shellbell 0.8.0 → 0.10.0

package/dist/{service-lifecycle-DSu0qN1l.js → service-lifecycle-BCnZrcYZ.js}

@@ -13,7 +13,7 @@ const fs=BigInt(0),ps=BigInt(1),ms=BigInt(2),hs=BigInt(4),gs=BigInt(8);function
 const bs=BigInt(0),xs=BigInt(1),Ss=BigInt(2);function Cs(e,t){return e+t-(t>>xs<<xs)}function ws(e){let t=BigInt(6)*e;return(n,r,i)=>{let a=r+i,o=((t+i-r)*n+r)%e;return{x_2:o,x_3:a-o}}}function Ts(e){return fo(e,{P:`bigint`,type:`string`,adjustScalarBytes:`function`,powPminus2:`function`},{randomBytes:`function`,scalarMultBase:`function`}),Object.freeze({...e})}function Es(e){let t=Ts(e),{P:n,type:r,adjustScalarBytes:i,powPminus2:a,randomBytes:o}=t,s=t.scalarMultBase,c=r===`x25519`;if(!c&&r!==`x448`)throw Error(`invalid type`);let l=o===void 0?qa:o,u=c?255:448,d=ws(n),f=c?32:56,p=BigInt(c?9:5),m=BigInt(c?121665:39081),h=c?Ss**BigInt(254):Ss**BigInt(447),g=h+(c?BigInt(8)*(Ss**BigInt(251)-xs):BigInt(4)*(Ss**BigInt(445)-xs))+xs,_=e=>wo(e,n),v=y(p);function y(e){return io(_(e),f)}function b(e){let t=ao(za(e,f,`uCoordinate`));return c&&(t[31]&=127),_(no(t))}function ee(e){return no(i(ao(za(e,f,`scalar`))))}let x=new Set(c?[bs,xs,n-xs,BigInt(`325606250916557431795983626356110631294008115727848805560023387167927233504`),BigInt(`39382357235489614581723060781553021112529911719440698176882885853963445705823`)]:[bs,xs,n-xs]);function S(e,t){let n=b(t);if(x.has(n))throw Error(`invalid private or public key received`);let r=E(n,ee(e));if(r===bs)throw Error(`invalid private or public key received`);return y(r)}function C(e){if(s===void 0)return S(e,v);let t=ee(e);co(`scalar`,t,h,g);let n=_(s(t));if(n===bs)throw Error(`invalid private or public key received`);return y(n)}let w=C,T=S;function E(e,t){co(`u`,e,bs,n),co(`scalar`,t,h,g);let r=t,i=e,o=xs,s=bs,c=e,l=xs,f=r^r>>xs;for(let e=BigInt(u-1);e>=bs;e--){let t=Cs(n,f>>e);({x_2:o,x_3:c}=d(t,o,c)),{x_2:s,x_3:l}=d(t,s,l);let r=o+s,a=_(r*r),u=o-s,p=_(u*u),h=a-p,g=c+l,v=c-l,y=_(v*r),b=_(g*u),ee=y+b,x=y-b;c=_(ee*ee),l=_(i*_(x*x)),o=_(a*p),s=_(h*(a+_(m*h)))}let p=Cs(n,r);({x_2:o,x_3:c}=d(p,o,c)),{x_2:s,x_3:l}=d(p,s,l);let v=a(s);return _(o*v)}let D={secretKey:f,publicKey:f,seed:f},O=e=>(e=e===void 0?l(f):e,za(e,D.seed,`seed`),e),k={randomSecretKey:O};return Object.freeze(D),Object.freeze(k),Object.freeze({keygen:ds(O,w),getSharedSecret:T,getPublicKey:w,scalarMult:S,scalarMultBase:C,utils:k,GuBytes:v.slice(),lengths:D})}
 /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
 const Ds=BigInt(0),Os=BigInt(1),ks=BigInt(2),As=BigInt(3),js=BigInt(5),Ms=BigInt(8),Ns=BigInt(`0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffed`),Ps={p:Ns,n:BigInt(`0x1000000000000000000000000000000014def9dea2f79cd65812631a5cf5d3ed`),h:Ms,a:BigInt(`0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffec`),d:BigInt(`0x52036cee2b6ffe738cc740797779e89800700a4d4141d8ab75eb4dca135978a3`),Gx:BigInt(`0x216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a`),Gy:BigInt(`0x6666666666666666666666666666666666666666666666666666666666666658`)};function Fs(e){let t=BigInt(10),n=BigInt(20),r=BigInt(40),i=BigInt(80),a=Ns,o=e*e%a*e%a,s=Eo(Eo(o,ks,a)*o%a,Os,a)*e%a,c=Eo(s,js,a)*s%a,l=Eo(c,t,a)*c%a,u=Eo(l,n,a)*l%a,d=Eo(u,r,a)*u%a;return{pow_p_5_8:Eo(Eo(Eo(Eo(d,i,a)*d%a,i,a)*d%a,t,a)*c%a,ks,a)*e%a,b2:o}}function Is(e){return e[0]&=248,e[31]&=127,e[31]|=64,e}const Ls=BigInt(`19681161376707505956807079304988542015446066515923890162744021073123829784752`);function Rs(e,t){let n=Ns,r=wo(t*t*t,n),i=Fs(e*wo(r*r*t,n)).pow_p_5_8,a=wo(e*r*i,n),o=wo(t*a*a,n),s=a,c=wo(a*Ls,n),l=o===e,u=o===wo(-e,n),d=o===wo(-e*Ls,n);return l&&(a=s),(u||d)&&(a=c),Fo(a,n)&&(a=wo(-a,n)),{isValid:l||u,value:a}}const zs=vs(Ps,{uvRatio:Rs}),Bs=zs.Fp;function Vs(e){let{y:t}=e;return Bs.toBytes(Bs.div(Os+t,Os-t))}function Hs(e){let t=zs.Fp.BYTES;return ta(e,t),Is(La(e.subarray(0,t))).subarray(0,t)}function Us(e){return ys(zs,La,Object.assign({adjustScalarBytes:Is,toMontgomery:Vs,toMontgomerySecret:Hs,zip215:!0},e))}const Ws=Us({}),Gs=(()=>{let e=Ns,t=t=>{let{pow_p_5_8:n,b2:r}=Fs(t);return wo(Eo(n,As,e)*r,e)};return Es({P:e,type:`x25519`,powPminus2:t,adjustScalarBytes:Is,scalarMultBase:n=>{let r=wo(n,zs.Fn.ORDER);if(r===Ds)return Ds;let i=zs.BASE.multiply(r);return wo((i.Z+i.Y)*t(wo(i.Z-i.Y,e)),e)}})})();var Ks=class{oHash;iHash;blockLen;outputLen;canXOF=!1;finished=!1;destroyed=!1;constructor(e,t){if(na(e),ta(t,void 0,`key`),this.iHash=e.create(),typeof this.iHash.update!=`function`)throw Error(`expected Hash instance`);this.blockLen=this.iHash.blockLen,this.outputLen=this.iHash.outputLen;let n=this.blockLen,r=new Uint8Array(n);r.set(t.length>n?e.create().update(t).digest():t);for(let e=0;e<r.length;e++)r[e]^=54;this.iHash.update(r),this.oHash=e.create();for(let e=0;e<r.length;e++)r[e]^=106;this.oHash.update(r),sa(r)}update(e){return aa(this),this.iHash.update(e),this}digestInto(e){aa(this),oa(e,this),this.finished=!0;let t=e.subarray(0,this.outputLen);this.iHash.digestInto(t),this.oHash.update(t),this.oHash.digestInto(t),this.destroy()}digest(){let e=new Uint8Array(this.oHash.outputLen);return this.digestInto(e),e}_cloneInto(e){e||=Object.create(Object.getPrototypeOf(this),{});let{oHash:t,iHash:n,finished:r,destroyed:i,blockLen:a,outputLen:o,canXOF:s}=this;return e=e,e.finished=r,e.destroyed=i,e.blockLen=a,e.outputLen=o,e.canXOF=s,e.oHash=t._cloneInto(e.oHash),e.iHash=n._cloneInto(e.iHash),e}clone(){return this._cloneInto()}destroy(){this.destroyed=!0,this.oHash.destroy(),this.iHash.destroy()}};const qs=(()=>{let e=((e,t,n)=>new Ks(e,t).update(n).digest());return e.create=(e,t)=>new Ks(e,t),e})(),Js=Uint8Array.of(0),Ys=Uint8Array.of();function Xs(e,t,n,r=32,i){na(e),ea(r,`length`),ta(t,void 0,`prk`);let a=e.outputLen;if(t.length<a)throw Error(`"prk" must be at least HashLen octets`);if(r>255*a)throw Error(`Length must be <= 255*HashLen`);let o=Math.ceil(r/a);if(n===void 0?n=Ys:ta(n,void 0,`info`),!o)return i&&sa(t),new Uint8Array;let s=i&&o===1?t:new Uint8Array(o*a),{iHash:c,oHash:l}=qs.create(e,t),u=i?t:new Uint8Array(a),d=o>1?i?.iHash||e.create():void 0;for(let e=0;e<o-1;e++){Js[0]=e+1;let t=c._cloneInto(d);e&&t.update(u),t.update(n).update(Js).digestInto(u),l._cloneInto(d).update(u).digestInto(u),s.set(u,a*e)}if(Js[0]=o,o>1&&c.update(u),c.update(n).update(Js).digestInto(u),l.update(u).digestInto(u),s.set(u,a*(o-1)),c.destroy(),l.destroy(),d?.destroy(),u!==s&&sa(u),sa(Js),r===s.length)return s;let f=s.slice(0,r);return sa(s),f}const Zs=(e,t,n,r,i)=>{na(e),n===void 0&&(n=new Uint8Array(e.outputLen));let a=qs.create(e,n).update(t);return Xs(e,a.digest(),r,i,a)};function Qs(){return $s(va(32),va(32),new Date().toISOString())}function $s(e,t,n){let r=Ws.keygen(e),i=Gs.keygen(t);return{ed25519:{pub:r.publicKey,priv:r.secretKey},x25519:{pub:i.publicKey,priv:i.secretKey},createdAt:n}}const ec=I.object({v:I.literal(1),ed25519:I.object({pub:I.string(),priv:I.string()}),x25519:I.object({pub:I.string(),priv:I.string()}),createdAt:I.string()});function tc(e){return{v:1,ed25519:{pub:yr(e.ed25519.pub),priv:yr(e.ed25519.priv)},x25519:{pub:yr(e.x25519.pub),priv:yr(e.x25519.priv)},createdAt:e.createdAt}}function nc(e){let t=ec.safeParse(e);if(!t.success)throw new H(`malformed`,`identity: ${I.prettifyError(t.error)}`);let n=t.data,r,i,a,o;try{r=br(n.ed25519.pub),i=br(n.ed25519.priv),a=br(n.x25519.pub),o=br(n.x25519.priv)}catch{throw new H(`malformed`,`identity: bad base64url`)}if(r.length!==32||i.length!==32||a.length!==32||o.length!==32)throw new H(`malformed`,`identity: key length`);return{ed25519:{pub:r,priv:i},x25519:{pub:a,priv:o},createdAt:n.createdAt}}function rc(e){return xr(Ia(e)).slice(0,26)}function ic(e){return typeof e==`string`?vr(e):e}function ac(e,t){return Ws.sign(ic(t),e)}function oc(e,t,n){try{return Ws.verify(n,ic(t),e)}catch{return!1}}function sc(e,t,n,r){return`shellbell-auth-v1|${e}|${t}|${n}|${yr(r)}`}function cc(e,t,n,r){return{n:t,c:ji(e,t,vr(r)).encrypt(n)}}function lc(e,t,n){return cc(e,va(24),t,n)}function uc(e,t,n){try{return ji(e,t.n,vr(n)).decrypt(t.c)}catch{throw new H(`crypto`,`aead open failed`)}}function dc(e,t){return Zs(Ia,e,vr(`shellbell-pairing-v1`),vr(t),32)}function fc(e,t,n,r,i){let a=Gs.getSharedSecret(e,t);if(a.every(e=>e===0))throw new H(`crypto`,`low-order point`);return Zs(Ia,wr(a,n),vr(`shellbell-pair-v1`),vr(`${r}|${i}`),32)}function pc(e,t,n,r,i){let a=wr(t,n);return{kConn:Zs(Ia,e,a,vr(`shellbell-conn-v1|${r}|${i}`),32),connTag:yr(Ia(a)).slice(0,22)}}function mc(e,t,n){if(e.length!==32||!/^[a-z2-7]{26}$/.test(t)||!/^[a-z2-7]{26}$/.test(n))throw new H(`malformed`,`invalid Noise PSK derivation input`);return Zs(Ia,e,vr(`shellbell-noise-v2-psk`),vr(`${t}|${n}`),32)}function hc(e,t,n,r){return`1|${e}|${t}|${n}|${r}`}function gc(e,t){return`1|${e}|${t}|hello|0`}function _c(e,t,n){return`pairing-${e}|${t}|${n}`}function vc(e,t,n,r){return`shellbell-pair-bind-v1|${e}|${t}|${n}|${yr(r)}`}function yc(e){return e.match(/.{1,4}/g)?.join(` `)??e}const bc=`notify-context-v1`,xc=`shellbell-notification-v1`,Sc={plaintextBytes:1536,ciphertextBytes:1552,providerBytes:3500,freshnessMs:12e4,clockSkewMs:6e4,previousGenerationMs:3e5,sessions:500,encryptions:2**20};function Cc(e,t=e){return I.string().min(Math.ceil(e*4/3)).max(Math.ceil(t*4/3)).refine(n=>{try{let r=br(n);return r.length>=e&&r.length<=t&&yr(r)===n}catch{return!1}},`invalid canonical base64url`)}const wc=Cc(16),Tc=I.array(I.string().min(1).max(32)).max(8),Ec=I.number().int().nonnegative().max(2**53-1),Dc=I.string().regex(/^[1-9][0-9]{0,19}$/).refine(e=>/^[1-9][0-9]{0,19}$/.test(e)&&BigInt(e)<=18446744073709551615n,`sequence overflow`),Oc=/[\p{Cc}\p{Cs}\u061c\u200e\u200f\u2028-\u202e\u2066-\u2069]/u;function kc(e){return I.string().min(1).max(e).refine(t=>t.trim().length>0&&!Oc.test(t)&&vr(t).length<=e,`invalid notification label`)}const Ac=I.strictObject({computerName:kc(128),sessionLabel:kc(128),observedAt:Ec,customName:kc(256).optional(),repository:kc(256).optional(),branch:kc(256).optional(),title:kc(256).optional(),shell:kc(64).optional(),agentName:kc(64).optional()}),jc=I.strictObject({computerFp:W,phoneFp:W,generation:wc,sessionId:I.string().min(1).max(128),eventId:Cc(16)}),Mc=I.enum([`command-finished`,`prompt-returned`,`agent-finished`,`agent-blocked`,`quiet`]),Nc=jc.extend({context:Ac,reason:Mc,exitCode:I.number().int().optional(),durationMs:Ec.optional(),issuedAt:Ec,expiresAt:Ec,sequence:Dc}).refine(e=>e.expiresAt>e.issuedAt&&e.expiresAt-e.issuedAt<=Sc.freshnessMs&&e.context.observedAt<=e.issuedAt,`invalid notification times`).refine(e=>vr(JSON.stringify(e)).length<=Sc.plaintextBytes,`notification plaintext exceeds byte limit`),Pc=jc.extend({nonce:Cc(12),ciphertext:Cc(17,Sc.ciphertextBytes)});function Fc(e){return jc.parse({computerFp:e.computerFp,phoneFp:e.phoneFp,generation:e.generation,sessionId:e.sessionId,eventId:e.eventId})}const Ic=vr(`shellbell-pair-revocation-id-v2\0`),Lc=I.strictObject({v:I.literal(2),computerFp:W,phoneFp:W,pairId:U(32),signature:U(64)});function Rc(e){if(!(e instanceof Uint8Array)||e.length!==32)throw Error(`K_pair must be 32 bytes`);return Ia(wr(Ic,e))}function zc(e,t,n){return Wn([`shellbell-pair-revocation-v2`,e,t,n])}function Bc(e,t){if(e.length!==32||t.length!==32)return!1;let n=0;for(let r=0;r<32;r++)n|=(e[r]??0)^(t[r]??0);return n===0}function Vc(e,t){if(!Hc(e,t))return!1;try{return Bc(e.pairId,Rc(t.kPair))}catch{return!1}}function Hc(e,t){let n=Lc.safeParse(e);if(!n.success)return!1;let r=n.data;if(r.computerFp!==t.computerFp||r.phoneFp!==t.phoneFp||t.phoneEd25519Pub.length!==32||rc(t.phoneEd25519Pub)!==t.phoneFp)return!1;try{return oc(t.phoneEd25519Pub,zc(r.computerFp,r.phoneFp,r.pairId),r.signature)}catch{return!1}}const Uc=I.enum([`agent`,`phone`,`pairing`]),Wc=I.enum([`prompt`,`idle`,`exit`,`blocked`]),Gc=I.enum([`bad-sig`,`not-paired`,`fp-mismatch`,`no-agent`,`no-window`,`timeout`]),Kc=I.enum([`bad-code`,`declined`,`window-closed`,`no-agent`,`too-many`]),qc=I.string().min(1).max(64),Jc=I.string().max(256).regex(/^(stun|turns?):[\x21-\x7e]+$/,`ICE server URL must be STUN or TURN`),Yc=I.object({urls:I.array(Jc).min(1).max(8),username:I.string().min(1).max(256).optional(),credential:I.string().min(1).max(256).optional()}).strict(),Xc=I.array(Yc).max(4),Zc=I.number().int().min(0).max(6048e5),Qc=I.string().min(1).max(64),$c=Zn;function el(e){let t=e.environment??void 0;return e.provider===`fcm`?e.platform===`android`&&t===void 0:e.provider===`apns`&&e.platform===`ios`&&(t===`development`||t===`production`)}const tl=I.strictObject({type:I.literal(`push-token`),token:I.string().min(1).max(4096),platform:I.enum([`ios`,`android`]),provider:I.enum([`fcm`,`apns`]).optional(),environment:I.enum([`development`,`production`]).optional(),enabled:I.boolean(),features:Tc.optional()}).superRefine((e,t)=>{if(e.provider===void 0){e.token.length>256&&t.addIssue({code:`custom`,path:[`token`],message:`legacy token exceeds 256 characters`}),e.environment!==void 0&&t.addIssue({code:`custom`,path:[`environment`],message:`environment requires APNs`});return}[...e.token].some(e=>e.charCodeAt(0)>127)&&t.addIssue({code:`custom`,path:[`token`],message:`native token must be ASCII`}),!el(e)&&(e.provider===`fcm`?(e.platform!==`android`&&t.addIssue({code:`custom`,path:[`platform`],message:`FCM requires Android`}),e.environment!==void 0&&t.addIssue({code:`custom`,path:[`environment`],message:`FCM has no environment`})):(e.platform!==`ios`&&t.addIssue({code:`custom`,path:[`platform`],message:`APNs requires iOS`}),e.environment===void 0&&t.addIssue({code:`custom`,path:[`environment`],message:`APNs requires an environment`})))}).refine(e=>e.provider===void 0?e.token.length<=256&&e.environment===void 0:![...e.token].some(e=>e.charCodeAt(0)>127)&&el(e),{message:`invalid push-token provider, platform, environment, or token`}),nl=I.object({phoneFp:W,ed25519Pub:U(32),name:qc,pairId:U(32).optional()}),rl=I.discriminatedUnion(`type`,[I.strictObject({type:I.literal(`notify-context`),sessionId:jc.shape.sessionId,eventId:jc.shape.eventId,kind:I.enum([`prompt`,`idle`,`blocked`]),exitCode:I.number().int().optional(),durationMs:I.number().int().nonnegative().optional(),boxes:I.array(Pc).max(10)}).refine(e=>new Set(e.boxes.map(e=>e.phoneFp)).size===e.boxes.length&&e.boxes.every(t=>t.sessionId===e.sessionId&&t.eventId===e.eventId&&t.computerFp===e.boxes[0]?.computerFp),`inconsistent notification recipients`),I.object({type:I.literal(`challenge`),nonce:U(32),connId:Qc}),I.object({type:I.literal(`auth`),role:Uc,fp:W,ed25519Pub:U(32),sig:U(64),name:qc,appVersion:I.string().max(32),gate:U(16).optional(),turn:I.literal(!1).optional()}),I.object({type:I.literal(`auth-ok`),role:Uc,agentOnline:I.boolean(),computerName:I.string().max(64).nullable(),serverTime:I.number(),minFrameMs:I.number().int().min(50).max(2e3),features:Tc.optional(),iceServers:Xc.optional(),iceExpiresInMs:Zc.optional(),turnOff:I.literal(!0).optional()}),I.object({type:I.literal(`auth-fail`),reason:Gc}),I.object({type:I.literal(`presence`),agentOnline:I.boolean(),computerName:I.string().max(64).nullable()}),I.object({type:I.literal(`unpaired`),phoneFps:I.array(W).max(10),proofs:I.array(Lc).max(10).optional()}),I.object({type:I.literal(`phones`),connected:I.array(I.object({phoneFp:W,connId:Qc,name:qc})).max(10)}),I.object({type:I.literal(`pairings-sync`),phones:I.array(nl).max(10)}),I.object({type:I.literal(`revocation-ack`),phoneFp:W,pairId:U(32)}),I.object({type:I.literal(`pairing-open`),gateHash:U(32),expiresAt:I.number()}),I.object({type:I.literal(`pairing-close`)}),I.object({type:I.literal(`pairing-request`),phoneFp:W,box:$c}),I.object({type:I.literal(`pairing-response`),phoneFp:W,box:$c}),I.object({type:I.literal(`pairing-reject`),phoneFp:W,reason:Kc}),I.object({type:I.literal(`pairing-add`),phoneFp:W,ed25519Pub:U(32),name:qc,pairId:U(32).optional()}),I.object({type:I.literal(`unpair`),phoneFp:W,proof:Lc.optional()}),I.object({type:I.literal(`revocation-submit`),phoneEd25519Pub:U(32),proof:Lc}),I.object({type:I.literal(`revocation-receipt`),phoneFp:W,pairId:U(32),status:I.enum([`stored`,`absent`,`stale`,`unavailable`])}),tl,I.object({type:I.literal(`lease`),ttlMs:I.number().int().min(0).max(12e4)}),I.object({type:I.literal(`ice-refresh`)}),I.object({type:I.literal(`ice-servers`),iceServers:Xc,iceExpiresInMs:Zc}),I.object({type:I.literal(`notify`),sessionId:I.string().min(1).max(128),kind:I.enum([`prompt`,`idle`,`blocked`]),exitCode:I.number().int().optional(),durationMs:I.number().int().nonnegative().optional()}),I.object({type:I.literal(`phone-connected`),phoneFp:W,connId:Qc,name:qc}),I.object({type:I.literal(`phone-disconnected`),phoneFp:W,connId:Qc}),I.object({type:I.literal(`error`),code:I.string().max(64),message:I.string().max(512)})]);function il(e){let t=rl.safeParse(e);if(!t.success)throw new H(`malformed`,`ctrl: ${I.prettifyError(t.error)}`);return t.data}const al={enter:`\r`,tab:`	`,"shift-tab":`\x1B[Z`,esc:`\x1B`,backspace:``,delete:`\x1B[3~`,up:`\x1B[A`,down:`\x1B[B`,right:`\x1B[C`,left:`\x1B[D`,home:`\x1B[H`,end:`\x1B[F`,"page-up":`\x1B[5~`,"page-down":`\x1B[6~`,"ctrl-space":`\0`,...Object.fromEntries(`abcdefghijklmnopqrstuvwxyz`.split(``).map((e,t)=>[`ctrl-${e}`,String.fromCharCode(t+1)])),f1:`\x1BOP`,f2:`\x1BOQ`,f3:`\x1BOR`,f4:`\x1BOS`,f5:`\x1B[15~`,f6:`\x1B[17~`,f7:`\x1B[18~`,f8:`\x1B[19~`,f9:`\x1B[20~`,f10:`\x1B[21~`,f11:`\x1B[23~`,f12:`\x1B[24~`},ol=I.enum(Object.keys(al));function sl(e){return al[e]}const cl=new Uint8Array,ll=vr(`Noise_KKpsk2_25519_ChaChaPoly_SHA256`),ul=(1n<<64n)-2n,dl=65535,fl=Symbol(`Noise transport factory`);function pl(){return globalThis.process?.env?.NODE_ENV===`test`}function ml(e){if(e<0n||e>ul)throw Error(`invalid Noise sequence or reserved nonce`)}function hl(e){ml(e);let t=new Uint8Array(8);return new DataView(t.buffer).setBigUint64(0,e,!0),t}function gl(e){if(e.length!==8)throw Error(`invalid Noise sequence length`);let t=new DataView(e.buffer,e.byteOffset,8).getBigUint64(0,!0);return ml(t),t}function _l(e){let t=new Uint8Array(12);return t.set(hl(e),4),t}function vl(e,t,n){let r=qs(Ia,e,t),i=qs(Ia,r,Uint8Array.of(1)),a=qs(Ia,r,wr(i,Uint8Array.of(2))),o=n===2?[i,a]:[i,a,qs(Ia,r,wr(a,Uint8Array.of(3)))];return r.fill(0),o}function yl(e,t){let n=Gs.getSharedSecret(e,t);if(n.every(e=>e===0))throw Error(`invalid Noise public key`);return n}var bl=class{chainingKey=Ia(ll);hash=this.chainingKey.slice();key=null;nonce=0n;get handshakeHash(){return this.hash.slice()}mixHash(e){this.hash=Ia(wr(this.hash,e))}setKey(e){this.key?.fill(0),this.key=e,this.nonce=0n}mixKey(e){let[t,n]=vl(this.chainingKey,e,2);this.chainingKey.fill(0),this.chainingKey=t,this.setKey(n)}mixKeyAndHash(e){let[t,n,r]=vl(this.chainingKey,e,3);this.chainingKey.fill(0),this.chainingKey=t,this.mixHash(n),n.fill(0),this.setKey(r)}encryptAndHash(e){if(!this.key)throw Error(`Noise handshake key missing`);let t=Ai(this.key,_l(this.nonce),this.hash).encrypt(e);return this.nonce+=1n,this.mixHash(t),t}decryptAndHash(e){if(!this.key)throw Error(`Noise handshake key missing`);let t=Ai(this.key,_l(this.nonce),this.hash).decrypt(e);return this.nonce+=1n,this.mixHash(e),t}split(){let[e,t]=vl(this.chainingKey,cl,2);return this.close(),[e,t]}close(){this.chainingKey.fill(0),this.hash.fill(0),this.key?.fill(0),this.key=null}},xl=class{sendKey;receiveKey;lastSent=-1n;lastReceived=-1n;closed=!1;constructor(e,t,n,r){if(r!==fl)throw Error(`Noise transport factory required`);this.sendKey=new Uint8Array(e===`initiator`?t:n),this.receiveKey=new Uint8Array(e===`initiator`?n:t),t.fill(0),n.fill(0)}seal(e,t,n=cl){if(this.closed)throw Error(`Noise transport closed`);if(t.length>65519)throw Error(`Noise message too large`);if(ml(e),e<=this.lastSent)throw Error(`Noise send sequence reuse`);let r=Ai(this.sendKey,_l(e),n).encrypt(t);return this.lastSent=e,r}open(e,t,n=cl){if(this.closed)throw Error(`Noise transport closed`);if(t.length<16||t.length>dl)throw Error(`Noise message length invalid`);if(ml(e),e<=this.lastReceived)throw Error(`Noise receive sequence replay`);let r=Ai(this.receiveKey,_l(e),n).decrypt(t);return this.lastReceived=e,r}close(){this.closed||(this.closed=!0,this.sendKey.fill(0),this.receiveKey.fill(0))}},Sl=class{role;staticPrivate;remoteStatic;psk;ephemeralPrivate;remoteEphemeral=null;symmetric=new bl;finalHash=null;phase=`first`;constructor(e){if(e.role!==`initiator`&&e.role!==`responder`)throw Error(`invalid Noise role`);if(e.ephemeralPrivate&&!pl())throw Error(`fixed Noise ephemeral key is test-only`);for(let t of[e.staticPrivate,e.remoteStatic,e.psk])if(t.length!==32)throw Error(`Noise key must be 32 bytes`);if(e.prologue.length>1024)throw Error(`Noise prologue too large`);if(e.ephemeralPrivate&&e.ephemeralPrivate.length!==32)throw Error(`Noise ephemeral key must be 32 bytes`);this.role=e.role,this.staticPrivate=new Uint8Array(e.staticPrivate),this.remoteStatic=new Uint8Array(e.remoteStatic),this.psk=new Uint8Array(e.psk),this.ephemeralPrivate=e.ephemeralPrivate?new Uint8Array(e.ephemeralPrivate):Gs.utils.randomSecretKey(),this.symmetric.mixHash(e.prologue);let t=Gs.getPublicKey(this.staticPrivate);this.symmetric.mixHash(this.role===`initiator`?t:this.remoteStatic),this.symmetric.mixHash(this.role===`responder`?t:this.remoteStatic)}get handshakeHash(){if(this.finalHash)return this.finalHash.slice();if(this.phase!==`complete`)throw Error(`Noise handshake not complete`);return this.symmetric.handshakeHash}write(e=cl){if(e.length>0&&!pl())throw Error(`Noise handshake payloads are test-only`);if(this.role===`initiator`&&this.phase!==`first`||this.role===`responder`&&this.phase!==`second`)throw Error(`Noise handshake message order`);if(e.length>65487)throw Error(`Noise handshake payload too large`);try{let t=Gs.getPublicKey(this.ephemeralPrivate);if(this.symmetric.mixHash(t),this.symmetric.mixKey(t),this.role===`initiator`)this.symmetric.mixKey(yl(this.ephemeralPrivate,this.remoteStatic)),this.symmetric.mixKey(yl(this.staticPrivate,this.remoteStatic));else{if(!this.remoteEphemeral)throw Error(`Noise peer ephemeral key missing`);this.symmetric.mixKey(yl(this.ephemeralPrivate,this.remoteEphemeral)),this.symmetric.mixKey(yl(this.ephemeralPrivate,this.remoteStatic)),this.symmetric.mixKeyAndHash(this.psk)}let n=wr(t,this.symmetric.encryptAndHash(e));return this.phase=this.role===`initiator`?`second`:`complete`,n}catch(e){throw this.close(),e}}read(e){if(this.role===`responder`&&this.phase!==`first`||this.role===`initiator`&&this.phase!==`second`)throw Error(`Noise handshake message order`);if(e.length<48||e.length>dl)throw this.close(),Error(`Noise handshake message length`);if(e.length!==48&&!pl())throw this.close(),Error(`Noise handshake payloads are test-only`);try{let t=new Uint8Array(e.subarray(0,32));this.remoteEphemeral=t,this.symmetric.mixHash(t),this.symmetric.mixKey(t),this.role===`responder`?(this.symmetric.mixKey(yl(this.staticPrivate,t)),this.symmetric.mixKey(yl(this.staticPrivate,this.remoteStatic))):(this.symmetric.mixKey(yl(this.ephemeralPrivate,t)),this.symmetric.mixKey(yl(this.staticPrivate,t)),this.symmetric.mixKeyAndHash(this.psk));let n=this.symmetric.decryptAndHash(e.subarray(32));return this.phase=this.role===`responder`?`second`:`complete`,n}catch(e){throw this.close(),e}}split(){if(this.phase!==`complete`)throw Error(`Noise handshake not complete`);this.finalHash=this.symmetric.handshakeHash;let[e,t]=this.symmetric.split();return this.close(),new xl(this.role,e,t,fl)}close(){this.phase!==`failed`&&(this.phase=`failed`,this.staticPrivate.fill(0),this.remoteStatic.fill(0),this.psk.fill(0),this.ephemeralPrivate.fill(0),this.remoteEphemeral?.fill(0),this.symmetric.close())}};const Cl=`shellbell-v2-key-confirm`,wl=Symbol(`v2 handshake factory`),Tl=Symbol(`v2 session factory`),El=U(16).refine(e=>e.some(e=>e!==0),{message:`v2 ID must not be zero`}),Dl=U(8).refine(e=>{try{return gl(e)>0n}catch{return!1}},{message:`invalid v2 route generation`}),Ol={computerFp:W,phoneFp:W,sessionId:El,attemptId:El,generation:Dl},kl=I.discriminatedUnion(`route`,[I.object({...Ol,route:I.literal(`relay`)}).strict(),I.object({...Ol,route:I.literal(`direct`),phoneDtls:U(32),computerDtls:U(32)}).strict()]),Al=I.custom(e=>e instanceof Uint8Array&&e.length>=16&&e.length<=60016,{message:`invalid v2 ciphertext length`}),jl=I.object({v:I.literal(2),type:I.enum([`confirm`,`data`]),sessionId:El,generation:Dl,seq:U(8),ciphertext:Al}).strict();function Ml(e){let t=kl.parse(e),n={...t,sessionId:new Uint8Array(t.sessionId),attemptId:new Uint8Array(t.attemptId),generation:new Uint8Array(t.generation),...t.route===`direct`&&{phoneDtls:new Uint8Array(t.phoneDtls),computerDtls:new Uint8Array(t.computerDtls)}};return kl.parse(n)}function Nl(e){let t=kl.parse(e);return Wn([`shellbell-session-v2`,2,`phone`,`computer`,t.computerFp,t.phoneFp,t.sessionId,t.attemptId,t.generation,t.route,t.route===`direct`?t.phoneDtls:null,t.route===`direct`?t.computerDtls:null])}function Pl(e,t,n){return Wn([`shellbell-v2-frame`,e.sessionId,e.attemptId,e.generation,e.route,t,n.type,n.seq])}function Fl(e){return e===`phone`?`computer`:`phone`}function Il(e){let t=Wn(jl.parse(e));if(t.length>61e3)throw new H(`malformed`,`v2 frame too large`);return t}function Ll(e){if(e.length>61e3)throw new H(`malformed`,`v2 frame too large`);return jl.parse(Gn(e))}var Rl=class{context;role;noise;finished=!1;constructor(e,t,n,r){if(this.context=e,this.role=t,this.noise=n,r!==wl)throw Error(`v2 handshake factory required`)}write(){if(this.finished)throw Error(`v2 handshake finished`);return this.noise.write()}read(e){if(this.finished)throw Error(`v2 handshake finished`);if(e.length!==48)throw Error(`v2 empty-payload handshake must be 48 bytes`);if(this.noise.read(e).length!==0)throw Error(`v2 handshake payload forbidden`)}finish(){if(this.finished)throw Error(`v2 handshake already finished`);let e=this.noise.handshakeHash,t=this.noise.split();return this.finished=!0,new Bl(this.context,this.role,t,e,Tl)}close(){this.finished=!0,this.noise.close()}};function zl(e,t,n){if(t!==`phone`&&t!==`computer`)throw Error(`invalid v2 role`);let r=Ml(e),i=mc(n.pairKey,r.computerFp,r.phoneFp);try{return new Rl(r,t,new Sl({role:t===`phone`?`initiator`:`responder`,staticPrivate:n.staticPrivate,remoteStatic:n.remoteStatic,psk:i,prologue:Nl(r)}),wl)}finally{i.fill(0)}}var Bl=class{context;role;transport;handshakeHash;sentConfirmation=!1;receivedConfirmation=!1;dtlsVerified=!1;nextSequence=0n;lastReceived=-1n;closed=!1;constructor(e,t,n,r,i){if(this.context=e,this.role=t,this.transport=n,this.handshakeHash=r,i!==Tl)throw Error(`v2 session factory required`)}get ready(){return!this.closed&&this.sentConfirmation&&this.receivedConfirmation&&(this.context.route===`relay`||this.dtlsVerified)}get description(){return Ml(this.context)}get senderRole(){return this.role}verifyRemoteDtls(e){if(this.closed)throw Error(`v2 session closed`);if(this.context.route!==`direct`)throw Error(`relay route has no DTLS certificate`);let t=this.role===`phone`?this.context.computerDtls:this.context.phoneDtls;if(e.length!==32||!Tr(e,t))throw this.close(),Error(`remote DTLS certificate mismatch`);this.dtlsVerified=!0}frame(e,t){if(this.closed)throw Error(`v2 session closed`);if(t.length>6e4)throw Error(`v2 data too large`);let n=hl(this.nextSequence),r={v:2,type:e,sessionId:this.context.sessionId.slice(),generation:this.context.generation.slice(),seq:n,ciphertext:new Uint8Array};return r.ciphertext=this.transport.seal(this.nextSequence,t,Pl(this.context,this.role,r)),this.nextSequence+=1n,r}openFrame(e,t){if(this.closed)throw Error(`v2 session closed`);let n=jl.parse(e);if(n.type!==t)throw Error(`wrong v2 frame type`);if(!Tr(n.sessionId,this.context.sessionId)||!Tr(n.generation,this.context.generation))throw Error(`wrong v2 session or route generation`);let r=gl(n.seq),i=this.transport.open(r,n.ciphertext,Pl(this.context,Fl(this.role),n));if(r!==this.lastReceived+1n)throw i.fill(0),this.close(),Error(`v2 sequence gap requires resync`);return this.lastReceived=r,i}confirmation(){if(this.sentConfirmation)throw Error(`v2 confirmation already sent`);let e=this.frame(`confirm`,Wn([Cl,this.handshakeHash,this.role]));return this.sentConfirmation=!0,e}acceptConfirmation(e){try{if(this.receivedConfirmation)throw Error(`v2 confirmation already received`);if(gl(e.seq)!==0n)throw Error(`v2 confirmation sequence must be 0`);let t=Gn(this.openFrame(e,`confirm`));if(!Array.isArray(t)||t.length!==3||t[0]!==Cl||!(t[1]instanceof Uint8Array)||!Tr(t[1],this.handshakeHash)||t[2]!==Fl(this.role))throw Error(`invalid v2 key confirmation`);this.receivedConfirmation=!0}catch(e){throw this.close(),e}}seal(e){if(this.closed)throw Error(`v2 session closed`);if(!this.ready)throw Error(`v2 key confirmation incomplete`);return this.frame(`data`,e)}open(e){if(this.closed)throw Error(`v2 session closed`);if(!this.ready)throw Error(`v2 key confirmation incomplete`);if(gl(e.seq)<1n)throw Error(`v2 data sequence must be positive`);return this.openFrame(e,`data`)}close(){this.closed||(this.closed=!0,this.transport.close(),this.handshakeHash.fill(0))}};const Vl=`shellbell-v2-route-payload`,Hl=59e3,Ul={terminalBytes:Hl,signalBytes:3e4,controlBytes:512,payloadBytes:6e4,attemptMs:15e3,directAttempts:32,wireSessions:128},Wl={transitionId:El,target:I.object({route:I.enum([`relay`,`direct`]),sessionId:El,attemptId:El,generation:Dl}).strict()},Gl=I.discriminatedUnion(`type`,[I.object({type:I.literal(`route.prepare`),...Wl}).strict(),I.object({type:I.literal(`route.prepared`),...Wl}).strict(),I.object({type:I.literal(`route.commit`),...Wl}).strict(),I.object({type:I.literal(`route.committed`),...Wl}).strict(),I.object({type:I.literal(`route.abort`),...Wl,reason:I.enum([`cancelled`,`timeout`,`not-ready`,`candidate-failed`])}).strict()]);function Kl(e,t){return e instanceof Uint8Array&&e.length>0&&e.length<=t}function ql(e){let t;if(e.kind===`control`){if(t=Gl.parse(e.control),Wn(t).length>Ul.controlBytes)throw new H(`malformed`)}else{if(!Kl(e.bytes,e.kind===`terminal`?Ul.terminalBytes:Ul.signalBytes))throw new H(`malformed`);t=e.bytes}let n=Wn([Vl,e.kind,t]);if(n.length>Ul.payloadBytes)throw new H(`malformed`);return n}function Jl(e){let t=mr(e,Ul.payloadBytes,{allowBytes:!0});if(!Array.isArray(t)||t.length!==3||t[0]!==Vl)throw new H(`malformed`);if(t[1]===`control`){if(Wn(t[2]).length>Ul.controlBytes)throw new H(`malformed`);let e=Gl.parse(t[2]);return{kind:`control`,control:{...e,transitionId:e.transitionId.slice(),target:{route:e.target.route,sessionId:e.target.sessionId.slice(),attemptId:e.target.attemptId.slice(),generation:e.target.generation.slice()}}}}if(t[1]!==`terminal`&&t[1]!==`signal`||!Kl(t[2],t[1]===`terminal`?Ul.terminalBytes:Ul.signalBytes))throw new H(`malformed`);return{kind:t[1],bytes:t[2].slice()}}const Yl=I.enum([`iterm2`,`tmux`,`herdr`]),Xl=I.string().regex(/^[a-z][a-z0-9-]{0,31}$/),Zl={iterm2:`iTerm2`,tmux:`tmux`,herdr:`Herdr`},Ql=I.enum([`darwin`,`linux`,`win32`,`unknown`]),$l=I.number().int().min(0).max(255),eu=I.union([$l,I.tuple([$l,$l,$l])]),tu=I.object({t:I.string().max(4096),fg:eu.optional(),bg:eu.optional(),b:I.boolean().optional(),i:I.boolean().optional(),u:I.boolean().optional(),s:I.boolean().optional(),f:I.boolean().optional(),n:I.number().int().min(0).max(4096).optional()}),nu=I.object({r:I.array(tu).max(2048),w:I.boolean().optional()}),ru=I.object({x:I.number().int(),y:I.number().int()}),iu=I.object({subscribe:I.boolean(),prompts:I.boolean(),createSession:I.boolean(),focus:I.boolean(),history:I.boolean(),absoluteLines:I.boolean(),mouseClick:I.boolean().optional(),terminalInput:I.boolean().optional(),terminalPaste:I.boolean().optional(),vtStream:I.boolean().optional()}),au=I.string().min(1).max(64).refine(e=>[...e].every(e=>e.charCodeAt(0)>=32&&e.charCodeAt(0)!==127)),ou=I.object({name:Xl,label:au,capabilities:iu,connected:I.boolean(),launchable:I.boolean()}),su=I.array(ou).max(32).refine(e=>new Set(e.map(e=>e.name)).size===e.length,`adapter IDs must be unique`),cu=I.object({backend:Xl,host:Xl,label:au}),lu=I.array(cu).max(64).refine(e=>new Set(e.map(e=>`${e.backend}:${e.host}`)).size===e.length,`launch targets must be unique`),uu=I.object({backend:Xl,reason:I.string().min(1).max(240).refine(e=>[...e].every(e=>e.charCodeAt(0)>=32&&e.charCodeAt(0)!