mindwire 0.1.51 → 0.1.53

package/dist/integrations.d.ts

@@ -0,0 +1,72 @@
+import type { Mindwire } from "./client.js";
+import type { Condition } from "./types.js";
+export type IntegrationProvider = "slack" | "teams" | "discord" | "telegram";
+export type IntegrationMode = "notifications" | "commands" | "chat" | "trigger";
+/** Write-only credentials, stored on the daemon. Omitted fields preserve saved values. */
+export interface IntegrationCredentials {
+    botToken?: string;
+    signingSecret?: string;
+    webhookSecret?: string;
+    publicKey?: string;
+    clientSecret?: string;
+}
+export interface IntegrationSpec {
+    name: string;
+    provider: IntegrationProvider;
+    botId: string;
+    mode: IntegrationMode;
+    enabled: boolean;
+    /** Explicit allowlist. Empty lists are rejected. */
+    channelIds: string[];
+    userIds?: string[];
+    /** Slack team, Discord guild, or Microsoft Entra tenant ID. */
+    workspaceId?: string;
+    applicationId?: string;
+    command?: string;
+    /** Forward this bot's lifecycle notifications to destination. */
+    notify: boolean;
+    conditions?: Condition[];
+    destination?: string;
+    /** Owner-configured Microsoft Teams connector URL. */
+    serviceUrl?: string;
+    expectedRevision?: number;
+    credentials?: IntegrationCredentials;
+}
+export interface Integration extends Omit<IntegrationSpec, "credentials" | "expectedRevision"> {
+    id: string;
+    revision: number;
+    hasCredentials: boolean;
+    webhookPath: string;
+}
+export interface IntegrationReceipt {
+    id: string;
+    integrationId: string;
+    channelId: string;
+    userId: string;
+    state: "queued" | "running" | "delivered" | "failed";
+    chatId?: string;
+    runId?: string;
+    error?: string;
+    createdAt: string;
+}
+/** Persistent messaging connections shared with the app and daemon. */
+export declare class IntegrationsApi {
+    private readonly mw;
+    constructor(mw: Mindwire);
+    list(): Promise<Integration[]>;
+    get(id: string): Promise<Integration>;
+    create(spec: IntegrationSpec): Promise<Integration>;
+    /** Complete replacement with optimistic concurrency; omit credentials to preserve them. */
+    update(id: string, spec: IntegrationSpec & {
+        expectedRevision: number;
+    }): Promise<Integration>;
+    delete(id: string): Promise<void>;
+    /** Sends to the configured destination, also useful as a connection test. */
+    send(id: string, text: string): Promise<{
+        sent: boolean;
+    }>;
+    /** Latest 100 redacted delivery receipts. */
+    events(id: string): Promise<IntegrationReceipt[]>;
+    retry(id: string, eventId: string): Promise<IntegrationReceipt>;
+    private path;
+}

package/dist/target/docker.d.ts

@@ -36,7 +36,7 @@ export interface DockerConfig {
     docker?: DockerodeLike;
     /** How to reach the Docker engine (remote host / socket / TLS). Ignored when `docker` is passed. */
     engine?: DockerEngineOptions;
-    /** Create + own a container from this image. Defaults to the SDK-matched MindWire runtime image. */
+    /** Create + own a container from this image. Defaults to Node 24 on Debian; the matching released daemon is installed separately. */
     image?: string;
     /** Image acquisition policy for a container MindWire creates. Defaults to pulling only when absent. */
     pull?: "missing" | "always" | "never";
@@ -104,6 +104,14 @@ interface ContainerLike {
     };
 }
 export interface DockerodeLike {
+    modem: {
+        followProgress(stream: DuplexLike, done: (error: Error | null, output?: Array<{
+            error?: string;
+            errorDetail?: {
+                message?: string;
+            };
+        }>) => void): void;
+    };
     getContainer(id: string): ContainerLike;
     getImage(name: string): {
         inspect(): Promise<unknown>;

package/dist/types.d.ts

@@ -1,6 +1,6 @@
 /**
  * Wire types for the mindwire daemon, mirrored 1:1 from the Go structs in
- * `daemon/internal/agent` and `daemon/internal/session`. The daemon normalizes every
+ * `packages/daemon/internal/agent` and `packages/daemon/internal/session`. The daemon normalizes every
  * agent's native output into these shapes, so the client renders one protocol regardless
  * of which harness (Claude Code, Codex, Copilot CLI, opencode, …) actually ran.
  *
@@ -320,6 +320,8 @@ export interface CommandInvocation {
 }
 /** Per-agent feature matrix. The core switches on some fields; the client reads the rest as UI hints. */
 export interface Capabilities {
+    /** Saved bot instructions and native management tools remain available on resumed turns. */
+    botProfiles?: boolean;
     /** Static harness hint; check nativeSessions.activity() for this session's controls. */
     nativeSession?: import("./native-sessions.js").NativeSessionCapabilities;
     protocol: Protocol;
@@ -463,6 +465,8 @@ export interface CatalogEntry {
     id: string;
     name: string;
     tagline: string;
+    /** Supports persistent Mindwire bot profiles, including subsequent turns. */
+    botProfiles?: boolean;
 }
 /**
  * Which persistent layer a memory file or prompt template lives at. `project` = a working directory
@@ -693,6 +697,15 @@ export interface Notification {
     title: string;
     body: string;
     agent?: string;
+    /** Saved bot identity; agent remains the underlying engine for routing rules. */
+    botId?: string;
+    botName?: string;
+    botIcon?: string;
+    appId?: string;
+    appName?: string;
+    appIcon?: string;
+    eventId?: string;
+    workspaceId?: string;
     chatId?: string;
     runId?: string;
     actions?: Action[];
@@ -1106,6 +1119,9 @@ export interface Health {
     localDesktopVersion?: number;
     /** Workspace registry protocol version; absent on daemons predating workspace metadata. */
     workspaceMetadataVersion?: number;
+    botsVersion?: number;
+    appsVersion?: number;
+    integrationsVersion?: number;
     /** Native installed-harness discovery and atomic workspace.ensureAgent(). */
     agentDiscoveryVersion?: number;
     /** Durable project folders, membership and ordering, with conditional edits. */

package/dist/workspace.d.ts

@@ -1,4 +1,6 @@
 import type { Mindwire } from "./client.js";
+import type { Bot } from "./bots.js";
+import type { AppShortcut } from "./apps.js";
 import { ProjectSyncApi } from "./project-sync.js";
 import { ConversationsApi } from "./conversations.js";
 /** Write-only credentials. Never persisted in operation snapshots or conversation state. */
@@ -185,6 +187,7 @@ export interface ProjectIcon {
 }
 /** Chat membership; transcript content continues to come from /chats/:id/messages. */
 export interface WorkspaceChat extends WorkspaceRecord {
+    botId?: string;
     /** Logical conversation identity; the local id remains unique per workspace. */
     syncId?: string;
     agentId: string;
@@ -205,6 +208,7 @@ export type WorkspaceInput<T extends WorkspaceRecord> = Omit<T, "id" | "workspac
 };
 /** Additive migration. Existing records and deletion tombstones always win over these values. */
 export interface WorkspaceImport {
+    bots?: Bot[];
     agents?: (WorkspaceInput<WorkspaceAgent> & {
         id: string;
     })[];
@@ -242,6 +246,8 @@ export interface ProjectLibraryEdit {
     importIfEmpty?: boolean;
 }
 export interface WorkspaceSnapshot {
+    apps?: AppShortcut[];
+    bots?: Bot[];
     version: number;
     workspaceId: string;
     revision: number;
@@ -308,6 +314,13 @@ export declare class WorkspaceApi {
     editLibrary(edit: ProjectLibraryEdit): Promise<ProjectLibrary>;
     /** Read the saved icon, or preview a candidate relative path within the project. Requires projectIconsVersion >= 1. */
     projectIcon(projectId: string, path?: string): Promise<ProjectIcon>;
+    /** Upload a validated image (base64 content, at most 1 MB). Requires projectIconsVersion >= 2.
