vibedate 0.8.2 → 0.8.5

package/dist/{chunk-S7MO5OSO.js → chunk-KIFZHCWP.js}

@@ -18,13 +18,18 @@ import { makeEvent, notify as vibeCoreNotify } from "@pooriaarab/vibe-core";
 var MAX_TEXT_LEN = 4e3;
 var MAX_ID_LEN = 64;
 var MAX_B64_CHUNK_LEN = 16 * 1024;
+var MAX_BINARY_CHUNK_BYTES = 64 * 1024;
 var MAX_MEDIA_SIZE = 25 * 1024 * 1024;
 var MAX_MIME_LEN = 128;
 var MAX_NAME_LEN = 256;
 var MAX_SDP_LEN = 64 * 1024;
 var MAX_CANDIDATE_LEN = 4 * 1024;
 var MAX_FRAME_LEN = Math.max(MAX_B64_CHUNK_LEN, 2 * MAX_SDP_LEN) + 2048;
+var BIN_MEDIA_CHUNK_TAG = 1;
 function serializeFrame(f) {
+  if (f.t === "media-chunk" && "data" in f) {
+    throw new Error("binary media-chunk must use serializeBinaryMediaChunk, not serializeFrame");
+  }
   return JSON.stringify(f);
 }
 function parseFrame(raw) {
@@ -123,6 +128,107 @@ function parseFrame(raw) {
       return null;
   }
 }
+function serializeBinaryMediaChunk(parts) {
+  const { id, seq, data } = parts;
+  if (typeof id !== "string" || id.length === 0 || id.length > MAX_ID_LEN) {
+    throw new Error(`invalid media chunk id length: ${typeof id === "string" ? id.length : "?"}`);
+  }
+  if (typeof seq !== "number" || !Number.isFinite(seq) || !Number.isInteger(seq) || seq < 0) {
+    throw new Error(`invalid media chunk seq: ${String(seq)}`);
+  }
+  if (!Buffer.isBuffer(data) || data.length === 0 || data.length > MAX_BINARY_CHUNK_BYTES) {
+    throw new Error(
+      `invalid media chunk payload length: ${Buffer.isBuffer(data) ? data.length : "n/a"}`
+    );
+  }
+  const hdr = Buffer.from(JSON.stringify({ id, seq }), "utf8");
+  if (hdr.length > 65535) throw new Error(`media chunk header too large: ${hdr.length}`);
+  const out = Buffer.allocUnsafe(1 + 2 + 4 + hdr.length + data.length);
+  let o = 0;
+  out[o++] = BIN_MEDIA_CHUNK_TAG;
+  out.writeUInt16BE(hdr.length, o);
+  o += 2;
+  out.writeUInt32BE(data.length, o);
+  o += 4;
+  hdr.copy(out, o);
+  o += hdr.length;
+  data.copy(out, o);
+  return out;
+}
+function tryParseBinaryMediaChunk(buf) {
+  if (buf.length === 0) return { frame: null, bytesConsumed: 0 };
+  if (buf[0] !== BIN_MEDIA_CHUNK_TAG) return { frame: null, bytesConsumed: 0 };
+  if (buf.length < 7) return { frame: null, bytesConsumed: 0 };
+  const hdrLen = buf.readUInt16BE(1);
+  const payloadLen = buf.readUInt32BE(3);
+  const MAX_HDR_LEN = 512;
+  if (hdrLen === 0 || hdrLen > MAX_HDR_LEN || payloadLen === 0 || payloadLen > MAX_BINARY_CHUNK_BYTES) {
+    return { frame: null, bytesConsumed: 1 };
+  }
+  const total = 7 + hdrLen + payloadLen;
+  if (buf.length < total) return { frame: null, bytesConsumed: 0 };
+  const hdrBuf = buf.subarray(7, 7 + hdrLen);
+  let hdrObj;
+  try {
+    hdrObj = JSON.parse(hdrBuf.toString("utf8"));
+  } catch {
+    return { frame: null, bytesConsumed: 1 };
+  }
+  if (typeof hdrObj !== "object" || hdrObj === null || Array.isArray(hdrObj)) {
+    return { frame: null, bytesConsumed: 1 };
+  }
+  const r = hdrObj;
+  const id = r["id"];
+  const seq = r["seq"];
+  if (typeof id !== "string" || id.length === 0 || id.length > MAX_ID_LEN) {
+    return { frame: null, bytesConsumed: 1 };
+  }
+  if (typeof seq !== "number" || !Number.isFinite(seq) || !Number.isInteger(seq) || seq < 0) {
+    return { frame: null, bytesConsumed: 1 };
+  }
+  const data = Buffer.from(buf.subarray(7 + hdrLen, 7 + hdrLen + payloadLen));
+  return {
+    frame: { t: "media-chunk", id, seq, data },
+    bytesConsumed: total
+  };
+}
+function pullFramesFromBuffer(buf) {
+  const frames = [];
+  let offset = 0;
+  while (offset < buf.length) {
+    const first = buf[offset];
+    if (first === BIN_MEDIA_CHUNK_TAG) {
+      const slice = offset === 0 ? buf : buf.subarray(offset);
+      const { frame: frame2, bytesConsumed } = tryParseBinaryMediaChunk(slice);
+      if (bytesConsumed === 0) {
+        break;
+      }
+      if (frame2 !== null) frames.push(frame2);
+      offset += bytesConsumed;
+      continue;
+    }
+    const nlRel = buf.indexOf(10, offset);
+    if (nlRel < 0) {
+      break;
+    }
+    const lineBuf = buf.subarray(offset, nlRel);
+    offset = nlRel + 1;
+    if (lineBuf.length === 0) continue;
+    let onlyWs = true;
+    for (let i = 0; i < lineBuf.length; i++) {
+      const c = lineBuf[i];
+      if (c !== 32 && c !== 9 && c !== 13) {
+        onlyWs = false;
+        break;
+      }
+    }
+    if (onlyWs) continue;
+    const frame = parseFrame(lineBuf);
+    if (frame !== null) frames.push(frame);
+  }
+  const rest = offset === 0 ? buf : buf.subarray(offset);
+  return { frames, rest: rest.length === 0 ? Buffer.alloc(0) : Buffer.from(rest) };
+}
 
