remote-pi 0.1.3 → 0.2.0

package/dist/session/broker_remote.js

@@ -0,0 +1,397 @@
+import { envelope, uuidv7 } from "./envelope.js";
+/**
+ * Plan/25 Wave B/C — cross-PC broker.
+ *
+ * Maintains a cache of `<pc_label> → { peers, pc_pubkey, ts }` populated
+ * by `peers_update` envelopes pushed from sibling Pis and refreshed lazily
+ * via `peers_request` on cache miss.
+ *
+ * Owns two halves of the protocol:
+ *
+ *  - **Outbound** (`tryRouteOutbound`): broker hands off envelopes with a
+ *    known `<pc>:` prefix. We rewrite `env.from` with our own pc_label,
+ *    pack onto the relay via `pi_forward_client.sendEnvelopeToPi`.
+ *
+ *  - **Inbound** (`handleIncoming`): `pi_forward_client` emits envelopes
+ *    received from a verified `from_pc`. We:
+ *      1. Anti-spoof the `envelope.from` prefix against the sibling cache
+ *         keyed by `from_pc` (defends against a Pi lying about its own
+ *         `pc_label`).
+ *      2. Intercept control envelopes (`peers_update`, `peers_request`,
+ *         `transport_error`) before any local UDS delivery.
+ *      3. Strip the `<pc>:` prefix from `env.to` and call
+ *         `broker.injectFromRemote`. Build a one-way ACK envelope back via
+ *         the relay so the cross-PC sender's `sendWithAck` resolves.
+ *
+ * The replies-bypass-busy rule from Wave 0 is honoured at injection time
+ * by the broker itself; `broker_remote` does not duplicate the check.
+ *
+ * Siblings (`Map<pc_label, pc_pubkey>`) are seeded externally by the
+ * extension at bootstrap (typically from `mesh_versions` of every paired
+ * Owner). Membership is the only thing we trust to ground anti-spoof —
+ * the cache of peers is just for routing UX.
+ */
+const CACHE_TTL_MS = 5 * 60_000;
+const PEERS_REQUEST_TIMEOUT_MS = 2_000;
+const BROKER_NAME = "broker";
+export class BrokerRemote {
+    broker;
+    pi;
+    selfPcLabel;
+    selfPcPubkey;
+    cacheTtlMs;
+    log;
+    /** Siblings: pc_label → pc_pubkey. Authoritative for anti-spoof. */
+    siblingByLabel = new Map();
+    /** Reverse index built from siblings: pc_pubkey → pc_label. */
+    siblingByPubkey = new Map();
+    /** Cache of peers per remote pc_label. */
+    remotePeers = new Map();
+    /** In-flight `peers_request` calls, keyed by pc_label. */
+    pendingFills = new Map();
+    /** Local peers (UDS) at the moment of last `onLocalPeersChanged` call. */
+    lastLocalPeers = [];
+    onIncoming;
+    detached = false;
+    constructor(opts) {
+        this.broker = opts.broker;
+        this.pi = opts.pi;
+        this.selfPcLabel = opts.selfPcLabel;
+        this.selfPcPubkey = opts.selfPcPubkey;
+        this.cacheTtlMs = opts.cacheTtlMs ?? CACHE_TTL_MS;
+        this.log = opts.log ?? ((msg) => console.error(msg));
+        for (const s of opts.siblings ?? [])
+            this._addSibling(s);
+        this.onIncoming = (env, fromPc) => this.handleIncoming(env, fromPc);
+        this.pi.on("envelope", this.onIncoming);
+        this.broker.setRemoteRouter(this);
+        // Seed `lastLocalPeers` from the live broker so the first
+        // `onLocalPeersChanged`-triggered push (or the bootstrap pushes below)
+        // already carry real state. Without seeding, the same single-peer
+        // mesh bug applies to OUTGOING `peers_update`s too: we'd announce
+        // ourselves to siblings as having zero peers.
+        this.lastLocalPeers = this.broker.peerNames();
+        // Plan/25 Wave B bootstrap: kick a `peers_request` at every known
+        // sibling so the cache is warm before anyone calls `list_peers` or
+        // `agent_send` cross-PC. Also push our current peer list proactively
+        // so siblings don't have to wait for their own request roundtrip.
+        // Best-effort; siblings offline at boot will reply when they come
+        // online and push their own `peers_update`.
+        this._bootstrapWithSiblings();
+    }
+    /** Bootstrap: announce ourselves AND ask every sibling for their peers.
+     *  Single helper so `_addSibling` can reuse half of it when a new
+     *  sibling appears via `setSiblings`. */
+    _bootstrapWithSiblings() {
+        for (const [, pcPubkey] of this.siblingByLabel) {
+            this._sendControlEnvelope(pcPubkey, { type: "peers_request" });
+            this._sendControlEnvelope(pcPubkey, {
+                type: "peers_update",
+                peers: this.lastLocalPeers,
+            });
+        }
+    }
+    detach() {
+        if (this.detached)
+            return;
+        this.detached = true;
+        this.pi.off("envelope", this.onIncoming);
+        this.broker.setRemoteRouter(null);
+    }