+     * Stores the image inside the project; set projects.put(..., { iconPath: result.path }) to select it.
+     */
+    uploadProjectIcon(projectId: string, image: {
+        name: string;
+        content: string;
+    }): Promise<ProjectIcon>;
     /** Start an operation owned by the daemon. The same ID/payload returns the existing operation. */
     createProject(request: ProjectRequest): Promise<ProjectOperation>;
     /** Permanently remove the confirmed project's directory and membership.

package/package.json

@@ -1,19 +1,18 @@
 {
   "name": "mindwire",
-  "version": "0.1.51",
+  "version": "0.1.53",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "bin": {
     "mindwire": "./dist/cli.js"
   },
   "devDependencies": {
-    "@types/node": "26.1.1",
-    "@types/qrcode": "^1.5.5",
-    "@types/ws": "^8.18.1",
-    "tsup": "8.5.1",
-    "typedoc": "^0.28.20",
-    "typedoc-plugin-markdown": "^4.12.0",
-    "typescript": "5.9.3"
+    "@types/node": "26.6.5",
+    "@types/qrcode": "^1.5.6",
+    "@types/ws": "^8.18.2",
+    "tsup": "9.0.0",
+    "typescript": "7.0.2",
+    "dockerode": "^5.0.1"
   },
   "peerDependencies": {
     "dockerode": ">=4.0.0",
@@ -34,7 +33,7 @@
       "require": "./dist/index.cjs"
     }
   },
-  "description": "TypeScript SDK for the MindWire runtime — one client for every coding-agent harness (Claude Code, Codex, Grok Build, opencode).",
+  "description": "Build personal assistants and coding tools on native agent harnesses with one Mindwire runtime API.",
   "engines": {
     "node": ">=18"
   },
@@ -74,9 +73,9 @@
   "type": "module",
   "types": "./dist/index.d.ts",
   "dependencies": {
-    "oblien": "^2.5.0",
+    "oblien": "^2.10.0",
     "qrcode": "^1.5.4",
-    "ws": "^8.18.3"
+    "ws": "^8.22.0"
   },
   "optionalDependencies": {
     "@ngrok/ngrok": "^1.7.0"

package/dist/chunk-TBAZGPSH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/computer/provider-info.ts","../src/computer/directory-http.ts","../src/computer/discovery.ts","../src/computer/service-update.ts"],"names":["delay","join"],"mappings":";;;;;AAKO,SAAS,iBAAA,CAAkB,OAAqB,IAAA,EAAuB;AAC5E,EAAA,OAAO,KAAA,CAAM,IAAA,KAAS,MAAA,GAAS,CAAA,IAAA,EAAO,QAAQ,SAAS,CAAA,CAAA,GACnD,KAAA,CAAM,GAAA,GAAM,aAAa,KAAA,CAAM,GAAG,CAAA,GAAI,CAAA,UAAA,EAAa,MAAM,IAAI,CAAA,CAAA;AACnE;AAGO,SAAS,cAAA,CAAe,OAAqB,IAAA,EAAuC;AACzF,EAAA,IAAI,KAAA,CAAM,IAAA,KAAS,MAAA,EAAQ,OAAO,EAAE,UAAU,QAAA,EAAU,OAAA,EAAS,IAAA,GAAO,YAAA,GAAe,SAAA,EAAU;AACjG,EAAA,OAAO,EAAE,QAAA,EAAU,KAAA,CAAM,IAAA,EAAM,OAAA,EAAS,CAAC,YAAA,EAAc,OAAO,CAAA,CAAE,QAAA,CAAS,MAAM,IAAI,CAAA,IAAK,CAAC,KAAA,CAAM,GAAA,GAAM,cAAc,YAAA,EAAa;AAClI;AAEO,SAAS,sBAAsB,IAAA,EAAsC;AAC1E,EAAA,MAAM,IAAA,GAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,YAAY,YAAA,EAAc,KAAA,EAAO,OAAA,EAAS,MAAA,EAAQ,aAAA,EAAe,MAAA,EAAQ,kBAAA,EAAmB,CAAE,KAAK,QAAQ,CAAA;AAC5I,EAAA,IAAI,IAAA,CAAK,OAAA,KAAY,WAAA,EAAa,OAAO,GAAG,IAAI,CAAA,+GAAA,CAAA;AAChD,EAAA,IAAI,IAAA,CAAK,OAAA,KAAY,SAAA,EAAW,OAAO,GAAG,IAAI,CAAA,gFAAA,CAAA;AAC9C,EAAA,OAAO,GAAG,IAAI,CAAA,wFAAA,CAAA;AAChB;;;ACrBO,IAAM,qBAAA,GAAN,cAAoC,KAAA,CAAM;AAAA,EAC/C,WAAA,CACW,MAAA,EACA,IAAA,EACA,UAAA,GAAa,CAAA,EACtB;AACA,IAAA,KAAA;AAAA,MACE,MAAA,KAAW,CAAA,GACP,mFAAA,GACA,CAAA,4CAAA,EAA+C,IAAI,CAAA,EAAA;AAAA,KACzD;AARS,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAAA,EAOX;AAAA,EATW,MAAA;AAAA,EACA,IAAA;AAAA,EACA,UAAA;AAQb,CAAA;AAGA,eAAsB,gBAAA,CAAoB,GAAA,EAAa,IAAA,EAAc,IAAA,EAAe,MAAA,EAAkC;AACpH,EAAA,IAAI,QAAA;AACJ,EAAA,IAAI;AACF,IAAA,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,GAAM,IAAA,EAAM;AAAA,MACjC,MAAA,EAAQ,MAAA;AAAA,MACR,QAAA,EAAU,OAAA;AAAA,MACV,MAAA,EAAQ,MAAA,GAAS,WAAA,CAAY,GAAA,CAAI,CAAC,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAC,CAAC,CAAA,GAAI,WAAA,CAAY,QAAQ,GAAM,CAAA;AAAA,MACpG,OAAA,EAAS;AAAA,QACP,cAAA,EAAgB,kBAAA;AAAA,QAChB,MAAA,EAAQ;AAAA,OACV;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,MAAA,EAAQ,cAAA,EAAe;AACvB,IAAA,MAAM,IAAI,qBAAA,CAAsB,CAAA,EAAG,aAAa,CAAA;AAAA,EAClD;AACA,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,IAAA,EAAM,SAAA,EAAU;AACxC,EAAA,MAAM,SAAuB,EAAC;AAC9B,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,IAAI;AACF,IAAA,IAAI,MAAA;AACF,MAAA,WAAS;AACP,QAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,QAAA,IAAI,IAAA,EAAM;AACV,QAAA,MAAA,IAAU,KAAA,CAAM,UAAA;AAChB,QAAA,IAAI,SAAS,EAAA,GAAK,IAAA,EAAM,MAAM,IAAI,MAAM,uDAAuD,CAAA;AAC/F,QAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,MACnB;AAAA,EACJ,CAAA,SAAE;AACA,IAAA,KAAK,MAAA,EAAQ,MAAA,EAAO,CAAE,KAAA,CAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AAAA,EACtC;AACA,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,IAAA,CAAK,MAAM,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAA;AAAA,EAC1D,