CAAC;IAChD,iDAAiD;IACzC,eAAe,GAAG,KAAK,CAAC;IAChC,2CAA2C;IACnC,wBAAwB,GAA0C,IAAI,CAAC;IACvE,yBAAyB,GAA0C,IAAI,CAAC;IACxE,0BAA0B,GAA6C,IAAI,CAAC;IAEpF;QACE,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;IACzF,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC;YAClC,mBAAmB,CAAC,QAAQ,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC3D,CAAC;QACD,OAAO,mBAAmB,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa;QAClB,IAAI,mBAAmB,CAAC,QAAQ,EAAE,CAAC;YACjC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACzC,CAAC;QACD,mBAAmB,CAAC,QAAQ,GAAG,IAAI,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACH,oBAAoB,CAAC,QAAgB;QACnC,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACH,oBAAoB;QAClB,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,WAAW;QACT,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,SAAS,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,MAAgC,EAChC,YAAoB,wBAAwB,CAAC,kBAAkB,EAC/D,SAAkB;QAElB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,EAAE,GAAG,aAAa,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACrD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAChC,CAAC;QAED,OAAO,IAAI,OAAO,CAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,IAAI,qBAAqB,SAAS,IAAI,CAAC,CAAC,CAAC;YAC9E,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAEzD,6BAA6B;YAC7B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAkB,EAAE,iBAAiB,EAAE,OAAO,CAAC;iBAClE,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACzG,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CAAC,QAAgC;QAClD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QAED,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;YAC1C,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;IACnC,CAAC;IAED,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAE5E;;;;;;OAMG;IACH,kBAAkB;QAChB,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO;QAEjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBACtE,OAAO;YACT,CAAC;YAED,sBAAsB;YACtB,IAAI,CAAC,wBAAwB,GAAG,CAAC,MAAkB,EAAE,EAAE;gBACrD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC9B,CAAC,CAAC;YACF,IAAI,CAAC,yBAAyB,GAAG,CAAC,MAAkB,EAAE,EAAE;gBACtD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC,CAAC;YACF,IAAI,CAAC,0BAA0B,GAAG,CAAC,OAAqB,EAAE,EAAE;gBAC1D,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC,CAAC;YAEF,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACxD,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC1D,IAAI,CAAC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC5D,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAE5B,kEAAkE;YAClE,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;YAE3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;gBACjD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO;QAElC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBAClC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;gBACnC,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBACpC,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QAED,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;QACrC,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACtC,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC;QACvC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,MAAkB;QACxC,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACvC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,MAAkB;QACvC,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBACpE,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,eAAe,CAAC,MAAkB;QACxC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE;gBACxE,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,gBAAgB,CAAC,OAAqB;QAC5C,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACK,oBAAoB,CAAC,OAAqB;QAChD,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CACxD,CAAC;QAEF,IAAI,aAAa,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvE,IAAI,CAAC,iBAAiB,GAAG,aAAa,CAAC,QAAQ,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;gBACzD,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,UAAU,EAAE,aAAa,CAAC,UAAU;gBACpC,IAAI,EAAE,aAAa,CAAC,IAAI;aACzB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACpD,uEAAuE;YACvE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CACtE,CAAC;YACF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;gBACtF,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/C,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAChC,CAAC"}