+    // ── Sibling management ────────────────────────────────────────────────────
+    /** Replace or extend the sibling set. Idempotent on identical input.
+     *  Removes any sibling missing from `next`. Plan/25 Wave B bootstrap:
+     *  fires `peers_request` at any sibling that wasn't in the previous
+     *  set so the cache warms up without waiting for their next push. */
+    setSiblings(next) {
+        const prevPubkeys = new Set(this.siblingByPubkey.keys());
+        this.siblingByLabel.clear();
+        this.siblingByPubkey.clear();
+        for (const s of next)
+            this._addSibling(s);
+        // Drop cache entries for siblings that disappeared.
+        for (const label of [...this.remotePeers.keys()]) {
+            if (!this.siblingByLabel.has(label))
+                this.remotePeers.delete(label);
+        }
+        // For newly-added pubkeys: do the same announce+request pair the
+        // constructor does. Re-pinging siblings we already knew about would
+        // be wasteful (and triggers redundant audit lines on their side).
+        for (const [, pcPubkey] of this.siblingByLabel) {
+            if (prevPubkeys.has(pcPubkey))
+                continue;
+            this._sendControlEnvelope(pcPubkey, { type: "peers_request" });
+            this._sendControlEnvelope(pcPubkey, {
+                type: "peers_update",
+                peers: this.lastLocalPeers,
+            });
+        }
+    }
+    _addSibling(s) {
+        if (!s.pcLabel || !s.pcPubkey)
+            return;
+        if (s.pcLabel === this.selfPcLabel)
+            return; // never list self as sibling
+        if (s.pcPubkey === this.selfPcPubkey)
+            return;
+        this.siblingByLabel.set(s.pcLabel, s.pcPubkey);
+        this.siblingByPubkey.set(s.pcPubkey, s.pcLabel);
+    }
+    // ── Public cache API ──────────────────────────────────────────────────────
+    /** Returns the cached peer list for a remote pc_label, or [] when
+     *  unknown / expired. */
+    getRemotePeers(pcLabel) {
+        const entry = this.remotePeers.get(pcLabel);
+        if (!entry)
+            return [];
+        if (Date.now() - entry.ts > this.cacheTtlMs)
+            return [];
+        return [...entry.peers];
+    }
+    /** Returns the full cross-PC inventory: pc_label → peers (TTL-respected). */
+    getAllRemote() {
+        const out = {};
+        for (const [label] of this.remotePeers) {
+            const peers = this.getRemotePeers(label);
+            if (peers.length > 0)
+                out[label] = peers;
+        }
+        return out;
+    }
+    /** Returns aggregated remote peer names (`<pc>:<peer>`) for the broker's
+     *  `list_peers` reply. Skips siblings with no cache entry. */
+    listRemotePeers() {
+        const out = [];
+        for (const [label] of this.remotePeers) {
+            for (const peer of this.getRemotePeers(label)) {
+                out.push(`${label}:${peer}`);
+            }
+        }
+        return out;
+    }
+    // ── Push proativo ─────────────────────────────────────────────────────────
+    /**
+     * Called whenever the local UDS broker's peer set changes
+     * (peer_joined/peer_left). We push a `peers_update` envelope to every
+     * sibling so their caches stay fresh without polling.
+     */
+    onLocalPeersChanged(peers) {
+        this.lastLocalPeers = [...peers];
+        if (this.siblingByLabel.size === 0)
+            return;
+        const body = { type: "peers_update", peers: this.lastLocalPeers };
+        for (const [, pcPubkey] of this.siblingByLabel) {
+            this._sendControlEnvelope(pcPubkey, body);
+        }
+    }
+    // ── RemoteRouter ──────────────────────────────────────────────────────────
+    /**
+     * Broker hook (plan/25 Wave C). Inspect `env.to` for a `<pc>:` prefix:
+     *
+     *   - no prefix or prefix == selfPcLabel → return false (broker delivers
+     *     locally; if same-self prefix is present we DON'T strip it here —
+     *     the local resolver will treat it as a literal name, which works
+     *     because local names don't carry colons in practice)
+     *   - prefix === known sibling label → rewrite `env.from`, pack onto the
+     *     relay, return true. May trigger a lazy `peers_request` when the
+     *     cache is empty (returns false on hard cache miss so the broker
+     *     surfaces a transport_error path; we always optimistically send,
+     *     and ACK timeout in the sender ends up reporting the failure).
+     *   - prefix is not a known sibling label → return false (backward-compat
+     *     for hypothetical local names containing `:`)
+     */