==127))}),du=I.array(uu).max(16).refine(e=>new Set(e.map(e=>e.backend)).size===e.length,`one launch issue per backend`),fu=I.enum([`not-installed`,`not-running`,`no-session`,`api-off`,`needs-consent`,`connecting`,`automation-denied`,`iterm2-denied`,`timed-out`,`too-old`,`limited`,`failed`]),pu=I.strictObject({name:Xl,connected:I.boolean(),issue:fu.optional(),detail:uu.shape.reason.optional()}),mu=I.array(pu).max(16).refine(e=>new Set(e.map(e=>e.name)).size===e.length),hu=[`iterm2`,`ghostty`];function gu(e,t){let n=e=>{let t=hu.indexOf(e);return t===-1?hu.length:t};return n(e)-n(t)||e.localeCompare(t)}function _u(e,t=[]){return t.filter(t=>t.backend===e).sort((e,t)=>gu(e.host,t.host))[0]}const vu=I.object({column:I.number().int().min(0).max(G.cols-1),row:I.number().int().min(0).max(G.rows-1),cols:I.number().int().min(1).max(G.cols),rows:I.number().int().min(1).max(G.rows),button:I.enum([`left`,`right`,`middle`]),modifiers:I.number().int().min(0).max(7)}),yu=I.enum([`unknown`,`editing`,`running`,`finished`,`blocked`]),bu=I.string().min(1).max(64),xu=I.object({id:tr,backend:Xl,title:I.string().max(256),cwd:I.string().max(1024).optional(),cols:I.number().int().positive(),rows:I.number().int().positive(),windowId:I.string().max(128),windowNumber:I.number().int(),tabId:I.string().max(128),tabIndex:I.number().int(),paneIndex:I.number().int(),isFocusedOnMac:I.boolean(),state:yu,project:I.string().min(1).max(128).optional(),windowLabel:I.string().min(1).max(128).optional(),agent:I.object({kind:I.string().min(1).max(32),task:I.string().min(1).max(256).optional()}).optional(),alternateScreen:I.boolean().optional(),shownIn:I.array(au).min(1).max(4).optional()}),Su=Object.freeze({minCols:40,maxCols:240,minRows:24,maxRows:100}),Cu=I.object({cols:I.number().int().min(Su.minCols).max(Su.maxCols),rows:I.number().int().min(Su.minRows).max(Su.maxRows)}),wu=I.union([I.object({kind:I.literal(`tab`),backend:Xl,windowId:I.string().max(128).optional(),host:Xl.optional(),initialSize:Cu.optional()}).refine(e=>e.host===void 0||e.windowId===void 0,`host launch requires a new independent session`).refine(e=>e.initialSize===void 0||e.windowId===void 0,`initial size applies only to a new independent window`),I.object({kind:I.literal(`split`),sessionId:tr,direction:I.enum([`vertical`,`horizontal`])})]),Tu={sessionId:tr,cursor:ru,scrollbackTotal:I.number().int().nonnegative(),gen:I.number().int().nonnegative()},Eu=I.object({type:I.literal(`hello`),agentVersion:I.string().max(32),features:Tc.optional(),conversationEnabled:I.boolean().optional(),hostPlatform:Ql.optional(),launchableBackends:I.array(Xl).max(4).optional(),backendCatalog:su.optional(),sessionLaunchTargets:lu.optional(),sessionLaunchIssues:du.optional(),terminalSetup:mu.optional(),backends:I.array(I.object({name:Xl,capabilities:iu})).max(4),computerName:I.string().max(64),accent:I.string().max(32)}),Du=I.object({type:I.literal(`sessions`),list:I.array(xu).max(500)}),Ou=I.object({type:I.literal(`event`),sessionId:tr,kind:Wc,exitCode:I.number().int().optional(),durationMs:I.number().int().nonnegative().optional(),command:I.string().max(512).optional(),at:I.number()}),ku=I.discriminatedUnion(`type`,[I.object({type:I.literal(`notification.enroll`),generation:wc}),I.object({type:I.literal(`notification.enrolled`),generation:wc}),I.object({type:I.literal(`conn.hello`),n:U(16),features:I.array(I.string().min(1).max(32)).max(8).optional()}),I.object({type:I.literal(`session.v2.bootstrap`),bytes:U().refine(e=>e.length>0&&e.length<=1024)}),Eu,Du,I.object({type:I.literal(`screen.snapshot`),...Tu,cols:I.number().int().positive(),rows:I.number().int().positive(),lines:I.array(nu).max(1e3),reset:I.boolean().optional(),degraded:I.boolean().optional()}),I.object({type:I.literal(`screen.diff`),...Tu,scroll:I.number().int().nonnegative().max(1e3),changed:I.array(I.object({i:I.number().int().nonnegative(),line:nu})).max(1e3)}),I.object({type:I.literal(`history`),sessionId:tr,before:I.number().int().nonnegative(),lines:I.array(nu).max(200),oldestAvailable:I.number().int().nonnegative()}),Ou,I.object({type:I.literal(`ack`),reqId:bu,ok:I.boolean(),error:I.string().max(256).optional(),sessionId:tr.optional()}),I.object({type:I.literal(`subscribe`),sessionId:tr.nullable()}),I.object({type:I.literal(`input.line`),reqId:bu,sessionId:tr,text:I.string().max(8192)}),I.object({type:I.literal(`input.text`),reqId:bu,sessionId:tr,text:I.string().max(65536)}),I.object({type:I.literal(`input.key`),reqId:bu,sessionId:tr,key:ol}),I.object({type:I.literal(`input.terminal`),reqId:bu,sessionId:tr,data:I.string().min(1).max(Hl)}),I.object({type:I.literal(`input.paste`),reqId:bu,sessionId:tr,text:I.string().min(1).max(Hl),submit:I.boolean()}),vu.extend({type:I.literal(`input.mouse`),reqId:bu,sessionId:tr}).refine(e=>e.column<e.cols&&e.row<e.rows,`Mouse coordinates must be inside the source grid`),I.object({type:I.literal(`history.get`),reqId:bu,sessionId:tr,before:I.number().int().nonnegative(),count:I.number().int().min(1).max(200)}),I.object({type:I.literal(`session.create`),reqId:bu,in:wu}),I.object({type:I.literal(`session.focus`),reqId:bu,sessionId:tr}),I.object({type:I.literal(`snapshot.get`),reqId:bu,sessionId:tr}),...lr.options,...Ir.options]);function Au(e){let t=ku.safeParse(e);if(!t.success)throw new H(`malformed`,`inner: ${I.prettifyError(t.error)}`);return t.data}const ju=e=>I.union([e,I.string().min(1).max(32)]),Mu=ju(Xl),Nu=ju(yu),Pu=ju(Wc),Fu=xu.extend({backend:Mu,state:Nu});I.discriminatedUnion(`type`,[Eu.extend({launchableBackends:I.array(Mu).max(4).optional(),backends:I.array(I.object({name:Mu,capabilities:iu})).max(4)}),Du.extend({list:I.array(Fu).max(500)}),Ou.extend({kind:Pu})]),I.object({type:I.literal(`notify`),sessionId:tr,kind:Pu,exitCode:I.number().int().optional(),durationMs:I.number().int().nonnegative().optional()});const Iu=/[\x00-\x1f\x7f-\x9f]/;function Lu(e,t){if(!Number.isSafeInteger(e)||e<1||e>G.cols||t.length>2e3)return null;let n=Ia.create();n.update(vr(`shellbell-native-history-v1\n${e}\n${t.length}\n`));let r=0;for(let e of t){if(typeof e!=`string`||e.length>G.screenBytes||Iu.test(e))return null;let t=vr(`${JSON.stringify(e.replace(/ +$/,``))}\n`);if(r+=t.byteLength,r>G.screenBytes)return null;n.update(t)}return Sr(n.digest())}const Ru=new Uint8Array(16),zu=qr(Ru),Bu=(e,t,n,r)=>{let i=r&1;return{s3:n<<31|r>>>1,s2:t<<31|n>>>1,s1:e<<31|t>>>1,s0:e>>>1^225<<24&-(i&1)}},Vu=e=>(e>>>0&255)<<24|(e>>>8&255)<<16|(e>>>16&255)<<8|e>>>24&255|0,Hu=e=>e>65536?8:e>1024?4:2;var Uu=class{blockLen=16;outputLen=16;s0=0;s1=0;s2=0;s3=0;finished=!1;destroyed=!1;t;W;windowSize;constructor(e,t){Vr(e,16,`key`),e=ui(e);let n=Yr(e),r=n.getUint32(0,!1),i=n.getUint32(4,!1),a=n.getUint32(8,!1),o=n.getUint32(12,!1),s=[];for(let e=0;e<128;e++)s.push({s0:Vu(r),s1:Vu(i),s2:Vu(a),s3:Vu(o)}),{s0:r,s1:i,s2:a,s3:o}=Bu(r,i,a,o);let c=Hu(t||1024);if(![1,2,4,8].includes(c))throw Error(`ghash: invalid window size, expected 2, 4 or 8`);this.W=c;let l=128/c,u=this.windowSize=2**c,d=[];for(let e=0;e<l;e++)for(let t=0;t<u;t++){let n=0,r=0,i=0,a=0;for(let o=0;o<c;o++){if(!(t>>>c-o-1&1))continue;let{s0:l,s1:u,s2:d,s3:f}=s[c*e+o];n^=l,r^=u,i^=d,a^=f}d.push({s0:n,s1:r,s2:i,s3:a})}this.t=d}_updateBlock(e,t,n,r){e^=this.s0,t^=this.s1,n^=this.s2,r^=this.s3;let{W:i,t:a,windowSize:o}=this,s=0,c=0,l=0,u=0,d=(1<<i)-1,f=0;for(let p of[e,t,n,r])for(let e=0;e<4;e++){let t=p>>>8*e&255;for(let e=8/i-1;e>=0;e--){let n=t>>>i*e&d,{s0:r,s1:p,s2:m,s3:h}=a[f*o+n];s^=r,c^=p,l^=m,u^=h,f+=1}}this.s0=s,this.s1=c,this.s2=l,this.s3=u}update(e){Ur(this),Vr(e),e=ui(e);let t=qr(e),n=Math.floor(e.length/16),r=e.length%16;for(let e=0;e<n;e++)this._updateBlock(Qr(t[e*4+0]),Qr(t[e*4+1]),Qr(t[e*4+2]),Qr(t[e*4+3]));return r&&(Ru.set(e.subarray(n*16)),this._updateBlock(Qr(zu[0]),Qr(zu[1]),Qr(zu[2]),Qr(zu[3])),Jr(zu)),this}destroy(){this.destroyed=!0;let{t:e}=this;for(let t of e)t.s0=0,t.s1=0,t.s2=0,t.s3=0}digestInto(e){Ur(this),Gr(e,this),this.finished=!0;let{s0:t,s1:n,s2:r,s3:i}=this,a=qr(e);a[0]=t,a[1]=n,a[2]=r,a[3]=i,Xr||ei(a.subarray(0,4))}digest(){let e=new Uint8Array(16);return this.digestInto(e),this.destroy(),e}};const Wu=ai(16,(e,t)=>new Uu(e,t),e=>[e.length]),Gu=new Uint8Array(16);function Ku(e){if(![16,24,32].includes(e.length))throw Error(`"aes key" expected Uint8Array of length 16/24/32, got length=`+e.length)}function qu(e){return e<<1^283&-(e>>7)}function Ju(e,t){let n=0;for(;t>0;t>>=1)n^=e&-(t&1),e=qu(e);return n}const Yu=(()=>{let e=new Uint8Array(256);for(let t=0,n=1;t<256;t++,n^=qu(n))e[t]=n;let t=new Uint8Array(256);t[0]=99;for(let n=0;n<255;n++){let r=e[255-n];r|=r<<8,t[e[n]]=(r^r>>4^r>>5^r>>6^r>>7^99)&255}return Jr(e),t})(),Xu=e=>e<<24|e>>>8,Zu=e=>e<<8|e>>>24;function Qu(e,t){if(e.length!==256)throw Error(`wrong sbox length`);let n=new Uint32Array(256).map((n,r)=>t(e[r])),r=n.map(Zu),i=r.map(Zu),a=i.map(Zu),o=new Uint32Array(65536),s=new Uint32Array(65536),c=new Uint16Array(65536);for(let t=0;t<256;t++)for(let l=0;l<256;l++){let u=t*256+l;o[u]=n[t]^r[l],s[u]=i[t]^a[l],c[u]=e[t]<<8|e[l]}return{sbox:e,sbox2:c,T0:n,T1:r,T2:i,T3:a,T01:o,T23:s}}const $u=Qu(Yu,e=>Ju(e,3)<<24|e<<16|e<<8|Ju(e,2)),ed=(()=>{let e=new Uint8Array(16);for(let t=0,n=1;t<16;t++,n=qu(n))e[t]=n;return e})();function td(e){Vr(e);let t=e.length;Ku(e);let{sbox2:n}=$u,r=[];(!Xr||!li(e))&&r.push(e=ui(e));let i=ei(qr(e)),a=i.length,o=e=>rd(n,e,e,e,e),s=new Uint32Array(t+28);s.set(i);for(let e=a;e<s.length;e++){let t=s[e-1];e%a===0?t=o(Xu(t))^ed[e/a-1]:a>6&&e%a===4&&(t=o(t)),s[e]=s[e-a]^t}return Jr(...r),s}function nd(e,t,n,r,i,a){return e[n<<8&65280|r>>>8&255]^t[i>>>8&65280|a>>>24&255]}function rd(e,t,n,r,i){return e[t&255|n&65280]|e[r>>>16&255|i>>>16&65280]<<16}function id(e,t,n,r,i){let{sbox2:a,T01:o,T23:s}=$u,c=0;t^=e[c++],n^=e[c++],r^=e[c++],i^=e[c++];let l=e.length/4-2;for(let a=0;a<l;a++){let a=e[c++]^nd(o,s,t,n,r,i),l=e[c++]^nd(o,s,n,r,i,t),u=e[c++]^nd(o,s,r,i,t,n),d=e[c++]^nd(o,s,i,t,n,r);t=a,n=l,r=u,i=d}return{s0:e[c++]^rd(a,t,n,r,i),s1:e[c++]^rd(a,n,r,i,t),s2:e[c++]^rd(a,r,i,t,n),s3:e[c++]^rd(a,i,t,n,r)}}function ad(e,t,n,r,i){Vr(n,16,`nonce`),Vr(r),i=si(r.length,i);let a=n,o=qr(a),s=Yr(a),c=qr(r),l=qr(i),u=t?0:12,d=r.length,f=s.getUint32(u,t);for(let n=0;n+4<=c.length;n+=4){let{s0:r,s1:i,s2:a,s3:d}=id(e,Qr(o[0]),Qr(o[1]),Qr(o[2]),Qr(o[3]));l[n+0]=c[n+0]^Qr(r),l[n+1]=c[n+1]^Qr(i),l[n+2]=c[n+2]^Qr(a),l[n+3]=c[n+3]^Qr(d),f=f+1>>>0,s.setUint32(u,f,t)}let p=16*Math.floor(c.length/4);if(p<d){let{s0:t,s1:n,s2:a,s3:s}=id(e,Qr(o[0]),Qr(o[1]),Qr(o[2]),Qr(o[3])),c=new Uint32Array([t,n,a,s]);ei(c);let l=Kr(c);for(let e=p,t=0;e<d;e++,t++)i[e]=r[e]^l[t];Jr(c)}return i}function od(e,t,n,r,i){let a=i?i.length:0,o=e.create(n,r.length+a);i&&o.update(i);let s=ci(8*r.length,8*a,t);o.update(r),o.update(s);let c=o.digest();return Jr(s),c}const sd=oi({blockSize:16,nonceLength:12,tagLength:16,withAAD:!0,varSizeNonce:!0},function(e,t,n){if(t.length<8)throw Error(`aes/gcm: invalid nonce length`);function r(e,t,r){let i=od(Wu,!1,e,r,n);for(let e=0;e<t.length;e++)i[e]^=t[e];return i}function i(){let n=td(e),r=Gu.slice(),i=Gu.slice();if(ad(n,!1,i,i,r),t.length===12)i.set(t);else{let e=Gu.slice();Yr(e).setBigUint64(8,BigInt(t.length*8),!1);let n=Wu.create(r).update(t).update(e);n.digestInto(i),n.destroy()}return{xk:n,authKey:r,counter:i,tagMask:ad(n,!1,i,Gu)}}return{encrypt(e){let{xk:t,authKey:n,counter:a,tagMask:o}=i(),s=new Uint8Array(e.length+16),c=[t,n,a,o];li(e)||c.push(e=ui(e)),ad(t,!1,a,e,s.subarray(0,e.length));let l=r(n,o,s.subarray(0,s.length-16));return c.push(l),s.set(l,e.length),Jr(...c),s},decrypt(e){let{xk:t,authKey:n,counter:a,tagMask:o}=i(),s=[t,n,o,a];li(e)||s.push(e=ui(e));let c=e.subarray(0,-16),l=e.subarray(-16),u=r(n,o,c);if(s.push(u),!ii(u,l))throw Jr(...s),Error(`aes-gcm: invalid tag`);let d=ad(t,!1,a,c);return Jr(...s),d}}});function cd(e){if(!(e instanceof Uint8Array)||e.length!==32)throw new H(`crypto`,`invalid notification key`)}const ld=jc.pick({computerFp:!0,phoneFp:!0,generation:!0});function ud(e,t){cd(e);let n=ld.parse({computerFp:t.computerFp,phoneFp:t.phoneFp,generation:t.generation});return Zs(Ia,e,vr(xc),vr(JSON.stringify([n.computerFp,n.phoneFp,n.generation])),32)}function dd(e){let t=Fc(e);return vr(JSON.stringify([xc,t.computerFp,t.phoneFp,t.generation,t.sessionId,t.eventId]))}function fd(e,t){try{cd(e);let n=Nc.parse(t),r=Fc(n),i=va(12),a=vr(JSON.stringify(n));try{let t=sd(e,i,dd(r)).encrypt(a);return{...r,nonce:yr(i),ciphertext:yr(t)}}finally{a.fill(0)}}catch{throw new H(`crypto`,`notification seal failed`)}}const pd=I.string().regex(/^[A-Za-z0-9_-]{22}$/),md=I.object({v:I.literal(1),r:I.url().max(256),c:W,e:I.string().regex(/^[A-Za-z0-9_-]{43}$/),n:I.string().min(1).max(40),p:pd,g:pd,b:I.literal(1).optional()});function hd(e){return JSON.stringify(e)}function gd(e,t={}){let n;try{n=JSON.parse(e)}catch{throw new H(`malformed`,`qr: not json`)}let r=md.safeParse(n);if(!r.success)throw new H(`malformed`,`qr: ${I.prettifyError(r.error)}`);let i=r.data,a=new URL(i.r);if(a.username||a.password)throw new H(`malformed`,`qr: relay url must not contain credentials`);if(a.protocol!==`wss:`&&!(t.allowInsecure&&a.protocol===`ws:`))throw new H(`malformed`,`qr: relay must be wss://`);if(i.r.endsWith(`/`)||/[?#]/.test(i.r)||a.pathname!==`/`||a.search||a.hash)throw new H(`malformed`,`qr: relay url must be scheme://host[:port] with no path`);if(rc(br(i.e))!==i.c)throw new H(`malformed`,`qr: fingerprint mismatch`);return i}function _d(e,t){return`${e}/ws/${t}`}function vd(){return{r:[]}}function yd(e){let t=0;for(let n of e)t++;return t}function bd(e){return e===void 0?``:typeof e==`number`?String(e):`${e[0]},${e[1]},${e[2]}`}function xd(e,t){return bd(e.fg)===bd(t.fg)&&bd(e.bg)===bd(t.bg)&&!!e.b==!!t.b&&!!e.i==!!t.i&&!!e.u==!!t.u&&!!e.s==!!t.s&&!!e.f==!!t.f}function Sd(e){return e.n??yd(e.t)}function Cd(e){let t=[];for(let n of e){let e=t[t.length-1];if(e&&xd(e,n)){let t=Sd(e)+Sd(n);e.t+=n.t,t===yd(e.t)?delete e.n:e.n=t}else{let e={...n};e.n!==void 0&&e.n===yd(e.t)&&delete e.n,t.push(e)}}return t}function wd(e){let t=e.slice();for(;t.length>0;){let e=t[t.length-1];if(e.bg!==void 0)break;let n=e.t.replace(/ +$/,``);if(n===``){t.pop();continue}if(n!==e.t){let r=yd(e.t)-yd(n),i=(e.n??yd(e.t))-r,a={...e,t:n};i===yd(n)?delete a.n:a.n=i,t[t.length-1]=a}break}return t}function Td(e){let t={r:[]};for(let n of e.r){let e=Sd(n);if(n.t===``&&e===0)continue;let r=t.r[t.r.length-1];if(r&&r.t.length+n.t.length<=4096&&Sd(r)+e<=4096){let t=Sd(r)+e;r.t+=n.t,t===yd(r.t)?delete r.n:r.n=t}else{let r={t:n.t};e!==yd(n.t)&&(r.n=e),t.r.push(r)}}return e.w!==void 0&&(t.w=e.w),t}function Ed(e){return`${+!!e.b}${+!!e.i}${+!!e.u}${+!!e.s}${+!!e.f}`}function Dd(e){let t=e.r.map(e=>`${e.t}|${bd(e.fg)}|${bd(e.bg)}|${Ed(e)}|${e.n??``}`).join(``);return e.w===!0?`${t}\x00w`:t}const Od={sdpChars:24e3,candidateChars:1024,candidatesPerSide:32,encodedBytes:3e4,bootstrapConfirmBytes:512},kd=Dl.refine(e=>e[0]===1&&e.subarray(1).every(e=>e===0),{message:`initial relay generation must be one`}),Ad=Dl.refine(e=>e[0]!==1||e.subarray(1).some(e=>e!==0),{message:`direct generation must exceed one`}),jd=I.string().min(1).max(Od.sdpChars).regex(/^[\x20-\x7e\r\n]+$/,`SDP must contain printable ASCII and line endings only`),Md=I.string().min(1).max(Od.candidateChars).startsWith(`candidate:`).regex(/^[\x20-\x7e]+$/,`ICE candidate must contain printable ASCII only`),Nd={sessionId:El,offerId:El,generation:Ad};function Pd(e,t){if(/\r(?!\n)/.test(e))return!1;let n=e.split(/\r?\n/).filter(e=>e.length>0);if(n.some(e=>!/^[a-z]=/.test(e)))return!1;let r=n.filter(e=>e.startsWith(`m=`));if(r.length!==1||!/^m=application [0-9]+ (?:UDP|TCP)\/DTLS\/SCTP webrtc-datachannel$/i.test(r[0]??``)||n.some(e=>/^a=(?:candidate|remote-candidates|end-of-candidates)(?::|$)/i.test(e))||!n.some(e=>/^a=ice-ufrag:/i.test(e))||!n.some(e=>/^a=ice-pwd:/i.test(e)))return!1;let i=n.filter(e=>/^a=fingerprint:/i.test(e));if(i.length===0)return!1;for(let e of i){let n=/^a=fingerprint:sha-256 ((?:[0-9a-f]{2}:){31}[0-9a-f]{2})$/i.exec(e);if(!n?.[1]||!Tr(Cr(n[1].replaceAll(`:`,``)),t))return!1}return!0}const Fd=I.discriminatedUnion(`type`,[I.object({type:I.literal(`session.v2.begin`),sessionId:El,generation:kd}).strict(),I.object({type:I.literal(`session.v2.accept`),sessionId:El,attemptId:El,generation:kd}).strict(),I.object({type:I.literal(`session.v2.noise1`),sessionId:El,attemptId:El,message:U(48)}).strict(),I.object({type:I.literal(`session.v2.noise2`),sessionId:El,attemptId:El,message:U(48)}).strict(),I.object({type:I.literal(`session.v2.confirm`),sessionId:El,attemptId:El,frame:I.custom(e=>e instanceof Uint8Array&&e.length>0&&e.length<=Od.bootstrapConfirmBytes,{message:`invalid v2 confirmation frame length`})}).strict()]);function Id(e,t){return t!==void 0&&El.safeParse(t).success&&Tr(e,t)}function Ld(e,t){return!t||e.type!==t.expectedType?!1:e.type===`session.v2.begin`?t.sender===`phone`&&t.sessionId===void 0&&t.attemptId===void 0:Id(e.sessionId,t.sessionId)?e.type===`session.v2.accept`?t.sender===`computer`&&t.attemptId===void 0:Id(e.attemptId,t.attemptId)?e.type===`session.v2.noise1`?t.sender===`phone`:e.type===`session.v2.noise2`?t.sender===`computer`:t.sender===`phone`||t.sender===`computer`:!1:!1}const Rd=1024;function zd(e){let t=Fd.safeParse(e);if(!t.success)throw new H(`malformed`,`invalid v2 bootstrap`);let n=Wn(t.data);if(n.length>Rd)throw new H(`malformed`,`v2 bootstrap too large`);return n}function Bd(e,t){if(e.length>Rd)throw new H(`malformed`,`v2 bootstrap too large`);let n=Fd.safeParse(Gn(e));if(!n.success||!Ld(n.data,t))throw new H(`malformed`,`invalid or stale v2 bootstrap`);return n.data}const Vd=I.discriminatedUnion(`type`,[I.object({type:I.literal(`direct.offer`),...Nd,sdp:jd,phoneDtls:U(32)}).strict(),I.object({type:I.literal(`direct.answer`),...Nd,attemptId:El,sdp:jd,computerDtls:U(32)}).strict(),I.object({type:I.literal(`direct.candidate`),...Nd,index:I.number().int().min(0).max(Od.candidatesPerSide-1),candidate:Md,mid:I.string().min(1).max(64).regex(/^[\x21-\x7e]+$/).nullable(),mlineIndex:I.number().int().min(0).max(0).nullable()}).strict(),I.object({type:I.literal(`direct.end`),...Nd,count:I.number().int().min(0).max(Od.candidatesPerSide)}).strict(),I.object({type:I.literal(`direct.abort`),...Nd,reason:I.enum([`timeout`,`ice-failed`,`dtls-failed`,`resource-limit`,`cancelled`])}).strict()]).superRefine((e,t)=>{e.type===`direct.candidate`&&e.mid===null&&e.mlineIndex===null&&t.addIssue({code:`custom`,message:`candidate needs a media section`}),e.type===`direct.offer`&&!Pd(e.sdp,e.phoneDtls)&&t.addIssue({code:`custom`,message:`invalid data-channel offer SDP`}),e.type===`direct.answer`&&!Pd(e.sdp,e.computerDtls)&&t.addIssue({code:`custom`,message:`invalid data-channel answer SDP`})});function Hd(e,t){if(!t||t.sender!==`phone`&&t.sender!==`computer`||!El.safeParse(t.sessionId).success||!Dl.safeParse(t.committedGeneration).success||!Tr(e.sessionId,t.sessionId))return!1;if(e.type===`direct.offer`)return t.sender===`phone`&&t.pending===void 0&&gl(e.generation)>gl(t.committedGeneration);let n=t.pending;return n!==void 0&&El.safeParse(n.offerId).success&&Dl.safeParse(n.generation).success&&gl(n.generation)>gl(t.committedGeneration)&&Tr(e.offerId,n.offerId)&&Tr(e.generation,n.generation)&&(e.type!==`direct.answer`||t.sender===`computer`)}function Ud(e){let t=Vd.safeParse(e);if(!t.success)throw new H(`malformed`,`invalid direct signal`);let n=Wn(t.data);if(n.length>Od.encodedBytes)throw new H(`malformed`,`direct signal too large`);return n}function Wd(e,t){if(e.length>Od.encodedBytes)throw new H(`malformed`,`direct signal too large`);let n=Vd.safeParse(Gn(e));if(!n.success||!Hd(n.data,t))throw new H(`malformed`,`invalid or stale direct signal`);return n.data}var Gd=class{context;role;actualRemoteCertificate;handshake;session=null;phase;constructor(e,t,n,r){if(this.context=e,this.role=t,this.actualRemoteCertificate=r,e.route!==`direct`)throw Error(`direct context required`);this.handshake=zl(e,t,n),this.phase=t===`phone`?`new`:`noise1`}get ready(){return this.phase===`ready`&&this.session?.ready===!0}begin(){if(this.phase!==`new`||!this.handshake)throw Error(`direct handshake order`);return this.phase=`noise2`,zd({type:`session.v2.noise1`,sessionId:this.context.sessionId,attemptId:this.context.attemptId,message:this.handshake.write()})}receive(e){try{if((this.phase===`noise1`||this.phase===`noise2`)&&this.handshake){let t=this.phase===`noise1`?`session.v2.noise1`:`session.v2.noise2`,n=Bd(e,{sender:this.role===`phone`?`computer`:`phone`,expectedType:t,sessionId:this.context.sessionId,attemptId:this.context.attemptId});if(n.type!==t)throw Error(`direct handshake order`);this.handshake.read(n.message);let r=null;return this.role===`computer`&&(r=zd({type:`session.v2.noise2`,sessionId:this.context.sessionId,attemptId:this.context.attemptId,message:this.handshake.write()})),this.session=this.handshake.finish(),this.handshake=null,this.session.verifyRemoteDtls(this.actualRemoteCertificate),this.phase=`confirm`,r??zd({type:`session.v2.confirm`,sessionId:this.context.sessionId,attemptId:this.context.attemptId,frame:Il(this.session.confirmation())})}if(this.phase!==`confirm`||!this.session)throw Error(`direct handshake order`);let t=Bd(e,{sender:this.role===`phone`?`computer`:`phone`,expectedType:`session.v2.confirm`,sessionId:this.context.sessionId,attemptId:this.context.attemptId});if(t.type!==`session.v2.confirm`)throw Error(`direct confirmation required`);this.session.acceptConfirmation(Ll(t.frame));let n=this.role===`computer`?zd({type:`session.v2.confirm`,sessionId:this.context.sessionId,attemptId:this.context.attemptId,frame:Il(this.session.confirmation())}):null;if(!this.session.ready)throw Error(`direct confirmation incomplete`);return this.phase=`ready`,n}catch(e){throw this.close(),e}}takeReadySession(){if(!this.ready||!this.session)throw Error(`direct handshake incomplete`);let e=this.session;return this.session=null,this.phase=`closed`,e}close(){this.handshake?.close(),this.handshake=null,this.session?.close(),this.session=null,this.phase=`closed`}};const Kd=e=>/ typ relay(?: |$)/.test(e.candidate);function qd(e){let t=/^a=fingerprint:sha-256 ((?:[0-9a-f]{2}:){31}[0-9a-f]{2})\r?$/im.exec(e);if(!t?.[1])throw Error(`missing SHA-256 SDP fingerprint`);return Cr(t[1].replaceAll(`:`,``))}function Jd(e){return`${e.split(/\r?\n/).filter(e=>e.length&&!/^a=(?:candidate|remote-candidates|end-of-candidates)(?::|$)/i.test(e)).join(`\r
-`)}\r\n`}var Yd=class{options;offerId;generation;attemptId;peer=null;phoneDtls;computerDtls=null;localSdp=null;remoteSdp=!1;opened=!1;verifying=!1;sentDescription=!1;sentCandidates=0;receivedCandidates=0;pendingData=[];pendingLocal=[];pendingRemote=[];handshake=null;secureSession=null;closed=!1;timer;constructor(e){this.options=e,this.offerId=e.offer?.offerId.slice()??va(16),this.attemptId=e.offer?va(16):null,this.generation=e.generation.slice(),this.phoneDtls=e.offer?.phoneDtls.slice()??null,this.timer=setTimeout(()=>this.fail(`timeout`),15e3)}get session(){return this.secureSession}get phase(){return this.secureSession?`cutover`:this.handshake?`noise`:this.verifying?`certificate`:this.opened?`open`:this.remoteSdp?`connecting`:this.localSdp?`offer`:`native`}get active(){return!this.closed&&this.options.current()}cancelDeadline(){clearTimeout(this.timer)}close(){this.closed||(this.closed=!0,this.cancelDeadline(),this.pendingData=[],this.pendingLocal=[],this.pendingRemote=[],this.handshake?.close(),this.secureSession?.close(),this.peer?.close())}send(e){let t=this.active&&(this.peer?.send(e)??!1);return t&&this.options.sent(e.length),t}fail(e=`closed`){this.active&&this.options.failed(e)}async start(){let e={description:(e,t)=>{this.active&&this.description(e,t)},candidate:(e,t,n)=>{if(this.active)try{this.localCandidate({candidate:e,mid:t,mlineIndex:n})}catch{this.fail(`local-candidate`)}},open:()=>{this.active&&(this.opened=!0,this.openDirect().catch(()=>this.fail(`certificate`)))},message:e=>{this.active&&(this.options.received(e.length),this.directMessage(e))},closed:()=>this.fail(`native-closed`)},t;try{t=await this.options.native(e)}catch{this.fail(`native-create`);return}if(!this.active){t.close();return}this.peer=t;try{if(this.options.offer){if(await t.answer(this.options.offer.sdp),!this.active)return;this.remoteSdp=!0}else await t.offer();if(!this.active)return;await this.flushRemote(),await this.openDirect()}catch{this.fail(`native-description`)}}description(e,t){try{let n=qd(e);if(this.localSdp=Jd(e),this.options.role===`phone`&&t===`offer`)this.phoneDtls=n;else if(this.options.role===`computer`&&t===`answer`)this.computerDtls=n;else throw Error(`description role mismatch`);let r=this.signalContext(),i=t===`offer`?{type:`direct.offer`,...r,phoneDtls:n,sdp:this.localSdp}:{type:`direct.answer`,...r,attemptId:this.attemptId,computerDtls:n,sdp:this.localSdp};if(!this.options.sendSignal(i))throw Error(`signaling queue refused`);this.sentDescription=!0;for(let e of this.pendingLocal.splice(0))this.localCandidate(e);this.openDirect().catch(()=>this.fail(`certificate`))}catch{this.fail(`local-description`)}}admits(e){return this.sentCandidates+this.pendingLocal.length<(Kd(e)?Od.candidatesPerSide:Od.candidatesPerSide-6)}localCandidate(e){if(this.active&&!this.options.committed()&&this.admits(e)){if(!this.sentDescription){this.pendingLocal.push(e);return}this.options.sendSignal({type:`direct.candidate`,...this.signalContext(),index:this.sentCandidates++,...e})||this.fail()}}async signal(e){if(this.active&&this.peer){if(e.type===`direct.answer`){if(this.remoteSdp||(this.computerDtls=e.computerDtls.slice(),this.attemptId=e.attemptId.slice(),await this.peer.acceptAnswer(e.sdp),!this.active))return;this.remoteSdp=!0,await this.flushRemote(),await this.openDirect()}else if(e.type===`direct.candidate`){if(e.index!==this.receivedCandidates++)throw Error(`candidate order`);this.remoteSdp?await this.peer.candidate(e.candidate,e.mid,e.mlineIndex):this.pendingRemote.push(e)}else e.type===`direct.abort`&&this.fail()}}async flushRemote(){if(this.remoteSdp&&this.peer)for(let e of this.pendingRemote.splice(0)){if(!this.active)return;await this.peer.candidate(e.candidate,e.mid,e.mlineIndex)}}signalContext(){return{sessionId:this.options.relay.sessionId,offerId:this.offerId,generation:this.generation}}async openDirect(){if(!this.active||!this.opened||!this.peer||!this.phoneDtls||!this.computerDtls||!this.attemptId||this.verifying||this.handshake||this.secureSession)return;this.verifying=!0;let e=await this.peer.remoteCertificate(this.options.role===`phone`?this.computerDtls:this.phoneDtls);if(this.active){if(this.handshake=new Gd({route:`direct`,computerFp:this.options.computerFp,phoneFp:this.options.phoneFp,sessionId:this.options.relay.sessionId,generation:this.generation,attemptId:this.attemptId,phoneDtls:this.phoneDtls,computerDtls:this.computerDtls},this.options.role,this.options.keys,e),this.options.role===`phone`&&!this.send(this.handshake.begin())){this.fail();return}for(let e of this.pendingData.splice(0))this.directMessage(e)}}directMessage(e){if(this.active)try{if(!this.peer||e.length>61e3)throw Error(`direct frame bounds`);if(this.secureSession){this.options.frame(this.secureSession,e);return}if(!this.handshake){if(!this.verifying||this.pendingData.length>=4||e.length>1024)throw Error(`direct handshake missing`);this.pendingData.push(e.slice());return}let t=this.handshake.receive(e);if(t&&!this.send(t))throw Error(`direct queue refused`);this.handshake.ready&&(this.secureSession=this.handshake.takeReadySession(),this.handshake=null,this.options.ready(this.secureSession))}catch{this.fail(`direct-frame`)}}};const Xd=Uint8Array.of(1,0,0,0,0,0,0,0);var Zd=class{options;stage;startedAt=null;sessionId=null;attemptId=null;handshake=null;session=null;timer=null;keys;timeoutMs;constructor(e){if(this.options=e,W.parse(e.computerFp),W.parse(e.phoneFp),e.role!==`phone`&&e.role!==`computer`)throw Error(`invalid v2 role`);if(e.keys.staticPrivate.length!==32||e.keys.remoteStatic.length!==32||e.keys.pairKey.length!==32)throw Error(`invalid v2 pairing keys`);if(this.timeoutMs=e.timeoutMs??15e3,!Number.isSafeInteger(this.timeoutMs)||this.timeoutMs<1||this.timeoutMs>3e4)throw Error(`invalid v2 bootstrap timeout`);this.keys={staticPrivate:e.keys.staticPrivate.slice(),remoteStatic:e.keys.remoteStatic.slice(),pairKey:e.keys.pairKey.slice()},this.stage=e.role===`phone`?`phone:new`:`computer:begin`}get ready(){return this.stage===`ready`&&this.session?.ready===!0}begin(){if(this.stage!==`phone:new`)throw Error(`v2 begin not allowed`);try{return this.startedAt=this.clock(),this.armTimer(),this.sessionId=this.freshId(),this.stage=`phone:accept`,zd({type:`session.v2.begin`,sessionId:this.sessionId,generation:Xd})}catch(e){throw this.close(),e}}receive(e){try{if(this.stage===`closed`||this.stage===`detached`||this.stage===`ready`)throw Error(`v2 bootstrap no longer accepts messages`);switch(this.stage!==`computer:begin`&&this.assertNotExpired(),this.stage){case`computer:begin`:{let t=Bd(e,{sender:`phone`,expectedType:`session.v2.begin`});if(t.type!==`session.v2.begin`)throw Error(`invalid v2 begin`);if(this.startedAt=this.clock(),this.armTimer(),this.sessionId=t.sessionId.slice(),this.attemptId=this.freshId(),Tr(this.sessionId,this.attemptId))throw Error(`repeated v2 attempt ID`);return this.handshake=this.newHandshake(),this.stage=`computer:noise1`,zd({type:`session.v2.accept`,sessionId:this.sessionId,attemptId:this.attemptId,generation:Xd})}case`phone:accept`:{let t=Bd(e,{sender:`computer`,expectedType:`session.v2.accept`,sessionId:this.requireSessionId()});if(t.type!==`session.v2.accept`)throw Error(`invalid v2 accept`);if(this.attemptId=t.attemptId.slice(),Tr(this.requireSessionId(),this.attemptId))throw Error(`repeated v2 attempt ID`);this.handshake=this.newHandshake();let n=this.handshake.write();return this.stage=`phone:noise2`,zd({type:`session.v2.noise1`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId(),message:n})}case`computer:noise1`:{let t=Bd(e,{sender:`phone`,expectedType:`session.v2.noise1`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId()});if(t.type!==`session.v2.noise1`||!this.handshake)throw Error(`invalid v2 noise1`);this.handshake.read(t.message);let n=this.handshake.write();return this.session=this.handshake.finish(),this.handshake=null,this.stage=`computer:confirm`,zd({type:`session.v2.noise2`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId(),message:n})}case`phone:noise2`:{let t=Bd(e,{sender:`computer`,expectedType:`session.v2.noise2`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId()});if(t.type!==`session.v2.noise2`||!this.handshake)throw Error(`invalid v2 noise2`);this.handshake.read(t.message),this.session=this.handshake.finish(),this.handshake=null;let n=Il(this.session.confirmation());return this.stage=`phone:confirm`,zd({type:`session.v2.confirm`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId(),frame:n})}case`computer:confirm`:{let t=this.decodeConfirmation(e,`phone`);if(!this.session)throw Error(`v2 session missing`);this.session.acceptConfirmation(Ll(t.frame));let n=Il(this.session.confirmation());if(!this.session.ready)throw Error(`v2 computer confirmation incomplete`);return this.markReady(),zd({type:`session.v2.confirm`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId(),frame:n})}case`phone:confirm`:{let t=this.decodeConfirmation(e,`computer`);if(!this.session)throw Error(`v2 session missing`);if(this.session.acceptConfirmation(Ll(t.frame)),!this.session.ready)throw Error(`v2 phone confirmation incomplete`);return this.markReady(),null}default:throw Error(`invalid v2 bootstrap stage`)}}catch(e){throw this.close(),e}}takeReadySession(){if(!this.ready||!this.session)throw Error(`v2 session not confirmed`);let e=this.session;return this.session=null,this.stage=`detached`,e}close(){this.stage!==`closed`&&(this.stage=`closed`,this.clearTimer(),this.handshake?.close(),this.handshake=null,this.session?.close(),this.session=null,this.keys.staticPrivate.fill(0),this.keys.remoteStatic.fill(0),this.keys.pairKey.fill(0))}decodeConfirmation(e,t){let n=Bd(e,{sender:t,expectedType:`session.v2.confirm`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId()});if(n.type!==`session.v2.confirm`)throw Error(`invalid v2 confirmation`);return n}newHandshake(){let e={route:`relay`,computerFp:this.options.computerFp,phoneFp:this.options.phoneFp,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId(),generation:Xd};try{return zl(e,this.options.role,this.keys)}finally{this.keys.staticPrivate.fill(0),this.keys.remoteStatic.fill(0),this.keys.pairKey.fill(0)}}freshId(){return El.parse(this.options.newId()).slice()}requireSessionId(){if(!this.sessionId)throw Error(`v2 session ID missing`);return this.sessionId}requireAttemptId(){if(!this.attemptId)throw Error(`v2 attempt ID missing`);return this.attemptId}clock(){let e=this.options.now();if(!Number.isFinite(e)||e<0)throw Error(`invalid v2 clock`);return e}armTimer(){this.clearTimer(),this.timer=setTimeout(()=>this.close(),this.timeoutMs)}clearTimer(){this.timer!==null&&clearTimeout(this.timer),this.timer=null}markReady(){this.stage=`ready`,this.clearTimer()}assertNotExpired(){if(this.startedAt===null)throw Error(`v2 bootstrap not started`);let e=this.clock()-this.startedAt;if(e<0||e>this.timeoutMs)throw Error(`v2 bootstrap expired`)}},Qd=class{options;stage;pairKey;bootstrap;timeoutMs;startedAt=null;timer=null;phoneNonce=null;connKey=null;connTag=``;seqIn=0;seqOut=0;constructor(e){if(this.options=e,W.parse(e.computerFp),W.parse(e.phoneFp),e.role!==`phone`&&e.role!==`computer`)throw Error(`invalid v2 role`);if(e.keys.pairKey.length!==32)throw Error(`invalid pair key`);if(this.timeoutMs=e.timeoutMs??15e3,!Number.isSafeInteger(this.timeoutMs)||this.timeoutMs<1)throw Error(`invalid v2 carrier timeout`);this.pairKey=e.keys.pairKey.slice(),this.bootstrap=new Zd(e),this.stage=e.role===`phone`?`phone:new`:`computer:hello`}get ready(){return this.stage===`ready`&&this.bootstrap.ready}get closed(){return this.stage===`closed`}start(){if(this.stage!==`phone:new`)throw Error(`v2 carrier cannot start`);try{return this.startDeadline(),this.phoneNonce=va(16),this.stage=`phone:hello`,this.hello(this.phoneNonce)}catch(e){throw this.close(),e}}receive(e){if(this.stage===`closed`||this.stage===`ready`||this.stage===`phone:new`)throw Error(`v2 carrier not receiving`);try{this.stage!==`computer:hello`&&this.checkDeadline();let t=this.options.role===`phone`?this.options.computerFp:this.options.phoneFp,n=this.options.role===`phone`?this.options.phoneFp:this.options.computerFp;if(e.v!