machine-bridge-mcp 2.0.0 → 3.0.0-beta.102

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (473) hide show
  1. package/CHANGELOG.md +1142 -0
  2. package/CONTRIBUTING.md +23 -25
  3. package/GOVERNANCE.md +2 -2
  4. package/README.md +58 -20
  5. package/SECURITY.md +161 -120
  6. package/SUPPORT.md +1 -1
  7. package/browser-extension/broker-auth.js +83 -0
  8. package/browser-extension/broker-liveness.js +35 -0
  9. package/browser-extension/browser-error-boundary.js +96 -0
  10. package/browser-extension/browser-operations.js +1456 -101
  11. package/browser-extension/devtools-input.js +195 -34
  12. package/browser-extension/devtools-observation.js +429 -0
  13. package/browser-extension/devtools-session.js +48 -0
  14. package/browser-extension/manifest.json +4 -3
  15. package/browser-extension/page-automation.js +578 -118
  16. package/browser-extension/pairing-bootstrap.js +42 -0
  17. package/browser-extension/pairing.js +28 -12
  18. package/browser-extension/service-worker.js +126 -106
  19. package/docs/AGENT_CONTEXT.md +13 -10
  20. package/docs/ARCHITECTURE.md +159 -67
  21. package/docs/AUDIT.md +1302 -4
  22. package/docs/CLIENTS.md +19 -6
  23. package/docs/COMPUTER_USE.md +297 -0
  24. package/docs/ENGINEERING.md +72 -13
  25. package/docs/GETTING_STARTED.md +18 -20
  26. package/docs/LOCAL_AUTHORIZATION.md +115 -72
  27. package/docs/LOCAL_AUTOMATION.md +27 -21
  28. package/docs/LOGGING.md +40 -19
  29. package/docs/MANAGED_JOBS.md +37 -34
  30. package/docs/MULTI_ACCOUNT.md +98 -37
  31. package/docs/OPERATIONS.md +145 -51
  32. package/docs/OVERVIEW.md +14 -11
  33. package/docs/POLICY_REFERENCE.md +71 -3
  34. package/docs/PRIVACY.md +41 -2
  35. package/docs/PROJECT_STANDARDS.md +29 -6
  36. package/docs/RELEASING.md +238 -64
  37. package/docs/TESTING.md +150 -39
  38. package/docs/THREAT_MODEL.md +164 -67
  39. package/docs/TOOL_REFERENCE.md +653 -60
  40. package/docs/UPGRADING.md +78 -18
  41. package/native/macos/MachineBridgeBackgroundInput.swift +1051 -0
  42. package/native/macos/MachineBridgeBackgroundInputSmokeFixture.swift +295 -0
  43. package/native/macos/MachineBridgeTrustBroker.swift +233 -0
  44. package/package.json +94 -16
  45. package/scripts/accepted-candidate-tarball.mjs +77 -0
  46. package/scripts/candidate-runtime-store.mjs +93 -0
  47. package/scripts/check-plan.mjs +73 -3
  48. package/scripts/check-runner.mjs +129 -17
  49. package/scripts/commit-message-check.mjs +5 -2
  50. package/scripts/consumer-package-security.mjs +293 -0
  51. package/scripts/coverage-check.mjs +251 -15
  52. package/scripts/coverage-generation.mjs +41 -0
  53. package/scripts/coverage-range-merge.mjs +41 -0
  54. package/scripts/foreground-daemon-recovery.mjs +88 -0
  55. package/scripts/generate-policy-reference.mjs +28 -5
  56. package/scripts/generate-tool-reference.mjs +1 -1
  57. package/scripts/generate-worker-types.mjs +21 -11
  58. package/scripts/github-backlog.mjs +11 -10
  59. package/scripts/github-push.mjs +62 -16
  60. package/scripts/github-release-asset.mjs +58 -0
  61. package/scripts/github-release.mjs +241 -132
  62. package/scripts/global-package-installation.mjs +68 -0
  63. package/scripts/hardened-npm-session.mjs +42 -0
  64. package/scripts/install-published-prerelease.mjs +198 -0
  65. package/scripts/local-release-acceptance.mjs +103 -45
  66. package/scripts/macos-background-input-smoke.mjs +515 -0
  67. package/scripts/network-retry.mjs +8 -1
  68. package/scripts/npm-global-prefix.mjs +27 -0
  69. package/scripts/npm-publication-policy.mjs +17 -0
  70. package/scripts/official-mcp-conformance.mjs +267 -0
  71. package/scripts/persistent-activation-process.mjs +101 -0
  72. package/scripts/prepare-pinned-npm.mjs +12 -69
  73. package/scripts/prerelease-activation.mjs +160 -0
  74. package/scripts/privacy-check.mjs +14 -6
  75. package/scripts/promotion-digest.mjs +128 -0
  76. package/scripts/publish-npm.mjs +260 -0
  77. package/scripts/published-release.mjs +132 -0
  78. package/scripts/release-acceptance.mjs +62 -54
  79. package/scripts/release-browser-extension-store.mjs +172 -0
  80. package/scripts/release-candidate-manifest.mjs +52 -0
  81. package/scripts/release-channel.mjs +106 -0
  82. package/scripts/release-diagnostic.mjs +41 -0
  83. package/scripts/release-impact-check.mjs +12 -22
  84. package/scripts/release-oauth-canary-core.mjs +325 -0
  85. package/scripts/release-oauth-canary-evidence.mjs +100 -0
  86. package/scripts/release-oauth-canary.mjs +127 -0
  87. package/scripts/release-publication-guard.mjs +67 -0
  88. package/scripts/release-soak.mjs +284 -0
  89. package/scripts/release-state.mjs +1 -1
  90. package/scripts/run-checks.mjs +44 -7
  91. package/scripts/run-worker-dry-run.mjs +21 -0
  92. package/scripts/sarif-security-gate.mjs +2 -1
  93. package/scripts/sbom-check.mjs +106 -0
  94. package/scripts/start-release-candidate.mjs +267 -44
  95. package/scripts/syntax-check.mjs +36 -14
  96. package/scripts/verification-generation-guard.mjs +15 -0
  97. package/scripts/verification-idle-sleep-guard.mjs +37 -0
  98. package/scripts/verification-state.mjs +108 -0
  99. package/scripts/wrangler-command-lifecycle.mjs +115 -0
  100. package/src/local/account-access.mjs +13 -1
  101. package/src/local/account-admin-response.mjs +92 -0
  102. package/src/local/account-admin.mjs +52 -19
  103. package/src/local/agent-context-projection.mjs +26 -7
  104. package/src/local/agent-context.mjs +88 -49
  105. package/src/local/agent-skill-discovery.mjs +16 -5
  106. package/src/local/app-automation-macos-jxa.mjs +350 -0
  107. package/src/local/app-automation.mjs +873 -163
  108. package/src/local/application-capability-projection.mjs +24 -0
  109. package/src/local/authority-context.mjs +106 -0
  110. package/src/local/autostart-log-maintenance.mjs +36 -0
  111. package/src/local/browser-bridge-http.mjs +5 -3
  112. package/src/local/browser-bridge.mjs +109 -31
  113. package/src/local/browser-broker-auth-http.mjs +67 -0
  114. package/src/local/browser-broker-auth.mjs +98 -0
  115. package/src/local/browser-broker-routes.mjs +63 -20
  116. package/src/local/browser-broker-server.mjs +17 -7
  117. package/src/local/browser-command.mjs +79 -30
  118. package/src/local/browser-computer-observation-service.mjs +266 -0
  119. package/src/local/browser-extension-identity.mjs +50 -0
  120. package/src/local/browser-extension-path.mjs +22 -0
  121. package/src/local/browser-extension-protocol.mjs +50 -11
  122. package/src/local/browser-operation-service.mjs +147 -117
  123. package/src/local/browser-pairing-grant.mjs +109 -0
  124. package/src/local/browser-pairing-http.mjs +36 -0
  125. package/src/local/browser-pairing-launch.mjs +58 -0
