remote-pi 0.2.0 → 0.4.0

package/dist/pairing/storage.js

@@ -117,24 +117,26 @@ export async function getOrCreateEd25519Keypair() {
         if (legacy) {
             const kp = _deserialize(legacy);
             await backend.write(NEW_SERVICE, ACCOUNT, legacy);
-            const deleted = await backend.delete(OLD_SERVICE, ACCOUNT);
-            console.info(`[remote-pi] Migrated Pi-secret from "${OLD_SERVICE}" to "${NEW_SERVICE}" ` +
-                `(old entry deleted: ${deleted})`);
+            await backend.delete(OLD_SERVICE, ACCOUNT);
+            // Silent migration: writing the chat surface would be premature
+            // (Pi SDK isn't bound yet at this point in boot) and console
+            // output bleeds outside the TUI. The presence of an entry under
+            // NEW_SERVICE is itself the audit signal — re-running migration
+            // is idempotent and harmless.
             return kp;
         }
         // Neither entry exists — generate and save to new service.
         const fresh = generateEd25519Keypair();
         await backend.write(NEW_SERVICE, ACCOUNT, _serialize(fresh));
-        console.info(`[remote-pi] Generated new Pi-secret in keyring "${NEW_SERVICE}"`);
         return fresh;
     }
     catch (err) {
-        // ── Path B: file fallback (typically headless Linux) ───────────────
-        console.warn("[remote-pi] WARNING: keyring unavailable, falling back to file-based " +
-            "storage at " + IDENTITY_FILE + " (mode 0600). Set up GNOME Keyring/" +
-            "KWallet for better security. " +
-            `Set PI_KEY_INSECURE_FALLBACK=true to suppress this warning. ` +
-            `Cause: ${String(err)}`);
+        // Path B: file fallback (typically headless Linux without a D-Bus
+        // session). Silent in the chat panel — for daemon mode, the
+        // existence of `~/.pi/remote/identity.json` IS the signal that the
+        // keyring path failed. Document this in CLAUDE.md / PROTOCOL.md
+        // so headless users know what to look for.
+        void err;
         const fromFile = await _readKeypairFromFile();
         if (fromFile)
             return fromFile;

