dsh-deeppilot 0.2.2 → 0.4.0

package/lib/index.d.ts

@@ -66,7 +66,7 @@ interface PendingSnapshotPayload {
   questions: PendingQuestionPayload[];
 }
 //#endregion
-//#region src/host-bridge.d.ts
+//#region src/host-api.d.ts
 interface RpcOk<T> {
   ok: true;
   value: T;
@@ -250,7 +250,9 @@ interface PhoneSessionRow {
   sessionId: string;
   updatedAt: number;
   running: boolean;
-  blank: boolean;
+  /** Host marks never-prompted sessions as blank; informational only — the
+   * summary projects them as idle (see toSummary) so phones can send. */
+  blank?: boolean;
   cwd?: string;
   origin?: string;
   parentSessionId?: string;
@@ -355,6 +357,8 @@ interface PushOutlet {
    */
   isAvailable(): boolean;
 }
+//#endregion
+//#region src/host-bridge.d.ts
 declare class HostBridge {
   private readonly apiProxy;
   private readonly historyBufferMax;
@@ -367,7 +371,10 @@ declare class HostBridge {
   private sinks;
   private ring;
   private cursor;
+  private userReceiptSeq;
   private abort;
+  private started;
+  private disposed;
   constructor(apiProxy: ApiProxyLike, historyBufferMax?: number);
   private pushOutlet;
   /**
@@ -381,6 +388,7 @@ declare class HostBridge {
     approvals: boolean;
     questions: boolean;
     pendingSnapshot: boolean;
+    notifyAllCategories: boolean;
     models: boolean;
     sessionManagement: boolean;
     projectSelection: boolean;
@@ -399,6 +407,12 @@ declare class HostBridge {
   markSinkClosed(sink: BridgeSink, sessionId: string): void;
   dropSinkSessions(sink: BridgeSink): void;
   private isViewedBy;
+  /** F-9: when a notification-worthy event fires, mirror it to every
+   *  online device that is not currently viewing the session (the s2c.notify
+   *  frame counts toward the seq cursor and joins the replay ring per
+   *  PROTOCOL §6 + §7), then fan the same payload out to offline devices
+   *  holding an APNs token. */
+  private emitNotify;
   /** F-9: when a turn completes, notify every device not viewing the session. */
   private emitTurnCompletedNotify;
   /**
@@ -480,23 +494,7 @@ declare class HostBridge {
   respondQuestion(requestId: string, answers: unknown): Promise<PendingResponseOutcome>;
 }
 //#endregion
-//#region src/index.d.ts
-/**
- * dsh-deeppilot — data bridge between the DSH host and DeepPilot
- * clients. Registers exactly one WebSocket upgrade route (/phone) plus an
- * optional health probe (/phone/health) on the existing web server. The web
- * UI is never touched.
- *
- * Data plane: an in-process HostBridge consumes apiProxy.events.mux()/host()
- * streams, mirrors session summaries, tracks pending approvals/questions,
- * and fans projected protocol-v1 pushes out to every connected device.
- *
- * Protocol: src/protocol.ts, v1. The private app repository carries the
- * matching normative document and Swift models.
- */
-declare const name = "deeppilot";
-/** No eager service requirement: profiles without a web stack simply skip. */
-declare const inject: string[];
+//#region src/config.d.ts
 interface Config {
   /** Master switch; when false the plugin activates and does nothing. */
   enabled?: boolean;
@@ -511,35 +509,30 @@ interface Config {
   /** Optional embedded remote transport. Reconciled when settings change. */
   remote?: {
     enabled?: boolean;
-    provider?: string;
+    provider?: 'tailscale-funnel';
     hostname?: string;
     statePath?: string;
     helperPath?: string;
-    funnelPort?: number;
+    funnelPort?: 443 | 8443 | 10000;
   };
   /**
-   * Offline push (F-9). provider 'apns' sends direct Apple Push Notification
-   * deliveries from this Mac — outbound-only, no relay server, requires the
-   * user's own Apple developer credentials. provider 'relay' forwards notify
-   * projections to an operator-run relay (relay/server.js) holding the
-   * distributor's key — used when the App ships via TestFlight/App Store.
-   *
-   * Deliberately NO environment knob here: each device reports its own
-   * environment when registering (derived from its build kind), and
-   * deliveries route per device — mixed dev/TestFlight phones coexist.
+   * Offline push (F-9). `apns` sends directly from the Mac with the user's
+   * Apple credentials. `relay` sends notify projections to an operator-run
+   * relay for distributed builds. The device reports its own APNs environment,
+   * so development and TestFlight/App Store devices may coexist.