  126. package/src/local/browser-pairing-store.mjs +85 -48
  127. package/src/local/browser-request-registry.mjs +40 -14
  128. package/src/local/browser-request-settlement.mjs +78 -0
  129. package/src/local/browser-resource-input.mjs +74 -0
  130. package/src/local/browser-trusted-input-health.mjs +63 -0
  131. package/src/local/call-authority.mjs +21 -0
  132. package/src/local/call-capacity.mjs +45 -0
  133. package/src/local/call-registry-drain.mjs +54 -0
  134. package/src/local/call-registry.mjs +30 -15
  135. package/src/local/capability-observer.mjs +5 -0
  136. package/src/local/capability-ranking.mjs +3 -2
  137. package/src/local/child-process-settlement.mjs +132 -0
  138. package/src/local/cli-account-admin.mjs +40 -6
  139. package/src/local/cli-activate.mjs +162 -0
  140. package/src/local/cli-local-admin.mjs +20 -45
  141. package/src/local/cli-options.mjs +12 -13
  142. package/src/local/cli-ready-output.mjs +52 -0
  143. package/src/local/cli-service.mjs +91 -11
  144. package/src/local/cli.mjs +232 -150
  145. package/src/local/computer-use-application-observation.mjs +224 -0
  146. package/src/local/computer-use-arguments.mjs +270 -0
  147. package/src/local/computer-use-deadline.mjs +50 -0
  148. package/src/local/computer-use-dispatch-settlement.mjs +40 -0
  149. package/src/local/computer-use-expectation.mjs +171 -0
  150. package/src/local/computer-use-observation.mjs +769 -0
  151. package/src/local/computer-use-recovery.mjs +82 -0
  152. package/src/local/computer-use-result-budget.mjs +145 -0
  153. package/src/local/computer-use-snapshot-store.mjs +67 -0
  154. package/src/local/computer-use.mjs +2255 -0
  155. package/src/local/daemon-http-relay-auth.mjs +26 -0
  156. package/src/local/daemon-http-relay-connection.mjs +298 -0
  157. package/src/local/daemon-http-relay-request.mjs +64 -0
  158. package/src/local/daemon-http-relay-sequence.mjs +49 -0
  159. package/src/local/daemon-process.mjs +40 -7
  160. package/src/local/delegated-process-sandbox.mjs +148 -0
  161. package/src/local/device-identity.mjs +156 -49
  162. package/src/local/device-root-provider.mjs +81 -0
  163. package/src/local/directory-metadata.mjs +47 -0
  164. package/src/local/doctor-reporting.mjs +23 -0
  165. package/src/local/durable-process-spec.mjs +80 -0
  166. package/src/local/errors.mjs +25 -15
  167. package/src/local/exclusive-file.mjs +74 -26
  168. package/src/local/execution-limits.mjs +9 -0
  169. package/src/local/execution-routing.mjs +276 -0
  170. package/src/local/execution-surface.mjs +23 -0
  171. package/src/local/file-mutation-coordinator.mjs +47 -0
  172. package/src/local/file-snapshot-preservation.mjs +24 -0
  173. package/src/local/filesystem-identity.mjs +54 -0
  174. package/src/local/fixed-process-environment.mjs +21 -0
  175. package/src/local/full-access-test.mjs +31 -13
  176. package/src/local/git-commit.mjs +69 -0
  177. package/src/local/git-config-safety.mjs +55 -0
  178. package/src/local/git-log-parser.mjs +41 -0
  179. package/src/local/git-metadata-boundary.mjs +77 -0
  180. package/src/local/git-metadata-tree-safety.mjs +59 -0
  181. package/src/local/git-operation-state.mjs +19 -0
  182. package/src/local/git-service.mjs +165 -30
  183. package/src/local/hardened-npm-download-timeout.mjs +46 -0
  184. package/src/local/hardened-npm-download.mjs +109 -0
  185. package/src/local/hardened-npm-extract.mjs +20 -0
  186. package/src/local/hardened-npm-verification.mjs +104 -0
  187. package/src/local/hardened-npm.mjs +199 -0
  188. package/src/local/job-runner.mjs +244 -89
  189. package/src/local/lifecycle.mjs +6 -0
  190. package/src/local/log.mjs +19 -45
  191. package/src/local/macos-background-input.mjs +398 -0
  192. package/src/local/macos-idle-sleep-assertion.mjs +65 -0
  193. package/src/local/macos-trust-broker.mjs +404 -0
  194. package/src/local/managed-job-cancellation.mjs +42 -0
  195. package/src/local/managed-job-capacity.mjs +16 -0
  196. package/src/local/managed-job-directory-generation.mjs +60 -0
  197. package/src/local/managed-job-directory.mjs +75 -0
  198. package/src/local/managed-job-durable-process.mjs +49 -0
  199. package/src/local/managed-job-lock.mjs +46 -14
  200. package/src/local/managed-job-plan.mjs +38 -14
  201. package/src/local/managed-job-projection.mjs +23 -15
  202. package/src/local/managed-job-retention.mjs +128 -0
  203. package/src/local/managed-job-runner-claim.mjs +70 -0
  204. package/src/local/managed-job-runner.mjs +35 -10
  205. package/src/local/managed-job-storage.mjs +22 -6
  206. package/src/local/managed-job-terminal-maintenance.mjs +40 -0
  207. package/src/local/managed-job-terminal.mjs +150 -0
  208. package/src/local/managed-jobs.mjs +424 -287
  209. package/src/local/npm-cli.mjs +42 -0
  210. package/src/local/npm-environment.mjs +37 -0
  211. package/src/local/operation-authorization.mjs +68 -324
  212. package/src/local/operation-risk.mjs +51 -4
  213. package/src/local/owner-state-lock.mjs +118 -0
  214. package/src/local/package-identity.mjs +9 -0
  215. package/src/local/patch.mjs +20 -18
  216. package/src/local/path-inspection.mjs +23 -0
  217. package/src/local/policy.mjs +19 -0
  218. package/src/local/private-toolchain-integrity.mjs +54 -0
  219. package/src/local/process-execution.mjs +87 -75
  220. package/src/local/process-foreground-timeout.mjs +50 -0
  221. package/src/local/process-identity.mjs +41 -7
  222. package/src/local/process-nonreplayable-settlement.mjs +50 -0
  223. package/src/local/process-result-projection.mjs +22 -0
  224. package/src/local/process-session-events.mjs +47 -0
  225. package/src/local/process-session-remote-activity.mjs +10 -0
  226. package/src/local/process-session-termination.mjs +73 -0
  227. package/src/local/process-sessions.mjs +144 -112
  228. package/src/local/process-tracker.mjs +140 -13
  229. package/src/local/process-tree-ownership-types.d.ts +37 -0
  230. package/src/local/process-tree-ownership.mjs +57 -0
  231. package/src/local/process-tree-signal.mjs +34 -0
  232. package/src/local/process-tree-snapshot.mjs +77 -0
  233. package/src/local/process-tree-supervisor.mjs +69 -0
  234. package/src/local/process-tree.mjs +11 -53
  235. package/src/local/project-metadata.mjs +19 -6
  236. package/src/local/relay-call-recovery.mjs +58 -38
  237. package/src/local/relay-connection-classification.mjs +131 -0
  238. package/src/local/relay-connection-support.mjs +91 -0
  239. package/src/local/relay-connection.mjs +179 -272
  240. package/src/local/relay-diagnostics.mjs +91 -0
  241. package/src/local/relay-heartbeat.mjs +119 -0
  242. package/src/local/relay-liveness.mjs +109 -0
  243. package/src/local/relay-peer-diagnostics.mjs +29 -0
  244. package/src/local/release-runtime-lock.mjs +18 -0