+    tryRouteOutbound(env) {
+        if (this.detached)
+            return false;
+        if (typeof env.to !== "string")
+            return false;
+        const parsed = parseAddress(env.to);
+        if (!parsed)
+            return false;
+        const { pcLabel } = parsed;
+        if (pcLabel === this.selfPcLabel)
+            return false; // same-PC: local handles
+        const siblingPk = this.siblingByLabel.get(pcLabel);
+        if (!siblingPk)
+            return false; // unknown prefix → fall through
+        // We have a destination PC. Rewrite `from` with our own pc_label.
+        const rewritten = {
+            ...env,
+            from: `${this.selfPcLabel}:${env.from}`,
+        };
+        // Optimistic send. If the recipient's cache doesn't list our target
+        // yet, the recipient's wrapper still injects (the broker just decides
+        // received/busy/denied on actual local UDS state). A simultaneous
+        // `peers_request` warms the cache for next time.
+        this.pi.sendEnvelopeToPi(siblingPk, rewritten);
+        if (this.remotePeers.get(pcLabel) === undefined) {
+            this._sendControlEnvelope(siblingPk, { type: "peers_request" });
+            void this._awaitPeersFill(pcLabel, PEERS_REQUEST_TIMEOUT_MS);
+        }
+        return true;
+    }
+    // ── Inbound ───────────────────────────────────────────────────────────────
+    /**
+     * Entry point for envelopes the relay forwards to us. Receives the
+     * envelope verbatim plus the verified `from_pc` (Pi-pubkey of the
+     * sender, authoritative — relay-checked).
+     */
+    handleIncoming(env, fromPc) {
+        // ── transport_error from relay ─────────────────────────────────────────
+        // The relay synthesises these with `from_pc = "_relay"` and
+        // `envelope.from = "_relay"`. Inject locally as a system envelope
+        // addressed to the original sender (env.to is the original sender's
+        // prefixed address; strip the prefix and deliver via UDS).
+        if (fromPc === "_relay") {
+            this._propagateTransportError(env);
+            return;
+        }
+        // ── anti-spoof ─────────────────────────────────────────────────────────
+        const claimedLabel = this.siblingByPubkey.get(fromPc);
+        if (!claimedLabel) {
+            this.log(`[broker_remote] drop: from_pc ${fromPc.slice(0, 12)}… not in sibling cache`);
+            return;
+        }
+        if (typeof env.from === "string") {
+            const fromPrefix = env.from.split(":", 1)[0];
+            if (fromPrefix !== claimedLabel) {
+                this.log(`[broker_remote] drop: envelope.from "${env.from}" prefix ` +
+                    `mismatches sibling label "${claimedLabel}"`);
+                return;
+            }
+        }
+        const body = env.body;
+        const bodyType = body && typeof body === "object" ? body.type : undefined;
+        // ── control: peers_update ──────────────────────────────────────────────
+        if (bodyType === "peers_update") {
+            const peers = Array.isArray(body.peers)
+                ? body.peers.filter((p) => typeof p === "string")
+                : [];
+            this._setRemoteCache(claimedLabel, fromPc, peers);
+            return;
+        }
+        // ── control: peers_request ─────────────────────────────────────────────
+        if (bodyType === "peers_request") {
+            // Always query the broker directly for the current peer list. We
+            // can't rely on `lastLocalPeers` because that cache is fed by the
+            // `peer_joined`/`peer_left` broadcast in index.ts — and the broker
+            // never delivers a `peer_joined` to the peer that just joined (see
+            // `_broadcastSystem(..., excludeName=assigned)`). In a single-peer
+            // mesh, no event ever fires → `lastLocalPeers` stays `[]` →
+            // siblings see us as "no peers" → cache populates empty → cross-PC
+            // `list_peers` misses us. Querying broker.peerNames() resolves
+            // sync (Map keys), so this is essentially free.
+            const currentLocal = this.broker.peerNames();
+            this._sendControlEnvelope(fromPc, {
+                type: "peers_update",
+                peers: currentLocal,
+            });
+            return;
+        }
+        // ── control: ack ───────────────────────────────────────────────────────
+        // ACK envelopes from a remote wrapper are addressed to our local
+        // sender. Strip prefix from `to` and inject so the sender's
+        // `sendWithAck` pending resolves. ACK envelopes carry `re` (always)
