loopsy 1.0.0

package/dist/daemon/services/context-store.js

@@ -0,0 +1,97 @@
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { CONFIG_DIR, MAX_CONTEXT_ENTRIES, MAX_CONTEXT_VALUE_SIZE } from '@loopsy/protocol';
+import { LoopsyError, LoopsyErrorCode } from '@loopsy/protocol';
+export class ContextStore {
+    entries = new Map();
+    expiryTimer = null;
+    contextFile;
+    constructor(dataDir) {
+        const dir = dataDir ?? join(homedir(), CONFIG_DIR);
+        this.contextFile = join(dir, 'context.json');
+    }
+    async load() {
+        try {
+            const data = await readFile(this.contextFile, 'utf-8');
+            const items = JSON.parse(data);
+            for (const entry of items) {
+                if (!entry.expiresAt || entry.expiresAt > Date.now()) {
+                    this.entries.set(entry.key, entry);
+                }
+            }
+        }
+        catch {
+            // No context file yet
+        }
+    }
+    async save() {
+        const dir = join(this.contextFile, '..');
+        await mkdir(dir, { recursive: true });
+        await writeFile(this.contextFile, JSON.stringify(Array.from(this.entries.values()), null, 2));
+    }
+    startExpiryCheck() {
+        this.expiryTimer = setInterval(() => {
+            const now = Date.now();
+            for (const [key, entry] of this.entries) {
+                if (entry.expiresAt && entry.expiresAt <= now) {
+                    this.entries.delete(key);
+                }
+            }
+        }, 10_000);
+    }
+    stopExpiryCheck() {
+        if (this.expiryTimer) {
+            clearInterval(this.expiryTimer);
+            this.expiryTimer = null;
+        }
+    }
+    set(key, value, fromNodeId, ttl) {
+        if (value.length > MAX_CONTEXT_VALUE_SIZE) {
+            throw new LoopsyError(LoopsyErrorCode.CONTEXT_VALUE_TOO_LARGE, `Value exceeds max size of ${MAX_CONTEXT_VALUE_SIZE} bytes`);
+        }
+        if (this.entries.size >= MAX_CONTEXT_ENTRIES && !this.entries.has(key)) {
+            throw new LoopsyError(LoopsyErrorCode.CONTEXT_MAX_ENTRIES, `Max context entries (${MAX_CONTEXT_ENTRIES}) reached`);
+        }
+        const now = Date.now();
+        const entry = {
+            key,
+            value,
+            fromNodeId,
+            createdAt: this.entries.get(key)?.createdAt ?? now,
+            updatedAt: now,
+            ttl,
+            expiresAt: ttl ? now + ttl * 1000 : undefined,
+        };
+        this.entries.set(key, entry);
+        return entry;
+    }
+    get(key) {
+        const entry = this.entries.get(key);
+        if (entry?.expiresAt && entry.expiresAt <= Date.now()) {
+            this.entries.delete(key);
+            return undefined;
+        }
+        return entry;
+    }
+    delete(key) {
+        return this.entries.delete(key);
+    }
+    list(prefix) {
+        const now = Date.now();
+        const result = [];
+        for (const [key, entry] of this.entries) {
+            if (entry.expiresAt && entry.expiresAt <= now) {
+                this.entries.delete(key);
+            }
+            else if (!prefix || key.startsWith(prefix)) {
+                result.push(entry);
+            }
+        }
+        return result;
+    }
+    get size() {
+        return this.entries.size;
+    }
+}
+//# sourceMappingURL=context-store.js.map

package/dist/daemon/services/context-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-store.js","sourceRoot":"","sources":["../../src/services/context-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEhE,MAAM,OAAO,YAAY;IACf,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC1C,WAAW,GAA0C,IAAI,CAAC;IAC1D,WAAW,CAAS;IAE5B,YAAY,OAAgB;QAC1B,MAAM,GAAG,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,KAAK,GAAmB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,gBAAgB;QACd,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;oBAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC;IACb,CAAC;IAED,eAAe;QACb,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,UAAkB,EAAE,GAAY;QAC9D,IAAI,KAAK,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;YAC1C,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,uBAAuB,EAAE,6BAA6B,sBAAsB,QAAQ,CAAC,CAAC;QAC9H,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,mBAAmB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,mBAAmB,EAAE,wBAAwB,mBAAmB,WAAW,CAAC,CAAC;QACrH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAiB;YAC1B,GAAG;YACH,KAAK;YACL,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,SAAS,IAAI,GAAG;YAClD,SAAS,EAAE,GAAG;YACd,GAAG;YACH,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,GAAG,CAAC,GAAW;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,EAAE,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,MAAe;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAmB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;gBAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;iBAAM,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF"}

