ugly-app 0.1.676 → 0.1.678

package/dist/cli/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.1.676";
+export declare const CLI_VERSION = "0.1.678";
 //# sourceMappingURL=version.d.ts.map

package/dist/cli/version.js

@@ -1,3 +1,3 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.676";
+export const CLI_VERSION = "0.1.678";
 //# sourceMappingURL=version.js.map

package/dist/native/index.d.ts

@@ -15,4 +15,10 @@ export type { BrowseFacade } from './facades/browse.js';
 export type { McpFacade } from './facades/mcp.js';
 export type { TerminalFacade } from './facades/terminal.js';
 export { MCP_CATALOG } from './mcp-catalog.js';
+export { createProxyClient } from './proxyClient.js';
+export type { ProxyClient, ProxyClientOpts, ProxySocket, HostInfo, RTCFactory, } from './proxyClient.js';
+export { isDesktopChannel, withProxy, dispatchNativeEvent, DESKTOP_NAMESPACES } from './proxy.js';
+export type { WithProxyOpts } from './proxy.js';
+export { fpTag, verifyFpTag, parseFingerprint, mskSigner } from './proxyCrypto.js';
+export type { ProxyRole, ProxySigner } from './proxyCrypto.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/native/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,OAAO,EACP,WAAW,EACX,SAAS,EACT,QAAQ,EACR,MAAM,EACN,SAAS,EACT,cAAc,EACd,aAAa,EACb,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,aAAa,EACb,aAAa,EACb,cAAc,EACd,aAAa,EACb,aAAa,EACb,QAAQ,EACR,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,eAAe,EACf,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC/E,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtF,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,OAAO,EACP,WAAW,EACX,SAAS,EACT,QAAQ,EACR,MAAM,EACN,SAAS,EACT,cAAc,EACd,aAAa,EACb,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,aAAa,EACb,aAAa,EACb,cAAc,EACd,aAAa,EACb,aAAa,EACb,QAAQ,EACR,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,eAAe,EACf,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC/E,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtF,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,YAAY,EACV,WAAW,EACX,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,GACX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAClG,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnF,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/native/index.js

@@ -4,4 +4,8 @@ export { NativeUnavailableError, PermissionDeniedError } from './protocol.js';
 export { installUglyNative } from './install.js';
 export { native, permissions, nativePlatform, isNativeAvailable } from './wrapper.js';
 export { MCP_CATALOG } from './mcp-catalog.js';
+// ── Ugly Proxy (remote UglyNative over WebRTC) ──
+export { createProxyClient } from './proxyClient.js';
+export { isDesktopChannel, withProxy, dispatchNativeEvent, DESKTOP_NAMESPACES } from './proxy.js';
+export { fpTag, verifyFpTag, parseFingerprint, mskSigner } from './proxyCrypto.js';
 //# sourceMappingURL=index.js.map

package/dist/native/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AAkCA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE/E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAStF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AAkCA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE/E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAStF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,mDAAmD;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAQrD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAElG,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/native/proxy.d.ts

@@ -0,0 +1,27 @@
+import type { UglyNative } from './protocol.js';
+import type { ProxyClient } from './proxyClient.js';
+/** Namespaces that require a desktop host (RCE-grade / filesystem / long-running tasks). */
+export declare const DESKTOP_NAMESPACES: ReadonlySet<string>;
+export declare function isDesktopChannel(channel: string): boolean;
+export interface WithProxyOpts {
+    client: ProxyClient;
+    /**
+     * Whether a given channel should tunnel to the host. Default: desktop-cap channels go
+     * to the proxy when it's connected. On a real desktop (full local impl) pass a predicate
+     * that returns false so everything stays local.
+     */
+    shouldProxy?: (channel: string) => boolean;
+    /** True on platforms with no local desktop-cap implementation (mobile/web). */
+    desktopCapsAreRemoteOnly?: boolean;
+}
+/**
+ * Wrap a base UglyNative so desktop-capability calls route through the proxy. Events from
+ * the host must be fed back into the base event bus by wiring the proxy client's `onEvent`
+ * to a `dispatchNativeEvent` (below) — then `base.subscribe` delivers them unchanged.
+ */
+export declare function withProxy(base: UglyNative, opts: WithProxyOpts): UglyNative;
+/** Dispatch a proxy event onto the same 'uglyNative' CustomEvent bus base.subscribe reads. */
+export declare function dispatchNativeEvent(win: {
+    dispatchEvent(e: unknown): boolean;
+}, event: string, data: unknown): void;
+//# sourceMappingURL=proxy.d.ts.map

package/dist/native/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/native/proxy.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,4FAA4F;AAC5F,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAYjD,CAAC;AAEH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAGzD;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,WAAW,CAAC;IACpB;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C,+EAA+E;IAC/E,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,GAAG,UAAU,CAc3E;AAED,8FAA8F;AAC9F,wBAAgB,mBAAmB,CACjC,GAAG,EAAE;IAAE,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAAA;CAAE,EAC3C,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,OAAO,GACZ,IAAI,CAON"}

package/dist/native/proxy.js

@@ -0,0 +1,49 @@
+import { NativeUnavailableError } from './protocol.js';
+/** Namespaces that require a desktop host (RCE-grade / filesystem / long-running tasks). */
+export const DESKTOP_NAMESPACES = new Set([
+    'fs',
+    'process',
+    'net',
+    'serve',
+    'workers',
+    'terminal',
+    'sandbox',
+    'mcp',
+    'secrets',
+    'browse',
+    'task',
+]);
+export function isDesktopChannel(channel) {
+    const ns = channel.includes('.') ? channel.slice(0, channel.indexOf('.')) : channel;
+    return DESKTOP_NAMESPACES.has(ns);
+}
+/**
+ * Wrap a base UglyNative so desktop-capability calls route through the proxy. Events from
+ * the host must be fed back into the base event bus by wiring the proxy client's `onEvent`
+ * to a `dispatchNativeEvent` (below) — then `base.subscribe` delivers them unchanged.
+ */
+export function withProxy(base, opts) {
+    const shouldProxy = opts.shouldProxy ?? ((ch) => isDesktopChannel(ch) && opts.client.isOpen());
+    return {
+        platform: base.platform,
+        invoke: ((channel, payload) => {
+            if (shouldProxy(channel))
+                return opts.client.invoke(channel, payload);
+            if (opts.desktopCapsAreRemoteOnly && isDesktopChannel(channel)) {
+                // No host selected and no local impl — surface a clear, actionable error.
+                return Promise.reject(new NativeUnavailableError(channel));
+            }
+            return base.invoke(channel, payload);
+        }),
+        subscribe: base.subscribe,
+    };
+}
+/** Dispatch a proxy event onto the same 'uglyNative' CustomEvent bus base.subscribe reads. */
+export function dispatchNativeEvent(win, event, data) {
+    const detail = { event, data };
+    const ev = typeof CustomEvent === 'function'
+        ? new CustomEvent('uglyNative', { detail })
+        : { type: 'uglyNative', detail };
+    win.dispatchEvent(ev);
+}
+//# sourceMappingURL=proxy.js.map