+{"version":3,"file":"browser-relay-adapter.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/browser/browser-relay-adapter.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAGlE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,8EAA8E;AAC9E,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAU,CAAC;AActE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,OAAO,mBAAmB;IACtB,MAAM,CAAC,QAAQ,GAA+B,IAAI,CAAC;IAC1C,MAAM,CAAkB;IACjC,eAAe,GAAqC,IAAI,GAAG,EAAE,CAAC;IAC9D,cAAc,GAAG,CAAC,CAAC;IAC3B,2EAA2E;IACnE,iBAAiB,GAAkB,IAAI,CAAC;IAChD,iDAAiD;IACzC,eAAe,GAAG,KAAK,CAAC;IAChC,2CAA2C;IACnC,wBAAwB,GAA0C,IAAI,CAAC;IACvE,yBAAyB,GAA0C,IAAI,CAAC;IACxE,0BAA0B,GAA6C,IAAI,CAAC;IACpF;;;;;;;;;OASG;IACK,0BAA0B,GAEvB,IAAI,CAAC;IACR,6BAA6B,GAE1B,IAAI,CAAC;IAEhB;QACE,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;IACzF,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC;YAClC,mBAAmB,CAAC,QAAQ,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC3D,CAAC;QACD,OAAO,mBAAmB,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa;QAClB,IAAI,mBAAmB,CAAC,QAAQ,EAAE,CAAC;YACjC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACzC,CAAC;QACD,mBAAmB,CAAC,QAAQ,GAAG,IAAI,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACH,oBAAoB,CAAC,QAAgB;QACnC,IAAI,CAAC,iBAAiB,GAAG,QAAQ,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;;;OAIG;IACH,oBAAoB;QAClB,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,WAAW;QACT,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,CAAC;YACH,wEAAwE;YACxE,iDAAiD;YACjD,iEAAiE;YACjE,MAAM,GAAG,GAAG,OAAO,CAAC,4BAA4B,CAE/C,CAAC;YACF,MAAM,KAAK,GAAG,GAAG,EAAE,mBAAmB,EAAE,WAAW,EAAE,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,YAAY,CAChB,IAAY,EACZ,MAAgC,EAChC,YAAoB,wBAAwB,CAAC,kBAAkB,EAC/D,SAAkB;QAElB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,QAAQ,EAAE,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,EAAE,GAAG,aAAa,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAmB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACrD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAChC,CAAC;QAED,OAAO,IAAI,OAAO,CAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,IAAI,qBAAqB,SAAS,IAAI,CAAC,CAAC,CAAC;YAC9E,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAEzD,6BAA6B;YAC7B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAkB,EAAE,iBAAiB,EAAE,OAAO,CAAC;iBAClE,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACzG,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CAAC,QAAgC;QAClD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QAED,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAE1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;YAC1C,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;IACnC,CAAC;IAED,4EAA4E;IAC5E,oEAAoE;IACpE,4EAA4E;IAE5E;;;;;;OAMG;IACH,kBAAkB;QAChB,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO;QAEjC,IAAI,CAAC;YACH,oEAAoE;YACpE,kEAAkE;YAClE,mEAAmE;YACnE,6DAA6D;YAC7D,kDAAkD;YAClD,iEAAiE;YACjE,0DAA0D;YAC1D,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;oBAC3E,MAAM,KAAK,GAAG,mBAAmB,CAAC,WAAW,EAAE,CAAC;oBAEhD,IAAI,CAAC,0BAA0B,GAAG,CAAC,GAAG,EAAE,EAAE;wBACxC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;oBACrC,CAAC,CAAC;oBACF,IAAI,CAAC,6BAA6B,GAAG,CAAC,GAAG,EAAE,EAAE;wBAC3C,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC;oBACxC,CAAC,CAAC;oBACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,oBAAoB,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;oBACvE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,uBAAuB,EAAE,IAAI,CAAC,6BAA6B,CAAC,CAAC;oBAE7E,gEAAgE;oBAChE,iEAAiE;oBACjE,0DAA0D;oBAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;oBAClC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;wBACvD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;wBACtB,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,UAAU,CAAC;wBAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE;4BACzE,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;yBACjC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;wBAC7D,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YAEL,mEAAmE;YACnE,gEAAgE;YAChE,oEAAoE;YACpE,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACjE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,wBAAwB,GAAG,CAAC,MAAkB,EAAE,EAAE;oBACrD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC9B,CAAC,CAAC;gBACF,IAAI,CAAC,yBAAyB,GAAG,CAAC,MAAkB,EAAE,EAAE;oBACtD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;gBAC/B,CAAC,CAAC;gBACF,IAAI,CAAC,0BAA0B,GAAG,CAAC,OAAqB,EAAE,EAAE;oBAC1D,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC,CAAC;gBAEF,IAAI,CAAC,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBACxD,IAAI,CAAC,EAAE,CAAC,gBAAgB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAC1D,IAAI,CAAC,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBAE5D,kEAAkE;gBAClE,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC1C,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;YAC7C,CAAC;YAED,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;gBACjD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,wBAAwB,CAAC,GAIhC;QACC,IAAI,IAAI,CAAC,iBAAiB,KAAK,GAAG,CAAC,UAAU;YAAE,OAAO;QACtD,IAAI,CAAC,iBAAiB,GAAG,GAAG,CAAC,UAAU,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;YAClE,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,2BAA2B,CAAC,GAAkD;QACpF,IAAI,IAAI,CAAC,iBAAiB,KAAK,GAAG,CAAC,UAAU;YAAE,OAAO;QACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qEAAqE,EAAE;YACtF,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,IAAI,CAAC,IAAI,CAAC,eAAe;YAAE,OAAO;QAElC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBAClC,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;gBACnC,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBACpC,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QAED,sEAAsE;QACtE,kEAAkE;QAClE,sDAAsD;QACtD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;gBAC3E,MAAM,KAAK,GAAG,mBAAmB,CAAC,WAAW,EAAE,CAAC;gBAChD,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;oBACpC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,oBAAoB,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBACrF,CAAC;gBACD,IAAI,IAAI,CAAC,6BAA6B,EAAE,CAAC;oBACvC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,uBAAuB,EAAE,IAAI,CAAC,6BAA6B,CAAC,CAAC;gBAC3F,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC;gBACvC,IAAI,CAAC,6BAA6B,GAAG,IAAI,CAAC;YAC5C,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;QACrC,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACtC,IAAI,CAAC,0BAA0B,GAAG,IAAI,CAAC;QACvC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,MAAkB;QACxC,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACvC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,MAAkB;QACvC,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,EAAE;gBACpE,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,eAAe,CAAC,MAAkB;QACxC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE;gBACxE,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,gBAAgB,CAAC,OAAqB;QAC5C,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACK,oBAAoB,CAAC,OAAqB;QAChD,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CACxD,CAAC;QAEF,IAAI,aAAa,IAAI,aAAa,CAAC,QAAQ,KAAK,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvE,IAAI,CAAC,iBAAiB,GAAG,aAAa,CAAC,QAAQ,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;gBACzD,QAAQ,EAAE,aAAa,CAAC,QAAQ;gBAChC,UAAU,EAAE,aAAa,CAAC,UAAU;gBACpC,IAAI,EAAE,aAAa,CAAC,IAAI;aACzB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACpD,uEAAuE;YACvE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CACtE,CAAC;YACF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;gBACtF,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,OAAO;QACL,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/C,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAChC,CAAC"}

package/dist/backend/backend/src/services/cloud/cloud-client.service.d.ts

@@ -22,7 +22,24 @@ export interface PersistedCloudConfig {
     connectedAt: string;
     /** Refresh token for auto-renewing expired access tokens */
     refreshToken?: string;
+    /**
+     * Relay-signed access JWT (distinct from the access `token`). Persisted so
+     * the BrowserProxy can re-register on backend restart without waiting for a
+     * fresh validate round-trip. Never the Google/Supabase token — see the
+     * RELAY-TOKEN-TYPE invariant in the long-term browser-relay fix design.
+     */
+    relayToken?: string;
 }
+/**
+ * Decode the `exp` (expiry, seconds since epoch) claim from a JWT without
+ * verifying its signature. Returns null when the token is malformed or has
+ * no `exp`. Used to schedule proactive relay-token refresh before expiry so
+ * a continuously-open relay socket never carries an expired token.
+ *
+ * @param token - JWT string (may be null)
+ * @returns The `exp` claim in seconds, or null when unavailable
+ */
+export declare function decodeJwtExp(token: string | null): number | null;
 /** Summary of a premium template returned by the cloud listing endpoint. */
 export interface CloudTemplateSummary {
     /** Unique template identifier */
@@ -116,6 +133,19 @@ export declare class CloudClientService {
     private refreshInProgress;
     /** Callbacks invoked when the access token is refreshed */
     private tokenRefreshCallbacks;
+    /**
+     * Relay-signed access JWT used by BrowserProxyService to register with the
+     * Cloud Relay as role 'agent'. First-class, stored credential — distinct
+     * from the access `token` and decoupled from socket lifetime. NEVER the
+     * Google/Supabase access token (RELAY-TOKEN-TYPE invariant).
+     */
+    private relayToken;
+    /** Parsed `exp` (seconds) of {@link relayToken}, for proactive refresh. */
+    private relayTokenExp;
+    /** Timer for proactive relay-token refresh (fires SKEW before exp). */
+    private relayRefreshTimer;
+    /** Callbacks invoked when the relay token is refreshed (distinct channel). */
+    private relayTokenRefreshCallbacks;
     private constructor();
     /**
      * Get the singleton instance.
