flaio-cli 0.3.1

package/dist/portal/portal-server.js

@@ -0,0 +1,330 @@
+import net from "node:net";
+import fs from "node:fs";
+import { appStore, getSessionInstance } from "../store/app-store.js";
+import { getAllDrivers } from "../agents/agent-registry.js";
+import { portalStore } from "../store/portal-store.js";
+import { PORTAL_SOCKET_DIR, PORTAL_SOCKET_PATH, } from "./shared.js";
+const MIN_FRAME_INTERVAL_MS = 50; // 20fps cap
+// ---------------------------------------------------------------------------
+// PortalServer
+// ---------------------------------------------------------------------------
+export class PortalServer {
+    server = null;
+    clients = new Map();
+    storeUnsub = null;
+    async start() {
+        fs.mkdirSync(PORTAL_SOCKET_DIR, { recursive: true });
+        // Remove stale socket file
+        try {
+            fs.unlinkSync(PORTAL_SOCKET_PATH);
+        }
+        catch {
+            // Doesn't exist — fine
+        }
+        return new Promise((resolve, reject) => {
+            this.server = net.createServer((conn) => {
+                this.handleConnection(conn);
+            });
+            this.server.on("error", reject);
+            this.server.listen(PORTAL_SOCKET_PATH, () => {
+                fs.chmodSync(PORTAL_SOCKET_PATH, 0o600);
+                this.watchSessionRemovals();
+                resolve();
+            });
+        });
+    }
+    async stop() {
+        if (this.storeUnsub) {
+            this.storeUnsub();
+            this.storeUnsub = null;
+        }
+        // Clean up all clients
+        for (const [socket, client] of this.clients) {
+            this.cleanupClient(client);
+            socket.destroy();
+        }
+        this.clients.clear();
+        return new Promise((resolve) => {
+            if (this.server) {
+                this.server.close(() => resolve());
+                try {
+                    fs.unlinkSync(PORTAL_SOCKET_PATH);
+                }
+                catch {
+                    // Best effort
+                }
+            }
+            else {
+                resolve();
+            }
+        });
+    }
+    // -------------------------------------------------------------------------
+    // Connection handling
+    // -------------------------------------------------------------------------
+    handleConnection(socket) {
+        const client = {
+            socket,
+            subscribedSessionId: null,
+            contentUnsub: null,
+            statusUnsub: null,
+            throttleTimer: null,
+            pendingFrame: null,
+        };
+        this.clients.set(socket, client);
+        let buffer = "";
+        socket.on("data", (chunk) => {
+            buffer += chunk.toString();
+            const lines = buffer.split("\n");
+            buffer = lines.pop() ?? "";
+            for (const line of lines) {
+                if (!line.trim())
+                    continue;
+                try {
+                    const msg = JSON.parse(line);
+                    this.handleMessage(client, msg);
+                }
+                catch {
+                    this.send(client, { type: "portal_error", message: "Invalid JSON" });
+                }
+            }
+        });
+        socket.on("close", () => {
+            this.cleanupClient(client);
+            this.clients.delete(socket);
+        });
+        socket.on("error", () => {
+            this.cleanupClient(client);
+            this.clients.delete(socket);
+        });
+    }
+    // -------------------------------------------------------------------------
+    // Message dispatch
+    // -------------------------------------------------------------------------
+    handleMessage(client, msg) {
+        switch (msg.type) {
+            case "portal_list":
+                this.handleList(client);
+                break;
+            case "portal_subscribe":
+                this.handleSubscribe(client, msg.sessionId);
+                break;
+            case "portal_input":
+                this.handleInput(client, msg.data);
+                break;
+            case "portal_unsubscribe":
+                this.handleUnsubscribe(client);
+                break;
+            case "portal_list_drivers":
+                this.handleListDrivers(client);
+                break;
+            case "portal_create_session":
+                this.handleCreateSession(client, msg.driverName, msg.cwd);
+                break;
+            case "portal_scroll":
+                this.handleScroll(client, msg.lines);
+                break;
+        }
+    }
+    // -------------------------------------------------------------------------
+    // Handlers
+    // -------------------------------------------------------------------------
+    handleList(client) {
+        const sessions = appStore
+            .getState()
+            .sessions.map((s) => ({
+            id: s.id,
+            driverName: s.driverName,
+            displayName: s.displayName,
+            cwd: s.cwd,
+            status: s.status,
+        }));
+        this.send(client, { type: "portal_sessions", sessions });
+    }
+    handleSubscribe(client, sessionId) {
+        // Clean up any previous subscription
+        this.cleanupSubscription(client);
+        const session = getSessionInstance(sessionId);
+        if (!session) {
+            this.send(client, {
+                type: "portal_error",
+                message: `Session "${sessionId}" not found`,
+            });
+            return;
+        }
+        client.subscribedSessionId = sessionId;
+        this.refreshPortalStore();
+        // Send initial frame immediately
+        this.sendFrame(client, session);
+        // Subscribe to content updates (throttled to 20fps)
+        const onContent = (_content, _cursor) => {
+            this.scheduleFrame(client, session);
+        };
+        session.on("content", onContent);
+        client.contentUnsub = () => session.removeListener("content", onContent);
+        // Subscribe to status updates