package/dist/native/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/native/proxy.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAGvD,4FAA4F;AAC5F,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,IAAI;IACJ,SAAS;IACT,KAAK;IACL,OAAO;IACP,SAAS;IACT,UAAU;IACV,SAAS;IACT,KAAK;IACL,SAAS;IACT,QAAQ;IACR,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACpF,OAAO,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACpC,CAAC;AAcD;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,IAAgB,EAAE,IAAmB;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvG,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,CAAC,CAAC,OAAe,EAAE,OAAgB,EAAE,EAAE;YAC7C,IAAI,WAAW,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtE,IAAI,IAAI,CAAC,wBAAwB,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/D,0EAA0E;gBAC1E,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,OAAgB,EAAE,OAAgB,CAAC,CAAC;QACzD,CAAC,CAAyB;QAC1B,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,mBAAmB,CACjC,GAA2C,EAC3C,KAAa,EACb,IAAa;IAEb,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC/B,MAAM,EAAE,GACN,OAAO,WAAW,KAAK,UAAU;QAC/B,CAAC,CAAC,IAAI,WAAW,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC;QAC3C,CAAC,CAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAuB,CAAC;IAC3D,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC"}

package/dist/native/proxyClient.d.ts

@@ -0,0 +1,41 @@
+import { type ProxySigner } from './proxyCrypto.js';
+/** Subset of ugly-app's client Socket the proxy needs (emit/on are runtime-generic). */
+export interface ProxySocket {
+    emit(type: string, data: object): void;
+    on(event: string, handler: (data: unknown) => void): () => void;
+    /** Request/response (used for presence:query). */
+    send?(type: string, data: object, timeout?: number): Promise<unknown>;
+}
+export type RTCFactory = (config: RTCConfiguration) => RTCPeerConnection;
+export interface HostInfo {
+    deviceId: string;
+    label: string;
+    isHost: boolean;
+    lastSeen: number;
+}
+export interface ProxyClientOpts {
+    socket: ProxySocket;
+    /** This device's id (so listHosts can exclude self). */
+    selfDeviceId: string;
+    /** When set, sign our offer fingerprint + verify the host's answer fingerprint. */
+    signer?: ProxySigner;
+    iceServers?: RTCIceServer[];
+    rtcFactory?: RTCFactory;
+    /** evt frames from the host (UglyNative subscribe events, task deltas) land here. */
+    onEvent?: (event: string, data: unknown) => void;
+    requestTimeoutMs?: number;
+    openTimeoutMs?: number;
+}
+export interface ProxyClient {
+    /** Query the worker for this user's online desktop hosts. */
+    listHosts(): Promise<HostInfo[]>;
+    /** Establish (or re-establish) the DataChannel to a host. Resolves when open. */
+    connect(hostDeviceId: string): Promise<void>;
+    /** Tunnel one UglyNative invoke over the DataChannel. */
+    invoke(channel: string, payload: unknown): Promise<unknown>;
+    isOpen(): boolean;
+    hostDeviceId(): string | null;
+    close(): void;
+}
+export declare function createProxyClient(opts: ProxyClientOpts): ProxyClient;
+//# sourceMappingURL=proxyClient.d.ts.map

package/dist/native/proxyClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxyClient.d.ts","sourceRoot":"","sources":["../../src/native/proxyClient.ts"],"names":[],"mappings":"AAKA,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEtE,wFAAwF;AACxF,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAChE,kDAAkD;IAClD,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvE;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,gBAAgB,KAAK,iBAAiB,CAAC;AAEzE,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,WAAW,CAAC;IACpB,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,qFAAqF;IACrF,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACjD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,6DAA6D;IAC7D,SAAS,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjC,iFAAiF;IACjF,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,yDAAyD;IACzD,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,IAAI,OAAO,CAAC;IAClB,YAAY,IAAI,MAAM,GAAG,IAAI,CAAC;IAC9B,KAAK,IAAI,IAAI,CAAC;CACf;AAYD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,WAAW,CAsHpE"}