@@ -277,6 +307,39 @@ export declare class CloudClientService {
      * @param callback - Function receiving the new access token string
      */
     onTokenRefresh(callback: (newToken: string) => void): void;
+    /**
+     * Get the current relay-signed token (for BrowserProxyService registration).
+     *
+     * This is DISTINCT from {@link getToken} (the access/HTTP token). The
+     * BrowserProxy must register with the relay token, never the access token —
+     * see the RELAY-TOKEN-TYPE invariant. Returns null until a relay token has
+     * been minted by the Cloud validate/refresh endpoint.
+     *
+     * @returns Current relay token or null
+     */
+    getRelayToken(): string | null;
+    /**
+     * Register a callback invoked whenever the relay token is refreshed.
+     *
+     * Distinct subscription channel from {@link onTokenRefresh}: subscribers
+     * here (BrowserProxyService) receive the relay-signed token, never the
+     * access token. Decoupling the channels prevents the proxy from ever being
+     * fed the wrong token type on refresh.
+     *
+     * @param callback - Function receiving the new relay token string
+     */
+    onRelayTokenRefresh(callback: (newRelayToken: string) => void): void;
+    /**
+     * Store a freshly-minted relay token as a first-class credential, parse its
+     * expiry, schedule proactive refresh, persist it, and notify subscribers.
+     *
+     * Centralizes relay-token handling so every code path that obtains one
+     * (connect, refresh, validate) treats it identically. Persistence is
+     * fire-and-forget; a persist failure must not break the refresh chain.
+     *
+     * @param relayToken - The relay-signed access JWT from Cloud
+     */
+    private storeRelayToken;
     /**
      * Attempt to refresh the access token using the stored refresh token.
      *
@@ -295,6 +358,18 @@ export declare class CloudClientService {
      * @param token - JWT access token to extract expiry from
      */
     private scheduleTokenRefresh;
+    /**
+     * Schedule a proactive relay-token refresh `RELAY_REFRESH_SKEW_S` seconds
+     * before the relay token's real `exp`.
+     *
+     * The relay token (~60min TTL) is decoupled from the access token, so it
+     * needs its own refresh schedule. When the timer fires it calls
+     * {@link fetchRelayTokenFromValidate}, which re-mints a relay token and
+     * stores it (re-arming this timer). This keeps a continuously-open relay
+     * socket from ever carrying an expired token — the DURABLE-CREDENTIAL
+     * invariant. Driven by the JWT `exp` claim, not a wall-clock heuristic.
+     */
+    private scheduleRelayTokenRefresh;
     /**
      * Fetch relay token by calling Cloud validate endpoint.
      * Used after connectLocal() to get a Cloud-signed relay JWT

package/dist/backend/backend/src/services/cloud/cloud-client.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-client.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-client.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,qBAAqB,EAC3B,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,YAAY,EAAE,SAAS,CAAC;IACxB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,kEAAkE;AAClE,MAAM,WAAW,mBAAmB;IAClC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,YAAY,EAAE,SAAS,CAAC;IACxB,mBAAmB;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,gCAAgC;IAChC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB;IAClB,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;IAC/B,mBAAmB;IACnB,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,cAAc,CAAC;IAC7C,4BAA4B;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,6DAA6D;AAC7D,MAAM,WAAW,WAAW;IAC1B,gDAAgD;IAChD,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,gCAAgC;IAChC,IAAI,EAAE,SAAS,CAAC;IAChB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAMD;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAmC;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IAEzC,2DAA2D;IAC3D,OAAO,CAAC,QAAQ,CAAuB;IACvC,6CAA6C;IAC7C,OAAO,CAAC,KAAK,CAAuB;IACpC,4DAA4D;IAC5D,OAAO,CAAC,YAAY,CAAuB;IAC3C,gCAAgC;IAChC,OAAO,CAAC,gBAAgB,CAAyE;IACjG,0CAA0C;IAC1C,OAAO,CAAC,IAAI,CAAyC;IACrD,6DAA6D;IAC7D,OAAO,CAAC,UAAU,CAAuB;IACzC,oEAAoE;IACpE,OAAO,CAAC,YAAY,CAA8C;IAClE,mDAAmD;IACnD,OAAO,CAAC,iBAAiB,CAAS;IAClC,2DAA2D;IAC3D,OAAO,CAAC,qBAAqB,CAAyC;IAEtE,OAAO;IAIP;;;;OAIG;IACH,MAAM,CAAC,WAAW,IAAI,kBAAkB;IAOxC;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,IAAI;IAQ5B;;;;;;;;;;;;;;;;;OAiBG;IACG,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IA0DrH;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI;IA6B3F;;;;OAIG;IACH,UAAU,IAAI,IAAI;IAsBlB;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,MAAM;IAI9B;;;OAGG;IACG,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAajE;;OAEG;YACW,aAAa;IAiB3B;;OAEG;YACW,qBAAqB;IAanC;;;;;;;;;;;;;OAaG;IACG,YAAY,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IA4BrD;;;;;;;;;;;;;;OAcG;IACG,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAkCjE;;;;OAIG;IACH,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B;;;;OAIG;IACH,SAAS,IAAI,WAAW;IASxB;;;;OAIG;IACH,WAAW,IAAI,OAAO;IAItB;;;;OAIG;IACH,cAAc,IAAI,OAAO;IAIzB;;;;OAIG;IACH,OAAO,IAAI,SAAS;IAIpB;;;;;;;;OAQG;IACG,iBAAiB,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IA0CtD;;;;;;OAMG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAO3C;;;;OAIG;IACH,QAAQ,IAAI,MAAM,GAAG,IAAI;IAIzB;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAI1D;;;;;;;OAOG;IACG,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IA0HzC;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IA+C5B;;;;;;OAMG;YACW,2BAA2B;IA2BzC;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAMvB;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAOnB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAInB;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;CAa1B"}
+{"version":3,"file":"cloud-client.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-client.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,qBAAqB,EAC3B,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAYhE;AAMD,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,YAAY,EAAE,SAAS,CAAC;IACxB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,kEAAkE;AAClE,MAAM,WAAW,mBAAmB;IAClC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,YAAY,EAAE,SAAS,CAAC;IACxB,mBAAmB;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,gCAAgC;IAChC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB;IAClB,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC;IAC/B,mBAAmB;IACnB,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,cAAc,CAAC;IAC7C,4BAA4B;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,6DAA6D;AAC7D,MAAM,WAAW,WAAW;IAC1B,gDAAgD;IAChD,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,gCAAgC;IAChC,IAAI,EAAE,SAAS,CAAC;IAChB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAMD;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAmC;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IAEzC,2DAA2D;IAC3D,OAAO,CAAC,QAAQ,CAAuB;IACvC,6CAA6C;IAC7C,OAAO,CAAC,KAAK,CAAuB;IACpC,4DAA4D;IAC5D,OAAO,CAAC,YAAY,CAAuB;IAC3C,gCAAgC;IAChC,OAAO,CAAC,gBAAgB,CAAyE;IACjG,0CAA0C;IAC1C,OAAO,CAAC,IAAI,CAAyC;IACrD,6DAA6D;IAC7D,OAAO,CAAC,UAAU,CAAuB;IACzC,oEAAoE;IACpE,OAAO,CAAC,YAAY,CAA8C;IAClE,mDAAmD;IACnD,OAAO,CAAC,iBAAiB,CAAS;IAClC,2DAA2D;IAC3D,OAAO,CAAC,qBAAqB,CAAyC;IACtE;;;;;OAKG;IACH,OAAO,CAAC,UAAU,CAAuB;IACzC,2EAA2E;IAC3E,OAAO,CAAC,aAAa,CAAuB;IAC5C,uEAAuE;IACvE,OAAO,CAAC,iBAAiB,CAA8C;IACvE,8EAA8E;IAC9E,OAAO,CAAC,0BAA0B,CAA8C;IAEhF,OAAO;IAIP;;;;OAIG;IACH,MAAM,CAAC,WAAW,IAAI,kBAAkB;IAOxC;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,IAAI;IAQ5B;;;;;;;;;;;;;;;;;OAiBG;IACG,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAyDrH;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI;IA6B3F;;;;OAIG;IACH,UAAU,IAAI,IAAI;IAyBlB;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,MAAM;IAI9B;;;OAGG;IACG,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAuBjE;;OAEG;YACW,aAAa;IAkB3B;;OAEG;YACW,qBAAqB;IAanC;;;;;;