+        const onStatus = (status) => {
+            this.send(client, {
+                type: "portal_status",
+                sessionId,
+                status,
+            });
+        };
+        session.on("status", onStatus);
+        client.statusUnsub = () => session.removeListener("status", onStatus);
+    }
+    handleInput(client, data) {
+        if (!client.subscribedSessionId)
+            return;
+        const session = getSessionInstance(client.subscribedSessionId);
+        if (session) {
+            session.scrollToBottom();
+            session.write(data);
+        }
+    }
+    handleScroll(client, lines) {
+        if (!client.subscribedSessionId)
+            return;
+        const session = getSessionInstance(client.subscribedSessionId);
+        if (session) {
+            session.scroll(lines);
+        }
+    }
+    handleUnsubscribe(client) {
+        this.cleanupSubscription(client);
+    }
+    async handleListDrivers(client) {
+        const allDrivers = getAllDrivers();
+        const drivers = await Promise.all(allDrivers.map(async (d) => ({
+            name: d.name,
+            displayName: d.displayName,
+            installed: await d.checkInstalled(),
+        })));
+        this.send(client, { type: "portal_drivers", drivers });
+    }
+    handleCreateSession(client, driverName, cwd) {
+        try {
+            const session = appStore.getState().createSession(driverName, cwd);
+            if (!session) {
+                this.send(client, {
+                    type: "portal_error",
+                    message: `Driver "${driverName}" not found`,
+                });
+                return;
+            }
+            session.start().catch(() => { });
+            this.send(client, {
+                type: "portal_session_created",
+                sessionId: session.id,
+            });
+        }
+        catch (err) {
+            this.send(client, {
+                type: "portal_error",
+                message: `Failed to create session: ${err}`,
+            });
+        }
+    }
+    // -------------------------------------------------------------------------
+    // Frame sending with throttle + backpressure
+    // -------------------------------------------------------------------------
+    sendFrame(client, session) {
+        const content = session.getContent();
+        const cursor = session.getCursorPos();
+        const msg = {
+            type: "portal_frame",
+            content,
+            cursor,
+            cols: session.cols,
+            rows: session.rows,
+        };
+        this.send(client, msg);
+    }
+    scheduleFrame(client, session) {
+        // Coalesce: always update pending frame to latest
+        const content = session.getContent();
+        const cursor = session.getCursorPos();
+        client.pendingFrame = {
+            type: "portal_frame",
+            content,
+            cursor,
+            cols: session.cols,
+            rows: session.rows,
+        };
+        // If a timer is already running, the pending frame will be sent when it fires
+        if (client.throttleTimer)
+            return;
+        client.throttleTimer = setTimeout(() => {
+            client.throttleTimer = null;
+            if (client.pendingFrame) {
+                this.send(client, client.pendingFrame);
+                client.pendingFrame = null;
+            }
+        }, MIN_FRAME_INTERVAL_MS);
+    }
+    // -------------------------------------------------------------------------
+    // Watch for session removals via appStore
+    // -------------------------------------------------------------------------
+    watchSessionRemovals() {
+        let prevIds = new Set(appStore.getState().sessions.map((s) => s.id));
+        this.storeUnsub = appStore.subscribe((state) => {
+            const currentIds = new Set(state.sessions.map((s) => s.id));
+            // Check for removed sessions
+            for (const id of prevIds) {
+                if (!currentIds.has(id)) {
+                    // Notify all subscribed clients
+                    for (const client of this.clients.values()) {
+                        if (client.subscribedSessionId === id) {
+                            this.send(client, {
+                                type: "portal_session_ended",
+                                sessionId: id,
+                            });
+                            this.cleanupSubscription(client);
+                        }
+                    }
+                }
+            }
+            prevIds = currentIds;
+        });
+    }
+    // -------------------------------------------------------------------------
+    // Helpers
+    // -------------------------------------------------------------------------
+    send(client, msg) {
+        // Backpressure: skip frame messages if the socket buffer is full
+        if (client.socket.writableNeedDrain && msg.type === "portal_frame") {
+            return;
+        }
+        client.socket.write(JSON.stringify(msg) + "\n");
+    }
+    cleanupSubscription(client) {
+        if (client.contentUnsub) {
+            client.contentUnsub();
+            client.contentUnsub = null;
+        }
+        if (client.statusUnsub) {
+            client.statusUnsub();
+            client.statusUnsub = null;
+        }
+        if (client.throttleTimer) {
+            clearTimeout(client.throttleTimer);
+            client.throttleTimer = null;
+        }
+        client.pendingFrame = null;
+        client.subscribedSessionId = null;
+        this.refreshPortalStore();
+    }
+    refreshPortalStore() {
+        const ids = new Set();
+        for (const client of this.clients.values()) {
+            if (client.subscribedSessionId) {
+                ids.add(client.subscribedSessionId);
+            }
+        }
+        portalStore.setState({ connectedSessionIds: ids });
+    }
+    cleanupClient(client) {
+        this.cleanupSubscription(client);
+    }
+}
+//# sourceMappingURL=portal-server.js.map