  245. package/src/local/remote-activity-idle-sleep-guard.mjs +77 -0
  246. package/src/local/remote-configuration.mjs +48 -0
  247. package/src/local/resilient-relay-connection.mjs +178 -0
  248. package/src/local/resource-admission-diagnostics.mjs +52 -0
  249. package/src/local/resource-admission-policy.mjs +115 -0
  250. package/src/local/resource-admission.mjs +339 -0
  251. package/src/local/resource-build-root.mjs +83 -0
  252. package/src/local/resource-cargo-concurrency.mjs +38 -0
  253. package/src/local/resource-cmake-concurrency.mjs +42 -0
  254. package/src/local/resource-command-concurrency.mjs +37 -0
  255. package/src/local/resource-command-profile.mjs +176 -0
  256. package/src/local/resource-coordinator-accounting.mjs +21 -0
  257. package/src/local/resource-cpu-window.mjs +20 -0
  258. package/src/local/resource-disk-headroom.mjs +13 -0
  259. package/src/local/resource-elastic-memory.mjs +19 -0
  260. package/src/local/resource-elastic-request.mjs +36 -0
  261. package/src/local/resource-foreground-wait.mjs +29 -0
  262. package/src/local/resource-go-concurrency.mjs +43 -0
  263. package/src/local/resource-gradle-concurrency.mjs +57 -0
  264. package/src/local/resource-host-cache.mjs +39 -0
  265. package/src/local/resource-host-darwin.mjs +54 -0
  266. package/src/local/resource-host-linux.mjs +35 -0
  267. package/src/local/resource-host-sample-file.mjs +23 -0
  268. package/src/local/resource-host-snapshot.mjs +99 -0
  269. package/src/local/resource-lease-accounting.mjs +119 -0
  270. package/src/local/resource-light-command.mjs +6 -0
  271. package/src/local/resource-make-concurrency.mjs +42 -0
  272. package/src/local/resource-maven-concurrency.mjs +38 -0
  273. package/src/local/resource-ninja-command-concurrency.mjs +20 -0
  274. package/src/local/resource-ninja-concurrency.mjs +28 -0
  275. package/src/local/resource-operations.mjs +26 -10
  276. package/src/local/resource-pressure.mjs +67 -0
  277. package/src/local/resource-probe-command.mjs +35 -0
  278. package/src/local/resource-process-admission.mjs +59 -0
  279. package/src/local/resource-process-ancestry-cache.mjs +43 -0
  280. package/src/local/resource-process-ancestry.mjs +32 -0
  281. package/src/local/resource-process-priority.mjs +15 -0
  282. package/src/local/resource-project-key.mjs +53 -0
  283. package/src/local/resource-pytest-concurrency.mjs +33 -0
  284. package/src/local/resource-release-control-classification.mjs +14 -0
  285. package/src/local/resource-release-control-executable.mjs +70 -0
  286. package/src/local/resource-release-control-workspace.mjs +41 -0
  287. package/src/local/resource-request-contract.mjs +30 -0
  288. package/src/local/resource-script-classification.mjs +44 -0
  289. package/src/local/resource-shell-analysis.mjs +58 -0
  290. package/src/local/resource-staging-recovery.mjs +97 -0
  291. package/src/local/resource-swift-concurrency.mjs +31 -0
  292. package/src/local/resource-transaction-lock.mjs +189 -0
  293. package/src/local/resource-wait.mjs +48 -0
  294. package/src/local/resource-waiters.mjs +139 -0
  295. package/src/local/resource-xcode-command.mjs +7 -0
  296. package/src/local/resource-xcode-concurrency.mjs +34 -0
  297. package/src/local/resource-xcode-non-build.mjs +19 -0
  298. package/src/local/runtime-activation.mjs +700 -0
  299. package/src/local/runtime-activity-projection.mjs +48 -0
  300. package/src/local/runtime-capabilities.mjs +48 -15
  301. package/src/local/runtime-diagnostic-state.mjs +14 -0
  302. package/src/local/runtime-diagnostics.mjs +40 -13
  303. package/src/local/runtime-info-projection.mjs +60 -0
  304. package/src/local/runtime-info-relay-projection.mjs +21 -0
  305. package/src/local/runtime-paths.mjs +2 -1
  306. package/src/local/runtime-process-routing.mjs +33 -0
  307. package/src/local/runtime-relay-connection-options.mjs +44 -0
  308. package/src/local/runtime-relay-control.mjs +98 -0
  309. package/src/local/runtime-relay.mjs +26 -50
  310. package/src/local/runtime-reporting.mjs +37 -21
  311. package/src/local/runtime-resource-service.mjs +77 -0
  312. package/src/local/runtime-tool-handlers.mjs +13 -10
  313. package/src/local/runtime.mjs +244 -208
  314. package/src/local/secure-file.mjs +73 -20
  315. package/src/local/security-audit-dispatch.mjs +35 -0
  316. package/src/local/security-audit-log.mjs +215 -0
  317. package/src/local/security-audit-state.mjs +139 -0
  318. package/src/local/security-audit-storage.mjs +135 -0
  319. package/src/local/security-audit-warning.mjs +31 -0
  320. package/src/local/security-audit-worker.mjs +87 -0
  321. package/src/local/service-convergence.mjs +42 -1
  322. package/src/local/service-definition.mjs +24 -0
  323. package/src/local/service-environment.mjs +18 -10
  324. package/src/local/service-owner.mjs +146 -0
  325. package/src/local/service-ownership.mjs +17 -0
  326. package/src/local/service-restart-handoff.mjs +64 -0
  327. package/src/local/service-restart-scheduler.mjs +49 -0
  328. package/src/local/service-runtime-convergence.mjs +52 -0
  329. package/src/local/service-runtime.mjs +105 -0
  330. package/src/local/service-status.mjs +60 -0
  331. package/src/local/service.mjs +385 -92
  332. package/src/local/shell.mjs +39 -19
  333. package/src/local/ssh-key.mjs +158 -42
  334. package/src/local/state-inventory.mjs +50 -24
  335. package/src/local/state-owner-lock-inventory.mjs +23 -0
  336. package/src/local/state-root-owned-namespaces.mjs +83 -0
  337. package/src/local/state-root-retirement.mjs +89 -0
  338. package/src/local/state.mjs +386 -96
  339. package/src/local/stdio.mjs +96 -66
  340. package/src/local/support-state-projection.mjs +30 -0
  341. package/src/local/system-network-route.mjs +76 -0
  342. package/src/local/systemd-removal.mjs +20 -0
  343. package/src/local/tool-executor.mjs +85 -20
  344. package/src/local/tool-result-boundary.mjs +51 -0
  345. package/src/local/toolchain-operation-lock.mjs +41 -0
  346. package/src/local/tools.mjs +7 -5
  347. package/src/local/trusted-executable.mjs +53 -0
  348. package/src/local/trusted-git-executable.mjs +34 -0
  349. package/src/local/trusted-github-cli.mjs +24 -0
  350. package/src/local/windows-service-convergence.mjs +49 -0
  351. package/src/local/windows-service.mjs +52 -45
  352. package/src/local/worker-deployment-fingerprint.mjs +102 -0
  353. package/src/local/worker-deployment.mjs +48 -60
  354. package/src/local/worker-health.mjs +12 -4
  355. package/src/local/worker-secret-file.mjs +37 -17
  356. package/src/local/workspace-file-service.mjs +156 -239
  357. package/src/local/workspace-file-transaction.mjs +189 -0
  358. package/src/local/workspace-search.mjs +55 -0