 // src/identity.ts
 import {
@@ -137,10 +243,15 @@ import { chmodSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writ
 import path2 from "path";
 
 // src/state.ts
-import { mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
+import { mkdirSync, readFileSync, rmSync, renameSync, writeFileSync } from "fs";
 import os from "os";
 import path from "path";
 import { createConsentLedger } from "@pooriaarab/vibe-core";
+function writeJsonAtomic(filePath, obj) {
+  const tmpPath = `${filePath}.tmp`;
+  writeFileSync(tmpPath, JSON.stringify(obj, null, 2) + "\n", "utf8");
+  renameSync(tmpPath, filePath);
+}
 var CONSENT_SCOPE = "share:league";
 var LIVE_CONSENT_SCOPE = "share:live";
 function defaultStateDir() {
@@ -162,7 +273,7 @@ var FileConsentStore = class {
   }
   save(grants) {
     mkdirSync(path.dirname(this.file), { recursive: true });
-    writeFileSync(this.file, JSON.stringify({ grants }, null, 2) + "\n", "utf8");
+    writeJsonAtomic(this.file, { grants });
   }
 };
 function createLedger(dir = defaultStateDir()) {
@@ -184,7 +295,7 @@ function connectProfile(snapshot, handle, dir = defaultStateDir()) {
     connectedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
   mkdirSync(dir, { recursive: true });
-  writeFileSync(profilePath(dir), JSON.stringify(state, null, 2) + "\n", "utf8");
+  writeJsonAtomic(profilePath(dir), state);
   return state;
 }
 function loadProfile(dir = defaultStateDir()) {
@@ -245,14 +356,10 @@ function saveHandle(handle, dir = defaultStateDir()) {
     );
   }
   mkdirSync(dir, { recursive: true });
-  writeFileSync(handleFilePath(dir), JSON.stringify({ handle: canonical }, null, 2) + "\n", "utf8");
+  writeJsonAtomic(handleFilePath(dir), { handle: canonical });
   const existing = loadProfile(dir);
   if (existing !== null) {
-    writeFileSync(
-      profilePath(dir),
-      JSON.stringify({ ...existing, handle: canonical }, null, 2) + "\n",
-      "utf8"
-    );
+    writeJsonAtomic(profilePath(dir), { ...existing, handle: canonical });
   }
   return canonical;
 }
@@ -270,7 +377,7 @@ function blocklistPath(dir) {
 }
 function persistBlocklist(blocked, dir) {
   mkdirSync(dir, { recursive: true });
-  writeFileSync(blocklistPath(dir), JSON.stringify({ blocked }, null, 2) + "\n", "utf8");
+  writeJsonAtomic(blocklistPath(dir), { blocked });
 }
 function loadBlocklist(dir = defaultStateDir()) {
   try {
@@ -442,7 +549,7 @@ import { readFile } from "fs/promises";
 import { writeFileSync as writeFileSync3 } from "fs";
 import os2 from "os";
 import path3 from "path";
-var DEFAULT_CHUNK_BYTES = Math.floor(MAX_B64_CHUNK_LEN * 3 / 4);
+var DEFAULT_CHUNK_BYTES = MAX_BINARY_CHUNK_BYTES;
 var MIME_BY_EXT = {
   ".png": "image/png",
   ".jpg": "image/jpeg",
@@ -455,11 +562,32 @@ var MIME_BY_EXT = {
 function inferMime(name) {
   return MIME_BY_EXT[path3.extname(name).toLowerCase()] ?? "application/octet-stream";
 }
-function writeFrame(socket, line) {
-  return new Promise((resolve) => {
-    const ok = socket.write(line);
+function writeBytes(socket, data) {
+  return new Promise((resolve, reject) => {
+    const ok = socket.write(data);
     if (ok) resolve();
-    else socket.once("drain", () => resolve());
+    else {
+      const onDrain = () => {
+        cleanup();
+        resolve();
+      };
+      const onClose = () => {
+        cleanup();
+        reject(new Error("Socket closed before drain"));
+      };
+      const onError = (err) => {
+        cleanup();
+        reject(err);
+      };
+      const cleanup = () => {
+        socket.removeListener("drain", onDrain);
+        socket.removeListener("close", onClose);
+        socket.removeListener("error", onError);
+      };