package/dist/portal/portal-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal-server.js","sourceRoot":"","sources":["../../src/portal/portal-server.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,GAKnB,MAAM,aAAa,CAAC;AAmBrB,MAAM,qBAAqB,GAAG,EAAE,CAAC,CAAC,YAAY;AAE9C,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,OAAO,YAAY;IACf,MAAM,GAAsB,IAAI,CAAC;IACjC,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC9C,UAAU,GAAwB,IAAI,CAAC;IAE/C,KAAK,CAAC,KAAK;QACT,EAAE,CAAC,SAAS,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAErD,2BAA2B;QAC3B,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE;gBACtC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,GAAG,EAAE;gBAC1C,EAAE,CAAC,SAAS,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;gBACxC,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC5B,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QAED,uBAAuB;QACvB,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAErB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnC,IAAI,CAAC;oBACH,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc;gBAChB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,sBAAsB;IACtB,4EAA4E;IAEpE,gBAAgB,CAAC,MAAkB;QACzC,MAAM,MAAM,GAAiB;YAC3B,MAAM;YACN,mBAAmB,EAAE,IAAI;YACzB,YAAY,EAAE,IAAI;YAClB,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,IAAI;SACnB,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEjC,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBAAE,SAAS;gBAC3B,IAAI,CAAC;oBACH,MAAM,GAAG,GAAoB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC9C,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,mBAAmB;IACnB,4EAA4E;IAEpE,aAAa,CAAC,MAAoB,EAAE,GAAoB;QAC9D,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,aAAa;gBAChB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACxB,MAAM;YACR,KAAK,kBAAkB;gBACrB,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC5C,MAAM;YACR,KAAK,cAAc;gBACjB,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACnC,MAAM;YACR,KAAK,oBAAoB;gBACvB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAC/B,MAAM;YACR,KAAK,qBAAqB;gBACxB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAC/B,MAAM;YACR,KAAK,uBAAuB;gBAC1B,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC1D,MAAM;YACR,KAAK,eAAe;gBAClB,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBACrC,MAAM;QACV,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,WAAW;IACX,4EAA4E;IAEpE,UAAU,CAAC,MAAoB;QACrC,MAAM,QAAQ,GAAwB,QAAQ;aAC3C,QAAQ,EAAE;aACV,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3D,CAAC;IAEO,eAAe,CAAC,MAAoB,EAAE,SAAiB;QAC7D,qCAAqC;QACrC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAChB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,YAAY,SAAS,aAAa;aAC5C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACvC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE1B,iCAAiC;QACjC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEhC,oDAAoD;QACpD,MAAM,SAAS,GAAG,CAAC,QAAuB,EAAE,OAAiC,EAAE,EAAE;YAC/E,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAEzE,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;YAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAChB,IAAI,EAAE,eAAe;gBACrB,SAAS;gBACT,MAAM;aACP,CAAC,CAAC;QACL,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/B,MAAM,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxE,CAAC;IAEO,WAAW,CAAC,MAAoB,EAAE,IAAY;QACpD,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAAE,OAAO;QACxC,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC/D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,cAAc,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,MAAoB,EAAE,KAAa;QACtD,IAAI,CAAC,MAAM,CAAC,mBAAmB;YAAE,OAAO;QACxC,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAC/D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,MAAoB;QAC5C,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,MAAoB;QAClD,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,OAAO,GAAuB,MAAM,OAAO,CAAC,GAAG,CACnD,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,SAAS,EAAE,MAAM,CAAC,CAAC,cAAc,EAAE;SACpC,CAAC,CAAC,CACJ,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC;IAEO,mBAAmB,CACzB,MAAoB,EACpB,UAAkB,EAClB,GAAW;QAEX,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;oBAChB,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,WAAW,UAAU,aAAa;iBAC5C,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAChB,IAAI,EAAE,wBAAwB;gBAC9B,SAAS,EAAE,OAAO,CAAC,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAChB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,6BAA6B,GAAG,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,6CAA6C;IAC7C,4EAA4E;IAEpE,SAAS,CAAC,MAAoB,EAAE,OAAqB;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACtC,MAAM,GAAG,GAAoB;YAC3B,IAAI,EAAE,cAAc;YACpB,OAAO;YACP,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;IAEO,aAAa,CAAC,MAAoB,EAAE,OAAqB;QAC/D,kDAAkD;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;QACtC,MAAM,CAAC,YAAY,GAAG;YACpB,IAAI,EAAE,cAAc;YACpB,OAAO;YACP,MAAM;YACN,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC;QAEF,8EAA8E;QAC9E,IAAI,MAAM,CAAC,aAAa;YAAE,OAAO;QAEjC,MAAM,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YACrC,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;YAC5B,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;gBACvC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;YAC7B,CAAC;QACH,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC5B,CAAC;IAED,4EAA4E;IAC5E,0CAA0C;IAC1C,4EAA4E;IAEpE,oBAAoB;QAC1B,IAAI,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAErE,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;YAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAE5D,6BAA6B;YAC7B,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBACxB,gCAAgC;oBAChC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;wBAC3C,IAAI,MAAM,CAAC,mBAAmB,KAAK,EAAE,EAAE,CAAC;4BACtC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gCAChB,IAAI,EAAE,sBAAsB;gCAC5B,SAAS,EAAE,EAAE;6BACd,CAAC,CAAC;4BACH,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;wBACnC,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,OAAO,GAAG,UAAU,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,UAAU;IACV,4EAA4E;IAEpE,IAAI,CAAC,MAAoB,EAAE,GAAoB;QACrD,iEAAiE;QACjE,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACnE,OAAO;QACT,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAClD,CAAC;IAEO,mBAAmB,CAAC,MAAoB;QAC9C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,MAAM,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;QAC5B,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACnC,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAClC,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAEO,kBAAkB;QACxB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBAC/B,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,WAAW,CAAC,QAAQ,CAAC,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,CAAC;IAEO,aAAa,CAAC,MAAoB;QACxC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/portal/shared.d.ts

