uxnan-bridge 0.0.1-alpha.20260621

package/dist/src/transport/session-handler.js

@@ -0,0 +1,134 @@
+/**
+ * Drives a single mobile connection: runs the E2EE handshake, then decrypts
+ * inbound envelopes, dispatches the JSON-RPC request through the router, and
+ * returns the encrypted response.
+ *
+ * Transport-agnostic: works over any {@link MessageIO} (relay client or LAN
+ * server connection).
+ */
+import { validateE2EEnvelope } from '@uxnan/shared';
+import { queueFor } from './message-io.js';
+import { performServerHandshake } from './server-handshake.js';
+/**
+ * Handle a connection end-to-end. Resolves when the connection closes. Never
+ * throws — handshake/transport failures are logged and the channel is closed.
+ */
+export async function handleSecureConnection(options) {
+    const { io, ctx, router, deviceState, trustStore, displayName } = options;
+    const queue = queueFor(io);
+    const send = (message) => io.send(Buffer.from(JSON.stringify(message), 'utf-8'));
+    let phoneDeviceId;
+    let sessionId;
+    let sink;
+    try {
+        const handshakeOptions = {
+            queue,
+            send,
+            deviceState,
+            trustStore,
+            displayName,
+            now: ctx.now,
+            // Build the channel over this phone's persistent outbound log so its seq
+            // continues across reconnects and outbound messages are retained for
+            // seq-based catch-up.
+            outboundLogFor: (id) => ctx.sessionRegistry.logFor(id),
+            ...(options.expectedSessionId !== undefined
+                ? { expectedSessionId: options.expectedSessionId }
+                : {}),
+        };
+        const result = await performServerHandshake(handshakeOptions);
+        phoneDeviceId = result.phoneDeviceId;
+        sessionId = result.sessionId;
+        // Mark this as the active session so a `notifications/register` from the phone
+        // (and later turn-end pushes) target the right relay session.
+        ctx.pushService.setActiveSession(result.sessionId);
+        // Catch-up (architecture/02a §5.9.2): replay every retained outbound message
+        // the phone hasn't applied yet (seq > resumeState.lastAppliedBridgeOutboundSeq),
+        // re-encrypted under the new session key, BEFORE registering the live sink so
+        // the replayed backlog precedes any new traffic and ordering is preserved.
+        const outboundLog = ctx.sessionRegistry.logFor(result.phoneDeviceId);
+        for (const entry of outboundLog.entriesAfter(result.lastAppliedBridgeOutboundSeq)) {
+            io.send(Buffer.from(JSON.stringify(result.channel.encryptReplay(entry.seq, entry.plaintext)), 'utf-8'));
+        }
+        // Register the encrypted sink synchronously (before any further await) so the
+        // bridge can push notifications immediately. Each live send is encrypted by
+        // the channel, which records it in the outbound log for future catch-up.
+        // Kept in a variable so the teardown below only fires when this connection
+        // is still the current one (a reconnecting phone may have superseded it).
+        sink = {