package/dist/native/proxyClient.js

@@ -0,0 +1,145 @@
+// Client side of the Ugly Proxy: from a phone/web (or a desktop acting as a client), open
+// a WebRTC DataChannel to a chosen desktop host and tunnel UglyNative calls over it (the
+// "dumb pipe"). Signaling rides the app Socket's rtc:* messages; DTLS gives e2e transport
+// encryption; the MSK-bound fingerprint check (proxyCrypto) authenticates the host.
+// RTCPeerConnection + Socket are injectable so the framing/correlation is unit-testable.
+import { parseFingerprint } from './proxyCrypto.js';
+function rec(d) {
+    return (d ?? {});
+}
+export function createProxyClient(opts) {
+    const rtcFactory = opts.rtcFactory ?? ((cfg) => new RTCPeerConnection(cfg));
+    const reqTimeout = opts.requestTimeoutMs ?? 30_000;
+    const openTimeout = opts.openTimeoutMs ?? 15_000;
+    let pc = null;
+    let dc = null;
+    let host = null;
+    let seq = 0;
+    const pending = new Map();
+    const offs = [];
+    function cleanup() {
+        for (const off of offs) {
+            try {
+                off();
+            }
+            catch { /* noop */ }
+        }
+        offs.length = 0;
+        for (const p of pending.values()) {
+            if (p.timer)
+                clearTimeout(p.timer);
+            p.reject(new Error('proxy connection closed'));
+        }
+        pending.clear();
+        try {
+            dc?.close();
+        }
+        catch { /* noop */ }
+        try {
+            pc?.close();
+        }
+        catch { /* noop */ }
+        dc = null;
+        pc = null;
+    }
+    function onDcMessage(raw) {
+        let f;
+        try {
+            f = JSON.parse(typeof raw === 'string' ? raw : new TextDecoder().decode(raw));
+        }
+        catch {
+            return;
+        }
+        if (f.t === 'res' && f.id !== undefined) {
+            const p = pending.get(f.id);
+            if (!p)
+                return;
+            pending.delete(f.id);
+            if (p.timer)
+                clearTimeout(p.timer);
+            if (f.ok)
+                p.resolve(f.result);
+            else
+                p.reject(new Error(f.error ?? 'proxy error'));
+        }
+        else if (f.t === 'evt' && f.event) {
+            opts.onEvent?.(f.event, f.data);
+        }
+    }
+    async function listHosts() {
+        if (!opts.socket.send)
+            throw new Error('socket lacks request support for presence:query');
+        const res = rec(await opts.socket.send('presence:query', {}));
+        const devices = res['devices'] ?? [];
+        return devices.filter((d) => d.isHost && d.deviceId !== opts.selfDeviceId);
+    }
+    async function connect(hostDeviceId) {
+        cleanup();
+        host = hostDeviceId;
+        const conn = rtcFactory({ iceServers: opts.iceServers ?? [] });
+        pc = conn;
+        const channel = conn.createDataChannel('proxy');
+        dc = channel;
+        conn.onicecandidate = (e) => {
+            if (e.candidate)
+                opts.socket.emit('rtc:ice', { to: hostDeviceId, candidate: e.candidate.toJSON() });
+        };
+        channel.onmessage = (e) => onDcMessage(e.data);
+        offs.push(opts.socket.on('rtc:answer', (d) => { void onAnswer(rec(d)); }));
+        offs.push(opts.socket.on('rtc:ice', (d) => { void onRemoteIce(rec(d)); }));
+        offs.push(opts.socket.on('rtc:error', (d) => { if (rec(d)['from'] === host)
+            cleanup(); }));
+        const opened = new Promise((resolve, reject) => {
+            const timer = setTimeout(() => reject(new Error('proxy DataChannel open timeout')), openTimeout);
+            channel.onopen = () => { clearTimeout(timer); resolve(); };
+        });
+        const offer = await conn.createOffer();
+        await conn.setLocalDescription(offer);
+        const sdp = conn.localDescription?.sdp ?? offer.sdp ?? '';
+        const tag = opts.signer ? await opts.signer.sign('client', parseFingerprint(sdp) ?? '') : undefined;
+        opts.socket.emit('rtc:offer', { to: hostDeviceId, sdp, fpTag: tag });
+        await opened;
+    }
+    async function onAnswer(d) {
+        if (!pc || d['from'] !== host)
+            return;
+        const sdp = String(d['sdp'] ?? '');
+        if (opts.signer) {
+            const ok = await opts.signer.verify('host', parseFingerprint(sdp) ?? '', String(d['fpTag'] ?? ''));
+            if (!ok) {
+                cleanup();
+                return;
+            }
+        }
+        await pc.setRemoteDescription({ type: 'answer', sdp });
+    }
+    async function onRemoteIce(d) {
+        if (!pc || d['from'] !== host)
+            return;
+        try {
+            await pc.addIceCandidate(d['candidate']);
+        }
+        catch { /* benign */ }
+    }
+    function invoke(channel, payload) {
+        if (!dc || dc.readyState !== 'open')
+            return Promise.reject(new Error('proxy not connected'));
+        const id = String(seq++);
+        return new Promise((resolve, reject) => {
+            const timer = reqTimeout > 0
+                ? setTimeout(() => { pending.delete(id); reject(new Error(`proxy invoke timed out: ${channel}`)); }, reqTimeout)
+                : null;
+            pending.set(id, { resolve, reject, timer });
+            dc.send(JSON.stringify({ t: 'req', id, channel, payload }));
+        });
+    }
+    return {
+        listHosts,
+        connect,
+        invoke,
+        isOpen: () => dc?.readyState === 'open',
+        hostDeviceId: () => host,
+        close: cleanup,
+    };
+}
+//# sourceMappingURL=proxyClient.js.map

package/dist/native/proxyClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxyClient.js","sourceRoot":"","sources":["../../src/native/proxyClient.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,yFAAyF;AACzF,0FAA0F;AAC1F,oFAAoF;AACpF,yFAAyF;AACzF,OAAO,EAAE,gBAAgB,EAAoB,MAAM,kBAAkB,CAAC;AAmDtE,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,GAAqB,EAAE,EAAE,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,IAAI,MAAM,CAAC;IACnD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC;IAEjD,IAAI,EAAE,GAA6B,IAAI,CAAC;IACxC,IAAI,EAAE,GAA0B,IAAI,CAAC;IACrC,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC3C,MAAM,IAAI,GAAsB,EAAE,CAAC;IAEnC,SAAS,OAAO;QACd,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,GAAG,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC,CAAC,KAAK;gBAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC;YAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC;YAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACzC,EAAE,GAAG,IAAI,CAAC;QACV,EAAE,GAAG,IAAI,CAAC;IACZ,CAAC;IAED,SAAS,WAAW,CAAC,GAAY;QAC/B,IAAI,CAA8G,CAAC;QACnH,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAkB,CAAC,CAAC,CAAC;QAC/F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrB,IAAI,CAAC,CAAC,KAAK;gBAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC,EAAE;gBAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,KAAK,UAAU,SAAS;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC1F,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAI,GAAG,CAAC,SAAS,CAA4B,IAAI,EAAE,CAAC;QACjE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,YAAoB;QACzC,OAAO,EAAE,CAAC;QACV,IAAI,GAAG,YAAY,CAAC;QACpB,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/D,EAAE,GAAG,IAAI,CAAC;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAChD,EAAE,GAAG,OAAO,CAAC;QAEb,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,EAAE,EAAE;YAC1B,IAAI,CAAC,CAAC,SAAS;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACtG,CAAC,CAAC;QACF,OAAO,CAAC,SAAS,GAAG,CAAC,CAAe,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,KAAK,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,KAAK,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3F,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;YACjG,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,EAAE,GAAG,IAAI,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAErE,MAAM,MAAM,CAAC;IACf,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,CAA0B;QAChD,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI;YAAE,OAAO;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACnG,IAAI,CAAC,EAAE,EAAE,CAAC;gBAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;QACjC,CAAC;QACD,MAAM,EAAE,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,CAA0B;QACnD,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI;YAAE,OAAO;QACtC,IAAI,CAAC;YAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAwB,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACjG,CAAC;IAED,SAAS,MAAM,CAAC,OAAe,EAAE,OAAgB;QAC/C,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC7F,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACzB,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9C,MAAM,KAAK,GAAG,UAAU,GAAG,CAAC;gBAC1B,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;gBAChH,CAAC,CAAC,IAAI,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5C,EAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,SAAS;QACT,OAAO;QACP,MAAM;QACN,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,UAAU,KAAK,MAAM;QACvC,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI;QACxB,KAAK,EAAE,OAAO;KACf,CAAC;AACJ,CAAC"}

package/dist/native/proxyCrypto.d.ts

@@ -0,0 +1,12 @@
+export type ProxyRole = 'client' | 'host';
+/** Extract + normalize the DTLS fingerprint from an SDP blob ("sha-256 AB:CD:.."). */
+export declare function parseFingerprint(sdp: string): string | null;
+export declare function fpTag(msk: Uint8Array, role: ProxyRole, fingerprint: string): Promise<string>;
+export declare function verifyFpTag(msk: Uint8Array, role: ProxyRole, fingerprint: string | null, tag: string | undefined): Promise<boolean>;
+/** Convenience signer bound to an MSK — what proxyClient expects when MSK is in-JS. */
+export interface ProxySigner {
+    sign(role: ProxyRole, fingerprint: string): Promise<string>;
+    verify(role: ProxyRole, fingerprint: string, tag: string): Promise<boolean>;
+}
+export declare function mskSigner(msk: Uint8Array): ProxySigner;
+//# sourceMappingURL=proxyCrypto.d.ts.map