  359. package/src/local/wrangler-toolchain/package-lock.json +1505 -0
  360. package/src/local/wrangler-toolchain/package.json +23 -0
  361. package/src/local/wrangler-toolchain-verification.mjs +135 -0
  362. package/src/local/wrangler-toolchain.mjs +188 -0
  363. package/src/shared/access-contract.json +7 -1
  364. package/src/shared/activation-recovery.mjs +49 -0
  365. package/src/shared/admin-auth.d.mts +2 -1
  366. package/src/shared/admin-auth.mjs +3 -3
  367. package/src/shared/authority-revocation.d.mts +9 -0
  368. package/src/shared/authority-revocation.mjs +28 -0
  369. package/src/shared/daemon-auth.d.mts +11 -0
  370. package/src/shared/daemon-auth.mjs +17 -0
  371. package/src/shared/device-session-auth.d.mts +20 -0
  372. package/src/shared/device-session-auth.mjs +51 -0
  373. package/src/shared/foreground-timeout.d.mts +15 -0
  374. package/src/shared/foreground-timeout.mjs +70 -0
  375. package/src/shared/log-redaction.d.mts +9 -0
  376. package/src/shared/log-redaction.mjs +51 -0
  377. package/src/shared/mcp-protocol.d.mts +27 -0
  378. package/src/shared/mcp-protocol.mjs +275 -0
  379. package/src/shared/project-overview-projection.d.mts +4 -0
  380. package/src/shared/project-overview-projection.mjs +96 -0
  381. package/src/shared/relay-contract.json +28 -0
  382. package/src/shared/result-projection.d.mts +2 -1
  383. package/src/shared/result-projection.mjs +13 -2
  384. package/src/shared/server-metadata.json +15 -9
  385. package/src/shared/tool-argument-validation.d.mts +17 -0
  386. package/src/shared/tool-argument-validation.mjs +325 -0
  387. package/src/shared/tool-call-capacity.d.mts +41 -0
  388. package/src/shared/tool-call-capacity.mjs +59 -0
  389. package/src/shared/tool-catalog.json +626 -57
  390. package/src/worker/access.ts +12 -0
  391. package/src/worker/account-admin.ts +55 -33
  392. package/src/worker/authority-revocations.ts +174 -0
  393. package/src/worker/authority.ts +52 -6
  394. package/src/worker/daemon-auth.ts +49 -68
  395. package/src/worker/daemon-channel.ts +36 -0
  396. package/src/worker/daemon-http-auth.ts +63 -0
  397. package/src/worker/daemon-http-channel.ts +120 -0
  398. package/src/worker/daemon-http-controller.ts +163 -0
  399. package/src/worker/daemon-http-protocol.ts +62 -0
  400. package/src/worker/daemon-http-registry.ts +82 -0
  401. package/src/worker/daemon-last-observation.ts +30 -0
  402. package/src/worker/daemon-liveness.ts +8 -6
  403. package/src/worker/daemon-ready-dispatch.ts +17 -0
  404. package/src/worker/daemon-ready-messages.ts +73 -0
  405. package/src/worker/daemon-ready-waiters.ts +79 -0
  406. package/src/worker/daemon-recovery-budget.ts +13 -0
  407. package/src/worker/daemon-registry.ts +58 -0
  408. package/src/worker/daemon-relay-diagnostics.ts +127 -0
  409. package/src/worker/daemon-socket-attachment.ts +55 -0
  410. package/src/worker/daemon-sockets.ts +72 -62
  411. package/src/worker/daemon-status.ts +38 -0
  412. package/src/worker/device-session-verifier.ts +129 -0
  413. package/src/worker/dpop.ts +157 -0
  414. package/src/worker/durable-process-timeout.ts +29 -0
  415. package/src/worker/errors.ts +57 -0
  416. package/src/worker/http.ts +112 -26
  417. package/src/worker/index.ts +446 -440
  418. package/src/worker/mcp-access.ts +57 -0
  419. package/src/worker/mcp-controller.ts +188 -0
  420. package/src/worker/mcp-http-accept.ts +11 -0
  421. package/src/worker/mcp-http-contract.ts +322 -0
  422. package/src/worker/mcp-initialization-compat.ts +141 -0
  423. package/src/worker/mcp-jsonrpc.ts +11 -29
  424. package/src/worker/mcp-removed-protocol.ts +17 -0
  425. package/src/worker/mcp-response-proxy.ts +135 -0
  426. package/src/worker/mcp-response-stream.ts +65 -0
  427. package/src/worker/mcp-stale-schema-compat.ts +57 -0
  428. package/src/worker/mcp-stream-proxy-contract.ts +48 -0
  429. package/src/worker/mcp-tool-call-input.ts +23 -0
  430. package/src/worker/nonce-store.ts +33 -35
  431. package/src/worker/oauth-authorization-page.ts +21 -1
  432. package/src/worker/oauth-client-admin.ts +52 -0
  433. package/src/worker/oauth-client-contract.ts +38 -0
  434. package/src/worker/oauth-controller.ts +107 -47
  435. package/src/worker/oauth-field-contract.ts +31 -0
  436. package/src/worker/oauth-record-contract.ts +7 -0
  437. package/src/worker/oauth-refresh-authority.ts +27 -0
  438. package/src/worker/oauth-refresh-exchange.ts +162 -0
  439. package/src/worker/oauth-refresh-families.ts +130 -27
  440. package/src/worker/oauth-refresh-persistence.ts +116 -0
  441. package/src/worker/oauth-state.ts +33 -18
  442. package/src/worker/oauth-store-validation.ts +131 -0
  443. package/src/worker/oauth-token-derivation.ts +33 -0
  444. package/src/worker/oauth-token-issuance.ts +119 -0
  445. package/src/worker/oauth-tokens.ts +56 -190
  446. package/src/worker/observability.ts +38 -5
  447. package/src/worker/pending-admission.ts +15 -0
  448. package/src/worker/pending-call-capacity.ts +108 -0
  449. package/src/worker/pending-call-contract.ts +42 -5
  450. package/src/worker/pending-call-deadlines.ts +75 -0
  451. package/src/worker/pending-calls.ts +131 -125
  452. package/src/worker/runtime-alarm-storage.ts +37 -0
  453. package/src/worker/runtime-alarm.ts +136 -0
  454. package/src/worker/server-info-activity.ts +36 -0
  455. package/src/worker/server-info-tool-delivery.ts +15 -0
  456. package/src/worker/server-info.ts +168 -0
  457. package/src/worker/tool-catalog.ts +47 -1
  458. package/src/worker/tool-timeout.ts +75 -14
  459. package/src/worker/websocket-protocol.ts +26 -2
  460. package/src/worker/worker-edge-guard.ts +90 -0
  461. package/src/worker/worker-edge-log.ts +65 -0
  462. package/src/worker/worker-entry.ts +52 -0
  463. package/src/worker/worker-mcp-config.ts +23 -0
  464. package/src/worker/worker-metadata.ts +48 -0
  465. package/src/worker/worker-rate-limit-key.ts +30 -0
  466. package/src/worker/worker-runtime-config.ts +20 -0
  467. package/src/worker/worker-static-routes.ts +54 -0
  468. package/src/worker/worker-task-lifetime.ts +18 -0
  469. package/tsconfig.local.json +17 -1
  470. package/wrangler.jsonc +13 -0
  471. package/src/local/cli-approval.mjs +0 -117
  472. package/src/local/operation-state-lock.mjs +0 -92
  473. package/src/worker/mcp-session.ts +0 -72
@@ -0,0 +1,91 @@
1
+ export const APPLICATION_PROXY_ROUTE_SCOPE = "application-proxy-selection-only";
2
+
3
+ export function preferredRelayCloseCategory(current, next) {
4
+ const existing = String(current || "");
5
+ const candidate = String(next || "relay_transport_error");
6
+ return !existing || existing === "relay_transport_error" ? candidate : existing;
7
+ }
8
+
9
+ export function relayStatusSnapshot(state, now = Date.now()) {