package/dist/pairing/storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/pairing/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAuB,MAAM,aAAa,CAAC;AAE1E;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,GAAG,iBAAiB,CAAC,CAAE,mBAAmB;AAC3D,MAAM,WAAW,GAAG,kBAAkB,CAAC,CAAC,yCAAyC;AACjF,MAAM,OAAO,GAAG,kBAAkB,CAAC;AAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAChD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACpD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAoB9C,MAAM,kBAAkB;IACtB,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAe;QACzC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,CAAE,gCAAgC;IAC/D,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,OAAe,EAAE,OAAe,EAAE,KAAa;QACzD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAAe;QAC3C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,IAAI,QAAQ,GAA2B,IAAI,CAAC;AAE5C,SAAS,WAAW;IAClB,IAAI,CAAC,QAAQ;QAAE,QAAQ,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACnD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,0BAA0B,CAAC,OAA+B;IACxE,QAAQ,GAAG,OAAO,CAAC;AACrB,CAAC;AASD,SAAS,UAAU,CAAC,EAAkB;IACpC,MAAM,OAAO,GAAsB;QACjC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAChD,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACjD,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAsB,CAAC;IACvD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,KAAK,UAAU,oBAAoB;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EAAkB;IACnD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,oEAAoE;IACpE,0DAA0D;IAC1D,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAC7D,MAAM,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;AACtE,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAE9B,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,QAAQ;YAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;QAE5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CACV,wCAAwC,WAAW,SAAS,WAAW,IAAI;gBAC3E,uBAAuB,OAAO,GAAG,CAClC,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,2DAA2D;QAC3D,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;QACvC,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,mDAAmD,WAAW,GAAG,CAAC,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,OAAO,CAAC,IAAI,CACV,uEAAuE;YACvE,aAAa,GAAG,aAAa,GAAG,qCAAqC;YACrE,+BAA+B;YAC/B,8DAA8D;YAC9D,UAAU,MAAM,CAAC,GAAG,CAAC,EAAE,CACxB,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC9C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;QACvC,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAkB;IAC9C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,qBAAqB;IAC5C,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAiB;IAChD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAEhF,sEAAsE;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAAC;AACrD,4CAA4C;AAC5C,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,IAAmB,EAAE;IAClE,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;AACtE,CAAC,CAAC"}
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/pairing/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAuB,MAAM,aAAa,CAAC;AAE1E;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,GAAG,iBAAiB,CAAC,CAAE,mBAAmB;AAC3D,MAAM,WAAW,GAAG,kBAAkB,CAAC,CAAC,yCAAyC;AACjF,MAAM,OAAO,GAAG,kBAAkB,CAAC;AAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAChD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACpD,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAoB9C,MAAM,kBAAkB;IACtB,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAe;QACzC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,CAAE,gCAAgC;IAC/D,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,OAAe,EAAE,OAAe,EAAE,KAAa;QACzD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAAe;QAC3C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,IAAI,QAAQ,GAA2B,IAAI,CAAC;AAE5C,SAAS,WAAW;IAClB,IAAI,CAAC,QAAQ;QAAE,QAAQ,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACnD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,0BAA0B,CAAC,OAA+B;IACxE,QAAQ,GAAG,OAAO,CAAC;AACrB,CAAC;AASD,SAAS,UAAU,CAAC,EAAkB;IACpC,MAAM,OAAO,GAAsB;QACjC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAChD,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACjD,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAsB,CAAC;IACvD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC3C,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,KAAK,UAAU,oBAAoB;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EAAkB;IACnD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,oEAAoE;IACpE,0DAA0D;IAC1D,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAC7D,MAAM,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;AACtE,CAAC;AAED,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAE9B,0EAA0E;IAC1E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,QAAQ;YAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;QAE5C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC3C,gEAAgE;YAChE,6DAA6D;YAC7D,gEAAgE;YAChE,gEAAgE;YAChE,8BAA8B;YAC9B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,2DAA2D;QAC3D,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;QACvC,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,4DAA4D;QAC5D,mEAAmE;QACnE,gEAAgE;QAChE,2CAA2C;QAC3C,KAAK,GAAG,CAAC;QACT,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAC9C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;QACvC,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAkB;IAC9C,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,qBAAqB;IAC5C,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAiB;IAChD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAEhF,sEAAsE;AACtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,aAAa,CAAC;AACrD,4CAA4C;AAC5C,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,IAAmB,EAAE;IAClE,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;AACtE,CAAC,CAAC"}

