linkshell-cli 0.8.2 → 0.10.0

package/dist/gateway/src/store.js

@@ -0,0 +1,109 @@
+import { DatabaseSync } from "node:sqlite";
+export class GatewayStore {
+    db;
+    constructor(path) {
+        this.db = new DatabaseSync(path);
+        this.db.exec(`
+      PRAGMA journal_mode = WAL;
+      CREATE TABLE IF NOT EXISTS peers (
+        id TEXT PRIMARY KEY,
+        role TEXT NOT NULL,
+        sign_key TEXT NOT NULL,
+        box_key TEXT NOT NULL,
+        name TEXT NOT NULL,
+        platform TEXT,
+        user_id TEXT,
+        last_seen INTEGER NOT NULL
+      );
+      CREATE INDEX IF NOT EXISTS peers_by_user ON peers (user_id);
+      CREATE TABLE IF NOT EXISTS links (
+        machine_id TEXT NOT NULL,
+        device_id TEXT NOT NULL,
+        created_at INTEGER NOT NULL,
+        PRIMARY KEY (machine_id, device_id)
+      ) WITHOUT ROWID;
+      CREATE INDEX IF NOT EXISTS links_by_device ON links (device_id);
+    `);
+    }
+    close() {
+        this.db.close();
+    }
+    peer(id) {
+        const row = this.db.prepare("SELECT * FROM peers WHERE id = ?").get(id);
+        return row ? toPeer(row) : undefined;
+    }
+    upsertPeer(peer) {
+        this.db
+            .prepare(`INSERT INTO peers (id, role, sign_key, box_key, name, platform, user_id, last_seen)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT(id) DO UPDATE SET box_key = excluded.box_key, name = excluded.name,
+           platform = excluded.platform, user_id = excluded.user_id, last_seen = excluded.last_seen`)
+            .run(peer.id, peer.role, peer.signKey, peer.boxKey, peer.name, peer.platform ?? null, peer.userId ?? null, peer.lastSeen);
+    }
+    touch(id, at = Date.now()) {
+        this.db.prepare("UPDATE peers SET last_seen = ? WHERE id = ?").run(at, id);
+    }
+    link(machineId, deviceId, at = Date.now()) {
+        this.db.prepare("INSERT OR IGNORE INTO links (machine_id, device_id, created_at) VALUES (?, ?, ?)").run(machineId, deviceId, at);
+    }
+    unlink(machineId, deviceId) {
+        return this.db.prepare("DELETE FROM links WHERE machine_id = ? AND device_id = ?").run(machineId, deviceId).changes > 0;
+    }
+    /**
+     * Takes a peer off its account: the account's other peers no longer reach it, or list it. Its
+     * keys and pairings stay, and signing in again puts it back.
+     */
+    disown(id) {
+        return this.db.prepare("UPDATE peers SET user_id = NULL WHERE id = ? AND user_id IS NOT NULL").run(id).changes > 0;
+    }
+    linkedAt(machineId, deviceId) {
+        const row = this.db.prepare("SELECT created_at FROM links WHERE machine_id = ? AND device_id = ?").get(machineId, deviceId);
+        return row?.created_at;
+    }
+    /** Peers of the other role that `id` may reach: linked, or owned by the same account. */
+    reachable(id) {
+        const self = this.peer(id);
+        if (!self)
+            return [];
+        const other = self.role === "machine" ? "device" : "machine";
+        const linked = (self.role === "machine"
+            ? this.db.prepare("SELECT p.*, l.created_at AS paired_at FROM links l JOIN peers p ON p.id = l.device_id WHERE l.machine_id = ?").all(id)
+            : this.db.prepare("SELECT p.*, l.created_at AS paired_at FROM links l JOIN peers p ON p.id = l.machine_id WHERE l.device_id = ?").all(id));
+        const out = new Map();
+        for (const row of linked)
+            out.set(String(row.id), { peer: toPeer(row), via: "paired", pairedAt: Number(row.paired_at) });
+        if (self.userId) {
+            const owned = this.db.prepare("SELECT * FROM peers WHERE user_id = ? AND role = ?").all(self.userId, other);
+            for (const row of owned)