package/dist/native/proxyCrypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxyCrypto.d.ts","sourceRoot":"","sources":["../../src/native/proxyCrypto.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;AA0B1C,sFAAsF;AACtF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG3D;AAED,wBAAsB,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIlG;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,SAAS,EACf,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,GAAG,EAAE,MAAM,GAAG,SAAS,GACtB,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7E;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,WAAW,CAKtD"}

package/dist/native/proxyCrypto.js

@@ -0,0 +1,53 @@
+// Client-side fingerprint auth for the Ugly Proxy. Binds the WebRTC DTLS fingerprint to
+// the per-user MSK (from the cookie-sync system) so the signaling relay can't MITM the
+// handshake. Implemented with WebCrypto (HKDF + HMAC-SHA256) — no extra dependency, and
+// byte-compatible with the host side's @noble implementation (same RFC 5869 / RFC 2104).
+const INFO = 'ugly-native-proxy-v1';
+const enc = new TextEncoder();
+function toHex(buf) {
+    const b = new Uint8Array(buf);
+    let s = '';
+    for (let i = 0; i < b.length; i++)
+        s += b[i].toString(16).padStart(2, '0');
+    return s;
+}
+function subtle() {
+    const c = globalThis.crypto;
+    if (!c?.subtle)
+        throw new Error('[proxyCrypto] WebCrypto SubtleCrypto unavailable');
+    return c.subtle;
+}
+/** HKDF-SHA256(MSK) → 32-byte proxy-auth key, imported as an HMAC signing key. */
+async function deriveHmacKey(msk) {
+    const base = await subtle().importKey('raw', msk, 'HKDF', false, ['deriveBits']);
+    const bits = await subtle().deriveBits({ name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: enc.encode(INFO) }, base, 256);
+    return subtle().importKey('raw', bits, { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+}
+/** Extract + normalize the DTLS fingerprint from an SDP blob ("sha-256 AB:CD:.."). */
+export function parseFingerprint(sdp) {
+    const m = /a=fingerprint:(\S+)\s+([0-9A-Fa-f:]+)/.exec(sdp || '');
+    return m ? `${m[1].toLowerCase()} ${m[2].toUpperCase()}` : null;
+}
+export async function fpTag(msk, role, fingerprint) {
+    const key = await deriveHmacKey(msk);
+    const sig = await subtle().sign('HMAC', key, enc.encode(`${role}|${fingerprint}`));
+    return toHex(sig);
+}
+export async function verifyFpTag(msk, role, fingerprint, tag) {
+    if (!fingerprint || !tag)
+        return false;
+    const expected = await fpTag(msk, role, fingerprint);
+    if (expected.length !== tag.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < expected.length; i++)
+        diff |= expected.charCodeAt(i) ^ tag.charCodeAt(i);
+    return diff === 0;
+}
+export function mskSigner(msk) {
+    return {
+        sign: (role, fp) => fpTag(msk, role, fp),
+        verify: (role, fp, tag) => verifyFpTag(msk, role, fp, tag),
+    };
+}
+//# sourceMappingURL=proxyCrypto.js.map

package/dist/native/proxyCrypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxyCrypto.js","sourceRoot":"","sources":["../../src/native/proxyCrypto.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,uFAAuF;AACvF,wFAAwF;AACxF,yFAAyF;AAEzF,MAAM,IAAI,GAAG,sBAAsB,CAAC;AACpC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAI9B,SAAS,KAAK,CAAC,GAAgB;IAC7B,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM;IACb,MAAM,CAAC,GAAI,UAAkC,CAAC,MAAM,CAAC;IACrD,IAAI,CAAC,CAAC,EAAE,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,CAAC;AAClB,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,aAAa,CAAC,GAAe;IAC1C,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,UAAU,CACpC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAClF,IAAI,EACJ,GAAG,CACJ,CAAC;IACF,OAAO,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,CAAC,GAAG,uCAAuC,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,GAAe,EAAE,IAAe,EAAE,WAAmB;IAC/E,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;IACnF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAe,EACf,IAAe,EACf,WAA0B,EAC1B,GAAuB;IAEvB,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7F,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAQD,MAAM,UAAU,SAAS,CAAC,GAAe;IACvC,OAAO;QACL,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC;KAC3D,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ugly-app",
-  "version": "0.1.676",
+  "version": "0.1.678",
   "type": "module",
   "comment:files": "Allowlist what ships to npm. dist = runtime; src = sourcemap targets (dist/*.js.map reference ../../src/); templates = CLI scaffold. Everything else at repo root (.pgdata local Postgres, coverage, assets/icons sources, test/, test-results/) is excluded by omission. The !negations strip the scaffold's installed deps + cruft (templates/node_modules is 200MB+ and must never ship). package.json/README/LICENSE ship automatically.",
   "files": [

package/src/cli/version.ts

@@ -1,2 +1,2 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.676";
+export const CLI_VERSION = "0.1.678";

package/src/native/index.ts

@@ -48,3 +48,17 @@ export type { BrowseFacade } from './facades/browse.js';
 export type { McpFacade } from './facades/mcp.js';
 export type { TerminalFacade } from './facades/terminal.js';
 export { MCP_CATALOG } from './mcp-catalog.js';
+
+// ── Ugly Proxy (remote UglyNative over WebRTC) ──
+export { createProxyClient } from './proxyClient.js';
+export type {
+  ProxyClient,
+  ProxyClientOpts,
+  ProxySocket,
+  HostInfo,
+  RTCFactory,
+} from './proxyClient.js';
+export { isDesktopChannel, withProxy, dispatchNativeEvent, DESKTOP_NAMESPACES } from './proxy.js';
+export type { WithProxyOpts } from './proxy.js';
+export { fpTag, verifyFpTag, parseFingerprint, mskSigner } from './proxyCrypto.js';
+export type { ProxyRole, ProxySigner } from './proxyCrypto.js';