+            send: (message) => io.send(Buffer.from(JSON.stringify(result.channel.encrypt(toBytes(message))), 'utf-8')),
+        };
+        ctx.sessionRegistry.register(result.phoneDeviceId, sink);
+        const trusted = await trustStore.get(result.phoneDeviceId);
+        ctx.sessions.add({
+            deviceId: result.phoneDeviceId,
+            displayName: trusted?.displayName ?? result.phoneDeviceId,
+            connectedAt: ctx.now(),
+            lastSeen: ctx.now(),
+        });
+        ctx.logger.info(`phone session established (${result.mode}): ${result.phoneDeviceId}`);
+        for (;;) {
+            const raw = await queue.next();
+            const parsed = tryParse(raw);
+            const validation = validateE2EEnvelope(parsed);
+            if (!validation.valid)
+                continue;
+            let plaintext;
+            try {
+                plaintext = result.channel.decrypt(validation.data);
+            }
+            catch (err) {
+                ctx.logger.warn(`envelope rejected: ${errorMessage(err)}`);
+                continue;
+            }
+            const request = tryParse(plaintext);
+            // Tag the request with this connection's session identity so per-phone
+            // handlers (notifications/*) target the right session when several phones
+            // are connected concurrently.
+            const response = await router.dispatchRaw(request, {
+                sessionId: result.sessionId,
+                deviceId: result.phoneDeviceId,
+            });
+            send(result.channel.encrypt(Buffer.from(JSON.stringify(response), 'utf-8')));
+        }
+    }
+    catch (err) {
+        // queue closed (normal disconnect) or handshake failure.
+        if (phoneDeviceId === undefined) {
+            ctx.logger.warn(`handshake failed: ${errorMessage(err)}`);
+        }
+    }
+    finally {
+        if (phoneDeviceId !== undefined) {
+            // Only tear down the shared session state if THIS connection still owns
+            // it. A reconnecting phone (LAN/direct) may have opened a newer connection
+            // that already replaced our sink + active session while our old socket was
+            // still half-open; when our stale connection finally closes, clobbering
+            // the newer one's sink/session/active-id would silently kill its push
+            // delivery. `unregister` returns false when we were superseded.
+            const stillCurrent = sink === undefined || ctx.sessionRegistry.unregister(phoneDeviceId, sink);
+            if (stillCurrent) {
+                ctx.sessions.remove(phoneDeviceId);
+                if (sessionId !== undefined)
+                    ctx.pushService.clearActiveSession(sessionId);
+            }
+            ctx.logger.info(`phone session closed: ${phoneDeviceId}`);
+        }
+        io.close();
+    }
+}
+function toBytes(message) {
+    return Buffer.from(JSON.stringify(message), 'utf-8');
+}
+function tryParse(bytes) {
+    try {
+        return JSON.parse(bytes.toString('utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+function errorMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=session-handler.js.map