==1||e.t!==`e2e`||e.from!==t||e.to!==n)throw Error(`v2 carrier peer mismatch`);let r=Zn.parse(e.body);if(r.c.length<16||r.c.length>2048)throw Error(`v2 carrier ciphertext exceeds bound`);if(this.stage===`phone:hello`||this.stage===`computer:hello`){if(e.seq!==0)throw Error(`v2 carrier expected hello`);let i=Au(Gn(uc(this.pairKey,r,gc(t,n))));if(i.type!==`conn.hello`||!i.features?.includes(`session-v2`))throw Error(`v2 carrier requires v2 hello intent`);if(this.stage===`computer:hello`){this.startDeadline(),this.phoneNonce=i.n.slice();let e=va(16);if(Tr(this.phoneNonce,e))throw Error(`reused hello nonce`);return this.deriveConnection(this.phoneNonce,e),this.stage=`bootstrap`,this.hello(e)}if(!this.phoneNonce||Tr(this.phoneNonce,i.n))throw Error(`invalid hello nonce`);return this.deriveConnection(this.phoneNonce,i.n),this.stage=`bootstrap`,this.frame(this.bootstrap.begin())}if(!this.connKey||e.seq!==this.seqIn+1)throw Error(`v2 carrier frame sequence mismatch`);let i=Au(Gn(uc(this.connKey,r,hc(t,n,this.connTag,e.seq))));if(i.type!==`session.v2.bootstrap`)throw Error(`v2 carrier rejects legacy terminal message`);this.seqIn=e.seq;let a=this.bootstrap.receive(i.bytes);return this.bootstrap.ready&&(this.stage=`ready`,this.clearDeadline()),a?this.frame(a):null}catch(e){throw this.close(),e}}takeReadySession(){if(!this.ready)throw Error(`v2 carrier not confirmed`);let e=this.bootstrap.takeReadySession();return this.close(),e}close(){this.stage!==`closed`&&(this.stage=`closed`,this.clearDeadline(),this.pairKey.fill(0),this.phoneNonce?.fill(0),this.phoneNonce=null,this.connKey?.fill(0),this.connKey=null,this.connTag=``,this.bootstrap.close())}hello(e){let t=this.options.role===`phone`?this.options.phoneFp:this.options.computerFp,n=this.options.role===`phone`?this.options.computerFp:this.options.phoneFp;return{v:1,t:`e2e`,from:t,to:n,seq:0,body:lc(this.pairKey,Wn({type:`conn.hello`,n:e,features:[`session-v2`]}),gc(t,n))}}frame(e){if(!this.connKey||this.seqOut>=2**53-1)throw Error(`v2 carrier unavailable`);let t=this.options.role===`phone`?this.options.phoneFp:this.options.computerFp,n=this.options.role===`phone`?this.options.computerFp:this.options.phoneFp,r=++this.seqOut;return{v:1,t:`e2e`,from:t,to:n,seq:r,body:lc(this.connKey,Wn({type:`session.v2.bootstrap`,bytes:e}),hc(t,n,this.connTag,r))}}deriveConnection(e,t){let n=pc(this.pairKey,e,t,this.options.computerFp,this.options.phoneFp);this.connKey=n.kConn,this.connTag=n.connTag}startDeadline(){if(this.startedAt=this.options.now(),!Number.isFinite(this.startedAt))throw Error(`invalid v2 carrier clock`);this.timer=setTimeout(()=>this.close(),this.timeoutMs)}checkDeadline(){let e=this.options.now();if(this.startedAt===null||!Number.isFinite(e)||e<this.startedAt||e-this.startedAt>=this.timeoutMs)throw Error(`v2 carrier handshake expired`)}clearDeadline(){this.timer&&clearTimeout(this.timer),this.timer=null}};function $d(e){return{route:e.route,sessionId:e.sessionId.slice(),attemptId:e.attemptId.slice(),generation:e.generation.slice()}}function ef(e,t){return e.route===t.route&&Tr(e.sessionId,t.sessionId)&&Tr(e.attemptId,t.attemptId)&&Tr(e.generation,t.generation)}var tf=class{options;relay=null;active=null;staged=null;transition=null;wireIds=new Set;attemptIds=new Set;transitionIds=new Set;highGeneration=1n;directAttempts=0;lastNow=-1;deadline=null;timer=null;revoked=!1;recovering=!1;snapshot=!1;revision=0;constructor(e){if(this.options=e,W.parse(e.computerFp),W.parse(e.phoneFp),e.role!==`phone`&&e.role!==`computer`)throw Error(`invalid route role`);this.installRelay(e.relay)}get status(){return this.revoked?`closed`:this.recovering?`recovering`:this.transition?`cutover`:this.active?.reference.route??`uncommitted`}get activeRoute(){return this.active?$d(this.active.reference):null}get routeRevision(){return this.revision}get needsSnapshot(){return this.snapshot}get preparationPending(){return this.transition?.phase===`computer:preparing`}get paused(){return this.revoked||this.recovering||this.transition!==null||this.active===null}get directActive(){return this.active?.reference.route===`direct`}snapshotApplied(){this.paused||(this.snapshot=!1)}stageDirect(e){if(this.sweep(),this.revoked||this.recovering||!this.active||!this.relay||this.staged||this.transition)throw Error(`route candidate unavailable`);let t=null;try{if(t=this.validate(e,`direct`),!Tr(t.reference.sessionId,this.relay.reference.sessionId))throw Error(`direct wire session mismatch`);let n=gl(t.reference.generation);if(n<=this.highGeneration)throw Error(`direct generation reused`);let r=Sr(t.reference.attemptId);if(this.attemptIds.has(r))throw Error(`direct attempt reused`);if(this.directAttempts>=Ul.directAttempts)throw Error(`direct attempt capacity`);this.highGeneration=n,this.directAttempts+=1,this.attemptIds.add(r),this.staged=t,this.arm()}catch(t){throw e.session!==this.active?.session&&e.session!==this.relay?.session&&e.session.close(),t}}begin(){if(this.sweep(),this.options.role!==`phone`||this.revoked||this.recovering||!this.staged||!this.relay||this.transition)throw Error(`route prepare unavailable`);if(!this.options.prepareReady())return!1;let e=El.parse(this.options.newId()).slice();if(this.transitionIds.has(Sr(e)))throw Error(`route transition reused`);return this.transitionIds.add(Sr(e)),this.transition={id:e,target:this.staged,phase:`phone:prepared`},this.sendControl(`route.prepare`)}approve(){return this.sweep(),!this.preparationPending||!this.transition||!this.options.prepareReady()||!this.transition.target.session.ready?!1:(this.transition.phase=`computer:commit`,this.sendControl(`route.prepared`))}receive(e,t){if(this.sweep(),this.revoked||this.recovering||!this.registered(e))return null;try{let n=e.open(t),r;try{r=Jl(n)}finally{n.fill(0)}if(r.kind===`control`){if(e!==this.relay?.session)throw Error(`route control requires relay session`);return this.control(r.control),null}if(r.kind===`signal`){if(e!==this.relay?.session)throw Error(`direct signaling requires relay session`);return r}return this.paused||e!==this.active?.session||!this.directActive?(r.bytes.fill(0),null):r}catch{return this.routeLost(e),null}}sendTerminal(e){return this.sweep(),this.paused||!this.active||!this.directActive?!1:this.sendPayload(this.active,{kind:`terminal`,bytes:e})}sendSignal(e){return this.sweep(),this.revoked||this.recovering||!this.relay?!1:this.sendPayload(this.relay,{kind:`signal`,bytes:e})}abort(e=`cancelled`){if(!this.staged&&!this.transition)return;if(this.transition?.phase===`phone:committed`||!this.active){this.failAll();return}let t=this.transition;t&&this.relay&&this.sendPayload(this.relay,{kind:`control`,control:{type:`route.abort`,transitionId:t.id,target:$d(t.target.reference),reason:e}}),this.discardCandidate(),t&&(this.snapshot=!0)}relayLost(){this.active?.reference.route===`direct`&&!this.transition&&!this.staged?(this.relay?.session.close(),this.relay=null):this.failAll()}routeLost(e){e===this.active?.session?this.failAll():e===this.relay?.session?this.relayLost():e===this.staged?.session&&this.abort(`candidate-failed`)}recover(e){if(this.revoked)throw e.session.close(),Error(`route owner revoked`);let t=this.validate(e,`relay`);if(this.wireIds.has(Sr(t.reference.sessionId)))throw t.session.close(),Error(`wire session reused`);this.failAll(),this.installRelay(t)}sweep(){if(this.revoked)return;let e=this.clock();this.deadline!==null&&e>=this.deadline&&this.abort(`timeout`)}close(){this.failAll(),this.revoked=!0,this.recovering=!1}validate(e,t){if(!(e.session instanceof Bl)||!e.session.ready||e.session.senderRole!==this.options.role)throw Error(`route session not ready`);let n=e.session.description;if(n.computerFp!==this.options.computerFp||n.phoneFp!==this.options.phoneFp||n.route!==t)throw Error(`route pairing mismatch`);if(t===`relay`&&gl(n.generation)!==1n)throw Error(`relay generation must be one`);return{session:e.session,send:e.send.bind(e),reference:$d(n)}}installRelay(e){let t=this.validate(e,`relay`),n=Sr(t.reference.sessionId);if(this.wireIds.has(n)||this.wireIds.size>=Ul.wireSessions)throw t.session.close(),Error(`wire session reused or capacity reached`);this.wireIds.add(n),this.attemptIds.clear(),this.transitionIds.clear(),this.attemptIds.add(Sr(t.reference.attemptId)),this.highGeneration=1n,this.directAttempts=0,this.relay=t,this.staged=t,this.recovering=!1,this.arm()}control(e){if(e.type===`route.prepare`){if(this.options.role!==`computer`||this.transition||!this.staged||!ef(e.target,this.staged.reference)||this.transitionIds.has(Sr(e.transitionId)))throw Error(`invalid route prepare`);this.transitionIds.add(Sr(e.transitionId)),this.transition={id:e.transitionId.slice(),target:this.staged,phase:`computer:preparing`};return}let t=this.transition;if(!t||!ef(e.target,t.target.reference)||!Tr(e.transitionId,t.id))throw Error(`route transition mismatch`);if(e.type===`route.abort`){this.abortWithoutSending();return}if(e.type===`route.prepared`&&t.phase===`phone:prepared`){if(!this.options.prepareReady()||!t.target.session.ready)throw Error(`route prepare gate changed`);t.phase=`phone:committed`,this.sendControl(`route.commit`);return}if(e.type===`route.commit`&&t.phase===`computer:commit`){if(!this.options.prepareReady()||!t.target.session.ready)throw Error(`route commit gate changed`);let e={type:`route.committed`,transitionId:t.id,target:$d(t.target.reference)};this.activate(),(!this.relay||!this.sendPayload(this.relay,{kind:`control`,control:e}))&&this.failAll();return}if(e.type===`route.committed`&&t.phase===`phone:committed`){this.activate();return}throw Error(`route control order mismatch`)}sendControl(e){return!this.relay||!this.transition?!1:this.sendPayload(this.relay,{kind:`control`,control:{type:e,transitionId:this.transition.id,target:$d(this.transition.target.reference)}})}sendPayload(e,t){let n=ql(t);try{if(e.send(e.session.seal(n))===!0)return!0}catch{}finally{n.fill(0)}return t.kind===`control`?this.failAll():this.routeLost(e.session),!1}activate(){if(!this.staged)throw Error(`route target missing`);let e=this.active;this.active=this.staged,this.staged=null,this.transition=null,e&&e!==this.relay&&e!==this.active&&e.session.close(),this.clearTimer(),this.snapshot=!0,this.revision+=1}abortWithoutSending(){if(this.transition?.phase===`phone:committed`||!this.active){this.failAll();return}this.discardCandidate(),this.snapshot=!0}discardCandidate(){this.staged&&this.staged!==this.active&&this.staged!==this.relay&&this.staged.session.close(),this.staged=null,this.transition=null,this.clearTimer()}failAll(){for(let e of new Set([this.active,this.staged,this.relay]))e?.session.close();this.active=null,this.staged=null,this.relay=null,this.transition=null,this.clearTimer(),this.recovering=!0,this.snapshot=!0,this.revision+=1}registered(e){return e===this.relay?.session||e===this.active?.session||e===this.staged?.session}clock(){let e=this.options.now();if(!Number.isFinite(e)||e<0||e<this.lastNow)throw this.failAll(),Error(`invalid route clock`);return this.lastNow=e,e}arm(){this.clearTimer(),this.deadline=this.clock()+Ul.attemptMs,this.timer=setTimeout(()=>this.abort(`timeout`),Ul.attemptMs)}clearTimer(){this.timer&&clearTimeout(this.timer),this.timer=null,this.deadline=null}};function nf(e,t,n,r){if(e.seq!==0||e.from!==r||e.to!==n)return!1;try{let i=Au(Gn(uc(t,Zn.parse(e.body),gc(r,n))));return i.type===`conn.hello`&&i.features?.includes(`session-v2`)===!0}catch{return!1}}var rf=class{options;carrier=null;owner=null;relaySession=null;direct=null;generation=1n;lastFailure=null;retryAt=null;retryFailures=0;nativeAttempts=0;retriesExhausted=!1;traffic={relaySent:0,relayReceived:0,directSent:0,directReceived:0};bootstrapRevision=0;reportedRevision=-1;reportedRoute=null;reportedState=``;recoveryNotified=!1;closed=!1;incoming=Promise.resolve();queued=0;clock;interval;constructor(e){this.options=e,this.clock=e.now??(()=>performance.now()),this.interval=setInterval(()=>this.poll(),100)}get activeRoute(){return this.owner?.activeRoute?.route??null}get ready(){return this.activeRoute!==null&&this.owner?.paused===!1}get routeRevision(){return this.owner?.routeRevision??0}get diagnostics(){let e=this.direct,t=this.activeRoute===`direct`?`direct`:e?.phase??`none`;return{route:this.activeRoute,ready:this.ready,phase:t,lastFailure:this.lastFailure,...this.traffic}}get state(){let{route:e,ready:t,phase:n,lastFailure:r}=this.diagnostics;return{route:e,ready:t,phase:n,lastFailure:r,retryPending:this.retryAt!==null}}sendRelay(e){let t=this.options.sendRelay(e);return t&&e.v===2&&(this.traffic.relaySent+=e.body.length),t}begin(){this.closed||this.options.role!==`phone`||(this.carrier?.close(),this.carrier=this.newCarrier(),this.bootstrapRevision+=1,this.sendRelay(this.carrier.start())||this.bootstrapFailed())}receiveRelay(e){if(this.closed)return Promise.resolve();if(++this.queued>32)return--this.queued,this.bootstrapFailed(),Promise.resolve();let t=this.incoming.then(()=>this.relay(e));return this.incoming=t.catch(()=>this.bootstrapFailed()).finally(()=>{--this.queued}),this.incoming}sendTerminal(e){return this.owner?.sendTerminal(e)??!1}relayLost(){this.owner?.relayLost(),this.carrier?.close(),this.carrier=null,this.changed()}close(){this.closed||(this.closed=!0,clearInterval(this.interval),this.carrier?.close(),this.carrier=null,this.owner?.close(),this.owner=null,this.closeDirect())}interruptDirect(){this.directFailed(`interrupted`)}newCarrier(){return new Qd({role:this.options.role,computerFp:this.options.computerFp,phoneFp:this.options.phoneFp,keys:this.options.keys,now:this.clock,newId:()=>va(16)})}async relay(e){if(this.closed||e.from!==(this.options.role===`phone`?this.options.computerFp:this.options.phoneFp)||e.to!==(this.options.role===`phone`?this.options.phoneFp:this.options.computerFp))return;if(e.v===2){if(this.traffic.relayReceived+=e.body.length,!this.owner||!this.relaySession)return;let t=this.owner.receive(this.relaySession,Ll(e.body));if(t?.kind===`terminal`)this.options.terminal(t.bytes,e.body.length);else if(t?.kind===`signal`){let e=this.direct;try{await this.signal(t.bytes)}catch{this.direct===e&&!e?.session?.ready&&this.directFailed(`remote-signal`,e??void 0)}}this.poll();return}if(e.t!==`e2e`)return;if(this.options.role===`computer`&&e.seq===0){if(!nf(e,this.options.keys.pairKey,this.options.computerFp,this.options.phoneFp))return;this.carrier?.close(),this.carrier=this.newCarrier(),this.bootstrapRevision+=1}let t=this.carrier;if(!t)return;let n=this.bootstrapRevision,r=t.receive(e);if(r&&!this.sendRelay(r))throw Error(`bootstrap queue refused`);if(!t.ready)return;let i=t.takeReadySession();this.carrier=null;try{await this.options.commitFloor()}catch(e){throw i.close(),e}if(this.closed||n!==this.bootstrapRevision){i.close();return}this.closeDirect(),this.relaySession=i,this.generation=1n,this.nativeAttempts=0,this.retriesExhausted=!1,this.retryAt=null;let a={session:i,send:e=>this.sendRelay({v:2,t:`e2e`,from:this.options.role===`phone`?this.options.phoneFp:this.options.computerFp,to:this.options.role===`phone`?this.options.computerFp:this.options.phoneFp,body:Il(e)})};this.owner?this.owner.recover(a):this.owner=new tf({role:this.options.role,computerFp:this.options.computerFp,phoneFp:this.options.phoneFp,relay:a,now:this.clock,newId:()=>va(16),prepareReady:this.options.prepareReady}),this.options.role===`phone`&&this.owner.begin(),this.recoveryNotified=!1,this.poll()}poll(){if(this.closed||(this.carrier?.closed&&this.bootstrapFailed(),!this.owner))return;try{this.owner.sweep(),this.owner.preparationPending&&this.owner.approve(),this.options.role===`phone`&&(this.owner.status===`uncommitted`||this.owner.status===`relay`&&this.direct?.session&&this.direct.session.ready)&&this.owner.begin(),this.changed(),this.retryDirect(),this.owner.status===`recovering`&&!this.carrier&&!this.recoveryNotified&&(this.recoveryNotified=!0,this.closeDirect(),this.options.failure(`recovery`))}catch{this.options.failure(`recovery`)}let e=this.state,t=JSON.stringify(e);t!==this.reportedState&&(this.reportedState=t,this.options.stateChanged?.(e))}changed(){let e=this.activeRoute,t=this.routeRevision;(this.reportedRevision!==t||this.reportedRoute!==e)&&(this.reportedRevision=t,this.reportedRoute=e,this.options.routeChanged(e,t),e===`direct`&&this.direct&&(this.direct.cancelDeadline(),this.retryFailures=0,this.retryAt=null,this.lastFailure=null))}retryDirect(){if(this.options.role===`phone`&&this.options.allowDirect&&this.options.native&&!this.retriesExhausted&&!this.direct&&!this.carrier&&this.ready&&this.activeRoute===`relay`&&this.options.prepareReady()&&!(this.retryAt!==null&&this.clock()<this.retryAt)){if(this.nativeAttempts>=Ul.directAttempts){this.retriesExhausted=!0,this.bootstrapFailed();return}this.nativeAttempts+=1,this.retryAt=null,this.startDirect()}}bootstrapFailed(){this.carrier?.close(),this.carrier=null,this.options.failure(`bootstrap`)}async startDirect(e){if(this.closed||this.direct||!this.ready||!this.relaySession||!this.options.native)return;this.generation=e?new DataView(e.generation.buffer,e.generation.byteOffset,8).getBigUint64(0,!0):this.generation+1n;let t=new Yd({role:this.options.role,keys:this.options.keys,computerFp:this.options.computerFp,phoneFp:this.options.phoneFp,relay:this.relaySession.description,generation:e?.generation??hl(this.generation),offer:e,native:this.options.native,current:()=>!this.closed&&this.direct===t,committed:()=>this.activeRoute===`direct`,sendSignal:e=>this.sendSignal(e),sent:e=>{this.traffic.directSent+=e},received:e=>{this.traffic.directReceived+=e},ready:e=>{this.owner?.stageDirect({session:e,send:e=>t.send(Il(e))}),this.options.role===`phone`&&this.owner?.begin()},frame:(e,t)=>{let n=this.owner?.receive(e,Ll(t));n?.kind===`terminal`&&this.options.terminal(n.bytes,t.length),this.poll()},failed:e=>this.directFailed(e,t)});this.direct=t,await t.start()}async signal(e){if(!this.relaySession||!this.owner)return;let t=this.direct;if(this.activeRoute===`direct`&&t?.session?.ready)return;let n=Wd(e,{sender:this.options.role===`phone`?`computer`:`phone`,sessionId:this.relaySession.description.sessionId,committedGeneration:this.relaySession.description.generation,...t&&{pending:{offerId:t.offerId,generation:t.generation}}});if(n.type===`direct.offer`){if(!this.options.native||this.options.role!==`computer`)return;await this.startDirect(n);return}await t?.signal(n)}sendSignal(e){return this.owner?.sendSignal(Ud(e))??!1}directFailed(e=`closed`,t){if(t&&this.direct!==t)return;let n=this.direct;if(!n)return;let r=this.diagnostics.phase,i=Math.min(6e4,5e3*2**this.retryFailures);if(this.retryFailures=Math.min(this.retryFailures+1,4),this.retryAt=this.clock()+Math.min(6e4,i*(.8+.4*va(1)[0]/255)),this.lastFailure=e,!n.session?.ready)try{this.sendSignal({type:`direct.abort`,...n.signalContext(),reason:e===`timeout`?`timeout`:e===`certificate`?`dtls-failed`:`ice-failed`})}catch{}let a=n?.session;a&&this.owner?.routeLost(a),this.closeDirect(),this.options.failure(`direct`,{code:e,phase:r}),this.poll()}closeDirect(){let e=this.direct;this.direct=null,e&&e.close()}};function af(e,t){return nr.every(n=>e?.includes(n)&&t.includes(n))?[...nr,...e?.includes(`native-history-v1`)&&t.includes(`native-history-v1`)?[rr]:[]]:[]}function of(e){if(e.length>4096)return!1;for(let t=0;t<e.length;t++){let n=e.charCodeAt(t);if(n>=55296&&n<=56319){let n=e.charCodeAt(++t);if(!(n>=56320&&n<=57343))return!1}else if(n>=56320&&n<=57343)return!1}return!0}const sf=tu.extend({t:tu.shape.t.refine(of)}).strict(),cf=nu.extend({r:I.array(sf)}).strict(),lf=cf.extend({r:I.array(sf).max(2048)}),uf=I.number().int().min(0).max(2**53-1),df={kind:I.literal(`history`),generation:uf,requestId:K,before:uf},ff=I.custom(e=>Array.isArray(e)&&e.length>0&&e.length<=G.historyLines),pf=I.strictObject({...df,status:I.literal(`page`),from:uf,to:uf,oldestAvailable:uf,lines:ff});function mf(e){return e.to===e.before&&e.lines.length<=2**53-1-e.from&&e.from+e.lines.length===e.to&&e.oldestAvailable<=e.from}const hf=pf.refine(mf),gf=pf.extend({nextBefore:uf}).refine(e=>mf(e)&&e.nextBefore===e.from),_f=I.strictObject({...df,status:I.literal(`boundary`),reason:I.enum([`end`,`truncated`]),oldestAvailable:uf}).refine(e=>e.reason===`end`?e.before===e.oldestAvailable:e.before<e.oldestAvailable),vf=I.discriminatedUnion(`status`,[hf,_f]),yf=I.discriminatedUnion(`status`,[gf,_f]),bf=I.strictObject({r:I.unknown(),w:I.boolean().optional()}),xf={ok:!1,code:`invalid-transfer`},Sf={ok:!1,code:`history-line-too-large`};function Cf(e){let t=bf.safeParse(e);if(!t.success||!Array.isArray(t.data.r))return xf;if(t.data.r.length>2048)return Sf;let n={r:[],...t.data.w===void 0?{}:{w:t.data.w}},r=0,i=0;for(let e of t.data.r){let t=sf.safeParse(e);if(!t.success)return xf;if(r+=t.data.n??yd(t.data.t),r>G.historyCells||(i+=Wn(t.data).length,i>G.historyBytes))return Sf;n.r.push(t.data)}let a=Wn(n).length;return a>G.historyBytes?Sf:{ok:!0,line:n,bytes:a}}I.unknown().transform((e,t)=>{let n=()=>(t.addIssue({code:`custom`,message:`invalid history record`}),I.NEVER);try{let t=yf.safeParse(e);if(!t.success)return n();let r;if(t.data.status===`boundary`)r=t.data;else{let e=[],i=0;for(let r of t.data.lines){let t=Cf(r);if(!t.ok||(i+=t.bytes,i>G.historyBytes))return n();e.push(t.line)}r={...t.data,lines:e}}return Wn(r).length>G.historyBytes?n():r}catch{return n()}});function wf(e){try{let t=vf.safeParse(e);if(!t.success)return xf;if(t.data.status===`boundary`){let e=t.data;return{ok:!0,record:e,bytes:Wn(e)}}let n=t.data,r=[],i=0,a;for(let e=n.lines.length-1;e>=0;e--){let t=Cf(n.lines[e]);if(!t.ok){if(t.code===`invalid-transfer`)return xf;break}if(i+=t.bytes,i>G.historyBytes)break;r.unshift(t.line);let o=n.from+e,s={...n,from:o,nextBefore:o,lines:r.slice()},c=Wn(s);c.length<=G.historyBytes&&(a={ok:!0,record:s,bytes:c})}return a??{...Sf,before:n.before}}catch{return xf}}const Tf=I.number().int().min(0).max(2**53-1),Ef=Tf.min(1),Df=ru.extend({x:Tf,y:I.number().int().min(-1).max(2**53-1)}).strict(),Of=I.strictObject({cols:Ef,rows:Ef,cursor:Df,lines:I.array(cf),scrollbackTotal:Tf,gen:Tf,reset:I.boolean().optional(),degraded:I.boolean().optional()});function kf(e){return e.lines.length===e.rows&&e.cursor.x<=e.cols&&e.cursor.y<e.rows&&Af(e.lines,e.cols)}function Af(e,t){return e.every(e=>{let n=0;for(let r of e.r)if(n+=r.n??yd(r.t),n>t)return!1;return!0})}function jf(e){let t=0,n=0;for(let r of e){t+=r.r.length;for(let e of r.r)n+=yd(e.t)}return{runs:t,points:n}}function Mf(e){let{runs:t,points:n}=jf(e);return t<=G.runs&&n<=G.codePoints}const Nf=Of.extend({kind:I.literal(`snapshot`),cols:Ef.max(G.cols),rows:Ef.max(G.rows),lines:I.array(lf).max(G.rows)}).refine(e=>kf(e)&&Mf(e.lines)),Pf=I.strictObject({scroll:Tf.max(G.rows),changed:I.array(I.strictObject({i:Tf.max(G.rows-1),line:lf})).max(G.rows),cursor:Df.extend({x:Tf.max(G.cols),y:Df.shape.y.max(G.rows-1)}),scrollbackTotal:Tf,gen:Ef}),Ff=Pf.extend({kind:I.literal(`diff`)}).refine(e=>{let t=new Set(e.changed.map(e=>e.i)),n=e.changed.map(e=>e.line);return t.size===e.changed.length&&Af(n,G.cols)&&Mf(n)}),If=I.discriminatedUnion(`kind`,[Nf,Ff]);function Lf(e){let t=If.safeParse(e);if(!t.success)throw new H(`malformed`);let n;try{n=Wn(t.data)}catch{throw new H(`malformed`)}if(n.length>G.screenBytes)throw new H(`malformed`);return{record:t.data,bytes:n}}function Rf(e){let{kind:t,...n}=e;return n}function zf(e){let t=Of.safeParse(e);if(!t.success||!kf(t.data))return{ok:!1,code:`invalid-transfer`};let n=t.data;if(n.cols>G.cols||n.rows>G.rows||jf(n.lines).points>G.codePoints)return{ok:!1,code:`screen-too-large`};for(let e=0;e<2;e++){let t=e===0?n:{...n,lines:n.lines.map(Td),degraded:!0};try{let{record:e,bytes:n}=Lf({kind:`snapshot`,...t});if(e.kind===`snapshot`)return{ok:!0,snapshot:Rf(e),bytes:n}}catch{}}return{ok:!1,code:`screen-too-large`}}function Bf(e){let t=Pf.safeParse(e);if(!t.success)throw new H(`malformed`);return Lf({kind:`diff`,...t.data}).bytes}var Vf=class{options;lanes=[null,null];outstanding=[];state=`open`;nextLane=0;lastSequence=0;acknowledgedThrough=0;constructor(e){if(!cr.shape.subscriptionId.safeParse(e.subscriptionId).success||!cr.shape.sessionId.safeParse(e.sessionId).success)throw Error(`Invalid stream sender identity`);this.options={...e}}canOffer(e){return this.tick()===`open`&&this.lanes[+(e===`history`)]===null}offer(e,t){if(this.tick()!==`open`)return{accepted:!1,reason:`closed`};let n=sr.safeParse(e);if(!n.success||!(t instanceof Uint8Array)||t.length===0)throw Error(`Invalid stream transfer`);let r=+(n.data.kind===`history`),i=r===1?G.historyBytes:G.screenBytes;if(t.length>i)return{accepted:!1,reason:`too-large`};if(this.lanes[r])return{accepted:!1,reason:`busy`};let a;try{a=this.options.newTransferId()}catch(e){throw this.cancel(),e}if(!cr.shape.transferId.safeParse(a).success)throw Error(`Invalid stream transfer identity`);return this.state===`open`?(this.lanes[r]={id:a,meta:n.data,bytes:new Uint8Array(t),count:Math.ceil(t.length/G.chunkBytes),nextIndex:0,acknowledged:0,startedAt:null,progressAt:null},{accepted:!0,transferId:a}):{accepted:!1,reason:`closed`}}pump(){if(this.tick()!==`open`)return 0;let e=0;for(;e<G.unacked&&this.inFlight<G.unacked&&this.tick()===`open`;){let t=this.nextLane,n=this.lanes[t];if((!n||n.nextIndex===n.count)&&(t=1-t,n=this.lanes[t]),!n||n.nextIndex===n.count)break;if(this.lastSequence===2**53-1){this.cancel();break}let r=this.lastSequence+1,i=n.nextIndex,a={type:`stream.chunk`,subscriptionId:this.options.subscriptionId,sessionId:this.options.sessionId,transferId:n.id,sequence:r,index:i,count:n.count,totalBytes:n.bytes.length,data:n.bytes.slice(i*G.chunkBytes,(i+1)*G.chunkBytes),meta:{...n.meta}},o;try{o=this.options.send(a)}catch(e){throw this.cancel(),e}if(o&&e++,this.state!==`open`||!o)break;this.lastSequence=r,n.nextIndex++,n.startedAt===null&&(n.startedAt=this.options.now(),n.progressAt=n.startedAt),this.outstanding.push({sequence:r,transfer:n}),this.nextLane=1-t}return e}acknowledge(e,t){if(e!==this.options.subscriptionId||this.tick()!==`open`)return`ignored`;if(!Number.isSafeInteger(t)||t<1||t>this.lastSequence)return`invalid`;if(t<=this.acknowledgedThrough)return`duplicate`;let n=this.options.now();for(let e of this.outstanding){if(e.sequence>t)break;e.transfer.acknowledged++,e.transfer.progressAt=n,e.transfer.acknowledged===e.transfer.count&&(this.lanes[+(e.transfer.meta.kind===`history`)]=null)}return this.outstanding=this.outstanding.filter(e=>e.sequence>t),this.acknowledgedThrough=t,`advanced`}tick(){let e=this.nextDeadline();return e!==null&&this.options.now()>=e&&this.stop(`stalled`),this.state}nextDeadline(){let e=1/0;for(let t of this.lanes)t&&t.startedAt!==null&&t.progressAt!==null&&(e=Math.min(e,t.startedAt+G.totalMs,t.progressAt+G.progressMs));return Number.isFinite(e)?e:null}cancel(){this.stop(`closed`)}stop(e){this.state=e,this.lanes[0]=null,this.lanes[1]=null,this.outstanding=[]}get inFlight(){return this.outstanding.length}get retainedBytes(){return(this.lanes[0]?.bytes.length??0)+(this.lanes[1]?.bytes.length??0)}},Hf=`0.8.0`;const Uf=/^owner-([1-9][0-9]*)-([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/;function Wf(e){if(!/^[1-9][0-9]*$/.test(e))return null;let t=Number(e);return Number.isInteger(t)&&t<=2147483647?t:null}function Gf(e){try{return process.kill(e,0),!0}catch(e){let t=e.code;if(t===`ESRCH`)return!1;if(t===`EPERM`)return!0;throw e}}function Kf(e,n){try{t.unlinkSync(P(e,n))}catch(e){if(e.code!==`ENOENT`)throw e}try{t.rmdirSync(e)}catch(e){if(![`ENOENT`,`ENOTEMPTY`,`EEXIST`].includes(e.code??``))throw e}}function qf(e){let n=`${j(e)}.lock-candidate-`;for(let r of t.readdirSync(M(e))){if(!r.startsWith(n))continue;let i=`owner-${r.slice(n.length)}`,a=Uf.exec(i),o=a&&Wf(a[1]);if(!o)continue;let s=P(M(e),r);try{if(Gf(o)||!t.lstatSync(s).isDirectory())continue;let e=t.readdirSync(s);e.length===0?t.rmdirSync(s):e.length===1&&e[0]===i&&t.lstatSync(P(s,i)).isFile()&&Kf(s,i)}catch{}}}function Jf(e){let n=`${e}.lock`,r=`${process.pid}-${se()}`,i=`${e}.lock-candidate-${r}`,a=`owner-${r}`;t.mkdirSync(i,{mode:448});let o=!1;try{t.writeFileSync(P(i,a),``,{mode:384,flag:`wx`});for(let r=0;r<3;r++){try{t.renameSync(i,n),o=!0;try{qf(e)}catch{}return()=>Kf(n,a)}catch(e){if(![`EEXIST`,`ENOTEMPTY`].includes(e.code??``))throw e}try{if(!t.lstatSync(n).isDirectory())throw Error(`Invalid control guard ${n}; inspect it before retrying`);let e=t.readdirSync(n);if(e.length===0)continue;let r=e[0],i=Uf.exec(r),a=i&&Wf(i[1]);if(e.length!==1||!a||!t.lstatSync(P(n,r)).isFile())throw Error(`Invalid control guard ${n}; inspect its owner marker before retrying`);if(Gf(a))throw Error(`Control endpoint busy (guard owner pid ${a})`);Kf(n,r)}catch(e){if(e.code!==`ENOENT`)throw e}}throw Error(`Control endpoint busy; could not acquire ${n} after three attempts`)}finally{o||Kf(i,a)}}var Y=class extends Error{kind;constructor(e){super(`shellbell: ${e} Linux host state; inspect ownership, permissions and host initialization`),this.kind=e}};function X(e){try{return p(e)}catch(e){if(e.code===`ENOENT`)return;throw new Y(`unsafe`)}}function Yf(e,t){return e.dev===t.dev&&e.ino===t.ino}function Z(e,t){let n=X(e);if(!n)throw new Y(`missing`);if(!n.isDirectory()||n.isSymbolicLink()||n.uid!==t||(n.mode&4095)!=448)throw new Y(`unsafe`);return n}function Xf(e){let t=F(e),n=X(t);if(n){if(n.isSymbolicLink()||!n.isDirectory())throw new Y(`unsafe`);return y(t)}return P(Zf(M(t)),j(t))}function Zf(e){if(X(e))try{return y(e)}catch{throw new Y(`unsafe`)}return P(Zf(M(e)),j(e))}function Qf(e,t,n,r=!0){let i;try{let a=X(e);if(!a)throw new Y(`missing`);let s=e=>{if(!e.isFile()||e.isSymbolicLink()||n!==void 0&&(e.uid!==n||(e.mode&4095)!=384))throw new Y(`unsafe`);if(e.size>t)throw new Y(`invalid`)};s(a),i=h(e,o.O_RDONLY|o.O_NOFOLLOW|o.O_NONBLOCK);let c=l(i);if(s(c),!Yf(a,c))throw new Y(`unsafe`);let u=Buffer.alloc(t+ +!!r),d=0;for(;d<u.length;){let e=_(i,u,d,u.length-d,null);if(e===0)break;d+=e}let f=l(i),p=X(e);if(s(f),!p||!Yf(c,p)||!Yf(c,f)||c.size!==f.size||c.mtimeMs!==f.mtimeMs||c.ctimeMs!==f.ctimeMs)throw new Y(`unsafe`);if(s(p),d>t||d!==f.size)throw new Y(`invalid`);return u.subarray(0,d)}catch(e){throw e instanceof Y?e:new Y(`unsafe`)}finally{i!==void 0&&a(i)}}function $f(e={}){let t=e.uid??process.getuid?.(),n=e.euid??process.geteuid?.();if(!Number.isInteger(t)||t===void 0||t<=0||t!==n)throw Error(`shellbell: Linux hosting requires matching non-root real and effective users`);let r;try{let t=Qf(e.machineIdPath??`/etc/machine-id`,256,void 0,!1).toString(`utf8`);if(!/^[0-9a-fA-F]{32}\n?$/.test(t)||/^0{32}\n?$/.test(t))throw Error();r=Buffer.from(t.trim().toLowerCase(),`hex`)}catch{throw Error(`shellbell: Linux machine identity is unavailable or invalid; provision /etc/machine-id before host initialization`)}let i=ae(`sha256`,`shellbell.local-host-scope.v1`).update(r).digest(`hex`),a=i.slice(0,32);return{uid:t,machineId:r.toString(`hex`),hostDigest:i,hostScope:a}}const ep=new WeakMap,tp=new Set([16914836,61267,1481003842,2435016766]);function np(e,t){let n=ep.get(e),r=n?.root??M(M(e.runtimeDir)),i=n?.fsType??(e=>C(e).type);try{if(Z(r,e.linuxHost.uid),!tp.has(Number(i(r))))throw new Y(`unsafe`);for(let n of[P(r,`shellbell`),e.runtimeDir]){if(!X(n)){if(!t)continue;try{m(n,{mode:448})}catch(e){if(e.code!==`EEXIST`)throw e}}if(Z(n,e.linuxHost.uid),!tp.has(Number(i(n))))throw new Y(`unsafe`)}X(e.runtimeDir)&&rp(e.runtimeDir,e.linuxHost.uid,0,i)}catch{throw Error(`shellbell: unsafe or unavailable Linux runtime; provide a private 0700 local XDG_RUNTIME_DIR`)}}function rp(e,t,n,r){if(n>2)throw new Y(`unsafe`);let i=v(e);if(i.length>256)throw new Y(`unsafe`);for(let a of i){let i=P(e,a),o=X(i);if(!o||o.uid!==t||o.isSymbolicLink())throw new Y(`unsafe`);if(o.isDirectory()){if(Z(i,t),!tp.has(Number(r(i))))throw new Y(`unsafe`);rp(i,t,n+1,r)}else if(!o.isFile()&&!o.isSocket()||(o.mode&4095)!=384)throw new Y(`unsafe`)}}function ip(e,t){if(M(t)!==M(e.runtimeDir))throw new Y(`unsafe`);Z(t,e.linuxHost.uid);let n=ep.get(e)?.fsType??(e=>C(e).type);if(!tp.has(Number(n(t))))throw new Y(`unsafe`);rp(t,e.linuxHost.uid,0,n)}function ap(e={}){let{uid:t,hostDigest:n,hostScope:r}=$f(e),i=e.env??process.env,a=e.home??D(),o=i.SHELLBELL_DIR;if(o!==void 0&&!N(o))throw Error(`shellbell: SHELLBELL_DIR must be absolute`);let s=i.XDG_STATE_HOME&&N(i.XDG_STATE_HOME)?i.XDG_STATE_HOME:P(a,`.local`,`state`),c=Xf(o??P(s,`shellbell`,`hosts`,r));X(c)&&Z(c,t);let l=i.XDG_RUNTIME_DIR??`/run/user/${t}`;if(!N(l))throw Error(`shellbell: XDG_RUNTIME_DIR must be absolute`);let u=P(F(l),`shellbell`,ie(`sha256`).update(c).digest(`hex`).slice(0,32)),d={dir:c,serviceOwner:P(c,`service-owner.json`),identity:P(c,`identity.json`),config:P(c,`config.json`),pairings:P(c,`pairings.json`),log:P(c,`agent.log`),runtimeDir:u,sock:P(u,`agent.sock`),pid:P(u,`agent.pid`),linuxHost:{uid:t,hostDigest:n,hostScope:r}};if(Buffer.byteLength(d.sock)>107)throw Error(`shellbell: Linux socket path exceeds 107 bytes; choose a shorter XDG_RUNTIME_DIR`);return ep.set(d,{root:F(l),fsType:e.runtimeFsType??