;;;;;;;OAaG;IACG,YAAY,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IA4BrD;;;;;;;;;;;;;;OAcG;IACG,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAkCjE;;;;OAIG;IACH,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B;;;;OAIG;IACH,SAAS,IAAI,WAAW;IASxB;;;;OAIG;IACH,WAAW,IAAI,OAAO;IAItB;;;;OAIG;IACH,cAAc,IAAI,OAAO;IAIzB;;;;OAIG;IACH,OAAO,IAAI,SAAS;IAIpB;;;;;;;;OAQG;IACG,iBAAiB,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IA0CtD;;;;;;OAMG;IACH,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAO3C;;;;OAIG;IACH,QAAQ,IAAI,MAAM,GAAG,IAAI;IAIzB;;;;;OAKG;IACH,cAAc,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAI1D;;;;;;;;;OASG;IACH,aAAa,IAAI,MAAM,GAAG,IAAI;IAI9B;;;;;;;;;OASG;IACH,mBAAmB,CAAC,QAAQ,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAIpE;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe;IAqBvB;;;;;;;OAOG;IACG,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAqIzC;;;;;;;OAOG;IACH,OAAO,CAAC,oBAAoB;IA2C5B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,yBAAyB;IAoCjC;;;;;;OAMG;YACW,2BAA2B;IAyBzC;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAMvB;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAOnB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAInB;;;;;;;OAOG;IACH,OAAO,CAAC,iBAAiB;CAa1B"}

package/dist/backend/backend/src/services/cloud/cloud-client.service.js

@@ -15,6 +15,29 @@ import * as path from 'path';
 import { readFile, writeFile, mkdir, unlink } from 'fs/promises';
 import { LoggerService } from '../core/logger.service.js';
 import { CLOUD_CONSTANTS, AUTH_CONSTANTS, } from '../../constants.js';
+/**
+ * Decode the `exp` (expiry, seconds since epoch) claim from a JWT without
+ * verifying its signature. Returns null when the token is malformed or has
+ * no `exp`. Used to schedule proactive relay-token refresh before expiry so
+ * a continuously-open relay socket never carries an expired token.
+ *
+ * @param token - JWT string (may be null)
+ * @returns The `exp` claim in seconds, or null when unavailable
+ */
+export function decodeJwtExp(token) {
+    if (!token)
+        return null;
+    try {
+        const parts = token.split('.');
+        if (parts.length !== 3)
+            return null;
+        const payload = JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf8'));
+        return typeof payload.exp === 'number' ? payload.exp : null;
+    }
+    catch {
+        return null;
+    }
+}
 // ---------------------------------------------------------------------------
 // Service
 // ---------------------------------------------------------------------------
@@ -46,6 +69,19 @@ export class CloudClientService {
     refreshInProgress = false;
     /** Callbacks invoked when the access token is refreshed */
     tokenRefreshCallbacks = [];
+    /**
+     * Relay-signed access JWT used by BrowserProxyService to register with the
+     * Cloud Relay as role 'agent'. First-class, stored credential — distinct
+     * from the access `token` and decoupled from socket lifetime. NEVER the
+     * Google/Supabase access token (RELAY-TOKEN-TYPE invariant).
+     */
+    relayToken = null;
+    /** Parsed `exp` (seconds) of {@link relayToken}, for proactive refresh. */
+    relayTokenExp = null;
+    /** Timer for proactive relay-token refresh (fires SKEW before exp). */
+    relayRefreshTimer = null;
+    /** Callbacks invoked when the relay token is refreshed (distinct channel). */
+    relayTokenRefreshCallbacks = [];
     constructor() {
         this.logger = LoggerService.getInstance().createComponentLogger('CloudClientService');
     }
@@ -115,13 +151,12 @@ export class CloudClientService {
         this.tier = resolvedTier || CLOUD_CONSTANTS.TIERS.FREE;
         this.connectionStatus = CLOUD_CONSTANTS.CONNECTION_STATUS.CONNECTED;
         this.lastSyncAt = new Date().toISOString();
-        // Use relay token from Cloud validate response for BrowserProxyService
+        // Use relay token from Cloud validate response for BrowserProxyService.
