tailii-host 0.1.0

package/dist/mdnsAdvertiser.d.ts

@@ -0,0 +1,46 @@
+export interface DgramLikeSocket {
+    bind(port: number, address: string, callback?: () => void): void;
+    on(event: "message", listener: (message: Buffer, remote: unknown) => void): this;
+    on(event: "error", listener: (error: Error) => void): this;
+    send(message: Buffer, port: number, address: string): void;
+    addMembership(multicastAddress: string): void;
+    setMulticastTTL(ttl: number): void;
+    setMulticastLoopback(flag: boolean): void;
+    dropMembership?(multicastAddress: string): void;
+    close(): void;
+}
+export interface MdnsAdvertiseOptions {
+    instanceName: string;
+    hostname: string;
+    ipv4: string;
+    port: number;
+    txt?: string[];
+    ttlSeconds?: number;
+    socketFactory?: () => DgramLikeSocket;
+}
+export interface MdnsHandle {
+    stop(): void;
+}
+export interface DnsQuestion {
+    name: string;
+    type: number;
+    classCode: number;
+}
+export interface DnsResourceRecord {
+    name: string;
+    type: number;
+    classCode: number;
+    ttlSeconds: number;
+    rdata: Buffer;
+}
+export declare function startMdnsAdvertising(opts: MdnsAdvertiseOptions): MdnsHandle;
+export declare function encodeName(name: string): Buffer;
+export declare function encodeResourceRecord(record: DnsResourceRecord): Buffer;
+export declare function buildResponsePacket(records: DnsResourceRecord[]): Buffer;
+export declare function parseQuery(packet: Buffer): {
+    questions: DnsQuestion[];
+} | null;
+export declare function ptrRdata(instanceFqdn: string): Buffer;
+export declare function srvRdata(port: number, targetFqdn: string): Buffer;
+export declare function txtRdata(txt: string[]): Buffer;
+export declare function aRdata(ipv4: string): Buffer;

package/dist/mdnsAdvertiser.js

@@ -0,0 +1,268 @@
+// mdnsAdvertiser.ts
+// pocketclaude (TS host) — zero-dependency mDNS/DNS-SD responder for setup --code discovery.
+import * as dgram from "node:dgram";
+const MDNS_ADDRESS = "224.0.0.251";
+const MDNS_PORT = 5353;
+const SERVICE_TYPE = "_pocketclaude-pair._tcp.local.";
+const TYPE_A = 1;
+const TYPE_PTR = 12;
+const TYPE_TXT = 16;
+const TYPE_SRV = 33;
+const TYPE_ANY = 255;
+const CLASS_IN = 1;
+const CLASS_CACHE_FLUSH_IN = 0x8001;
+const RESPONSE_FLAGS = 0x8400;
+const DEFAULT_TTL_SECONDS = 120;
+export function startMdnsAdvertising(opts) {
+    const names = makeNames(opts);
+    const socket = opts.socketFactory?.() ?? dgram.createSocket({ type: "udp4", reuseAddr: true });
+    const ttlSeconds = opts.ttlSeconds ?? DEFAULT_TTL_SECONDS;
+    const txt = opts.txt ?? ["v=1"];
+    const timers = [];
+    let stopped = false;
+    const sendRecords = (records) => {
+        if (stopped)
+            return;
+        safeCall(() => socket.send(buildResponsePacket(records), MDNS_PORT, MDNS_ADDRESS));
+    };
+    const sendAll = () => sendRecords(makeAllRecords(names, opts.port, opts.ipv4, txt, ttlSeconds));
+    socket.on("error", () => { });
+    socket.on("message", (message) => {
+        if (stopped)
+            return;
+        const query = parseQuery(message);
+        if (query === null)
+            return;
+        const records = recordsForQuestions(query.questions, names, opts.port, opts.ipv4, txt, ttlSeconds);
+        if (records.length > 0)
+            sendRecords(records);
+    });
+    socket.bind(MDNS_PORT, "0.0.0.0", () => {
+        if (stopped)
+            return;
+        safeCall(() => socket.addMembership(MDNS_ADDRESS));
+        safeCall(() => socket.setMulticastTTL(255));
+        safeCall(() => socket.setMulticastLoopback(true));
+        sendAll();
+        timers.push(setTimeout(sendAll, 1_000));
+    });
+    return {
+        stop() {
+            if (stopped)
+                return;
+            const goodbye = makePtrRecord(names.serviceName, names.instanceFqdn, 0);
+            safeCall(() => socket.send(buildResponsePacket([goodbye]), MDNS_PORT, MDNS_ADDRESS));