(e=>C(e).type)}),np(d,!1),d}function op(e){np(e,!0)}const sp=I.object({v:I.literal(1),relayUrl:I.string().url(),computerName:I.string().min(1).max(64),accent:I.string().min(1).max(32),notifyMinCommandMs:I.number().int().nonnegative().default(1e4),idleQuietMs:I.number().int().positive().default(4e3),idleMinActiveMs:I.number().int().nonnegative().default(1500),turn:I.boolean().optional(),showAgentConversations:I.boolean().optional(),terminalPlugins:I.array(I.string().min(1).max(4096).refine(e=>e.startsWith(`/`)&&e.endsWith(`.mjs`)&&[...e].every(e=>e.charCodeAt(0)>=32&&e.charCodeAt(0)!==127))).max(29).optional()}),cp=I.object({phoneFp:I.string().regex(/^[a-z2-7]{26}$/),name:I.string().min(1).max(64),platform:I.enum([`ios`,`android`]),ed25519Pub:I.string(),x25519Pub:I.string(),kPair:I.string(),minProtocolVersion:I.literal(2).optional(),pairedAt:I.string(),lastSeenAt:I.string().nullable()}),lp=I.object({v:I.literal(1),phones:I.array(cp)});function up(e,t){if(!e||e.phoneFp!==t.phoneFp||e.kPair!==t.kPair)return t;if(e.ed25519Pub!==t.ed25519Pub||e.x25519Pub!==t.x25519Pub)throw Error(`shellbell: pairing identity changed without a new pairing key`);return e.minProtocolVersion===2?{...t,minProtocolVersion:2}:t}const dp=I.object({v:I.literal(1),hostDigest:I.string().regex(/^[0-9a-f]{64}$/),installationId:I.string().uuid()}).strict();function fp(e){try{let t=nc(JSON.parse(e.toString(`utf8`))),n=$s(t.ed25519.priv,t.x25519.priv,t.createdAt);if(!Buffer.from(n.ed25519.pub).equals(Buffer.from(t.ed25519.pub))||!Buffer.from(n.x25519.pub).equals(Buffer.from(t.x25519.pub)))throw Error();return{identity:t,fp:rc(t.ed25519.pub)}}catch{throw new Y(`invalid`)}}function pp(e){try{return sp.parse(JSON.parse(e.toString(`utf8`)))}catch{throw new Y(`invalid`)}}function mp(e){try{let{phones:t}=lp.parse(JSON.parse(e.toString(`utf8`)));for(let e of t){let t=br(e.ed25519Pub);if(t.length!==32||br(e.x25519Pub).length!==32||br(e.kPair).length!==32||rc(t)!==e.phoneFp)throw Error()}return t}catch{throw new Y(`invalid`)}}function hp(e,t){let n=Z(e,t),r=Qf(P(e,`identity.json`),65536,t),i=Qf(P(e,`config.json`),65536,t),a=Qf(P(e,`pairings.json`),1048576,t);if(fp(r),pp(i),mp(a),!Yf(n,Z(e,t)))throw new Y(`unsafe`);return{identity:r,config:i,pairings:a}}function gp(e){try{if(!X(e.dir))return{status:`absent`};let t=Z(e.dir,e.linuxHost.uid);for(let t of v(e.dir)){let n=/^owner-[1-9][0-9]*-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/,r=`owner-${t.slice(34)}`,i=t.startsWith(`service-owner.json.lock-candidate-`)&&n.test(r);if(t===`service-owner.json.lock`||i){let a=P(e.dir,t),o;try{o=Z(a,e.linuxHost.uid);let t=v(a),s=t[0];if(!(i&&t.length===0)){if(t.length!==1||!s||!n.test(s)||i&&s!==r)throw new Y(`unsafe`);Qf(P(a,s),0,e.linuxHost.uid)}if(!Yf(o,Z(a,e.linuxHost.uid)))throw new Y(`unsafe`)}catch(t){let n=X(a);if(!n)continue;try{if(i&&o&&Yf(o,n)&&v(a).length===0&&Yf(n,Z(a,e.linuxHost.uid)))continue}catch(e){if(e instanceof Y&&e.kind===`missing`||e.code===`ENOENT`)continue;throw e}throw t}continue}let a=X(P(e.dir,t));if(a&&(!a.isFile()||a.isSymbolicLink()||a.uid!==e.linuxHost.uid||(a.mode&4095)!=384))throw new Y(`unsafe`)}let n=P(e.dir,`host.json`);if(!X(n))return{status:`unmarked`,reason:`Host marker missing; explicit host initialization or recovery required`};let r,i=Qf(n,4096,e.linuxHost.uid);try{r=dp.parse(JSON.parse(i.toString(`utf8`)))}catch{throw new Y(`invalid`)}if(r.hostDigest!==e.linuxHost.hostDigest)return{status:`wrong-host`,reason:`State belongs to a different host; choose this host's state directory`};let a=hp(e.dir,e.linuxHost.uid);if(!i.equals(Qf(n,4096,e.linuxHost.uid))||!Yf(t,Z(e.dir,e.linuxHost.uid)))throw new Y(`unsafe`);return{status:`ready`,bytes:a}}catch(e){return{status:e instanceof Y&&e.kind===`unsafe`?`unsafe`:`invalid`,reason:`Host state failed validation; inspect files and recover explicitly`}}}function _p(e){let t=gp(e);return t.status===`ready`?{status:`ready`}:t}function vp(){return Error(`shellbell: Linux host state is not ready; use shellbell host init --new or host init --adopt <absolute-source> --confirm-source-inactive for absent state; inspect existing state before recovery`)}function yp(e){let t=gp(e);if(!(`bytes`in t))throw vp();return t.bytes}function bp(e){if(_p(e).status!==`ready`)throw vp()}function xp(e){return fp(yp(e).identity)}function Sp(e){return pp(yp(e).config)}function Cp(e){return mp(yp(e).pairings)}const wp=[`emerald`,`blue`,`amber`,`violet`,`rose`,`cyan`,`lime`,`orange`];function Tp(e=process.env.SHELLBELL_DIR??P(D(),`.shellbell`)){return{dir:e,serviceOwner:P(e,`service-owner.json`),identity:P(e,`identity.json`),pairings:P(e,`pairings.json`),config:P(e,`config.json`),log:P(e,`agent.log`),sock:P(e,`agent.sock`),pid:P(e,`agent.pid`)}}function Ep(e){if(e.linuxHost){bp(e);return}m(e.dir,{recursive:!0,mode:448}),i(e.dir,448)}function Dp(e,t,n){jp(e,t,t=>{n?.(),b(t,e)})}const Op=new Set([`EPERM`,`ENOTSUP`,`EOPNOTSUPP`,`EXDEV`]);function kp(e,t){try{return jp(e,t,n=>{try{f(n,e)}catch(n){if(!Op.has(n.code??``))throw n;Ap(e,t)}ee(n)}),!0}catch(e){if(e.code===`EEXIST`)return!1;throw e}}function Ap(e,t){let n=h(e,`wx`,384),r=l(n),i=!1;try{c(n,384);let e=typeof t==`string`?Buffer.from(t):t,r=0;for(;r<e.byteLength;){let t=E(n,e,r,e.byteLength-r);if(t<=0)throw Error(`secret file write made no progress`);r+=t}u(n),i=!0}finally{if(a(n),!i)try{let t=p(e);t.dev===r.dev&&t.ino===r.ino&&ee(e)}catch{}}}function jp(e,t,n){let r=`${e}.tmp-${process.pid}`,o=null;try{let e=h(r,`wx`,384),s=l(e);o={dev:s.dev,ino:s.ino};try{let n=typeof t==`string`?Buffer.from(t):t,r=0;for(;r<n.byteLength;){let t=E(e,n,r,n.byteLength-r);if(t<=0)throw Error(`atomic file write made no progress`);r+=t}u(e)}finally{a(e)}i(r,384),n(r)}catch(e){try{if(o){let e=p(r);e.dev===o.dev&&e.ino===o.ino&&ee(r)}}catch{}throw e}}function Mp(e){let t;try{t=g(e,`utf8`)}catch(t){throw Error(`shellbell: cannot read ${e}: ${t.message}`)}try{return JSON.parse(t)}catch{throw Error(`shellbell: ${e} is not valid JSON`)}}function Np(){return{v:1,relayUrl:`wss://relay.shellbell.dev`,computerName:O().replace(/\.local$/,``)||`Mac`,accent:wp[0],notifyMinCommandMs:1e4,idleQuietMs:3e4,idleMinActiveMs:1500}}function Pp(e){return zp(e,()=>{if(Hp(e),e.linuxHost)return Sp(e);if(!X(e.dir))return Np();let t=Z(e.dir,process.getuid());if(!X(e.config))return Np();let n=Qf(e.config,Lp,process.getuid());if(!Yf(t,Z(e.dir,process.getuid())))throw new Y(`unsafe`);let r;try{r=JSON.parse(n.toString(`utf8`))}catch{throw new Rp(`invalid`,e.config,`not valid JSON`)}return Bp(e,r)})}function Fp(e){return e.linuxHost?Pp(e):Wp(e,()=>{let t=Pp(e);return X(e.config)||Gp(e,t),t})}function Ip(e,t){return Wp(e,()=>t(Pp(e)))}const Lp=65536;var Rp=class extends Error{code;constructor(e,t,n=e){super(`shellbell: config ${n} at ${t}`),this.code=e,this.name=`ConfigEditError`}};function zp(e,t){try{return t()}catch(t){throw t instanceof Rp?t:new Rp(t instanceof Y?t.kind===`invalid`?`invalid`:`unsafe`:`io`,e.config)}}function Bp(e,t){let n=sp.safeParse(t);if(!n.success)throw new Rp(`invalid`,e.config);return n.data}function Vp(e){if(e.linuxHost){bp(e);return}Z(e.dir,process.getuid())}function Hp(e){if([e.dir,e.config].some(e=>Buffer.byteLength(e)>4096||e.includes(`\0`))||M(F(e.config))!==F(e.dir))throw new Rp(`unsafe`,e.config)}function Up(e,t){let n=`${j(e)}.lock`;for(let r of v(M(e))){if(r!==n&&!r.startsWith(`${n}-candidate-`))continue;let i=P(M(e),r);if(X(i)){Z(i,t);for(let e of v(i)){let n=X(P(i,e));if(n&&(!n.isFile()||n.isSymbolicLink()||n.uid!==t||(n.mode&4095)!=384))throw new Y(`unsafe`)}}}}function Wp(e,t){let n=zp(e,()=>{if(Hp(e),!e.linuxHost&&!X(e.dir))try{m(e.dir,{recursive:!0,mode:448})}catch(e){if(e.code!==`EEXIST`)throw e}Vp(e);let t=e.config;e.linuxHost&&(op(e),t=P(e.runtimeDir,`config-${ie(`sha256`).update(e.config).digest(`hex`)}`)),Up(t,e.linuxHost?.uid??process.getuid());try{return Jf(t)}catch(t){throw t instanceof Error&&t.message.startsWith(`Control endpoint busy`)?new Rp(`busy`,e.config):t instanceof Error&&t.message.startsWith(`Invalid control guard`)?new Rp(`unsafe`,e.config):t}}),r;try{r=t()}catch(e){try{n()}catch{}throw e}return zp(e,n),r}function Gp(e,t){zp(e,()=>{let n=`${JSON.stringify(Bp(e,t),null,2)}\n`;if(Buffer.byteLength(n)>Lp)throw new Rp(`invalid`,e.config);Dp(e.config,n,()=>{Vp(e),Pp(e)})})}function Kp(e,t){return Wp(e,()=>{let n=Bp(e,t(Pp(e)));return Gp(e,n),n})}function qp(e){if(e.linuxHost)return Cp(e);if(Ep(e),!s(e.pairings))return[];let t=lp.safeParse(Mp(e.pairings));if(!t.success)throw Error(`shellbell: invalid pairings at ${e.pairings}: ${I.prettifyError(t.error)}`);return t.data.phones}function Jp(e,t){Ep(e);let n=new Map(qp(e).map(e=>[e.phoneFp,e])),r=t.map(e=>up(n.get(e.phoneFp),e)),i=lp.parse({v:1,phones:r}),a=`${JSON.stringify(i,null,2)}\n`;if(e.linuxHost){if(Buffer.byteLength(a)>1048576)throw Error(`shellbell: Linux pairings exceed their state size limit`);mp(Buffer.from(a))}return Dp(e.pairings,a,e.linuxHost?()=>bp(e):void 0),i.phones}const Yp=new Set([`Error`,`TypeError`,`RangeError`,`ReferenceError`,`SyntaxError`,`URIError`,`EvalError`,`AggregateError`,`AbortError`,`TimeoutError`,`ProtocolError`,`BackendUnavailable`,`SessionGone`,`Unsupported`,`BadWindow`,`HerdrError`,`ITerm2AuthError`,`ConfigEditError`,`NativeControllerError`,`ControlV2ClientError`]);function Xp(e){try{if(!(e instanceof Error))return`unknown`;let t=e.name;return typeof t==`string`&&Yp.has(t)?t:`Error`}catch{return`unknown`}}const Zp=1048576;function Qp(e){return e.isFile()&&e.uid===process.getuid?.()&&e.nlink===1}function $p(e,t){return e.dev===t.dev&&e.ino===t.ino}function em(e,t){let n;try{let i;try{i=p(e)}catch(e){if(e.code!==`ENOENT`)return}if(i&&!Qp(i))return;n=h(e,o.O_WRONLY|o.O_APPEND|o.O_NOFOLLOW|o.O_NONBLOCK|(i?0:o.O_CREAT|o.O_EXCL),384);let a=l(n),s=p(e);if(!Qp(a)||!Qp(s)||!$p(a,s)||i&&!$p(i,a))return;c(n,384),r(n,t)}catch{}finally{if(n!==void 0)try{a(n)}catch{}}}function tm(e){let t;try{let n=p(e);if(!Qp(n)||n.size<Zp)return;t=h(e,o.O_RDWR|o.O_NOFOLLOW|o.O_NONBLOCK);let r=l(t);if(!Qp(r)||!$p(n,r)||r.size<Zp)return;c(t,384);let i=Math.max(0,r.size-Zp),a=Buffer.alloc(r.size-i);for(let e=0;e<a.length;){let n=_(t,a,e,a.length-e,i+e);if(n===0)return;e+=n}for(let t=4;t>=1;t--)s(`${e}.${t}`)&&b(`${e}.${t}`,`${e}.${t+1}`);Dp(`${e}.1`,a);let u=p(e);Qp(u)&&$p(u,r)&&Qp(l(t))&&d(t,0)}catch{}finally{if(t!==void 0)try{a(t)}catch{}}}function nm(e,t={}){let n=e.stdout??process.stdout.isTTY===!0,r=(r,i,a)=>{if(r===`debug`&&!e.verbose)return;let o={t:new Date().toISOString(),level:r,msg:i,...t,...a};if(e.file){tm(e.file);try{em(e.file,`${JSON.stringify(o)}\n`)}catch{}}if(n){let e=Object.keys({...t,...a}).length?` ${JSON.stringify({...t,...a})}`:``,n=`${o.t.slice(11,19)} ${r.padEnd(5)} ${i}${e}`;(r===`error`||r===`warn`?process.stderr:process.stdout).write(`${n}\n`)}};return{debug:(e,t)=>r(`debug`,e,t),info:(e,t)=>r(`info`,e,t),warn:(e,t)=>r(`warn`,e,t),error:(e,t)=>r(`error`,e,t),child:n=>nm(e,{...t,...n})}}function rm(e){if(!im(e.reported)||!im(e.before)||e.before>e.reported||!Number.isSafeInteger(e.count)||e.count<1||e.count>G.historyLines||e.capture===null||typeof e.capture!=`object`)throw RangeError(`invalid history read request`)}function im(e){return Number.isSafeInteger(e)&&e>=0}var am=class extends Error{hint;constructor(e,t){super(e),this.hint=t,this.name=`BackendUnavailable`}},om=class extends Error{constructor(e){super(`session gone: ${e}`),this.name=`SessionGone`}},sm=class extends Error{code;constructor(e){super(`Terminal input ${e}`),this.code=e,this.name=`TerminalInputError`}},cm=class extends Error{constructor(e){super(`unsupported: ${e}`),this.name=`Unsupported`}},lm=class extends Error{constructor(e=`No terminal app on this computer can show a new session.`){super(e),this.name=`NotShownOnComputer`}},um=class extends Error{constructor(e){super(`bad-window: ${e}`),this.name=`BadWindow`}};async function dm(e,t){let n;try{return await Promise.race([Promise.resolve().then(e),new Promise((e,r)=>{n=setTimeout(()=>r(Error(`Terminal adapter deadline exceeded`)),t),n.unref()})])}finally{n&&clearTimeout(n)}}function fm(e,t){return`${e}:${t}`}const pm=Yl.options,mm=new Set([`iterm2`]);function hm(e){let t=e.indexOf(`:`);if(t<=0)return null;let n=Xl.safeParse(e.slice(0,t));return n.success?{name:n.data,native:e.slice(t+1)}:null}var gm=class{log;listTimeoutMs;conversationPermits=new Map;async conversationReference(e,t){let n=hm(e);if(!n||t.aborted)return null;let r=this.members.get(n.name);if(!r||r.isConnected===!1||!r.conversationReference||this.conversationPermits.has(e)||this.conversationPermits.size>=10)return null;let i={};this.conversationPermits.set(e,i);let a=this.historyMembership.get(n.name),o=!0,s=this.on(t=>{(r.isConnected===!1||(t.type===`session-removed`||t.type===`conversation-changed`)&&t.sessionId===e)&&(o=!1)});try{let e=await r.conversationReference?.(n.native,t);return e&&o&&!t.aborted&&this.historyMembership.get(n.name)===a&&this.members.get(n.name)===r&&this.members.get(n.name)?.isConnected!==!1?e:null}catch{return null}finally{s(),this.conversationPermits.get(e)===i&&this.conversationPermits.delete(e)}}notificationRevision=0;async notificationFacts(e){let t=hm(e);if(!t)return;let n=this.members.get(t.name);if(!n||n.isConnected===!1)return;let r=this.notificationRevision,i=await n.notificationFacts?.(t.native);if(i&&i.sessionId===t.native&&this.members.get(t.name)===n&&r===this.notificationRevision&&this.connected().some(e=>e.name===t.name))return{...i,sessionId:e,revision:JSON.stringify([r,i.revision])}}members=new Map;labels=new Map;hostCommands=new Map;hostedLaunchers=new Map;hostedPending=0;sessionLaunchers=new Map;setupReporters=new Map;setupListeners=new Set;sessionStartups=new Map;startupWaiters=new Map;unsubs=new Map;historyMembership=new Map;historyPermits=new Map;inputCount=0;inputBytes=0;inputQueues=new Map;handlers=new Set;constructor(e,t=8e3){this.log=e,this.listTimeoutMs=t}orderedNames(){let e=new Set([...this.members.keys(),...this.sessionLaunchers.keys()]);for(let t of pm)e.delete(t);return[...pm,...[...e].sort()]}defaultLabel(e){let t=Yl.safeParse(e);return t.success?Zl[t.data]:e}catalog(){return this.orderedNames().map(e=>{let t=this.memberConnected(e);return{name:e,label:this.labels.get(e)??this.defaultLabel(e),capabilities:this.members.get(e)?.capabilities??{subscribe:!1,prompts:!1,createSession:!1,focus:!1,history:!1,absoluteLines:!1},connected:t,launchable:!t&&(this.sessionLaunchers.get(e)?.available()??!1)}})}registerHostedLauncher(e,t){let n=cu.parse(e),r=`${n.backend}:${n.host}`;if(!this.hostedLaunchers.has(r)&&this.hostedLaunchers.size>=64)throw new am(`Too many terminal launch targets`,`Disable a launch target first.`);let i={target:n,launcher:t};return this.hostedLaunchers.set(r,i),this.emit({type:`layout-changed`}),()=>{this.hostedLaunchers.get(r)===i&&(this.hostedLaunchers.delete(r),this.emit({type:`layout-changed`}))}}launchTargets(){return[...this.hostedLaunchers.values()].filter(({target:e,launcher:t})=>t.available()&&(this.memberConnected(e.backend)||this.sessionLaunchers.get(e.backend)?.available())).map(({target:e})=>({...e})).sort((e,t)=>`${e.backend}:${e.host}`.localeCompare(`${t.backend}:${t.host}`))}launchIssues(){let e=new Set(this.launchTargets().map(e=>e.backend)),t=new Map;for(let{target:n,launcher:r}of this.hostedLaunchers.values()){if(e.has(n.backend)||t.has(n.backend))continue;let i=r.unavailableReason?.();i&&t.set(n.backend,i)}return du.parse([...t].map(([e,t])=>({backend:e,reason:t})))}preferredHost(e){return _u(e,this.launchTargets())?.host}async requireShownOnComputer(e,t){if(!mm.has(e.name)&&!(e.shownOnComputer&&await dm(()=>e.shownOnComputer(t),5e3)))throw new lm(`This session is not open in a terminal window on your computer, so it cannot be split or extended from the phone.`)}async createHostedSession(e){let t=`${e.backend}:${e.host}`,n=this.hostedLaunchers.get(t);if(e.windowId!==void 0||!n?.launcher.available())throw new am(`Terminal launch target is unavailable`,`Check the selected terminal app on your computer.`);if(this.hostedPending>=8)throw new am(`Terminal startup is busy`,`Wait for the current startup to finish.`);this.hostedPending++;let r=(async()=>{if(this.hostedLaunchers.get(t)!==n)throw new om(t);let r=this.members.get(e.backend),i;if(!r||r.isConnected===!1){let t=await this.startSession(e.backend,e.initialSize);r=t.backend,i=t.sessionId}if(this.hostedLaunchers.get(t)!==n||this.members.get(e.backend)!==r)throw new om(t);let a=e.initialSize?await n.launcher.create(r,i,e.initialSize):await n.launcher.create(r,i);if(this.hostedLaunchers.get(t)!==n||this.members.get(e.backend)!==r||r.isConnected===!1)throw new om(t);return fm(e.backend,a)})().finally(()=>{this.hostedPending--});return dm(()=>r,3e4)}get capabilities(){let e=[...this.members.values()].filter(e=>e.isConnected!==!1).map(e=>e.capabilities),t=t=>e.some(e=>e[t]);return{subscribe:t(`subscribe`),prompts:t(`prompts`),createSession:t(`createSession`)||[...this.sessionLaunchers.values()].some(e=>e.available()),focus:t(`focus`),history:t(`history`),absoluteLines:e.length>0&&e.every(e=>e.absoluteLines)}}add(e,t,n){let r=ou.parse({name:e.name,label:t??this.defaultLabel(e.name),capabilities:e.capabilities,connected:!1,launchable:!1});if(!this.orderedNames().includes(e.name)&&this.orderedNames().length>=32)throw new am(`Too many terminal adapters`,`Disable an adapter before adding another.`);let i={},a=e.on(t=>{this.members.get(e.name)===e&&this.historyMembership.get(e.name)===i&&this.emit(vm(e.name,t))});if(typeof a!=`function`)throw Error(`Terminal adapter subscription is invalid`);let o=this.unsubs.get(e.name);this.labels.set(e.name,r.label),this.hostCommands.set(e.name,n??(e.name===`tmux`||e.name===`herdr`?[e.name]:[])),this.members.set(e.name,e),this.historyMembership.set(e.name,i),this.unsubs.set(e.name,a);try{o?.()}catch(t){this.log.warn(`backend subscription cleanup failed`,{backend:e.name,err:Xp(t)})}this.emit({type:`layout-changed`})}remove(e){let t=this.unsubs.get(e);this.unsubs.delete(e),this.members.delete(e),this.labels.delete(e),this.hostCommands.delete(e),this.historyMembership.delete(e);try{t?.()}catch(t){this.log.warn(`backend subscription cleanup failed`,{backend:e,err:Xp(t)})}this.emit({type:`layout-changed`})}connected(){let e=[];for(let t of this.orderedNames()){let n=this.members.get(t);n&&n.isConnected!==!1&&e.push({name:n.name,capabilities:n.capabilities})}return e}registerSessionLauncher(e,t){if(Xl.parse(e),!this.orderedNames().includes(e)&&this.orderedNames().length>=32)throw new am(`Too many terminal adapters`,`Disable an adapter before adding another.`);return this.sessionLaunchers.set(e,t),this.sessionStartups.delete(e),this.emit({type:`layout-changed`}),()=>{this.sessionLaunchers.get(e)===t&&(this.sessionLaunchers.delete(e),this.sessionStartups.delete(e),this.emit({type:`layout-changed`}))}}launchable(){return this.orderedNames().filter(e=>!this.memberConnected(e)&&this.sessionLaunchers.get(e)?.available())}async startSession(e,t){let n=this.sessionLaunchers.get(e);if(!n?.available())throw new om(`backend ${e}`);let r=this.startupWaiters.get(e)??0;if(r>=8)throw new am(`Terminal startup is busy`,`Try again after the current startup finishes.`);this.startupWaiters.set(e,r+1);try{let r=this.sessionStartups.get(e);if(!r){let i=Promise.resolve().then(()=>{if(this.sessionLaunchers.get(e)!==n)throw new om(`backend ${e}`);return t?n.start(t):n.start()}).then(e=>({...e})).finally(()=>{this.sessionStartups.get(e)===i&&this.sessionStartups.delete(e)});r=i,this.sessionStartups.set(e,i)}let i=await r;if(this.sessionLaunchers.get(e)!==n||this.members.get(e)!==i.backend||i.backend.isConnected===!1)throw new om(`backend ${e}`);let a=i.sessionId;return i.sessionId=void 0,{backend:i.backend,sessionId:a}}finally{let t=(this.startupWaiters.get(e)??1)-1;t===0?this.startupWaiters.delete(e):this.startupWaiters.set(e,t)}}member(e){return this.members.get(e)}registerSetupReporter(e,t){return this.setupReporters.set(e,t),()=>{this.setupReporters.get(e)===t&&this.setupReporters.delete(e)}}onSetupChanged(e){return this.setupListeners.add(e),()=>this.setupListeners.delete(e)}notifySetupChanged(){for(let e of this.setupListeners)try{e()}catch{}}terminalSetup(){return this.orderedNames().flatMap(e=>{let t=this.setupReporters.get(e),n=this.memberConnected(e);if(!t&&!this.members.has(e))return[];let r={};try{r=t?.(n)??{}}catch{r=n?{}:{issue:`failed`}}return[{name:e,connected:n,...r.issue?{issue:r.issue}:{},...r.issue&&r.detail?{detail:r.detail}:{}}]}).slice(0,16)}connectTerminal(e){let t=this.setupReporters.get(e)?.connect;if(!t)return!1;try{t().catch(e=>this.log.debug(`terminal connect failed`,{error:Xp(e)}))}catch(e){this.log.debug(`terminal connect failed`,{error:Xp(e)})}return!0}status(){return this.orderedNames().map(e=>({name:e,connected:this.memberConnected(e)}))}nameOf(e){return hm(e)?.name??null}capabilitiesOf(e){let t=this.nameOf(e);return t?this.members.get(t)?.capabilities??null:null}async connect(){}async close(){let e=[...this.members.values()],t=[...this.unsubs.values()];this.sessionLaunchers.clear(),this.hostedLaunchers.clear(),this.sessionStartups.clear(),this.historyMembership.clear(),this.unsubs.clear(),this.members.clear(),this.labels.clear(),this.hostCommands.clear();for(let e of t)try{e()}catch(e){this.log.warn(`backend subscription cleanup failed`,{err:Xp(e)})}await Promise.all(e.map(async e=>{try{await dm(()=>e.close(),this.listTimeoutMs)}catch(t){this.log.warn(`backend close failed`,{backend:e.name,err:Xp(t)})}}))}async listSessions(){let e=this.orderedNames().map(e=>({name:e,backend:this.members.get(e),membership:this.historyMembership.get(e)})),t=(await Promise.all(e.map(async e=>({...e,sessions:await this.safeListSessions(e.backend,e.name)})))).filter(({name:e,backend:t,membership:n})=>t&&this.members.get(e)===t&&this.historyMembership.get(e)===n),n=new Set;for(let{name:e,backend:r}of t)try{for(let e of r?.representedWindows?.()??[])n.add(JSON.stringify([e.backend,e.windowId]))}catch(t){this.log.warn(`terminal window relationships unavailable`,{backend:e,err:Xp(t)})}let r=[];for(let{name:e,backend:i,sessions:a}of t)for(let o of a){try{let r=i?.nativeWindowIdOf?.(o.id);if(r&&n.has(JSON.stringify([e,r])))continue;let a=i?.hostedProcess?.(o.id);if(a&&t.some(t=>t.name!==e&&this.memberConnected(t.name)&&this.hostCommands.get(t.name)?.includes(a)))continue}catch(t){this.log.warn(`terminal host relationship unavailable`,{backend:e,err:Xp(t)})}r.push(_m(e,o))}return r}projectFolder(e){let t=hm(e),n=t?this.members.get(t.name):void 0;if(t&&n?.projectFolder)try{return n.projectFolder(t.native)}catch(e){this.log.warn(`session project folder unavailable`,{backend:t.name,err:Xp(e)});return}}memberConnected(e){let t=this.members.get(e);return!!t&&t.isConnected!==!1}async safeListSessions(e,t){if(!e)return[];let n=this.historyMembership.get(t);try{let r=await dm(()=>e.listSessions(),this.listTimeoutMs);return this.members.get(t)!==e||this.historyMembership.get(t)!==n?[]:r}catch(e){return this.log.warn(`listSessions failed for backend; returning the other backends' sessions`,{backend:t,err:Xp(e)}),[]}}target(e){let t=hm(e),n=t?this.members.get(t.name):void 0;if(!t||!n)throw new om(e);return{backend:n,native:t.native}}async getScreen(e,t){let{backend:n,native:r}=this.target(e);return t===void 0?n.getScreen(r):n.getScreen(r,t)}async getHistory(e,t,n){let{backend:r,native:i}=this.target(e);return r.getHistory(i,t,n)}async getHistoryPage(e,t){let{backend:n,native:r}=this.target(e);if(rm(t),t.signal.aborted)return{status:`cancelled`};let i=n.getHistoryPage;if(!i)return{status:`unavailable`,reason:`unsupported`};if(this.historyPermits.has(e)||this.historyPermits.size>=10)return{status:`unavailable`,reason:`busy`};let a={};this.historyPermits.set(e,a);let o=this.historyMembership.get(n.name);try{let e=await i.call(n,r,t);return t.signal.aborted?{status:`cancelled`}:this.historyMembership.get(n.name)===o?e:{status:`reset`}}catch(e){if(t.signal.aborted)return{status:`cancelled`};if(this.historyMembership.get(n.name)!==o)return{status:`reset`};throw e}finally{this.historyPermits.get(e)===a&&this.historyPermits.delete(e)}}async sendText(e,t,n){let{backend:r,native:i}=this.target(e);return this.enqueueInput(e,r,t,()=>r.sendText(i,t),n)}async clickMouse(e,t,n){let{backend:r,native:i}=this.target(e);if(!r.capabilities.mouseClick||!r.clickMouse)throw new cm(`mouse input`);return this.enqueueInput(e,r,``,()=>r.clickMouse(i,t),n)}async sendInput(e,t,n){let{backend:r,native:i}=this.target(e);if(!r.capabilities.terminalInput||!r.sendInput)throw new cm(`terminal input`);return this.enqueueInput(e,r,t,()=>r.sendInput(i,t),n)}openVtStream(e){let{backend:t,native:n}=this.target(e);if(!t.capabilities.vtStream||!t.openVtStream)throw new cm(`vt stream`);return t.openVtStream(n)}async paste(e,t,n,r){let{backend:i,native:a}=this.target(e);if(!i.capabilities.terminalPaste||!i.paste)throw new cm(`terminal paste`);return this.enqueueInput(e,i,t,()=>i.paste(a,t,n),r)}enqueueInput(e,t,n,r,i){let a=Buffer.byteLength(n);if(this.inputCount>=256||this.inputBytes+a>1048576)return Promise.reject(new sm(`busy`));let o=this.inputQueues.get(e);if(o||(o={backend:t,membership:this.historyMembership.get(t.name),tail:Promise.resolve(),pending:0,valid:!0},this.inputQueues.set(e,o)),!o.valid||o.backend!==t)return Promise.reject(new sm(`cancelled`));let s=o;s.pending++,this.inputCount++,this.inputBytes+=a;let c=()=>this.members.get(t.name)===t&&t.isConnected!==!1&&this.historyMembership.get(t.name)===s.membership,l=s.tail.then(async()=>{if(!s.valid||i?.()===!1)throw new sm(`cancelled`);if(!c())throw new om(e);await r(),s.valid&&c()&&this.emit({type:`input-accepted`,sessionId:e})});return s.tail=l.catch(()=>{s.valid=!1}),l.finally(()=>{this.inputCount--,this.inputBytes-=a,--s.pending===0&&this.inputQueues.get(e)===s&&this.inputQueues.delete(e)})}async createSession(e){if(e.kind===`tab`&&e.host!==void 0)return this.createHostedSession(e);if(e.kind===`split`){let{backend:t,native:n}=this.target(e.sessionId),r={kind:`split`,sessionId:n,direction:e.direction};return await this.requireShownOnComputer(t,r),fm(t.name,await t.createSession(r))}let t;if(e.windowId){let n=hm(e.windowId);if(!n||n.name!==e.backend)throw new um(e.windowId);t=n.native}if(!mm.has(e.backend)){if(t===void 0){let t=this.preferredHost(e.backend);if(t===void 0)throw new lm;return this.createHostedSession({kind:`tab`,backend:e.backend,host:t,...e.initialSize?{initialSize:e.initialSize}:{}})}let n=this.members.get(e.backend);if(!n||n.isConnected===!1)throw new om(`${e.windowId}`);let r={kind:`tab`,backend:e.backend,windowId:t};return await this.requireShownOnComputer(n,r),fm(n.name,await n.createSession(r))}let n=this.members.get(e.backend);if(!n||n.isConnected===!1){if(e.windowId)throw new om(e.windowId);let t=await this.startSession(e.backend,e.initialSize);if(t.sessionId)return fm(e.backend,t.sessionId);n=t.backend}return fm(n.name,await n.createSession({kind:`tab`,backend:e.backend,windowId:t,...e.initialSize?{initialSize:e.initialSize}:{}}))}async focus(e){let{backend:t,native:n}=this.target(e);return t.focus(n)}setWatched(e){let t=new Map;for(let e of this.members.keys())t.set(e,[]);for(let n of e){let e=hm(n);e&&t.get(e.name)?.push(e.native)}for(let[e,n]of t)try{this.members.get(e)?.setWatched?.(n)}catch(t){this.log.warn(`setWatched failed for backend`,{backend:e,err:Xp(t)})}}setReported(e,t){let n=hm(e);if(n)try{this.members.get(n.name)?.setReported?.(n.native,t)}catch(e){this.log.warn(`setReported failed for backend`,{backend:n.name,err:Xp(e)})}}on(e){return this.handlers.add(e),()=>this.handlers.delete(e)}emit(e){if(e.type===`session-removed`){let t=this.inputQueues.get(e.sessionId);t&&(t.valid=!1)}for(let e of this.inputQueues.values())(e.backend.isConnected===!1||this.members.get(e.backend.name)!==e.backend)&&(e.valid=!1);[`layout-changed`,`session-added`,`session-removed`,`title-changed`].includes(e.type)&&this.notificationRevision++;for(let t of[...this.handlers])if(this.handlers.has(t))try{t(e)}catch(e){this.log.error(`backend event handler threw`,{err:Xp(e)})}}};function _m(e,t){return{...t,id:fm(e,t.id),windowId:fm(e,t.windowId),tabId:fm(e,t.tabId),backend:e}}function vm(e,t){return`sessionId`in t?{...t,sessionId:fm(e,t.sessionId)}:t}function ym(e,t){let n;try{n=new URL(e)}catch{return`must be a valid URL, e.g. wss://relay.example.com`}return e.endsWith(`/`)||/[?#]/.test(e)||n.pathname!==`/`||n.username||n.password?`relay url must be scheme://host[:port] with no path, query or credentials`:e.length>256?`relay url is too long for a pairing code (at most 256 characters)`:n.protocol===`wss:`?null:n.protocol===`ws:`?t?null:`ws:// is insecure; pass --insecure or set SHELLBELL_ALLOW_INSECURE_RELAY=1 for LAN dev`:`relay url must use wss:// (ws:// only with --insecure, for LAN dev)`}function bm(e,t,n,r){let i;if(t===`relay`){let t=ym(n,r);if(t)return{error:t};i={...e,relayUrl:n}}else if(t===`name`)i={...e,computerName:n};else if(t===`accent`){if(!wp.includes(n))return{error:`unknown accent ${n} (must be one of ${wp.join(`, `)})`};i={...e,accent:n}}else if(t===`turn`){if(n!==`on`&&n!==`off`)return{error:`turn must be on or off`};let{turn:t,...r}=e;i=n===`off`?{...r,turn:!1}:r}else if(t===`conversations`){if(n!==`on`&&n!==`off`)return{error:`conversations must be on or off`};let{showAgentConversations:t,...r}=e;i=n===`on`?{...r,showAgentConversations:!0}:r}else if(Cm(t)){if(!/^\d+$/.test(n))return{error:`${t} must be a complete decimal integer`};let r=Number(n);if(!Number.isSafeInteger(r))return{error:`${t} must be a safe decimal integer`};i={...e,[t]:r}}else return{error:`unknown key ${t} (expected ${wm()})`};let a=sp.safeParse(i);return a.success?{next:a.data}:{error:a.error.issues.map(e=>e.message).join(`; `)}}const xm=[`notifyMinCommandMs`,`idleQuietMs`,`idleMinActiveMs`],Sm=[`relay`,`name`,`accent`,...xm,`turn`,`conversations`];function Cm(e){return xm.includes(e)}function wm(){return`${Sm.slice(0,-1).join(`, `)}, or ${Sm.at(-1)}`}function Tm(e,t){switch(t){case`relay`:return e.relayUrl;case`name`:return e.computerName;case`accent`:return e.accent;case`turn`:return e.turn===!1?`off`:`on`;case`conversations`:return e.showAgentConversations===!0?`on`:`off`;default:return String(e[t])}}function Em(e){let t=sp.parse(e);return ie(`sha256`).update(JSON.stringify({v:t.v,relayUrl:t.relayUrl,computerName:t.computerName,accent:t.accent,notifyMinCommandMs:t.notifyMinCommandMs,idleQuietMs:t.idleQuietMs,idleMinActiveMs:t.idleMinActiveMs,...t.terminalPlugins?.length?{terminalPlugins:t.terminalPlugins}:{},...t.turn===!1?{turn:!1}:{},...t.showAgentConversations===!0?{showAgentConversations:!0}:{}})).digest(`hex`)}const Dm=I.object({name:Xl,connected:I.boolean()}),Om=I.array(Dm).max(32),km=I.object({pid:I.number().int().positive().max(2**53-1),agentVersion:I.string().min(1),computerFp:W,stateDir:I.string().min(1).refine(N,`state directory must be absolute`),serviceInstance:I.uuid().nullable()}),Am={controlVersion:I.literal(1),process:km,backends:Om,terminalReady:I.boolean()};function jm(e,t){(e.backends.length<pm.length||pm.some((t,n)=>e.backends[n]?.name!==t)||new Set(e.backends.map(e=>e.name)).size!==e.backends.length||e.backends.slice(pm.length).some((e,t,n)=>t>0&&e.name<n[t-1].name))&&t.addIssue({code:`custom`,path:[`backends`],message:`backend status must contain each known backend in protocol order`}),e.terminalReady!==e.backends.some(e=>e.connected)&&t.addIssue({code:`custom`,path:[`terminalReady`],message:`terminal readiness must match backend connectivity`})}const Mm=I.string().min(1).max(64),Nm=I.object({route:I.enum([`relay`,`direct`]).nullable(),ready:I.boolean(),phase:I.string().max(32),lastFailure:I.string().max(32).nullable(),relaySent:I.number().int().nonnegative(),relayReceived:I.number().int().nonnegative(),directSent:I.number().int().nonnegative(),directReceived:I.number().int().nonnegative()}),Pm=I.object({...Am,relayOnline:I.boolean(),sessions:I.number().int().nonnegative().max(2**53-1),phones:I.array(I.object({phoneFp:W,name:Mm,lastSeenAt:I.string().nullable()})).max(10),connected:I.array(I.object({phoneFp:W,name:Mm,viewed:I.string().nullable(),transport:Nm.optional()})).max(10)}).superRefine(jm);function Fm(e,t=process.env){if(!e)return null;let n=t.SHELLBELL_SERVICE_INSTANCE;if(n===void 0)return null;if(!I.uuid().safeParse(n).success)throw Error(`SHELLBELL_SERVICE_INSTANCE must be a valid UUID`);return n}function Im(e){try{return t.lstatSync(e)}catch(e){if(e.code===`ENOENT`)return;throw e}}function Lm(e,t){return e?.dev===t.dev&&e.ino===t.ino}function Rm(e){let t=process.platform===`darwin`?103:process.platform===`linux`?107:null;if(t===null)throw Error(`Unsupported control socket platform: ${process.platform}`);if(Buffer.byteLength(e)>t)throw Error(`Control socket path is too long (maximum ${t} bytes): ${e}`)}async function zm(e){return new Promise((t,n)=>{let r=ce(e),i=setTimeout(()=>a(Error(`Control socket probe timed out: ${e}`)),1e3),a=(e,a=!1)=>{clearTimeout(i),r.destroy(),e?n(e):t(a)};r.once(`connect`,()=>a(void 0,!0)),r.once(`error`,e=>{e.code===`ENOENT`||e.code===`ECONNREFUSED`?a():a(e)})})}var Bm=class{sockPath;onConnection;log;pidPath;admit;server;clients=new Set;ownedSocket;ownedPid;lifecycle=Promise.resolve();constructor(e,t,n,r,i){this.sockPath=e,this.onConnection=t,this.log=n,this.pidPath=r,this.admit=i}serialize(e){let t=this.lifecycle.then(e);return this.lifecycle=t.catch(()=>{}),t}start(){return this.serialize(async()=>{if(this.server)return;if(this.ownedSocket||this.ownedPid)throw Error(`Control endpoint cleanup pending; stop it before restarting`);Rm(this.sockPath),Rm(P(M(this.sockPath),`.s12345678`));let e=Jf(this.sockPath);try{this.admit?.