+      socket.once("drain", onDrain);
+      socket.once("close", onClose);
+      socket.once("error", onError);
+    }
   });
 }
 async function sendMedia(opts) {
@@ -471,15 +599,23 @@ async function sendMedia(opts) {
   }
   if (mime.length > MAX_MIME_LEN) throw new Error(`mime too long: ${mime.length} > ${MAX_MIME_LEN}`);
   if (name.length > MAX_NAME_LEN) throw new Error(`name too long: ${name.length} > ${MAX_NAME_LEN}`);
-  await writeFrame(socket, serializeFrame({ t: "media-start", id, mime, size, name }) + "\n");
-  const chunkBytes = opts.chunkBytes ?? DEFAULT_CHUNK_BYTES;
+  await writeBytes(socket, serializeFrame({ t: "media-start", id, mime, size, name }) + "\n");
+  const chunkBytes = Math.min(
+    opts.chunkBytes ?? DEFAULT_CHUNK_BYTES,
+    opts.legacyJson ? Math.floor(16 * 1024 * 3 / 4) : MAX_BINARY_CHUNK_BYTES
+  );
   let seq = 0;
   for (let off = 0; off < size; off += chunkBytes) {
-    const b64 = data.subarray(off, off + chunkBytes).toString("base64");
-    await writeFrame(socket, serializeFrame({ t: "media-chunk", id, seq, b64 }) + "\n");
+    const slice = data.subarray(off, off + chunkBytes);
+    if (opts.legacyJson) {
+      const b64 = slice.toString("base64");
+      await writeBytes(socket, serializeFrame({ t: "media-chunk", id, seq, b64 }) + "\n");
+    } else {
+      await writeBytes(socket, serializeBinaryMediaChunk({ id, seq, data: slice }));
+    }
     seq++;
   }
-  await writeFrame(socket, serializeFrame({ t: "media-end", id }) + "\n");
+  await writeBytes(socket, serializeFrame({ t: "media-end", id }) + "\n");
   return { id, size };
 }
 async function sendMediaFile(opts) {
@@ -492,7 +628,8 @@ async function sendMediaFile(opts) {
     mime,
     name,
     id: opts.id,
-    chunkBytes: opts.chunkBytes
+    chunkBytes: opts.chunkBytes,
+    legacyJson: opts.legacyJson
   });
 }
 function safeName(id, name) {
@@ -533,9 +670,20 @@ var MediaReceiver = class {
           return;
         }
         let bytes;
-        try {
-          bytes = Buffer.from(frame.b64, "base64");
-        } catch {
+        if ("data" in frame && Buffer.isBuffer(frame.data)) {
+          bytes = frame.data;
+          if (bytes.length === 0 || bytes.length > MAX_BINARY_CHUNK_BYTES) {
+            this.abort(frame.id);
+            return;
+          }
+        } else if ("b64" in frame && typeof frame.b64 === "string") {
+          try {
+            bytes = Buffer.from(frame.b64, "base64");
+          } catch {
+            this.abort(frame.id);
+            return;
+          }
+        } else {
           this.abort(frame.id);
           return;
         }
@@ -558,7 +706,9 @@ var MediaReceiver = class {
         const filePath = path3.join(this.opts.tmpDir ?? os2.tmpdir(), safeName(frame.id, tx.name));
         try {
           writeFileSync3(filePath, buf);
-        } catch {
+        } catch (err) {
+          const error = err instanceof Error ? err : new Error(String(err));
+          this.onMedia({ mime: tx.mime, name: tx.name, path: filePath, size: tx.received, error });
           return;
         }
         this.onMedia({ mime: tx.mime, name: tx.name, path: filePath, size: tx.received });
@@ -576,7 +726,7 @@ function createPeerLink(socket, hello, initialBuffer = "", linkOpts = {}) {
   const mediaCbs = /* @__PURE__ */ new Set();
   const signalCbs = /* @__PURE__ */ new Set();
   const closeCbs = /* @__PURE__ */ new Set();
-  let buf = initialBuffer;
+  let buf = typeof initialBuffer === "string" ? Buffer.from(initialBuffer, "utf8") : Buffer.from(initialBuffer);
   let closed = false;
   let mediaReceiver;
   const ensureMediaReceiver = () => {
@@ -624,19 +774,15 @@ function createPeerLink(socket, hello, initialBuffer = "", linkOpts = {}) {