package/dist/daemon/services/job-manager.d.ts

@@ -0,0 +1,19 @@
+import type { ExecuteParams, ExecuteResult, JobInfo } from '@loopsy/protocol';
+export declare class JobManager {
+    private jobs;
+    private maxConcurrent;
+    private denylist;
+    private allowlist?;
+    constructor(opts: {
+        maxConcurrent?: number;
+        denylist?: string[];
+        allowlist?: string[];
+    });
+    execute(params: ExecuteParams, fromNodeId: string): Promise<ExecuteResult>;
+    cancel(jobId: string): boolean;
+    getActiveJobs(): JobInfo[];
+    killAll(): void;
+    get activeCount(): number;
+    private validateCommand;
+}
+//# sourceMappingURL=job-manager.d.ts.map

package/dist/daemon/services/job-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-manager.d.ts","sourceRoot":"","sources":["../../src/services/job-manager.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAG9E,qBAAa,UAAU;IACrB,OAAO,CAAC,IAAI,CAA+D;IAC3E,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,SAAS,CAAC,CAAW;gBAEjB,IAAI,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE;IAMjF,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAsDhF,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAY9B,aAAa,IAAI,OAAO,EAAE;IAI1B,OAAO,IAAI,IAAI;IAOf,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,OAAO,CAAC,eAAe;CASxB"}

package/dist/daemon/services/job-manager.js

@@ -0,0 +1,92 @@
+import { spawn } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { LoopsyError, LoopsyErrorCode, MAX_CONCURRENT_JOBS } from '@loopsy/protocol';
+export class JobManager {
+    jobs = new Map();
+    maxConcurrent;
+    denylist;
+    allowlist;
+    constructor(opts) {
+        this.maxConcurrent = opts.maxConcurrent ?? MAX_CONCURRENT_JOBS;
+        this.denylist = opts.denylist ?? [];
+        this.allowlist = opts.allowlist;
+    }
+    async execute(params, fromNodeId) {
+        this.validateCommand(params.command);
+        if (this.jobs.size >= this.maxConcurrent) {
+            throw new LoopsyError(LoopsyErrorCode.EXEC_MAX_CONCURRENT, `Max concurrent jobs (${this.maxConcurrent}) reached`);
+        }
+        const jobId = randomUUID();
+        const startedAt = Date.now();
+        return new Promise((resolve, reject) => {
+            const proc = spawn(params.command, params.args ?? [], {
+                cwd: params.cwd,
+                env: params.env ? { ...process.env, ...params.env } : process.env,
+                shell: false,
+                timeout: params.timeout,
+            });
+            const info = {
+                jobId,
+                command: params.command,
+                args: params.args ?? [],
+                startedAt,
+                fromNodeId,
+                pid: proc.pid,
+            };
+            this.jobs.set(jobId, { process: proc, info });
+            let stdout = '';
+            let stderr = '';
+            proc.stdout?.on('data', (chunk) => { stdout += chunk.toString(); });
+            proc.stderr?.on('data', (chunk) => { stderr += chunk.toString(); });
+            proc.on('close', (exitCode, signal) => {
+                this.jobs.delete(jobId);
+                resolve({
+                    jobId,
+                    exitCode,
+                    stdout,
+                    stderr,
+                    duration: Date.now() - startedAt,
+                    killed: signal !== null,
+                });
+            });
+            proc.on('error', (err) => {
+                this.jobs.delete(jobId);
+                reject(new LoopsyError(LoopsyErrorCode.EXEC_FAILED, `Execution failed: ${err.message}`));
+            });
+        });
+    }
+    cancel(jobId) {
+        const job = this.jobs.get(jobId);
+        if (!job)
+            return false;
+        job.process.kill('SIGTERM');
+        setTimeout(() => {
+            if (this.jobs.has(jobId)) {
+                job.process.kill('SIGKILL');
+            }
+        }, 5000);
+        return true;
+    }
+    getActiveJobs() {
+        return Array.from(this.jobs.values()).map((j) => j.info);
+    }
+    killAll() {
+        for (const [id, job] of this.jobs) {
+            job.process.kill('SIGKILL');
+            this.jobs.delete(id);
+        }
+    }
+    get activeCount() {
+        return this.jobs.size;
+    }
+    validateCommand(command) {
+        const base = command.split('/').pop() ?? command;
+        if (this.denylist.includes(base)) {
+            throw new LoopsyError(LoopsyErrorCode.EXEC_COMMAND_DENIED, `Command '${base}' is denied`);
+        }
+        if (this.allowlist && !this.allowlist.includes(base)) {
+            throw new LoopsyError(LoopsyErrorCode.EXEC_COMMAND_DENIED, `Command '${base}' is not in the allowlist`);
+        }
+    }
+}
+//# sourceMappingURL=job-manager.js.map