@@ -0,0 +1,79 @@
+import type { ScreenContent } from "../terminal/screen-buffer.js";
+export declare const PORTAL_SOCKET_DIR: string;
+export declare const PORTAL_SOCKET_PATH: string;
+export interface PortalSessionInfo {
+    id: string;
+    driverName: string;
+    displayName: string;
+    cwd: string;
+    status: string;
+}
+export interface PortalDriverInfo {
+    name: string;
+    displayName: string;
+    installed: boolean;
+}
+export interface PortalListMsg {
+    type: "portal_list";
+}
+export interface PortalSubscribeMsg {
+    type: "portal_subscribe";
+    sessionId: string;
+}
+export interface PortalInputMsg {
+    type: "portal_input";
+    data: string;
+}
+export interface PortalUnsubscribeMsg {
+    type: "portal_unsubscribe";
+}
+export interface PortalListDriversMsg {
+    type: "portal_list_drivers";
+}
+export interface PortalCreateSessionMsg {
+    type: "portal_create_session";
+    driverName: string;
+    cwd: string;
+}
+export interface PortalScrollMsg {
+    type: "portal_scroll";
+    lines: number;
+}
+export type PortalClientMsg = PortalListMsg | PortalSubscribeMsg | PortalInputMsg | PortalUnsubscribeMsg | PortalListDriversMsg | PortalCreateSessionMsg | PortalScrollMsg;
+export interface PortalSessionsMsg {
+    type: "portal_sessions";
+    sessions: PortalSessionInfo[];
+}
+export interface PortalFrameMsg {
+    type: "portal_frame";
+    content: ScreenContent;
+    cursor: {
+        x: number;
+        y: number;
+    };
+    cols: number;
+    rows: number;
+}
+export interface PortalStatusMsg {
+    type: "portal_status";
+    sessionId: string;
+    status: string;
+}
+export interface PortalSessionEndedMsg {
+    type: "portal_session_ended";
+    sessionId: string;
+}
+export interface PortalErrorMsg {
+    type: "portal_error";
+    message: string;
+}
+export interface PortalDriversMsg {
+    type: "portal_drivers";
+    drivers: PortalDriverInfo[];
+}
+export interface PortalSessionCreatedMsg {
+    type: "portal_session_created";
+    sessionId: string;
+}
+export type PortalServerMsg = PortalSessionsMsg | PortalFrameMsg | PortalStatusMsg | PortalSessionEndedMsg | PortalErrorMsg | PortalDriversMsg | PortalSessionCreatedMsg;
+//# sourceMappingURL=shared.d.ts.map