+        // Store it as a first-class credential (not a transient callback arg) so
+        // it can be persisted, refreshed proactively, and re-fed on restart.
         if (data.data?.relayToken) {
             this.logger.info('Relay token received from Cloud');
-            // Notify BrowserProxyService via token refresh callbacks
-            for (const callback of this.tokenRefreshCallbacks) {
-                callback(data.data.relayToken);
-            }
+            this.storeRelayToken(data.data.relayToken);
         }
         this.logger.info('Connected to CrewlyAI Cloud', { tier: this.tier, hasRelayToken: !!data.data?.relayToken });
         // Schedule proactive token refresh
@@ -183,10 +218,16 @@ export class CloudClientService {
         this.connectionStatus = CLOUD_CONSTANTS.CONNECTION_STATUS.DISCONNECTED;
         this.tier = CLOUD_CONSTANTS.TIERS.FREE;
         this.lastSyncAt = null;
+        this.relayToken = null;
+        this.relayTokenExp = null;
         if (this.refreshTimer) {
             clearTimeout(this.refreshTimer);
             this.refreshTimer = null;
         }
+        if (this.relayRefreshTimer) {
+            clearTimeout(this.relayRefreshTimer);
+            this.relayRefreshTimer = null;
+        }
         // Remove persisted config
         this.removePersistedConfig().catch((err) => {
             this.logger.warn('Failed to remove persisted cloud config (non-fatal)', {
@@ -212,6 +253,16 @@ export class CloudClientService {
             const data = await readFile(CloudClientService.getConfigPath(), 'utf-8');
             const config = JSON.parse(data);
             if (config.cloudUrl && config.token && config.tier) {
+                // Restore the persisted relay token immediately so BrowserProxy can
+                // re-register on restart without waiting for a fresh validate
+                // round-trip. fetchRelayTokenFromValidate (kicked off by connectLocal)
+                // will refresh it shortly after. Do not broadcast here — connect/
+                // connectLocal own the wiring of subscribers; this just primes state.
+                if (config.relayToken) {
+                    this.relayToken = config.relayToken;
+                    this.relayTokenExp = decodeJwtExp(config.relayToken);
+                    this.scheduleRelayTokenRefresh();
+                }
                 return config;
             }
             return null;
@@ -232,6 +283,7 @@ export class CloudClientService {
             tier: this.tier,
             connectedAt: new Date().toISOString(),
             ...(this.refreshToken && { refreshToken: this.refreshToken }),
+            ...(this.relayToken && { relayToken: this.relayToken }),
         };
         const configPath = CloudClientService.getConfigPath();
         await mkdir(path.dirname(configPath), { recursive: true });
@@ -454,6 +506,60 @@ export class CloudClientService {
     onTokenRefresh(callback) {
         this.tokenRefreshCallbacks.push(callback);
     }
+    /**
+     * Get the current relay-signed token (for BrowserProxyService registration).
+     *
+     * This is DISTINCT from {@link getToken} (the access/HTTP token). The
+     * BrowserProxy must register with the relay token, never the access token —
+     * see the RELAY-TOKEN-TYPE invariant. Returns null until a relay token has
+     * been minted by the Cloud validate/refresh endpoint.
+     *
+     * @returns Current relay token or null
+     */
+    getRelayToken() {
+        return this.relayToken;
+    }
+    /**
+     * Register a callback invoked whenever the relay token is refreshed.
+     *
+     * Distinct subscription channel from {@link onTokenRefresh}: subscribers
+     * here (BrowserProxyService) receive the relay-signed token, never the
+     * access token. Decoupling the channels prevents the proxy from ever being
+     * fed the wrong token type on refresh.
+     *
+     * @param callback - Function receiving the new relay token string
+     */
+    onRelayTokenRefresh(callback) {
+        this.relayTokenRefreshCallbacks.push(callback);
+    }
+    /**
+     * Store a freshly-minted relay token as a first-class credential, parse its
+     * expiry, schedule proactive refresh, persist it, and notify subscribers.
+     *
+     * Centralizes relay-token handling so every code path that obtains one
+     * (connect, refresh, validate) treats it identically. Persistence is
+     * fire-and-forget; a persist failure must not break the refresh chain.
+     *
+     * @param relayToken - The relay-signed access JWT from Cloud
+     */
+    storeRelayToken(relayToken) {
+        this.relayToken = relayToken;
+        this.relayTokenExp = decodeJwtExp(relayToken);
+        // Schedule proactive refresh before this relay token's real exp so a
+        // continuously-open relay socket never carries an expired token.
+        this.scheduleRelayTokenRefresh();
+        // Persist alongside the access token for restart resilience.