(),this.checkPid();let e=Im(this.sockPath);if(e){if(!e.isSocket())throw Error(`Control socket path is not a socket: ${this.sockPath}`);if(await zm(this.sockPath))throw Error(`Control endpoint already running: ${this.sockPath}`);if(!Lm(Im(this.sockPath),e))throw Error(`Control socket changed during startup; retry`);t.unlinkSync(this.sockPath);for(let n of t.readdirSync(M(this.sockPath))){if(!/^\.s[A-Za-z0-9_-]{8}$/.test(n))continue;let r=P(M(this.sockPath),n);Lm(Im(r),e)&&t.unlinkSync(r)}}let n=await this.bind();t.chmodSync(n,384);let r=t.lstatSync(n);if(t.linkSync(n,this.sockPath),this.ownedSocket=r,this.pidPath){this.checkPid();let e=String(process.pid);Dp(this.pidPath,e),this.ownedPid={identity:t.lstatSync(this.pidPath),contents:e}}this.admit?.()}catch(e){try{this.removeOwned()}finally{await this.closeListener()}throw e}finally{e()}})}checkPid(){if(!this.pidPath)return;let e=Im(this.pidPath);if(!e)return;if(!e.isFile())throw Error(`PID path must be a regular file: ${this.pidPath}`);let n=Wf(t.readFileSync(this.pidPath,`utf8`).trim());if(n===null)throw Error(`Invalid PID file; inspect ${this.pidPath} before retrying`);if(Gf(n))throw Error(`shellbell is already running (pid ${n})`)}async bind(){for(let e=0;e<8;e++){let e=P(M(this.sockPath),`.s${oe(6).toString(`base64url`)}`),t=le(e=>{this.clients.add(e),e.once(`close`,()=>this.clients.delete(e)),e.on(`error`,()=>{}),this.onConnection(e)});this.server=t;try{return await new Promise((n,r)=>{t.once(`error`,r);let i=process.umask(127);try{t.listen(e,()=>{t.removeListener(`error`,r),n()})}finally{process.umask(i)}}),e}catch(e){if(await this.closeListener(),e.code!==`EADDRINUSE`)throw e}}throw Error(`Control endpoint private socket names are in use after eight attempts`)}removeOwned(){if(this.ownedSocket&&=(Lm(Im(this.sockPath),this.ownedSocket)&&t.unlinkSync(this.sockPath),void 0),this.pidPath&&this.ownedPid){let e=Im(this.pidPath);e?.isFile()&&Lm(e,this.ownedPid.identity)&&t.readFileSync(this.pidPath,`utf8`)===this.ownedPid.contents&&t.unlinkSync(this.pidPath),this.ownedPid=void 0}}async closeListener(){for(let e of this.clients)e.destroy();this.clients.clear();let e=this.server;this.server=void 0,e&&await new Promise((t,n)=>e.close(e=>{e&&e.code!==`ERR_SERVER_NOT_RUNNING`?n(e):t()}))}stop(){return this.serialize(async()=>{let e;try{(this.ownedSocket||this.ownedPid)&&(e=Jf(this.sockPath),this.removeOwned())}catch(e){throw this.log.warn(`Control endpoint cleanup failed; shared paths retained for retry`,{error:Xp(e)}),e}finally{try{await this.closeListener()}finally{e?.()}}})}};const Vm={lineBytes:65536,queuedBytes:262144,connections:16,initialRequestMs:5e3,requestMs:5e3,challengeMs:6e4};function Hm(e){let t;try{t=JSON.stringify(e)}catch{return null}if(t===void 0)return null;let n=new TextEncoder().encode(`${t}\n`);return n.byteLength-1<=Vm.lineBytes?n:null}function Um(e,t){let n=e.writableLength;if(e.destroyed||!Number.isFinite(n)||n<0||n+t.byteLength>Vm.queuedBytes)return e.destroy(),!1;try{return e.write(t),!0}catch{return e.destroy(),!1}}var Wm=class{onLine;onError;maxBytes;chunks=[];bytes=0;terminal=!1;constructor(e){this.onLine=e.onLine,this.onError=e.onError;let t=e.maxBytes??Vm.lineBytes;this.maxBytes=Number.isFinite(t)?Math.max(0,Math.min(t,Vm.lineBytes)):Vm.lineBytes}push(e){if(this.terminal||e.byteLength===0)return;let t=0;for(;t<e.byteLength&&!this.terminal;){let n=e.indexOf(10,t),r=n===-1?e.byteLength:n,i=r-t;if(this.bytes+i>this.maxBytes){this.fail(`line-too-large`);return}if(i>0&&(this.chunks.push(Uint8Array.from(e.subarray(t,r))),this.bytes+=i),n===-1)return;let a=this.decodeLine();if(a===null)return;this.reset(),this.onLine(a),t=n+1}}finish(){this.terminal||(this.bytes>0?this.fail(`incomplete-line`):(this.terminal=!0,this.reset()))}decodeLine(){let e=new Uint8Array(this.bytes),t=0;for(let n of this.chunks)e.set(n,t),t+=n.byteLength;try{return new TextDecoder(`utf-8`,{fatal:!0,ignoreBOM:!0}).decode(e)}catch{return this.fail(`invalid-utf8`),null}}fail(e){this.terminal||(this.terminal=!0,this.reset(),this.onError(e))}reset(){this.chunks=[],this.bytes=0}};const Gm=I.number().int().positive().max(2**53-1),Km=I.string().regex(/^[A-Za-z0-9_-]{22}$/),qm=I.string().min(1).max(64),Jm=I.object({pid:Gm,agentVersion:I.string().min(1),computerFp:W,stateDir:I.string().min(1).refine(N,`state directory must be absolute`),serviceInstance:I.uuid().nullable()}).strict(),Ym=I.object({name:Xl,connected:I.boolean()}).strict(),Xm=I.object({phoneFp:W,name:qm,lastSeenAt:I.string().nullable()}).strict(),Zm=I.object({phoneFp:W,name:qm,viewed:I.string().nullable(),transport:Nm.strict().optional()}).strict(),Qm=I.object({controlVersion:I.literal(1),process:Jm,backends:I.array(Ym),terminalReady:I.boolean(),relayOnline:I.boolean(),sessions:I.number().int().nonnegative().max(2**53-1),phones:I.array(Xm).max(10),connected:I.array(Zm).max(10)}).strict().superRefine((e,t)=>{Pm.safeParse(e).success||t.addIssue({code:`custom`,message:`status must satisfy LocalStatus semantics`})}),$m=I.object({}).strict(),eh=I.object({version:I.literal(2),runtime:Jm,capabilities:I.tuple([I.literal(`status`),I.literal(`devices`),I.literal(`pairing`),I.literal(`revoke`)])}).strict(),th=I.array(Xm).max(10),nh=I.object({removed:I.boolean()}).strict(),rh=I.object({flowId:Km,qrText:I.string().min(1).refine(e=>new TextEncoder().encode(e).byteLength<=Vm.lineBytes),expiresAt:Gm}).strict(),ih={hello:eh,status:Qm,"status.config":I.object({revision:I.string().regex(/^[0-9a-f]{64}$/)}).strict(),"settings.conversations.apply":I.object({revision:I.string().regex(/^[0-9a-f]{64}$/)}).strict(),devices:th,"devices.revoke":nh,"pairing.open":rh,"pairing.close":$m,"pairing.confirm":$m,terminals:I.object({terminals:mu}).strict(),"terminals.connect":I.object({started:I.boolean(),terminals:mu}).strict()},ah={v:I.literal(2),id:Gm},oh={...ah,expect:Jm},sh=I.discriminatedUnion(`cmd`,[I.object({...oh,cmd:I.literal(`settings.conversations.apply`),args:I.object({revision:I.string().regex(/^[0-9a-f]{64}$/)}).strict()}).strict(),I.object({...ah,cmd:I.literal(`hello`)}).strict(),I.object({...ah,cmd:I.literal(`status`)}).strict(),I.object({...ah,cmd:I.literal(`status.config`)}).strict(),I.object({...ah,cmd:I.literal(`devices`)}).strict(),I.object({...ah,cmd:I.literal(`terminals`)}).strict(),I.object({...oh,cmd:I.literal(`terminals.connect`),args:I.object({name:Xl}).strict()}).strict(),I.object({...oh,cmd:I.literal(`devices.revoke`),args:I.object({phoneFp:W}).strict()}).strict(),I.object({...oh,cmd:I.literal(`pairing.open`)}).strict(),I.object({...oh,cmd:I.literal(`pairing.close`),args:I.object({flowId:Km}).strict()}).strict(),I.object({...oh,cmd:I.literal(`pairing.confirm`),args:I.object({flowId:Km,challengeId:Km,phoneFp:W,accept:I.boolean()}).strict()}).strict()]),ch=I.enum([`bad-request`,`unsupported-version`,`handshake-required`,`runtime-mismatch`,`configuration-mismatch`,`pairing-busy`,`stale-flow`,`stale-challenge`,`response-too-large`,`operation-failed`]),lh=I.object({v:I.literal(2),id:Gm,ok:I.literal(!0),data:I.unknown()}).strict().refine(e=>Object.hasOwn(e,`data`)),uh=I.object({v:I.literal(2),id:Gm,ok:I.literal(!1),error:I.object({code:ch}).strict()}).strict(),dh=I.union([lh,uh]),fh=I.object({v:I.literal(2),event:I.literal(`pairing.request`),flowId:Km,challengeId:Km,phoneFp:W,name:qm}).strict(),ph=I.object({v:I.literal(2),event:I.literal(`pairing.closed`),flowId:Km}).strict(),mh=I.discriminatedUnion(`event`,[fh,ph]),hh=[`status`,`devices`,`pairing`,`revoke`];function gh(e,t){return e.pid===t.pid&&e.agentVersion===t.agentVersion&&e.computerFp===t.computerFp&&e.stateDir===t.stateDir&&e.serviceInstance===t.serviceInstance}function _h(e){if(!e||typeof e!=`object`)return;let t=e.id;return typeof t==`number`&&Number.isSafeInteger(t)&&t>0?t:void 0}var vh=class{agent;log;peers=new Set;owner;stopped=!1;newId;constructor(e,t,n){this.agent=e,this.log=t,this.newId=n?.newId??(()=>oe(16).toString(`base64url`))}get hasPairOwner(){return this.owner!==void 0}accept(e){let t=new yh(this,e,this.agent);return this.stopped?t.close():this.peers.add(t),t}confirm(e,t){let n=this.owner;if(!n||n.resolve||this.stopped)return Promise.resolve(!1);let r=this.newId();return new Promise(i=>{if(this.owner!==n)return i(!1);n.resolve=i,n.challengeId=r,n.phoneFp=e,n.name=t,n.opening||this.emitRequest(n,t)})}activate(e,t){let n=this.owner;n&&n.peer===e&&n.flowId===t&&(n.opening=!1,n.resolve&&n.phoneFp&&n.challengeId&&this.emitRequest(n,n.name??``))}emitRequest(e,t){if(!e.resolve||!e.challengeId||!e.phoneFp)return;let n=e.resolve,r=Math.max(0,(e.expiresAt??Date.now())-Date.now());e.timer=setTimeout(()=>{this.owner===e&&e.resolve===n&&(e.resolve=void 0,e.challengeId=void 0,e.phoneFp=void 0,n(!1))},Math.min(Vm.challengeMs,r)),e.timer.unref(),e.peer.event({v:2,event:`pairing.request`,flowId:e.flowId,challengeId:e.challengeId,phoneFp:e.phoneFp,name:t})||this.clearOwner(e,!1,!0)}notifyClosed(){let e=this.owner;e&&(this.clearOwner(e,!1,!1),e.peer.event({v:2,event:`pairing.closed`,flowId:e.flowId}))}stop(){this.stopped=!0;let e=this.owner;e&&this.clearOwner(e,!0,!1);for(let e of this.peers)e.close();this.peers.clear()}removed(e){this.peers.delete(e);let t=this.owner;t?.peer===e&&this.clearOwner(t,!0,!1)}open(e){if(this.owner||this.agent.pairingOpen)return`pairing-busy`;try{let t=this.newId(),n={peer:e,flowId:t,opening:!0};this.owner=n;let r=this.agent.openPairing();return this.owner!==n||!this.agent.pairingOpen?(this.clearOwner(n,!0,!1),`operation-failed`):(n.expiresAt=r.expiresAt,{flowId:t,...r})}catch{let t=this.owner;return t?.peer===e&&this.clearOwner(t,!0,!1),`operation-failed`}}close(e,t){let n=this.owner;if(!n||n.peer!==e||n.flowId!==t)return`stale-flow`;this.clearOwner(n,!0,!1)}answer(e,t){let n=this.owner;if(!n||n.peer!==e||n.flowId!==t.args.flowId)return`stale-flow`;if(n.expiresAt===void 0||Date.now()>=n.expiresAt)return this.clearOwner(n,!0,!0),`stale-flow`;if(!n.resolve||n.challengeId!==t.args.challengeId||n.phoneFp!==t.args.phoneFp)return`stale-challenge`;let r=n.resolve;n.timer&&clearTimeout(n.timer),n.timer=void 0,n.resolve=void 0,n.challengeId=void 0,n.phoneFp=void 0,n.name=void 0,r(t.args.accept)}clearOwner(e,t,n){if(this.owner!==e)return;this.owner=void 0;let r=e.resolve;if(e.timer&&clearTimeout(e.timer),e.timer=void 0,e.resolve=void 0,e.challengeId=void 0,e.phoneFp=void 0,e.name=void 0,r?.(!1),t)try{this.agent.closePairing()}catch{this.log.warn(`native pairing close failed`)}n&&e.peer.event({v:2,event:`pairing.closed`,flowId:e.flowId})}},yh=class{hub;socket;agent;helloRuntime;lastId=0;closed=!1;constructor(e,t,n){this.hub=e,this.socket=t,this.agent=n}get handshaken(){return this.helloRuntime!==void 0}close(){this.closed||(this.closed=!0,this.hub.removed(this),this.socket.destroy())}handle(e){if(this.closed||this.socket.destroyed)return;let t=_h(e);if(this.handshaken&&t!==void 0){if(t<=this.lastId){this.close();return}this.lastId=t}if(e&&typeof e==`object`&&e.v!==2){t!==void 0&&this.failure(t,`unsupported-version`),this.close();return}let n=sh.safeParse(e);if(!n.success){t===void 0?this.close():this.failure(t,`bad-request`);return}let r=n.data;if(!this.handshaken){if(r.id!==1||r.cmd!==`hello`){this.close();return}this.lastId=1,this.helloRuntime={...this.runtime()},this.success(r,{version:2,runtime:this.helloRuntime,capabilities:hh});return}if(r.cmd===`hello`){this.close();return}let i=this.helloRuntime,a=this.runtime();if(`expect`in r&&(!i||!gh(r.expect,i)||!gh(r.expect,a))){this.failure(r.id,`runtime-mismatch`);return}switch(r.cmd){case`status`:this.success(r,this.status());return;case`status.config`:this.success(r,{revision:this.agent.configurationRevision});return;case`settings.conversations.apply`:try{let e=this.agent.applyConversationSetting(r.args.revision);e===null?this.failure(r.id,`configuration-mismatch`):this.success(r,{revision:e})}catch{this.failure(r.id,`operation-failed`)}return;case`devices`:this.success(r,this.devices());return;case`devices.revoke`:try{this.success(r,{removed:this.agent.unpairExact(r.args.phoneFp)})}catch{this.failure(r.id,`operation-failed`)}return;case`terminals`:this.success(r,{terminals:this.agent.terminalSetup()});return;case`terminals.connect`:{let e=this.agent.connectTerminal(r.args.name);this.success(r,{started:e,terminals:this.agent.terminalSetup()});return}case`pairing.open`:{let e=this.hub.open(this);typeof e==`string`?this.failure(r.id,e):this.success(r,e)?this.hub.activate(this,e.flowId):this.hub.close(this,e.flowId);return}case`pairing.close`:{let e=this.hub.close(this,r.args.flowId);e?this.failure(r.id,e):this.success(r,{})&&this.event({v:2,event:`pairing.closed`,flowId:r.args.flowId});return}case`pairing.confirm`:{let e=this.hub.answer(this,r);e?this.failure(r.id,e):this.success(r,{});return}}}event(e){return mh.safeParse(e).success?this.write(e):!1}runtime(){return this.agent.localStatus.process}status(){let e=this.agent;return{...e.localStatus,relayOnline:e.relayOnline,sessions:e.sessionList.length,phones:this.devices(),connected:e.connectedPhones}}devices(){return this.agent.pairingList.map(e=>({phoneFp:e.phoneFp,name:e.name,lastSeenAt:e.lastSeenAt}))}success(e,t){if(!ih[e.cmd].safeParse(t).success)return this.failure(e.id,`operation-failed`),!1;let n={v:2,id:e.id,ok:!0,data:t};if(!dh.safeParse(n).success)return this.failure(e.id,`operation-failed`),!1;let r=Hm(n);return r?this.writeFrame(r):(this.failure(e.id,`response-too-large`),!1)}failure(e,t){let n={v:2,id:e,ok:!1,error:{code:t}};return dh.safeParse(n).success?this.write(n):!1}write(e){let t=Hm(e);return t?this.writeFrame(t):!1}writeFrame(e){return Um(this.socket,e)?!0:(this.close(),!1)}};const bh={unavailable:`Local control unavailable`,"upgrade-required":`Local control upgrade required`,"protocol-error":`Local control protocol error`,timeout:`Local control timed out`,"delivery-unknown":`Local control mutation outcome unknown`,busy:`Local control request already pending`,closed:`Local control closed`,"server-error":`Local control server rejected request`},xh=new Set([`hello`,`status`,`status.config`,`devices`,`terminals`]);var Q=class extends Error{code;serverCode;constructor(e,t){super(bh[e]),this.code=e,this.serverCode=t,this.name=`ControlV2ClientError`}};function Sh(e,t={}){return new Promise((n,r)=>{let i;try{i=(t.connector??ce)(e)}catch{r(new Q(`unavailable`));return}let a=!1,o=!1,s=!1,c=0,l,u,d,f=setTimeout(()=>p(new Q(`timeout`)),Vm.requestMs);function p(e){if(a)return;a=!0,clearTimeout(f);let n=l;l=void 0,d=void 0,n&&(clearTimeout(n.timer),n.reject(n.mutation&&n.attempted?new Q(`delivery-unknown`):e)),o||r(e),i.destroy(),t.onDisconnect?.(e)}function m(e,t){if(a)return Promise.reject(new Q(`closed`));if(l)return Promise.reject(new Q(`busy`));if(c===2**53-1)return p(new Q(`protocol-error`)),Promise.reject(new Q(`protocol-error`));let n=!xh.has(e),r=sh.safeParse({v:2,id:c+1,cmd:e,...n?{expect:u}:{},...t===void 0?{}:{args:t}});if(!r.success)return Promise.reject(new Q(`protocol-error`));let o=Hm(r.data);if(o===null)return Promise.reject(new Q(`protocol-error`));let s=i.writableLength;return i.destroyed||!Number.isFinite(s)||s<0||s+o.byteLength>Vm.queuedBytes?(p(new Q(`unavailable`)),Promise.reject(new Q(`unavailable`))):(c++,new Promise((t,r)=>{let a={id:c,command:e,mutation:n,attempted:!1,resolve:e=>t(e),reject:r,timer:setTimeout(()=>p(new Q(`timeout`)),Vm.requestMs)};l=a,a.attempted=!0,Um(i,o)||p(new Q(`unavailable`))}))}let h=new Wm({onError:()=>p(new Q(`protocol-error`)),onLine:e=>{if(a)return;let n;try{n=JSON.parse(e)}catch{p(new Q(`protocol-error`));return}if(typeof n==`object`&&n&&`event`in n){let e=mh.safeParse(n);if(!e.success){p(new Q(`protocol-error`));return}let r=e.data;if(r.event===`pairing.closed`&&r.flowId!==d)return;if(r.flowId!==d){p(new Q(`protocol-error`));return}r.event===`pairing.closed`?(d=void 0,t.onPairingClosed?.(r)):t.onPairingRequest?.(r);return}let r=l;if(r?.command===`hello`&&typeof n==`object`&&n&&!(`v`in n)&&`ok`in n&&typeof n.ok==`boolean`){p(new Q(`upgrade-required`));return}let i=dh.safeParse(n);if(!i.success||!r||i.data.id!==r.id){p(new Q(`protocol-error`));return}if(!i.data.ok){clearTimeout(r.timer),l=void 0;let e=new Q(`server-error`,i.data.error.code);r.reject(e),r.command===`hello`&&p(e);return}let o=ih[r.command].safeParse(i.data.data);if(!o.success){p(new Q(`protocol-error`));return}r.command===`pairing.open`&&(d=o.data.flowId),clearTimeout(r.timer),l=void 0,r.resolve(o.data)}});i.on(`data`,e=>h.push(e)),i.on(`error`,()=>p(new Q(`unavailable`)));let g=()=>{h.finish(),p(new Q(`unavailable`))};i.once(`end`,g),i.once(`close`,g);let _=()=>{a||s||(s=!0,clearTimeout(f),m(`hello`).then(e=>{a||(u={...e.runtime},o=!0,n({runtime:{...e.runtime},status:()=>m(`status`),applyConversationSetting:async e=>{try{return(await m(`settings.conversations.apply`,{revision:e})).revision}catch(e){if(e instanceof Q&&e.code===`server-error`&&e.serverCode===`bad-request`)return null;throw e}},configurationRevision:async()=>{try{return(await m(`status.config`)).revision}catch(e){if(e instanceof Q&&e.code===`server-error`&&e.serverCode===`bad-request`)return null;throw e}},devices:()=>m(`devices`),terminals:async()=>{try{return(await m(`terminals`)).terminals}catch(e){if(Ch(e))return null;throw e}},connectTerminal:async e=>{try{return await m(`terminals.connect`,{name:e})}catch(e){if(Ch(e))return null;throw e}},revoke:e=>m(`devices.revoke`,{phoneFp:e}),openPairing:()=>m(`pairing.open`),closePairing:async e=>{await m(`pairing.close`,{flowId:e})},confirm:async(e,t,n,r)=>{await m(`pairing.confirm`,{flowId:e,challengeId:t,phoneFp:n,accept:r})},close:()=>p(new Q(`closed`))}))},e=>p(e)))};i.once(`connect`,_),i.connecting||_()})}function Ch(e){return e instanceof Q&&e.code===`server-error`&&e.serverCode===`bad-request`}var wh=class{agent;log;admission;pairingMode;endpoint;pending=new Map;pairClients=new Set;controlSockets=new Set;v2;pairingConfirm=(e,t)=>new Promise(n=>{if(this.pending.has(e)){this.log.warn(`pairing confirm requested twice for the same phone; declining the newer one`,{phone:e.slice(0,8)}),n(!1);return}let r=setTimeout(()=>{this.pending.delete(e),n(!1)},6e4);this.pending.set(e,t=>{clearTimeout(r),this.pending.delete(e),n(t)});for(let n of this.pairClients)this.writeLegacy(n,{event:`request`,phoneFp:e,name:t})||this.pairClients.delete(n)});constructor(e,t,n,r,i,a,o=`terminal`){this.agent=t,this.log=n,this.admission=a,this.pairingMode=o,this.endpoint=new Bm(e,e=>this.handle(e),n,r,i),this.v2=new vh(t,n)}get hasPairClients(){return this.pairClients.size>0}get hasNativePairOwner(){return this.v2.hasPairOwner}nativePairingConfirm=(e,t)=>this.v2.confirm(e,t);notifyClosed(){for(let e of this.pending.values())e(!1);this.pending.clear();for(let e of this.pairClients)this.writeLegacy(e,{event:`closed`})||this.pairClients.delete(e);this.pairClients.clear(),this.v2.notifyClosed()}async start(){this.admission?await this.admission(()=>this.endpoint.start()):await this.endpoint.start()}async stop(){for(let e of this.pending.values())e(!1);for(let e of this.controlSockets)e.destroy();this.controlSockets.clear();for(let e of this.pairClients)e.destroy();this.pairClients.clear(),this.v2.stop(),await this.endpoint.stop()}handle(e){if(this.controlSockets.size>=Vm.connections){e.destroy();return}this.controlSockets.add(e);let t=!0,n,r,i=setTimeout(()=>e.destroy(),Vm.initialRequestMs),a=new Wm({onLine:a=>{if(e.destroyed)return;let o;try{o=JSON.parse(a)}catch{if(n===`v2`){e.destroy();return}this.writeLegacy(e,{ok:!1,error:`bad json`});return}if(n===`v2`){r?.handle(o),t&&r?.handshaken&&(t=!1,clearTimeout(i));return}if(n===void 0&&o&&typeof o==`object`&&Object.hasOwn(o,`v`)){n=`v2`,r=this.v2.accept(e),r.handle(o),r.handshaken&&(t=!1,clearTimeout(i));return}if(n===`legacy`&&o&&typeof o==`object`&&Object.hasOwn(o,`v`)){e.destroy();return}n=`legacy`;let s=o;if(!s||typeof s!=`object`||typeof s.cmd!=`string`){this.writeLegacy(e,{ok:!1,error:`bad request`});return}t&&(t=!1,clearTimeout(i));try{let t=this.dispatch(s,e);this.writeLegacy(e,{ok:!0,data:t})}catch(t){this.writeLegacy(e,{ok:!1,error:t.message})}},onError:()=>e.destroy()});e.on(`data`,e=>a.push(new Uint8Array(e))),e.once(`end`,()=>a.finish()),e.once(`close`,()=>{clearTimeout(i),this.controlSockets.delete(e),this.pairClients.delete(e),r?.close()}),e.on(`error`,()=>this.log.debug(`control socket error`))}writeLegacy(e,t){let n=Hm(t);if(n&&Um(e,n))return!0;let r=Hm({ok:!1,error:`response too large`});return r!==null&&Um(e,r)}dispatch(e,t){let n=this.agent;if(this.pairingMode===`native`&&[`pair-open`,`pair-close`,`confirm`].includes(e.cmd))throw Error(`pairing is managed by the Shellbell app`);if(this.v2.hasPairOwner&&[`pair-open`,`pair-close`,`confirm`].includes(e.cmd))throw Error(`native pairing active`);switch(e.cmd){case`status`:return{...n.localStatus,relayOnline:n.relayOnline,sessions:n.sessionList.length,phones:n.pairingList.map(e=>({phoneFp:e.phoneFp,name:e.name,lastSeenAt:e.lastSeenAt})),connected:n.connectedPhones};case`devices`:return n.pairingList.map(e=>({phoneFp:e.phoneFp,name:e.name,lastSeenAt:e.lastSeenAt}));case`unpair`:return{removed:n.unpair(String(e.args?.target??``))};case`pair-open`:{let e=n.openPairing();return this.pairClients.add(t),e}case`pair-close`:return n.closePairing(),{};case`confirm`:{let t=String(e.args?.phoneFp??``),n=this.pending.get(t);if(!n)throw Error(`no pending request`);return n(!!e.args?.accept),{}}default:throw Error(`unknown command: ${e.cmd}`)}}};function Th(e,t,n,r){return new Promise((i,a)=>{let o=Hm({cmd:t,args:n});if(!o){a(Error(`control socket request too large`));return}let s=!1,c=ce(e),l=r?.timeoutMs??5e3,u=e=>{s||(s=!0,clearTimeout(d),c.destroy(),e())},d=setTimeout(()=>u(()=>a(Error(`control socket timed out`))),l),f=new Wm({maxBytes:r?.maxResponseBytes,onError:e=>u(()=>a(Error(e===`line-too-large`?`control socket response too large`:`control socket sent a malformed response`))),onLine:e=>{f.finish(),u(()=>{let t;try{if(t=JSON.parse(e),typeof t!=`object`||!t||typeof t.ok!=`boolean`)throw Error()}catch{a(Error(`control socket sent a malformed response`));return}t.ok?i(t.data):a(Error(t.error??`control error`))})}});c.on(`error`,e=>u(()=>a(e))),c.once(`connect`,()=>{Um(c,o)||u(()=>a(Error(`control socket write failed`)))}),c.once(`close`,()=>u(()=>a(Error(`control socket closed without a response`)))),c.once(`end`,()=>u(()=>a(Error(`control socket closed without a response`)))),c.on(`data`,e=>{s||f.push(new Uint8Array(e))}),c.once(`end`,()=>f.finish())})}function Eh(e,t){let n=ce(e),r=!1,i,a=()=>{r||(r=!0,i?.finish(),n.end())};n.on(`error`,t.onError);let o=Hm({cmd:`pair-open`});return n.once(`connect`,()=>{(o===null||!Um(n,o))&&t.onError(Error(`control socket write failed`))}),i=new Wm({onError:()=>{n.destroy(),t.onError(Error(`control socket sent a malformed message`))},onLine:e=>{if(r)return;let i;try{i=JSON.parse(e)}catch{t.onError(Error(`control socket sent a malformed message`));return}i.event===`request`&&i.phoneFp?t.onRequest(i.phoneFp,i.name??``).then(e=>{if(r)return;let t=Hm({cmd:`confirm`,args:{phoneFp:i.phoneFp,accept:e}});if(t===null||!Um(n,t))throw Error(`control socket write failed`)}).catch(e=>t.onError(e)):i.event===`closed`?t.onClose():i.ok&&i.data?.qrText?t.onOpen(i.data.qrText,i.data.expiresAt):i.ok===!1&&t.onError(Error(i.error??`control error`))}}),n.on(`data`,e=>i.push(new Uint8Array(e))),n.once(`end`,()=>{r=!0,i?.finish()}),n.once(`close`,()=>{r=!0,i?.finish()}),{close:a}}function Dh(e){if(e.linuxHost)return xp(e);let t;try{t=g(e.identity,`utf8`)}catch(t){if(t.code===`ENOENT`)return null;throw Error(`shellbell: cannot read identity at ${e.identity}`)}try{let e=nc(JSON.parse(t));return{identity:e,fp:rc(e.ed25519.pub)}}catch{throw Error(`shellbell: invalid identity at ${e.identity}`)}}function Oh(e){if(e.linuxHost)return xp(e);Ep(e);let t;return s(e.identity)?t=kh(e):(t=Qs(),kp(e.identity,`${JSON.stringify(tc(t),null,2)}\n`)||(t=kh(e))),{identity:t,fp:rc(t.ed25519.pub)}}function kh(e){try{return nc(Mp(e.identity))}catch(t){throw Error(`shellbell: invalid identity at ${e.identity}: ${t.message}`)}}const Ah=[`dev.bilalahmad.shellbell`,`dev.bilalahmad.shellbell.host.agent`,`dev.bilalahmad.shellbell.host.manual`];async function jh(e,t,n){if(!Number.isSafeInteger(t)||t<0)throw Error(`Invalid service UID`);let r=()=>Error(`Legacy Shellbell installation requires migration before starting the new service; preserve identity and remove old registrations explicitly.`);if(n)for(let e of Ah){try{p(P(n,`Library`,`LaunchAgents`,`${e}.plist`))}catch(e){if(e.code===`ENOENT`)continue;throw e}throw r()}for(let n of[...Ah.map(e=>`gui/${t}/${e}`),`system/dev.bilalahmad.shellbell.power`]){let t=await e(`/bin/launchctl`,[`print`,n],{timeoutMs:5e3,maxOutputBytes:65536,captureOutput:!1});if(t.exitCode===0)throw r();if(t.exitCode!==113)throw Error(`Could not verify legacy Shellbell registration absence`)}}const Mh=(t,n,r)=>new Promise((i,a)=>{let o=e(t,n,{shell:!1,stdio:[`pipe`,`pipe`,`pipe`]}),s=0,c=0,l=[],u=!1,d=e=>{u||(u=!0,clearTimeout(f),o.kill(),a(e))},f=setTimeout(()=>d(Error(`${t} timed out`)),r.timeoutMs);o.stdout.on(`data`,e=>{if(s+=e.length,s>r.maxOutputBytes)return d(Error(`${t} output limit exceeded`));r.captureOutput&&l.push(e)}),o.stderr.on(`data`,e=>{c+=e.length,c>r.maxOutputBytes&&d(Error(`${t} output limit exceeded`))}),o.on(`error`,d),o.on(`close`,(e,n)=>{if(!u){if(u=!0,clearTimeout(f),n||e===null)return a(Error(`${t} terminated by signal`));i({exitCode:e,stdout:r.captureOutput?Buffer.concat(l):Buffer.alloc(0)})}}),o.stdin.on(`error`,d),o.stdin.end(r.input)}),Nh=[`/opt/homebrew/bin`,`/usr/local/bin`,`/usr/bin`,`/bin`],Ph=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;function Fh(e){for(let t of e){let e=t.codePointAt(0);if(!(e===9||e===10||e===13||e>=32&&e<=55295||e>=57344&&e<=65533||e>=65536&&e<=1114111))throw Error(`invalid XML character in service definition`)}}function Ih(e,t){if(!e||!N(e))throw Error(`${t} must be an absolute path`);return Fh(e),e}function Lh(e){if(Ih(e.stateDir,`stateDir`),Ih(e.nodePath,`nodePath`),!Ph.test(e.serviceInstance))throw Error(`serviceInstance must be a UUID`);let t=[M(e.nodePath),...e.env.PATH?.split(`:`)??[],...Nh].filter(e=>e.length>0&&N(e)),n={SHELLBELL_DIR:e.stateDir,SHELLBELL_SERVICE_INSTANCE:e.serviceInstance,PATH:[...new Set(t)].join(`:`)};for(let t of[`HERDR_SOCKET_PATH`,`XDG_CONFIG_HOME`]){let r=e.env[t];r&&(n[t]=Ih(r,t))}for(let e of Object.values(n))Fh(e);return n}const Rh=`sh.bilal.shellbell`;P(D(),`Library`,`LaunchAgents`,`${Rh}.plist`);const zh=1048576,Bh=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,Vh=new Set([`SHELLBELL_DIR`,`SHELLBELL_SERVICE_INSTANCE`,`PATH`,`HERDR_SOCKET_PATH`,`XDG_CONFIG_HOME`]),Hh=new Set([`Label`,`ProgramArguments`,`EnvironmentVariables`,`RunAtLoad`,`KeepAlive`,`StandardOutPath`,`StandardErrorPath`]);function Uh(e){return Fh(e),e.replace(/&/g,`&amp;`).replace(/</g,`&lt;`).replace(/>/g,`&gt;`).replace(/"/g,`&quot;`).replace(/'/g,`&apos;`)}function Wh(e){let t=Uh,n=e.environment??{PATH:`/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin`},r=Object.entries(n).map(([e,n])=>`<key>${t(e)}</key><string>${t(n)}</string>`).join(``);return`<?xml version="1.0" encoding="UTF-8"?>
+`)}\r\n`}var Yd=class{options;offerId;generation;attemptId;peer=null;phoneDtls;computerDtls=null;localSdp=null;remoteSdp=!1;opened=!1;verifying=!1;sentDescription=!1;sentCandidates=0;receivedCandidates=0;pendingData=[];pendingLocal=[];pendingRemote=[];handshake=null;secureSession=null;closed=!1;timer;constructor(e){this.options=e,this.offerId=e.offer?.offerId.slice()??va(16),this.attemptId=e.offer?va(16):null,this.generation=e.generation.slice(),this.phoneDtls=e.offer?.phoneDtls.slice()??null,this.timer=setTimeout(()=>this.fail(`timeout`),15e3)}get session(){return this.secureSession}get phase(){return this.secureSession?`cutover`:this.handshake?`noise`:this.verifying?`certificate`:this.opened?`open`:this.remoteSdp?`connecting`:this.localSdp?`offer`:`native`}get active(){return!this.closed&&this.options.current()}cancelDeadline(){clearTimeout(this.timer)}close(){this.closed||(this.closed=!0,this.cancelDeadline(),this.pendingData=[],this.pendingLocal=[],this.pendingRemote=[],this.handshake?.close(),this.secureSession?.close(),this.peer?.close())}send(e){let t=this.active&&(this.peer?.send(e)??!1);return t&&this.options.sent(e.length),t}fail(e=`closed`){this.active&&this.options.failed(e)}async start(){let e={description:(e,t)=>{this.active&&this.description(e,t)},candidate:(e,t,n)=>{if(this.active)try{this.localCandidate({candidate:e,mid:t,mlineIndex:n})}catch{this.fail(`local-candidate`)}},open:()=>{this.active&&(this.opened=!0,this.openDirect().catch(()=>this.fail(`certificate`)))},message:e=>{this.active&&(this.options.received(e.length),this.directMessage(e))},closed:()=>this.fail(`native-closed`)},t;try{t=await this.options.native(e)}catch{this.fail(`native-create`);return}if(!this.active){t.close();return}this.peer=t;try{if(this.options.offer){if(await t.answer(this.options.offer.sdp),!this.active)return;this.remoteSdp=!0}else await t.offer();if(!this.active)return;await this.flushRemote(),await this.openDirect()}catch{this.fail(`native-description`)}}description(e,t){try{let n=qd(e);if(this.localSdp=Jd(e),this.options.role===`phone`&&t===`offer`)this.phoneDtls=n;else if(this.options.role===`computer`&&t===`answer`)this.computerDtls=n;else throw Error(`description role mismatch`);let r=this.signalContext(),i=t===`offer`?{type:`direct.offer`,...r,phoneDtls:n,sdp:this.localSdp}:{type:`direct.answer`,...r,attemptId:this.attemptId,computerDtls:n,sdp:this.localSdp};if(!this.options.sendSignal(i))throw Error(`signaling queue refused`);this.sentDescription=!0;for(let e of this.pendingLocal.splice(0))this.localCandidate(e);this.openDirect().catch(()=>this.fail(`certificate`))}catch{this.fail(`local-description`)}}admits(e){return this.sentCandidates+this.pendingLocal.length<(Kd(e)?Od.candidatesPerSide:Od.candidatesPerSide-6)}localCandidate(e){if(this.active&&!this.options.committed()&&this.admits(e)){if(!this.sentDescription){this.pendingLocal.push(e);return}this.options.sendSignal({type:`direct.candidate`,...this.signalContext(),index:this.sentCandidates++,...e})||this.fail()}}async signal(e){if(this.active&&this.peer){if(e.type===`direct.answer`){if(this.remoteSdp||(this.computerDtls=e.computerDtls.slice(),this.attemptId=e.attemptId.slice(),await this.peer.acceptAnswer(e.sdp),!this.active))return;this.remoteSdp=!0,await this.flushRemote(),await this.openDirect()}else if(e.type===`direct.candidate`){if(e.index!==this.receivedCandidates++)throw Error(`candidate order`);this.remoteSdp?await this.peer.candidate(e.candidate,e.mid,e.mlineIndex):this.pendingRemote.push(e)}else e.type===`direct.abort`&&this.fail()}}async flushRemote(){if(this.remoteSdp&&this.peer)for(let e of this.pendingRemote.splice(0)){if(!this.active)return;await this.peer.candidate(e.candidate,e.mid,e.mlineIndex)}}signalContext(){return{sessionId:this.options.relay.sessionId,offerId:this.offerId,generation:this.generation}}async openDirect(){if(!this.active||!this.opened||!this.peer||!this.phoneDtls||!this.computerDtls||!this.attemptId||this.verifying||this.handshake||this.secureSession)return;this.verifying=!0;let e=await this.peer.remoteCertificate(this.options.role===`phone`?this.computerDtls:this.phoneDtls);if(this.active){if(this.handshake=new Gd({route:`direct`,computerFp:this.options.computerFp,phoneFp:this.options.phoneFp,sessionId:this.options.relay.sessionId,generation:this.generation,attemptId:this.attemptId,phoneDtls:this.phoneDtls,computerDtls:this.computerDtls},this.options.role,this.options.keys,e),this.options.role===`phone`&&!this.send(this.handshake.begin())){this.fail();return}for(let e of this.pendingData.splice(0))this.directMessage(e)}}directMessage(e){if(this.active)try{if(!this.peer||e.length>61e3)throw Error(`direct frame bounds`);if(this.secureSession){this.options.frame(this.secureSession,e);return}if(!this.handshake){if(!this.verifying||this.pendingData.length>=4||e.length>1024)throw Error(`direct handshake missing`);this.pendingData.push(e.slice());return}let t=this.handshake.receive(e);if(t&&!this.send(t))throw Error(`direct queue refused`);this.handshake.ready&&(this.secureSession=this.handshake.takeReadySession(),this.handshake=null,this.options.ready(this.secureSession))}catch{this.fail(`direct-frame`)}}};const Xd=Uint8Array.of(1,0,0,0,0,0,0,0);var Zd=class{options;stage;startedAt=null;sessionId=null;attemptId=null;handshake=null;session=null;timer=null;keys;timeoutMs;constructor(e){if(this.options=e,W.parse(e.computerFp),W.parse(e.phoneFp),e.role!==`phone`&&e.role!==`computer`)throw Error(`invalid v2 role`);if(e.keys.staticPrivate.length!==32||e.keys.remoteStatic.length!==32||e.keys.pairKey.length!==32)throw Error(`invalid v2 pairing keys`);if(this.timeoutMs=e.timeoutMs??15e3,!Number.isSafeInteger(this.timeoutMs)||this.timeoutMs<1||this.timeoutMs>3e4)throw Error(`invalid v2 bootstrap timeout`);this.keys={staticPrivate:e.keys.staticPrivate.slice(),remoteStatic:e.keys.remoteStatic.slice(),pairKey:e.keys.pairKey.slice()},this.stage=e.role===`phone`?`phone:new`:`computer:begin`}get ready(){return this.stage===`ready`&&this.session?.ready===!0}begin(){if(this.stage!