10
+ const current = Number(now) || 0;
11
+ const liveness = state.liveness?.snapshot(current) || null;
12
+ return {
13
+ authenticated: state.authenticated === true,
14
+ ready: state.ready === true,
15
+ readiness_probe_delivered: state.readinessProbeDelivered === true,
16
+ closed: state.closed === true,
17
+ network_route: state.networkRoute,
18
+ network_route_scope: state.networkRouteScope,
19
+ transport: "websocket",
20
+ last_connect_stage: state.lastConnectStage || "idle",
21
+ last_connect_duration_ms: Math.max(0, Math.round(Number(state.lastConnectDurationMs) || 0)),
22
+ last_connect_http_status: Number.isInteger(state.lastConnectHttpStatus) ? state.lastConnectHttpStatus : null,
23
+ reconnect_attempt: state.reconnectAttempt,
24
+ outage_active: state.outageStartedAt > 0,
25
+ outage_count: state.outageCount,
26
+ outage_attempts: state.outageAttempts,
27
+ outage_started_at: isoTimestamp(state.outageStartedWallAt),
28
+ outage_duration_ms: state.outageStartedAt > 0 ? Math.max(0, current - state.outageStartedAt) : 0,
29
+ last_close_category: state.outageCount > 0 ? state.lastCloseCategory : null,
30
+ last_close_code: state.outageCount > 0 ? state.lastCloseCode : null,
31
+ last_transport_error_class: state.outageCount > 0 ? (state.lastTransportErrorClass || null) : null,
32
+ last_disconnected_at: isoTimestamp(state.lastDisconnectedAt),
33
+ last_ready_at: isoTimestamp(state.lastReadyWallAt),
34
+ last_ready_duration_ms: state.lastReadyDurationMs,
35
+ last_ready_inbound_silence_ms: state.lastReadyInboundSilenceMs,
36
+ application_heartbeat_interval_ms: liveness?.application_heartbeat_interval_ms || 0,
37
+ application_heartbeat_timeout_ms: liveness?.application_heartbeat_timeout_ms || 0,
38
+ last_reconnect_delay_ms: state.lastReconnectDelayMs,
39
+ next_reconnect_at: isoTimestamp(state.nextReconnectWallAt),
40
+ next_reconnect_in_ms: state.nextReconnectAt > 0 ? Math.max(0, state.nextReconnectAt - current) : 0,
41
+ session_generation: state.sessionGeneration,
42
+ heartbeat: liveness,
43
+ };
44
+ }
45
+
46
+ export function relayOutageFields(state, now, cause) {
47
+ const current = Number(now) || 0;
48
+ return {
49
+ event: "relay.outage.active",
50
+ outage_seconds: roundSeconds(Math.max(0, current - state.outageStartedAt)),
51
+ attempts: state.outageAttempts,
52
+ cause,
53
+ close_category: state.lastCloseCategory,
54
+ close_code: state.lastCloseCode,
55
+ previous_ready_inbound_silence_ms: state.lastReadyInboundSilenceMs,
56
+ network_route: state.networkRoute,
57
+ network_route_scope: state.networkRouteScope,
58
+ transport: "websocket",
59
+ last_connect_stage: state.lastConnectStage || "idle",
60
+ last_connect_duration_ms: Math.max(0, Math.round(Number(state.lastConnectDurationMs) || 0)),
61
+ last_connect_http_status: Number.isInteger(state.lastConnectHttpStatus) ? state.lastConnectHttpStatus : null,
62
+ next_reconnect_in_ms: state.nextReconnectAt > 0 ? Math.max(0, state.nextReconnectAt - current) : 0,
63
+ ...(state.lastTransportErrorClass ? { error_class: state.lastTransportErrorClass } : {}),
64
+ };
65
+ }
66
+
67
+ export function relayRecoveryFields(state, outageMs) {
68
+ return {
69
+ event: "relay.outage.recovered",
70
+ outage_seconds: roundSeconds(outageMs),
71
+ attempts: state.outageAttempts,
72
+ close_category: state.lastCloseCategory,
73
+ close_code: state.lastCloseCode,
74
+ previous_ready_inbound_silence_ms: state.lastReadyInboundSilenceMs,
75
+ network_route: state.networkRoute,
76
+ network_route_scope: state.networkRouteScope,
77
+ transport: "websocket",
78
+ last_connect_stage: state.lastConnectStage || "idle",
79
+ last_connect_duration_ms: Math.max(0, Math.round(Number(state.lastConnectDurationMs) || 0)),
80
+ last_connect_http_status: Number.isInteger(state.lastConnectHttpStatus) ? state.lastConnectHttpStatus : null,
81
+ ...(state.lastTransportErrorClass ? { error_class: state.lastTransportErrorClass } : {}),
82
+ };
83
+ }
84
+
85
+ function isoTimestamp(value) {
86
+ return Number(value) > 0 ? new Date(Number(value)).toISOString() : null;
87
+ }
88
+
89
+ function roundSeconds(milliseconds) {
90
+ return Math.max(1, Math.round(Number(milliseconds || 0) / 1000));
91
+ }
@@ -0,0 +1,119 @@
1
+ export class RelayHeartbeatMonitor {
2
+ constructor(options = {}) {
3
+ this.intervalMs = positiveInteger(options.intervalMs, 25_000);
4
+ this.timeoutMs = positiveInteger(options.timeoutMs, 75_000);
5
+ this.stallThresholdMs = positiveInteger(options.stallThresholdMs, Math.max(1000, Math.floor(this.intervalMs / 2)));
6
+ this.recoveryGraceMs = positiveInteger(options.recoveryGraceMs, Math.max(this.intervalMs, Math.min(this.timeoutMs, 30_000)));
7
+ this.scheduler = options.scheduler;
8
+ this.now = options.now;
9
+ this.logger = options.logger || console;
10
+ this.isActive = options.isActive;
11
+ this.lastInboundAt = options.lastInboundAt;
12
+ this.sendHeartbeat = options.sendHeartbeat;
13
+ this.onTimeout = options.onTimeout;
14
+ this.timer = null;
15
+ this.expectedAt = 0;
16
+ this.recoveryUntil = 0;
17
+ this.lastEventLoopLagMs = 0;
18
+ this.maxEventLoopLagMs = 0;
19
+ this.eventLoopStallCount = 0;
20
+ this.lastEventLoopStallAt = 0;
21
+ this.lastEventLoopStallWarnAt = 0;
22
+ }
23
+
24
+ start() {
25
+ this.stop();
26
+ this.expectedAt = this.now() + this.intervalMs;
27
+ this.recoveryUntil = 0;
28
+ this.timer = this.scheduler.setInterval(() => this.tick(), this.intervalMs);
29
+ this.timer?.unref?.();
30
+ }
31
+
32
+ stop() {
33
+ if (this.timer) this.scheduler.clearInterval(this.timer);
34
+ this.timer = null;
35
+ this.expectedAt = 0;
36
+ this.recoveryUntil = 0;
37
+ }
38
+
39
+ observeInbound() {
40
+ this.recoveryUntil = 0;
41
+ }
42
+
43
+ snapshot(now = this.now()) {
44
+ const current = Number(now) || 0;
45
+ return {
46
+ interval_ms: this.intervalMs,
47
+ timeout_ms: this.timeoutMs,
48
+ recovery_grace_ms: this.recoveryGraceMs,
49
+ recovery_active: this.recoveryUntil > current,
50
+ recovery_remaining_ms: this.recoveryUntil > current ? this.recoveryUntil - current : 0,
51
+ last_event_loop_lag_ms: this.lastEventLoopLagMs,
52
+ max_event_loop_lag_ms: this.maxEventLoopLagMs,
53
+ event_loop_stall_count: this.eventLoopStallCount,
54
+ last_event_loop_stall_at: isoTimestamp(this.lastEventLoopStallAt),
55
+ };
56
+ }
57
+
58
+ tick() {
59
+ if (!this.isActive()) return;
60
+ const now = this.now();
61
+ const expectedAt = this.expectedAt || now;
62
+ const eventLoopLagMs = Math.max(0, now - expectedAt);
63
+ this.expectedAt = now + this.intervalMs;
64
+ this.lastEventLoopLagMs = eventLoopLagMs;
65
+ this.maxEventLoopLagMs = Math.max(this.maxEventLoopLagMs, eventLoopLagMs);
66
+
67
+ if (eventLoopLagMs >= this.stallThresholdMs) {
68