+                if (!out.has(String(row.id)))
+                    out.set(String(row.id), { peer: toPeer(row), via: "account" });
+        }
+        return [...out.values()];
+    }
+    /** How `from` may reach `to`, or undefined when it may not. */
+    route(from, to) {
+        const a = this.peer(from);
+        const b = this.peer(to);
+        if (!a || !b || a.role === b.role)
+            return undefined;
+        const [machine, device] = a.role === "machine" ? [a, b] : [b, a];
+        if (this.linkedAt(machine.id, device.id) !== undefined)
+            return "paired";
+        if (a.userId && a.userId === b.userId)
+            return "account";
+        return undefined;
+    }
+}
+function toPeer(row) {
+    return {
+        id: String(row.id),
+        role: row.role,
+        signKey: String(row.sign_key),
+        boxKey: String(row.box_key),
+        name: String(row.name),
+        platform: row.platform ? String(row.platform) : undefined,
+        userId: row.user_id ? String(row.user_id) : undefined,
+        lastSeen: Number(row.last_seen),
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/gateway/src/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../../gateway/src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAiB3C,MAAM,OAAO,YAAY;IACN,EAAE,CAAe;IAElC,YAAY,IAAY;QACtB,IAAI,CAAC,EAAE,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;KAoBZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,EAAU;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAwC,CAAC;QAC/G,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvC,CAAC;IAED,UAAU,CAAC,IAAgB;QACzB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;oGAG4F,CAC7F;aACA,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9H,CAAC;IAED,KAAK,CAAC,EAAU,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;QAC/B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,CAAC,SAAiB,EAAE,QAAgB,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;QACvD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kFAAkF,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnI,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,QAAgB;QACxC,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0DAA0D,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IAC1H,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IACrH,CAAC;IAED,QAAQ,CAAC,SAAiB,EAAE,QAAgB;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAE7G,CAAC;QACd,OAAO,GAAG,EAAE,UAAU,CAAC;IACzB,CAAC;IAED,yFAAyF;IACzF,SAAS,CAAC,EAAU;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,MAAM,MAAM,GAAG,CACb,IAAI,CAAC,IAAI,KAAK,SAAS;YACrB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8GAA8G,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACzI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8GAA8G,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAC/G,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAA8E,CAAC;QAClG,KAAK,MAAM,GAAG,IAAI,MAAM;YAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACzH,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAA8B,CAAC;YACzI,KAAK,MAAM,GAAG,IAAI,KAAK;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,IAAY,EAAE,EAAU;QAC5B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QACpD,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QACxE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED,SAAS,MAAM,CAAC,GAA4B;IAC1C,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,IAAI,EAAE,GAAG,CAAC,IAAgB;QAC1B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC7B,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACzD,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QACrD,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;KAChC,CAAC;AACJ,CAAC"}