     }
   };
   const pump = () => {
-    let nl;
-    while ((nl = buf.indexOf("\n")) >= 0) {
-      const line = buf.slice(0, nl);
-      buf = buf.slice(nl + 1);
-      if (line.trim() === "") continue;
-      const frame = parseFrame(line);
-      if (frame === null) continue;
-      dispatch(frame);
-    }
+    if (buf.length === 0) return;
+    const { frames, rest } = pullFramesFromBuffer(buf);
+    buf = rest;
+    for (const frame of frames) dispatch(frame);
   };
   pump();
   socket.on("data", (chunk) => {
-    buf += chunk.toString("utf8");
+    const bytes = typeof chunk === "string" ? Buffer.from(chunk, "utf8") : chunk;
+    buf = buf.length === 0 ? Buffer.from(bytes) : Buffer.concat([buf, bytes]);
     pump();
   });
   socket.on("end", () => {
@@ -659,6 +805,9 @@ function createPeerLink(socket, hello, initialBuffer = "", linkOpts = {}) {
   });
   return {
     hello,
+    get closed() {
+      return closed;
+    },
     send(text) {
       if (closed) return;
       const frame = { t: "msg", id: randomUUID2(), text, at: Date.now() };
@@ -778,11 +927,13 @@ function parseHandshake(raw) {
 function peersPath(dir) {
   return path4.join(dir, "peers.json");
 }
-function loadPeers(dir = defaultStateDir()) {
+function loadPeers(dir = defaultStateDir(), maxAgeMs = 7 * 24 * 60 * 60 * 1e3) {
   try {
     const raw = readFileSync3(peersPath(dir), "utf8");
     const data = JSON.parse(raw);
-    return Array.isArray(data.peers) ? data.peers : [];
+    if (!Array.isArray(data.peers)) return [];
+    const now = Date.now();
+    return data.peers.filter((p) => now - new Date(p.lastSeenAt).getTime() <= maxAgeMs);
   } catch {
     return [];
   }
@@ -798,7 +949,9 @@ function recordPeer(hello, dir = defaultStateDir(), now = /* @__PURE__ */ new Da
     ...hello.pubkey !== void 0 ? { pubkey: hello.pubkey } : {},
     ...hello.identityVerified !== void 0 ? { identityVerified: hello.identityVerified } : {}
   };
-  const existing = peers.findIndex((p) => p.handle === clean.handle);
+  const existing = peers.findIndex(
+    (p) => clean.pubkey !== void 0 && p.pubkey !== void 0 ? p.pubkey === clean.pubkey : p.handle === clean.handle
+  );
   let isNew;
   let peer;
   if (existing >= 0) {
@@ -821,10 +974,12 @@ function recordPeer(hello, dir = defaultStateDir(), now = /* @__PURE__ */ new Da
   writeFileSync4(peersPath(dir), JSON.stringify({ peers }, null, 2) + "\n", "utf8");
   return { peer, isNew };
 }
-function recordPeerMessage(handle, dir = defaultStateDir(), now = /* @__PURE__ */ new Date()) {
+function recordPeerMessage(peer, dir = defaultStateDir(), now = /* @__PURE__ */ new Date()) {
   try {
     const peers = loadPeers(dir);
-    const idx = peers.findIndex((p) => p.handle === handle);
+    const idx = peers.findIndex(
+      (p) => peer.pubkey !== void 0 && p.pubkey !== void 0 ? p.pubkey === peer.pubkey : p.handle === peer.handle
+    );
     if (idx < 0) return false;
     peers[idx] = { ...peers[idx], lastMessageAt: now.toISOString() };
     mkdirSync3(dir, { recursive: true });
@@ -857,15 +1012,18 @@ async function startDiscovery(opts) {
         ...hello.sig !== void 0 ? { sig: hello.sig } : {}
       }) + "\n"
     );
-    let buf = "";
+    let buf = Buffer.alloc(0);
     let handedOff = false;
     const onData = (chunk) => {
       if (handedOff) return;
-      buf += chunk.toString("utf8");
+      buf = buf.length === 0 ? Buffer.from(chunk) : Buffer.concat([buf, chunk]);
       let nl;
-      while ((nl = buf.indexOf("\n")) >= 0) {
-        const line = buf.slice(0, nl);
-        buf = buf.slice(nl + 1);
+      while ((nl = buf.indexOf(
+        10
+        /* \n */