package/src/native/proxy.test.ts

@@ -0,0 +1,81 @@
+import { describe, it, expect, vi } from 'vitest';
+import { isDesktopChannel, withProxy } from './proxy.js';
+import { NativeUnavailableError } from './protocol.js';
+import type { UglyNative } from './protocol.js';
+import type { ProxyClient } from './proxyClient.js';
+
+function fakeClient(open: boolean): ProxyClient {
+  return {
+    listHosts: async () => [],
+    connect: async () => {},
+    invoke: vi.fn(async () => ({ viaProxy: true })),
+    isOpen: () => open,
+    hostDeviceId: () => (open ? 'h' : null),
+    close: () => {},
+  };
+}
+
+function fakeBase(): UglyNative {
+  return {
+    platform: 'ios',
+    invoke: vi.fn(async () => ({ viaLocal: true })) as unknown as UglyNative['invoke'],
+    subscribe: vi.fn(() => () => {}) as unknown as UglyNative['subscribe'],
+  };
+}
+
+describe('isDesktopChannel', () => {
+  it('classifies desktop capabilities', () => {
+    for (const ch of ['fs.readFile', 'process.spawn', 'net.connect', 'serve.start', 'workers.register', 'terminal.open', 'task.start', 'mcp.call']) {
+      expect(isDesktopChannel(ch)).toBe(true);
+    }
+  });
+  it('classifies device capabilities as local', () => {
+    for (const ch of ['clipboard.writeText', 'gps.start', 'tts.start', 'push.register', 'alarm.schedule', 'liveActivity.startWorkout']) {
+      expect(isDesktopChannel(ch)).toBe(false);
+    }
+  });
+});
+
+describe('withProxy', () => {
+  it('routes desktop-cap calls to the proxy when connected', async () => {
+    const base = fakeBase();
+    const client = fakeClient(true);
+    const n = withProxy(base, { client });
+    const r = await n.invoke('fs.readFile' as never, { path: '/x' } as never);
+    expect(r).toEqual({ viaProxy: true });
+    expect(client.invoke).toHaveBeenCalledWith('fs.readFile', { path: '/x' });
+    expect(base.invoke).not.toHaveBeenCalled();
+  });
+
+  it('keeps device-cap calls local', async () => {
+    const base = fakeBase();
+    const client = fakeClient(true);
+    const n = withProxy(base, { client });
+    const r = await n.invoke('clipboard.writeText' as never, { text: 'hi' } as never);
+    expect(r).toEqual({ viaLocal: true });
+    expect(client.invoke).not.toHaveBeenCalled();
+  });
+
+  it('errors on desktop-cap with no host when remote-only', async () => {
+    const base = fakeBase();
+    const client = fakeClient(false);
+    const n = withProxy(base, { client, desktopCapsAreRemoteOnly: true });
+    await expect(n.invoke('fs.readFile' as never, {} as never)).rejects.toBeInstanceOf(NativeUnavailableError);
+    expect(base.invoke).not.toHaveBeenCalled();
+  });
+
+  it('falls through desktop-cap to local when not remote-only and proxy idle (desktop host)', async () => {
+    const base = fakeBase();
+    const client = fakeClient(false);
+    const n = withProxy(base, { client });
+    const r = await n.invoke('fs.readFile' as never, {} as never);
+    expect(r).toEqual({ viaLocal: true });
+  });
+
+  it('passes subscribe through to the base', () => {
+    const base = fakeBase();
+    const n = withProxy(base, { client: fakeClient(true) });
+    n.subscribe('gps.position' as never, () => {});
+    expect(base.subscribe).toHaveBeenCalled();
+  });
+});

package/src/native/proxy.ts

@@ -0,0 +1,75 @@
+// Routes UglyNative calls between the local transport and the Ugly Proxy. Desktop-grade
+// capabilities (fs/process/net/serve/workers/terminal/sandbox/mcp/secrets/browse/task)
+// have NO local implementation on mobile/web — they tunnel to the selected desktop host.
+// Device capabilities (clipboard/push/gps/tts/...) always stay local. Additive: wrap a
+// base UglyNative with `withProxy(...)`; the core install.ts is untouched.
+import type { UglyNative } from './protocol.js';
+import { NativeUnavailableError } from './protocol.js';
+import type { ProxyClient } from './proxyClient.js';
+
+/** Namespaces that require a desktop host (RCE-grade / filesystem / long-running tasks). */
+export const DESKTOP_NAMESPACES: ReadonlySet<string> = new Set([
+  'fs',
+  'process',
+  'net',
+  'serve',
+  'workers',
+  'terminal',
+  'sandbox',
+  'mcp',
+  'secrets',
+  'browse',
+  'task',
+]);
+
+export function isDesktopChannel(channel: string): boolean {
+  const ns = channel.includes('.') ? channel.slice(0, channel.indexOf('.')) : channel;
+  return DESKTOP_NAMESPACES.has(ns);
+}
+
+export interface WithProxyOpts {
+  client: ProxyClient;
+  /**
+   * Whether a given channel should tunnel to the host. Default: desktop-cap channels go
+   * to the proxy when it's connected. On a real desktop (full local impl) pass a predicate
+   * that returns false so everything stays local.
+   */
+  shouldProxy?: (channel: string) => boolean;
+  /** True on platforms with no local desktop-cap implementation (mobile/web). */
+  desktopCapsAreRemoteOnly?: boolean;
+}
+
+/**
+ * Wrap a base UglyNative so desktop-capability calls route through the proxy. Events from
+ * the host must be fed back into the base event bus by wiring the proxy client's `onEvent`
+ * to a `dispatchNativeEvent` (below) — then `base.subscribe` delivers them unchanged.
+ */
+export function withProxy(base: UglyNative, opts: WithProxyOpts): UglyNative {
+  const shouldProxy = opts.shouldProxy ?? ((ch: string) => isDesktopChannel(ch) && opts.client.isOpen());
+  return {
+    platform: base.platform,
+    invoke: ((channel: string, payload: unknown) => {
+      if (shouldProxy(channel)) return opts.client.invoke(channel, payload);
+      if (opts.desktopCapsAreRemoteOnly && isDesktopChannel(channel)) {
+        // No host selected and no local impl — surface a clear, actionable error.
+        return Promise.reject(new NativeUnavailableError(channel));
+      }
+      return base.invoke(channel as never, payload as never);
+    }) as UglyNative['invoke'],
+    subscribe: base.subscribe,
+  };
+}
+
+/** Dispatch a proxy event onto the same 'uglyNative' CustomEvent bus base.subscribe reads. */
+export function dispatchNativeEvent(
+  win: { dispatchEvent(e: unknown): boolean },
+  event: string,
+  data: unknown,
+): void {
+  const detail = { event, data };
+  const ev =
+    typeof CustomEvent === 'function'
+      ? new CustomEvent('uglyNative', { detail })
+      : ({ type: 'uglyNative', detail } as unknown as Event);
+  win.dispatchEvent(ev);
+}