+ const silentForMs = Math.max(0, now - this.lastInboundAt());
69
+ const staleAfterLongPause = eventLoopLagMs > this.timeoutMs + this.recoveryGraceMs
70
+ && silentForMs > this.timeoutMs;
71
+ this.observeEventLoopStall(now, eventLoopLagMs, !staleAfterLongPause);
72
+ if (staleAfterLongPause) {
73
+ this.recoveryUntil = 0;
74
+ this.onTimeout({ silentForMs, eventLoopLagMs });
75
+ return;
76
+ }
77
+ this.recoveryUntil = Math.max(this.recoveryUntil, now + this.recoveryGraceMs);
78
+ this.sendHeartbeat(now);
79
+ return;
80
+ }
81
+ if (now < this.recoveryUntil) {
82
+ this.sendHeartbeat(now);
83
+ return;
84
+ }
85
+
86
+ const silentForMs = Math.max(0, now - this.lastInboundAt());
87
+ if (silentForMs >= this.timeoutMs) {
88
+ this.onTimeout({ silentForMs, eventLoopLagMs });
89
+ return;
90
+ }
91
+ this.sendHeartbeat(now);
92
+ }
93
+
94
+ observeEventLoopStall(now, lagMs, relayDisconnectDeferred = true) {
95
+ this.eventLoopStallCount += 1;
96
+ this.lastEventLoopStallAt = now;
97
+ if (this.lastEventLoopStallWarnAt && now - this.lastEventLoopStallWarnAt < this.timeoutMs) return;
98
+ this.lastEventLoopStallWarnAt = now;
99
+ this.logger.warn?.(
100
+ relayDisconnectDeferred
101
+ ? "local event loop stalled; relay liveness decision deferred"
102
+ : "local event loop resumed after a long pause; reconnecting stale relay transport",
103
+ {
104
+ event: "runtime.event_loop.stall",
105
+ lag_ms: lagMs,
106
+ recovery_grace_ms: this.recoveryGraceMs,
107
+ relay_disconnect_deferred: relayDisconnectDeferred,
108
+ },
109
+ );
110
+ }
111
+ }
112
+
113
+ function positiveInteger(value, fallback) {
114
+ const number = Number(value);
115
+ return Number.isFinite(number) && number > 0 ? Math.floor(number) : fallback;
116
+ }
117
+ function isoTimestamp(value) {
118
+ return Number(value) > 0 ? new Date(Number(value)).toISOString() : null;
119
+ }
@@ -0,0 +1,109 @@
1
+ import relayContract from "../shared/relay-contract.json" with { type: "json" };
2
+ import { RelayHeartbeatMonitor } from "./relay-heartbeat.mjs";
3
+
4
+ const SILENT_STALL_LOGGER = Object.freeze({ warn() {} });
5
+
6
+ export class RelayLiveness {
7
+ constructor(options = {}) {
8
+ this.now = options.now;
9
+ this.currentSocket = options.currentSocket;
10
+ this.sendApplicationHeartbeat = options.sendApplicationHeartbeat;
11
+ this.lastInboundAt = 0;
12
+ this.lastApplicationInboundAt = 0;
13
+ const active = options.isActive;
14
+ const scheduler = options.scheduler;
15
+ const transportIntervalMs = positiveInteger(options.transportPingIntervalMs ?? options.heartbeatIntervalMs,
16
+ relayContract.transportPingIntervalMs);
17
+ this.transport = new RelayHeartbeatMonitor({
18
+ intervalMs: transportIntervalMs,
19
+ timeoutMs: positiveInteger(options.transportPongTimeoutMs ?? options.heartbeatTimeoutMs,
20
+ relayContract.transportPongTimeoutMs),
21
+ stallThresholdMs: options.heartbeatStallThresholdMs,
22
+ recoveryGraceMs: options.heartbeatRecoveryGraceMs ?? transportIntervalMs,
23
+ scheduler,
24
+ now: this.now,
25
+ logger: options.logger,
26
+ isActive: active,
27
+ lastInboundAt: () => this.lastInboundAt,
28
+ sendHeartbeat: () => this.probeTransport(options.onTransportError),
29
+ onTimeout: (details) => options.onTransportTimeout?.(details, this.currentSocket?.()),
30
+ });
31
+ this.application = new RelayHeartbeatMonitor({
32
+ intervalMs: positiveInteger(options.applicationHeartbeatIntervalMs,
33
+ relayContract.daemonApplicationHeartbeatIntervalMs),
34
+ timeoutMs: positiveInteger(options.applicationHeartbeatTimeoutMs,
35
+ relayContract.daemonApplicationHeartbeatTimeoutMs),
36
+ stallThresholdMs: options.heartbeatStallThresholdMs,
37
+ recoveryGraceMs: options.heartbeatRecoveryGraceMs,
38
+ scheduler,
39
+ now: this.now,
40
+ logger: SILENT_STALL_LOGGER,
41
+ isActive: active,
42
+ lastInboundAt: () => this.lastApplicationInboundAt,
43
+ sendHeartbeat: (now) => this.sendApplicationProbe(now),
44
+ onTimeout: (details) => options.onApplicationTimeout?.(details, this.currentSocket?.()),
45
+ });
46
+ }
47
+
48
+ start() {
49
+ const now = this.now();
50
+ this.lastInboundAt = now;
51
+ this.lastApplicationInboundAt = now;
52
+ this.transport.start();
53
+ this.application.start();
54
+ }
55
+
56
+ stop() {
57
+ this.transport.stop();
58
+ this.application.stop();
59
+ }
60
+
61
+ observeInbound() {
62
+ this.lastInboundAt = this.now();
63
+ this.transport.observeInbound();
64
+ }
65
+
66
+ observeApplicationInbound() {
67
+ const now = this.now();
68
+ this.lastInboundAt = now;
69
+ this.lastApplicationInboundAt = now;
70
+ this.transport.observeInbound();
71
+ this.application.observeInbound();
72
+ }
73
+
74
+ silenceMs(now = this.now()) {
75
+ return this.lastInboundAt > 0 ? Math.max(0, Number(now) - this.lastInboundAt) : 0;
76
+ }
77
+
78
+ snapshot(now = this.now()) {
79
+ const application = this.application.snapshot(now);
80
+ return {
81
+ ...this.transport.snapshot(now),
82
+ application_heartbeat_interval_ms: application.interval_ms,
83
+ application_heartbeat_timeout_ms: application.timeout_ms,
84
+ application_inbound_silence_ms: Math.max(0, Number(now) - this.lastApplicationInboundAt),
85
+ };
86
+ }
87
+
88
+ probeTransport(onTransportError) {
89
+ const socket = this.currentSocket?.();
90
+ if (!socket) return false;
91
+ if (typeof socket.ping !== "function") return this.sendApplicationProbe(this.now());
92
+ try {
93
+ socket.ping();
94
+ return true;
95
+ } catch (error) {
96
+ onTransportError?.(error, socket);
97
+ return false;
98
+ }
99
+ }
100
+
101
+ sendApplicationProbe(now) {
102
+ const socket = this.currentSocket?.();
103
+ return socket ? this.sendApplicationHeartbeat?.(now, socket) !== false : false;
104
+ }
105
+ }
106
+ function positiveInteger(value, fallback) {
107
+ const number = Number(value);
108
+ return Number.isFinite(number) && number > 0 ? Math.floor(number) : fallback;
109
+ }
@@ -0,0 +1,29 @@
1
+ // @ts-check
2
+
3
+ import { clampInteger } from "./numbers.mjs";
4
+ import { isPlainRecord } from "./records.mjs";
5
+
6
+ export function relayHandshakeDiagnostics(value = {}) {
7
+ const status = isPlainRecord(value) ? value : {};
8
+ return {
9
+ schema_version: 1,
10
+ transport: ["websocket", "https"].includes(status.transport) ? status.transport : "unknown",
11
+ network_route: typeof status.network_route === "string" ? status.network_route : "unresolved",
12
+ last_connect_stage: typeof status.last_connect_stage === "string" ? status.last_connect_stage : "idle",
13
+ last_connect_duration_ms: clampInteger(status.last_connect_duration_ms, 0, 0, 10 * 60_000),
14
+ last_connect_http_status: Number.isSafeInteger(status.last_connect_http_status) ? status.last_connect_http_status : null,
15