package/dist/daemon/services/job-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-manager.js","sourceRoot":"","sources":["../../src/services/job-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAErF,MAAM,OAAO,UAAU;IACb,IAAI,GAAG,IAAI,GAAG,EAAoD,CAAC;IACnE,aAAa,CAAS;IACtB,QAAQ,CAAW;IACnB,SAAS,CAAY;IAE7B,YAAY,IAA2E;QACrF,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,mBAAmB,CAAC;QAC/D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAqB,EAAE,UAAkB;QACrD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAErC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACzC,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,mBAAmB,EAAE,wBAAwB,IAAI,CAAC,aAAa,WAAW,CAAC,CAAC;QACpH,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE;gBACpD,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;gBACjE,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YAEH,MAAM,IAAI,GAAY;gBACpB,KAAK;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;gBACvB,SAAS;gBACT,UAAU;gBACV,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC;YAEF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAE9C,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAE5E,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxB,OAAO,CAAC;oBACN,KAAK;oBACL,QAAQ;oBACR,MAAM;oBACN,MAAM;oBACN,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAChC,MAAM,EAAE,MAAM,KAAK,IAAI;iBACxB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,WAAW,CAAC,eAAe,CAAC,WAAW,EAAE,qBAAqB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3F,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5B,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa;QACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAClC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;IAEO,eAAe,CAAC,OAAe;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC;QACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,mBAAmB,EAAE,YAAY,IAAI,aAAa,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,WAAW,CAAC,eAAe,CAAC,mBAAmB,EAAE,YAAY,IAAI,2BAA2B,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;CACF"}

package/dist/daemon/services/tls-manager.d.ts

@@ -0,0 +1,33 @@
+import type { PeerCertInfo } from '@loopsy/protocol';
+export interface TlsFiles {
+    cert: string;
+    key: string;
+    fingerprint: string;
+}
+export declare class TlsManager {
+    private dataDir;
+    private tlsDir;
+    private certPath;
+    private keyPath;
+    constructor(dataDir?: string);
+    /** Check if TLS cert/key already exist */
+    hasCerts(): boolean;
+    /** Generate a self-signed EC certificate if none exists */
+    ensureCerts(hostname: string): Promise<TlsFiles>;
+    /** Generate a new self-signed certificate */
+    generateCerts(hostname: string): Promise<TlsFiles>;
+    /** Load existing cert/key files */
+    loadCerts(): Promise<TlsFiles>;
+    /** Compute SHA-256 fingerprint of a PEM certificate */
+    computeFingerprint(certPem: string): string;
+    /** Get cert info for display */
+    getCertInfo(certPem: string): PeerCertInfo;
+    /** Get Fastify HTTPS options */
+    getHttpsOptions(): Promise<{
+        key: string;
+        cert: string;
+    } | null>;
+    /** Create a self-signed certificate using openssl CLI (widely available) */
+    private createSelfSignedCert;
+}
+//# sourceMappingURL=tls-manager.d.ts.map

package/dist/daemon/services/tls-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls-manager.d.ts","sourceRoot":"","sources":["../../src/services/tls-manager.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAa,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAMhE,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,CAAC,EAAE,MAAM;IAO5B,0CAA0C;IAC1C,QAAQ,IAAI,OAAO;IAInB,2DAA2D;IACrD,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAOtD,6CAA6C;IACvC,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IA4BxD,mCAAmC;IAC7B,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC;IAOpC,uDAAuD;IACvD,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAU3C,gCAAgC;IAChC,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY;IAU1C,gCAAgC;IAC1B,eAAe,IAAI,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAMtE,4EAA4E;YAC9D,oBAAoB;CAyBnC"}