+      )) >= 0) {
+        const line = buf.subarray(0, nl).toString("utf8");
+        buf = buf.subarray(nl + 1);
         if (line.trim() === "") continue;
         const frame = parseFrame(line);
         if (frame === null) continue;
@@ -907,11 +1065,11 @@ async function startDiscovery(opts) {
         if (onLink !== void 0) {
           const link = createPeerLink(socket, peer, buf);
           link.onMessage(() => {
-            recordPeerMessage(peer.handle, stateDir);
+            recordPeerMessage(peer, stateDir);
           });
           onLink(link);
         }
-        buf = "";
+        buf = Buffer.alloc(0);
         return;
       }
     };
@@ -1061,6 +1219,14 @@ async function createNostrRelayLink(opts) {
         return;
       }
       peerNostrPubkey = event.pubkey;
+      try {
+        const parsed = JSON.parse(plaintext);
+        if (parsed && typeof parsed === "object" && "__vibe_rtc" in parsed) {
+          for (const cb of signalCbs) cb(parsed.__vibe_rtc);
+          return;
+        }
+      } catch {
+      }
       const msg = { id: event.id, text: plaintext, at: event.created_at * 1e3 };
       for (const cb of messageCbs) cb(msg);
       return;
@@ -1069,6 +1235,9 @@ async function createNostrRelayLink(opts) {
   publishPresence();
   return {
     hello,
+    get closed() {
+      return closed;
+    },
     send(text) {
       if (closed) return;
       if (peerNostrPubkey === void 0) {
@@ -1082,9 +1251,14 @@ async function createNostrRelayLink(opts) {
     async sendMedia() {
       return { id: "", size: 0 };
     },
-    // ponytail: relay WebRTC signaling (rtc-offer/answer/ice as kind-4 payloads)
-    // so A/V could also fall back through the relay. v0: text only.
-    sendSignal() {
+    sendSignal(frame) {
+      if (closed) return;
+      const payload = JSON.stringify({ __vibe_rtc: frame });
+      if (peerNostrPubkey === void 0) {
+        pending.push(payload);
+        return;
+      }
+      sendEncrypted(payload, peerNostrPubkey);
     },
     onMessage(cb) {
       messageCbs.add(cb);
@@ -1157,6 +1331,7 @@ var ROOM_TOPIC_PREFIX = "vibedate-room:";
 function roomTopic(name) {
   return createHash3("sha256").update(`${ROOM_TOPIC_PREFIX}${name}`, "utf8").digest();
 }
+var MAX_ROOM = 32;
 async function startRoom(opts) {
   const topic = roomTopic(opts.room);
   const entries = /* @__PURE__ */ new Map();
@@ -1180,7 +1355,19 @@ async function startRoom(opts) {
     ...opts.stateDir === void 0 ? {} : { stateDir: opts.stateDir },
     ...opts.notify === void 0 ? {} : { notify: opts.notify },
     onLink: (link) => {
+      const isSelf = link.hello.pubkey !== void 0 && opts.hello.pubkey !== void 0 ? link.hello.pubkey === opts.hello.pubkey : link.hello.handle === opts.hello.handle;
+      if (isSelf) {
+        link.close();
+        return;
+      }
       const handle = link.hello.handle;
+      if (!entries.has(handle) && entries.size >= MAX_ROOM) {
+        link.send(`Room is full (${MAX_ROOM} members max). Try again later.`);
+        link.close();
+        return;
+      }
+      const cur = entries.get(handle);
+      if (cur) cur.link.close();
       entries.set(handle, { hello: link.hello, link });
       memberHellos.set(handle, link.hello);
       fireRoster();
@@ -1191,8 +1378,8 @@ async function startRoom(opts) {
         for (const cb of signalCbs) cb(handle, frame);
       });
       link.onClose(() => {
-        const cur = entries.get(handle);
-        if (cur && cur.link === link) {
+        const cur2 = entries.get(handle);
+        if (cur2 && cur2.link === link) {
           entries.delete(handle);
           memberHellos.delete(handle);
           fireRoster();