==`phone:new`)throw Error(`v2 begin not allowed`);try{return this.startedAt=this.clock(),this.armTimer(),this.sessionId=this.freshId(),this.stage=`phone:accept`,zd({type:`session.v2.begin`,sessionId:this.sessionId,generation:Xd})}catch(e){throw this.close(),e}}receive(e){try{if(this.stage===`closed`||this.stage===`detached`||this.stage===`ready`)throw Error(`v2 bootstrap no longer accepts messages`);switch(this.stage!==`computer:begin`&&this.assertNotExpired(),this.stage){case`computer:begin`:{let t=Bd(e,{sender:`phone`,expectedType:`session.v2.begin`});if(t.type!==`session.v2.begin`)throw Error(`invalid v2 begin`);if(this.startedAt=this.clock(),this.armTimer(),this.sessionId=t.sessionId.slice(),this.attemptId=this.freshId(),Tr(this.sessionId,this.attemptId))throw Error(`repeated v2 attempt ID`);return this.handshake=this.newHandshake(),this.stage=`computer:noise1`,zd({type:`session.v2.accept`,sessionId:this.sessionId,attemptId:this.attemptId,generation:Xd})}case`phone:accept`:{let t=Bd(e,{sender:`computer`,expectedType:`session.v2.accept`,sessionId:this.requireSessionId()});if(t.type!==`session.v2.accept`)throw Error(`invalid v2 accept`);if(this.attemptId=t.attemptId.slice(),Tr(this.requireSessionId(),this.attemptId))throw Error(`repeated v2 attempt ID`);this.handshake=this.newHandshake();let n=this.handshake.write();return this.stage=`phone:noise2`,zd({type:`session.v2.noise1`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId(),message:n})}case`computer:noise1`:{let t=Bd(e,{sender:`phone`,expectedType:`session.v2.noise1`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId()});if(t.type!==`session.v2.noise1`||!this.handshake)throw Error(`invalid v2 noise1`);this.handshake.read(t.message);let n=this.handshake.write();return this.session=this.handshake.finish(),this.handshake=null,this.stage=`computer:confirm`,zd({type:`session.v2.noise2`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId(),message:n})}case`phone:noise2`:{let t=Bd(e,{sender:`computer`,expectedType:`session.v2.noise2`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId()});if(t.type!==`session.v2.noise2`||!this.handshake)throw Error(`invalid v2 noise2`);this.handshake.read(t.message),this.session=this.handshake.finish(),this.handshake=null;let n=Il(this.session.confirmation());return this.stage=`phone:confirm`,zd({type:`session.v2.confirm`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId(),frame:n})}case`computer:confirm`:{let t=this.decodeConfirmation(e,`phone`);if(!this.session)throw Error(`v2 session missing`);this.session.acceptConfirmation(Ll(t.frame));let n=Il(this.session.confirmation());if(!this.session.ready)throw Error(`v2 computer confirmation incomplete`);return this.markReady(),zd({type:`session.v2.confirm`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId(),frame:n})}case`phone:confirm`:{let t=this.decodeConfirmation(e,`computer`);if(!this.session)throw Error(`v2 session missing`);if(this.session.acceptConfirmation(Ll(t.frame)),!this.session.ready)throw Error(`v2 phone confirmation incomplete`);return this.markReady(),null}default:throw Error(`invalid v2 bootstrap stage`)}}catch(e){throw this.close(),e}}takeReadySession(){if(!this.ready||!this.session)throw Error(`v2 session not confirmed`);let e=this.session;return this.session=null,this.stage=`detached`,e}close(){this.stage!==`closed`&&(this.stage=`closed`,this.clearTimer(),this.handshake?.close(),this.handshake=null,this.session?.close(),this.session=null,this.keys.staticPrivate.fill(0),this.keys.remoteStatic.fill(0),this.keys.pairKey.fill(0))}decodeConfirmation(e,t){let n=Bd(e,{sender:t,expectedType:`session.v2.confirm`,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId()});if(n.type!==`session.v2.confirm`)throw Error(`invalid v2 confirmation`);return n}newHandshake(){let e={route:`relay`,computerFp:this.options.computerFp,phoneFp:this.options.phoneFp,sessionId:this.requireSessionId(),attemptId:this.requireAttemptId(),generation:Xd};try{return zl(e,this.options.role,this.keys)}finally{this.keys.staticPrivate.fill(0),this.keys.remoteStatic.fill(0),this.keys.pairKey.fill(0)}}freshId(){return El.parse(this.options.newId()).slice()}requireSessionId(){if(!this.sessionId)throw Error(`v2 session ID missing`);return this.sessionId}requireAttemptId(){if(!this.attemptId)throw Error(`v2 attempt ID missing`);return this.attemptId}clock(){let e=this.options.now();if(!Number.isFinite(e)||e<0)throw Error(`invalid v2 clock`);return e}armTimer(){this.clearTimer(),this.timer=setTimeout(()=>this.close(),this.timeoutMs)}clearTimer(){this.timer!==null&&clearTimeout(this.timer),this.timer=null}markReady(){this.stage=`ready`,this.clearTimer()}assertNotExpired(){if(this.startedAt===null)throw Error(`v2 bootstrap not started`);let e=this.clock()-this.startedAt;if(e<0||e>this.timeoutMs)throw Error(`v2 bootstrap expired`)}},Qd=class{options;stage;pairKey;bootstrap;timeoutMs;startedAt=null;timer=null;phoneNonce=null;connKey=null;connTag=``;seqIn=0;seqOut=0;constructor(e){if(this.options=e,W.parse(e.computerFp),W.parse(e.phoneFp),e.role!==`phone`&&e.role!==`computer`)throw Error(`invalid v2 role`);if(e.keys.pairKey.length!==32)throw Error(`invalid pair key`);if(this.timeoutMs=e.timeoutMs??15e3,!Number.isSafeInteger(this.timeoutMs)||this.timeoutMs<1)throw Error(`invalid v2 carrier timeout`);this.pairKey=e.keys.pairKey.slice(),this.bootstrap=new Zd(e),this.stage=e.role===`phone`?`phone:new`:`computer:hello`}get ready(){return this.stage===`ready`&&this.bootstrap.ready}get closed(){return this.stage===`closed`}start(){if(this.stage!==`phone:new`)throw Error(`v2 carrier cannot start`);try{return this.startDeadline(),this.phoneNonce=va(16),this.stage=`phone:hello`,this.hello(this.phoneNonce)}catch(e){throw this.close(),e}}receive(e){if(this.stage===`closed`||this.stage===`ready`||this.stage===`phone:new`)throw Error(`v2 carrier not receiving`);try{this.stage!==`computer:hello`&&this.checkDeadline();let t=this.options.role===`phone`?this.options.computerFp:this.options.phoneFp,n=this.options.role===`phone`?this.options.phoneFp:this.options.computerFp;if(e.v!==1||e.t!==`e2e`||e.from!==t||e.to!==n)throw Error(`v2 carrier peer mismatch`);let r=Zn.parse(e.body);if(r.c.length<16||r.c.length>2048)throw Error(`v2 carrier ciphertext exceeds bound`);if(this.stage===`phone:hello`||this.stage===`computer:hello`){if(e.seq!==0)throw Error(`v2 carrier expected hello`);let i=Au(Gn(uc(this.pairKey,r,gc(t,n))));if(i.type!==`conn.hello`||!i.features?.includes(`session-v2`))throw Error(`v2 carrier requires v2 hello intent`);if(this.stage===`computer:hello`){this.startDeadline(),this.phoneNonce=i.n.slice();let e=va(16);if(Tr(this.phoneNonce,e))throw Error(`reused hello nonce`);return this.deriveConnection(this.phoneNonce,e),this.stage=`bootstrap`,this.hello(e)}if(!this.phoneNonce||Tr(this.phoneNonce,i.n))throw Error(`invalid hello nonce`);return this.deriveConnection(this.phoneNonce,i.n),this.stage=`bootstrap`,this.frame(this.bootstrap.begin())}if(!this.connKey||e.seq!==this.seqIn+1)throw Error(`v2 carrier frame sequence mismatch`);let i=Au(Gn(uc(this.connKey,r,hc(t,n,this.connTag,e.seq))));if(i.type!==`session.v2.bootstrap`)throw Error(`v2 carrier rejects legacy terminal message`);this.seqIn=e.seq;let a=this.bootstrap.receive(i.bytes);return this.bootstrap.ready&&(this.stage=`ready`,this.clearDeadline()),a?this.frame(a):null}catch(e){throw this.close(),e}}takeReadySession(){if(!this.ready)throw Error(`v2 carrier not confirmed`);let e=this.bootstrap.takeReadySession();return this.close(),e}close(){this.stage!==`closed`&&(this.stage=`closed`,this.clearDeadline(),this.pairKey.fill(0),this.phoneNonce?.fill(0),this.phoneNonce=null,this.connKey?.fill(0),this.connKey=null,this.connTag=``,this.bootstrap.close())}hello(e){let t=this.options.role===`phone`?this.options.phoneFp:this.options.computerFp,n=this.options.role===`phone`?this.options.computerFp:this.options.phoneFp;return{v:1,t:`e2e`,from:t,to:n,seq:0,body:lc(this.pairKey,Wn({type:`conn.hello`,n:e,features:[`session-v2`]}),gc(t,n))}}frame(e){if(!this.connKey||this.seqOut>=2**53-1)throw Error(`v2 carrier unavailable`);let t=this.options.role===`phone`?this.options.phoneFp:this.options.computerFp,n=this.options.role===`phone`?this.options.computerFp:this.options.phoneFp,r=++this.seqOut;return{v:1,t:`e2e`,from:t,to:n,seq:r,body:lc(this.connKey,Wn({type:`session.v2.bootstrap`,bytes:e}),hc(t,n,this.connTag,r))}}deriveConnection(e,t){let n=pc(this.pairKey,e,t,this.options.computerFp,this.options.phoneFp);this.connKey=n.kConn,this.connTag=n.connTag}startDeadline(){if(this.startedAt=this.options.now(),!Number.isFinite(this.startedAt))throw Error(`invalid v2 carrier clock`);this.timer=setTimeout(()=>this.close(),this.timeoutMs)}checkDeadline(){let e=this.options.now();if(this.startedAt===null||!Number.isFinite(e)||e<this.startedAt||e-this.startedAt>=this.timeoutMs)throw Error(`v2 carrier handshake expired`)}clearDeadline(){this.timer&&clearTimeout(this.timer),this.timer=null}};function $d(e){return{route:e.route,sessionId:e.sessionId.slice(),attemptId:e.attemptId.slice(),generation:e.generation.slice()}}function ef(e,t){return e.route===t.route&&Tr(e.sessionId,t.sessionId)&&Tr(e.attemptId,t.attemptId)&&Tr(e.generation,t.generation)}var tf=class{options;relay=null;active=null;staged=null;transition=null;wireIds=new Set;attemptIds=new Set;transitionIds=new Set;highGeneration=1n;directAttempts=0;lastNow=-1;deadline=null;timer=null;revoked=!1;recovering=!1;snapshot=!1;revision=0;constructor(e){if(this.options=e,W.parse(e.computerFp),W.parse(e.phoneFp),e.role!==`phone`&&e.role!==`computer`)throw Error(`invalid route role`);this.installRelay(e.relay)}get status(){return this.revoked?`closed`:this.recovering?`recovering`:this.transition?`cutover`:this.active?.reference.route??`uncommitted`}get activeRoute(){return this.active?$d(this.active.reference):null}get routeRevision(){return this.revision}get needsSnapshot(){return this.snapshot}get preparationPending(){return this.transition?.phase===`computer:preparing`}get paused(){return this.revoked||this.recovering||this.transition!==null||this.active===null}get directActive(){return this.active?.reference.route===`direct`}snapshotApplied(){this.paused||(this.snapshot=!1)}stageDirect(e){if(this.sweep(),this.revoked||this.recovering||!this.active||!this.relay||this.staged||this.transition)throw Error(`route candidate unavailable`);let t=null;try{if(t=this.validate(e,`direct`),!Tr(t.reference.sessionId,this.relay.reference.sessionId))throw Error(`direct wire session mismatch`);let n=gl(t.reference.generation);if(n<=this.highGeneration)throw Error(`direct generation reused`);let r=Sr(t.reference.attemptId);if(this.attemptIds.has(r))throw Error(`direct attempt reused`);if(this.directAttempts>=Ul.directAttempts)throw Error(`direct attempt capacity`);this.highGeneration=n,this.directAttempts+=1,this.attemptIds.add(r),this.staged=t,this.arm()}catch(t){throw e.session!==this.active?.session&&e.session!==this.relay?.session&&e.session.close(),t}}begin(){if(this.sweep(),this.options.role!==`phone`||this.revoked||this.recovering||!this.staged||!this.relay||this.transition)throw Error(`route prepare unavailable`);if(!this.options.prepareReady())return!1;let e=El.parse(this.options.newId()).slice();if(this.transitionIds.has(Sr(e)))throw Error(`route transition reused`);return this.transitionIds.add(Sr(e)),this.transition={id:e,target:this.staged,phase:`phone:prepared`},this.sendControl(`route.prepare`)}approve(){return this.sweep(),!this.preparationPending||!this.transition||!this.options.prepareReady()||!this.transition.target.session.ready?!1:(this.transition.phase=`computer:commit`,this.sendControl(`route.prepared`))}receive(e,t){if(this.sweep(),this.revoked||this.recovering||!this.registered(e))return null;try{let n=e.open(t),r;try{r=Jl(n)}finally{n.fill(0)}if(r.kind===`control`){if(e!==this.relay?.session)throw Error(`route control requires relay session`);return this.control(r.control),null}if(r.kind===`signal`){if(e!==this.relay?.session)throw Error(`direct signaling requires relay session`);return r}return this.paused||e!==this.active?.session||!this.directActive?(r.bytes.fill(0),null):r}catch{return this.routeLost(e),null}}sendTerminal(e){return this.sweep(),this.paused||!this.active||!this.directActive?!1:this.sendPayload(this.active,{kind:`terminal`,bytes:e})}sendSignal(e){return this.sweep(),this.revoked||this.recovering||!this.relay?!1:this.sendPayload(this.relay,{kind:`signal`,bytes:e})}abort(e=`cancelled`){if(!this.staged&&!this.transition)return;if(this.transition?.phase===`phone:committed`||!this.active){this.failAll();return}let t=this.transition;t&&this.relay&&this.sendPayload(this.relay,{kind:`control`,control:{type:`route.abort`,transitionId:t.id,target:$d(t.target.reference),reason:e}}),this.discardCandidate(),t&&(this.snapshot=!0)}relayLost(){this.active?.reference.route===`direct`&&!this.transition&&!this.staged?(this.relay?.session.close(),this.relay=null):this.failAll()}routeLost(e){e===this.active?.session?this.failAll():e===this.relay?.session?this.relayLost():e===this.staged?.session&&this.abort(`candidate-failed`)}recover(e){if(this.revoked)throw e.session.close(),Error(`route owner revoked`);let t=this.validate(e,`relay`);if(this.wireIds.has(Sr(t.reference.sessionId)))throw t.session.close(),Error(`wire session reused`);this.failAll(),this.installRelay(t)}sweep(){if(this.revoked)return;let e=this.clock();this.deadline!==null&&e>=this.deadline&&this.abort(`timeout`)}close(){this.failAll(),this.revoked=!0,this.recovering=!1}validate(e,t){if(!(e.session instanceof Bl)||!e.session.ready||e.session.senderRole!==this.options.role)throw Error(`route session not ready`);let n=e.session.description;if(n.computerFp!==this.options.computerFp||n.phoneFp!==this.options.phoneFp||n.route!==t)throw Error(`route pairing mismatch`);if(t===`relay`&&gl(n.generation)!==1n)throw Error(`relay generation must be one`);return{session:e.session,send:e.send.bind(e),reference:$d(n)}}installRelay(e){let t=this.validate(e,`relay`),n=Sr(t.reference.sessionId);if(this.wireIds.has(n)||this.wireIds.size>=Ul.wireSessions)throw t.session.close(),Error(`wire session reused or capacity reached`);this.wireIds.add(n),this.attemptIds.clear(),this.transitionIds.clear(),this.attemptIds.add(Sr(t.reference.attemptId)),this.highGeneration=1n,this.directAttempts=0,this.relay=t,this.staged=t,this.recovering=!1,this.arm()}control(e){if(e.type===`route.prepare`){if(this.options.role!==`computer`||this.transition||!this.staged||!ef(e.target,this.staged.reference)||this.transitionIds.has(Sr(e.transitionId)))throw Error(`invalid route prepare`);this.transitionIds.add(Sr(e.transitionId)),this.transition={id:e.transitionId.slice(),target:this.staged,phase:`computer:preparing`};return}let t=this.transition;if(!t||!ef(e.target,t.target.reference)||!Tr(e.transitionId,t.id))throw Error(`route transition mismatch`);if(e.type===`route.abort`){this.abortWithoutSending();return}if(e.type===`route.prepared`&&t.phase===`phone:prepared`){if(!this.options.prepareReady()||!t.target.session.ready)throw Error(`route prepare gate changed`);t.phase=`phone:committed`,this.sendControl(`route.commit`);return}if(e.type===`route.commit`&&t.phase===`computer:commit`){if(!this.options.prepareReady()||!t.target.session.ready)throw Error(`route commit gate changed`);let e={type:`route.committed`,transitionId:t.id,target:$d(t.target.reference)};this.activate(),(!this.relay||!this.sendPayload(this.relay,{kind:`control`,control:e}))&&this.failAll();return}if(e.type===`route.committed`&&t.phase===`phone:committed`){this.activate();return}throw Error(`route control order mismatch`)}sendControl(e){return!this.relay||!this.transition?!1:this.sendPayload(this.relay,{kind:`control`,control:{type:e,transitionId:this.transition.id,target:$d(this.transition.target.reference)}})}sendPayload(e,t){let n=ql(t);try{if(e.send(e.session.seal(n))===!0)return!0}catch{}finally{n.fill(0)}return t.kind===`control`?this.failAll():this.routeLost(e.session),!1}activate(){if(!this.staged)throw Error(`route target missing`);let e=this.active;this.active=this.staged,this.staged=null,this.transition=null,e&&e!==this.relay&&e!==this.active&&e.session.close(),this.clearTimer(),this.snapshot=!0,this.revision+=1}abortWithoutSending(){if(this.transition?.phase===`phone:committed`||!this.active){this.failAll();return}this.discardCandidate(),this.snapshot=!0}discardCandidate(){this.staged&&this.staged!==this.active&&this.staged!==this.relay&&this.staged.session.close(),this.staged=null,this.transition=null,this.clearTimer()}failAll(){for(let e of new Set([this.active,this.staged,this.relay]))e?.session.close();this.active=null,this.staged=null,this.relay=null,this.transition=null,this.clearTimer(),this.recovering=!0,this.snapshot=!0,this.revision+=1}registered(e){return e===this.relay?.session||e===this.active?.session||e===this.staged?.session}clock(){let e=this.options.now();if(!Number.isFinite(e)||e<0||e<this.lastNow)throw this.failAll(),Error(`invalid route clock`);return this.lastNow=e,e}arm(){this.clearTimer(),this.deadline=this.clock()+Ul.attemptMs,this.timer=setTimeout(()=>this.abort(`timeout`),Ul.attemptMs)}clearTimer(){this.timer&&clearTimeout(this.timer),this.timer=null,this.deadline=null}};function nf(e,t,n,r){if(e.seq!==0||e.from!==r||e.to!==n)return!1;try{let i=Au(Gn(uc(t,Zn.parse(e.body),gc(r,n))));return i.type===`conn.hello`&&i.features?.includes(`session-v2`)===!0}catch{return!1}}var rf=class{options;carrier=null;owner=null;relaySession=null;direct=null;generation=1n;lastFailure=null;retryAt=null;retryFailures=0;nativeAttempts=0;retriesExhausted=!1;traffic={relaySent:0,relayReceived:0,directSent:0,directReceived:0};bootstrapRevision=0;reportedRevision=-1;reportedRoute=null;reportedState=``;recoveryNotified=!1;closed=!1;incoming=Promise.resolve();queued=0;clock;interval;constructor(e){this.options=e,this.clock=e.now??(()=>performance.now()),this.interval=setInterval(()=>this.poll(),100)}get activeRoute(){return this.owner?.activeRoute?.route??null}get ready(){return this.activeRoute!==null&&this.owner?.paused===!1}get routeRevision(){return this.owner?.routeRevision??0}get diagnostics(){let e=this.direct,t=this.activeRoute===`direct`?`direct`:e?.phase??`none`;return{route:this.activeRoute,ready:this.ready,phase:t,lastFailure:this.lastFailure,...this.traffic}}get state(){let{route:e,ready:t,phase:n,lastFailure:r}=this.diagnostics;return{route:e,ready:t,phase:n,lastFailure:r,retryPending:this.retryAt!==null}}sendRelay(e){let t=this.options.sendRelay(e);return t&&e.v===2&&(this.traffic.relaySent+=e.body.length),t}begin(){this.closed||this.options.role!==`phone`||(this.carrier?.close(),this.carrier=this.newCarrier(),this.bootstrapRevision+=1,this.sendRelay(this.carrier.start())||this.bootstrapFailed())}receiveRelay(e){if(this.closed)return Promise.resolve();if(++this.queued>32)return--this.queued,this.bootstrapFailed(),Promise.resolve();let t=this.incoming.then(()=>this.relay(e));return this.incoming=t.catch(()=>this.bootstrapFailed()).finally(()=>{--this.queued}),this.incoming}sendTerminal(e){return this.owner?.sendTerminal(e)??!1}relayLost(){this.owner?.relayLost(),this.carrier?.close(),this.carrier=null,this.changed()}close(){this.closed||(this.closed=!0,clearInterval(this.interval),this.carrier?.close(),this.carrier=null,this.owner?.close(),this.owner=null,this.closeDirect())}interruptDirect(){this.directFailed(`interrupted`)}newCarrier(){return new Qd({role:this.options.role,computerFp:this.options.computerFp,phoneFp:this.options.phoneFp,keys:this.options.keys,now:this.clock,newId:()=>va(16)})}async relay(e){if(this.closed||e.from!==(this.options.role===`phone`?this.options.computerFp:this.options.phoneFp)||e.to!==(this.options.role===`phone`?this.options.phoneFp:this.options.computerFp))return;if(e.v===2){if(this.traffic.relayReceived+=e.body.length,!this.owner||!this.relaySession)return;let t=this.owner.receive(this.relaySession,Ll(e.body));if(t?.kind===`terminal`)this.options.terminal(t.bytes,e.body.length);else if(t?.kind===`signal`){let e=this.direct;try{await this.signal(t.bytes)}catch{this.direct===e&&!e?.session?.ready&&this.directFailed(`remote-signal`,e??void 0)}}this.poll();return}if(e.t!==`e2e`)return;if(this.options.role===`computer`&&e.seq===0){if(!nf(e,this.options.keys.pairKey,this.options.computerFp,this.options.phoneFp))return;this.carrier?.close(),this.carrier=this.newCarrier(),this.bootstrapRevision+=1}let t=this.carrier;if(!t)return;let n=this.bootstrapRevision,r=t.receive(e);if(r&&!this.sendRelay(r))throw Error(`bootstrap queue refused`);if(!t.ready)return;let i=t.takeReadySession();this.carrier=null;try{await this.options.commitFloor()}catch(e){throw i.close(),e}if(this.closed||n!==this.bootstrapRevision){i.close();return}this.closeDirect(),this.relaySession=i,this.generation=1n,this.nativeAttempts=0,this.retriesExhausted=!1,this.retryAt=null;let a={session:i,send:e=>this.sendRelay({v:2,t:`e2e`,from:this.options.role===`phone`?this.options.phoneFp:this.options.computerFp,to:this.options.role===`phone`?this.options.computerFp:this.options.phoneFp,body:Il(e)})};this.owner?this.owner.recover(a):this.owner=new tf({role:this.options.role,computerFp:this.options.computerFp,phoneFp:this.options.phoneFp,relay:a,now:this.clock,newId:()=>va(16),prepareReady:this.options.prepareReady}),this.options.role===`phone`&&this.owner.begin(),this.recoveryNotified=!1,this.poll()}poll(){if(this.closed||(this.carrier?.closed&&this.bootstrapFailed(),!this.owner))return;try{this.owner.sweep(),this.owner.preparationPending&&this.owner.approve(),this.options.role===`phone`&&(this.owner.status===`uncommitted`||this.owner.status===`relay`&&this.direct?.session&&this.direct.session.ready)&&this.owner.begin(),this.changed(),this.retryDirect(),this.owner.status===`recovering`&&!this.carrier&&!this.recoveryNotified&&(this.recoveryNotified=!0,this.closeDirect(),this.options.failure(`recovery`))}catch{this.options.failure(`recovery`)}let e=this.state,t=JSON.stringify(e);t!==this.reportedState&&(this.reportedState=t,this.options.stateChanged?.(e))}changed(){let e=this.activeRoute,t=this.routeRevision;(this.reportedRevision!==t||this.reportedRoute!==e)&&(this.reportedRevision=t,this.reportedRoute=e,this.options.routeChanged(e,t),e===`direct`&&this.direct&&(this.direct.cancelDeadline(),this.retryFailures=0,this.retryAt=null,this.lastFailure=null))}retryDirect(){if(this.options.role===`phone`&&this.options.allowDirect&&this.options.native&&!this.retriesExhausted&&!this.direct&&!this.carrier&&this.ready&&this.activeRoute===`relay`&&this.options.prepareReady()&&!(this.retryAt!==null&&this.clock()<this.retryAt)){if(this.nativeAttempts>=Ul.directAttempts){this.retriesExhausted=!0,this.bootstrapFailed();return}this.nativeAttempts+=1,this.retryAt=null,this.startDirect()}}bootstrapFailed(){this.carrier?.close(),this.carrier=null,this.options.failure(`bootstrap`)}async startDirect(e){if(this.closed||this.direct||!this.ready||!this.relaySession||!this.options.native)return;this.generation=e?new DataView(e.generation.buffer,e.generation.byteOffset,8).getBigUint64(0,!0):this.generation+1n;let t=new Yd({role:this.options.role,keys:this.options.keys,computerFp:this.options.computerFp,phoneFp:this.options.phoneFp,relay:this.relaySession.description,generation:e?.generation??hl(this.generation),offer:e,native:this.options.native,current:()=>!this.closed&&this.direct===t,committed:()=>this.activeRoute===`direct`,sendSignal:e=>this.sendSignal(e),sent:e=>{this.traffic.directSent+=e},received:e=>{this.traffic.directReceived+=e},ready:e=>{this.owner?.stageDirect({session:e,send:e=>t.send(Il(e))}),this.options.role===`phone`&&this.owner?.begin()},frame:(e,t)=>{let n=this.owner?.receive(e,Ll(t));n?.kind===`terminal`&&this.options.terminal(n.bytes,t.length),this.poll()},failed:e=>this.directFailed(e,t)});this.direct=t,await t.start()}async signal(e){if(!this.relaySession||!this.owner)return;let t=this.direct;if(this.activeRoute===`direct`&&t?.session?.ready)return;let n=Wd(e,{sender:this.options.role===`phone`?`computer`:`phone`,sessionId:this.relaySession.description.sessionId,committedGeneration:this.relaySession.description.generation,...t&&{pending:{offerId:t.offerId,generation:t.generation}}});if(n.type===`direct.offer`){if(!this.options.native||this.options.role!==`computer`)return;await this.startDirect(n);return}await t?.signal(n)}sendSignal(e){return this.owner?.sendSignal(Ud(e))??!1}directFailed(e=`closed`,t){if(t&&this.direct!==t)return;let n=this.direct;if(!n)return;let r=this.diagnostics.phase,i=Math.min(6e4,5e3*2**this.retryFailures);if(this.retryFailures=Math.min(this.retryFailures+1,4),this.retryAt=this.clock()+Math.min(6e4,i*(.8+.4*va(1)[0]/255)),this.lastFailure=e,!n.session?.ready)try{this.sendSignal({type:`direct.abort`,...n.signalContext(),reason:e===`timeout`?`timeout`:e===`certificate`?`dtls-failed`:`ice-failed`})}catch{}let a=n?.session;a&&this.owner?.routeLost(a),this.closeDirect(),this.options.failure(`direct`,{code:e,phase:r}),this.poll()}closeDirect(){let e=this.direct;this.direct=null,e&&e.close()}};function af(e,t){return nr.every(n=>e?.includes(n)&&t.includes(n))?[...nr,...e?.includes(`native-history-v1`)&&t.includes(`native-history-v1`)?[rr]:[]]:[]}function of(e){if(e.length>4096)return!1;for(let t=0;t<e.length;t++){let n=e.charCodeAt(t);if(n>=55296&&n<=56319){let n=e.charCodeAt(++t);if(!(n>=56320&&n<=57343))return!1}else if(n>=56320&&n<=57343)return!1}return!0}const sf=tu.extend({t:tu.shape.t.refine(of)}).strict(),cf=nu.extend({r:I.array(sf)}).strict(),lf=cf.extend({r:I.array(sf).max(2048)}),uf=I.number().int().min(0).max(2**53-1),df={kind:I.literal(`history`),generation:uf,requestId:K,before:uf},ff=I.custom(e=>Array.isArray(e)&&e.length>0&&e.length<=G.historyLines),pf=I.strictObject({...df,status:I.literal(`page`),from:uf,to:uf,oldestAvailable:uf,lines:ff});function mf(e){return e.to===e.before&&e.lines.length<=2**53-1-e.from&&e.from+e.lines.length===e.to&&e.oldestAvailable<=e.from}const hf=pf.refine(mf),gf=pf.extend({nextBefore:uf}).refine(e=>mf(e)&&e.nextBefore===e.from),_f=I.strictObject({...df,status:I.literal(`boundary`),reason:I.enum([`end`,`truncated`]),oldestAvailable:uf}).refine(e=>e.reason===`end`?e.before===e.oldestAvailable:e.before<e.oldestAvailable),vf=I.discriminatedUnion(`status`,[hf,_f]),yf=I.discriminatedUnion(`status`,[gf,_f]),bf=I.strictObject({r:I.unknown(),w:I.boolean().optional()}),xf={ok:!1,code:`invalid-transfer`},Sf={ok:!1,code:`history-line-too-large`};function Cf(e){let t=bf.safeParse(e);if(!t.success||!Array.isArray(t.data.r))return xf;if(t.data.r.length>2048)return Sf;let n={r:[],...t.data.w===void 0?{}:{w:t.data.w}},r=0,i=0;for(let e of t.data.r){let t=sf.safeParse(e);if(!t.success)return xf;if(r+=t.data.n??yd(t.data.t),r>G.historyCells||(i+=Wn(t.data).length,i>G.historyBytes))return Sf;n.r.push(t.data)}let a=Wn(n).length;return a>G.historyBytes?Sf:{ok:!0,line:n,bytes:a}}I.unknown().transform((e,t)=>{let n=()=>(t.addIssue({code:`custom`,message:`invalid history record`}),I.NEVER);try{let t=yf.safeParse(e);if(!t.success)return n();let r;if(t.data.status===`boundary`)r=t.data;else{let e=[],i=0;for(let r of t.data.lines){let t=Cf(r);if(!t.ok||(i+=t.bytes,i>G.historyBytes))return n();e.push(t.line)}r={...t.data,lines:e}}return Wn(r).length>G.historyBytes?n():r}catch{return n()}});function wf(e){try{let t=vf.safeParse(e);if(!t.success)return xf;if(t.data.status===`boundary`){let e=t.data;return{ok:!0,record:e,bytes:Wn(e)}}let n=t.data,r=[],i=0,a;for(let e=n.lines.length-1;e>=0;e--){let t=Cf(n.lines[e]);if(!t.ok){if(t.code===`invalid-transfer`)return xf;break}if(i+=t.bytes,i>G.historyBytes)break;r.unshift(t.line);let o=n.from+e,s={...n,from:o,nextBefore:o,lines:r.slice()},c=Wn(s);c.length<=G.historyBytes&&(a={ok:!0,record:s,bytes:c})}return a??{...Sf,before:n.before}}catch{return xf}}const Tf=I.number().int().min(0).max(2**53-1),Ef=Tf.min(1),Df=ru.extend({x:Tf,y:I.number().int().min(-1).max(2**53-1)}).strict(),Of=I.strictObject({cols:Ef,rows:Ef,cursor:Df,lines:I.array(cf),scrollbackTotal:Tf,gen:Tf,reset:I.boolean().optional(),degraded:I.boolean().optional()});function kf(e){return e.lines.length===e.rows&&e.cursor.x<=e.cols&&e.cursor.y<e.rows&&Af(e.lines,e.cols)}function Af(e,t){return e.every(e=>{let n=0;for(let r of e.r)if(n+=r.n??yd(r.t),n>t)return!1;return!0})}function jf(e){let t=0,n=0;for(let r of e){t+=r.r.length;for(let e of r.r)n+=yd(e.t)}return{runs:t,points:n}}function Mf(e){let{runs:t,points:n}=jf(e);return t<=G.runs&&n<=G.codePoints}const Nf=Of.extend({kind:I.literal(`snapshot`),cols:Ef.max(G.cols),rows:Ef.max(G.rows),lines:I.array(lf).max(G.rows)}).refine(e=>kf(e)&&Mf(e.lines)),Pf=I.strictObject({scroll:Tf.max(G.rows),changed:I.array(I.strictObject({i:Tf.max(G.rows-1),line:lf})).max(G.rows),cursor:Df.extend({x:Tf.max(G.cols),y:Df.shape.y.max(G.rows-1)}),scrollbackTotal:Tf,gen:Ef}),Ff=Pf.extend({kind:I.literal(`diff`)}).refine(e=>{let t=new Set(e.changed.map(e=>e.i)),n=e.changed.map(e=>e.line);return t.size===e.changed.length&&Af(n,G.cols)&&Mf(n)}),If=I.discriminatedUnion(`kind`,[Nf,Ff]);function Lf(e){let t=If.safeParse(e);if(!t.success)throw new H(`malformed`);let n;try{n=Wn(t.data)}catch{throw new H(`malformed`)}if(n.length>G.screenBytes)throw new H(`malformed`);return{record:t.data,bytes:n}}function Rf(e){let{kind:t,...n}=e;return n}function zf(e){let t=Of.safeParse(e);if(!t.success||!kf(t.data))return{ok:!1,code:`invalid-transfer`};let n=t.data;if(n.cols>G.cols||n.rows>G.rows||jf(n.lines).points>G.codePoints)return{ok:!1,code:`screen-too-large`};for(let e=0;e<2;e++){let t=e===0?n:{...n,lines:n.lines.map(Td),degraded:!0};try{let{record:e,bytes:n}=Lf({kind:`snapshot`,...t});if(e.kind===`snapshot`)return{ok:!0,snapshot:Rf(e),bytes:n}}catch{}}return{ok:!1,code:`screen-too-large`}}function Bf(e){let t=Pf.safeParse(e);if(!t.success)throw new H(`malformed`);return Lf({kind:`diff`,...t.data}).bytes}var Vf=class{options;lanes=[null,null];outstanding=[];state=`open`;nextLane=0;lastSequence=0;acknowledgedThrough=0;constructor(e){if(!cr.shape.subscriptionId.safeParse(e.subscriptionId).success||!cr.shape.sessionId.safeParse(e.sessionId).success)throw Error(`Invalid stream sender identity`);this.options={...e}}canOffer(e){return this.tick()===`open`&&this.lanes[+(e===`history`)]===null}offer(e,t){if(this.tick()!==`open`)return{accepted:!1,reason:`closed`};let n=sr.safeParse(e);if(!n.success||!(t instanceof Uint8Array)||t.length===0)throw Error(`Invalid stream transfer`);let r=+(n.data.kind===`history`),i=r===1?G.historyBytes:G.screenBytes;if(t.length>i)return{accepted:!1,reason:`too-large`};if(this.lanes[r])return{accepted:!1,reason:`busy`};let a;try{a=this.options.newTransferId()}catch(e){throw this.cancel(),e}if(!cr.shape.transferId.safeParse(a).success)throw Error(`Invalid stream transfer identity`);return this.state===`open`?(this.lanes[r]={id:a,meta:n.data,bytes:new Uint8Array(t),count:Math.ceil(t.length/G.chunkBytes),nextIndex:0,acknowledged:0,startedAt:null,progressAt:null},{accepted:!0,transferId:a}):{accepted:!1,reason:`closed`}}pump(){if(this.tick()!==`open`)return 0;let e=0;for(;e<G.unacked&&this.inFlight<G.unacked&&this.tick()===`open`;){let t=this.nextLane,n=this.lanes[t];if((!n||n.nextIndex===n.count)&&(t=1-t,n=this.lanes[t]),!n||n.nextIndex===n.count)break;if(this.lastSequence===2**53-1){this.cancel();break}let r=this.lastSequence+1,i=n.nextIndex,a={type:`stream.chunk`,subscriptionId:this.options.subscriptionId,sessionId:this.options.sessionId,transferId:n.id,sequence:r,index:i,count:n.count,totalBytes:n.bytes.length,data:n.bytes.slice(i*G.chunkBytes,(i+1)*G.chunkBytes),meta:{...n.meta}},o;try{o=this.options.send(a)}catch(e){throw this.cancel(),e}if(o&&e++,this.state!==`open`||!o)break;this.lastSequence=r,n.nextIndex++,n.startedAt===null&&(n.startedAt=this.options.now(),n.progressAt=n.startedAt),this.outstanding.push({sequence:r,transfer:n}),this.nextLane=1-t}return e}acknowledge(e,t){if(e!==this.options.subscriptionId||this.tick()!==`open`)return`ignored`;if(!Number.isSafeInteger(t)||t<1||t>this.lastSequence)return`invalid`;if(t<=this.acknowledgedThrough)return`duplicate`;let n=this.options.now();for(let e of this.outstanding){if(e.sequence>t)break;e.transfer.acknowledged++,e.transfer.progressAt=n,e.transfer.acknowledged===e.transfer.count&&(this.lanes[+(e.transfer.meta.kind===`history`)]=null)}return this.outstanding=this.outstanding.filter(e=>e.sequence>t),this.acknowledgedThrough=t,`advanced`}tick(){let e=this.nextDeadline();return e!==null&&this.options.now()>=e&&this.stop(`stalled`),this.state}nextDeadline(){let e=1/0;for(let t of this.lanes)t&&t.startedAt!==null&&t.progressAt!==null&&(e=Math.min(e,t.startedAt+G.totalMs,t.progressAt+G.progressMs));return Number.isFinite(e)?e:null}cancel(){this.stop(`closed`)}stop(e){this.state=e,this.lanes[0]=null,this.lanes[1]=null,this.outstanding=[]}get inFlight(){return this.outstanding.length}get retainedBytes(){return(this.lanes[0]?.bytes.length??0)+(this.lanes[1]?.bytes.length??0)}},Hf=`0.10.0`;const Uf=/^owner-([1-9][0-9]*)-([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/;function Wf(e){if(!