package/dist/daemon/services/tls-manager.js

@@ -0,0 +1,114 @@
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { createHash, generateKeyPairSync, X509Certificate } from 'node:crypto';
+import { homedir } from 'node:os';
+import { CONFIG_DIR, TLS_DIR, TLS_CERT_FILE, TLS_KEY_FILE } from '@loopsy/protocol';
+export class TlsManager {
+    dataDir;
+    tlsDir;
+    certPath;
+    keyPath;
+    constructor(dataDir) {
+        this.dataDir = dataDir ?? join(homedir(), CONFIG_DIR);
+        this.tlsDir = join(this.dataDir, TLS_DIR);
+        this.certPath = join(this.tlsDir, TLS_CERT_FILE);
+        this.keyPath = join(this.tlsDir, TLS_KEY_FILE);
+    }
+    /** Check if TLS cert/key already exist */
+    hasCerts() {
+        return existsSync(this.certPath) && existsSync(this.keyPath);
+    }
+    /** Generate a self-signed EC certificate if none exists */
+    async ensureCerts(hostname) {
+        if (this.hasCerts()) {
+            return this.loadCerts();
+        }
+        return this.generateCerts(hostname);
+    }
+    /** Generate a new self-signed certificate */
+    async generateCerts(hostname) {
+        await mkdir(this.tlsDir, { recursive: true });
+        // Generate EC keypair (P-256)
+        const { publicKey, privateKey } = generateKeyPairSync('ec', {
+            namedCurve: 'prime256v1',
+            publicKeyEncoding: { type: 'spki', format: 'pem' },
+            privateKeyEncoding: { type: 'pkcs8', format: 'pem' },
+        });
+        // Use Node's built-in X509 cert generation (available since Node 20)
+        // We'll use a child process with openssl as a fallback-free approach:
+        // Actually, Node doesn't have cert generation built-in. We'll generate
+        // a self-signed cert using the `selfsigned` approach via raw crypto.
+        //
+        // For simplicity, we'll shell out to openssl or use the node:crypto
+        // createSelfSignedCert if available. Since Node 22+ doesn't have this,
+        // we'll create a minimal self-signed cert with raw ASN.1.
+        const cert = await this.createSelfSignedCert(hostname, publicKey, privateKey);
+        await writeFile(this.keyPath, privateKey, { mode: 0o600 });
+        await writeFile(this.certPath, cert);
+        const fingerprint = this.computeFingerprint(cert);
+        return { cert, key: privateKey, fingerprint };
+    }
+    /** Load existing cert/key files */
+    async loadCerts() {
+        const cert = await readFile(this.certPath, 'utf-8');
+        const key = await readFile(this.keyPath, 'utf-8');
+        const fingerprint = this.computeFingerprint(cert);
+        return { cert, key, fingerprint };
+    }
+    /** Compute SHA-256 fingerprint of a PEM certificate */
+    computeFingerprint(certPem) {
+        // Extract DER from PEM
+        const b64 = certPem
+            .replace(/-----BEGIN CERTIFICATE-----/g, '')
+            .replace(/-----END CERTIFICATE-----/g, '')
+            .replace(/\s/g, '');
+        const der = Buffer.from(b64, 'base64');
+        return createHash('sha256').update(der).digest('hex');
+    }
+    /** Get cert info for display */
+    getCertInfo(certPem) {
+        const x509 = new X509Certificate(certPem);
+        return {
+            fingerprint: this.computeFingerprint(certPem),
+            hostname: x509.subject.split('CN=')[1]?.split('\n')[0] || 'unknown',
+            validFrom: x509.validFrom,
+            validTo: x509.validTo,
+        };
+    }
+    /** Get Fastify HTTPS options */
+    async getHttpsOptions() {
+        if (!this.hasCerts())
+            return null;
+        const { cert, key } = await this.loadCerts();
+        return { key, cert };
+    }
+    /** Create a self-signed certificate using openssl CLI (widely available) */
+    async createSelfSignedCert(hostname, _publicKey, privateKey) {
+        // Use Node's child_process to call openssl for cert generation
+        // This is the most portable approach that avoids native dependencies
+        const { execSync } = await import('node:child_process');
+        const { writeFileSync, readFileSync, unlinkSync } = await import('node:fs');
+        const { tmpdir } = await import('node:os');
+        const tmpKey = join(tmpdir(), `loopsy-key-${Date.now()}.pem`);
+        const tmpCert = join(tmpdir(), `loopsy-cert-${Date.now()}.pem`);
+        try {
+            writeFileSync(tmpKey, privateKey, { mode: 0o600 });
+            execSync(`openssl req -new -x509 -key "${tmpKey}" -out "${tmpCert}" ` +
+                `-days 3650 -subj "/CN=${hostname}/O=Loopsy" ` +
+                `-addext "subjectAltName=DNS:${hostname},DNS:localhost,IP:127.0.0.1"`, { stdio: 'pipe' });
+            return readFileSync(tmpCert, 'utf-8');
+        }
+        finally {
+            try {
+                unlinkSync(tmpKey);
+            }
+            catch { }
+            try {
+                unlinkSync(tmpCert);
+            }
+            catch { }
+        }
+    }
+}
+//# sourceMappingURL=tls-manager.js.map