package/src/native/proxyClient.test.ts

@@ -0,0 +1,150 @@
+import { describe, it, expect, vi } from 'vitest';
+import { createProxyClient, type ProxySocket, type RTCFactory } from './proxyClient.js';
+import type { ProxySigner } from './proxyCrypto.js';
+
+const OFFER_SDP = 'v=0\r\na=fingerprint:sha-256 AA:BB\r\n';
+const ANSWER_SDP = 'v=0\r\na=fingerprint:sha-256 CC:DD\r\n';
+const flush = () => new Promise((r) => setTimeout(r, 0));
+
+class FakeDC {
+  readyState: RTCDataChannelState = 'connecting';
+  onopen: (() => void) | null = null;
+  onmessage: ((e: MessageEvent) => void) | null = null;
+  onclose: (() => void) | null = null;
+  sent: string[] = [];
+  send(d: string): void { this.sent.push(d); }
+  close(): void { this.readyState = 'closed'; }
+  open(): void { this.readyState = 'open'; this.onopen?.(); }
+  deliver(obj: unknown): void { this.onmessage?.({ data: JSON.stringify(obj) } as MessageEvent); }
+}
+
+class FakePC {
+  onicecandidate: ((e: RTCPeerConnectionIceEvent) => void) | null = null;
+  localDescription: RTCSessionDescription | null = null;
+  remote: RTCSessionDescriptionInit | null = null;
+  added: RTCIceCandidateInit[] = [];
+  dc = new FakeDC();
+  closed = false;
+  createDataChannel(): RTCDataChannel { return this.dc as unknown as RTCDataChannel; }
+  async createOffer(): Promise<RTCSessionDescriptionInit> { return { type: 'offer', sdp: OFFER_SDP }; }
+  async setLocalDescription(d: RTCSessionDescriptionInit): Promise<void> {
+    this.localDescription = { type: d.type, sdp: d.sdp } as RTCSessionDescription;
+  }
+  async setRemoteDescription(d: RTCSessionDescriptionInit): Promise<void> { this.remote = d; }
+  async addIceCandidate(c: RTCIceCandidateInit): Promise<void> { this.added.push(c); }
+  close(): void { this.closed = true; }
+  emitIce(candidate: unknown): void { this.onicecandidate?.({ candidate } as RTCPeerConnectionIceEvent); }
+}
+
+function fakeSocket() {
+  const handlers = new Map<string, Set<(d: unknown) => void>>();
+  const emitted: Array<{ type: string; data: unknown }> = [];
+  let sendImpl: ((type: string, data: object) => Promise<unknown>) | undefined;
+  const socket: ProxySocket = {
+    emit: (type, data) => emitted.push({ type, data }),
+    on: (e, h) => { let s = handlers.get(e); if (!s) { s = new Set(); handlers.set(e, s); } s.add(h); return () => s!.delete(h); },
+    send: (type, data) => (sendImpl ? sendImpl(type, data) : Promise.reject(new Error('no send'))),
+  };
+  return {
+    socket,
+    emitted,
+    recv: (type: string, data: unknown) => handlers.get(type)?.forEach((h) => h(data)),
+    setSend: (fn: (type: string, data: object) => Promise<unknown>) => { sendImpl = fn; },
+  };
+}
+
+const okSigner: ProxySigner = { sign: async () => 'CTAG', verify: async () => true };
+
+function setup(signer?: ProxySigner, openTimeoutMs = 1000) {
+  const { socket, emitted, recv, setSend } = fakeSocket();
+  let pc!: FakePC;
+  const rtcFactory: RTCFactory = () => { pc = new FakePC(); return pc as unknown as RTCPeerConnection; };
+  const onEvent = vi.fn();
+  const client = createProxyClient({ socket, selfDeviceId: 'me', signer, rtcFactory, onEvent, openTimeoutMs });
+  return { client, emitted, recv, setSend, onEvent, getPc: () => pc };
+}
+
+describe('createProxyClient', () => {
+  it('connect emits a signed rtc:offer and resolves once the DataChannel opens', async () => {
+    const { client, emitted, recv, getPc } = setup(okSigner);
+    const p = client.connect('hostX');
+    await flush();
+    expect(emitted).toContainEqual({ type: 'rtc:offer', data: { to: 'hostX', sdp: OFFER_SDP, fpTag: 'CTAG' } });
+
+    recv('rtc:answer', { from: 'hostX', sdp: ANSWER_SDP, fpTag: 'HTAG' });
+    await flush();
+    expect(getPc().remote).toEqual({ type: 'answer', sdp: ANSWER_SDP });
+
+    getPc().dc.open();
+    await p;
+    expect(client.isOpen()).toBe(true);
+    expect(client.hostDeviceId()).toBe('hostX');
+    client.close();
+  });
+
+  it('tunnels invoke as a req frame and resolves on the matching res', async () => {
+    const { client, recv, getPc } = setup(okSigner);
+    const p = client.connect('hostX');
+    await flush();
+    recv('rtc:answer', { from: 'hostX', sdp: ANSWER_SDP, fpTag: 'H' });
+    getPc().dc.open();
+    await p;
+
+    const r = client.invoke('fs.readFile', { path: '/x' });
+    const sent = JSON.parse(getPc().dc.sent[0]);
+    expect(sent).toMatchObject({ t: 'req', channel: 'fs.readFile', payload: { path: '/x' } });
+    getPc().dc.deliver({ t: 'res', id: sent.id, ok: true, result: { content: 'hi' } });
+    await expect(r).resolves.toEqual({ content: 'hi' });
+    client.close();
+  });
+
+  it('rejects invoke when the host returns res ok:false', async () => {
+    const { client, recv, getPc } = setup(okSigner);
+    const p = client.connect('hostX');
+    await flush(); recv('rtc:answer', { from: 'hostX', sdp: ANSWER_SDP }); getPc().dc.open(); await p;
+    const r = client.invoke('process.spawn', {});
+    const sent = JSON.parse(getPc().dc.sent[0]);
+    getPc().dc.deliver({ t: 'res', id: sent.id, ok: false, error: 'denied' });
+    await expect(r).rejects.toThrow('denied');
+    client.close();
+  });
+
+  it('routes evt frames to onEvent', async () => {
+    const { client, recv, getPc, onEvent } = setup(okSigner);
+    const p = client.connect('hostX');
+    await flush(); recv('rtc:answer', { from: 'hostX', sdp: ANSWER_SDP }); getPc().dc.open(); await p;
+    getPc().dc.deliver({ t: 'evt', event: 'task.event:t1', data: { delta: 'x' } });
+    expect(onEvent).toHaveBeenCalledWith('task.event:t1', { delta: 'x' });
+    client.close();
+  });
+
+  it('forwards local ICE candidates addressed to the host', async () => {
+    const { client, emitted, getPc } = setup(okSigner);
+    const p = client.connect('hostX');
+    await flush();
+    getPc().emitIce({ toJSON: () => ({ candidate: 'cand' }) });
+    expect(emitted).toContainEqual({ type: 'rtc:ice', data: { to: 'hostX', candidate: { candidate: 'cand' } } });
+    getPc().dc.open(); await p; client.close();
+  });
+
+  it('rejects a host answer whose fingerprint fails MSK verification', async () => {
+    const badSigner: ProxySigner = { sign: async () => 'CTAG', verify: async () => false };
+    const { client, recv, getPc } = setup(badSigner, 80);
+    const p = client.connect('hostX');
+    await flush();
+    recv('rtc:answer', { from: 'hostX', sdp: ANSWER_SDP, fpTag: 'forged' });
+    await flush();
+    expect(getPc().remote).toBeNull(); // never accepted
+    await expect(p).rejects.toThrow(/timeout/); // cleaned up; never opened
+  });
+
+  it('listHosts filters to other devices that are hosts', async () => {
+    const { client, setSend } = setup();
+    setSend(async () => ({ devices: [
+      { deviceId: 'me', label: 'mine', isHost: true, lastSeen: 1 },
+      { deviceId: 'h1', label: 'Desk', isHost: true, lastSeen: 2 },
+      { deviceId: 'c1', label: 'Phone', isHost: false, lastSeen: 3 },
+    ] }));
+    expect(await client.listHosts()).toEqual([{ deviceId: 'h1', label: 'Desk', isHost: true, lastSeen: 2 }]);
+  });
+});