+            stopped = true;
+            for (const timer of timers)
+                clearTimeout(timer);
+            safeCall(() => socket.dropMembership?.(MDNS_ADDRESS));
+            safeCall(() => socket.close());
+        },
+    };
+}
+export function encodeName(name) {
+    const normalized = name.endsWith(".") ? name.slice(0, -1) : name;
+    if (normalized.length === 0)
+        return Buffer.from([0]);
+    const parts = normalized.split(".");
+    const chunks = [];
+    for (const part of parts) {
+        const bytes = Buffer.from(part, "utf8");
+        if (bytes.length < 1 || bytes.length > 63)
+            throw new Error("DNS label length must be 1..63 bytes");
+        chunks.push(Buffer.from([bytes.length]), bytes);
+    }
+    chunks.push(Buffer.from([0]));
+    return Buffer.concat(chunks);
+}
+export function encodeResourceRecord(record) {
+    const name = encodeName(record.name);
+    const header = Buffer.alloc(10);
+    header.writeUInt16BE(record.type, 0);
+    header.writeUInt16BE(record.classCode, 2);
+    header.writeUInt32BE(record.ttlSeconds, 4);
+    header.writeUInt16BE(record.rdata.length, 8);
+    return Buffer.concat([name, header, record.rdata]);
+}
+export function buildResponsePacket(records) {
+    const header = Buffer.alloc(12);
+    header.writeUInt16BE(0, 0);
+    header.writeUInt16BE(RESPONSE_FLAGS, 2);
+    header.writeUInt16BE(0, 4);
+    header.writeUInt16BE(records.length, 6);
+    header.writeUInt16BE(0, 8);
+    header.writeUInt16BE(0, 10);
+    return Buffer.concat([header, ...records.map(encodeResourceRecord)]);
+}
+export function parseQuery(packet) {
+    if (packet.length < 12)
+        return null;
+    const flags = packet.readUInt16BE(2);
+    if ((flags & 0x8000) !== 0)
+        return null;
+    const questionCount = packet.readUInt16BE(4);
+    const questions = [];
+    let offset = 12;
+    for (let i = 0; i < questionCount; i += 1) {
+        const parsed = readName(packet, offset);
+        if (parsed === null)
+            return null;
+        offset = parsed.nextOffset;
+        if (offset + 4 > packet.length)
+            return null;
+        questions.push({
+            name: parsed.name,
+            type: packet.readUInt16BE(offset),
+            classCode: packet.readUInt16BE(offset + 2),
+        });
+        offset += 4;
+    }
+    return { questions };
+}
+export function ptrRdata(instanceFqdn) {
+    return encodeName(instanceFqdn);
+}
+export function srvRdata(port, targetFqdn) {
+    const header = Buffer.alloc(6);
+    header.writeUInt16BE(0, 0);
+    header.writeUInt16BE(0, 2);
+    header.writeUInt16BE(port, 4);
+    return Buffer.concat([header, encodeName(targetFqdn)]);
+}
+export function txtRdata(txt) {
+    if (txt.length === 0)
+        return Buffer.from([0]);
+    const chunks = [];
+    for (const item of txt) {
+        const bytes = Buffer.from(item, "utf8");
+        if (bytes.length > 255)
+            throw new Error("TXT item length must fit in one byte");
+        chunks.push(Buffer.from([bytes.length]), bytes);
+    }
+    return Buffer.concat(chunks);
+}
+export function aRdata(ipv4) {
+    const parts = ipv4.split(".");
+    if (parts.length !== 4)
+        throw new Error("invalid IPv4 address");
+    return Buffer.from(parts.map((part) => {
+        if (!/^\d+$/.test(part))
+            throw new Error("invalid IPv4 address");
+        const value = Number(part);
+        if (!Number.isInteger(value) || value < 0 || value > 255)
+            throw new Error("invalid IPv4 address");
+        return value;
+    }));
+}
+function recordsForQuestions(questions, names, port, ipv4, txt, ttlSeconds) {
+    const records = new Map();
+    const add = (record) => {
+        records.set(`${record.name}|${record.type}`, record);
+    };
+    for (const question of questions) {
+        const name = canonicalName(question.name);
+        if (name === canonicalName(names.serviceName) && (question.type === TYPE_PTR || question.type === TYPE_ANY)) {