package/dist/protocol/types.d.ts

@@ -8,6 +8,7 @@ export type ClientMessage = {
     type: "user_message";
     id: string;
     text: string;
+    images?: WireImage[];
 } | {
     type: "approve_tool";
     id: string;
@@ -24,7 +25,38 @@ export type ClientMessage = {
     type: "session_sync";
     id: string;
     limit?: number;
+} | {
+    type: "session_new";
+    id: string;
+} | {
+    type: "session_compact";
+    id: string;
+} | {
+    type: "model_set";
+    id: string;
+    provider: string;
+    model_id: string;
+} | {
+    type: "thinking_set";
+    id: string;
+    level: ThinkingLevel;
+} | {
+    type: "list_models";
+    id: string;
 };
+/**
+ * Plan/30 — one inline image attachment on a `user_message`. Mirrors the
+ * SDK's `ImageContent` ({@link https }) split across the wire: `data` is the
+ * base64-encoded (compressed) image bytes, `mime` its content type
+ * (e.g. `"image/jpeg"`). The Pi maps `{ data, mime }` → the SDK's
+ * `{ type:"image", data, mimeType }` before handing it to the model.
+ */
+export interface WireImage {
+    /** Base64-encoded image bytes (compressed app-side). */
+    data: string;
+    /** MIME type, e.g. `"image/jpeg"`. Maps to the SDK's `mimeType`. */
+    mime: string;
+}
 export type Usage = {
     input_tokens: number;
     output_tokens: number;
@@ -36,6 +68,7 @@ export type SessionHistoryEvent = {
     type: "user_input";
     id: string;
     text: string;
+    images?: WireImage[];
 } | {
     ts: number;
     type: "tool_request";
@@ -54,6 +87,11 @@ export type SessionHistoryEvent = {
     in_reply_to: string;
     text: string;
     usage?: Usage;
+} | {
+    ts: number;
+    type: "compaction";
+    summary: string;
+    tokens_before: number;
 };
 export type ServerMessage = {
     type: "pair_ok";
@@ -93,6 +131,7 @@ export type ServerMessage = {
     type: "user_message";
     id: string;
     text: string;
+    images?: WireImage[];
 } | {
     type: "agent_chunk";
     in_reply_to: string;
@@ -106,6 +145,11 @@ export type ServerMessage = {
     in_reply_to: string;
     text: string;
     usage?: Usage;
+} | {
+    type: "compaction";
+    summary: string;
+    tokens_before: number;
+    ts?: number;
 } | {
     type: "tool_request";
     tool_call_id: string;
@@ -138,5 +182,64 @@ export type ServerMessage = {
     events: SessionHistoryEvent[];
     eos: boolean;
     truncated: boolean;
+} | {
+    type: "action_ok";
+    in_reply_to: string;
+    action: ActionName;
+} | {
+    type: "action_error";
+    in_reply_to: string;
+    action: ActionName;
+    error: string;
+} | {
+    type: "models_list";
+    in_reply_to: string;
+    models: WireModel[];
+    current?: WireModel;
 };
+/**
+ * Plan/28 — Stable names for the typed actions the app can request. Kept
+ * as a closed string union so a switch in either side gets exhaustiveness
+ * checking from the compiler.
+ */
+export type ActionName = "session_new" | "session_compact" | "model_set" | "thinking_set";
+/**
+ * Plan/28 — Mirror of the SDK's `ThinkingLevel` (defined in
+ * `@mariozechner/pi-agent-core/types`). Re-declared locally so the wire
+ * protocol owns its own enum and we don't leak SDK-internal types onto
+ * the app's network surface.
+ *
+ * Note: `"xhigh"` is only honored by select model families — the SDK uses
+ * each `Model.thinkingLevelMap` to decide if the requested level is
+ * supported, falling back to a sensible neighbour when not. The app
+ * surfaces all 6 buttons but can grey out unsupported ones using the
+ * model's metadata if the picker fetches it later.
+ */
+export type ThinkingLevel = "off" | "minimal" | "low" | "medium" | "high" | "xhigh";
+/**
+ * Plan/28 — Wire shape for one model entry in the app's model picker.
+ *
+ * Subset of the SDK's `Model<Api>` interface — only the fields the app
+ * actually renders. Cost / max-tokens / API class are left off the wire
+ * deliberately; if the app's picker grows to need them, they get added
+ * here and to the handler's mapping in `index.ts` in one diff.
+ */
+export interface WireModel {
+    /** Stable identifier inside the provider's catalog. E.g. `"claude-opus-4-7"`. */
+    id: string;
+    /** Display name for the picker row. E.g. `"Claude Opus 4.7"`. */
+    name: string;
+    /** Provider slug. E.g. `"anthropic"`, `"openai"`. */
+    provider: string;
+    /** Whether the model supports the thinking surface (`reasoning: true`
+     *  in the SDK). Useful so the app can decide whether the thinking
+     *  segmented control should be enabled when this model is selected. */
+    reasoning: boolean;
+    /** Context window in tokens, for display in the picker subtitle. */
+    context_window: number;
+    /** Plan/30: true when the model accepts image input (SDK `Model.input`
+     *  includes `"image"`). The app uses it to enable/disable the attach
+     *  button — a text-only model greys out image attachments. */
+    vision: boolean;
+}
 export type ByeReason = "peer_stop" | "session_replaced" | "shutdown";