+ outage_count: clampInteger(status.outage_count, 0, 0, 1_000_000_000),
16
+ outage_active: status.outage_active === true,
17
+ outage_started_at: typeof status.outage_started_at === "string" ? status.outage_started_at : null,
18
+ outage_duration_ms: clampInteger(status.outage_duration_ms, 0, 0, 31 * 24 * 60 * 60_000),
19
+ outage_attempts: clampInteger(status.outage_attempts, 0, 0, 1_000_000),
20
+ last_close_category: typeof status.last_close_category === "string" ? status.last_close_category : null,
21
+ last_close_code: Number.isSafeInteger(status.last_close_code) ? status.last_close_code : null,
22
+ last_transport_error_class: typeof status.last_transport_error_class === "string"
23
+ ? status.last_transport_error_class
24
+ : null,
25
+ last_disconnected_at: typeof status.last_disconnected_at === "string" ? status.last_disconnected_at : null,
26
+ previous_ready_duration_ms: clampInteger(status.last_ready_duration_ms, 0, 0, 365 * 24 * 60 * 60_000),
27
+ previous_ready_inbound_silence_ms: clampInteger(status.last_ready_inbound_silence_ms, 0, 0, 31 * 24 * 60 * 60_000),
28
+ };
29
+ }
@@ -0,0 +1,18 @@
1
+ import { withOwnerStateLock } from "./owner-state-lock.mjs";
2
+ import { assertStateMaintenanceAvailable, machineServiceControlRoot } from "./state.mjs";
3
+
4
+ const LOCK_FILE = "release-runtime.lock";
5
+ const LOCK_PURPOSE = "release-runtime";
6
+
7
+ export function withReleaseRuntimeLock(stateRoot, callback, options = {}) {
8
+ if (typeof callback !== "function") throw new TypeError("release-runtime lock requires a callback");
9
+ return withOwnerStateLock(machineServiceControlRoot(options), async () => {
10
+ if (stateRoot) assertStateMaintenanceAvailable(stateRoot);
11
+ return callback();
12
+ }, {
13
+ purpose: LOCK_PURPOSE,
14
+ fileName: LOCK_FILE,
15
+ label: "release runtime",
16
+ timeoutMs: options.timeoutMs ?? 30_000,
17
+ });
18
+ }
@@ -0,0 +1,77 @@
1
+ import { MacosIdleSleepAssertion } from "./macos-idle-sleep-assertion.mjs";
2
+
3
+ export const DEFAULT_REMOTE_ACTIVITY_IDLE_SLEEP_GRACE_MS = 5 * 60_000;
4
+
5
+ export class RemoteActivityIdleSleepGuard {
6
+ constructor({ platform = process.platform, daemonPid = process.pid, graceMs = DEFAULT_REMOTE_ACTIVITY_IDLE_SLEEP_GRACE_MS,
7
+ spawnProcess, setTimer = setTimeout, clearTimer = clearTimeout, logger = console } = {}) {
8
+ this.assertion = new MacosIdleSleepAssertion({ platform, processId: daemonPid, spawnProcess, logger });
9
+ this.enabled = this.assertion.supported && Number.isSafeInteger(graceMs) && graceMs > 0;
10
+ this.graceMs = this.enabled ? graceMs : 0;
11
+ this.setTimer = setTimer;
12
+ this.clearTimer = clearTimer;
13
+ this.releaseTimer = null;
14
+ this.activeActivities = 0;
15
+ }
16
+
17
+ beginActivity() {
18
+ if (!this.enabled) return false;
19
+ this.activeActivities += 1;
20
+ this.cancelReleaseTimer();
21
+ return this.assertion.acquire();
22
+ }
23
+
24
+ endActivity() {
25
+ if (!this.enabled) return false;
26
+ if (this.activeActivities <= 0) return this.assertion.snapshot().active;
27
+ this.activeActivities -= 1;
28
+ if (this.activeActivities > 0 || !this.assertion.snapshot().active) return this.assertion.snapshot().active;
29
+ try {
30
+ this.armReleaseTimer();
31
+ return true;
32
+ } catch (error) {
33
+ this.release();
34
+ this.assertion.reportUnavailable(error);
35
+ return false;
36
+ }
37
+ }
38
+
39
+ cancelReleaseTimer() {
40
+ const timer = this.releaseTimer;
41
+ this.releaseTimer = null;
42
+ if (!timer) return;
43
+ try { this.clearTimer(timer); } catch { /* Stale timer callbacks also check identity before release. */ }
44
+ }
45
+
46
+ armReleaseTimer() {
47
+ this.cancelReleaseTimer();
48
+ const timer = this.setTimer(() => {
49
+ if (this.releaseTimer !== timer || this.activeActivities > 0) return;
50
+ this.releaseTimer = null;
51
+ this.assertion.release();
52
+ }, this.graceMs);
53
+ timer?.unref?.();
54
+ this.releaseTimer = timer;
55
+ }
56
+
57
+ release() {
58
+ this.cancelReleaseTimer();
59
+ this.assertion.release();
60
+ }
61
+
62
+ stop() {
63
+ this.activeActivities = 0;
64
+ this.release();
65
+ }
66
+
67
+ snapshot() {
68
+ const assertion = this.assertion.snapshot();
69
+ return {
70
+ supported: assertion.supported,
71
+ enabled: this.enabled,
72
+ active: assertion.active,
73
+ grace_ms: this.graceMs,
74
+ last_error_class: assertion.last_error_class,
75
+ };
76
+ }
77
+ }
@@ -0,0 +1,48 @@
1
+ import { effectiveLogFormat, effectiveLogLevel } from "./cli-options.mjs";
2
+ import { resolvePolicy } from "./cli-policy.mjs";
3
+ import { ensurePreferredDeviceRoot } from "./device-root-provider.mjs";
4
+ import { createLogger } from "./log.mjs";
5
+ import {
6
+ ensureWorkerSecrets,
7
+ promotePendingDeviceIdentity,
8
+ saveState,
9
+ } from "./state.mjs";
10
+ import { ensureWorkerDeployment } from "./worker-deployment.mjs";
11
+
12
+ export async function convergeRemoteConfiguration({ args, state }) {
13
+ const workerName = validateWorkerName(args.workerName);
14
+ ensureWorkerSecrets(state, {
15
+ rotateSecrets: Boolean(args.rotateSecrets),
16
+ deferDeviceRotation: true,
17
+ workerName,
18
+ allowWorkerRename: Boolean(args.forceWorker),
19
+ });
20
+ if (!state.worker.pendingDeviceIdentity) {
21
+ const candidate = await ensurePreferredDeviceRoot({
22
+ profileDir: state.paths.profileDir,
23
+ workspaceHash: state.workspace.hash,
24
+ existing: args.rotateSecrets ? null : state.worker.deviceIdentity,
25
+ rotate: Boolean(args.rotateSecrets),
26
+ });
27
+ if (candidate.keyId !== state.worker.deviceIdentity.keyId) state.worker.pendingDeviceIdentity = candidate;
28
+ }
29
+ state.policy = resolvePolicy(args, state.policy);
30
+ state.policy.updatedAt = new Date().toISOString();
31
+ saveState(state);
32
+ const logger = createLogger({
33
+ level: args.json ? "error" : effectiveLogLevel(args),
34
+ format: effectiveLogFormat(args),
35
+ component: "worker",
36
+ });
37
+ await ensureWorkerDeployment(state, args, { logger });
38
+ if (promotePendingDeviceIdentity(state)) saveState(state);
39
+ }
40
+
41
+ export function validateWorkerName(value) {
42
+ if (value === undefined || value === null || value === false) return undefined;
43
+ const name = String(value).trim();
44
+ if (!/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/.test(name)) {
45
+ throw new Error("--worker-name must be 1-63 lowercase letters, digits, or hyphens, and cannot start or end with a hyphen");
46
+ }
47
+ return name;
48
+ }
@@ -0,0 +1,178 @@
1
+ import relayContract from "../shared/relay-contract.json" with { type: "json" };
2
+ import { RelayConnection } from "./relay-connection.mjs";
3
+ import { DaemonHttpRelayConnection } from "./daemon-http-relay-connection.mjs";
4
+
5
+ export class ResilientRelayConnection {