/^[1-9][0-9]*$/.test(e))return null;let t=Number(e);return Number.isInteger(t)&&t<=2147483647?t:null}function Gf(e){try{return process.kill(e,0),!0}catch(e){let t=e.code;if(t===`ESRCH`)return!1;if(t===`EPERM`)return!0;throw e}}function Kf(e,n){try{t.unlinkSync(P(e,n))}catch(e){if(e.code!==`ENOENT`)throw e}try{t.rmdirSync(e)}catch(e){if(![`ENOENT`,`ENOTEMPTY`,`EEXIST`].includes(e.code??``))throw e}}function qf(e){let n=`${j(e)}.lock-candidate-`;for(let r of t.readdirSync(M(e))){if(!r.startsWith(n))continue;let i=`owner-${r.slice(n.length)}`,a=Uf.exec(i),o=a&&Wf(a[1]);if(!o)continue;let s=P(M(e),r);try{if(Gf(o)||!t.lstatSync(s).isDirectory())continue;let e=t.readdirSync(s);e.length===0?t.rmdirSync(s):e.length===1&&e[0]===i&&t.lstatSync(P(s,i)).isFile()&&Kf(s,i)}catch{}}}function Jf(e){let n=`${e}.lock`,r=`${process.pid}-${se()}`,i=`${e}.lock-candidate-${r}`,a=`owner-${r}`;t.mkdirSync(i,{mode:448});let o=!1;try{t.writeFileSync(P(i,a),``,{mode:384,flag:`wx`});for(let r=0;r<3;r++){try{t.renameSync(i,n),o=!0;try{qf(e)}catch{}return()=>Kf(n,a)}catch(e){if(![`EEXIST`,`ENOTEMPTY`].includes(e.code??``))throw e}try{if(!t.lstatSync(n).isDirectory())throw Error(`Invalid control guard ${n}; inspect it before retrying`);let e=t.readdirSync(n);if(e.length===0)continue;let r=e[0],i=Uf.exec(r),a=i&&Wf(i[1]);if(e.length!==1||!a||!t.lstatSync(P(n,r)).isFile())throw Error(`Invalid control guard ${n}; inspect its owner marker before retrying`);if(Gf(a))throw Error(`Control endpoint busy (guard owner pid ${a})`);Kf(n,r)}catch(e){if(e.code!==`ENOENT`)throw e}}throw Error(`Control endpoint busy; could not acquire ${n} after three attempts`)}finally{o||Kf(i,a)}}var Y=class extends Error{kind;constructor(e){super(`shellbell: ${e} Linux host state; inspect ownership, permissions and host initialization`),this.kind=e}};function X(e){try{return p(e)}catch(e){if(e.code===`ENOENT`)return;throw new Y(`unsafe`)}}function Yf(e,t){return e.dev===t.dev&&e.ino===t.ino}function Z(e,t){let n=X(e);if(!n)throw new Y(`missing`);if(!n.isDirectory()||n.isSymbolicLink()||n.uid!==t||(n.mode&4095)!=448)throw new Y(`unsafe`);return n}function Xf(e){let t=F(e),n=X(t);if(n){if(n.isSymbolicLink()||!n.isDirectory())throw new Y(`unsafe`);return y(t)}return P(Zf(M(t)),j(t))}function Zf(e){if(X(e))try{return y(e)}catch{throw new Y(`unsafe`)}return P(Zf(M(e)),j(e))}function Qf(e,t,n,r=!0){let i;try{let a=X(e);if(!a)throw new Y(`missing`);let s=e=>{if(!e.isFile()||e.isSymbolicLink()||n!==void 0&&(e.uid!==n||(e.mode&4095)!=384))throw new Y(`unsafe`);if(e.size>t)throw new Y(`invalid`)};s(a),i=h(e,o.O_RDONLY|o.O_NOFOLLOW|o.O_NONBLOCK);let c=l(i);if(s(c),!Yf(a,c))throw new Y(`unsafe`);let u=Buffer.alloc(t+ +!!r),d=0;for(;d<u.length;){let e=_(i,u,d,u.length-d,null);if(e===0)break;d+=e}let f=l(i),p=X(e);if(s(f),!p||!Yf(c,p)||!Yf(c,f)||c.size!==f.size||c.mtimeMs!==f.mtimeMs||c.ctimeMs!==f.ctimeMs)throw new Y(`unsafe`);if(s(p),d>t||d!==f.size)throw new Y(`invalid`);return u.subarray(0,d)}catch(e){throw e instanceof Y?e:new Y(`unsafe`)}finally{i!==void 0&&a(i)}}function $f(e={}){let t=e.uid??process.getuid?.(),n=e.euid??process.geteuid?.();if(!Number.isInteger(t)||t===void 0||t<=0||t!==n)throw Error(`shellbell: Linux hosting requires matching non-root real and effective users`);let r;try{let t=Qf(e.machineIdPath??`/etc/machine-id`,256,void 0,!1).toString(`utf8`);if(!/^[0-9a-fA-F]{32}\n?$/.test(t)||/^0{32}\n?$/.test(t))throw Error();r=Buffer.from(t.trim().toLowerCase(),`hex`)}catch{throw Error(`shellbell: Linux machine identity is unavailable or invalid; provision /etc/machine-id before host initialization`)}let i=ae(`sha256`,`shellbell.local-host-scope.v1`).update(r).digest(`hex`),a=i.slice(0,32);return{uid:t,machineId:r.toString(`hex`),hostDigest:i,hostScope:a}}const ep=new WeakMap,tp=new Set([16914836,61267,1481003842,2435016766]);function np(e,t){let n=ep.get(e),r=n?.root??M(M(e.runtimeDir)),i=n?.fsType??(e=>C(e).type);try{if(Z(r,e.linuxHost.uid),!tp.has(Number(i(r))))throw new Y(`unsafe`);for(let n of[P(r,`shellbell`),e.runtimeDir]){if(!X(n)){if(!t)continue;try{m(n,{mode:448})}catch(e){if(e.code!==`EEXIST`)throw e}}if(Z(n,e.linuxHost.uid),!tp.has(Number(i(n))))throw new Y(`unsafe`)}X(e.runtimeDir)&&rp(e.runtimeDir,e.linuxHost.uid,0,i)}catch{throw Error(`shellbell: unsafe or unavailable Linux runtime; provide a private 0700 local XDG_RUNTIME_DIR`)}}function rp(e,t,n,r){if(n>2)throw new Y(`unsafe`);let i=v(e);if(i.length>256)throw new Y(`unsafe`);for(let a of i){let i=P(e,a),o=X(i);if(!o||o.uid!==t||o.isSymbolicLink())throw new Y(`unsafe`);if(o.isDirectory()){if(Z(i,t),!tp.has(Number(r(i))))throw new Y(`unsafe`);rp(i,t,n+1,r)}else if(!o.isFile()&&!o.isSocket()||(o.mode&4095)!=384)throw new Y(`unsafe`)}}function ip(e,t){if(M(t)!==M(e.runtimeDir))throw new Y(`unsafe`);Z(t,e.linuxHost.uid);let n=ep.get(e)?.fsType??(e=>C(e).type);if(!tp.has(Number(n(t))))throw new Y(`unsafe`);rp(t,e.linuxHost.uid,0,n)}function ap(e={}){let{uid:t,hostDigest:n,hostScope:r}=$f(e),i=e.env??process.env,a=e.home??D(),o=i.SHELLBELL_DIR;if(o!==void 0&&!N(o))throw Error(`shellbell: SHELLBELL_DIR must be absolute`);let s=i.XDG_STATE_HOME&&N(i.XDG_STATE_HOME)?i.XDG_STATE_HOME:P(a,`.local`,`state`),c=Xf(o??P(s,`shellbell`,`hosts`,r));X(c)&&Z(c,t);let l=i.XDG_RUNTIME_DIR??`/run/user/${t}`;if(!N(l))throw Error(`shellbell: XDG_RUNTIME_DIR must be absolute`);let u=P(F(l),`shellbell`,ie(`sha256`).update(c).digest(`hex`).slice(0,32)),d={dir:c,serviceOwner:P(c,`service-owner.json`),identity:P(c,`identity.json`),config:P(c,`config.json`),pairings:P(c,`pairings.json`),log:P(c,`agent.log`),runtimeDir:u,sock:P(u,`agent.sock`),pid:P(u,`agent.pid`),linuxHost:{uid:t,hostDigest:n,hostScope:r}};if(Buffer.byteLength(d.sock)>107)throw Error(`shellbell: Linux socket path exceeds 107 bytes; choose a shorter XDG_RUNTIME_DIR`);return ep.set(d,{root:F(l),fsType:e.runtimeFsType??(e=>C(e).type)}),np(d,!1),d}function op(e){np(e,!0)}const sp=I.object({v:I.literal(1),relayUrl:I.string().url(),computerName:I.string().min(1).max(64),accent:I.string().min(1).max(32),notifyMinCommandMs:I.number().int().nonnegative().default(1e4),idleQuietMs:I.number().int().positive().default(4e3),idleMinActiveMs:I.number().int().nonnegative().default(1500),turn:I.boolean().optional(),showAgentConversations:I.boolean().optional(),terminalPlugins:I.array(I.string().min(1).max(4096).refine(e=>e.startsWith(`/`)&&e.endsWith(`.mjs`)&&[...e].every(e=>e.charCodeAt(0)>=32&&e.charCodeAt(0)!==127))).max(29).optional()}),cp=I.object({phoneFp:I.string().regex(/^[a-z2-7]{26}$/),name:I.string().min(1).max(64),platform:I.enum([`ios`,`android`]),ed25519Pub:I.string(),x25519Pub:I.string(),kPair:I.string(),minProtocolVersion:I.literal(2).optional(),pairedAt:I.string(),lastSeenAt:I.string().nullable()}),lp=I.object({v:I.literal(1),phones:I.array(cp)});function up(e,t){if(!e||e.phoneFp!==t.phoneFp||e.kPair!==t.kPair)return t;if(e.ed25519Pub!==t.ed25519Pub||e.x25519Pub!==t.x25519Pub)throw Error(`shellbell: pairing identity changed without a new pairing key`);return e.minProtocolVersion===2?{...t,minProtocolVersion:2}:t}const dp=I.object({v:I.literal(1),hostDigest:I.string().regex(/^[0-9a-f]{64}$/),installationId:I.string().uuid()}).strict();function fp(e){try{let t=nc(JSON.parse(e.toString(`utf8`))),n=$s(t.ed25519.priv,t.x25519.priv,t.createdAt);if(!Buffer.from(n.ed25519.pub).equals(Buffer.from(t.ed25519.pub))||!Buffer.from(n.x25519.pub).equals(Buffer.from(t.x25519.pub)))throw Error();return{identity:t,fp:rc(t.ed25519.pub)}}catch{throw new Y(`invalid`)}}function pp(e){try{return sp.parse(JSON.parse(e.toString(`utf8`)))}catch{throw new Y(`invalid`)}}function mp(e){try{let{phones:t}=lp.parse(JSON.parse(e.toString(`utf8`)));for(let e of t){let t=br(e.ed25519Pub);if(t.length!==32||br(e.x25519Pub).length!==32||br(e.kPair).length!==32||rc(t)!==e.phoneFp)throw Error()}return t}catch{throw new Y(`invalid`)}}function hp(e,t){let n=Z(e,t),r=Qf(P(e,`identity.json`),65536,t),i=Qf(P(e,`config.json`),65536,t),a=Qf(P(e,`pairings.json`),1048576,t);if(fp(r),pp(i),mp(a),!Yf(n,Z(e,t)))throw new Y(`unsafe`);return{identity:r,config:i,pairings:a}}function gp(e){try{if(!X(e.dir))return{status:`absent`};let t=Z(e.dir,e.linuxHost.uid);for(let t of v(e.dir)){let n=/^owner-[1-9][0-9]*-[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/,r=`owner-${t.slice(34)}`,i=t.startsWith(`service-owner.json.lock-candidate-`)&&n.test(r);if(t===`service-owner.json.lock`||i){let a=P(e.dir,t),o;try{o=Z(a,e.linuxHost.uid);let t=v(a),s=t[0];if(!(i&&t.length===0)){if(t.length!==1||!s||!n.test(s)||i&&s!==r)throw new Y(`unsafe`);Qf(P(a,s),0,e.linuxHost.uid)}if(!Yf(o,Z(a,e.linuxHost.uid)))throw new Y(`unsafe`)}catch(t){let n=X(a);if(!n)continue;try{if(i&&o&&Yf(o,n)&&v(a).length===0&&Yf(n,Z(a,e.linuxHost.uid)))continue}catch(e){if(e instanceof Y&&e.kind===`missing`||e.code===`ENOENT`)continue;throw e}throw t}continue}let a=X(P(e.dir,t));if(a&&(!a.isFile()||a.isSymbolicLink()||a.uid!==e.linuxHost.uid||(a.mode&4095)!=384))throw new Y(`unsafe`)}let n=P(e.dir,`host.json`);if(!X(n))return{status:`unmarked`,reason:`Host marker missing; explicit host initialization or recovery required`};let r,i=Qf(n,4096,e.linuxHost.uid);try{r=dp.parse(JSON.parse(i.toString(`utf8`)))}catch{throw new Y(`invalid`)}if(r.hostDigest!==e.linuxHost.hostDigest)return{status:`wrong-host`,reason:`State belongs to a different host; choose this host's state directory`};let a=hp(e.dir,e.linuxHost.uid);if(!i.equals(Qf(n,4096,e.linuxHost.uid))||!Yf(t,Z(e.dir,e.linuxHost.uid)))throw new Y(`unsafe`);return{status:`ready`,bytes:a}}catch(e){return{status:e instanceof Y&&e.kind===`unsafe`?`unsafe`:`invalid`,reason:`Host state failed validation; inspect files and recover explicitly`}}}function _p(e){let t=gp(e);return t.status===`ready`?{status:`ready`}:t}function vp(){return Error(`shellbell: Linux host state is not ready; use shellbell host init --new or host init --adopt <absolute-source> --confirm-source-inactive for absent state; inspect existing state before recovery`)}function yp(e){let t=gp(e);if(!(`bytes`in t))throw vp();return t.bytes}function bp(e){if(_p(e).status!==`ready`)throw vp()}function xp(e){return fp(yp(e).identity)}function Sp(e){return pp(yp(e).config)}function Cp(e){return mp(yp(e).pairings)}const wp=[`emerald`,`blue`,`amber`,`violet`,`rose`,`cyan`,`lime`,`orange`];function Tp(e=process.env.SHELLBELL_DIR??P(D(),`.shellbell`)){return{dir:e,serviceOwner:P(e,`service-owner.json`),identity:P(e,`identity.json`),pairings:P(e,`pairings.json`),config:P(e,`config.json`),log:P(e,`agent.log`),sock:P(e,`agent.sock`),pid:P(e,`agent.pid`)}}function Ep(e){if(e.linuxHost){bp(e);return}m(e.dir,{recursive:!0,mode:448}),i(e.dir,448)}function Dp(e,t,n){jp(e,t,t=>{n?.(),b(t,e)})}const Op=new Set([`EPERM`,`ENOTSUP`,`EOPNOTSUPP`,`EXDEV`]);function kp(e,t){try{return jp(e,t,n=>{try{f(n,e)}catch(n){if(!Op.has(n.code??``))throw n;Ap(e,t)}ee(n)}),!0}catch(e){if(e.code===`EEXIST`)return!1;throw e}}function Ap(e,t){let n=h(e,`wx`,384),r=l(n),i=!1;try{c(n,384);let e=typeof t==`string`?Buffer.from(t):t,r=0;for(;r<e.byteLength;){let t=E(n,e,r,e.byteLength-r);if(t<=0)throw Error(`secret file write made no progress`);r+=t}u(n),i=!0}finally{if(a(n),!i)try{let t=p(e);t.dev===r.dev&&t.ino===r.ino&&ee(e)}catch{}}}function jp(e,t,n){let r=`${e}.tmp-${process.pid}`,o=null;try{let e=h(r,`wx`,384),s=l(e);o={dev:s.dev,ino:s.ino};try{let n=typeof t==`string`?Buffer.from(t):t,r=0;for(;r<n.byteLength;){let t=E(e,n,r,n.byteLength-r);if(t<=0)throw Error(`atomic file write made no progress`);r+=t}u(e)}finally{a(e)}i(r,384),n(r)}catch(e){try{if(o){let e=p(r);e.dev===o.dev&&e.ino===o.ino&&ee(r)}}catch{}throw e}}function Mp(e){let t;try{t=g(e,`utf8`)}catch(t){throw Error(`shellbell: cannot read ${e}: ${t.message}`)}try{return JSON.parse(t)}catch{throw Error(`shellbell: ${e} is not valid JSON`)}}function Np(){return{v:1,relayUrl:`wss://relay.shellbell.dev`,computerName:O().replace(/\.local$/,``)||`Mac`,accent:wp[0],notifyMinCommandMs:1e4,idleQuietMs:3e4,idleMinActiveMs:1500}}function Pp(e){return zp(e,()=>{if(Hp(e),e.linuxHost)return Sp(e);if(!X(e.dir))return Np();let t=Z(e.dir,process.getuid());if(!X(e.config))return Np();let n=Qf(e.config,Lp,process.getuid());if(!Yf(t,Z(e.dir,process.getuid())))throw new Y(`unsafe`);let r;try{r=JSON.parse(n.toString(`utf8`))}catch{throw new Rp(`invalid`,e.config,`not valid JSON`)}return Bp(e,r)})}function Fp(e){return e.linuxHost?Pp(e):Wp(e,()=>{let t=Pp(e);return X(e.config)||Gp(e,t),t})}function Ip(e,t){return Wp(e,()=>t(Pp(e)))}const Lp=65536;var Rp=class extends Error{code;constructor(e,t,n=e){super(`shellbell: config ${n} at ${t}`),this.code=e,this.name=`ConfigEditError`}};function zp(e,t){try{return t()}catch(t){throw t instanceof Rp?t:new Rp(t instanceof Y?t.kind===`invalid`?`invalid`:`unsafe`:`io`,e.config)}}function Bp(e,t){let n=sp.safeParse(t);if(!n.success)throw new Rp(`invalid`,e.config);return n.data}function Vp(e){if(e.linuxHost){bp(e);return}Z(e.dir,process.getuid())}function Hp(e){if([e.dir,e.config].some(e=>Buffer.byteLength(e)>4096||e.includes(`\0`))||M(F(e.config))!==F(e.dir))throw new Rp(`unsafe`,e.config)}function Up(e,t){let n=`${j(e)}.lock`;for(let r of v(M(e))){if(r!==n&&!r.startsWith(`${n}-candidate-`))continue;let i=P(M(e),r);if(X(i)){Z(i,t);for(let e of v(i)){let n=X(P(i,e));if(n&&(!n.isFile()||n.isSymbolicLink()||n.uid!==t||(n.mode&4095)!=384))throw new Y(`unsafe`)}}}}function Wp(e,t){let n=zp(e,()=>{if(Hp(e),!e.linuxHost&&!X(e.dir))try{m(e.dir,{recursive:!0,mode:448})}catch(e){if(e.code!==`EEXIST`)throw e}Vp(e);let t=e.config;e.linuxHost&&(op(e),t=P(e.runtimeDir,`config-${ie(`sha256`).update(e.config).digest(`hex`)}`)),Up(t,e.linuxHost?.uid??process.getuid());try{return Jf(t)}catch(t){throw t instanceof Error&&t.message.startsWith(`Control endpoint busy`)?new Rp(`busy`,e.config):t instanceof Error&&t.message.startsWith(`Invalid control guard`)?new Rp(`unsafe`,e.config):t}}),r;try{r=t()}catch(e){try{n()}catch{}throw e}return zp(e,n),r}function Gp(e,t){zp(e,()=>{let n=`${JSON.stringify(Bp(e,t),null,2)}\n`;if(Buffer.byteLength(n)>Lp)throw new Rp(`invalid`,e.config);Dp(e.config,n,()=>{Vp(e),Pp(e)})})}function Kp(e,t){return Wp(e,()=>{let n=Bp(e,t(Pp(e)));return Gp(e,n),n})}function qp(e){if(e.linuxHost)return Cp(e);if(Ep(e),!s(e.pairings))return[];let t=lp.safeParse(Mp(e.pairings));if(!t.success)throw Error(`shellbell: invalid pairings at ${e.pairings}: ${I.prettifyError(t.error)}`);return t.data.phones}function Jp(e,t){Ep(e);let n=new Map(qp(e).map(e=>[e.phoneFp,e])),r=t.map(e=>up(n.get(e.phoneFp),e)),i=lp.parse({v:1,phones:r}),a=`${JSON.stringify(i,null,2)}\n`;if(e.linuxHost){if(Buffer.byteLength(a)>1048576)throw Error(`shellbell: Linux pairings exceed their state size limit`);mp(Buffer.from(a))}return Dp(e.pairings,a,e.linuxHost?()=>bp(e):void 0),i.phones}const Yp=new Set([`Error`,`TypeError`,`RangeError`,`ReferenceError`,`SyntaxError`,`URIError`,`EvalError`,`AggregateError`,`AbortError`,`TimeoutError`,`ProtocolError`,`BackendUnavailable`,`SessionGone`,`Unsupported`,`BadWindow`,`HerdrError`,`ITerm2AuthError`,`ConfigEditError`,`NativeControllerError`,`ControlV2ClientError`]);function Xp(e){try{if(!(e instanceof Error))return`unknown`;let t=e.name;return typeof t==`string`&&Yp.has(t)?t:`Error`}catch{return`unknown`}}const Zp=1048576;function Qp(e){return e.isFile()&&e.uid===process.getuid?.()&&e.nlink===1}function $p(e,t){return e.dev===t.dev&&e.ino===t.ino}function em(e,t){let n;try{let i;try{i=p(e)}catch(e){if(e.code!==`ENOENT`)return}if(i&&!Qp(i))return;n=h(e,o.O_WRONLY|o.O_APPEND|o.O_NOFOLLOW|o.O_NONBLOCK|(i?0:o.O_CREAT|o.O_EXCL),384);let a=l(n),s=p(e);if(!Qp(a)||!Qp(s)||!$p(a,s)||i&&!$p(i,a))return;c(n,384),r(n,t)}catch{}finally{if(n!==void 0)try{a(n)}catch{}}}function tm(e){let t;try{let n=p(e);if(!Qp(n)||n.size<Zp)return;t=h(e,o.O_RDWR|o.O_NOFOLLOW|o.O_NONBLOCK);let r=l(t);if(!Qp(r)||!$p(n,r)||r.size<Zp)return;c(t,384);let i=Math.max(0,r.size-Zp),a=Buffer.alloc(r.size-i);for(let e=0;e<a.length;){let n=_(t,a,e,a.length-e,i+e);if(n===0)return;e+=n}for(let t=4;t>=1;t--)s(`${e}.${t}`)&&b(`${e}.${t}`,`${e}.${t+1}`);Dp(`${e}.1`,a);let u=p(e);Qp(u)&&$p(u,r)&&Qp(l(t))&&d(t,0)}catch{}finally{if(t!==void 0)try{a(t)}catch{}}}function nm(e,t={}){let n=e.stdout??process.stdout.isTTY===!0,r=(r,i,a)=>{if(r===`debug`&&!e.verbose)return;let o={t:new Date().toISOString(),level:r,msg:i,...t,...a};if(e.file){tm(e.file);try{em(e.file,`${JSON.stringify(o)}\n`)}catch{}}if(n){let e=Object.keys({...t,...a}).length?` ${JSON.stringify({...t,...a})}`:``,n=`${o.t.slice(11,19)} ${r.padEnd(5)} ${i}${e}`;(r===`error`||r===`warn`?process.stderr:process.stdout).write(`${n}\n`)}};return{debug:(e,t)=>r(`debug`,e,t),info:(e,t)=>r(`info`,e,t),warn:(e,t)=>r(`warn`,e,t),error:(e,t)=>r(`error`,e,t),child:n=>nm(e,{...t,...n})}}function rm(e){if(!im(e.reported)||!im(e.before)||e.before>e.reported||!Number.isSafeInteger(e.count)||e.count<1||e.count>G.historyLines||e.capture===null||typeof e.capture!=`object`)throw RangeError(`invalid history read request`)}function im(e){return Number.isSafeInteger(e)&&e>=0}var am=class extends Error{hint;constructor(e,t){super(e),this.hint=t,this.name=`BackendUnavailable`}},om=class extends Error{constructor(e){super(`session gone: ${e}`),this.name=`SessionGone`}},sm=class extends Error{code;constructor(e){super(`Terminal input ${e}`),this.code=e,this.name=`TerminalInputError`}},cm=class extends Error{constructor(e){super(`unsupported: ${e}`),this.name=`Unsupported`}},lm=class extends Error{constructor(e=`No terminal app on this computer can show a new session.`){super(e),this.name=`NotShownOnComputer`}},um=class extends Error{constructor(e){super(`bad-window: ${e}`),this.name=`BadWindow`}};async function dm(e,t){let n;try{return await Promise.race([Promise.resolve().then(e),new Promise((e,r)=>{n=setTimeout(()=>r(Error(`Terminal adapter deadline exceeded`)),t),n.unref()})])}finally{n&&clearTimeout(n)}}function fm(e,t){return`${e}:${t}`}const pm=Yl.options,mm=new Set([`iterm2`]);function hm(e){let t=e.indexOf(`:`);if(t<=0)return null;let n=Xl.safeParse(e.slice(0,t));return n.success?{name:n.data,native:e.slice(t+1)}:null}var gm=class{log;listTimeoutMs;conversationPermits=new Map;async conversationReference(e,t){let n=hm(e);if(!n||t.aborted)return null;let r=this.members.get(n.name);if(!r||r.isConnected===!1||!r.conversationReference||this.conversationPermits.has(e)||this.conversationPermits.size>=10)return null;let i={};this.conversationPermits.set(e,i);let a=this.historyMembership.get(n.name),o=!0,s=this.on(t=>{(r.isConnected===!1||(t.type===`session-removed`||t.type===`conversation-changed`)&&t.sessionId===e)&&(o=!1)});try{let e=await r.conversationReference?.(n.native,t);return e&&o&&!t.aborted&&this.historyMembership.get(n.name)===a&&this.members.get(n.name)===r&&this.members.get(n.name)?.isConnected!==!1?e:null}catch{return null}finally{s(),this.conversationPermits.get(e)===i&&this.conversationPermits.delete(e)}}notificationRevision=0;async notificationFacts(e){let t=hm(e);if(!t)return;let n=this.members.get(t.name);if(!n||n.isConnected===!1)return;let r=this.notificationRevision,i=await n.notificationFacts?.(t.native);if(i&&i.sessionId===t.native&&this.members.get(t.name)===n&&r===this.notificationRevision&&this.connected().some(e=>e.name===t.name))return{...i,sessionId:e,revision:JSON.stringify([r,i.revision])}}members=new Map;labels=new Map;hostCommands=new Map;hostedLaunchers=new Map;hostedPending=0;sessionLaunchers=new Map;setupReporters=new Map;setupListeners=new Set;sessionStartups=new Map;startupWaiters=new Map;unsubs=new Map;historyMembership=new Map;historyPermits=new Map;inputCount=0;inputBytes=0;inputQueues=new Map;handlers=new Set;constructor(e,t=8e3){this.log=e,this.listTimeoutMs=t}orderedNames(){let e=new Set([...this.members.keys(),...this.sessionLaunchers.keys()]);for(let t of pm)e.delete(t);return[...pm,...[...e].sort()]}defaultLabel(e){let t=Yl.safeParse(e);return t.success?Zl[t.data]:e}catalog(){return this.orderedNames().map(e=>{let t=this.memberConnected(e);return{name:e,label:this.labels.get(e)??this.defaultLabel(e),capabilities:this.members.get(e)?.capabilities??{subscribe:!1,prompts:!1,createSession:!1,focus:!1,history:!1,absoluteLines:!1},connected:t,launchable:!t&&(this.sessionLaunchers.get(e)?.available()??!1)}})}registerHostedLauncher(e,t){let n=cu.parse(e),r=`${n.backend}:${n.host}`;if(!this.hostedLaunchers.has(r)&&this.hostedLaunchers.size>=64)throw new am(`Too many terminal launch targets`,`Disable a launch target first.`);let i={target:n,launcher:t};return this.hostedLaunchers.set(r,i),this.emit({type:`layout-changed`}),()=>{this.hostedLaunchers.get(r)===i&&(this.hostedLaunchers.delete(r),this.emit({type:`layout-changed`}))}}launchTargets(){return[...this.hostedLaunchers.values()].filter(({target:e,launcher:t})=>t.available()&&(this.memberConnected(e.backend)||this.sessionLaunchers.get(e.backend)?.available())).map(({target:e})=>({...e})).sort((e,t)=>`${e.backend}:${e.host}`.localeCompare(`${t.backend}:${t.host}`))}launchIssues(){let e=new Set(this.launchTargets().map(e=>e.backend)),t=new Map;for(let{target:n,launcher:r}of this.hostedLaunchers.values()){if(e.has(n.backend)||t.has(n.backend))continue;let i=r.unavailableReason?.();i&&t.set(n.backend,i)}return du.parse([...t].map(([e,t])=>({backend:e,reason:t})))}preferredHost(e){return _u(e,this.launchTargets())?.host}async requireShownOnComputer(e,t){if(!mm.has(e.name)&&!(e.shownOnComputer&&await dm(()=>e.shownOnComputer(t),5e3)))throw new lm(`This session is not open in a terminal window on your computer, so it cannot be split or extended from the phone.`)}async createHostedSession(e){let t=`${e.backend}:${e.host}`,n=this.hostedLaunchers.get(t);if(e.windowId!==void 0||!n?.launcher.available())throw new am(`Terminal launch target is unavailable`,`Check the selected terminal app on your computer.`);if(this.hostedPending>=8)throw new am(`Terminal startup is busy`,`Wait for the current startup to finish.`);this.hostedPending++;let r=(async()=>{if(this.hostedLaunchers.get(t)!==n)throw new om(t);let r=this.members.get(e.backend),i;if(!r||r.isConnected===!1){let t=await this.startSession(e.backend,e.initialSize);r=t.backend,i=t.sessionId}if(this.hostedLaunchers.get(t)!==n||this.members.get(e.backend)!==r)throw new om(t);let a=e.initialSize?await n.launcher.create(r,i,e.initialSize):await n.launcher.create(r,i);if(this.hostedLaunchers.get(t)!==n||this.members.get(e.backend)!==r||r.isConnected===!1)throw new om(t);return fm(e.backend,a)})().finally(()=>{this.hostedPending--});return dm(()=>r,3e4)}get capabilities(){let e=[...this.members.values()].filter(e=>e.isConnected!==!1).map(e=>e.capabilities),t=t=>e.some(e=>e[t]);return{subscribe:t(`subscribe`),prompts:t(`prompts`),createSession:t(`createSession`)||[...this.sessionLaunchers.values()].some(e=>e.available()),focus:t(`focus`),history:t(`history`),absoluteLines:e.length>0&&e.every(e=>e.absoluteLines)}}add(e,t,n){let r=ou.parse({name:e.name,label:t??this.defaultLabel(e.name),capabilities:e.capabilities,connected:!1,launchable:!1});if(!this.orderedNames().includes(e.name)&&this.orderedNames().length>=32)throw new am(`Too many terminal adapters`,`Disable an adapter before adding another.`);let i={},a=e.on(t=>{this.members.get(e.name)===e&&this.historyMembership.get(e.name)===i&&this.emit(vm(e.name,t))});if(typeof a!=`function`)throw Error(`Terminal adapter subscription is invalid`);let o=this.unsubs.get(e.name);this.labels.set(e.name,r.label),this.hostCommands.set(e.name,n??(e.name===`tmux`||e.name===`herdr`?[e.name]:[])),this.members.set(e.name,e),this.historyMembership.set(e.name,i),this.unsubs.set(e.name,a);try{o?.()}catch(t){this.log.warn(`backend subscription cleanup failed`,{backend:e.name,err:Xp(t)})}this.emit({type:`layout-changed`})}remove(e){let t=this.unsubs.get(e);this.unsubs.delete(e),this.members.delete(e),this.labels.delete(e),this.hostCommands.delete(e),this.historyMembership.delete(e);try{t?.()}catch(t){this.log.warn(`backend subscription cleanup failed`,{backend:e,err:Xp(t)})}this.emit({type:`layout-changed`})}connected(){let e=[];for(let t of this.orderedNames()){let n=this.members.get(t);n&&n.isConnected!==!1&&e.push({name:n.name,capabilities:n.capabilities})}return e}registerSessionLauncher(e,t){if(Xl.parse(e),!this.orderedNames().includes(e)&&this.orderedNames().length>=32)throw new am(`Too many terminal adapters`,`Disable an adapter before adding another.`);return this.sessionLaunchers.set(e,t),this.sessionStartups.delete(e),this.emit({type:`layout-changed`}),()=>{this.sessionLaunchers.get(e)===t&&(this.sessionLaunchers.delete(e),this.sessionStartups.delete(e),this.emit({type:`layout-changed`}))}}launchable(){return this.orderedNames().filter(e=>!this.memberConnected(e)&&this.sessionLaunchers.get(e)?.available())}async startSession(e,t){let n=this.sessionLaunchers.get(e);if(!n?.available())throw new om(`backend ${e}`);let r=this.startupWaiters.get(e)??0;if(r>=8)throw new am(`Terminal startup is busy`,`Try again after the current startup finishes.`);this.startupWaiters.set(e,r+1);try{let r=this.sessionStartups.get(e);if(!r){let i=Promise.resolve().then(()=>{if(this.sessionLaunchers.get(e)!==n)throw new om(`backend ${e}`);return t?n.start(t):n.start()}).then(e=>({...e})).finally(()=>{this.sessionStartups.get(e)===i&&this.sessionStartups.delete(e)});r=i,this.sessionStartups.set(e,i)}let i=await r;if(this.sessionLaunchers.get(e)!==n||this.members.get(e)!==i.backend||i.backend.isConnected===!1)throw new om(`backend ${e}`);let a=i.sessionId;return i.sessionId=void 0,{backend:i.backend,sessionId:a}}finally{let t=(this.startupWaiters.get(e)??1)-1;t===0?this.startupWaiters.delete(e):this.startupWaiters.set(e,t)}}member(e){return this.members.get(e)}registerSetupReporter(e,t){return this.setupReporters.set(e,t),()=>{this.setupReporters.get(e)===t&&this.setupReporters.delete(e)}}onSetupChanged(e){return this.setupListeners.add(e),()=>this.setupListeners.delete(e)}notifySetupChanged(){for(let e of this.setupListeners)try{e()}catch{}}terminalSetup(){return this.orderedNames().flatMap(e=>{let t=this.setupReporters.get(e),n=this.memberConnected(e);if(!t&&!this.members.has(e))return[];let r={};try{r=t?.(n)??{}}catch{r=n?{}:{issue:`failed`}}return[{name:e,connected:n,...r.issue?{issue:r.issue}:{},...r.issue&&r.detail?{detail:r.detail}:{}}]}).slice(0,16)}connectTerminal(e){let t=this.setupReporters.get(e)?.connect;if(!t)return!1;try{t().catch(e=>this.log.debug(`terminal connect failed`,{error:Xp(e)}))}catch(e){this.log.debug(`terminal connect failed`,{error:Xp(e)})}return!0}status(){return this.orderedNames().map(e=>({name:e,connected:this.memberConnected(e)}))}nameOf(e){return hm(e)?.name??null}capabilitiesOf(e){let t=this.nameOf(e);return t?this.members.get(t)?.capabilities??null:null}async connect(){}async close(){let e=[...this.members.values()],t=[...this.unsubs.values()];this.sessionLaunchers.clear(),this.hostedLaunchers.clear(),this.sessionStartups.clear(),this.historyMembership.clear(),this.unsubs.clear(),this.members.clear(),this.labels.clear(),this.hostCommands.clear();for(let e of t)try{e()}catch(e){this.log.warn(`backend subscription cleanup failed`,{err:Xp(e)})}await Promise.all(e.map(async e=>{try{await dm(()=>e.close(),this.listTimeoutMs)}catch(t){this.log.warn(`backend close failed`,{backend:e.name,err:Xp(t)})}}))}async listSessions(){let e=this.orderedNames().map(e=>({name:e,backend:this.members.get(e),membership:this.historyMembership.get(e)})),t=(await Promise.all(e.map(async e=>({...e,sessions:await this.safeListSessions(e.backend,e.name)})))).filter(({name:e,backend:t,membership:n})=>t&&this.members.get(e)===t&&this.historyMembership.get(e)===n),n=new Set;for(let{name:e,backend:r}of t)try{for(let e of r?.representedWindows?.()??[])n.add(JSON.stringify([e.backend,e.windowId]))}catch(t){this.log.warn(`terminal window relationships unavailable`,{backend:e,err:Xp(t)})}let r=[];for(let{name:e,backend:i,sessions:a}of t)for(let o of a){try{let r=i?.nativeWindowIdOf?.(o.id);if(r&&n.has(JSON.stringify([e,r])))continue;let a=i?.hostedProcess?.(o.id);if(a&&t.some(t=>t.name!==e&&this.memberConnected(t.name)&&this.hostCommands.get(t.name)?.includes(a)))continue}catch(t){this.log.warn(`terminal host relationship unavailable`,{backend:e,err:Xp(t)})}r.push(_m(e,o))}return r}projectFolder(e){let t=hm(e),n=t?this.members.get(t.name):void 0;if(t&&n?.projectFolder)try{return n.projectFolder(t.native)}catch(e){this.log.warn(`session project folder unavailable`,{backend:t.name,err:Xp(e)});return}}memberConnected(e){let t=this.members.get(e);return!!t&&t.isConnected!==!1}async safeListSessions(e,t){if(!e)return[];let n=this.historyMembership.get(t);try{let r=await dm(()=>e.listSessions(),this.listTimeoutMs);return this.members.get(t)!==e||this.historyMembership.get(t)!==n?[]:r}catch(e){return this.log.warn(`listSessions failed for backend; returning the other backends' sessions`,{backend:t,err:Xp(e)}),[]}}target(e){let t=hm(e),n=t?this.members.get(t.name):void 0;if(!t||!n)throw new om(e);return{backend:n,native:t.native}}async getScreen(e,t){let{backend:n,native:r}=this.target(e);return t===void 0?n.getScreen(r):n.getScreen(r,t)}async getHistory(e,t,n){let{backend:r,native:i}=this.target(e);return r.getHistory(i,t,n)}async getHistoryPage(e,t){let{backend:n,native:r}=this.target(e);if(rm(t),t.signal.aborted)return{status:`cancelled`};let i=n.getHistoryPage;if(!i)return{status:`unavailable`,reason:`unsupported`};if(this.historyPermits.has(e)||this.historyPermits.size>=10)return{status:`unavailable`,reason:`busy`};let a={};this.historyPermits.set(e,a);let o=this.historyMembership.get(n.name);try{let e=await i.call(n,r,t);return t.signal.aborted?{status:`cancelled`}:this.historyMembership.get(n.name)===o?e:{status:`reset`}}catch(e){if(t.signal.aborted)return{status:`cancelled`};if(this.historyMembership.get(n.name)!==o)return{status:`reset`};throw e}finally{this.historyPermits.get(e)===a&&this.historyPermits.delete(e)}}async sendText(e,t,n){let{backend:r,native:i}=this.target(e);return this.enqueueInput(e,r,t,()=>r.sendText(i,t),n)}async clickMouse(e,t,n){let{backend:r,native:i}=this.target(e);if(!r.capabilities.mouseClick||!r.clickMouse)throw new cm(`mouse input`);return this.enqueueInput(e,r,``,()=>r.clickMouse(i,t),n)}async sendInput(e,t,n){let{backend:r,native:i}=this.target(e);if(!r.capabilities.terminalInput||!r.sendInput)throw new cm(`terminal input`);return this.enqueueInput(e,r,t,()=>r.sendInput(i,t),n)}openVtStream(e){let{backend:t,native:n}=this.target(e);if(!t.capabilities.vtStream||!t.openVtStream)throw new cm(`vt stream`);return t.openVtStream(n)}async paste(e,t,n,r){let{backend:i,native:a}=this.target(e);if(!i.capabilities.terminalPaste||!i.paste)throw new cm(`terminal paste`);return this.enqueueInput(e,i,t,()=>i.paste(a,t,n),r)}enqueueInput(e,t,n,r,i){let a=Buffer.byteLength(n);if(this.inputCount>=256||this.inputBytes+a>1048576)return Promise.reject(new sm(`busy`));let o=this.inputQueues.get(e);if(o||(o={backend:t,membership:this.historyMembership.get(t.name),tail:Promise.resolve(),pending:0,valid:!0},this.inputQueues.set(e,o)),!o.valid||o.backend!==t)return Promise.reject(new sm(`cancelled`));let s=o;s.pending++,this.inputCount++,this.inputBytes+=a;let c=()=>this.members.get(t.name)===t&&t.isConnected!==!1&&this.historyMembership.get(t.name)===s.membership,l=s.tail.then(async()=>{if(!s.valid||i?.()===!1)throw new sm(`cancelled`);if(!c())throw new om(e);await r(),s.valid&&c()&&this.emit({type:`input-accepted`,sessionId:e})});return s.tail=l.catch(()=>{s.valid=!1}),l.finally(()=>{this.inputCount--,this.inputBytes-=a,--s.pending===0&&this.inputQueues.get(e)===s&&this.inputQueues.delete(e)})}async createSession(e){if(e.kind===`tab`&&e.host!==void 0)return this.createHostedSession(e);if(e.kind===`split`){let{backend:t,native:n}=this.target(e.sessionId),r={kind:`split`,sessionId:n,direction:e.direction};return await this.requireShownOnComputer(t,r),fm(t.name,await t.createSession(r))}let t;if(e.windowId){let n=hm(e.windowId);if(!n||n.name!==e.backend)throw new um(e.windowId);t=n.native}if(!mm.has(e.backend)){if(t===void 0){let t=this.preferredHost(e.backend);if(t===void 0)throw new lm;return this.createHostedSession({kind:`tab`,backend:e.backend,host:t,...e.initialSize?{initialSize:e.initialSize}:{}})}let n=this.members.get(e.backend);if(!n||n.isConnected===!1)throw new om(`${e.windowId}`);let r={kind:`tab`,backend:e.backend,windowId:t};return await this.requireShownOnComputer(n,r),fm(n.name,await n.createSession(r))}let n=this.members.get(e.backend);if(!n||n.isConnected===!1){if(e.windowId)throw new om(e.windowId);let t=await this.startSession(e.backend,e.initialSize);if(t.sessionId)return fm(e.backend,t.sessionId);n=t.backend}return fm(n.name,await n.createSession({kind:`tab`,backend:e.backend,windowId:t,...e.initialSize?{initialSize:e.initialSize}:{}}))}async focus(e){let{backend:t,native:n}=this.target(e);return t.focus(n)}setWatched(e){let t=new Map;for(let e of this.members.keys())t.set(e,[]);for(let n of e){let e=hm(n);e&&t.get(e.name)?.push(e.native)}for(let[e,n]of t)try{this.members.get(e)?.setWatched?.(n)}catch(t){this.log.warn(`setWatched failed for backend`,{backend:e,err:Xp(t)})}}setReported(e,t){let n=hm(e);if(n)try{this.members.get(n.name)?.setReported?.