package/dist/src/transport/session-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-handler.js","sourceRoot":"","sources":["../../../src/transport/session-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,mBAAmB,EAAuB,MAAM,eAAe,CAAC;AAIzE,OAAO,EAAE,QAAQ,EAAkB,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAc/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAAgC;IAC3E,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAC1E,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,OAAgB,EAAQ,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAEhG,IAAI,aAAiC,CAAC;IACtC,IAAI,SAA6B,CAAC;IAClC,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG;YACvB,KAAK;YACL,IAAI;YACJ,WAAW;YACX,UAAU;YACV,WAAW;YACX,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,yEAAyE;YACzE,qEAAqE;YACrE,sBAAsB;YACtB,cAAc,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAC9D,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QACrC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAC7B,+EAA+E;QAC/E,8DAA8D;QAC9D,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAEnD,6EAA6E;QAC7E,iFAAiF;QACjF,8EAA8E;QAC9E,2EAA2E;QAC3E,MAAM,WAAW,GAAG,GAAG,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACrE,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,4BAA4B,CAAC,EAAE,CAAC;YAClF,EAAE,CAAC,IAAI,CACL,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EACxE,OAAO,CACR,CACF,CAAC;QACJ,CAAC;QAED,8EAA8E;QAC9E,4EAA4E;QAC5E,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,IAAI,GAAG;YACL,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;SAC1F,CAAC;QACF,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC3D,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;YACf,QAAQ,EAAE,MAAM,CAAC,aAAa;YAC9B,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI,MAAM,CAAC,aAAa;YACzD,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE;YACtB,QAAQ,EAAE,GAAG,CAAC,GAAG,EAAE;SACpB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;QAEvF,SAAS,CAAC;YACR,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU,CAAC,KAAK;gBAAE,SAAS;YAEhC,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAsB,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC3D,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YACpC,uEAAuE;YACvE,0EAA0E;YAC1E,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE;gBACjD,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,aAAa;aAC/B,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,yDAAyD;QACzD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,wEAAwE;YACxE,2EAA2E;YAC3E,2EAA2E;YAC3E,wEAAwE;YACxE,sEAAsE;YACtE,gEAAgE;YAChE,MAAM,YAAY,GAChB,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YAC5E,IAAI,YAAY,EAAE,CAAC;gBACjB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBACnC,IAAI,SAAS,KAAK,SAAS;oBAAE,GAAG,CAAC,WAAW,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;YAC7E,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,aAAa,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,OAAgB;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/src/transport/session-registry.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Tracks the live encrypted sink for each connected phone so the bridge can push
+ * JSON-RPC notifications (e.g. streamed agent events) to it, and owns each
+ * phone's persistent {@link OutboundLog} (seq counter + catch-up window).
+ *
+ * The log outlives any single connection: it is created on first use and kept
+ * across reconnects (so a returning phone can be caught up via seq-based
+ * replay), and is dropped only when the device is untrusted ({@link forget}).
+ * Messages sent to a device with no active sink are recorded in its log (and
+ * thus replayed on reconnect) instead of being lost.
+ */
+import { OutboundLog } from './outbound-log.js';
+/** Encrypts a JSON-RPC message and writes it to the active connection. */
+export interface SessionSink {
+    send(message: unknown): void;
+}
+export declare class SessionRegistry {
+    #private;
+    /**
+     * The per-device outbound log, created on first use. The session handler
+     * builds the secure channel over this so its `seq` continues across
+     * reconnects and every outbound message is retained for catch-up.
+     */
+    logFor(deviceId: string): OutboundLog;
+    /** Register the active sink for a device. */
+    register(deviceId: string, sink: SessionSink): void;
+    /**
+     * Drop the live sink (e.g. on disconnect) but KEEP the outbound log so the
+     * phone can be caught up when it reconnects.
+     *
+     * Only removes [sink] if it is still the device's CURRENT sink. A returning
+     * phone (LAN/direct) can open a new connection — whose handshake calls
+     * {@link register} and overwrites the sink — while the old connection's socket
+     * is still half-open; when that stale connection finally tears down, it must
+     * not delete the newer connection's live sink. Returns `true` when this sink
+     * was the current one (i.e. the caller still owned the session), `false` when
+     * a newer connection had already superseded it.
+     */
+    unregister(deviceId: string, sink: SessionSink): boolean;
+    /**
+     * Forget a device entirely — drop its sink AND its outbound log. Used when the
+     * device is untrusted/unpaired: there is nothing to catch up anymore.
+     */
+    forget(deviceId: string): void;
+    /**
+     * Send a message to every known device: delivered live where a sink is
+     * connected, recorded in the outbound log otherwise (so it replays on
+     * reconnect). Each device keeps its own seq.
+     */
+    broadcast(message: unknown): void;
+    isActive(deviceId: string): boolean;
+    /**
+     * Deliver a message to a device. Returns `true` if sent live (the sink
+     * encrypts it, which records it in the log), `false` if the device is offline
+     * and the message was recorded in the log for later replay.
+     */
+    notify(deviceId: string, message: unknown): boolean;
+}