6
+ constructor(options = {}) {
7
+ this.logger = options.logger || {};
8
+ this.onReady = typeof options.onReady === "function" ? options.onReady : () => {};
9
+ this.onDisconnect = typeof options.onDisconnect === "function" ? options.onDisconnect : () => {};
10
+ this.scheduler = options.scheduler || { setTimeout, clearTimeout };
11
+ this.fallbackDelayMs = positiveInteger(options.fallbackDelayMs, relayContract.httpFallbackActivationDelayMs);
12
+ this.activeTransport = "";
13
+ this.closed = true;
14
+ this.startResolve = null;
15
+ this.startPromise = null;
16
+ this.fallbackTimer = null;
17
+ this.fallbackRecoveredOutageMs = 0;
18
+ const WebSocketRelayClass = options.WebSocketRelayClass || RelayConnection;
19
+ const HttpRelayClass = options.HttpRelayClass || DaemonHttpRelayConnection;
20
+ this.websocket = new WebSocketRelayClass({
21
+ ...options.websocket,
22
+ onReady: (event) => this.handleReady("websocket", event),
23
+ onDisconnect: () => this.handleDisconnect("websocket"),
24
+ });
25
+ this.http = new HttpRelayClass({
26
+ ...options.http,
27
+ onReady: (event) => this.handleReady("https", event),
28
+ onDisconnect: () => this.handleDisconnect("https"),
29
+ });
30
+ }
31
+
32
+ start() {
33
+ if (!this.closed && this.startPromise) return this.startPromise;
34
+ this.closed = false;
35
+ this.startPromise = new Promise((resolve) => { this.startResolve = resolve; });
36
+ void this.websocket.start().catch(() => {
37
+ /* RelayConnection owns reconnect/backoff and reports readiness through callbacks; startup rejection is not terminal here. */
38
+ });
39
+ this.armFallback(this.fallbackDelayMs);
40
+ return this.startPromise;
41
+ }
42
+
43
+ stop() {
44
+ if (this.closed) return;
45
+ this.closed = true;
46
+ this.clearFallbackTimer();
47
+ this.websocket.stop();
48
+ this.http.stop();
49
+ this.activeTransport = "";
50
+ this.fallbackRecoveredOutageMs = 0;
51
+ this.startResolve?.(false);
52
+ this.startResolve = null;
53
+ this.startPromise = null;
54
+ }
55
+
56
+ status() {
57
+ const websocket = this.websocket.status();
58
+ const http = this.http.status();
59
+ if (this.activeTransport === "https" && http.ready) {
60
+ return {
61
+ ...websocket,
62
+ authenticated: true,
63
+ ready: true,
64
+ closed: this.closed,
65
+ transport: "https",
66
+ network_route: http.network_route,
67
+ last_transport_error_class: http.last_transport_error_class,
68
+ outage_active: false,
69
+ outage_duration_ms: this.fallbackRecoveredOutageMs,
70
+ https_fallback_active: true,
71
+ https_fallback: http,
72
+ websocket_ready: websocket.ready === true,
73
+ websocket_outage_active: websocket.outage_active === true,
74
+ websocket_outage_duration_ms: Number(websocket.outage_duration_ms) || 0,
75
+ websocket_reconnect_attempt: Number(websocket.reconnect_attempt) || 0,
76
+ };
77
+ }
78
+ return {
79
+ ...websocket,
80
+ transport: "websocket",
81
+ https_fallback_active: false,
82
+ https_fallback: http,
83
+ };
84
+ }
85
+
86
+ currentSessionId() {
87
+ return this.activeTransport === "https" ? this.http.currentSessionId() : this.websocket.currentSessionId();
88
+ }
89
+
90
+ send(value) {
91
+ if (this.activeTransport === "websocket") return this.websocket.send(value);
92
+ if (this.activeTransport === "https") return this.http.send(value);
93
+ return false;
94
+ }
95
+
96
+ sendForSession(value, expectedSessionId) {
97
+ const sessionId = Number(expectedSessionId) || 0;
98
+ if (sessionId && sessionId === this.http.currentSessionId()) return this.http.sendForSession(value, sessionId);
99
+ return this.websocket.sendForSession(value, sessionId);
100
+ }
101
+
102
+ interrupt(category) {
103
+ if (this.activeTransport === "https") return this.http.interrupt(category);
104
+ return this.websocket.interrupt(category);
105
+ }
106
+
107
+ observeWelcome(message, relayContext = {}) {
108
+ if (relayContext?.transport === "https") return false;
109
+ return this.websocket.observeWelcome(message);
110
+ }
111
+ acknowledge(message, relayContext = {}) {
112
+ if (relayContext?.transport === "https") return false;
113
+ return this.websocket.acknowledge(message);
114
+ }
115
+ confirmReady(message, relayContext = {}) {
116
+ return relayContext?.transport === "https" ? this.http.confirmReady(message) : this.websocket.confirmReady(message);
117
+ }
118
+ handleServerError(message, relayContext = {}) {
119
+ if (relayContext?.transport === "https") return this.http.interrupt(message?.error);
120
+ return this.websocket.handleServerError(message);
121
+ }
122
+
123
+ handleReady(transport, event) {
124
+ if (this.closed) return;
125
+ if (transport === "websocket") {
126
+ this.activeTransport = "websocket";
127
+ this.fallbackRecoveredOutageMs = 0;
128
+ this.http.stop();
129
+ this.clearFallbackTimer();
130
+ } else {
131
+ if (this.websocket.status().ready === true) { this.http.stop(); return; }
132
+ this.fallbackRecoveredOutageMs = Math.max(0, Number(this.websocket.status().outage_duration_ms) || 0);
133
+ this.activeTransport = "https";
134
+ }
135
+ this.startResolve?.(true);
136
+ this.startResolve = null;
137
+ try { this.onReady({ ...event, transport }); }
138
+ catch { /* Transport readiness is already committed; observer failure must not tear down the usable channel. */ }
139
+ }
140
+
141
+ handleDisconnect(transport) {
142
+ if (this.closed) return;
143
+ if (transport === "websocket") {
144
+ const wasPrimary = this.activeTransport === "websocket";
145
+ this.armFallback(0, wasPrimary);
146
+ if (!wasPrimary) return;
147
+ } else if (this.activeTransport !== "https") return;
148
+ this.activeTransport = "";
149
+ try { this.onDisconnect({ transport }); }
150
+ catch { /* The transport is already unavailable; observer failure must not block failover/reconnect. */ }
151
+ }
152
+
153
+ armFallback(delay, takeoverWebSocket = false) {
154
+ if (this.closed) return;
155
+ if (this.http.status().closed === false) {
156
+ if (takeoverWebSocket) this.http.start({ takeoverWebSocket: true });
157
+ return;
158
+ }
159
+ if (this.fallbackTimer) return;
160
+ this.fallbackTimer = this.scheduler.setTimeout(() => {
161
+ this.fallbackTimer = null;
162
+ if (this.closed || this.websocket.status().ready === true) return;
163
+ this.http.start({ takeoverWebSocket });
164
+ }, Math.max(0, Number(delay) || 0));
165
+ this.fallbackTimer?.unref?.();
166
+ }
167
+
168
+ clearFallbackTimer() {
169
+ if (!this.fallbackTimer) return;
170
+ this.scheduler.clearTimeout(this.fallbackTimer);
171
+ this.fallbackTimer = null;
172
+ }
173
+ }
174
+
175
+ function positiveInteger(value, fallback) {
176
+ const number = Number(value);
177
+ return Number.isFinite(number) && number > 0 ? Math.floor(number) : fallback;
178
+ }