+        this.persistConfig().catch(() => { });
+        // Notify subscribers (BrowserProxyService) on the relay-token channel.
+        for (const callback of this.relayTokenRefreshCallbacks) {
+            try {
+                callback(relayToken);
+            }
+            catch {
+                // Non-fatal — one bad callback must not break the refresh chain.
+            }
+        }
+    }
     /**
      * Attempt to refresh the access token using the stored refresh token.
      *
@@ -551,17 +657,27 @@ export class CloudClientService {
             catch {
                 // CloudSyncService may not be available — non-fatal
             }
-            // Notify token refresh subscribers (e.g. BrowserProxyService)
-            // Use relay token from Cloud refresh if available, otherwise use access token
-            const tokenForCallbacks = relayToken || newAccessToken;
+            // Notify access-token refresh subscribers with the ACCESS token only.
+            // The relay token has its own channel (storeRelayToken below) — never
+            // substitute the access token for the relay token (RELAY-TOKEN-TYPE
+            // invariant). Subscribers on this channel that need the relay token
+            // should subscribe via onRelayTokenRefresh instead.
             for (const callback of this.tokenRefreshCallbacks) {
                 try {
-                    callback(tokenForCallbacks);
+                    callback(newAccessToken);
                 }
                 catch {
                     // Non-fatal — don't let one bad callback break the refresh chain
                 }
             }
+            // Store the relay token as a first-class credential when the refresh
+            // returned one. If none was returned, keep the existing stored relay
+            // token rather than clobbering it with the access token — a continuing
+            // socket keeps working on its still-valid relay token until its own
+            // proactive refresh fires.
+            if (relayToken) {
+                this.storeRelayToken(relayToken);
+            }
             this.logger.info('Access token auto-refreshed successfully', { hasRelayToken: !!relayToken });
             return true;
         }
@@ -623,6 +739,44 @@ export class CloudClientService {
             this.logger.debug('Could not schedule token refresh (non-fatal)');
         }
     }
+    /**
+     * Schedule a proactive relay-token refresh `RELAY_REFRESH_SKEW_S` seconds
+     * before the relay token's real `exp`.
+     *
+     * The relay token (~60min TTL) is decoupled from the access token, so it
+     * needs its own refresh schedule. When the timer fires it calls
+     * {@link fetchRelayTokenFromValidate}, which re-mints a relay token and
+     * stores it (re-arming this timer). This keeps a continuously-open relay
+     * socket from ever carrying an expired token — the DURABLE-CREDENTIAL
+     * invariant. Driven by the JWT `exp` claim, not a wall-clock heuristic.
+     */
+    scheduleRelayTokenRefresh() {
+        if (this.relayRefreshTimer) {
+            clearTimeout(this.relayRefreshTimer);
+            this.relayRefreshTimer = null;
+        }
+        if (!this.relayTokenExp)
+            return;
+        const now = Math.floor(Date.now() / 1000);
+        // Refresh 5 minutes (300s) before expiry — same skew as the access token.
+        const refreshAt = this.relayTokenExp - 300;
+        const delayMs = Math.max(0, (refreshAt - now) * 1000);
+        if (delayMs <= 0) {
+            // Already near expiry — refresh immediately.
+            this.logger.info('Relay token near expiry, refreshing immediately');
+            this.fetchRelayTokenFromValidate().catch(() => { });
+            return;
+        }
+        this.relayRefreshTimer = setTimeout(() => {
+            this.logger.info('Proactive relay-token refresh triggered');
+            this.fetchRelayTokenFromValidate().catch(() => { });
+        }, delayMs);
+        // Unref so the timer doesn't keep the process alive.
+        if (this.relayRefreshTimer.unref)
+            this.relayRefreshTimer.unref();
+        const minutesUntilRefresh = Math.round(delayMs / 60_000);
+        this.logger.debug('Relay token refresh scheduled', { minutesUntilRefresh });
+    }
     // -------------------------------------------------------------------------
     // Private helpers
     // -------------------------------------------------------------------------
@@ -652,9 +806,7 @@ export class CloudClientService {
         const data = await response.json();
         if (data.data?.relayToken) {
             this.logger.info('Relay token received from Cloud validate (after connectLocal)');
-            for (const callback of this.tokenRefreshCallbacks) {
-                callback(data.data.relayToken);
-            }
+            this.storeRelayToken(data.data.relayToken);
         }
     }
     /**