+        // and bypass busy via the `isReply` rule in `injectFromRemote`.
+        // (No special-casing needed — generic injection below covers them.)
+        // ── regular envelope: strip `to` prefix and inject ─────────────────────
+        if (typeof env.to !== "string") {
+            this.log("[broker_remote] drop: cross-PC envelope must be unicast string");
+            return;
+        }
+        const toParsed = parseAddress(env.to);
+        let injectedEnv = env;
+        if (toParsed && toParsed.pcLabel === this.selfPcLabel) {
+            injectedEnv = { ...env, to: toParsed.peerName };
+        }
+        else if (toParsed) {
+            // `to` carries a third-party prefix — not for us. Drop.
+            this.log(`[broker_remote] drop: envelope.to "${env.to}" not addressed to ` +
+                `selfPcLabel "${this.selfPcLabel}"`);
+            return;
+        }
+        const status = this.broker.injectFromRemote(injectedEnv);
+        // Only generate an ACK for non-ACK envelopes — otherwise we'd loop
+        // ACKing the ACK. Detect by body shape.
+        if (bodyType === "ack")
+            return;
+        // Forward an ACK envelope back to fromPc. The cross-PC sender's
+        // `sendWithAck` correlates by `re = env.id`.
+        const ackBody = { type: "ack", status, target: injectedEnv.to };
+        const ackEnv = {
+            from: `${this.selfPcLabel}:${BROKER_NAME}`,
+            to: env.from,
+            id: uuidv7(),
+            re: env.id,
+            body: ackBody,
+        };
+        this.pi.sendEnvelopeToPi(fromPc, ackEnv);
+    }
+    // ── Internals ─────────────────────────────────────────────────────────────
+    _setRemoteCache(pcLabel, pcPubkey, peers) {
+        this.remotePeers.set(pcLabel, { peers, pcPubkey, ts: Date.now() });
+        // Resolve any pending `peers_request` waiters for this label.
+        const pending = this.pendingFills.get(pcLabel);
+        if (pending) {
+            for (const slot of pending) {
+                clearTimeout(slot.timer);
+                slot.resolve();
+            }
+            this.pendingFills.delete(pcLabel);
+        }
+    }
+    _awaitPeersFill(pcLabel, timeoutMs) {
+        return new Promise((resolve) => {
+            const slot = {
+                resolve,
+                timer: setTimeout(() => {
+                    const set = this.pendingFills.get(pcLabel);
+                    set?.delete(slot);
+                    resolve();
+                }, timeoutMs),
+            };
+            const set = this.pendingFills.get(pcLabel) ?? new Set();
+            set.add(slot);
+            this.pendingFills.set(pcLabel, set);
+        });
+    }
+    _propagateTransportError(env) {
+        // Strip prefix from to (if any) and deliver to the local sender by
+        // injecting the envelope into the broker. Per plan/25 spec the
+        // wrapper's `sendWithAck` will see this as a body with
+        // `type:"transport_error"` correlated by `re`. The ackPending matcher
+        // only resolves for body.type === "ack", so transport_error envelopes
+        // fall through to handlers — which is what we want (sender's pending
+        // map times out, then handler dispatches inbox notification).
+        if (typeof env.to !== "string")
+            return;
+        const parsed = parseAddress(env.to);
+        const injected = parsed && parsed.pcLabel === this.selfPcLabel
+            ? { ...env, to: parsed.peerName }
+            : env;
+        this.broker.injectFromRemote(injected);
+    }
+    _sendControlEnvelope(toPc, body) {
+        const env = envelope(`${this.selfPcLabel}:_broker_remote`, `${this._labelForPubkey(toPc) ?? "?"}:_broker_remote`, body, null);
+        this.pi.sendEnvelopeToPi(toPc, env);
+    }
+    _labelForPubkey(pcPubkey) {
+        return this.siblingByPubkey.get(pcPubkey);
+    }
+}
+// ── Helpers ──────────────────────────────────────────────────────────────────
+/**
+ * Parse a `<pc>:<peer>` address. Returns null when the input doesn't
+ * carry a `:`. Note: callers are responsible for deciding whether the
+ * parsed `pcLabel` is meaningful (i.e., matches selfPcLabel or a known
+ * sibling); a non-null return here does NOT imply the address is remote.
+ * The broker's prefix routing uses this — local names containing literal
+ * `:` continue working as long as no sibling carries the same prefix.
+ */
+export function parseAddress(to) {
+    const idx = to.indexOf(":");
+    if (idx <= 0 || idx === to.length - 1)
+        return null;
+    return { pcLabel: to.slice(0, idx), peerName: to.slice(idx + 1) };
+}
+//# sourceMappingURL=broker_remote.js.map