package/dist/gateway/src/subscription.d.ts

@@ -0,0 +1,18 @@
+import type { GatewayOptions } from "./relay.js";
+export interface SubscriptionCheck {
+    /** "unknown": the lookup itself failed, which says nothing about the account. */
+    status: "active" | "inactive" | "unknown";
+    reason?: string;
+}
+export type CheckSubscription = (userId: string) => Promise<SubscriptionCheck>;
+export declare function supabaseSubscriptions(supabase: {
+    url: string;
+    anonKey: string;
+    serviceRoleKey: string;
+}): CheckSubscription;
+/**
+ * The official gateway's rule for who may connect: a computer needs an active
+ * Pro account. Devices only reach computers they're paired with or share an
+ * account with, so they need nothing more.
+ */
+export declare function requirePro(check: CheckSubscription, warn: (message: string) => void): NonNullable<GatewayOptions["admit"]>;

package/dist/gateway/src/subscription.js

@@ -0,0 +1,46 @@
+export function supabaseSubscriptions(supabase) {
+    return async (userId) => {
+        if (!supabase.url || !supabase.anonKey)
+            return { status: "unknown", reason: "missing_supabase_config" };
+        if (!supabase.serviceRoleKey)
+            return { status: "unknown", reason: "missing_service_role_key" };
+        try {
+            const response = await fetch(`${supabase.url}/rest/v1/profiles?id=eq.${userId}&select=plan,plan_expires_at&limit=1`, {
+                headers: { Authorization: `Bearer ${supabase.serviceRoleKey}`, apikey: supabase.anonKey },
+                signal: AbortSignal.timeout(5_000),
+            });
+            if (!response.ok)
+                return { status: "unknown", reason: `profile_lookup_http_${response.status}` };
+            const profiles = (await response.json());
+            const profile = profiles[0];
+            if (!profile)
+                return { status: "unknown", reason: "profile_not_found" };
+            const active = profile.plan === "pro" && !!profile.plan_expires_at && new Date(profile.plan_expires_at) > new Date();
+            return { status: active ? "active" : "inactive" };
+        }
+        catch {
+            return { status: "unknown", reason: "profile_lookup_failed" };
+        }
+    };
+}
+/**
+ * The official gateway's rule for who may connect: a computer needs an active
+ * Pro account. Devices only reach computers they're paired with or share an
+ * account with, so they need nothing more.
+ */
+export function requirePro(check, warn) {
+    return async ({ role, userId }) => {
+        if (role !== "machine")
+            return undefined;
+        if (!userId)
+            return "官方网关需要登录 Pro 账号：在电脑上运行 linkshell login";
+        const subscription = await check(userId);
+        // A lookup failure isn't a lapsed subscription; don't lock people out over it.
+        if (subscription.status === "inactive")
+            return "官方网关需要 Pro 订阅：https://itool.tech";
+        if (subscription.status === "unknown")
+            warn(`subscription check unavailable (${subscription.reason}); admitting ${userId}`);
+        return undefined;
+    };
+}
+//# sourceMappingURL=subscription.js.map

package/dist/gateway/src/subscription.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription.js","sourceRoot":"","sources":["../../../../gateway/src/subscription.ts"],"names":[],"mappings":"AAcA,MAAM,UAAU,qBAAqB,CAAC,QAAkE;IACtG,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QACxG,IAAI,CAAC,QAAQ,CAAC,cAAc;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QAC/F,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,GAAG,2BAA2B,MAAM,sCAAsC,EAAE;gBACnH,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE;gBACzF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;aACnC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACjG,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuD,CAAC;YAC/F,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YACxE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,eAAe,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;YACrH,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAwB,EAAE,IAA+B;IAClF,OAAO,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QAChC,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzC,IAAI,CAAC,MAAM;YAAE,OAAO,wCAAwC,CAAC;QAC7D,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,+EAA+E;QAC/E,IAAI,YAAY,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,kCAAkC,CAAC;QAClF,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,mCAAmC,YAAY,CAAC,MAAM,gBAAgB,MAAM,EAAE,CAAC,CAAC;QAC5H,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC"}