package/dist/src/transport/session-registry.js

@@ -0,0 +1,91 @@
+/**
+ * Tracks the live encrypted sink for each connected phone so the bridge can push
+ * JSON-RPC notifications (e.g. streamed agent events) to it, and owns each
+ * phone's persistent {@link OutboundLog} (seq counter + catch-up window).
+ *
+ * The log outlives any single connection: it is created on first use and kept
+ * across reconnects (so a returning phone can be caught up via seq-based
+ * replay), and is dropped only when the device is untrusted ({@link forget}).
+ * Messages sent to a device with no active sink are recorded in its log (and
+ * thus replayed on reconnect) instead of being lost.
+ */
+import { OutboundLog } from './outbound-log.js';
+export class SessionRegistry {
+    #sinks = new Map();
+    #logs = new Map();
+    /**
+     * The per-device outbound log, created on first use. The session handler
+     * builds the secure channel over this so its `seq` continues across
+     * reconnects and every outbound message is retained for catch-up.
+     */
+    logFor(deviceId) {
+        let log = this.#logs.get(deviceId);
+        if (!log) {
+            log = new OutboundLog();
+            this.#logs.set(deviceId, log);
+        }
+        return log;
+    }
+    /** Register the active sink for a device. */
+    register(deviceId, sink) {
+        this.#sinks.set(deviceId, sink);
+        // Ensure a log exists so subsequent broadcasts/notifies are retained even if
+        // the handshake path didn't pre-create one.
+        this.logFor(deviceId);
+    }
+    /**
+     * Drop the live sink (e.g. on disconnect) but KEEP the outbound log so the
+     * phone can be caught up when it reconnects.
+     *
+     * Only removes [sink] if it is still the device's CURRENT sink. A returning
+     * phone (LAN/direct) can open a new connection — whose handshake calls
+     * {@link register} and overwrites the sink — while the old connection's socket
+     * is still half-open; when that stale connection finally tears down, it must
+     * not delete the newer connection's live sink. Returns `true` when this sink
+     * was the current one (i.e. the caller still owned the session), `false` when
+     * a newer connection had already superseded it.
+     */
+    unregister(deviceId, sink) {
+        if (this.#sinks.get(deviceId) !== sink)
+            return false;
+        this.#sinks.delete(deviceId);
+        return true;
+    }
+    /**
+     * Forget a device entirely — drop its sink AND its outbound log. Used when the
+     * device is untrusted/unpaired: there is nothing to catch up anymore.
+     */
+    forget(deviceId) {
+        this.#sinks.delete(deviceId);
+        this.#logs.delete(deviceId);
+    }
+    /**
+     * Send a message to every known device: delivered live where a sink is
+     * connected, recorded in the outbound log otherwise (so it replays on
+     * reconnect). Each device keeps its own seq.
+     */
+    broadcast(message) {
+        for (const deviceId of this.#logs.keys()) {
+            this.notify(deviceId, message);
+        }
+    }
+    isActive(deviceId) {
+        return this.#sinks.has(deviceId);
+    }
+    /**
+     * Deliver a message to a device. Returns `true` if sent live (the sink
+     * encrypts it, which records it in the log), `false` if the device is offline
+     * and the message was recorded in the log for later replay.
+     */
+    notify(deviceId, message) {
+        const sink = this.#sinks.get(deviceId);
+        if (sink) {
+            sink.send(message);
+            return true;
+        }
+        // Offline: record the plaintext so a reconnecting phone replays it (seq > N).
+        this.logFor(deviceId).record(Buffer.from(JSON.stringify(message), 'utf-8'));
+        return false;
+    }
+}
+//# sourceMappingURL=session-registry.js.map

package/dist/src/transport/session-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-registry.js","sourceRoot":"","sources":["../../../src/transport/session-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAOhD,MAAM,OAAO,eAAe;IACjB,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IACxC,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEhD;;;;OAIG;IACH,MAAM,CAAC,QAAgB;QACrB,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,6CAA6C;IAC7C,QAAQ,CAAC,QAAgB,EAAE,IAAiB;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAChC,6EAA6E;QAC7E,4CAA4C;QAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,QAAgB,EAAE,IAAiB;QAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,QAAgB;QACrB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,OAAgB;QACxB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,QAAgB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,QAAgB,EAAE,OAAgB;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,8EAA8E;QAC9E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/src/transport/trust-store.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Persistence of trusted phones (`~/.uxnan/trusted-phones.json`).
+ *
+ * Stores only non-secret data: the phone's Ed25519 identity public key and
+ * metadata. Used to authenticate trusted reconnects and to back the
+ * `bridge/trustedDevices` handler.
+ */
+import type { TrustedDevice } from '@uxnan/shared';
+import { type DaemonState } from '../daemon-state.js';
+export interface TrustStore {
+    list(): Promise<TrustedDevice[]>;
+    get(deviceId: string): Promise<TrustedDevice | null>;
+    upsert(device: TrustedDevice): Promise<void>;
+    remove(deviceId: string): Promise<boolean>;
+}
+export declare class FileTrustStore implements TrustStore {
+    #private;
+    constructor(state: DaemonState);
+    list(): Promise<TrustedDevice[]>;
+    get(deviceId: string): Promise<TrustedDevice | null>;
+    upsert(device: TrustedDevice): Promise<void>;
+    remove(deviceId: string): Promise<boolean>;
+}