package/dist/session/broker_remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker_remote.js","sourceRoot":"","sources":["../../src/session/broker_remote.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,QAAQ,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAGhE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC;AAChC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,WAAW,GAAG,QAAQ,CAAC;AA+C7B,MAAM,OAAO,YAAY;IACN,MAAM,CAAS;IACf,EAAE,CAAkB;IACpB,WAAW,CAAS;IACpB,YAAY,CAAS;IACrB,UAAU,CAAS;IACnB,GAAG,CAAwB;IAE5C,oEAAoE;IACnD,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5D,+DAA+D;IAC9C,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE7D,0CAA0C;IACzB,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAC;IAClE,0DAA0D;IACzC,YAAY,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEpE,0EAA0E;IAClE,cAAc,GAAa,EAAE,CAAC;IAErB,UAAU,CAA0C;IAC7D,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAAY,IAAyB;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC;QAClD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAErD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE;YAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAEzD,IAAI,CAAC,UAAU,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAElC,0DAA0D;QAC1D,uEAAuE;QACvE,kEAAkE;QAClE,kEAAkE;QAClE,8CAA8C;QAC9C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAE9C,kEAAkE;QAClE,mEAAmE;QACnE,qEAAqE;QACrE,kEAAkE;QAClE,kEAAkE;QAClE,4CAA4C;QAC5C,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IAED;;6CAEyC;IACjC,sBAAsB;QAC5B,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE;gBAClC,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,IAAI,CAAC,cAAc;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM;QACJ,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,6EAA6E;IAE7E;;;yEAGqE;IACrE,WAAW,CAAC,IAAmB;QAC7B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC1C,oDAAoD;QACpD,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,CAAC;QACD,iEAAiE;QACjE,oEAAoE;QACpE,kEAAkE;QAClE,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACxC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE;gBAClC,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,IAAI,CAAC,cAAc;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,CAAc;QAChC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO;QACtC,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,WAAW;YAAE,OAAO,CAAE,6BAA6B;QAC1E,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,YAAY;YAAE,OAAO;QAC7C,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,6EAA6E;IAE7E;6BACyB;IACzB,cAAc,CAAC,OAAe;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,CAAC;QACvD,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,6EAA6E;IAC7E,YAAY;QACV,MAAM,GAAG,GAA6B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;QAC3C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;kEAC8D;IAC9D,eAAe;QACb,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,6EAA6E;IAE7E;;;;OAIG;IACH,mBAAmB,CAAC,KAAe;QACjC,IAAI,CAAC,cAAc,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAC3C,MAAM,IAAI,GAAoB,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;QACnF,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,6EAA6E;IAE7E;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,GAAa;QAC5B,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,IAAI,OAAO,KAAK,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC,CAAE,yBAAyB;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC,CAAE,gCAAgC;QAE/D,kEAAkE;QAClE,MAAM,SAAS,GAAa;YAC1B,GAAG,GAAG;YACN,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,EAAE;SACxC,CAAC;QAEF,oEAAoE;QACpE,sEAAsE;QACtE,kEAAkE;QAClE,iDAAiD;QACjD,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;YAChD,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,eAAe,EAA6B,CAAC,CAAC;YAC3F,KAAK,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,6EAA6E;IAE7E;;;;OAIG;IACH,cAAc,CAAC,GAAa,EAAE,MAAc;QAC1C,0EAA0E;QAC1E,4DAA4D;QAC5D,kEAAkE;QAClE,oEAAoE;QACpE,2DAA2D;QAC3D,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,GAAG,CACN,iCAAiC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAC7E,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAChC,IAAI,CAAC,GAAG,CACN,wCAAwC,GAAG,CAAC,IAAI,WAAW;oBAC3D,6BAA6B,YAAY,GAAG,CAC7C,CAAC;gBACF,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAiC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAE1E,0EAA0E;QAC1E,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAE,IAAwB,CAAC,KAAK,CAAC;gBAC1D,CAAC,CAAE,IAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBACtE,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACjC,iEAAiE;YACjE,kEAAkE;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,mEAAmE;YACnE,4DAA4D;YAC5D,mEAAmE;YACnE,+DAA+D;YAC/D,gDAAgD;YAChD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7C,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE;gBAChC,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,YAAY;aACpB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,iEAAiE;QACjE,4DAA4D;QAC5D,oEAAoE;QACpE,gEAAgE;QAChE,oEAAoE;QAEpE,0EAA0E;QAC1E,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,WAAW,GAAG,GAAG,CAAC;QACtB,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YACtD,WAAW,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAClD,CAAC;aAAM,IAAI,QAAQ,EAAE,CAAC;YACpB,wDAAwD;YACxD,IAAI,CAAC,GAAG,CACN,sCAAsC,GAAG,CAAC,EAAE,qBAAqB;gBACjE,gBAAgB,IAAI,CAAC,WAAW,GAAG,CACpC,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzD,mEAAmE;QACnE,wCAAwC;QACxC,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO;QAE/B,gEAAgE;QAChE,6CAA6C;QAC7C,MAAM,OAAO,GAAY,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAY,EAAE,CAAC;QACnF,MAAM,MAAM,GAAa;YACvB,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,IAAI,WAAW,EAAE;YAC1C,EAAE,EAAE,GAAG,CAAC,IAAI;YACZ,EAAE,EAAE,MAAM,EAAE;YACZ,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,OAAO;SACd,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,6EAA6E;IAErE,eAAe,CACrB,OAAe,EACf,QAAgB,EAChB,KAAe;QAEf,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACnE,8DAA8D;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzB,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,OAAe,EAAE,SAAiB;QACxD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,MAAM,IAAI,GAAgB;gBACxB,OAAO;gBACP,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE;oBACrB,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBAC3C,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;oBAClB,OAAO,EAAE,CAAC;gBACZ,CAAC,EAAE,SAAS,CAAC;aACd,CAAC;YACF,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAe,CAAC;YACrE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,wBAAwB,CAAC,GAAa;QAC5C,mEAAmE;QACnE,+DAA+D;QAC/D,uDAAuD;QACvD,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,8DAA8D;QAC9D,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO;QACvC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAa,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,WAAW;YACtE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE;YACjC,CAAC,CAAC,GAAG,CAAC;QACR,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAEO,oBAAoB,CAC1B,IAAY,EACZ,IAAwC;QAExC,MAAM,GAAG,GAAa,QAAQ,CAC5B,GAAG,IAAI,CAAC,WAAW,iBAAiB,EACpC,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,GAAG,iBAAiB,EACrD,IAAI,EACJ,IAAI,CACL,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAEO,eAAe,CAAC,QAAgB;QACtC,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;CACF;AAED,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,EAAU;IAEV,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC"}