package/dist/host/src/drivers/claude/transcript.d.ts

@@ -33,7 +33,6 @@ export declare function transcriptLine(raw: string, options?: {
 /** Parses a whole transcript file. */
 /** When each transcript update happened, for history import. */
 export declare const transcriptTimes: WeakMap<{
-    sessionUpdate: "user_message_chunk";
     content: {
         type: "text";
         text: string;
@@ -43,15 +42,14 @@ export declare const transcriptTimes: WeakMap<{
         data?: string | undefined;
         uri?: string | undefined;
     } | {
-        name: string;
         type: "resource_link";
+        name: string;
         uri: string;
         kind?: "agent" | "file" | "skill" | undefined;
     };
+    sessionUpdate: "user_message_chunk";
     messageId?: string | undefined;
 } | {
-    sessionUpdate: "agent_message_chunk";
-    messageId: string;
     content: {
         type: "text";
         text: string;
@@ -61,15 +59,15 @@ export declare const transcriptTimes: WeakMap<{
         data?: string | undefined;
         uri?: string | undefined;
     } | {
-        name: string;
         type: "resource_link";
+        name: string;
         uri: string;
         kind?: "agent" | "file" | "skill" | undefined;
     };
+    sessionUpdate: "agent_message_chunk";
+    messageId: string;
     parentToolCallId?: string | undefined;
 } | {
-    sessionUpdate: "agent_thought_chunk";
-    messageId: string;
     content: {
         type: "text";
         text: string;
@@ -79,16 +77,18 @@ export declare const transcriptTimes: WeakMap<{
         data?: string | undefined;
         uri?: string | undefined;
     } | {
-        name: string;
         type: "resource_link";
+        name: string;
         uri: string;
         kind?: "agent" | "file" | "skill" | undefined;
     };
+    sessionUpdate: "agent_thought_chunk";
+    messageId: string;
     parentToolCallId?: string | undefined;
 } | {
-    status: "pending" | "in_progress" | "completed" | "failed";
+    status: "failed" | "pending" | "in_progress" | "completed";
+    kind: "search" | "read" | "edit" | "delete" | "move" | "execute" | "think" | "fetch" | "other";
     title: string;
-    kind: "read" | "edit" | "delete" | "move" | "search" | "execute" | "think" | "fetch" | "other";
     toolCallId: string;
     sessionUpdate: "tool_call";
     detail?: {
@@ -98,12 +98,12 @@ export declare const transcriptTimes: WeakMap<{
     } | {
         type: "subagent";
         action: "message" | "spawn" | "wait" | "stop" | "resume" | "list";
-        model?: string | undefined;
         task?: string | undefined;
         agentType?: string | undefined;
+        model?: string | undefined;
     } | {
-        name: string;
         type: "skill";
+        name: string;
         description?: string | undefined;
     } | {
         type: "web_search";
@@ -132,8 +132,8 @@ export declare const transcriptTimes: WeakMap<{
             data?: string | undefined;
             uri?: string | undefined;
         } | {
-            name: string;
             type: "resource_link";
+            name: string;
             uri: string;
             kind?: "agent" | "file" | "skill" | undefined;
         };
@@ -161,6 +161,8 @@ export declare const transcriptTimes: WeakMap<{
 } | {
     toolCallId: string;
     sessionUpdate: "tool_call_update";
+    status?: "failed" | "pending" | "in_progress" | "completed" | undefined;
+    title?: string | undefined;
     detail?: {
         type: "mcp";
         tool: string;
@@ -168,12 +170,12 @@ export declare const transcriptTimes: WeakMap<{
     } | {
         type: "subagent";
         action: "message" | "spawn" | "wait" | "stop" | "resume" | "list";
-        model?: string | undefined;
         task?: string | undefined;
         agentType?: string | undefined;
+        model?: string | undefined;
     } | {
-        name: string;
         type: "skill";
+        name: string;
         description?: string | undefined;
     } | {
         type: "web_search";
@@ -191,8 +193,6 @@ export declare const transcriptTimes: WeakMap<{
         text: string;
         more?: number | undefined;
     } | undefined;
-    status?: "pending" | "in_progress" | "completed" | "failed" | undefined;
-    title?: string | undefined;
     content?: ({
         type: "content";
         content: {
@@ -204,8 +204,8 @@ export declare const transcriptTimes: WeakMap<{
             data?: string | undefined;
             uri?: string | undefined;
         } | {
-            name: string;
             type: "resource_link";
+            name: string;
             uri: string;
             kind?: "agent" | "file" | "skill" | undefined;
         };
@@ -259,14 +259,14 @@ export declare const transcriptTimes: WeakMap<{
     parentToolCallId?: string | undefined;
 } | {
     options: {
-        name: string;
         values: {
-            name: string;
             value: string;
+            name: string;
             description?: string | undefined;
         }[];
         id: string;
-        category: "model" | "other" | "mode" | "effort";
+        name: string;
+        category: "mode" | "other" | "model" | "effort";
         current: string;
     }[];
     sessionUpdate: "ls_config";
@@ -283,15 +283,15 @@ export declare const transcriptTimes: WeakMap<{
     stopReason?: "error" | "end_turn" | "cancelled" | "max_tokens" | "refusal" | undefined;
 } | {
     options: {
+        optionId: string;
         name: string;
         kind: "allow_once" | "allow_always" | "reject_once" | "reject_always";
-        optionId: string;
     }[];
     title: string;
     requestId: string;
     sessionUpdate: "ls_permission";
-    detail?: string | undefined;
     toolCallId?: string | undefined;
+    detail?: string | undefined;
     questions?: {
         id: string;
         kind: "text" | "choice" | "choices";