package/dist/session/bridge.d.ts

@@ -0,0 +1,39 @@
+import type { Broker } from "./broker.js";
+import { BrokerRemote } from "./broker_remote.js";
+import { PiForwardClient } from "../transport/pi_forward_client.js";
+import type { RelayClient } from "../transport/relay_client.js";
+import type { Ed25519Keypair } from "../pairing/crypto.js";
+/**
+ * Cross-PC mesh bridge composition — the single shared point for "turn a
+ * leader Broker + relay into a cross-PC router".
+ *
+ * Both consumers call this so the wiring lives in one place:
+ *   - The Pi extension (`_ensureBrokerRemote`) injects its relay — the SAME
+ *     RelayClient it also uses for app↔Pi pairing.
+ *   - The MCP `MeshNode` creates its own RelayClient and passes it in.
+ *
+ * The function does NOT own the relay's lifecycle (the caller created it and
+ * tears it down). It only attaches the PiForwardClient + BrokerRemote on top.
+ *
+ * Sibling discovery is best-effort: on any failure we attach a BrokerRemote
+ * with an empty sibling set, and remote `peers_update` pushes fill the cache
+ * in later. Discovery warnings are routed to the silent `log` so they never
+ * bleed into a Pi TUI chat panel.
+ */
+export interface AttachBridgeOptions {
+    /** The leader's local Broker (from SessionPeer.localBroker()). */
+    broker: Broker;
+    /** Live relay connection. Caller owns its lifecycle. */
+    relay: RelayClient;
+    /** Relay URL in http(s):// form — for MeshClient sibling discovery. */
+    relayUrl: string;
+    /** This host's Ed25519 identity (machine Pi-key). */
+    keypair: Ed25519Keypair;
+    /** Diagnostic logger. Defaults to a no-op (avoids TUI leaks). */
+    log?: (msg: string) => void;
+}
+export interface CrossPcBridge {
+    brokerRemote: BrokerRemote;
+    piForward: PiForwardClient;
+}
+export declare function attachCrossPcBridge(opts: AttachBridgeOptions): Promise<CrossPcBridge>;

package/dist/session/bridge.js

@@ -0,0 +1,41 @@
+import { BrokerRemote } from "./broker_remote.js";
+import { PiForwardClient } from "../transport/pi_forward_client.js";
+import { MeshClient } from "../mesh/client.js";
+import { discoverSelfLabel, discoverSiblings, fallbackLabel } from "../mesh/siblings.js";
+import { listOwnerPubkeys } from "../pairing/storage.js";
+export async function attachCrossPcBridge(opts) {
+    const log = opts.log ?? (() => { });
+    const piForward = new PiForwardClient(opts.relay);
+    const selfPubkeyB64 = Buffer.from(opts.keypair.publicKey).toString("base64");
+    let selfPcLabel = fallbackLabel(selfPubkeyB64);
+    let siblings = [];
+    try {
+        const meshClient = new MeshClient(opts.relayUrl);
+        const owners = await listOwnerPubkeys();
+        if (owners.length > 0) {
+            // Silent log: per-Owner fetch failures (relay 404 before any Owner
+            // published, transient HTTP errors) must not surface in a TUI.
+            const silent = { warn: (_m) => { } };
+            const [labelRes, sibs] = await Promise.all([
+                discoverSelfLabel({ client: meshClient, ownerEpks: owners, myPubkey: opts.keypair.publicKey, log: silent }),
+                discoverSiblings({ client: meshClient, ownerEpks: owners, myPubkey: opts.keypair.publicKey, log: silent }),
+            ]);
+            selfPcLabel = labelRes.selfPcLabel;
+            siblings = sibs;
+        }
+    }
+    catch (err) {
+        // Best-effort — siblings populate later via remote peers_update push.
+        void err;
+    }
+    const brokerRemote = new BrokerRemote({
+        broker: opts.broker,
+        pi: piForward,
+        selfPcLabel,
+        selfPcPubkey: selfPubkeyB64,
+        siblings,
+        log,
+    });
+    return { brokerRemote, piForward };
+}
+//# sourceMappingURL=bridge.js.map

package/dist/session/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/session/bridge.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEpE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAuCzD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAyB;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,GAAE,CAAC,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAElD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7E,IAAI,WAAW,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAC/C,IAAI,QAAQ,GAA4C,EAAE,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,mEAAmE;YACnE,+DAA+D;YAC/D,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,EAAU,EAAQ,EAAE,GAAgB,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACzC,iBAAiB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;gBAC3G,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;aAC3G,CAAC,CAAC;YACH,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;YACnC,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,KAAK,GAAG,CAAC;IACX,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,YAAY,CAAC;QACpC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,EAAE,EAAE,SAAS;QACb,WAAW;QACX,YAAY,EAAE,aAAa;QAC3B,QAAQ;QACR,GAAG;KACJ,CAAC,CAAC;IAEH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AACrC,CAAC"}