package/dist/session/cwd_lock.d.ts

@@ -0,0 +1,28 @@
+export interface AcquiredLock {
+    ok: true;
+    /** Manual release. Optional — process exit cleans up too. */
+    release(): void;
+}
+export interface RefusedLock {
+    ok: false;
+    /** Where the live lock socket lives, in case the caller wants to log it. */
+    lockPath: string;
+}
+export type CwdLockResult = AcquiredLock | RefusedLock;
+/** Path of the lock socket for a given cwd. Pure helper (no IO). */
+export declare function lockPathForCwd(cwd: string): string;
+/**
+ * Attempts to acquire the cwd lock. Resolves with either:
+ *   - `{ ok: true, release }` when we own it (server bound + retained).
+ *   - `{ ok: false, lockPath }` when a live Pi already holds the lock.
+ *
+ * Self-healing path: if the prior holder crashed, the leftover socket file
+ * fails `tryConnect` (ECONNREFUSED). We unlink it and retry the bind — the
+ * second attempt then succeeds.
+ *
+ * The server holds no actual listener logic; its only job is to keep the
+ * UDS endpoint pinned by the OS. No incoming connection ever does anything
+ * useful — the next-Pi-attempt's `tryConnect` succeeding is the entire
+ * signal we care about.
+ */
+export declare function acquireCwdLock(cwd: string): Promise<CwdLockResult>;