package/dist/host/src/fs.d.ts

@@ -4,8 +4,8 @@ export declare function listDirectory(input: {
     files?: boolean;
 }): Promise<{
     entries: {
-        name: string;
         path: string;
+        name: string;
         file?: boolean | undefined;
         project?: boolean | undefined;
         size?: number | undefined;
@@ -15,8 +15,8 @@ export declare function listDirectory(input: {
     home: string;
 } | {
     entries: {
-        name: string;
         path: string;
+        name: string;
         file?: boolean | undefined;
         project?: boolean | undefined;
         size?: number | undefined;
@@ -35,8 +35,8 @@ export declare function searchDirectories(input: {
     limit: number;
 }, budgetMs?: number): Promise<{
     entries: {
-        name: string;
         path: string;
+        name: string;
         file?: boolean | undefined;
         project?: boolean | undefined;
         size?: number | undefined;

package/dist/host/src/input.d.ts

@@ -107,25 +107,92 @@ export interface HelperStatus {
     trusted: boolean;
     recording: boolean;
     app: string;
+    /** The app can send the screen as a video track (it carries the media engine). */
+    video: boolean;
 }
+/** A display as the app sees it. `screen` is its number in everything said to the app. */
+export interface AppDisplay {
+    screen: number;
+    name: string;
+    /** In pixels. */
+    w: number;
+    h: number;
+    main: boolean;
+}
+/** The picture asked of the app for a pipe that loses nothing: rates in bits a second. */
+export interface StreamProfile {
+    width: number;
+    fps: number;
+    bitrate: number;
+    ceiling: number;
+}
+/** A stream under way. */
+export interface AppStream {
+    /** Another profile, without stopping: a new size starts a new generation, at a keyframe. */
+    set(profile: StreamProfile): void;
+    /** The next frame a keyframe. */
+    key(): void;
+    end(): void;
+}
+/** How the app is to offer a screen as a video track. */
+export interface VideoOffer {
+    /** Which of the system's displays. */
+    screen: number;
+    iceServers: {
+        urls: string[];
+    }[];
+    /** Frames a second; the app's own choice when left out. */
+    fps?: number;
+}
+/** What a viewer answers the app's offer with, and the candidates it finds. */
+export type VideoSignal = {
+    t: "rtc.answer";
+    sdp: string;
+} | {
+    t: "rtc.ice";
+    candidate: string;
+    sdpMid: string | null;
+    sdpMLineIndex: number | null;
+};
+export declare const videoSignal: z.ZodDiscriminatedUnion<"t", [z.ZodObject<{
+    t: z.ZodLiteral<"rtc.answer">;
+    sdp: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    sdp: string;
+    t: "rtc.answer";
+}, {
+    sdp: string;
+    t: "rtc.answer";
+}>, z.ZodObject<{
+    t: z.ZodLiteral<"rtc.ice">;
+    candidate: z.ZodString;
+    sdpMid: z.ZodNullable<z.ZodString>;
+    sdpMLineIndex: z.ZodNullable<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    t: "rtc.ice";
+    candidate: string;
+    sdpMid: string | null;
+    sdpMLineIndex: number | null;
+}, {
+    t: "rtc.ice";
+    candidate: string;
+    sdpMid: string | null;
+    sdpMLineIndex: number | null;
+}>]>;
 /**
- * The app as it came in the package, made runnable. Packing a package drops
- * the program's permission to run (pnpm stores every file that isn't a `bin`
- * as a plain one): it is given back here, and where the installation can't be
- * written to (a root-owned one), a copy under the user's own directory is used.
- * Neither touches the signature.
+ * The app out of the archive it is shipped in, unpacked under the user's own
+ * directory. An archive, because a package can carry neither the links a
+ * framework is made of nor a program's permission to run; unpacked whole, the
+ * app is as it was signed. Always at the same place, so that an upgrade
+ * replaces the app instead of adding another: macOS has been seen to ask
+ * about recording again for the same app run from a new path. (A host still
+ * running the app being replaced keeps the one it has open.)
  */
-export declare function usableApp(packaged: string, copyTo?: string): string | undefined;
-/** The signed app this package was made with, if it was. */
+export declare function unpackedApp(archive: string, at?: string): string | undefined;
+/** LinkShell.app, where this installation has it: a Mac with Apple silicon, with `@linkshell/mac` installed beside the host. */
 export declare function shippedApp(): string | undefined;
-/** The helper compiled here; built on first use, once per version of its source. */