package/dist/session/mesh_node.d.ts

@@ -0,0 +1,123 @@
+import { SessionPeer, type AckResult } from "./peer.js";
+import type { Envelope } from "./envelope.js";
+import type { Broker } from "./broker.js";
+import { RelayClient } from "../transport/relay_client.js";
+import type { Ed25519Keypair } from "./../pairing/crypto.js";
+/**
+ * MeshNode — the single composition point for "join the agent mesh".
+ *
+ * Wraps the two layers every mesh participant needs, and nothing else
+ * (pairing is app↔Pi and stays OUT of here):
+ *
+ *   1. **Local UDS mesh** — always. A `SessionPeer` joins (or leads) the
+ *      broker at `sockPath`: `send` / `sendWithAck` / `request` /
+ *      `onMessage`, leader election + failover for free.
+ *
+ *   2. **Cross-PC relay bridge** — optional, only when the node leads (the
+ *      leader hosts the Broker, so it owns the `BrokerRemote`). Two ways to
+ *      supply the relay:
+ *        - **Self-managed** (MCP): pass `bridge: { relayUrl, cwd }` and the
+ *          node creates + owns the RelayClient on connect-if-leader, with
+ *          its own machine Pi-key.
+ *        - **Injected** (Pi extension): call `attachBridge({ relay, … })`
+ *          with the RelayClient the host already owns (and also uses for
+ *          app↔Pi pairing). MeshNode never closes an injected relay.
+ *
+ * Both the Pi extension and the MCP mesh server build on this so the mesh
+ * wiring lives in one place. A follower never brings the bridge up —
+ * cross-PC routing works transitively through whoever is leader (a Pi, the
+ * daemon, or another MeshNode). On UDS failover that promotes this node to
+ * leader, the bridge re-attaches automatically against the fresh broker.
+ */
+/** Self-managed-relay bridge config (MCP path). */
+export interface MeshSelfRelayBridge {
+    /** Relay URL in http(s):// form (converted to ws(s):// internally). */
+    relayUrl: string;
+    /** cwd — derives the relay room id and the room_meta. */
+    cwd: string;
+    /** Display name for room_meta. Defaults to the assigned mesh name. */
+    sessionName?: string;
+}
+export interface MeshNodeOptions {
+    /** UDS broker socket path (e.g. ~/.pi/remote/sessions/local/broker.sock). */
+    sockPath: string;
+    /** Requested mesh name (broker may add a #N collision suffix). */
+    name: string;
+    /** Optional audit log path passed through to SessionPeer. */
+    auditPath?: string;
+    /** Self-managed relay bridge — brought up if this node leads. */
+    bridge?: MeshSelfRelayBridge;
+    /** Diagnostic logger. Defaults to a no-op (avoids leaking into TUIs). */
+    log?: (msg: string) => void;
+}
+export type { AckResult } from "./peer.js";
+interface SiblingInfo {
+    pcLabel: string;
+    pcPubkey: string;
+}
+export declare class MeshNode {
+    private readonly peer_;
+    private readonly log;
+    private relay;
+    private relayOwned;
+    private brokerRemote;
+    private piForward;
+    private keypair;
+    private bridgeParams;
+    private reconnectWired;
+    constructor(opts: MeshNodeOptions);
+    /** Join (or lead) the mesh. Resolves with the assigned name. */
+    connect(): Promise<string>;
+    /**
+     * Attach a cross-PC bridge on top of an EXTERNALLY-owned relay (Pi path).
+     * Idempotent; only attaches when this node is the leader. Remembers the
+     * params so the bridge re-attaches after a UDS failover. Call again with a
+     * fresh relay after a relay reconnect.
+     */
+    attachBridge(opts: {
+        relay: RelayClient;
+        relayUrl: string;
+        keypair?: Ed25519Keypair;
+    }): Promise<void>;
+    /**
+     * Tear down the bridge AND forget its params (no auto re-attach until the
+     * next `attachBridge`/`connect`). Closes the relay only if MeshNode created
+     * it — an injected relay belongs to the host. Use on stop / relay drop.
+     */
+    detachBridge(): void;
+    private _wireReconnect;
+    private _onReconnect;
+    private _maybeBridge;
+    private _detachBridgeKeepingParams;
+    /** Keep the cross-PC sibling set in sync (Pi SelfRevoke onMembersChanged). */
+    setSiblings(siblings: SiblingInfo[]): void;
+    /** Announce the local peer set to siblings (Pi broker peer_joined/left). */
+    onLocalPeersChanged(local: string[]): void;
+    /** True when the cross-PC relay bridge is active (this node is leader). */
+    hasBridge(): boolean;
+    /** The underlying SessionPeer — for consumers that need it directly (tools). */
+    peer(): SessionPeer;
+    /** Fire-and-forget send. `to` may be a name, `<pc>:<name>`, or "broadcast". */
+    send(to: string | string[], body: unknown, re?: string | null): Promise<void>;
+    /** Unicast send + await broker ACK (received/busy/denied/timeout). */
+    sendWithAck(to: string, body: unknown, re?: string | null, timeoutMs?: number): Promise<AckResult>;
+    /** Send + await the first reply whose `re` matches the outbound id. */
+    request(to: string, body: unknown, timeoutMs?: number): Promise<Envelope>;
+    /** Subscribe to inbound envelopes. Returns an unsubscribe fn. */
+    onMessage(handler: (env: Envelope) => void): () => void;
+    /** Subscribe to post-failover reconnects. Returns an unsubscribe fn. */
+    onReconnect(handler: () => void): () => void;
+    /** Assigned mesh name (after any #N collision suffix). */
+    name(): string;
+    /** "leader" | "follower". */
+    currentRole(): "leader" | "follower";
+    /** The locally-hosted Broker when leader, else null. */
+    localBroker(): Broker | null;
+    /**
+     * Aggregated mesh roster (local UDS peers + cross-PC `<pc>:<peer>`),
+     * excluding self. Asks the broker, which merges its remote router cache.
+     */
+    listPeers(timeoutMs?: number): Promise<string[]>;
+    /** Tear down the bridge (if any) and leave the mesh. */
+    close(): Promise<void>;
+}