package/src/native/proxyClient.ts

@@ -0,0 +1,179 @@
+// Client side of the Ugly Proxy: from a phone/web (or a desktop acting as a client), open
+// a WebRTC DataChannel to a chosen desktop host and tunnel UglyNative calls over it (the
+// "dumb pipe"). Signaling rides the app Socket's rtc:* messages; DTLS gives e2e transport
+// encryption; the MSK-bound fingerprint check (proxyCrypto) authenticates the host.
+// RTCPeerConnection + Socket are injectable so the framing/correlation is unit-testable.
+import { parseFingerprint, type ProxySigner } from './proxyCrypto.js';
+
+/** Subset of ugly-app's client Socket the proxy needs (emit/on are runtime-generic). */
+export interface ProxySocket {
+  emit(type: string, data: object): void;
+  on(event: string, handler: (data: unknown) => void): () => void;
+  /** Request/response (used for presence:query). */
+  send?(type: string, data: object, timeout?: number): Promise<unknown>;
+}
+
+export type RTCFactory = (config: RTCConfiguration) => RTCPeerConnection;
+
+export interface HostInfo {
+  deviceId: string;
+  label: string;
+  isHost: boolean;
+  lastSeen: number;
+}
+
+export interface ProxyClientOpts {
+  socket: ProxySocket;
+  /** This device's id (so listHosts can exclude self). */
+  selfDeviceId: string;
+  /** When set, sign our offer fingerprint + verify the host's answer fingerprint. */
+  signer?: ProxySigner;
+  iceServers?: RTCIceServer[];
+  rtcFactory?: RTCFactory;
+  /** evt frames from the host (UglyNative subscribe events, task deltas) land here. */
+  onEvent?: (event: string, data: unknown) => void;
+  requestTimeoutMs?: number;
+  openTimeoutMs?: number;
+}
+
+export interface ProxyClient {
+  /** Query the worker for this user's online desktop hosts. */
+  listHosts(): Promise<HostInfo[]>;
+  /** Establish (or re-establish) the DataChannel to a host. Resolves when open. */
+  connect(hostDeviceId: string): Promise<void>;
+  /** Tunnel one UglyNative invoke over the DataChannel. */
+  invoke(channel: string, payload: unknown): Promise<unknown>;
+  isOpen(): boolean;
+  hostDeviceId(): string | null;
+  close(): void;
+}
+
+interface Pending {
+  resolve(v: unknown): void;
+  reject(e: Error): void;
+  timer: ReturnType<typeof setTimeout> | null;
+}
+
+function rec(d: unknown): Record<string, unknown> {
+  return (d ?? {}) as Record<string, unknown>;
+}
+
+export function createProxyClient(opts: ProxyClientOpts): ProxyClient {
+  const rtcFactory = opts.rtcFactory ?? ((cfg: RTCConfiguration) => new RTCPeerConnection(cfg));
+  const reqTimeout = opts.requestTimeoutMs ?? 30_000;
+  const openTimeout = opts.openTimeoutMs ?? 15_000;
+
+  let pc: RTCPeerConnection | null = null;
+  let dc: RTCDataChannel | null = null;
+  let host: string | null = null;
+  let seq = 0;
+  const pending = new Map<string, Pending>();
+  const offs: Array<() => void> = [];
+
+  function cleanup(): void {
+    for (const off of offs) { try { off(); } catch { /* noop */ } }
+    offs.length = 0;
+    for (const p of pending.values()) {
+      if (p.timer) clearTimeout(p.timer);
+      p.reject(new Error('proxy connection closed'));
+    }
+    pending.clear();
+    try { dc?.close(); } catch { /* noop */ }
+    try { pc?.close(); } catch { /* noop */ }
+    dc = null;
+    pc = null;
+  }
+
+  function onDcMessage(raw: unknown): void {
+    let f: { t?: string; id?: string; ok?: boolean; result?: unknown; error?: string; event?: string; data?: unknown };
+    try {
+      f = JSON.parse(typeof raw === 'string' ? raw : new TextDecoder().decode(raw as ArrayBuffer));
+    } catch {
+      return;
+    }
+    if (f.t === 'res' && f.id !== undefined) {
+      const p = pending.get(f.id);
+      if (!p) return;
+      pending.delete(f.id);
+      if (p.timer) clearTimeout(p.timer);
+      if (f.ok) p.resolve(f.result);
+      else p.reject(new Error(f.error ?? 'proxy error'));
+    } else if (f.t === 'evt' && f.event) {
+      opts.onEvent?.(f.event, f.data);
+    }
+  }
+
+  async function listHosts(): Promise<HostInfo[]> {
+    if (!opts.socket.send) throw new Error('socket lacks request support for presence:query');
+    const res = rec(await opts.socket.send('presence:query', {}));
+    const devices = (res['devices'] as HostInfo[] | undefined) ?? [];
+    return devices.filter((d) => d.isHost && d.deviceId !== opts.selfDeviceId);
+  }
+
+  async function connect(hostDeviceId: string): Promise<void> {
+    cleanup();
+    host = hostDeviceId;
+    const conn = rtcFactory({ iceServers: opts.iceServers ?? [] });
+    pc = conn;
+    const channel = conn.createDataChannel('proxy');
+    dc = channel;
+
+    conn.onicecandidate = (e) => {
+      if (e.candidate) opts.socket.emit('rtc:ice', { to: hostDeviceId, candidate: e.candidate.toJSON() });
+    };
+    channel.onmessage = (e: MessageEvent) => onDcMessage(e.data);
+
+    offs.push(opts.socket.on('rtc:answer', (d) => { void onAnswer(rec(d)); }));
+    offs.push(opts.socket.on('rtc:ice', (d) => { void onRemoteIce(rec(d)); }));
+    offs.push(opts.socket.on('rtc:error', (d) => { if (rec(d)['from'] === host) cleanup(); }));
+
+    const opened = new Promise<void>((resolve, reject) => {
+      const timer = setTimeout(() => reject(new Error('proxy DataChannel open timeout')), openTimeout);
+      channel.onopen = () => { clearTimeout(timer); resolve(); };
+    });
+
+    const offer = await conn.createOffer();
+    await conn.setLocalDescription(offer);
+    const sdp = conn.localDescription?.sdp ?? offer.sdp ?? '';
+    const tag = opts.signer ? await opts.signer.sign('client', parseFingerprint(sdp) ?? '') : undefined;
+    opts.socket.emit('rtc:offer', { to: hostDeviceId, sdp, fpTag: tag });
+
+    await opened;
+  }
+
+  async function onAnswer(d: Record<string, unknown>): Promise<void> {
+    if (!pc || d['from'] !== host) return;
+    const sdp = String(d['sdp'] ?? '');
+    if (opts.signer) {
+      const ok = await opts.signer.verify('host', parseFingerprint(sdp) ?? '', String(d['fpTag'] ?? ''));
+      if (!ok) { cleanup(); return; }
+    }
+    await pc.setRemoteDescription({ type: 'answer', sdp });
+  }
+
+  async function onRemoteIce(d: Record<string, unknown>): Promise<void> {
+    if (!pc || d['from'] !== host) return;
+    try { await pc.addIceCandidate(d['candidate'] as RTCIceCandidateInit); } catch { /* benign */ }
+  }
+
+  function invoke(channel: string, payload: unknown): Promise<unknown> {
+    if (!dc || dc.readyState !== 'open') return Promise.reject(new Error('proxy not connected'));
+    const id = String(seq++);
+    return new Promise<unknown>((resolve, reject) => {
+      const timer = reqTimeout > 0
+        ? setTimeout(() => { pending.delete(id); reject(new Error(`proxy invoke timed out: ${channel}`)); }, reqTimeout)
+        : null;
+      pending.set(id, { resolve, reject, timer });
+      dc!.send(JSON.stringify({ t: 'req', id, channel, payload }));
+    });
+  }
+
+  return {
+    listHosts,
+    connect,
+    invoke,
+    isOpen: () => dc?.readyState === 'open',
+    hostDeviceId: () => host,
+    close: cleanup,
+  };
+}