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,qBAAA,CAAsB,QAAA,CAAS,MAAA,EAAQ,kBAAkB,CAAA;AAAA,EACrE;AACA,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,IAAA,MAAM,QAAS,IAAA,EAAqC,KAAA;AACpD,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,KAAU,QAAA,GAAW,QAAS,KAAA,EAAqC,IAAA;AACvF,IAAA,MAAM,aAAa,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AAC7D,IAAA,MAAM,IAAI,qBAAA;AAAA,MACR,QAAA,CAAS,MAAA;AAAA,MACT,OAAO,IAAA,KAAS,QAAA,IAAY,iBAAiB,IAAA,CAAK,IAAI,IAAI,IAAA,GAAO,iBAAA;AAAA,MACjE,MAAA,CAAO,QAAA,CAAS,UAAU,CAAA,GAAI,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,EAAA,EAAI,UAAU,CAAC,CAAA,GAAI;AAAA,KACxE;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;;;ACvDO,IAAM,kBAAA,GAAqB,4BAAA;AAC3B,IAAM,aAAA,GAAgB,8BAA8B,kBAAkB,CAAA,CAAA;AAGtE,IAAM,sBAAsB,CAAC,SAAA,KAClC,SAA8B,IAAA,CAAK,SAAA,EAAW,oCAAoC,CAAC;AAIrF,eAAsB,uBAAA,CAAwB,WAAmB,KAAA,EAA2C;AAC1G,EAAA,MAAM,UAAA,GAAa,EAAE,GAAG,KAAA,EAAO,GAAA,EAAK,KAAA,CAAM,GAAA,GAAM,YAAA,CAAa,KAAA,CAAM,GAAG,CAAA,GAAI,MAAA,EAAU;AACpF,EAAA,MAAM,SAAA,CAAU,IAAA,CAAK,SAAA,EAAW,oCAAoC,GAAG,UAAU,CAAA;AACnF;AAEO,SAAS,aAAa,KAAA,EAAuB;AAClD,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,IAAI,IAAI,KAAK,CAAA;AAAA,EACrB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,MAAM,sCAAsC,CAAA;AAAA,EACxD;AACA,EAAA,IACE,KAAA,CAAM,MAAA,GAAS,IAAA,IACf,UAAA,CAAW,IAAA,CAAK,KAAK,CAAA,IACrB,GAAA,CAAI,QAAA,IACJ,GAAA,CAAI,QAAA,IACJ,GAAA,CAAI,UACJ,GAAA,CAAI,IAAA,IACH,GAAA,CAAI,QAAA,KAAa,QAAA,IAChB,EAAE,GAAA,CAAI,QAAA,KAAa,OAAA,IAAW,CAAC,WAAA,EAAa,WAAA,EAAa,OAAO,CAAA,CAAE,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAA,CAAA,EACzF;AACA,IAAA,MAAM,IAAI,MAAM,yEAAyE,CAAA;AAAA,EAC3F;AACA,EAAA,IAAI,GAAA,CAAI,QAAA,KAAa,GAAA,EAAK,GAAA,CAAI,QAAA,GAAW,kBAAA;AACzC,EAAA,IAAI,GAAA,CAAI,QAAA,CAAS,QAAA,CAAS,GAAG,KAAK,GAAA,CAAI,QAAA,CAAS,QAAA,CAAS,IAAI,CAAA,IAAK,GAAA,CAAI,QAAA,CAAS,QAAA,CAAS,GAAG,CAAA,EAAG;AAC3F,IAAA,MAAM,IAAI,MAAM,2DAA2D,CAAA;AAAA,EAC7E;AACA,EAAA,OAAO,GAAA,CAAI,IAAA;AACb;AAEA,eAAsB,uBAAuB,OAAA,EAQR;AACnC,EAAA,MAAM,IAAA,GAAO,MAAM,kBAAA,CAAmB,IAAA,CAAK,OAAA,CAAQ,SAAA,EAAW,sBAAsB,CAAA,EAAG,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAQ,CAAA;AACjH,EAAA,IAAI;AACF,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,MAAM,OAAA,CAAQ,QAAA,CAAS,QAAA,CAAS,SAAA,EAAU;AAAA,IACrD,SAAS,KAAA,EAAO;AACd,MAAA,IAAK,MAA8B,MAAA,KAAW,GAAA;AAC5C,QAAA,MAAM,IAAI,MAAM,yEAAyE,CAAA;AAC3F,MAAA,MAAM,KAAA;AAAA,IACR;AACA,IAAA,MAAM,UAAA,GAAa,MAAM,mBAAA,CAAoB,OAAA,CAAQ,SAAS,CAAA;AAC9D,IAAA,IAAI,OAAA,CAAQ,SAAA,IAAa,UAAA,EAAY,OAAA,KAAY,OAAO,OAAO,MAAA;AAG/D,IAAA,MAAM,GAAA,GAAM,YAAA;AAAA,MACV,OAAA,CAAQ,OAAO,OAAA,CAAQ,GAAA,CAAI,0BAA0B,MAAA,CAAO,GAAA,IAAO,YAAY,GAAA,IAAO;AAAA,KACxF;AACA,IAAA,IACE,MAAA,CAAO,GAAA,IACP,MAAA,CAAO,GAAA,KAAQ,GAAA,KACd,MAAA,CAAO,OAAA,IAAA,CAAY,MAAA,CAAO,QAAA,IAAY,CAAA,OAAQ,MAAA,CAAO,iBAAA,IAAqB,CAAA,CAAA,CAAA,EAC3E;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAM,wBAAwB,OAAA,CAAQ,SAAA,EAAW,EAAE,OAAA,EAAS,IAAA,EAAM,KAAK,CAAA;AACvE,IAAA,IAAI,CAAC,MAAA,CAAO,OAAA,IAAW,MAAA,CAAO,GAAA,KAAQ,OAAO,MAAA,CAAO,KAAA,EAAO,QAAA,CAAS,YAAY,CAAA,EAAG;AACjF,MAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,yCAAA,EAA4C,IAAI,IAAI,GAAG,CAAA,CAAE,IAAI,CAAA,MAAA,CAAG,CAAA;AACrF,MAAA,IAAI;AACF,QAAA,MAAM,SAAA,GAAY,MAAM,gBAAA,CAAwC,GAAA,EAAK,0BAAA,EAA4B;AAAA,UAC/F,aAAa,MAAA,CAAO;AAAA,SACtB,EAAG,QAAQ,MAAM,CAAA;AACjB,QAAA,IACE,OAAO,SAAA,EAAW,SAAA,KAAc,QAAA,IAChC,SAAA,CAAU,SAAA,CAAU,MAAA,GAAS,EAAA,IAC7B,SAAA,CAAU,SAAA,CAAU,MAAA,GAAS,IAAA,EAC7B;AACA,UAAA,MAAM,IAAI,MAAM,iEAAiE,CAAA;AAAA,QACnF;AACA,QAAA,MAAM,KAAA,GAAQ,MAAM,OAAA,CAAQ,QAAA,CAAS,SAAS,mBAAA,CAAoB,GAAA,EAAK,UAAU,SAAS,CAAA;AAC1F,QAAA,MAAM,WAAW,MAAM,gBAAA,CAA0C,KAAK,gBAAA,EAAkB,KAAA,EAAO,QAAQ,MAAM,CAAA;AAC7G,QAAA,IAAI,QAAA,EAAU,gBAAgB,MAAA,CAAO,WAAA;AACnC,UAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,MACtE,SAAS,KAAA,EAAO;AACd,QAAA,IAAI,iBAAiB,qBAAA,EAAuB;AAC1C,UAAA,IAAI,KAAA,CAAM,MAAA,KAAW,GAAA,IAAO,KAAA,CAAM,MAAA,KAAW,GAAA;AAC3C,YAAA,MAAM,IAAI,KAAA;AAAA,cACR;AAAA,aACF;AACF,UAAA,IAAI,MAAM,MAAA,KAAW,GAAA;AACnB,YAAA,MAAM,IAAI,KAAA;AAAA,cACR;AAAA,aACF;AACF,UAAA,IAAI,MAAM,IAAA,KAAS,kBAAA;AACjB,YAAA,MAAM,IAAI,KAAA;AAAA,cACR;AAAA,aACF;AACF,UAAA,IAAI,KAAA,CAAM,MAAA,KAAW,GAAA,IAAO,KAAA,CAAM,MAAA,KAAW,GAAA;AAC3C,YAAA,MAAM,IAAI,KAAA;AAAA,cACR;AAAA,aACF;AACF,UAAA,IAAI,MAAM,MAAA,KAAW,GAAA;AACnB,YAAA,MAAM,IAAI,KAAA;AAAA,cACR;AAAA,aACF;AACF,UAAA,IAAI,MAAM,MAAA,KAAW,GAAA;AACnB,YAAA,MAAM,IAAI,KAAA;AAAA,cACR;AAAA,aACF;AAAA,QACJ;AACA,QAAA,MAAM,KAAA;AAAA,MACR;AACA,MAAA,MAAA,GAAS,MAAM,OAAA,CAAQ,QAAA,CAAS,QAAA,CAAS,kBAAA,CAAmB,MAAM,GAAG,CAAA;AAAA,IACvE;AACA,IAAA,IAAI,OAAA,CAAQ,kBAAA,KAAuB,KAAA,EAAO,OAAO,MAAA;AACjD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA;AAC9B,IAAA,OAAO,IAAA,CAAK,GAAA,EAAI,GAAI,QAAA,EAAU;AAC5B,MAAA,MAAA,GAAS,MAAM,OAAA,CAAQ,QAAA,CAAS,QAAA,CAAS,SAAA,EAAU;AACnD,MAAA,IAAI,MAAA,CAAO,WAAW,MAAA,CAAO,QAAA,IAAY,OAAO,iBAAA,KAAsB,MAAA,CAAO,UAAU,OAAO,MAAA;AAC9F,MAAA,IAAI,MAAA,CAAO,OAAO,QAAA,CAAS,YAAY,KAAK,MAAA,CAAO,KAAA,EAAO,SAAS,gBAAgB,CAAA;AACjF,QAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAA;AAC9B,MAAA,MAAMA,WAAM,GAAA,EAAK,KAAA,CAAA,EAAW,EAAE,MAAA,EAAQ,OAAA,CAAQ,QAAQ,CAAA;AAAA,IACxD;AACA,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF,CAAA,SAAE;AACA,IAAA,MAAM,MAAM,KAAA,EAAM;AAAA,EACpB;AACF;AAEA,eAAsB,uBAAA,CAAwB,SAAA,EAAmB,QAAA,EAAoB,SAAA,GAAY,KAAA,EAAyC;AACxI,EAAA,MAAM,OAAO,MAAM,kBAAA,CAAmB,IAAA,CAAK,SAAA,EAAW,sBAAsB,CAAC,CAAA;AAC7E,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,QAAA,CAAS,SAAA,EAAU;AACjD,IAAA,MAAM,UAAA,GAAa,MAAM,mBAAA,CAAoB,SAAS,CAAA;AACtD,IAAA,IAAI,SAAA,IAAa,UAAA,EAAY,OAAA,KAAY,IAAA,EAAM,OAAO,MAAA;AACtD,IAAA,MAAM,uBAAA,CAAwB,SAAA,EAAW,EAAE,OAAA,EAAS,KAAA,EAAO,KAAK,MAAA,CAAO,GAAA,IAAO,UAAA,EAAY,GAAA,EAAK,CAAA;AAC/F,IAAA,IAAI,CAAC,MAAA,CAAO,OAAA,EAAS,OAAO,MAAA;AAC5B,IAAA,OAAO,MAAM,QAAA,CAAS,QAAA,CAAS,kBAAA,CAAmB,KAAK,CAAA;AAAA,EACzD,CAAA,SAAE;AAAU,IAAA,MAAM,MAAM,KAAA,EAAM;AAAA,EAAG;AACnC;AAKA,eAAsB,0BAA0B,OAAA,EAE9B;AAChB,EAAA,MAAM,UAAA,GAAa,MAAM,mBAAA,CAAoB,OAAA,CAAQ,SAAS,CAAA;AAC9D,EAAA,MAAM,EAAE,WAAW,MAAA,EAAO,GAAI,MAAM,OAAA,CAAQ,QAAA,CAAS,SAAS,IAAA,EAAK;AACnE,EAAA,MAAM,SAAA,GAAY,QAAQ,MAAA,CAAO,KAAA,CAAM,SAAS,YAAA,IAAgB,CAAC,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,GAAA;AACtF,EAAA,MAAM,UAAU,UAAA,EAAY,OAAA,KAAY,QAAQ,OAAA,IAAW,SAAA,IAAa,CAAC,MAAA,EAAQ,GAAA,CAAA;AACjF,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,IAAI,UAAA,EAAY,OAAA,KAAY,KAAA,IAAS,MAAA,EAAQ,OAAA,EAAS,MAAM,uBAAA,CAAwB,OAAA,CAAQ,SAAA,EAAW,OAAA,CAAQ,QAAA,EAAU,IAAI,CAAA;AAC7H,IAAA;AAAA,EACF;AACA,EAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,MAAM,+DAA+D,CAAA;AAC5F,EAAA,MAAM,GAAA,GAAM,aAAa,UAAA,EAAY,GAAA,IAAO,QAAQ,GAAA,CAAI,sBAAA,IAA0B,MAAA,CAAO,GAAA,IAAO,aAAa,CAAA;AAC7G,EAAA,IAAI,MAAA,CAAO,OAAA,IAAW,MAAA,CAAO,GAAA,KAAQ,GAAA,IAAO,CAAC,MAAA,CAAO,KAAA,EAAO,QAAA,CAAS,YAAY,CAAA,EAAG;AACnF,EAAA,MAAM,sBAAA,CAAuB;AAAA,IAAE,GAAG,OAAA;AAAA,IAAS,GAAA;AAAA,IAAK,kBAAA,EAAoB,KAAA;AAAA,IAAO,SAAA,EAAW,IAAA;AAAA,IACpF,MAAA,EAAQ;AAAA,MAAE,KAAA,GAAQ;AAAA,MAAC,CAAA;AAAA,MAAG,IAAA,GAAO;AAAA,MAAC,CAAA;AAAA,MAAG,UAAU,YAAY;AAAE,QAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,MAAG,CAAA;AAAA,MACzG,QAAQ,YAAY;AAAE,QAAA,MAAM,IAAI,MAAM,+BAA+B,CAAA;AAAA,MAAG;AAAA;AAAE,GAAG,CAAA;AACnF;AAEO,SAAS,qBAAqB,MAAA,EAAqD;AACxF,EAAA,IAAI,CAAC,MAAA,EAAQ,OAAA,EAAS,OAAO,8EAAA;AAC7B,EAAA,IAAI,MAAA,CAAO,KAAA,EAAO,OAAO,MAAA,CAAO,KAAA;AAChC,EAAA,OAAO,OAAO,QAAA,IAAY,MAAA,CAAO,iBAAA,KAAsB,MAAA,CAAO,WAC1D,wGAAA,GACA,mDAAA;AACN;ACtLO,SAAS,aAAa,MAAA,EAA8D;AACzF,EAAA,OAAO,CAAC,CAAC,MAAA,IAAU,CAAC,QAAA,EAAU,aAAA,EAAe,SAAA,EAAW,YAAY,CAAA,CAAE,QAAA,CAAS,MAAA,CAAO,MAAM,CAAA;AAC9F;AAIA,eAAsB,kBAAA,CAAmB,MAAA,EAAsB,OAAA,EAAiB,KAAA,GAAQ,KAAA,EAAgC;AACtH,EAAA,KAAA,IAAS,OAAA,GAAU,KAAK,OAAA,EAAA,EAAW;AACjC,IAAA,MAAM,QAAA,GAAW,MAAM,MAAA,CAAO,QAAA,CAAS,YAAA,EAAa;AACpD,IAAA,IAAI,aAAa,QAAQ,CAAA,KAAM,CAAC,KAAA,IAAS,QAAA,CAAS,QAAQ,OAAO,QAAA;AACjE,IAAA,IAAI;AACF,MAAA,OAAO,MAAM,MAAA,CAAO,QAAA,CAAS,aAAA,CAAc,YAAA,CAAa,QAAQ,CAAA,GAAI,QAAA,CAAS,OAAA,GAAU,OAAA,EAAS,EAAE,KAAA,EAAO,CAAA;AAAA,IAC3G,SAAS,KAAA,EAAO;AACd,MAAA,IAAK,KAAA,CAA8B,MAAA,KAAW,GAAA,IAAO,OAAA,IAAW,GAAG,MAAM,KAAA;AAAA,IAE3E;AAAA,EACF;AACF;AAMA,eAAsB,eAAe,OAAA,EAKR;AAC3B,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,OAAA,CAAQ,MAAM,EAAE,CAAA;AAChD,EAAA,IAAI,CAAC,sCAAsC,IAAA,CAAK,OAAO,GAAG,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAC7H,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA,KAAY,MAAM,cAAA,CAAe,QAAQ,SAAS,CAAA,CAAA;AAC1E,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,IAAK,QAAQ,SAAA,IAAa,IAAA,CAAA;AACpD,EAAA,IAAI,WAAuC,IAAA,GAAO,EAAA;AAClD,EAAA,WAAS;AACP,IAAA,OAAA,CAAQ,QAAQ,cAAA,EAAe;AAC/B,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,EAAQ;AAC7B,MAAA,MAAM,SAAA,GAAA,CAAa,MAAM,MAAA,CAAO,MAAA,IAAU,OAAA,CAAQ,OAAA,CAAQ,MAAM,EAAE,CAAA;AAClE,MAAA,IAAI,cAAc,OAAA,IAAW,CAAC,QAAQ,cAAA,IAAkB,cAAA,CAAe,WAAW,OAAO,CAAA;AACvF,QAAA,OAAO,EAAE,OAAA,EAAS,SAAA,EAAW,QAAA,EAAU,IAAA,EAAK;AAC9C,MAAA,SAAA,GAAY,MAAM,kBAAA,CAAmB,MAAA,EAAQ,OAAA,EAAS,QAAQ,KAAK,CAAA;AAAA,IACrE;AAGA,IAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAyBC,IAAAA,CAAK,QAAQ,SAAA,EAAW,sBAAsB,CAAC,CAAA,IAAK,SAAA;AAClG,IAAA,IAAI,MAAA,CAAO,EAAA,KAAO,SAAA,CAAU,EAAA,EAAI;AAE9B,MAAA,SAAA,GAAY,MAAA;AAAA,IACd,CAAA,MAAO;AACL,MAAA,MAAM,MAAM,CAAA,EAAG,MAAA,CAAO,EAAE,CAAA,CAAA,EAAI,OAAO,MAAM,CAAA,CAAA;AACzC,MAAA,IAAI,SAAS,GAAA,EAAK;AAAE,QAAA,IAAA,GAAO,GAAA;AAAK,QAAA,OAAA,CAAQ,aAAa,MAAM,CAAA;AAAA,MAAG;AAC9D,MAAA,IAAI,MAAA,CAAO,WAAW,QAAA,EAAU,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,SAAS,8DAA8D,CAAA;AAC9H,MAAA,IAAI,MAAA,CAAO,WAAW,UAAA,EAAY;AAChC,QAAA,SAAA,GAAY,MAAA;AACZ,QAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,QAAA,EAAU;AAAA,MAC7B,WAAW,CAAC,OAAA,CAAQ,KAAA,IAAS,MAAA,CAAO,WAAW,SAAA,EAAW;AACxD,QAAA,OAAO,EAAE,OAAA,EAAS,QAAA,EAAU,KAAA,EAAO,MAAA,EAAO;AAAA,MAC5C;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,KAAI,IAAK,QAAA,SAAiB,EAAE,OAAA,EAAS,QAAA,EAAU,KAAA,EAAO,MAAA,EAAO;AACtE,IAAA,MAAMD,WAAM,GAAA,EAAK,MAAA,EAAW,EAAE,MAAA,EAAQ,OAAA,CAAQ,QAAQ,CAAA;AAAA,EACxD;AACF;AAEO,SAAS,eAAe,MAAA,EAAgC;AAC7D,EAAA,MAAM,KAAA,GAAkD;AAAA,IACtD,IAAA,EAAM,OAAA;AAAA,IAAS,MAAA,EAAQ,QAAA;AAAA,IAAU,WAAA,EAAa,oCAAA;AAAA,IAC9C,OAAA,EAAS,mCAAA;AAAA,IAAqC,UAAA,EAAY,0BAAA;AAAA,IAC1D,QAAA,EAAU,WAAA;AAAA,IAAa,MAAA,EAAQ;AAAA,GACjC;AACA,EAAA,OAAO,GAAG,MAAA,CAAO,OAAO,SAAM,KAAA,CAAM,MAAA,CAAO,MAAM,CAAC,CAAA,CAAA;AACpD","file":"chunk-TBAZGPSH.js","sourcesContent":["import type { ComputerConnectionInfo } from \"../computer.js\";\nimport type { RelayOptions } from \"./relay.js\";\nimport { websocketURL } from \"./relay.js\";\n\n/** Credential renewal does not change the address already saved by the phone. */\nexport function connectionAddress(relay: RelayOptions, host?: string): string {\n  return relay.kind === \"none\" ? `ssh:${host ?? \"network\"}`\n    : relay.url ? websocketURL(relay.url) : `temporary:${relay.kind}`;\n}\n\n/** Public, non-secret metadata. Route/SSH identity is independent of provider credentials. */\nexport function connectionInfo(relay: RelayOptions, host?: string): ComputerConnectionInfo {\n  if (relay.kind === \"none\") return { provider: \"direct\", address: host ? \"persistent\" : \"network\" };\n  return { provider: relay.kind, address: [\"cloudflare\", \"ngrok\"].includes(relay.kind) && !relay.url ? \"temporary\" : \"persistent\" };\n}\n\nexport function connectionDescription(info: ComputerConnectionInfo): string {\n  const name = { oblien: \"Oblien\", cloudflare: \"Cloudflare\", ngrok: \"ngrok\", custom: \"Your tunnel\", direct: \"Direct SSH / VPN\" }[info.provider];\n  if (info.address === \"temporary\") return `${name} · temporary address. For reconnect after a restart, run mindwire connection to choose a persistent address.`;\n  if (info.address === \"network\") return `${name} · reachable network required. Use a VPN hostname for access across networks.`;\n  return `${name} · persistent address. Saved phones retry automatically when this computer is online.`;\n}\n","export class DirectoryRequestError extends Error {\n  constructor(\n    readonly status: number,\n    readonly code: string,\n    readonly retryAfter = 0,\n  ) {\n    super(\n      status === 0\n        ? \"Couldn't reach the address directory securely. Check its HTTPS address and retry.\"\n        : `The address directory rejected the request (${code}).`,\n    );\n  }\n}\n\n/** Bounded, same-origin requests. No redirects, cookie jar or retained credentials. */\nexport async function directoryRequest<T>(url: string, path: string, body: unknown, signal?: AbortSignal): Promise<T> {\n  let response: Response;\n  try {\n    response = await fetch(url + path, {\n      method: \"POST\",\n      redirect: \"error\",\n      signal: signal ? AbortSignal.any([signal, AbortSignal.timeout(10_000)]) : AbortSignal.timeout(10_000),\n      headers: {\n        \"Content-Type\": \"application/json\",\n        Accept: \"application/json\",\n      },\n      body: JSON.stringify(body),\n    });\n  } catch {\n    signal?.throwIfAborted();\n    throw new DirectoryRequestError(0, \"unreachable\");\n  }\n  const reader = response.body?.getReader();\n  const chunks: Uint8Array[] = [];\n  let length = 0;\n  try {\n    if (reader)\n      for (;;) {\n        const { done, value } = await reader.read();\n        if (done) break;\n        length += value.byteLength;\n        if (length > 64 * 1024) throw new Error(\"The address directory returned an oversized response.\");\n        chunks.push(value);\n      }\n  } finally {\n    void reader?.cancel().catch(() => {});\n  }\n  let data: unknown;\n  try {\n    data = JSON.parse(Buffer.concat(chunks).toString(\"utf8\"));\n  } catch {\n    throw new DirectoryRequestError(response.status, \"invalid_response\");\n  }\n  if (!response.ok) {\n    const error = (data as { error?: unknown } | null)?.error;\n    const code = typeof error === \"string\" ? error : (error as { code?: unknown } | null)?.code;\n    const retryAfter = Number(response.headers.get(\"Retry-After\"));\n    throw new DirectoryRequestError(\n      response.status,\n      typeof code === \"string\" && /^[a-z_]{1,64}$/.test(code) ? code : \"directory_error\",\n      Number.isFinite(retryAfter) ? Math.max(0, Math.min(60, retryAfter)) : 0,\n    );\n  }\n  return data as T;\n}\n","import { join } from \"node:path\";\nimport { setTimeout as delay } from \"node:timers/promises\";\nimport type { Mindwire } from \"../client.js\";\nimport type { ComputerDiscoveryStatus } from \"../computer.js\";\nimport { acquireProcessLock } from \"./lock.js\";\nimport type { SetupPrompt } from \"./setup-prompt.js\";\nimport { directoryRequest, DirectoryRequestError } from \"./directory-http.js\";\nimport { readJSON, writeJSON, type ComputerConfig } from \"./lifecycle.js\";\n\nexport const DIRECTORY_API_PATH = \"/api/computer-directory/v1\";\nexport const DIRECTORY_URL = `https://console.mindwire.sh${DIRECTORY_API_PATH}`;\n\nexport interface DiscoveryPreference { enabled: boolean; url?: string }\nexport const discoveryPreference = (directory: string) =>\n  readJSON<DiscoveryPreference>(join(directory, \"computer-discovery-preference.json\"));\n\n/** Desired setup is durable even if enrollment is temporarily offline. The\n * daemon remains the authority for signed publications and phone access. */\nexport async function saveDiscoveryPreference(directory: string, value: DiscoveryPreference): Promise<void> {\n  const preference = { ...value, url: value.url ? directoryURL(value.url) : undefined };\n  await writeJSON(join(directory, \"computer-discovery-preference.json\"), preference);\n}\n\nexport function directoryURL(value: string): string {\n  let url: URL;\n  try {\n    url = new URL(value);\n  } catch {\n    throw new Error(\"Enter the directory's HTTPS API URL.\");\n  }\n  if (\n    value.length > 2048 ||\n    /[\\s\\x00]/.test(value) ||\n    url.username ||\n    url.password ||\n    url.search ||\n    url.hash ||\n    (url.protocol !== \"https:\" &&\n      !(url.protocol === \"http:\" && [\"localhost\", \"127.0.0.1\", \"[::1]\"].includes(url.hostname)))\n  ) {\n    throw new Error(\"Use an HTTPS directory URL without credentials, a query, or a fragment.\");\n  }\n  if (url.pathname === \"/\") url.pathname = DIRECTORY_API_PATH;\n  if (url.pathname.endsWith(\"/\") || url.pathname.includes(\"//\") || url.pathname.includes(\"%\")) {\n    throw new Error(\"Use the exact directory API URL without a trailing slash.\");\n  }\n  return url.href;\n}\n\nexport async function enableAddressDiscovery(options: {\n  directory: string;\n  computer: Mindwire;\n  prompt: SetupPrompt;\n  url?: string;\n  waitForPublication?: boolean;\n  signal?: AbortSignal;\n  reconcile?: boolean;\n}): Promise<ComputerDiscoveryStatus> {\n  const lock = await acquireProcessLock(join(options.directory, \"discovery-setup.lock\"), { signal: options.signal });\n  try {\n    let status: ComputerDiscoveryStatus;\n    try {\n      status = await options.computer.computer.discovery();\n    } catch (error) {\n      if ((error as { status?: number }).status === 404)\n        throw new Error(\"Update the Mindwire service before enabling automatic address recovery.\");\n      throw error;\n    }\n    const preference = await discoveryPreference(options.directory);\n    if (options.reconcile && preference?.enabled === false) return status;\n    // Preserve a saved private directory across upgrades. Credentials belonging\n    // to another provider are never read by this flow.\n    const url = directoryURL(\n      options.url ?? process.env.MINDWIRE_DIRECTORY_URL ?? status.url ?? preference?.url ?? DIRECTORY_URL,\n    );\n    if (\n      status.url &&\n      status.url !== url &&\n      (status.enabled || (status.sequence ?? 0) !== (status.publishedSequence ?? 0))\n    ) {\n      throw new Error(\n        \"Disable the current directory with mindwire discovery disable and wait for its withdrawal before changing the directory URL.\",\n      );\n    }\n    await saveDiscoveryPreference(options.directory, { enabled: true, url });\n    if (!status.enabled || status.url !== url || status.error?.includes(\"enrollment\")) {\n      options.prompt.print(`Enabling encrypted address recovery with ${new URL(url).host}…`);\n      try {\n        const challenge = await directoryRequest<{ challenge: string }>(url, \"/registrations/challenge\", {\n          directoryId: status.directoryId,\n        }, options.signal);\n        if (\n          typeof challenge?.challenge !== \"string\" ||\n          challenge.challenge.length < 16 ||\n          challenge.challenge.length > 2048\n        ) {\n          throw new Error(\"The address directory returned an invalid enrollment challenge.\");\n        }\n        const proof = await options.computer.computer.directoryEnrollment(url, challenge.challenge);\n        const enrolled = await directoryRequest<{ directoryId: string }>(url, \"/registrations\", proof, options.signal);\n        if (enrolled?.directoryId !