package/dist/session/mesh_node.js

@@ -0,0 +1,203 @@
+import { SessionPeer } from "./peer.js";
+import { RelayClient } from "../transport/relay_client.js";
+import { attachCrossPcBridge } from "./bridge.js";
+import { getOrCreateEd25519Keypair } from "../pairing/storage.js";
+import { roomIdForCwd } from "../rooms.js";
+import { toWebSocketUrl } from "../config.js";
+export class MeshNode {
+    peer_;
+    log;
+    relay = null;
+    relayOwned = false;
+    brokerRemote = null;
+    piForward = null;
+    keypair = null;
+    bridgeParams = null;
+    reconnectWired = false;
+    constructor(opts) {
+        this.log = opts.log ?? (() => { });
+        const peerOpts = { sockPath: opts.sockPath, name: opts.name };
+        if (opts.auditPath !== undefined)
+            peerOpts.auditPath = opts.auditPath;
+        this.peer_ = new SessionPeer(peerOpts);
+        if (opts.bridge) {
+            const p = { relayUrl: opts.bridge.relayUrl, cwd: opts.bridge.cwd };
+            if (opts.bridge.sessionName !== undefined)
+                p.sessionName = opts.bridge.sessionName;
+            this.bridgeParams = p;
+        }
+    }
+    /** Join (or lead) the mesh. Resolves with the assigned name. */
+    async connect() {
+        const name = await this.peer_.start();
+        this._wireReconnect();
+        if (this.bridgeParams)
+            await this._maybeBridge();
+        return name;
+    }
+    /**
+     * Attach a cross-PC bridge on top of an EXTERNALLY-owned relay (Pi path).
+     * Idempotent; only attaches when this node is the leader. Remembers the
+     * params so the bridge re-attaches after a UDS failover. Call again with a
+     * fresh relay after a relay reconnect.
+     */
+    async attachBridge(opts) {
+        const p = { relayUrl: opts.relayUrl, injectedRelay: opts.relay };
+        if (opts.keypair !== undefined)
+            p.keypair = opts.keypair;
+        this.bridgeParams = p;
+        this._wireReconnect();
+        await this._maybeBridge();
+    }
+    /**
+     * Tear down the bridge AND forget its params (no auto re-attach until the
+     * next `attachBridge`/`connect`). Closes the relay only if MeshNode created
+     * it — an injected relay belongs to the host. Use on stop / relay drop.
+     */
+    detachBridge() {
+        this._detachBridgeKeepingParams();
+        this.bridgeParams = null;
+    }
+    // ── Bridge internals ────────────────────────────────────────────────────────
+    _wireReconnect() {
+        if (this.reconnectWired)
+            return;
+        this.reconnectWired = true;
+        // SessionPeer.onReconnect fires only after a UDS re-election (failover),
+        // not on relay events. On failover the broker reference changes, so drop
+        // the stale bridge and re-attach against the fresh localBroker().
+        this.peer_.onReconnect(() => { void this._onReconnect(); });
+    }
+    async _onReconnect() {
+        if (!this.bridgeParams)
+            return;
+        this._detachBridgeKeepingParams();
+        await this._maybeBridge();
+    }
+    async _maybeBridge() {
+        if (this.brokerRemote)
+            return;
+        if (this.peer_.currentRole() !== "leader")
+            return;
+        const broker = this.peer_.localBroker();
+        if (!broker)
+            return;
+        const params = this.bridgeParams;
+        if (!params)
+            return;
+        let relay;
+        if (params.injectedRelay) {
+            relay = params.injectedRelay;
+            this.relayOwned = false;
+        }
+        else {
+            if (!this.keypair)
+                this.keypair = params.keypair ?? (await getOrCreateEd25519Keypair());
+            const roomId = roomIdForCwd(params.cwd);
+            const roomMeta = { name: params.sessionName ?? this.peer_.name(), cwd: params.cwd };
+            const r = new RelayClient(toWebSocketUrl(params.relayUrl), this.keypair);
+            try {
+                await r.connect({ roomId, roomMeta });