package/src/native/proxyCrypto.test.ts

@@ -0,0 +1,38 @@
+import { describe, it, expect } from 'vitest';
+import { fpTag, verifyFpTag, parseFingerprint, mskSigner } from './proxyCrypto.js';
+
+const MSK = new Uint8Array(32).fill(7);
+const SDP = [
+  'v=0',
+  'a=fingerprint:sha-256 11:22:33:44:55:66:77:88:99:AA:BB:CC:DD:EE:FF:00:11:22:33:44:55:66:77:88:99:AA:BB:CC:DD:EE:FF:00',
+].join('\r\n');
+
+describe('proxyCrypto (WebCrypto)', () => {
+  it('parses the DTLS fingerprint', () => {
+    expect(parseFingerprint(SDP)).toMatch(/^sha-256 11:22:/);
+  });
+
+  it('produces a stable, role-bound tag that verifies', async () => {
+    const fp = parseFingerprint(SDP)!;
+    const tag = await fpTag(MSK, 'client', fp);
+    expect(tag).toHaveLength(64); // hex SHA-256
+    expect(await fpTag(MSK, 'client', fp)).toBe(tag); // deterministic
+    expect(await verifyFpTag(MSK, 'client', fp, tag)).toBe(true);
+  });
+
+  it('rejects swapped fingerprint, wrong role, wrong MSK, missing tag', async () => {
+    const fp = parseFingerprint(SDP)!;
+    const tag = await fpTag(MSK, 'client', fp);
+    expect(await verifyFpTag(MSK, 'client', fp.replace('11:22', 'AA:BB'), tag)).toBe(false);
+    expect(await verifyFpTag(MSK, 'host', fp, tag)).toBe(false);
+    expect(await verifyFpTag(new Uint8Array(32).fill(9), 'client', fp, tag)).toBe(false);
+    expect(await verifyFpTag(MSK, 'client', fp, undefined)).toBe(false);
+  });
+
+  it('mskSigner wraps sign/verify', async () => {
+    const s = mskSigner(MSK);
+    const fp = parseFingerprint(SDP)!;
+    const tag = await s.sign('client', fp);
+    expect(await s.verify('client', fp, tag)).toBe(true);
+  });
+});

package/src/native/proxyCrypto.ts

@@ -0,0 +1,72 @@
+// Client-side fingerprint auth for the Ugly Proxy. Binds the WebRTC DTLS fingerprint to
+// the per-user MSK (from the cookie-sync system) so the signaling relay can't MITM the
+// handshake. Implemented with WebCrypto (HKDF + HMAC-SHA256) — no extra dependency, and
+// byte-compatible with the host side's @noble implementation (same RFC 5869 / RFC 2104).
+
+const INFO = 'ugly-native-proxy-v1';
+const enc = new TextEncoder();
+
+export type ProxyRole = 'client' | 'host';
+
+function toHex(buf: ArrayBuffer): string {
+  const b = new Uint8Array(buf);
+  let s = '';
+  for (let i = 0; i < b.length; i++) s += b[i]!.toString(16).padStart(2, '0');
+  return s;
+}
+
+function subtle(): SubtleCrypto {
+  const c = (globalThis as { crypto?: Crypto }).crypto;
+  if (!c?.subtle) throw new Error('[proxyCrypto] WebCrypto SubtleCrypto unavailable');
+  return c.subtle;
+}
+
+/** HKDF-SHA256(MSK) → 32-byte proxy-auth key, imported as an HMAC signing key. */
+async function deriveHmacKey(msk: Uint8Array): Promise<CryptoKey> {
+  const base = await subtle().importKey('raw', msk as BufferSource, 'HKDF', false, ['deriveBits']);
+  const bits = await subtle().deriveBits(
+    { name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: enc.encode(INFO) },
+    base,
+    256,
+  );
+  return subtle().importKey('raw', bits, { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+}
+
+/** Extract + normalize the DTLS fingerprint from an SDP blob ("sha-256 AB:CD:.."). */
+export function parseFingerprint(sdp: string): string | null {
+  const m = /a=fingerprint:(\S+)\s+([0-9A-Fa-f:]+)/.exec(sdp || '');
+  return m ? `${m[1].toLowerCase()} ${m[2].toUpperCase()}` : null;
+}
+
+export async function fpTag(msk: Uint8Array, role: ProxyRole, fingerprint: string): Promise<string> {
+  const key = await deriveHmacKey(msk);
+  const sig = await subtle().sign('HMAC', key, enc.encode(`${role}|${fingerprint}`));
+  return toHex(sig);
+}
+
+export async function verifyFpTag(
+  msk: Uint8Array,
+  role: ProxyRole,
+  fingerprint: string | null,
+  tag: string | undefined,
+): Promise<boolean> {
+  if (!fingerprint || !tag) return false;
+  const expected = await fpTag(msk, role, fingerprint);
+  if (expected.length !== tag.length) return false;
+  let diff = 0;
+  for (let i = 0; i < expected.length; i++) diff |= expected.charCodeAt(i) ^ tag.charCodeAt(i);
+  return diff === 0;
+}
+
+/** Convenience signer bound to an MSK — what proxyClient expects when MSK is in-JS. */
+export interface ProxySigner {
+  sign(role: ProxyRole, fingerprint: string): Promise<string>;
+  verify(role: ProxyRole, fingerprint: string, tag: string): Promise<boolean>;
+}
+
+export function mskSigner(msk: Uint8Array): ProxySigner {
+  return {
+    sign: (role, fp) => fpTag(msk, role, fp),
+    verify: (role, fp, tag) => verifyFpTag(msk, role, fp, tag),
+  };
+}