+            for (const record of makeAllRecords(names, port, ipv4, txt, ttlSeconds))
+                add(record);
+        }
+        else if (name === canonicalName(names.instanceFqdn)) {
+            if (question.type === TYPE_SRV || question.type === TYPE_ANY)
+                add(makeSrvRecord(names.instanceFqdn, port, names.targetFqdn, ttlSeconds));
+            if (question.type === TYPE_TXT || question.type === TYPE_ANY)
+                add(makeTxtRecord(names.instanceFqdn, txt, ttlSeconds));
+        }
+        else if (name === canonicalName(names.targetFqdn) && (question.type === TYPE_A || question.type === TYPE_ANY)) {
+            add(makeARecord(names.targetFqdn, ipv4, ttlSeconds));
+        }
+    }
+    return [...records.values()];
+}
+function makeAllRecords(names, port, ipv4, txt, ttlSeconds) {
+    return [
+        makePtrRecord(names.serviceName, names.instanceFqdn, ttlSeconds),
+        makeSrvRecord(names.instanceFqdn, port, names.targetFqdn, ttlSeconds),
+        makeTxtRecord(names.instanceFqdn, txt, ttlSeconds),
+        makeARecord(names.targetFqdn, ipv4, ttlSeconds),
+    ];
+}
+function makePtrRecord(serviceName, instanceFqdn, ttlSeconds) {
+    return { name: serviceName, type: TYPE_PTR, classCode: CLASS_IN, ttlSeconds, rdata: ptrRdata(instanceFqdn) };
+}
+function makeSrvRecord(instanceFqdn, port, targetFqdn, ttlSeconds) {
+    return { name: instanceFqdn, type: TYPE_SRV, classCode: CLASS_CACHE_FLUSH_IN, ttlSeconds, rdata: srvRdata(port, targetFqdn) };
+}
+function makeTxtRecord(instanceFqdn, txt, ttlSeconds) {
+    return { name: instanceFqdn, type: TYPE_TXT, classCode: CLASS_CACHE_FLUSH_IN, ttlSeconds, rdata: txtRdata(txt) };
+}
+function makeARecord(targetFqdn, ipv4, ttlSeconds) {
+    return { name: targetFqdn, type: TYPE_A, classCode: CLASS_CACHE_FLUSH_IN, ttlSeconds, rdata: aRdata(ipv4) };
+}
+function makeNames(opts) {
+    const hostname = stripLocalSuffix(opts.hostname);
+    return {
+        serviceName: SERVICE_TYPE,
+        instanceFqdn: `${opts.instanceName}.${SERVICE_TYPE}`,
+        targetFqdn: `${hostname}.local.`,
+    };
+}
+function stripLocalSuffix(hostname) {
+    return hostname.replace(/\.local\.?$/i, "");
+}
+function canonicalName(name) {
+    return (name.endsWith(".") ? name : `${name}.`).toLowerCase();
+}
+function readName(packet, startOffset) {
+    const labels = [];
+    let offset = startOffset;
+    let nextOffset = startOffset;
+    let jumped = false;
+    let jumps = 0;
+    while (true) {
+        if (offset >= packet.length)
+            return null;
+        const len = packet[offset];
+        if (len === undefined)
+            return null;
+        if ((len & 0xc0) === 0xc0) {
+            if (offset + 1 >= packet.length)
+                return null;
+            const second = packet[offset + 1];
+            if (second === undefined)
+                return null;
+            const pointer = ((len & 0x3f) << 8) | second;
+            if (pointer >= packet.length)
+                return null;
+            if (!jumped)
+                nextOffset = offset + 2;
+            jumped = true;
+            jumps += 1;
+            if (jumps > 16)
+                return null;
+            offset = pointer;
+            continue;
+        }
+        if ((len & 0xc0) !== 0)
+            return null;
+        offset += 1;
+        if (len === 0) {
+            if (!jumped)
+                nextOffset = offset;
+            return { name: labels.length === 0 ? "." : `${labels.join(".")}.`, nextOffset };
+        }
+        if (len > 63 || offset + len > packet.length)
+            return null;
+        labels.push(packet.subarray(offset, offset + len).toString("utf8"));
+        offset += len;
+        if (!jumped)
+            nextOffset = offset;
+    }
+}
+function safeCall(fn) {
+    try {
+        fn();
+    }
+    catch {
+        // mDNS failures must not break pairing.