package/dist/portal/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/portal/shared.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,eAAO,MAAM,iBAAiB,QAAkC,CAAC;AACjE,eAAO,MAAM,kBAAkB,QAA8C,CAAC;AAM9E,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;CACpB;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,oBAAoB,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,qBAAqB,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,eAAe,GACvB,aAAa,GACb,kBAAkB,GAClB,cAAc,GACd,oBAAoB,GACpB,oBAAoB,GACpB,sBAAsB,GACtB,eAAe,CAAC;AAMpB,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,cAAc,GACd,eAAe,GACf,qBAAqB,GACrB,cAAc,GACd,gBAAgB,GAChB,uBAAuB,CAAC"}

package/dist/portal/shared.js

@@ -0,0 +1,5 @@
+import path from "node:path";
+import os from "node:os";
+export const PORTAL_SOCKET_DIR = path.join(os.tmpdir(), "flaio");
+export const PORTAL_SOCKET_PATH = path.join(PORTAL_SOCKET_DIR, "portal.sock");
+//# sourceMappingURL=shared.js.map

package/dist/portal/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/portal/shared.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC"}

package/dist/relay/rate-limiter.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Token-bucket rate limiter, keyed by a string identifier (e.g. viewerId).
+ */
+export declare class RateLimiter {
+    private maxTokens;
+    private refillRate;
+    private buckets;
+    constructor(maxTokens: number, refillRate: number);
+    /**
+     * Returns true if the action is allowed (one token consumed),
+     * false if the rate limit is exceeded.
+     */
+    allow(key: string): boolean;
+    clear(): void;
+}
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/relay/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../src/relay/rate-limiter.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,WAAW;IAIpB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,UAAU;IAJpB,OAAO,CAAC,OAAO,CAA6D;gBAGlE,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM;IAG5B;;;OAGG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAsB3B,KAAK,IAAI,IAAI;CAGd"}