+            }
+            catch (err) {
+                // UDS mesh still works; cross-PC stays unavailable until a leader
+                // with a healthy relay appears.
+                this.log(`mesh bridge: relay connect failed: ${String(err)}`);
+                return;
+            }
+            relay = r;
+            this.relayOwned = true;
+        }
+        this.relay = relay;
+        if (!this.keypair)
+            this.keypair = params.keypair ?? (await getOrCreateEd25519Keypair());
+        const { brokerRemote, piForward } = await attachCrossPcBridge({
+            broker,
+            relay,
+            relayUrl: params.relayUrl,
+            keypair: this.keypair,
+            log: this.log,
+        });
+        this.brokerRemote = brokerRemote;
+        this.piForward = piForward;
+    }
+    _detachBridgeKeepingParams() {
+        this.brokerRemote?.detach();
+        this.brokerRemote = null;
+        this.piForward?.detach();
+        this.piForward = null;
+        if (this.relayOwned)
+            this.relay?.close();
+        this.relay = null;
+        this.relayOwned = false;
+    }
+    // ── Bridge passthroughs (no-op when no bridge / follower) ───────────────────
+    /** Keep the cross-PC sibling set in sync (Pi SelfRevoke onMembersChanged). */
+    setSiblings(siblings) {
+        this.brokerRemote?.setSiblings(siblings);
+    }
+    /** Announce the local peer set to siblings (Pi broker peer_joined/left). */
+    onLocalPeersChanged(local) {
+        this.brokerRemote?.onLocalPeersChanged(local);
+    }
+    /** True when the cross-PC relay bridge is active (this node is leader). */
+    hasBridge() {
+        return this.brokerRemote !== null;
+    }
+    // ── Mesh API (delegates to SessionPeer) ─────────────────────────────────────
+    /** The underlying SessionPeer — for consumers that need it directly (tools). */
+    peer() {
+        return this.peer_;
+    }
+    /** Fire-and-forget send. `to` may be a name, `<pc>:<name>`, or "broadcast". */
+    async send(to, body, re = null) {
+        return this.peer_.send(to, body, re);
+    }
+    /** Unicast send + await broker ACK (received/busy/denied/timeout). */
+    async sendWithAck(to, body, re = null, timeoutMs) {
+        return timeoutMs === undefined
+            ? this.peer_.sendWithAck(to, body, re)
+            : this.peer_.sendWithAck(to, body, re, timeoutMs);
+    }
+    /** Send + await the first reply whose `re` matches the outbound id. */
+    async request(to, body, timeoutMs) {
+        return timeoutMs === undefined
+            ? this.peer_.request(to, body)
+            : this.peer_.request(to, body, timeoutMs);
+    }
+    /** Subscribe to inbound envelopes. Returns an unsubscribe fn. */
+    onMessage(handler) {
+        return this.peer_.onMessage(handler);
+    }
+    /** Subscribe to post-failover reconnects. Returns an unsubscribe fn. */
+    onReconnect(handler) {
+        return this.peer_.onReconnect(handler);
+    }
+    /** Assigned mesh name (after any #N collision suffix). */
+    name() {
+        return this.peer_.name();
+    }
+    /** "leader" | "follower". */
+    currentRole() {
+        return this.peer_.currentRole();
+    }
+    /** The locally-hosted Broker when leader, else null. */
+    localBroker() {
+        return this.peer_.localBroker();
+    }
+    /**
+     * Aggregated mesh roster (local UDS peers + cross-PC `<pc>:<peer>`),
+     * excluding self. Asks the broker, which merges its remote router cache.
+     */
+    async listPeers(timeoutMs = 2_000) {
+        const reply = await this.peer_.request("broker", { type: "list_peers" }, timeoutMs);
+        const body = reply.body;
+        return (body?.peers ?? []).filter((p) => p !== this.peer_.name());
+    }
+    /** Tear down the bridge (if any) and leave the mesh. */
+    async close() {
+        this.detachBridge();
+        await this.peer_.leave();
+    }
+}
+//# sourceMappingURL=mesh_node.js.map