package/dist/src/transport/trust-store.js

@@ -0,0 +1,33 @@
+import { DAEMON_FILES } from '../daemon-state.js';
+export class FileTrustStore {
+    #state;
+    constructor(state) {
+        this.#state = state;
+    }
+    async list() {
+        return (await this.#state.readJson(DAEMON_FILES.trustedPhones)) ?? [];
+    }
+    async get(deviceId) {
+        return (await this.list()).find((d) => d.deviceId === deviceId) ?? null;
+    }
+    async upsert(device) {
+        const all = await this.list();
+        const index = all.findIndex((d) => d.deviceId === device.deviceId);
+        if (index >= 0) {
+            all[index] = device;
+        }
+        else {
+            all.push(device);
+        }
+        await this.#state.writeJson(DAEMON_FILES.trustedPhones, all);
+    }
+    async remove(deviceId) {
+        const all = await this.list();
+        const next = all.filter((d) => d.deviceId !== deviceId);
+        if (next.length === all.length)
+            return false;
+        await this.#state.writeJson(DAEMON_FILES.trustedPhones, next);
+        return true;
+    }
+}
+//# sourceMappingURL=trust-store.js.map

package/dist/src/transport/trust-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-store.js","sourceRoot":"","sources":["../../../src/transport/trust-store.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,YAAY,EAAoB,MAAM,oBAAoB,CAAC;AASpE,MAAM,OAAO,cAAc;IAChB,MAAM,CAAc;IAE7B,YAAY,KAAkB;QAC5B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAkB,YAAY,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAqB;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC7C,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/src/transport/ws-adapter.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Adapts a `ws` WebSocket to the {@link MessageIO} interface.
+ */
+import type { RawData, WebSocket } from 'ws';
+import type { MessageIO } from './message-io.js';
+export declare function rawDataToBuffer(data: RawData): Buffer;
+export declare function wsToMessageIO(ws: WebSocket): MessageIO;

package/dist/src/transport/ws-adapter.js

@@ -0,0 +1,16 @@
+export function rawDataToBuffer(data) {
+    if (Buffer.isBuffer(data))
+        return data;
+    if (Array.isArray(data))
+        return Buffer.concat(data);
+    return Buffer.from(data);
+}
+export function wsToMessageIO(ws) {
+    return {
+        send: (bytes) => ws.send(bytes, { binary: true }),
+        onMessage: (listener) => ws.on('message', (data) => listener(rawDataToBuffer(data))),
+        onClose: (listener) => ws.on('close', () => listener()),
+        close: () => ws.close(),
+    };
+}
+//# sourceMappingURL=ws-adapter.js.map

package/dist/src/transport/ws-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-adapter.js","sourceRoot":"","sources":["../../../src/transport/ws-adapter.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAmB,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAa;IACzC,OAAO;QACL,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjD,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7F,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QACvD,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE;KACxB,CAAC;AACJ,CAAC"}

package/dist/src/version.d.ts

@@ -0,0 +1 @@
+export declare const BRIDGE_VERSION: string;

package/dist/src/version.js

@@ -0,0 +1,13 @@
+/**
+ * Bridge package version, read from package.json at runtime so the CLI's
+ * reported version can never drift from the published package. Works both
+ * from the compiled tree (dist/src/version.js → ../../package.json) and from
+ * a published npm install (node_modules/uxnan-bridge/package.json).
+ */
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const pkgPath = join(dirname(fileURLToPath(import.meta.url)), '../../package.json');
+const pkg = JSON.parse(readFileSync(pkgPath, 'utf8'));
+export const BRIDGE_VERSION = pkg.version;
+//# sourceMappingURL=version.js.map