    */
   push?: {
-    /** 'none' (default) | 'apns' | 'relay'. */
-    provider?: string;
+    /** `none` (default), `apns`, or `relay`. */
+    provider?: 'none' | 'apns' | 'relay';
     /** Apple Developer team id (JWT iss claim). */
     teamId?: string;
     /** APNs auth key id (JWT kid header). */
     keyId?: string;
-    /** .p8 private key path; generated keys live under the bridge data dir. */
+    /** `.p8` private key path. */
     keyPath?: string;
     /** App bundle id — the apns-topic header. */
     bundleId?: string;
-    /** Relay base URL (https). See relay/README.md. */
+    /** Relay base URL. */
     relayUrl?: string;
     /** Per-user bearer token issued by the relay operator. */
     relayToken?: string;
@@ -553,21 +546,21 @@ declare const Config: z<Schemastery.ObjectS<{
   debug: z<boolean, boolean>;
   remote: z<Schemastery.ObjectS<{
     enabled: z<boolean, boolean>;
-    provider: z<string, string>;
+    provider: z<"tailscale-funnel", "tailscale-funnel">;
     hostname: z<string, string>;
     statePath: z<string, string>;
     helperPath: z<string, string>;
-    funnelPort: z<number, number>;
+    funnelPort: z<443 | 8443 | 10000, 443 | 8443 | 10000>;
   }>, Schemastery.ObjectT<{
     enabled: z<boolean, boolean>;
-    provider: z<string, string>;
+    provider: z<"tailscale-funnel", "tailscale-funnel">;
     hostname: z<string, string>;
     statePath: z<string, string>;
     helperPath: z<string, string>;
-    funnelPort: z<number, number>;
+    funnelPort: z<443 | 8443 | 10000, 443 | 8443 | 10000>;
   }>>;
   push: z<Schemastery.ObjectS<{
-    provider: z<string, string>;
+    provider: z<"none" | "apns" | "relay", "none" | "apns" | "relay">;
     teamId: z<string, string>;
     keyId: z<string, string>;
     keyPath: z<string, string>;
@@ -575,7 +568,7 @@ declare const Config: z<Schemastery.ObjectS<{
     relayUrl: z<string, string>;
     relayToken: z<string, string>;
   }>, Schemastery.ObjectT<{
-    provider: z<string, string>;
+    provider: z<"none" | "apns" | "relay", "none" | "apns" | "relay">;
     teamId: z<string, string>;
     keyId: z<string, string>;
     keyPath: z<string, string>;
@@ -591,21 +584,21 @@ declare const Config: z<Schemastery.ObjectS<{
   debug: z<boolean, boolean>;
   remote: z<Schemastery.ObjectS<{
     enabled: z<boolean, boolean>;
-    provider: z<string, string>;
+    provider: z<"tailscale-funnel", "tailscale-funnel">;
     hostname: z<string, string>;
     statePath: z<string, string>;
     helperPath: z<string, string>;
-    funnelPort: z<number, number>;
+    funnelPort: z<443 | 8443 | 10000, 443 | 8443 | 10000>;
   }>, Schemastery.ObjectT<{
     enabled: z<boolean, boolean>;
-    provider: z<string, string>;
+    provider: z<"tailscale-funnel", "tailscale-funnel">;
     hostname: z<string, string>;
     statePath: z<string, string>;
     helperPath: z<string, string>;
-    funnelPort: z<number, number>;
+    funnelPort: z<443 | 8443 | 10000, 443 | 8443 | 10000>;
   }>>;
   push: z<Schemastery.ObjectS<{
-    provider: z<string, string>;
+    provider: z<"none" | "apns" | "relay", "none" | "apns" | "relay">;
     teamId: z<string, string>;
     keyId: z<string, string>;
     keyPath: z<string, string>;
@@ -613,7 +606,7 @@ declare const Config: z<Schemastery.ObjectS<{
     relayUrl: z<string, string>;
     relayToken: z<string, string>;
   }>, Schemastery.ObjectT<{
-    provider: z<string, string>;
+    provider: z<"none" | "apns" | "relay", "none" | "apns" | "relay">;
     teamId: z<string, string>;
     keyId: z<string, string>;
     keyPath: z<string, string>;
@@ -622,9 +615,44 @@ declare const Config: z<Schemastery.ObjectS<{
     relayToken: z<string, string>;
   }>>;
 }>>;
+//#endregion
+//#region src/phone-http.d.ts
 /** Authorization is preferred; the query form remains for older app builds. */
 declare function requestToken(req: Pick<IncomingMessage, 'url' | 'headers'>): string | null;
+//#endregion
+//#region src/push-policy.d.ts
+/** Prune only when the provider supplies an authoritative token-lifecycle verdict. */
+declare function shouldPrunePushToken(outcome: 'sent' | 'invalid-token' | 'failed', reason?: string): boolean;
+/**
+ * Zero-touch relay self-heal: HTTP 401 means the relay no longer honors the
+ * cached credential. Only auto-enrolled cells with a still-current token may
+ * re-derive it; an explicitly configured relay token remains user-owned
+ * configuration and is never silently rewritten.
+ */
+declare function shouldReEnrollRelayToken(transport: 'apns' | 'relay', outcome: 'sent' | 'invalid-token' | 'failed', reason: string | undefined, opts: {
+  usedCellToken: boolean;
+  hasEnrollKey: boolean;
+  tokenStillCurrent: boolean;
+}): boolean;
+//#endregion
+//#region src/index.d.ts
+/**
+ * dsh-deeppilot — data bridge between the DSH host and DeepPilot
+ * clients. Registers exactly one WebSocket upgrade route (/phone) plus an
+ * optional health probe (/phone/health) on the existing web server. The web
+ * UI is never touched.
+ *
+ * Data plane: an in-process HostBridge consumes apiProxy.events.mux()/host()
+ * streams, mirrors session summaries, tracks pending approvals/questions,
+ * and fans projected protocol-v1 pushes out to every connected device.
+ *
+ * Protocol: PROTOCOL.md is normative; src/protocol.ts and the private app's
+ * Swift models mirror that v1 contract.
+ */
+declare const name = "deeppilot";
+/** No eager service requirement: profiles without a web stack simply skip. */
+declare const inject: string[];
 declare function apply(ctx: Context, options: unknown): void;
 //#endregion
-export { Config, HostBridge, apply, inject, name, requestToken };
+export { Config, HostBridge, apply, inject, name, requestToken, shouldPrunePushToken, shouldReEnrollRelayToken };
 //# sourceMappingURL=index.d.ts.map