+    }
+}
+//# sourceMappingURL=mdnsAdvertiser.js.map

package/dist/mdnsAdvertiser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mdnsAdvertiser.js","sourceRoot":"","sources":["../src/mdnsAdvertiser.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,6FAA6F;AAE7F,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,MAAM,YAAY,GAAG,aAAa,CAAC;AACnC,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,YAAY,GAAG,gCAAgC,CAAC;AACtD,MAAM,MAAM,GAAG,CAAC,CAAC;AACjB,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,QAAQ,GAAG,CAAC,CAAC;AACnB,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AA0ChC,MAAM,UAAU,oBAAoB,CAAC,IAA0B;IAC7D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,MAAM,WAAW,GAAG,CAAC,OAA4B,EAAQ,EAAE;QACzD,IAAI,OAAO;YAAE,OAAO;QACpB,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;IAEtG,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;QAC/B,IAAI,OAAO;YAAE,OAAO;QACpB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO;QAC3B,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACnG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE;QACrC,IAAI,OAAO;YAAE,OAAO;QACpB,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;QACnD,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,OAAO,EAAE,CAAC;QACV,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;YACF,IAAI,OAAO;gBAAE,OAAO;YACpB,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;YACxE,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;YACrF,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAChD,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YACtD,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACnG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAyB;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1C,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC3C,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA4B;IAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;QAC3B,IAAI,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC5C,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;YACjC,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3C,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,YAAoB;IAC3C,OAAO,UAAU,CAAC,YAAY,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,UAAkB;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAa;IACpC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC,IAAI,CAChB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAClG,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,SAAwB,EACxB,KAAgB,EAChB,IAAY,EACZ,IAAY,EACZ,GAAa,EACb,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IACrD,MAAM,GAAG,GAAG,CAAC,MAAyB,EAAQ,EAAE;QAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC5G,KAAK,MAAM,MAAM,IAAI,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC;gBAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,IAAI,KAAK,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACtD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;YACzI,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QACxH,CAAC;aAAM,IAAI,IAAI,KAAK,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YAChH,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB,EAAE,IAAY,EAAE,IAAY,EAAE,GAAa,EAAE,UAAkB;IACrG,OAAO;QACL,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC;QAChE,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC;QACrE,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,UAAU,CAAC;QAClD,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB,EAAE,YAAoB,EAAE,UAAkB;IAClF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;AAC/G,CAAC;AAED,SAAS,aAAa,CAAC,YAAoB,EAAE,IAAY,EAAE,UAAkB,EAAE,UAAkB;IAC/F,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,oBAAoB,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;AAChI,CAAC;AAED,SAAS,aAAa,CAAC,YAAoB,EAAE,GAAa,EAAE,UAAkB;IAC5E,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,oBAAoB,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;AACnH,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,IAAY,EAAE,UAAkB;IACvE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AAC9G,CAAC;AAQD,SAAS,SAAS,CAAC,IAA6D;IAC9E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjD,OAAO;QACL,WAAW,EAAE,YAAY;QACzB,YAAY,EAAE,GAAG,IAAI,CAAC,YAAY,IAAI,YAAY,EAAE;QACpD,UAAU,EAAE,GAAG,QAAQ,SAAS;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,WAAmB;IACnD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAG,WAAW,CAAC;IACzB,IAAI,UAAU,GAAG,WAAW,CAAC;IAC7B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAClC,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACtC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC;YAC7C,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,UAAU,GAAG,MAAM,GAAG,CAAC,CAAC;YACrC,MAAM,GAAG,IAAI,CAAC;YACd,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC5B,MAAM,GAAG,OAAO,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;YACd,IAAI,CAAC,MAAM;gBAAE,UAAU,GAAG,MAAM,CAAC;YACjC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC;QAClF,CAAC;QACD,IAAI,GAAG,GAAG,EAAE,IAAI,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,CAAC;QACd,IAAI,CAAC,MAAM;YAAE,UAAU,GAAG,MAAM,CAAC;IACnC,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,EAAc;IAC9B,IAAI,CAAC;QACH,EAAE,EAAE,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;AACH,CAAC"}

package/dist/observationLog.d.ts

@@ -0,0 +1,54 @@
+/** 観測ログに追記するイベント種別（Swift 版 ObsEvent と対）。 */
+export type ObsEvent = {
+    kind: "sessionStarted";
+    cwd: string;
+} | {
+    kind: "reattached";
+} | {
+    kind: "sessionKilled";
+} | {
+    kind: "approvalRequested";
+    id: string;
+    tool: string;
+} | {
+    kind: "approvalDecided";
+    id: string;
+    decision: string;
+} | {
+    kind: "toolExecuted";
+    id: string;
+    tool: string;
+    decision: string;
+} | {
+    kind: "pushSent";
+    id: string;
+    tool: string;
+} | {
+    kind: "pushSkipped";
+    id: string;
+    reason: string;
+} | {
+    kind: "pushFailed";
+    id: string;
+    reason: string;
+} | {
+    kind: "deviceTokenRegistered";
+    environment: string;
+};
+/** デフォルトのベースディレクトリ（`~/.tailii/audit`）。 */
+export declare function defaultObservationBase(): string;
+/** `ObservationLog` が投げる型付きエラー。 */
+export declare class ObservationLogError extends Error {
+    readonly reason: "invalid-session-name" | "directory-creation-failed" | "append-failed";
+    constructor(reason: "invalid-session-name" | "directory-creation-failed" | "append-failed", detail: string);
+}
+/** Mac 側の観測/監査ログ（append-only NDJSON）。 */
+export declare class ObservationLog {
+    private readonly base;
+    constructor(base?: string);
+    /**
+     * イベントを 1 行の NDJSON として追記する（append-only）。
+     * 時刻は決定性のため呼び出し側から Unix 秒（`at`）で渡す。
+     */
+    append(event: ObsEvent, session: string, at: number): void;
+}

package/dist/observationLog.js

@@ -0,0 +1,108 @@
+// observationLog.ts
+// tailii (TS host) — Mac 側観測/監査ログ（append-only NDJSON）
+// Swift 版 ObservationLog.swift の移植。1 イベント = 1 行を
+// `<base>/<session>.ndjson` へ純追記する。イベント種別は `mac.*` 名前空間。
+// 秘密（接続鍵・device token 値）を運ぶフィールドは型として存在しない。
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { ensureDirectory0700 } from "./paths.js";
+/** 直列化時の名前空間付きイベント種別名（iOS ミラーと区別可能）。 */
+const OBS_TYPE = {
+    sessionStarted: "mac.session.started",
+    reattached: "mac.session.reattached",
+    sessionKilled: "mac.session.killed",
+    approvalRequested: "mac.approval.requested",
+    approvalDecided: "mac.approval.decided",
+    toolExecuted: "mac.tool.executed",
+    pushSent: "mac.push.sent",
+    pushSkipped: "mac.push.skipped",
+    pushFailed: "mac.push.failed",