package/dist/session/cwd_lock.js

@@ -0,0 +1,89 @@
+import { mkdirSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { roomIdForCwd } from "../rooms.js";
+import { removeStaleSock, tryBind, tryConnect } from "./leader_election.js";
+/**
+ * Per-cwd singleton lock for `/remote-pi`. At most one Pi process per
+ * working directory may hold the lock; the second attempt is refused.
+ *
+ * Why a UDS bind instead of a PID lock file:
+ *   - The OS releases the socket handle the instant the process dies, even
+ *     on `kill -9` or hard crash. No stale-lock cleanup needed.
+ *   - The next Pi to try in the same cwd detects the dead socket via
+ *     `ECONNREFUSED` on `tryConnect`, unlinks the leftover file, and
+ *     binds successfully. Fully self-healing.
+ *   - Kernel-enforced — there is no race window between "check if held"
+ *     and "claim", which an explicit PID file would have.
+ *
+ * Lock files live in `~/.pi/remote/locks/<roomId>.sock` (where `roomId` is
+ * `sha256(realpath(cwd))[:12]`), NOT inside the cwd itself, to dodge:
+ *   - The 104/108-char path-length limit on UDS sockets on macOS/Linux.
+ *   - Symlinked cwds (realpath canonicalization happens in `roomIdForCwd`).
+ *   - Read-only cwds (the home directory is always writable).
+ *
+ * Caller workflow:
+ *   const lock = await acquireCwdLock(cwd);
+ *   if (!lock.ok) { ui.notify("Já tem um agente rodando nessa pasta."); return; }
+ *   // …run /remote-pi normally; lock auto-releases on process exit
+ */
+const LOCKS_DIR = join(homedir(), ".pi", "remote", "locks");
+/** Path of the lock socket for a given cwd. Pure helper (no IO). */
+export function lockPathForCwd(cwd) {
+    return join(LOCKS_DIR, `${roomIdForCwd(cwd)}.sock`);
+}
+/**
+ * Attempts to acquire the cwd lock. Resolves with either:
+ *   - `{ ok: true, release }` when we own it (server bound + retained).
+ *   - `{ ok: false, lockPath }` when a live Pi already holds the lock.
+ *
+ * Self-healing path: if the prior holder crashed, the leftover socket file
+ * fails `tryConnect` (ECONNREFUSED). We unlink it and retry the bind — the
+ * second attempt then succeeds.
+ *
+ * The server holds no actual listener logic; its only job is to keep the
+ * UDS endpoint pinned by the OS. No incoming connection ever does anything
+ * useful — the next-Pi-attempt's `tryConnect` succeeding is the entire
+ * signal we care about.
+ */
+export async function acquireCwdLock(cwd) {
+    const lockPath = lockPathForCwd(cwd);
+    mkdirSync(dirname(lockPath), { recursive: true });
+    // First attempt: bind directly.
+    let server = await tryBind(lockPath);
+    if (server)
+        return _acquired(server, lockPath);
+    // Bind failed — check whether the existing socket has a live listener.
+    const probe = await tryConnect(lockPath);
+    if (probe) {
+        probe.destroy();
+        return { ok: false, lockPath };
+    }
+    // Socket is stale (no listener answered). Clean up + retry bind once.
+    removeStaleSock(lockPath);
+    server = await tryBind(lockPath);
+    if (server)
+        return _acquired(server, lockPath);
+    // Race: someone else bound between our unlink and retry. Treat as held.
+    return { ok: false, lockPath };
+}
+function _acquired(server, _lockPath) {
+    let released = false;
+    // Don't keep the event loop alive just to hold the socket — the Pi
+    // process has its own reasons to stay up (relay WS, broker, etc.).
+    // When those are gone, the OS will tear the socket down with us.
+    server.unref();
+    return {
+        ok: true,
+        release: () => {
+            if (released)
+                return;
+            released = true;
+            try {
+                server.close();
+            }
+            catch { /* ignored */ }
+        },
+    };
+}
+//# sourceMappingURL=cwd_lock.js.map

package/dist/session/cwd_lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cwd_lock.js","sourceRoot":"","sources":["../../src/session/cwd_lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAgB5D,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,IAAI,CAAC,SAAS,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW;IAC9C,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACrC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElD,gCAAgC;IAChC,IAAI,MAAM,GAAkB,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,MAAM;QAAE,OAAO,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE/C,uEAAuE;IACvE,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,sEAAsE;IACtE,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1B,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,MAAM;QAAE,OAAO,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE/C,wEAAwE;IACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,SAAiB;IAClD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,mEAAmE;IACnE,mEAAmE;IACnE,iEAAiE;IACjE,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/session/global_config.d.ts

@@ -1,3 +1,12 @@
+/**
+ * Fixed UDS session name. The local mesh is single per machine — every Pi
+ * process on the host shares this broker. Previous versions exposed
+ * multi-session support (named sessions, leave/rename/sessions commands);
+ * those were removed in the 2026-05-23 simplification because in practice
+ * every install converged on one session anyway and multi-session UX added
+ * friction without value.
+ */
+export declare const LOCAL_SESSION_NAME = "local";
 /** Ensures the new subdirs exist inside the existing ~/.pi/remote/. */
 export declare function ensureGlobalDirs(): void;
 /** Path to the UDS socket for a named session. */

package/dist/session/global_config.js

@@ -4,6 +4,15 @@ import { join } from "node:path";
 const HOME_PI_REMOTE = join(homedir(), ".pi", "remote");
 const SESSIONS_DIR = join(HOME_PI_REMOTE, "sessions");
 const SKILLS_DIR = join(HOME_PI_REMOTE, "skills");
+/**
+ * Fixed UDS session name. The local mesh is single per machine — every Pi
+ * process on the host shares this broker. Previous versions exposed
+ * multi-session support (named sessions, leave/rename/sessions commands);
+ * those were removed in the 2026-05-23 simplification because in practice
+ * every install converged on one session anyway and multi-session UX added
+ * friction without value.
+ */
+export const LOCAL_SESSION_NAME = "local";
 /** Ensures the new subdirs exist inside the existing ~/.pi/remote/. */
 export function ensureGlobalDirs() {
     mkdirSync(SESSIONS_DIR, { recursive: true });