package/dist/src/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;AACpF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAwB,CAAC;AAE7E,MAAM,CAAC,MAAM,cAAc,GAAW,GAAG,CAAC,OAAO,CAAC"}

package/dist/src/workspace/browse-service.d.ts

@@ -0,0 +1,10 @@
+import { type BrowseResult, type BrowseRoot } from '@uxnan/shared';
+/** Stable id derived from the absolute path, so it survives restarts. */
+export declare function browseRootIdFor(cwd: string): string;
+export declare class BrowseService {
+    #private;
+    constructor(roots: string[], fallback?: string);
+    listRoots(): BrowseRoot[];
+    /** Browse `path` (relative to `rootId`, default the first root and its top). */
+    browse(rootId?: string, path?: string): Promise<BrowseResult>;
+}

package/dist/src/workspace/browse-service.js

@@ -0,0 +1,97 @@
+/**
+ * Plug-and-play directory browsing: lets the phone navigate sub-directories under
+ * a configured base root (e.g. the user's `Documents`), mark which ones are git
+ * repos, and pick ANY directory as a thread's cwd — without per-project
+ * pre-configuration and without ever escaping above the root.
+ *
+ * The confinement here applies to the phone-facing browse/workspace API (it
+ * reuses {@link resolveWithinRoot}, which rejects `..`/absolute escapes). Note it
+ * does NOT sandbox the agent process itself: once a directory is chosen as a
+ * thread cwd, the agent CLI runs there and can act on that subtree (writes are
+ * bounded by each agent's sandbox posture). See bridge/FOR-HUMAN.md.
+ *
+ * Source: architecture/02a-system-architecture.md §5.8.5 (project resolution),
+ * extended for plug-and-play browsing.
+ */
+import { existsSync } from 'node:fs';
+import { readdir } from 'node:fs/promises';
+import { createHash } from 'node:crypto';
+import { basename, join, relative, resolve, sep } from 'node:path';
+import { JsonRpcErrorCode, RpcError } from '@uxnan/shared';
+import { isSensitiveName, resolveWithinRoot } from './path-guard.js';
+/** Stable id derived from the absolute path, so it survives restarts. */
+export function browseRootIdFor(cwd) {
+    return `root_${createHash('sha1').update(resolve(cwd)).digest('hex').slice(0, 12)}`;
+}
+export class BrowseService {
+    #roots;
+    // Defaults the root to the bridge's launch directory (`process.cwd()`) so a
+    // zero-config install is plug-and-play: start the bridge inside the folder you
+    // want the phone to reach, and that folder (plus its sub-directories) is the
+    // root — no `browseRoots`/`workspaceRoots` to configure. Matches ProjectRegistry.
+    constructor(roots, fallback = process.cwd()) {
+        const resolved = [...new Set(roots.map((r) => resolve(r)).filter((r) => r.length > 0))];
+        this.#roots = resolved.length > 0 ? resolved : [resolve(fallback)];
+    }
+    listRoots() {
+        return this.#roots.map((cwd) => ({
+            id: browseRootIdFor(cwd),
+            name: basename(cwd) || cwd,
+            cwd,
+        }));
+    }
+    /** Browse `path` (relative to `rootId`, default the first root and its top). */
+    async browse(rootId, path) {
+        const root = this.#resolveRoot(rootId);
+        const rel = (path ?? '').replace(/^[/\\]+/, '');
+        const abs = resolveWithinRoot(root, rel === '' ? '.' : rel);
+        let dirents;
+        try {
+            dirents = await readdir(abs, { withFileTypes: true });
+        }
+        catch {
+            throw new RpcError(JsonRpcErrorCode.WorkspaceAccessDenied, 'directory not accessible');
+        }
+        const dirs = dirents
+            .filter((d) => d.isDirectory() && d.name !== '.git' && !isSensitiveName(d.name))
+            .map((d) => {
+            const childAbs = join(abs, d.name);
+            return { name: d.name, path: toRel(root, childAbs), isGitRepo: isGitRepo(childAbs) };
+        })
+            .sort((a, b) => a.name.localeCompare(b.name));
+        const currentPath = toRel(root, abs);
+        return {
+            roots: this.listRoots(),
+            rootId: browseRootIdFor(root),
+            path: currentPath,
+            parent: parentOf(currentPath),
+            cwd: abs,
+            isGitRepo: isGitRepo(abs),
+            dirs,
+        };
+    }
+    #resolveRoot(rootId) {
+        if (!rootId)
+            return this.#roots[0];
+        const match = this.#roots.find((r) => browseRootIdFor(r) === rootId);
+        if (!match) {
+            throw new RpcError(JsonRpcErrorCode.ResourceNotFound, `unknown browse root: ${rootId}`);
+        }
+        return match;
+    }
+}
+function isGitRepo(dir) {
+    return existsSync(join(dir, '.git'));
+}
+/** Path of `abs` relative to `root`, POSIX separators (`''` when `abs` IS root). */
+function toRel(root, abs) {
+    return relative(resolve(root), abs).split(sep).join('/');
+}
+/** Parent of a root-relative POSIX path, or null at the root. */
+function parentOf(relPosix) {
+    if (relPosix === '')
+        return null;
+    const idx = relPosix.lastIndexOf('/');
+    return idx === -1 ? '' : relPosix.slice(0, idx);
+}
+//# sourceMappingURL=browse-service.js.map