package/dist/daemon/services/tls-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tls-manager.js","sourceRoot":"","sources":["../../src/services/tls-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAapF,MAAM,OAAO,UAAU;IACb,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,QAAQ,CAAS;IACjB,OAAO,CAAS;IAExB,YAAY,OAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,CAAC;IAED,0CAA0C;IAC1C,QAAQ;QACN,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,WAAW,CAAC,QAAgB;QAChC,IAAI,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9C,8BAA8B;QAC9B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE;YAC1D,UAAU,EAAE,YAAY;YACxB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;YAClD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;SACrD,CAAC,CAAC;QAEH,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,qEAAqE;QACrE,EAAE;QACF,oEAAoE;QACpE,uEAAuE;QACvE,0DAA0D;QAE1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAE9E,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAErC,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;IAChD,CAAC;IAED,mCAAmC;IACnC,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;IACpC,CAAC;IAED,uDAAuD;IACvD,kBAAkB,CAAC,OAAe;QAChC,uBAAuB;QACvB,MAAM,GAAG,GAAG,OAAO;aAChB,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC;aAC3C,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC;aACzC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,gCAAgC;IAChC,WAAW,CAAC,OAAe;QACzB,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YAC7C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS;YACnE,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAC7C,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,4EAA4E;IACpE,KAAK,CAAC,oBAAoB,CAAC,QAAgB,EAAE,UAAkB,EAAE,UAAkB;QACzF,+DAA+D;QAC/D,qEAAqE;QACrE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEhE,IAAI,CAAC;YACH,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAEnD,QAAQ,CACN,gCAAgC,MAAM,WAAW,OAAO,IAAI;gBAC5D,yBAAyB,QAAQ,aAAa;gBAC9C,+BAA+B,QAAQ,8BAA8B,EACrE,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;YAEF,OAAO,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACpC,IAAI,CAAC;gBAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACvC,CAAC;IACH,CAAC;CACF"}

package/dist/daemon/utils/which.d.ts

@@ -0,0 +1,2 @@
+export declare function which(command: string): Promise<string | null>;
+//# sourceMappingURL=which.d.ts.map

package/dist/daemon/utils/which.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"which.d.ts","sourceRoot":"","sources":["../../src/utils/which.ts"],"names":[],"mappings":"AAGA,wBAAsB,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAcnE"}

package/dist/daemon/utils/which.js

@@ -0,0 +1,18 @@
+import { access, constants } from 'node:fs/promises';
+import { join } from 'node:path';
+export async function which(command) {
+    const paths = (process.env.PATH || '').split(process.platform === 'win32' ? ';' : ':');
+    const extensions = process.platform === 'win32' ? ['.cmd', '.exe', '.bat', ''] : [''];
+    for (const dir of paths) {
+        for (const ext of extensions) {
+            const full = join(dir, command + ext);
+            try {
+                await access(full, constants.X_OK);
+                return full;
+            }
+            catch { }
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=which.js.map

package/dist/daemon/utils/which.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"which.js","sourceRoot":"","sources":["../../src/utils/which.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAe;IACzC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACvF,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEtF,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;gBACnC,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/dashboard/config.d.ts