package/dist/relay/rate-limiter.js

@@ -0,0 +1,37 @@
+/**
+ * Token-bucket rate limiter, keyed by a string identifier (e.g. viewerId).
+ */
+export class RateLimiter {
+    maxTokens;
+    refillRate;
+    buckets = new Map();
+    constructor(maxTokens, refillRate) {
+        this.maxTokens = maxTokens;
+        this.refillRate = refillRate;
+    }
+    /**
+     * Returns true if the action is allowed (one token consumed),
+     * false if the rate limit is exceeded.
+     */
+    allow(key) {
+        const now = Date.now();
+        let bucket = this.buckets.get(key);
+        if (!bucket) {
+            bucket = { tokens: this.maxTokens, lastRefill: now };
+            this.buckets.set(key, bucket);
+        }
+        // Refill tokens based on elapsed time
+        const elapsed = (now - bucket.lastRefill) / 1000;
+        bucket.tokens = Math.min(this.maxTokens, bucket.tokens + elapsed * this.refillRate);
+        bucket.lastRefill = now;
+        if (bucket.tokens >= 1) {
+            bucket.tokens -= 1;
+            return true;
+        }
+        return false;
+    }
+    clear() {
+        this.buckets.clear();
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/relay/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../src/relay/rate-limiter.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,WAAW;IAIZ;IACA;IAJF,OAAO,GAAG,IAAI,GAAG,EAAkD,CAAC;IAE5E,YACU,SAAiB,EACjB,UAAkB;QADlB,cAAS,GAAT,SAAS,CAAQ;QACjB,eAAU,GAAV,UAAU,CAAQ;IACzB,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,GAAW;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;YACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,sCAAsC;QACtC,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QACjD,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QACpF,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;QAExB,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/relay/relay-auth.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Run the browser-based OAuth login flow:
+ * 1. Start a local HTTP server on a random port
+ * 2. Open the browser to the auth page with ?port=<port>
+ * 3. Wait for the browser to redirect back with ?token=<idToken>&refresh=<refreshToken>
+ * 4. Store tokens in settings and shut down the server
+ */
+export declare function login(): Promise<{
+    success: boolean;
+    error?: string;
+}>;
+/**
+ * Clear stored auth tokens.
+ */
+export declare function logout(): void;
+/**
+ * Check if the user has a stored auth token.
+ */
+export declare function isLoggedIn(): boolean;
+/**
+ * Get the stored auth token, or null if not logged in.
+ */
+export declare function getAuthToken(): string | null;
+/**
+ * Refresh the Firebase ID token using the stored refresh token.
+ * Returns the new ID token, or null if refresh failed.
+ */
+export declare function refreshAuthToken(): Promise<string | null>;
+//# sourceMappingURL=relay-auth.d.ts.map

package/dist/relay/relay-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-auth.d.ts","sourceRoot":"","sources":["../../src/relay/relay-auth.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,wBAAsB,KAAK,IAAI,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8D3E;AAED;;GAEG;AACH,wBAAgB,MAAM,IAAI,IAAI,CAK7B;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,OAAO,CAGpC;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAG5C;AAKD;;;GAGG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkC/D"}