-export declare function inputHelper(log?: (message: string) => void): Promise<string>;
-/**
- * What this process itself (so: the host, and the capture it starts) is
- * allowed to do, and under which app's name. `ask` has the system put its
- * question for that permission, and opens the settings page for it.
- */
-export declare function hostAccess(log: (message: string) => void, ask?: "recording" | "control"): Promise<HelperStatus>;
+/** What to tell someone whose Mac has no LinkShell.app: it is an Intel Mac (the app is built for Apple silicon only), or the package that carries it wasn't installed. */
+export declare const NO_APP: string;
 type Route = (message: Record<string, unknown>) => void;
 declare class HelperApp {
     private readonly app;
@@ -138,6 +205,7 @@ declare class HelperApp {
     private readonly routes;
     private readonly watchers;
     private waiting;
+    private listing;
     constructor(app: string, dryRun: boolean, log: (message: string) => void);
     /** The app's end of the socket; opens the app when it isn't there. */
     private link;
@@ -146,17 +214,34 @@ declare class HelperApp {
     private write;
     /** What the app may do. It says so as it connects; asked again, it looks again. */
     access(): Promise<HelperStatus>;
-    /** The system's dialog and its settings page, for the app. */
-    ask(what?: "control" | "recording"): Promise<void>;
+    /** The displays there are to watch. */
+    displays(): Promise<AppDisplay[]>;
+    /**
+     * Has the app capture a screen and encode it for a pipe that loses nothing:
+     * the socket to a viewer it couldn't reach directly. Whole frames come to
+     * `on.frame`, each with the generation of picture size it belongs to.
+     */
+    stream(screen: number, profile: StreamProfile, on: {
+        frame(unit: Buffer, key: boolean, generation: number): void;
+        exit(error?: string): void;
+    }): Promise<AppStream>;
+    /**
+     * Opens LinkShell's own window for its permissions, on this computer: it says
+     * what each is for, has the system ask, takes the user to the switch, and
+     * ticks each off as it is turned on. Nothing appears when both are allowed
+     * already, and there is only ever one such window.
+     */
+    ask(): Promise<void>;
     /**
-     * Has the app run a screen capture: as the app's child, the recording is the
-     * app's to be allowed. The picture comes down a socket of its own; the
-     * returned function ends the capture.
+     * Has the app offer a screen to one viewer as a video track. What the app
+     * says of it (`rtc.offer`, `rtc.ice`, `rtc.state`, `rtc.error`, and `gone`
+     * when the app itself went) comes to `route`; the viewer's answer goes back
+     * with `signal`. The picture and the viewer's hands then travel between the
+     * two of them, not through here.
      */
-    capture(exec: string, args: string[], on: {
-        data(chunk: Buffer): void;
-        exit(code: number, errors: string): void;
-    }): Promise<() => void>;
+    offerVideo(id: string, offer: VideoOffer, route: Route): Promise<void>;
+    signal(id: string, signal: VideoSignal): void;
+    endVideo(id: string): void;
     join(id: string, screen: number, route: Route, watcher: (status: HelperStatus) => void): Promise<void>;
     send(id: string, event: InputEvent): void;
     leave(id: string, watcher: (status: HelperStatus) => void): void;
@@ -171,19 +256,19 @@ export type { HelperApp };
 export declare class InputControl {
     private readonly listener;
     private readonly log;
-    /** `app: false` keeps to a child process even when the package has the app (tests). */
+    /** `app: false` runs the app's program as this process's child instead of having the system open it (tests). */
     private readonly options;
     private child?;
     private joined?;
     private stopped;
     private started;
     constructor(listener: InputListener, log: (message: string) => void, 
-    /** `app: false` keeps to a child process even when the package has the app (tests). */
+    /** `app: false` runs the app's program as this process's child instead of having the system open it (tests). */
     options?: {
         dryRun?: boolean;
         app?: boolean;
     });
-    /** Starts the helper for the display ffmpeg calls "Capture screen `screen`". Reports through the listener; never throws. */
+    /** Starts control of the display the app numbers `screen`. Reports through the listener; never throws. */
     start(screen: number): Promise<void>;
     private joinApp;
     private spawn;