@@ -0,0 +1,8 @@
+export interface DashboardConfig {
+    apiKey: string;
+    mainPort: number;
+    allowedKeys: Record<string, string>;
+    hostname?: string;
+}
+export declare function loadDashboardConfig(): Promise<DashboardConfig>;
+//# sourceMappingURL=config.d.ts.map

package/dist/dashboard/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,eAAe,CAAC,CAcpE"}

package/dist/dashboard/config.js

@@ -0,0 +1,22 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { parse as parseYaml } from 'yaml';
+import { CONFIG_DIR, CONFIG_FILE, DEFAULT_PORT } from '@loopsy/protocol';
+export async function loadDashboardConfig() {
+    const configPath = join(homedir(), CONFIG_DIR, CONFIG_FILE);
+    try {
+        const raw = await readFile(configPath, 'utf-8');
+        const parsed = parseYaml(raw);
+        return {
+            apiKey: parsed?.auth?.apiKey ?? '',
+            mainPort: parsed?.server?.port ?? DEFAULT_PORT,
+            allowedKeys: parsed?.auth?.allowedKeys ?? {},
+            hostname: parsed?.server?.hostname,
+        };
+    }
+    catch {
+        return { apiKey: '', mainPort: DEFAULT_PORT, allowedKeys: {} };
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/dashboard/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AASzE,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAQ,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE;YAClC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,YAAY;YAC9C,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE;YAC5C,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ;SACnC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/dashboard/public/app.js

@@ -0,0 +1,120 @@
+// ═══════════════════════════════════════════
+// LOOPSY // DASHBOARD — App Router
+// ═══════════════════════════════════════════
+
+// --- API Helpers ---
+
+export async function api(port, path, opts = {}) {
+  const headers = opts.body ? { 'Content-Type': 'application/json' } : {};
+  const res = await fetch(`/dashboard/api/proxy/${port}/api/v1${path}`, {
+    headers,
+    ...opts,
+  });
+  if (!res.ok) {
+    const body = await res.json().catch(() => ({}));
+    throw new Error(body.error || `HTTP ${res.status}`);
+  }
+  return res.json();
+}
+
+export async function dashboardApi(path, opts = {}) {
+  const headers = opts.body ? { 'Content-Type': 'application/json' } : {};
+  const res = await fetch(`/dashboard/api${path}`, {
+    headers,
+    ...opts,
+  });
+  if (!res.ok) {
+    const body = await res.json().catch(() => ({}));
+    throw new Error(body.error || `HTTP ${res.status}`);
+  }
+  return res.json();
+}
+
+export function formatUptime(ms) {
+  if (!ms || ms < 0) return '—';
+  const s = Math.floor(ms / 1000);
+  const m = Math.floor(s / 60);
+  const h = Math.floor(m / 60);
+  const d = Math.floor(h / 24);
+  if (d > 0) return `${d}d ${h % 24}h`;
+  if (h > 0) return `${h}h ${m % 60}m`;
+  if (m > 0) return `${m}m ${s % 60}s`;
+  return `${s}s`;
+}
+
+export function formatTime(ts) {
+  if (!ts) return '—';
+  return new Date(ts).toLocaleTimeString();
+}
+
+export function escapeHtml(str) {
+  const div = document.createElement('div');
+  div.textContent = str;
+  return div.innerHTML;
+}
+
+// --- View Registry ---
+
+const views = {};
+let currentView = null;
+let currentViewName = null;
+
+export function registerView(name, view) {
+  views[name] = view;
+}
+
+function navigate(viewName) {
+  if (currentView && currentView.unmount) currentView.unmount();
+
+  // Update nav
+  document.querySelectorAll('.nav-item, .mobile-nav-item').forEach(el => {
+    el.classList.toggle('active', el.dataset.view === viewName);
+  });
+
+  const main = document.getElementById('main');
+  main.innerHTML = '';
+  currentView = views[viewName];
+  currentViewName = viewName;
+
+  if (currentView && currentView.mount) {
+    currentView.mount(main);
+  }
+
+  history.replaceState(null, '', `#${viewName}`);
+}
+
+// --- Clock ---
+
+function updateClock() {
+  const el = document.getElementById('header-time');
+  if (el) el.textContent = new Date().toLocaleTimeString();
+}
+
+// --- Init ---
+
+async function init() {
+  // Load view modules
+  await Promise.all([
+    import('/views/overview.js'),
+    import('/views/terminal.js'),
+    import('/views/context.js'),
+    import('/views/messages.js'),
+    import('/views/peers.js'),
+    import('/views/ai-tasks.js'),
+  ]);
+
+  // Nav click handlers
+  document.querySelectorAll('.nav-item, .mobile-nav-item').forEach(el => {
+    el.addEventListener('click', () => navigate(el.dataset.view));
+  });
+
+  // Clock
+  updateClock();
+  setInterval(updateClock, 1000);
+
+  // Navigate to hash or default
+  const hash = location.hash.replace('#', '') || 'overview';
+  navigate(hash);
+}
+
+init();