package/dist/{chunk-JBADPOR5.js → chunk-VHO7JWSS.js}

@@ -29,7 +29,7 @@ import {
   signHelloClaims,
   startDiscovery,
   startRoom
-} from "./chunk-S7MO5OSO.js";
+} from "./chunk-KIFZHCWP.js";
 
 // src/mcp.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -14890,6 +14890,7 @@ function uninstallDaemonService(opts) {
 
 // src/pairing.ts
 var MAX_BUFFERED = 100;
+var MAX_QUEUE = 100;
 function createPairing() {
   const queue = [];
   const matchCbs = /* @__PURE__ */ new Set();
@@ -14923,7 +14924,14 @@ function createPairing() {
     link.onClose(() => {
       buffers.delete(link);
       if (current === link) {
-        const nextUp = queue.shift();
+        let nextUp;
+        while (queue.length > 0) {
+          const cand = queue.shift();
+          if (!cand.closed) {
+            nextUp = cand;
+            break;
+          }
+        }
         setCurrent(nextUp);
       } else {
         const idx = queue.indexOf(link);
@@ -14959,12 +14967,31 @@ function createPairing() {
       return current;
     },
     add(link) {
+      const isSamePeer = (a, b) => {
+        if (a.hello.pubkey !== void 0 && b.hello.pubkey !== void 0) {
+          return a.hello.pubkey === b.hello.pubkey;
+        }
+        return a.hello.handle === b.hello.handle;
+      };
+      const existingIdx = queue.findIndex((l) => isSamePeer(l, link));
+      if (existingIdx >= 0) {
+        const old = queue.splice(existingIdx, 1)[0];
+        old.close();
+      } else if (current !== void 0 && isSamePeer(current, link)) {
+        const old = current;
+        current = void 0;
+        old.close();
+      }
       watch(link);
       bindMessages(link);
       if (current === void 0) {
         setCurrent(link);
       } else {
         queue.push(link);
+        if (queue.length > MAX_QUEUE) {
+          const oldest = queue.shift();
+          oldest.close();
+        }
       }
     },
     next() {
@@ -14972,7 +14999,14 @@ function createPairing() {
         current.close();
         current = void 0;
       }
-      const nextUp = queue.shift();
+      let nextUp;
+      while (queue.length > 0) {
+        const cand = queue.shift();
+        if (!cand.closed) {
+          nextUp = cand;
+          break;
+        }
+      }
       setCurrent(nextUp);
       return current;
     },

package/dist/cli.js

@@ -10,7 +10,7 @@ import {
   stopDaemon,
   uninstallDaemonService,
   writeDaemonState
-} from "./chunk-JBADPOR5.js";
+} from "./chunk-VHO7JWSS.js";
 import {
   CANDIDATES,
   LIVE_NOTICE,
@@ -46,7 +46,7 @@ import {
   signHelloClaims,
   startDiscovery,
   startRoom
-} from "./chunk-S7MO5OSO.js";
+} from "./chunk-KIFZHCWP.js";
 