== status.directoryId)\n          throw new Error(\"The directory acknowledged a different computer.\");\n      } catch (error) {\n        if (error instanceof DirectoryRequestError) {\n          if (error.status === 404 || error.status === 501)\n            throw new Error(\n              \"The address directory isn't available at this URL. Your existing connection still works; retry after the backend is deployed.\",\n            );\n          if (error.status === 409)\n            throw new Error(\n              \"This computer's directory registration is revoked or conflicts with its saved identity. Contact the directory operator.\",\n            );\n          if (error.code === \"account_required\")\n            throw new Error(\n              \"This directory still requires an account. Update its Mindwire backend to enable key-based registration, or choose another directory with --directory-url.\",\n            );\n          if (error.status === 401 || error.status === 403)\n            throw new Error(\n              \"The directory couldn't verify this computer's key or challenge. Retry enrollment.\",\n            );\n          if (error.status === 429)\n            throw new Error(\n              \"The directory's registration limit was reached. Retry later or use another directory.\",\n            );\n          if (error.status === 503)\n            throw new Error(\n              \"The directory is temporarily unavailable or at capacity. Your existing connection still works.\",\n            );\n        }\n        throw error;\n      }\n      status = await options.computer.computer.configureDiscovery(true, url);\n    }\n    if (options.waitForPublication === false) return status;\n    const deadline = Date.now() + 15_000;\n    while (Date.now() < deadline) {\n      status = await options.computer.computer.discovery();\n      if (status.enabled && status.sequence && status.publishedSequence === status.sequence) return status;\n      if (status.error?.includes(\"enrollment\") || status.error?.includes(\"older revision\"))\n        throw new Error(status.error);\n      await delay(250, undefined, { signal: options.signal });\n    }\n    throw new Error(\n      \"Address recovery is configured and will retry in the background. Run mindwire discovery status to check publication.\",\n    );\n  } finally {\n    await lock?.close();\n  }\n}\n\nexport async function disableAddressDiscovery(directory: string, computer: Mindwire, reconcile = false): Promise<ComputerDiscoveryStatus> {\n  const lock = await acquireProcessLock(join(directory, \"discovery-setup.lock\"));\n  try {\n    const status = await computer.computer.discovery();\n    const preference = await discoveryPreference(directory);\n    if (reconcile && preference?.enabled === true) return status;\n    await saveDiscoveryPreference(directory, { enabled: false, url: status.url ?? preference?.url });\n    if (!status.enabled) return status;\n    return await computer.computer.configureDiscovery(false);\n  } finally { await lock?.close(); }\n}\n\n/** Runs once after startup and retries failed enrollment in the controller. A\n * healthy setup makes only a local status read: publication/renewal stays in Go.\n * Direct/VPN/custom connections never opt into a hosted directory implicitly. */\nexport async function reconcileAddressDiscovery(options: {\n  directory: string; config: ComputerConfig; computer: Mindwire; signal?: AbortSignal;\n}): Promise<void> {\n  const preference = await discoveryPreference(options.directory);\n  const { discovery: status } = await options.computer.computer.info();\n  const automatic = options.config.relay.kind === \"cloudflare\" && !options.config.relay.url;\n  const enabled = preference?.enabled ?? (status?.enabled || automatic && !status?.url);\n  if (!enabled) {\n    if (preference?.enabled === false && status?.enabled) await disableAddressDiscovery(options.directory, options.computer, true);\n    return;\n  }\n  if (!status) throw new Error(\"Update the Mindwire service to enable automatic reconnection.\");\n  const url = directoryURL(preference?.url ?? process.env.MINDWIRE_DIRECTORY_URL ?? status.url ?? DIRECTORY_URL);\n  if (status.enabled && status.url === url && !status.error?.includes(\"enrollment\")) return;\n  await enableAddressDiscovery({ ...options, url, waitForPublication: false, reconcile: true,\n    prompt: { print() {}, open() {}, question: async () => { throw new Error(\"Unexpected interactive setup.\"); },\n      secret: async () => { throw new Error(\"Unexpected interactive setup.\"); } } });\n}\n\nexport function discoveryDescription(status: ComputerDiscoveryStatus | undefined): string {\n  if (!status?.enabled) return \"Automatic address recovery is off. Enable it with mindwire discovery enable.