(n.native,t)}catch(e){this.log.warn(`setReported failed for backend`,{backend:n.name,err:Xp(e)})}}on(e){return this.handlers.add(e),()=>this.handlers.delete(e)}emit(e){if(e.type===`session-removed`){let t=this.inputQueues.get(e.sessionId);t&&(t.valid=!1)}for(let e of this.inputQueues.values())(e.backend.isConnected===!1||this.members.get(e.backend.name)!==e.backend)&&(e.valid=!1);[`layout-changed`,`session-added`,`session-removed`,`title-changed`].includes(e.type)&&this.notificationRevision++;for(let t of[...this.handlers])if(this.handlers.has(t))try{t(e)}catch(e){this.log.error(`backend event handler threw`,{err:Xp(e)})}}};function _m(e,t){return{...t,id:fm(e,t.id),windowId:fm(e,t.windowId),tabId:fm(e,t.tabId),backend:e}}function vm(e,t){return`sessionId`in t?{...t,sessionId:fm(e,t.sessionId)}:t}function ym(e,t){let n;try{n=new URL(e)}catch{return`must be a valid URL, e.g. wss://relay.example.com`}return e.endsWith(`/`)||/[?#]/.test(e)||n.pathname!==`/`||n.username||n.password?`relay url must be scheme://host[:port] with no path, query or credentials`:e.length>256?`relay url is too long for a pairing code (at most 256 characters)`:n.protocol===`wss:`?null:n.protocol===`ws:`?t?null:`ws:// is insecure; pass --insecure or set SHELLBELL_ALLOW_INSECURE_RELAY=1 for LAN dev`:`relay url must use wss:// (ws:// only with --insecure, for LAN dev)`}function bm(e,t,n,r){let i;if(t===`relay`){let t=ym(n,r);if(t)return{error:t};i={...e,relayUrl:n}}else if(t===`name`)i={...e,computerName:n};else if(t===`accent`){if(!wp.includes(n))return{error:`unknown accent ${n} (must be one of ${wp.join(`, `)})`};i={...e,accent:n}}else if(t===`turn`){if(n!==`on`&&n!==`off`)return{error:`turn must be on or off`};let{turn:t,...r}=e;i=n===`off`?{...r,turn:!1}:r}else if(t===`conversations`){if(n!==`on`&&n!==`off`)return{error:`conversations must be on or off`};let{showAgentConversations:t,...r}=e;i=n===`on`?{...r,showAgentConversations:!0}:r}else if(Cm(t)){if(!/^\d+$/.test(n))return{error:`${t} must be a complete decimal integer`};let r=Number(n);if(!Number.isSafeInteger(r))return{error:`${t} must be a safe decimal integer`};i={...e,[t]:r}}else return{error:`unknown key ${t} (expected ${wm()})`};let a=sp.safeParse(i);return a.success?{next:a.data}:{error:a.error.issues.map(e=>e.message).join(`; `)}}const xm=[`notifyMinCommandMs`,`idleQuietMs`,`idleMinActiveMs`],Sm=[`relay`,`name`,`accent`,...xm,`turn`,`conversations`];function Cm(e){return xm.includes(e)}function wm(){return`${Sm.slice(0,-1).join(`, `)}, or ${Sm.at(-1)}`}function Tm(e,t){switch(t){case`relay`:return e.relayUrl;case`name`:return e.computerName;case`accent`:return e.accent;case`turn`:return e.turn===!1?`off`:`on`;case`conversations`:return e.showAgentConversations===!0?`on`:`off`;default:return String(e[t])}}function Em(e){let t=sp.parse(e);return ie(`sha256`).update(JSON.stringify({v:t.v,relayUrl:t.relayUrl,computerName:t.computerName,accent:t.accent,notifyMinCommandMs:t.notifyMinCommandMs,idleQuietMs:t.idleQuietMs,idleMinActiveMs:t.idleMinActiveMs,...t.terminalPlugins?.length?{terminalPlugins:t.terminalPlugins}:{},...t.turn===!1?{turn:!1}:{},...t.showAgentConversations===!0?{showAgentConversations:!0}:{}})).digest(`hex`)}const Dm=I.object({name:Xl,connected:I.boolean()}),Om=I.array(Dm).max(32),km=I.object({pid:I.number().int().positive().max(2**53-1),agentVersion:I.string().min(1),computerFp:W,stateDir:I.string().min(1).refine(N,`state directory must be absolute`),serviceInstance:I.uuid().nullable()}),Am={controlVersion:I.literal(1),process:km,backends:Om,terminalReady:I.boolean()};function jm(e,t){(e.backends.length<pm.length||pm.some((t,n)=>e.backends[n]?.name!==t)||new Set(e.backends.map(e=>e.name)).size!==e.backends.length||e.backends.slice(pm.length).some((e,t,n)=>t>0&&e.name<n[t-1].name))&&t.addIssue({code:`custom`,path:[`backends`],message:`backend status must contain each known backend in protocol order`}),e.terminalReady!==e.backends.some(e=>e.connected)&&t.addIssue({code:`custom`,path:[`terminalReady`],message:`terminal readiness must match backend connectivity`})}const Mm=I.string().min(1).max(64),Nm=I.object({route:I.enum([`relay`,`direct`]).nullable(),ready:I.boolean(),phase:I.string().max(32),lastFailure:I.string().max(32).nullable(),relaySent:I.number().int().nonnegative(),relayReceived:I.number().int().nonnegative(),directSent:I.number().int().nonnegative(),directReceived:I.number().int().nonnegative()}),Pm=I.object({...Am,relayOnline:I.boolean(),sessions:I.number().int().nonnegative().max(2**53-1),phones:I.array(I.object({phoneFp:W,name:Mm,lastSeenAt:I.string().nullable()})).max(10),connected:I.array(I.object({phoneFp:W,name:Mm,viewed:I.string().nullable(),transport:Nm.optional()})).max(10)}).superRefine(jm);function Fm(e,t=process.env){if(!e)return null;let n=t.SHELLBELL_SERVICE_INSTANCE;if(n===void 0)return null;if(!I.uuid().safeParse(n).success)throw Error(`SHELLBELL_SERVICE_INSTANCE must be a valid UUID`);return n}function Im(e){try{return t.lstatSync(e)}catch(e){if(e.code===`ENOENT`)return;throw e}}function Lm(e,t){return e?.dev===t.dev&&e.ino===t.ino}function Rm(e){let t=process.platform===`darwin`?103:process.platform===`linux`?107:null;if(t===null)throw Error(`Unsupported control socket platform: ${process.platform}`);if(Buffer.byteLength(e)>t)throw Error(`Control socket path is too long (maximum ${t} bytes): ${e}`)}async function zm(e){return new Promise((t,n)=>{let r=ce(e),i=setTimeout(()=>a(Error(`Control socket probe timed out: ${e}`)),1e3),a=(e,a=!1)=>{clearTimeout(i),r.destroy(),e?n(e):t(a)};r.once(`connect`,()=>a(void 0,!0)),r.once(`error`,e=>{e.code===`ENOENT`||e.code===`ECONNREFUSED`?a():a(e)})})}var Bm=class{sockPath;onConnection;log;pidPath;admit;server;clients=new Set;ownedSocket;ownedPid;lifecycle=Promise.resolve();constructor(e,t,n,r,i){this.sockPath=e,this.onConnection=t,this.log=n,this.pidPath=r,this.admit=i}serialize(e){let t=this.lifecycle.then(e);return this.lifecycle=t.catch(()=>{}),t}start(){return this.serialize(async()=>{if(this.server)return;if(this.ownedSocket||this.ownedPid)throw Error(`Control endpoint cleanup pending; stop it before restarting`);Rm(this.sockPath),Rm(P(M(this.sockPath),`.s12345678`));let e=Jf(this.sockPath);try{this.admit?.(),this.checkPid();let e=Im(this.sockPath);if(e){if(!e.isSocket())throw Error(`Control socket path is not a socket: ${this.sockPath}`);if(await zm(this.sockPath))throw Error(`Control endpoint already running: ${this.sockPath}`);if(!Lm(Im(this.sockPath),e))throw Error(`Control socket changed during startup; retry`);t.unlinkSync(this.sockPath);for(let n of t.readdirSync(M(this.sockPath))){if(!/^\.s[A-Za-z0-9_-]{8}$/.test(n))continue;let r=P(M(this.sockPath),n);Lm(Im(r),e)&&t.unlinkSync(r)}}let n=await this.bind();t.chmodSync(n,384);let r=t.lstatSync(n);if(t.linkSync(n,this.sockPath),this.ownedSocket=r,this.pidPath){this.checkPid();let e=String(process.pid);Dp(this.pidPath,e),this.ownedPid={identity:t.lstatSync(this.pidPath),contents:e}}this.admit?.()}catch(e){try{this.removeOwned()}finally{await this.closeListener()}throw e}finally{e()}})}checkPid(){if(!this.pidPath)return;let e=Im(this.pidPath);if(!e)return;if(!e.isFile())throw Error(`PID path must be a regular file: ${this.pidPath}`);let n=Wf(t.readFileSync(this.pidPath,`utf8`).trim());if(n===null)throw Error(`Invalid PID file; inspect ${this.pidPath} before retrying`);if(Gf(n))throw Error(`shellbell is already running (pid ${n})`)}async bind(){for(let e=0;e<8;e++){let e=P(M(this.sockPath),`.s${oe(6).toString(`base64url`)}`),t=le(e=>{this.clients.add(e),e.once(`close`,()=>this.clients.delete(e)),e.on(`error`,()=>{}),this.onConnection(e)});this.server=t;try{return await new Promise((n,r)=>{t.once(`error`,r);let i=process.umask(127);try{t.listen(e,()=>{t.removeListener(`error`,r),n()})}finally{process.umask(i)}}),e}catch(e){if(await this.closeListener(),e.code!==`EADDRINUSE`)throw e}}throw Error(`Control endpoint private socket names are in use after eight attempts`)}removeOwned(){if(this.ownedSocket&&=(Lm(Im(this.sockPath),this.ownedSocket)&&t.unlinkSync(this.sockPath),void 0),this.pidPath&&this.ownedPid){let e=Im(this.pidPath);e?.isFile()&&Lm(e,this.ownedPid.identity)&&t.readFileSync(this.pidPath,`utf8`)===this.ownedPid.contents&&t.unlinkSync(this.pidPath),this.ownedPid=void 0}}async closeListener(){for(let e of this.clients)e.destroy();this.clients.clear();let e=this.server;this.server=void 0,e&&await new Promise((t,n)=>e.close(e=>{e&&e.code!==`ERR_SERVER_NOT_RUNNING`?n(e):t()}))}stop(){return this.serialize(async()=>{let e;try{(this.ownedSocket||this.ownedPid)&&(e=Jf(this.sockPath),this.removeOwned())}catch(e){throw this.log.warn(`Control endpoint cleanup failed; shared paths retained for retry`,{error:Xp(e)}),e}finally{try{await this.closeListener()}finally{e?.()}}})}};const Vm={lineBytes:65536,queuedBytes:262144,connections:16,initialRequestMs:5e3,requestMs:5e3,challengeMs:6e4};function Hm(e){let t;try{t=JSON.stringify(e)}catch{return null}if(t===void 0)return null;let n=new TextEncoder().encode(`${t}\n`);return n.byteLength-1<=Vm.lineBytes?n:null}function Um(e,t){let n=e.writableLength;if(e.destroyed||!Number.isFinite(n)||n<0||n+t.byteLength>Vm.queuedBytes)return e.destroy(),!1;try{return e.write(t),!0}catch{return e.destroy(),!1}}var Wm=class{onLine;onError;maxBytes;chunks=[];bytes=0;terminal=!1;constructor(e){this.onLine=e.onLine,this.onError=e.onError;let t=e.maxBytes??Vm.lineBytes;this.maxBytes=Number.isFinite(t)?Math.max(0,Math.min(t,Vm.lineBytes)):Vm.lineBytes}push(e){if(this.terminal||e.byteLength===0)return;let t=0;for(;t<e.byteLength&&!this.terminal;){let n=e.indexOf(10,t),r=n===-1?e.byteLength:n,i=r-t;if(this.bytes+i>this.maxBytes){this.fail(`line-too-large`);return}if(i>0&&(this.chunks.push(Uint8Array.from(e.subarray(t,r))),this.bytes+=i),n===-1)return;let a=this.decodeLine();if(a===null)return;this.reset(),this.onLine(a),t=n+1}}finish(){this.terminal||(this.bytes>0?this.fail(`incomplete-line`):(this.terminal=!0,this.reset()))}decodeLine(){let e=new Uint8Array(this.bytes),t=0;for(let n of this.chunks)e.set(n,t),t+=n.byteLength;try{return new TextDecoder(`utf-8`,{fatal:!0,ignoreBOM:!0}).decode(e)}catch{return this.fail(`invalid-utf8`),null}}fail(e){this.terminal||(this.terminal=!0,this.reset(),this.onError(e))}reset(){this.chunks=[],this.bytes=0}};const Gm=I.number().int().positive().max(2**53-1),Km=I.string().regex(/^[A-Za-z0-9_-]{22}$/),qm=I.string().min(1).max(64),Jm=I.object({pid:Gm,agentVersion:I.string().min(1),computerFp:W,stateDir:I.string().min(1).refine(N,`state directory must be absolute`),serviceInstance:I.uuid().nullable()}).strict(),Ym=I.object({name:Xl,connected:I.boolean()}).strict(),Xm=I.object({phoneFp:W,name:qm,lastSeenAt:I.string().nullable()}).strict(),Zm=I.object({phoneFp:W,name:qm,viewed:I.string().nullable(),transport:Nm.strict().optional()}).strict(),Qm=I.object({controlVersion:I.literal(1),process:Jm,backends:I.array(Ym),terminalReady:I.boolean(),relayOnline:I.boolean(),sessions:I.number().int().nonnegative().max(2**53-1),phones:I.array(Xm).max(10),connected:I.array(Zm).max(10)}).strict().superRefine((e,t)=>{Pm.safeParse(e).success||t.addIssue({code:`custom`,message:`status must satisfy LocalStatus semantics`})}),$m=I.object({}).strict(),eh=I.object({version:I.literal(2),runtime:Jm,capabilities:I.tuple([I.literal(`status`),I.literal(`devices`),I.literal(`pairing`),I.literal(`revoke`)])}).strict(),th=I.array(Xm).max(10),nh=I.object({removed:I.boolean()}).strict(),rh=I.object({flowId:Km,qrText:I.string().min(1).refine(e=>new TextEncoder().encode(e).byteLength<=Vm.lineBytes),expiresAt:Gm}).strict(),ih={hello:eh,status:Qm,"status.config":I.object({revision:I.string().regex(/^[0-9a-f]{64}$/)}).strict(),"settings.conversations.apply":I.object({revision:I.string().regex(/^[0-9a-f]{64}$/)}).strict(),devices:th,"devices.revoke":nh,"pairing.open":rh,"pairing.close":$m,"pairing.confirm":$m,terminals:I.object({terminals:mu}).strict(),"terminals.connect":I.object({started:I.boolean(),terminals:mu}).strict()},ah={v:I.literal(2),id:Gm},oh={...ah,expect:Jm},sh=I.discriminatedUnion(`cmd`,[I.object({...oh,cmd:I.literal(`settings.conversations.apply`),args:I.object({revision:I.string().regex(/^[0-9a-f]{64}$/)}).strict()}).strict(),I.object({...ah,cmd:I.literal(`hello`)}).strict(),I.object({...ah,cmd:I.literal(`status`)}).strict(),I.object({...ah,cmd:I.literal(`status.config`)}).strict(),I.object({...ah,cmd:I.literal(`devices`)}).strict(),I.object({...ah,cmd:I.literal(`terminals`)}).strict(),I.object({...oh,cmd:I.literal(`terminals.connect`),args:I.object({name:Xl}).strict()}).strict(),I.object({...oh,cmd:I.literal(`devices.revoke`),args:I.object({phoneFp:W}).strict()}).strict(),I.object({...oh,cmd:I.literal(`pairing.open`)}).strict(),I.object({...oh,cmd:I.literal(`pairing.close`),args:I.object({flowId:Km}).strict()}).strict(),I.object({...oh,cmd:I.literal(`pairing.confirm`),args:I.object({flowId:Km,challengeId:Km,phoneFp:W,accept:I.boolean()}).strict()}).strict()]),ch=I.enum([`bad-request`,`unsupported-version`,`handshake-required`,`runtime-mismatch`,`configuration-mismatch`,`pairing-busy`,`stale-flow`,`stale-challenge`,`response-too-large`,`operation-failed`]),lh=I.object({v:I.literal(2),id:Gm,ok:I.literal(!0),data:I.unknown()}).strict().refine(e=>Object.hasOwn(e,`data`)),uh=I.object({v:I.literal(2),id:Gm,ok:I.literal(!1),error:I.object({code:ch}).strict()}).strict(),dh=I.union([lh,uh]),fh=I.object({v:I.literal(2),event:I.literal(`pairing.request`),flowId:Km,challengeId:Km,phoneFp:W,name:qm}).strict(),ph=I.object({v:I.literal(2),event:I.literal(`pairing.closed`),flowId:Km}).strict(),mh=I.discriminatedUnion(`event`,[fh,ph]),hh=[`status`,`devices`,`pairing`,`revoke`];function gh(e,t){return e.pid===t.pid&&e.agentVersion===t.agentVersion&&e.computerFp===t.computerFp&&e.stateDir===t.stateDir&&e.serviceInstance===t.serviceInstance}function _h(e){if(!e||typeof e!=`object`)return;let t=e.id;return typeof t==`number`&&Number.isSafeInteger(t)&&t>0?t:void 0}var vh=class{agent;log;peers=new Set;owner;stopped=!1;newId;constructor(e,t,n){this.agent=e,this.log=t,this.newId=n?.newId??(()=>oe(16).toString(`base64url`))}get hasPairOwner(){return this.owner!==void 0}accept(e){let t=new yh(this,e,this.agent);return this.stopped?t.close():this.peers.add(t),t}confirm(e,t){let n=this.owner;if(!n||n.resolve||this.stopped)return Promise.resolve(!1);let r=this.newId();return new Promise(i=>{if(this.owner!==n)return i(!1);n.resolve=i,n.challengeId=r,n.phoneFp=e,n.name=t,n.opening||this.emitRequest(n,t)})}activate(e,t){let n=this.owner;n&&n.peer===e&&n.flowId===t&&(n.opening=!1,n.resolve&&n.phoneFp&&n.challengeId&&this.emitRequest(n,n.name??``))}emitRequest(e,t){if(!e.resolve||!e.challengeId||!e.phoneFp)return;let n=e.resolve,r=Math.max(0,(e.expiresAt??Date.now())-Date.now());e.timer=setTimeout(()=>{this.owner===e&&e.resolve===n&&(e.resolve=void 0,e.challengeId=void 0,e.phoneFp=void 0,n(!1))},Math.min(Vm.challengeMs,r)),e.timer.unref(),e.peer.event({v:2,event:`pairing.request`,flowId:e.flowId,challengeId:e.challengeId,phoneFp:e.phoneFp,name:t})||this.clearOwner(e,!1,!0)}notifyClosed(){let e=this.owner;e&&(this.clearOwner(e,!1,!1),e.peer.event({v:2,event:`pairing.closed`,flowId:e.flowId}))}stop(){this.stopped=!0;let e=this.owner;e&&this.clearOwner(e,!0,!1);for(let e of this.peers)e.close();this.peers.clear()}removed(e){this.peers.delete(e);let t=this.owner;t?.peer===e&&this.clearOwner(t,!0,!1)}open(e){if(this.owner||this.agent.pairingOpen)return`pairing-busy`;try{let t=this.newId(),n={peer:e,flowId:t,opening:!0};this.owner=n;let r=this.agent.openPairing();return this.owner!==n||!this.agent.pairingOpen?(this.clearOwner(n,!0,!1),`operation-failed`):(n.expiresAt=r.expiresAt,{flowId:t,...r})}catch{let t=this.owner;return t?.peer===e&&this.clearOwner(t,!0,!1),`operation-failed`}}close(e,t){let n=this.owner;if(!n||n.peer!==e||n.flowId!==t)return`stale-flow`;this.clearOwner(n,!0,!1)}answer(e,t){let n=this.owner;if(!n||n.peer!==e||n.flowId!==t.args.flowId)return`stale-flow`;if(n.expiresAt===void 0||Date.now()>=n.expiresAt)return this.clearOwner(n,!0,!0),`stale-flow`;if(!n.resolve||n.challengeId!==t.args.challengeId||n.phoneFp!==t.args.phoneFp)return`stale-challenge`;let r=n.resolve;n.timer&&clearTimeout(n.timer),n.timer=void 0,n.resolve=void 0,n.challengeId=void 0,n.phoneFp=void 0,n.name=void 0,r(t.args.accept)}clearOwner(e,t,n){if(this.owner!==e)return;this.owner=void 0;let r=e.resolve;if(e.timer&&clearTimeout(e.timer),e.timer=void 0,e.resolve=void 0,e.challengeId=void 0,e.phoneFp=void 0,e.name=void 0,r?.(!1),t)try{this.agent.closePairing()}catch{this.log.warn(`native pairing close failed`)}n&&e.peer.event({v:2,event:`pairing.closed`,flowId:e.flowId})}},yh=class{hub;socket;agent;helloRuntime;lastId=0;closed=!1;constructor(e,t,n){this.hub=e,this.socket=t,this.agent=n}get handshaken(){return this.helloRuntime!==void 0}close(){this.closed||(this.closed=!0,this.hub.removed(this),this.socket.destroy())}handle(e){if(this.closed||this.socket.destroyed)return;let t=_h(e);if(this.handshaken&&t!==void 0){if(t<=this.lastId){this.close();return}this.lastId=t}if(e&&typeof e==`object`&&e.v!==2){t!==void 0&&this.failure(t,`unsupported-version`),this.close();return}let n=sh.safeParse(e);if(!n.success){t===void 0?this.close():this.failure(t,`bad-request`);return}let r=n.data;if(!this.handshaken){if(r.id!==1||r.cmd!==`hello`){this.close();return}this.lastId=1,this.helloRuntime={...this.runtime()},this.success(r,{version:2,runtime:this.helloRuntime,capabilities:hh});return}if(r.cmd===`hello`){this.close();return}let i=this.helloRuntime,a=this.runtime();if(`expect`in r&&(!i||!gh(r.expect,i)||!gh(r.expect,a))){this.failure(r.id,`runtime-mismatch`);return}switch(r.cmd){case`status`:this.success(r,this.status());return;case`status.config`:this.success(r,{revision:this.agent.configurationRevision});return;case`settings.conversations.apply`:try{let e=this.agent.applyConversationSetting(r.args.revision);e===null?this.failure(r.id,`configuration-mismatch`):this.success(r,{revision:e})}catch{this.failure(r.id,`operation-failed`)}return;case`devices`:this.success(r,this.devices());return;case`devices.revoke`:try{this.success(r,{removed:this.agent.unpairExact(r.args.phoneFp)})}catch{this.failure(r.id,`operation-failed`)}return;case`terminals`:this.success(r,{terminals:this.agent.terminalSetup()});return;case`terminals.connect`:{let e=this.agent.connectTerminal(r.args.name);this.success(r,{started:e,terminals:this.agent.terminalSetup()});return}case`pairing.open`:{let e=this.hub.open(this);typeof e==`string`?this.failure(r.id,e):this.success(r,e)?this.hub.activate(this,e.flowId):this.hub.close(this,e.flowId);return}case`pairing.close`:{let e=this.hub.close(this,r.args.flowId);e?this.failure(r.id,e):this.success(r,{})&&this.event({v:2,event:`pairing.closed`,flowId:r.args.flowId});return}case`pairing.confirm`:{let e=this.hub.answer(this,r);e?this.failure(r.id,e):this.success(r,{});return}}}event(e){return mh.safeParse(e).success?this.write(e):!1}runtime(){return this.agent.localStatus.process}status(){let e=this.agent;return{...e.localStatus,relayOnline:e.relayOnline,sessions:e.sessionList.length,phones:this.devices(),connected:e.connectedPhones}}devices(){return this.agent.pairingList.map(e=>({phoneFp:e.phoneFp,name:e.name,lastSeenAt:e.lastSeenAt}))}success(e,t){if(!ih[e.cmd].safeParse(t).success)return this.failure(e.id,`operation-failed`),!1;let n={v:2,id:e.id,ok:!0,data:t};if(!dh.safeParse(n).success)return this.failure(e.id,`operation-failed`),!1;let r=Hm(n);return r?this.writeFrame(r):(this.failure(e.id,`response-too-large`),!1)}failure(e,t){let n={v:2,id:e,ok:!1,error:{code:t}};return dh.safeParse(n).success?this.write(n):!1}write(e){let t=Hm(e);return t?this.writeFrame(t):!1}writeFrame(e){return Um(this.socket,e)?!0:(this.close(),!1)}};const bh={unavailable:`Local control unavailable`,"upgrade-required":`Local control upgrade required`,"protocol-error":`Local control protocol error`,timeout:`Local control timed out`,"delivery-unknown":`Local control mutation outcome unknown`,busy:`Local control request already pending`,closed:`Local control closed`,"server-error":`Local control server rejected request`},xh=new Set([`hello`,`status`,`status.config`,`devices`,`terminals`]);var Q=class extends Error{code;serverCode;constructor(e,t){super(bh[e]),this.code=e,this.serverCode=t,this.name=`ControlV2ClientError`}};function Sh(e,t={}){return new Promise((n,r)=>{let i;try{i=(t.connector??ce)(e)}catch{r(new Q(`unavailable`));return}let a=!1,o=!1,s=!1,c=0,l,u,d,f=setTimeout(()=>p(new Q(`timeout`)),Vm.requestMs);function p(e){if(a)return;a=!0,clearTimeout(f);let n=l;l=void 0,d=void 0,n&&(clearTimeout(n.timer),n.reject(n.mutation&&n.attempted?new Q(`delivery-unknown`):e)),o||r(e),i.destroy(),t.onDisconnect?.(e)}function m(e,t){if(a)return Promise.reject(new Q(`closed`));if(l)return Promise.reject(new Q(`busy`));if(c===2**53-1)return p(new Q(`protocol-error`)),Promise.reject(new Q(`protocol-error`));let n=!xh.has(e),r=sh.safeParse({v:2,id:c+1,cmd:e,...n?{expect:u}:{},...t===void 0?{}:{args:t}});if(!r.success)return Promise.reject(new Q(`protocol-error`));let o=Hm(r.data);if(o===null)return Promise.reject(new Q(`protocol-error`));let s=i.writableLength;return i.destroyed||!Number.isFinite(s)||s<0||s+o.byteLength>Vm.queuedBytes?(p(new Q(`unavailable`)),Promise.reject(new Q(`unavailable`))):(c++,new Promise((t,r)=>{let a={id:c,command:e,mutation:n,attempted:!1,resolve:e=>t(e),reject:r,timer:setTimeout(()=>p(new Q(`timeout`)),Vm.requestMs)};l=a,a.attempted=!0,Um(i,o)||p(new Q(`unavailable`))}))}let h=new Wm({onError:()=>p(new Q(`protocol-error`)),onLine:e=>{if(a)return;let n;try{n=JSON.parse(e)}catch{p(new Q(`protocol-error`));return}if(typeof n==`object`&&n&&`event`in n){let e=mh.safeParse(n);if(!e.success){p(new Q(`protocol-error`));return}let r=e.data;if(r.event===`pairing.closed`&&r.flowId!==d)return;if(r.flowId!==d){p(new Q(`protocol-error`));return}r.event===`pairing.closed`?(d=void 0,t.onPairingClosed?.(r)):t.onPairingRequest?.(r);return}let r=l;if(r?.command===`hello`&&typeof n==`object`&&n&&!(`v`in n)&&`ok`in n&&typeof n.ok==`boolean`){p(new Q(`upgrade-required`));return}let i=dh.safeParse(n);if(!i.success||!r||i.data.id!==r.id){p(new Q(`protocol-error`));return}if(!i.data.ok){clearTimeout(r.timer),l=void 0;let e=new Q(`server-error`,i.data.error.code);r.reject(e),r.command===`hello`&&p(e);return}let o=ih[r.command].safeParse(i.data.data);if(!o.success){p(new Q(`protocol-error`));return}r.command===`pairing.open`&&(d=o.data.flowId),clearTimeout(r.timer),l=void 0,r.resolve(o.data)}});i.on(`data`,e=>h.push(e)),i.on(`error`,()=>p(new Q(`unavailable`)));let g=()=>{h.finish(),p(new Q(`unavailable`))};i.once(`end`,g),i.once(`close`,g);let _=()=>{a||s||(s=!0,clearTimeout(f),m(`hello`).then(e=>{a||(u={...e.runtime},o=!0,n({runtime:{...e.runtime},status:()=>m(`status`),applyConversationSetting:async e=>{try{return(await m(`settings.conversations.apply`,{revision:e})).revision}catch(e){if(e instanceof Q&&e.code===`server-error`&&e.serverCode===`bad-request`)return null;throw e}},configurationRevision:async()=>{try{return(await m(`status.config`)).revision}catch(e){if(e instanceof Q&&e.code===`server-error`&&e.serverCode===`bad-request`)return null;throw e}},devices:()=>m(`devices`),terminals:async()=>{try{return(await m(`terminals`)).terminals}catch(e){if(Ch(e))return null;throw e}},connectTerminal:async e=>{try{return await m(`terminals.connect`,{name:e})}catch(e){if(Ch(e))return null;throw e}},revoke:e=>m(`devices.revoke`,{phoneFp:e}),openPairing:()=>m(`pairing.open`),closePairing:async e=>{await m(`pairing.close`,{flowId:e})},confirm:async(e,t,n,r)=>{await m(`pairing.confirm`,{flowId:e,challengeId:t,phoneFp:n,accept:r})},close:()=>p(new Q(`closed`))}))},e=>p(e)))};i.once(`connect`,_),i.connecting||_()})}function Ch(e){return e instanceof Q&&e.code===`server-error`&&e.serverCode===`bad-request`}var wh=class{agent;log;admission;pairingMode;endpoint;pending=new Map;pairClients=new Set;controlSockets=new Set;v2;pairingConfirm=(e,t)=>new Promise(n=>{if(this.pending.has(e)){this.log.warn(`pairing confirm requested twice for the same phone; declining the newer one`,{phone:e.slice(0,8)}),n(!1);return}let r=setTimeout(()=>{this.pending.delete(e),n(!1)},6e4);this.pending.set(e,t=>{clearTimeout(r),this.pending.delete(e),n(t)});for(let n of this.pairClients)this.writeLegacy(n,{event:`request`,phoneFp:e,name:t})||this.pairClients.delete(n)});constructor(e,t,n,r,i,a,o=`terminal`){this.agent=t,this.log=n,this.admission=a,this.pairingMode=o,this.endpoint=new Bm(e,e=>this.handle(e),n,r,i),this.v2=new vh(t,n)}get hasPairClients(){return this.pairClients.size>0}get hasNativePairOwner(){return this.v2.hasPairOwner}nativePairingConfirm=(e,t)=>this.v2.confirm(e,t);notifyClosed(){for(let e of this.pending.values())e(!1);this.pending.clear();for(let e of this.pairClients)this.writeLegacy(e,{event:`closed`})||this.pairClients.delete(e);this.pairClients.clear(),this.v2.notifyClosed()}async start(){this.admission?await this.admission(()=>this.endpoint.start()):await this.endpoint.start()}async stop(){for(let e of this.pending.values())e(!1);for(let e of this.controlSockets)e.destroy();this.controlSockets.clear();for(let e of this.pairClients)e.destroy();this.pairClients.clear(),this.v2.stop(),await this.endpoint.stop()}handle(e){if(this.controlSockets.size>=Vm.connections){e.destroy();return}this.controlSockets.add(e);let t=!0,n,r,i=setTimeout(()=>e.destroy(),Vm.initialRequestMs),a=new Wm({onLine:a=>{if(e.destroyed)return;let o;try{o=JSON.parse(a)}catch{if(n===`v2`){e.destroy();return}this.writeLegacy(e,{ok:!1,error:`bad json`});return}if(n===`v2`){r?.handle(o),t&&r?.handshaken&&(t=!1,clearTimeout(i));return}if(n===void 0&&o&&typeof o==`object`&&Object.hasOwn(o,`v`)){n=`v2`,r=this.v2.accept(e),r.handle(o),r.handshaken&&(t=!1,clearTimeout(i));return}if(n===`legacy`&&o&&typeof o==`object`&&Object.hasOwn(o,`v`)){e.destroy();return}n=`legacy`;let s=o;if(!s||typeof s!=`object`||typeof s.cmd!=`string`){this.writeLegacy(e,{ok:!1,error:`bad request`});return}t&&(t=!1,clearTimeout(i));try{let t=this.dispatch(s,e);this.writeLegacy(e,{ok:!0,data:t})}catch(t){this.writeLegacy(e,{ok:!1,error:t.message})}},onError:()=>e.destroy()});e.on(`data`,e=>a.push(new Uint8Array(e))),e.once(`end`,()=>a.finish()),e.once(`close`,()=>{clearTimeout(i),this.controlSockets.delete(e),this.pairClients.delete(e),r?.close()}),e.on(`error`,()=>this.log.debug(`control socket error`))}writeLegacy(e,t){let n=Hm(t);if(n&&Um(e,n))return!0;let r=Hm({ok:!1,error:`response too large`});return r!==null&&Um(e,r)}dispatch(e,t){let n=this.agent;if(this.pairingMode===`native`&&[`pair-open`,`pair-close`,`confirm`].includes(e.cmd))throw Error(`pairing is managed by the Shellbell app`);if(this.v2.hasPairOwner&&[`pair-open`,`pair-close`,`confirm`].includes(e.cmd))throw Error(`native pairing active`);switch(e.cmd){case`status`:return{...n.localStatus,relayOnline:n.relayOnline,sessions:n.sessionList.length,phones:n.pairingList.map(e=>({phoneFp:e.phoneFp,name:e.name,lastSeenAt:e.lastSeenAt})),connected:n.connectedPhones};case`devices`:return n.pairingList.map(e=>({phoneFp:e.phoneFp,name:e.name,lastSeenAt:e.lastSeenAt}));case`unpair`:return{removed:n.unpair(String(e.args?.target??``))};case`pair-open`:{let e=n.openPairing();return this.pairClients.add(t),e}case`pair-close`:return n.closePairing(),{};case`confirm`:{let t=String(e.args?.phoneFp??``),n=this.pending.get(t);if(!n)throw Error(`no pending request`);return n(!!e.args?.accept),{}}default:throw Error(`unknown command: ${e.cmd}`)}}};function Th(e,t,n,r){return new Promise((i,a)=>{let o=Hm({cmd:t,args:n});if(!o){a(Error(`control socket request too large`));return}let s=!1,c=ce(e),l=r?.timeoutMs??5e3,u=e=>{s||(s=!0,clearTimeout(d),c.destroy(),e())},d=setTimeout(()=>u(()=>a(Error(`control socket timed out`))),l),f=new Wm({maxBytes:r?.maxResponseBytes,onError:e=>u(()=>a(Error(e===`line-too-large`?`control socket response too large`:`control socket sent a malformed response`))),onLine:e=>{f.finish(),u(()=>{let t;try{if(t=JSON.parse(e),typeof t!=`object`||!t||typeof t.ok!=`boolean`)throw Error()}catch{a(Error(`control socket sent a malformed response`));return}t.ok?i(t.data):a(Error(t.error??`control error`))})}});c.on(`error`,e=>u(()=>a(e))),c.once(`connect`,()=>{Um(c,o)||u(()=>a(Error(`control socket write failed`)))}),c.once(`close`,()=>u(()=>a(Error(`control socket closed without a response`)))),c.once(`end`,()=>u(()=>a(Error(`control socket closed without a response`)))),c.on(`data`,e=>{s||f.push(new Uint8Array(e))}),c.once(`end`,()=>f.finish())})}function Eh(e,t){let n=ce(e),r=!1,i,a=()=>{r||(r=!0,i?.finish(),n.end())};n.on(`error`,t.onError);let o=Hm({cmd:`pair-open`});return n.once(`connect`,()=>{(o===null||!Um(n,o))&&t.onError(Error(`control socket write failed`))}),i=new Wm({onError:()=>{n.destroy(),t.onError(Error(`control socket sent a malformed message`))},onLine:e=>{if(r)return;let i;try{i=JSON.parse(e)}catch{t.onError(Error(`control socket sent a malformed message`));return}i.event===`request`&&i.phoneFp?t.onRequest(i.phoneFp,i.name??``).then(e=>{if(r)return;let t=Hm({cmd:`confirm`,args:{phoneFp:i.phoneFp,accept:e}});if(t===null||!Um(n,t))throw Error(`control socket write failed`)}).catch(e=>t.onError(e)):i.event===`closed`?t.onClose():i.ok&&i.data?.qrText?t.onOpen(i.data.qrText,i.data.expiresAt):i.ok===!1&&t.onError(Error(i.error??`control error`))}}),n.on(`data`,e=>i.push(new Uint8Array(e))),n.once(`end`,()=>{r=!0,i?.finish()}),n.once(`close`,()=>{r=!0,i?.finish()}),{close:a}}function Dh(e){if(e.linuxHost)return xp(e);let t;try{t=g(e.identity,`utf8`)}catch(t){if(t.code===`ENOENT`)return null;throw Error(`shellbell: cannot read identity at ${e.identity}`)}try{let e=nc(JSON.parse(t));return{identity:e,fp:rc(e.ed25519.pub)}}catch{throw Error(`shellbell: invalid identity at ${e.identity}`)}}function Oh(e){if(e.linuxHost)return xp(e);Ep(e);let t;return s(e.identity)?t=kh(e):(t=Qs(),kp(e.identity,`${JSON.stringify(tc(t),null,2)}\n`)||(t=kh(e))),{identity:t,fp:rc(t.ed25519.pub)}}function kh(e){try{return nc(Mp(e.identity))}catch(t){throw Error(`shellbell: invalid identity at ${e.identity}: ${t.message}`)}}const Ah=[`dev.bilalahmad.shellbell`,`dev.bilalahmad.shellbell.host.agent`,`dev.bilalahmad.shellbell.host.manual`];async function jh(e,t,n){if(!Number.isSafeInteger(t)||t<0)throw Error(`Invalid service UID`);let r=()=>Error(`Legacy Shellbell installation requires migration before starting the new service; preserve identity and remove old registrations explicitly.`);if(n)for(let e of Ah){try{p(P(n,`Library`,`LaunchAgents`,`${e}.plist`))}catch(e){if(e.code===`ENOENT`)continue;throw e}throw r()}for(let n of[...Ah.map(e=>`gui/${t}/${e}`),`system/dev.bilalahmad.shellbell.power`]){let t=await e(`/bin/launchctl`,[`print`,n],{timeoutMs:5e3,maxOutputBytes:65536,captureOutput:!1});if(t.exitCode===0)throw r();if(t.exitCode!==113)throw Error(`Could not verify legacy Shellbell registration absence`)}}const Mh=(t,n,r)=>new Promise((i,a)=>{let o=e(t,n,{shell:!1,stdio:[`pipe`,`pipe`,`pipe`]}),s=0,c=0,l=[],u=!1,d=e=>{u||(u=!0,clearTimeout(f),o.kill(),a(e))},f=setTimeout(()=>d(Error(`${t} timed out`)),r.timeoutMs);o.stdout.on(`data`,e=>{if(s+=e.length,s>r.maxOutputBytes)return d(Error(`${t} output limit exceeded`));r.captureOutput&&l.push(e)}),o.stderr.on(`data`,e=>{c+=e.length,c>r.maxOutputBytes&&d(Error(`${t} output limit exceeded`))}),o.on(`error`,d),o.on(`close`,(e,n)=>{if(!u){if(u=!0,clearTimeout(f),n||e===null)return a(Error(`${t} terminated by signal`));i({exitCode:e,stdout:r.captureOutput?Buffer.concat(l):Buffer.alloc(0)})}}),o.stdin.on(`error`,d),o.stdin.end(r.input)}),Nh=[`/opt/homebrew/bin`,`/usr/local/bin`,`/usr/bin`,`/bin`],Ph=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;function Fh(e){for(let t of e){let e=t.codePointAt(0);if(!(e===9||e===10||e===13||e>=32&&e<=55295||e>=57344&&e<=65533||e>=65536&&e<=1114111))throw Error(`invalid XML character in service definition`)}}function Ih(e,t){if(!e||!N(e))throw Error(`${t} must be an absolute path`);return Fh(e),e}function Lh(e){if(Ih(e.stateDir,`stateDir`),Ih(e.nodePath,`nodePath`),!Ph.test(e.serviceInstance))throw Error(`serviceInstance must be a UUID`);let t=[M(e.nodePath),...e.env.PATH?.split(`:`)??[],...Nh].filter(e=>e.length>0&&N(e)),n={SHELLBELL_DIR:e.stateDir,SHELLBELL_SERVICE_INSTANCE:e.serviceInstance,PATH:[...new Set(t)].join(`:`)};for(let t of[`HERDR_SOCKET_PATH`,`XDG_CONFIG_HOME`]){let r=e.env[t];r&&(n[t]=Ih(r,t))}for(let e of Object.values(n))Fh(e);return n}const Rh=`sh.bilal.shellbell`;P(D(),`Library`,`LaunchAgents`,`${Rh}.plist`);const zh=1048576,Bh=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i,Vh=new Set([`SHELLBELL_DIR`,`SHELLBELL_SERVICE_INSTANCE`,`PATH`,`HERDR_SOCKET_PATH`,`XDG_CONFIG_HOME`]),Hh=new Set([`Label`,`ProgramArguments`,`EnvironmentVariables`,`RunAtLoad`,`KeepAlive`,`StandardOutPath`,`StandardErrorPath`]);function Uh(e){return Fh(e),e.replace(/&/g,`&amp;`).replace(/</g,`&lt;`).replace(/>/g,`&gt;`).replace(/"/g,`&quot;`).replace(/'/g,`&apos;`)}function Wh(e){let t=Uh,n=e.environment??{PATH:`/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin`},r=Object.entries(n).map(([e,n])=>`<key>${t(e)}</key><string>${t(n)}</string>`).join(``);return`<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0"><dict>
   <key>Label</key><string>${Rh}</string>