package/dist/relay/relay-auth.js

@@ -0,0 +1,129 @@
+import http from "node:http";
+import { once } from "node:events";
+import { execFile } from "node:child_process";
+import { settingsStore } from "../store/settings-store.js";
+/**
+ * Run the browser-based OAuth login flow:
+ * 1. Start a local HTTP server on a random port
+ * 2. Open the browser to the auth page with ?port=<port>
+ * 3. Wait for the browser to redirect back with ?token=<idToken>&refresh=<refreshToken>
+ * 4. Store tokens in settings and shut down the server
+ */
+export async function login() {
+    const server = http.createServer();
+    // Listen on random available port
+    server.listen(0, "127.0.0.1");
+    await once(server, "listening");
+    const addr = server.address();
+    if (!addr || typeof addr === "string") {
+        server.close();
+        return { success: false, error: "Failed to bind local server" };
+    }
+    const port = addr.port;
+    const authBaseUrl = process.env.AUTH_URL || settingsStore.getState().config.relay.authUrl;
+    const authUrl = `${authBaseUrl}?port=${port}`;
+    process.stdout.write(`Opening browser to authenticate...\n`);
+    process.stdout.write(`If the browser doesn't open, visit:\n  ${authUrl}\n\n`);
+    // Open browser (best-effort — works on macOS, Linux, Windows)
+    openBrowser(authUrl);
+    return new Promise((resolve) => {
+        const timeout = setTimeout(() => {
+            server.close();
+            resolve({ success: false, error: "Login timed out (5 minutes)" });
+        }, 5 * 60 * 1000);
+        server.on("request", (req, res) => {
+            const url = new URL(req.url ?? "/", `http://127.0.0.1:${port}`);
+            if (url.pathname === "/callback") {
+                const token = url.searchParams.get("token");
+                const refreshToken = url.searchParams.get("refresh");
+                if (!token) {
+                    res.writeHead(400, { "Content-Type": "text/html" });
+                    res.end("<h2>Missing token. Please try again.</h2>");
+                    return;
+                }
+                // Store tokens
+                settingsStore.getState().updateRelay({
+                    authToken: token,
+                    refreshToken: refreshToken ?? undefined,
+                });
+                // Success page
+                res.writeHead(200, { "Content-Type": "text/html" });
+                res.end("<h2>Authenticated successfully!</h2><p>You can close this tab and return to the terminal.</p>");
+                clearTimeout(timeout);
+                server.close();
+                resolve({ success: true });
+            }
+            else {
+                res.writeHead(404);
+                res.end("Not found");
+            }
+        });
+    });
+}
+/**
+ * Clear stored auth tokens.
+ */
+export function logout() {
+    settingsStore.getState().updateRelay({
+        authToken: undefined,
+        refreshToken: undefined,
+    });
+}
+/**
+ * Check if the user has a stored auth token.
+ */
+export function isLoggedIn() {
+    const { config } = settingsStore.getState();
+    return !!config.relay.authToken;
+}
+/**
+ * Get the stored auth token, or null if not logged in.
+ */
+export function getAuthToken() {
+    const { config } = settingsStore.getState();
+    return config.relay.authToken ?? null;
+}
+// Firebase Web API key (public — same as in the web app)
+const FIREBASE_API_KEY = "AIzaSyC8QMRjys-y0VNAKp_FxdTBGwiANKUVDbI";
+/**
+ * Refresh the Firebase ID token using the stored refresh token.
+ * Returns the new ID token, or null if refresh failed.
+ */
+export async function refreshAuthToken() {
+    const { config } = settingsStore.getState();
+    const refreshToken = config.relay.refreshToken;
+    if (!refreshToken)
+        return null;
+    try {
+        const res = await fetch(`https://securetoken.googleapis.com/v1/token?key=${FIREBASE_API_KEY}`, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: `grant_type=refresh_token&refresh_token=${encodeURIComponent(refreshToken)}`,
+        });
+        if (!res.ok)
+            return null;
+        const data = (await res.json());
+        if (!data.id_token)
+            return null;
+        // Persist the new tokens
+        settingsStore.getState().updateRelay({
+            authToken: data.id_token,
+            refreshToken: data.refresh_token ?? refreshToken,
+        });
+        return data.id_token;
+    }
+    catch {
+        return null;
+    }
+}
+function openBrowser(url) {
+    const [cmd, args] = process.platform === "darwin"
+        ? ["open", [url]]
+        : process.platform === "win32"
+            ? ["cmd", ["/c", "start", "", url]]
+            : ["xdg-open", [url]];
+    execFile(cmd, args, () => {
+        // Best effort — ignore errors
+    });
+}
+//# sourceMappingURL=relay-auth.js.map