\";\n  if (status.error) return status.error;\n  return status.sequence && status.publishedSequence === status.sequence\n    ? \"Encrypted address recovery is on. Saved phones can find this computer when its tunnel address changes.\"\n    : \"Publishing the computer's encrypted address…\";\n}\n","import { join } from \"node:path\";\nimport { setTimeout as delay } from \"node:timers/promises\";\nimport type { ComputerUpdate } from \"../computer.js\";\nimport type { Mindwire } from \"../client.js\";\nimport { computerClient, readJSON } from \"./lifecycle.js\";\nimport { versionAtLeast } from \"../version.js\";\n\ntype UpdateClient = Pick<Mindwire, \"health\" | \"computer\">;\nexport function activeUpdate(update: ComputerUpdate | undefined): update is ComputerUpdate {\n  return !!update && [\"queued\", \"downloading\", \"waiting\", \"restarting\"].includes(update.status);\n}\n\n/** The daemon arbitrates requests. Join an earlier version before requesting the\n * next; promoting a request never creates a second download or bypasses its lease. */\nexport async function queueServiceUpdate(client: UpdateClient, version: string, force = false): Promise<ComputerUpdate> {\n  for (let attempt = 0; ; attempt++) {\n    const previous = await client.computer.updateStatus();\n    if (activeUpdate(previous) && (!force || previous.force)) return previous;\n    try {\n      return await client.computer.requestUpdate(activeUpdate(previous) ? previous.version : version, { force });\n    } catch (error) {\n      if ((error as { status?: number }).status !== 409 || attempt >= 2) throw error;\n      // Another caller won admission. Read the authoritative request and join it.\n    }\n  }\n}\n\nexport interface ServiceUpdateResult { version: string; complete: boolean; update?: ComputerUpdate }\n\n/** A CLI may close after queuing: the controller owns download/restart. Human\n * callers get a bounded result, including the exact older request being joined. */\nexport async function updateComputer(options: {\n  directory: string; version: string; force?: boolean; allowDowngrade?: boolean;\n  onProgress?: (update: ComputerUpdate) => void; signal?: AbortSignal; timeoutMs?: number;\n  connect?: () => Promise<UpdateClient>;\n}):\nPromise<ServiceUpdateResult> {\n  const version = options.version.replace(/^v/, \"\");\n  if (!/^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) throw new Error(\"Enter a Mindwire release version, such as 0.1.38.\");\n  const connect = options.connect ?? (() => computerClient(options.directory));\n  const deadline = Date.now() + (options.timeoutMs ?? 120_000);\n  let requested: ComputerUpdate | undefined, last = \"\";\n  for (;;) {\n    options.signal?.throwIfAborted();\n    if (!requested) {\n      const client = await connect();\n      const installed = (await client.health()).version.replace(/^v/, \"\");\n      if (installed === version || !options.allowDowngrade && versionAtLeast(installed, version))\n        return { version: installed, complete: true };\n      requested = await queueServiceUpdate(client, version, options.force);\n    }\n    // Progress survives the short API outage during restart. Only the daemon\n    // accepts new requests; this read never changes or clears its status.\n    const update = await readJSON<ComputerUpdate>(join(options.directory, \"computer-update.json\")) ?? requested;\n    if (update.id !== requested.id) {\n      // A concurrent update completed/advanced first. Recheck the live service.\n      requested = undefined;\n    } else {\n      const key = `${update.id}:${update.status}`;\n      if (last !== key) { last = key; options.onProgress?.(update); }\n      if (update.status === \"failed\") throw new Error(update.error ?? \"The service update failed. Run mindwire inspect for details.\");\n      if (update.status === \"complete\") {\n        requested = undefined;\n        if (Date.now() < deadline) continue;\n      } else if (!options.force && update.status === \"waiting\") {\n        return { version, complete: false, update };\n      }\n    }\n    if (Date.now() >= deadline) return { version, complete: false, update };\n    await delay(500, undefined, { signal: options.signal });\n  }\n}\n\nexport function updateProgress(update: ComputerUpdate): string {\n  const phase: Record<ComputerUpdate[\"status\"], string> = {\n    idle: \"Ready\", queued: \"Queued\", downloading: \"Downloading verified release…\",\n    waiting: \"Waiting for active work to finish\", restarting: \"Restarting service…\",\n    complete: \"Installed\", failed: \"Update failed\",\n  };\n  return `${update.version} · ${phase[update.status]}`;\n}\n"]}