package/dist/session/mesh_node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mesh_node.js","sourceRoot":"","sources":["../../src/session/mesh_node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA2C,MAAM,WAAW,CAAC;AAKjF,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAsE9C,MAAM,OAAO,QAAQ;IACF,KAAK,CAAc;IACnB,GAAG,CAAwB;IAEpC,KAAK,GAAuB,IAAI,CAAC;IACjC,UAAU,GAAG,KAAK,CAAC;IACnB,YAAY,GAAwB,IAAI,CAAC;IACzC,SAAS,GAA2B,IAAI,CAAC;IACzC,OAAO,GAA0B,IAAI,CAAC;IACtC,YAAY,GAAwB,IAAI,CAAC;IACzC,cAAc,GAAG,KAAK,CAAC;IAE/B,YAAY,IAAqB;QAC/B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,GAAE,CAAC,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAuB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAClF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACtE,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,GAAiB,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACjF,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;gBAAE,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YACnF,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,IAAwE;QACzF,MAAM,CAAC,GAAiB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC/E,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QACzD,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACH,YAAY;QACV,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED,+EAA+E;IAEvE,cAAc;QACpB,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,yEAAyE;QACzE,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO;QAC/B,IAAI,CAAC,0BAA0B,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,QAAQ;YAAE,OAAO;QAClD,MAAM,MAAM,GAAkB,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC;QACjC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,IAAI,KAAkB,CAAC;QACvB,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;YAC7B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,yBAAyB,EAAE,CAAC,CAAC;YACxF,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,GAAI,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAI,EAAE,CAAC;YACrF,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACzE,IAAI,CAAC;gBACH,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,kEAAkE;gBAClE,gCAAgC;gBAChC,IAAI,CAAC,GAAG,CAAC,sCAAsC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YACD,KAAK,GAAG,CAAC,CAAC;YACV,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAEnB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,yBAAyB,EAAE,CAAC,CAAC;QAExF,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,MAAM,mBAAmB,CAAC;YAC5D,MAAM;YACN,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAEO,0BAA0B;QAChC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;IAC1B,CAAC;IAED,+EAA+E;IAE/E,8EAA8E;IAC9E,WAAW,CAAC,QAAuB;QACjC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,4EAA4E;IAC5E,mBAAmB,CAAC,KAAe;QACjC,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,2EAA2E;IAC3E,SAAS;QACP,OAAO,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC;IACpC,CAAC;IAED,+EAA+E;IAE/E,gFAAgF;IAChF,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,IAAI,CAAC,EAAqB,EAAE,IAAa,EAAE,KAAoB,IAAI;QACvE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,WAAW,CAAC,EAAU,EAAE,IAAa,EAAE,KAAoB,IAAI,EAAE,SAAkB;QACvF,OAAO,SAAS,KAAK,SAAS;YAC5B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IACtD,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,IAAa,EAAE,SAAkB;QACzD,OAAO,SAAS,KAAK,SAAS;YAC5B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC;YAC9B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,iEAAiE;IACjE,SAAS,CAAC,OAAgC;QACxC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,wEAAwE;IACxE,WAAW,CAAC,OAAmB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,0DAA0D;IAC1D,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,6BAA6B;IAC7B,WAAW;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAED,wDAAwD;IACxD,WAAW;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,SAAS,GAAG,KAAK;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,SAAS,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAmC,CAAC;QACvD,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF"}