package/dist/session/global_config.js.map

@@ -1 +1 @@
-{"version":3,"file":"global_config.js","sourceRoot":"","sources":["../../src/session/global_config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACxD,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;AACtD,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;AAElD,uEAAuE;AACvE,MAAM,UAAU,gBAAgB;IAC9B,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;AACjD,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;AACjD,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,YAAY;IAC1B,gBAAgB,EAAE,CAAC;IACnB,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAChD,IAAI,CAAC;gBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"global_config.js","sourceRoot":"","sources":["../../src/session/global_config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACxD,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;AACtD,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAE1C,uEAAuE;AACvE,MAAM,UAAU,gBAAgB;IAC9B,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;AACjD,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;AACjD,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,YAAY;IAC1B,gBAAgB,EAAE,CAAC;IACnB,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAChD,IAAI,CAAC;gBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/session/leader_election.d.ts

@@ -14,3 +14,19 @@ export type ElectionResult = {
  * Returns the role + the live handle (server for leader, socket for follower).
  */
 export declare function joinOrLead(sockPath: string): Promise<ElectionResult>;
+/**
+ * Probes a UDS path: if a live listener responds, returns the connected
+ * socket; otherwise returns null (timeout or ECONNREFUSED). Exported so
+ * the cwd-lock primitive can reuse it without duplicating the OS dance.
+ */
+export declare function tryConnect(sockPath: string): Promise<Socket | null>;
+/**
+ * Attempts to bind a UDS server on `sockPath`. Returns the live server on
+ * success, null when the path is already held (EADDRINUSE) or any other
+ * bind error. Caller is responsible for `unlink`ing a stale sock file
+ * before retrying.
+ */
+export declare function tryBind(sockPath: string): Promise<Server | null>;
+/** Unlinks the sock file if it exists and is actually a socket. No-op
+ *  otherwise. Used to clear stale sockets left behind by a crashed peer. */
+export declare function removeStaleSock(sockPath: string): void;

package/dist/session/leader_election.js

@@ -27,6 +27,28 @@ export async function joinOrLead(sockPath) {
     }
     throw new Error(`leader election failed after ${MAX_ATTEMPTS} attempts: ${sockPath}`);
 }
+/**
+ * Probes a UDS path: if a live listener responds, returns the connected
+ * socket; otherwise returns null (timeout or ECONNREFUSED). Exported so
+ * the cwd-lock primitive can reuse it without duplicating the OS dance.
+ */
+export function tryConnect(sockPath) {
+    return _tryConnect(sockPath);
+}
+/**
+ * Attempts to bind a UDS server on `sockPath`. Returns the live server on
+ * success, null when the path is already held (EADDRINUSE) or any other
+ * bind error. Caller is responsible for `unlink`ing a stale sock file
+ * before retrying.
+ */
+export function tryBind(sockPath) {
+    return _tryBind(sockPath);
+}
+/** Unlinks the sock file if it exists and is actually a socket. No-op
+ *  otherwise. Used to clear stale sockets left behind by a crashed peer. */
+export function removeStaleSock(sockPath) {
+    _removeStaleSock(sockPath);
+}
 function _tryConnect(sockPath) {
     return new Promise((resolve) => {
         const sock = createConnection({ path: sockPath });

package/dist/session/leader_election.js.map

@@ -1 +1 @@
-{"version":3,"file":"leader_election.js","sourceRoot":"","sources":["../../src/session/leader_election.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,gBAAgB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAM7B;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACpD,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAE9C,MAAM,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,YAAY,cAAc,QAAQ,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,GAAkB,EAAE,EAAE;YACpC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,GAAkB,EAAE,EAAE;YACpC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,IAAI,CAAC;oBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,QAAQ,EAAE;YAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC"}
+{"version":3,"file":"leader_election.js","sourceRoot":"","sources":["../../src/session/leader_election.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,gBAAgB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAM7B;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAgB;IAC/C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACpD,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAE9C,MAAM,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,YAAY,cAAc,QAAQ,EAAE,CAAC,CAAC;AACxF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,QAAgB;IACtC,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED;4EAC4E;AAC5E,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,GAAkB,EAAE,EAAE;YACpC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB;IAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,GAAkB,EAAE,EAAE;YACpC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,IAAI,CAAC;oBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;YACjD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,CAAC;QACf,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,QAAQ,EAAE;YAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC"}