package/dist/src/workspace/browse-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browse-service.js","sourceRoot":"","sources":["../../../src/workspace/browse-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAsC,MAAM,eAAe,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAErE,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,QAAQ,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,MAAM,OAAO,aAAa;IACf,MAAM,CAAW;IAE1B,4EAA4E;IAC5E,+EAA+E;IAC/E,6EAA6E;IAC7E,kFAAkF;IAClF,YAAY,KAAe,EAAE,WAAmB,OAAO,CAAC,GAAG,EAAE;QAC3D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/B,EAAE,EAAE,eAAe,CAAC,GAAG,CAAC;YACxB,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG;YAC1B,GAAG;SACJ,CAAC,CAAC,CAAC;IACN,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,MAAM,CAAC,MAAe,EAAE,IAAa;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAE5D,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,0BAA0B,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,IAAI,GAAG,OAAO;aACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aAC/E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvF,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAEhD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE;YACvB,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC;YAC7B,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC;YAC7B,GAAG,EAAE,GAAG;YACR,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC;YACzB,IAAI;SACL,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,MAAe;QAC1B,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,wBAAwB,MAAM,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,oFAAoF;AACpF,SAAS,KAAK,CAAC,IAAY,EAAE,GAAW;IACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,iEAAiE;AACjE,SAAS,QAAQ,CAAC,QAAgB;IAChC,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC"}

package/dist/src/workspace/checkpoint-service.d.ts

@@ -0,0 +1,21 @@
+import type { Checkpoint, CheckpointDiff } from '@uxnan/shared';
+import { type DaemonState } from '../daemon-state.js';
+export interface CaptureOptions {
+    threadId?: string;
+    label?: string;
+    now: number;
+}
+/** Bounds on how many checkpoints are retained (per project / by age). */
+export interface CheckpointRetention {
+    /** Keep at most N newest checkpoints per project `cwd` (0 = unlimited). */
+    maxPerProject: number;
+    /** Delete checkpoints older than N days (0 = no TTL). */
+    ttlDays: number;
+}
+export declare class CheckpointService {
+    #private;
+    constructor(state: DaemonState, retention?: Partial<CheckpointRetention>);
+    capture(cwd: string, options: CaptureOptions): Promise<Checkpoint>;
+    diff(id: string): Promise<CheckpointDiff>;
+    apply(id: string): Promise<void>;
+}