+    deviceTokenRegistered: "mac.device.tokenRegistered",
+};
+/** デフォルトのベースディレクトリ（`~/.tailii/audit`）。 */
+export function defaultObservationBase() {
+    return path.join(os.homedir(), ".tailii", "audit");
+}
+/** `ObservationLog` が投げる型付きエラー。 */
+export class ObservationLogError extends Error {
+    reason;
+    constructor(reason, detail) {
+        super(`${reason}: ${detail}`);
+        this.reason = reason;
+        this.name = "ObservationLogError";
+    }
+}
+/** Mac 側の観測/監査ログ（append-only NDJSON）。 */
+export class ObservationLog {
+    base;
+    constructor(base) {
+        this.base = base ?? defaultObservationBase();
+    }
+    /**
+     * イベントを 1 行の NDJSON として追記する（append-only）。
+     * 時刻は決定性のため呼び出し側から Unix 秒（`at`）で渡す。
+     */
+    append(event, session, at) {
+        validateSessionName(session);
+        try {
+            ensureDirectory0700(this.base);
+        }
+        catch (error) {
+            throw new ObservationLogError("directory-creation-failed", `${this.base}: ${String(error)}`);
+        }
+        const line = encodeLine(event, at);
+        const file = path.join(this.base, `${session}.ndjson`);
+        try {
+            fs.appendFileSync(file, line);
+        }
+        catch (error) {
+            throw new ObservationLogError("append-failed", `${file}: ${String(error)}`);
+        }
+    }
+}
+/** イベント 1 件を NDJSON 1 行（末尾 `\n` 付き）へ符号化する（キーは辞書順）。 */
+function encodeLine(event, at) {
+    const record = { type: OBS_TYPE[event.kind], at };
+    switch (event.kind) {
+        case "sessionStarted":
+            record["cwd"] = event.cwd;
+            break;
+        case "reattached":
+        case "sessionKilled":
+            break;
+        case "approvalRequested":
+        case "pushSent":
+            record["id"] = event.id;
+            record["tool"] = event.tool;
+            break;
+        case "approvalDecided":
+            record["id"] = event.id;
+            record["decision"] = event.decision;
+            break;
+        case "toolExecuted":
+            record["id"] = event.id;
+            record["tool"] = event.tool;
+            record["decision"] = event.decision;
+            break;
+        case "pushSkipped":
+        case "pushFailed":
+            record["id"] = event.id;
+            record["reason"] = event.reason;
+            break;
+        case "deviceTokenRegistered":
+            record["environment"] = event.environment;
+            break;
+    }
+    const sorted = {};
+    for (const key of Object.keys(record).sort())
+        sorted[key] = record[key];
+    return JSON.stringify(sorted) + "\n";
+}
+/** session 名が安全かどうかを検証する（SocketPath の規約に合わせる）。 */
+function validateSessionName(name) {
+    if (name.length === 0 || name.includes("\0") || name.includes("/") || name === "." || name === "..") {
+        throw new ObservationLogError("invalid-session-name", name);
+    }
+}
+//# sourceMappingURL=observationLog.js.map

package/dist/observationLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observationLog.js","sourceRoot":"","sources":["../src/observationLog.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,sDAAsD;AACtD,iDAAiD;AACjD,yDAAyD;AACzD,4CAA4C;AAE5C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAejD,wCAAwC;AACxC,MAAM,QAAQ,GAAqC;IACjD,cAAc,EAAE,qBAAqB;IACrC,UAAU,EAAE,wBAAwB;IACpC,aAAa,EAAE,oBAAoB;IACnC,iBAAiB,EAAE,wBAAwB;IAC3C,eAAe,EAAE,sBAAsB;IACvC,YAAY,EAAE,mBAAmB;IACjC,QAAQ,EAAE,eAAe;IACzB,WAAW,EAAE,kBAAkB;IAC/B,UAAU,EAAE,iBAAiB;IAC7B,qBAAqB,EAAE,4BAA4B;CACpD,CAAC;AAEF,0CAA0C;AAC1C,MAAM,UAAU,sBAAsB;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC;AAED,mCAAmC;AACnC,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAE1B;IADlB,YACkB,MAA8E,EAC9F,MAAc;QAEd,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QAHd,WAAM,GAAN,MAAM,CAAwE;QAI9F,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,yCAAyC;AACzC,MAAM,OAAO,cAAc;IACR,IAAI,CAAS;IAE9B,YAAY,IAAa;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,sBAAsB,EAAE,CAAC;IAC/C,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAe,EAAE,OAAe,EAAE,EAAU;QACjD,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,GAAG,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;CACF;AAED,sDAAsD;AACtD,SAAS,UAAU,CAAC,KAAe,EAAE,EAAU;IAC7C,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IAC3E,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,gBAAgB;YACnB,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;YAC1B,MAAM;QACR,KAAK,YAAY,CAAC;QAClB,KAAK,eAAe;YAClB,MAAM;QACR,KAAK,mBAAmB,CAAC;QACzB,KAAK,UAAU;YACb,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;YAC5B,MAAM;QACR,KAAK,iBAAiB;YACpB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;YACpC,MAAM;QACR,KAAK,cAAc;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;YAC5B,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;YACpC,MAAM;QACR,KAAK,aAAa,CAAC;QACnB,KAAK,YAAY;YACf,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;YAChC,MAAM;QACR,KAAK,uBAAuB;YAC1B,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;YAC1C,MAAM;IACV,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;AACvC,CAAC;AAED,kDAAkD;AAClD,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACpG,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC"}

package/dist/pairingCode.d.ts

@@ -0,0 +1,60 @@
+import * as crypto from "node:crypto";
+export interface PairingStream {
+    readable: NodeJS.ReadableStream;
+    writable: NodeJS.WritableStream;
+}
+export interface PairingResponderDeps {
+    payloadJSON: string;
+    displaySAS: (code: string) => void;
+    randomBytes?: (size: number) => Buffer;
+    timeoutMs?: number;
+}
+export type PairingResult = {
+    status: "paired";
+} | {
+    status: "aborted";
+    reason: string;
+};
+export interface DerivedPairingKeys {
+    salt: Buffer;
+    sasCode: string;
+    confirmKey: Buffer;
+    dataKey: Buffer;
+}
+export type PairingMessage = {
+    t: "hello";
+    v: 1;
+    commit: string;
+} | {
+    t: "server_key";
+    v: 1;
+    epk: string;
+} | {
+    t: "reveal";
+    epk: string;
+} | {
+    t: "confirm";
+    mac: string;
+} | {
+    t: "payload";
+    iv: string;
+    ct: string;
+    tag: string;
+};
+export declare function rawX25519PublicKeyToKeyObject(raw32: Buffer): crypto.KeyObject;
+export declare function x25519PublicKeyObjectToRaw(publicKey: crypto.KeyObject): Buffer;
+export declare function hkdfSha256(ikm: Buffer, salt: Buffer, info: string, length: number): Buffer;
+export declare function deriveSASCode(kSas4: Buffer): string;
+export declare function pairingTranscriptSalt(commit32: Buffer, responderPubRaw32: Buffer, initiatorPubRaw32: Buffer): Buffer;
+export declare function derivePairingKeys(sharedSecret32: Buffer, commit32: Buffer, responderPubRaw32: Buffer, initiatorPubRaw32: Buffer): DerivedPairingKeys;
+export declare function computeInitiatorConfirmMac(confirmKey32: Buffer): Buffer;
+export declare function encodePairingMessage(message: PairingMessage): string;
+export declare function parsePairingMessage(line: string): PairingMessage | null;
+export declare function decodeBase64Field(value: string, expectedLength: number): Buffer | null;
+export declare function encryptPayload(dataKey32: Buffer, plaintext: Buffer, randomBytes: (size: number) => Buffer): {
+    iv: Buffer;
+    ciphertext: Buffer;
+    tag: Buffer;
+};
+export declare function decryptPayload(dataKey32: Buffer, iv12: Buffer, ciphertext: Buffer, tag16: Buffer): Buffer;
+export declare function runPairingResponder(stream: PairingStream, deps: PairingResponderDeps): Promise<PairingResult>;