 // src/cli.ts
 import readline from "readline";
@@ -1389,9 +1389,8 @@ var webAppHtml = `<!DOCTYPE html>
   var idleIdx = 0;
 
   function rtcConfig(){
-    // A public STUN server crosses most NATs. No TURN in v0 \u2014 symmetric NATs
-    // won't connect, but signaling still completes and the call fails open.
-    return { iceServers: [{ urls: "stun:stun.l.google.com:19302" }] };
+    var extra = (window.__VIBE_ICE__ && window.__VIBE_ICE__.iceServers) || [];
+    return { iceServers: [{ urls: "stun:stun.l.google.com:19302" }].concat(extra) };
   }
   function sleep(ms){ return new Promise(function(r){ setTimeout(r, ms); }); }
 
@@ -2228,10 +2227,11 @@ function createLiveBridge() {
       link.onMedia((m) => {
         const mb = boxes.get(handle2);
         if (!mb) {
-          fs.unlink(m.path, () => {
+          if (!m.error) fs.unlink(m.path, () => {
           });
           return;
         }
+        if (m.error) return;
         mb.media.push({ ...m, name: sanitizePeerText(m.name), mime: sanitizePeerText(m.mime) });
         if (mb.media.length > MAX_QUEUED_MESSAGES) {
           const dropped = mb.media.splice(0, mb.media.length - MAX_QUEUED_MESSAGES);
@@ -2459,7 +2459,18 @@ async function handle(req, res, opts) {
   const url = new URL(req.url ?? "/", "http://localhost");
   const pathname = url.pathname;
   if (req.method === "GET" && pathname === "/") {
-    send(res, 200, "text/html; charset=utf-8", webAppHtml);
+    const turnUrl = process.env["VIBEDATE_TURN_URL"];
+    let html = webAppHtml;
+    if (turnUrl) {
+      const turnUser = process.env["VIBEDATE_TURN_USER"];
+      const turnCred = process.env["VIBEDATE_TURN_CRED"];
+      const server = { urls: turnUrl };
+      if (turnUser) server.username = turnUser;
+      if (turnCred) server.credential = turnCred;
+      const script = `<script>window.__VIBE_ICE__={iceServers:${JSON.stringify([server]).replace(/</g, "\\u003c")}};</script>`;
+      html = html.replace("<script>", script + "\n<script>");
+    }
+    send(res, 200, "text/html; charset=utf-8", html);
     return;
   }
   if (req.method === "GET" && pathname === "/api/state") {
@@ -2784,7 +2795,7 @@ async function handle(req, res, opts) {
 }
 
 // src/cli.ts
-var VERSION = "0.8.2";
+var VERSION = "0.8.5";
 function parsePort(raw) {
   const n = Number(raw);
   if (!Number.isInteger(n) || n < 1 || n > 65535) return void 0;
@@ -3136,7 +3147,7 @@ async function cmdDiscover(live, any, viaRelay) {
   );
   return 0;
 }
-async function cmdOpen(port, any, room) {
+async function cmdOpen(port, any, room, viaRelay, to) {
   const profile = loadProfile();
   let live;
   let roomBridge;
@@ -3167,17 +3178,45 @@ async function cmdOpen(port, any, room) {
       }).catch(() => {
       });
     } else if (live) {
-      const { topics, acceptLeague } = discoveryScope(profile.league, any);
-      void startDiscovery({
-        hello,
-        topics,
-        acceptLeague,
-        isBlocked: blockedChecker(),
-        onLink: (link) => live.addLink(link)
-      }).then((s) => {
-        session = s;
-      }).catch(() => {
-      });
+      if (viaRelay && to !== void 0) {
+        const target = normalizeHandle(to);
+        const peer = target ? loadPeers().find((p) => sameHandle(p.handle, target) && typeof p.pubkey === "string") : void 0;
+        if (peer && peer.pubkey) {
+          const peerPubkey = peer.pubkey;
+          void (async () => {
+            try {
+              const myNostr = await loadOrCreateNostrKey();
+              const transport = await createNostrPoolTransport();
+              const identity = loadOrCreateIdentity();
+              const link = await createNostrRelayLink({
+                myNostr,
+                myEd25519Hex: identity.publicKeyHex,
+                peerEd25519Hex: peerPubkey,
+                hello: peer,
+                transport
+              });
+              live.addLink(link);
+            } catch {
+            }
+          })();
+        } else {
+          process2.stderr.write(`
+  warning: --via-relay peer ${to} not found or lacks identity pubkey.
+`);
+        }
+      } else {
+        const { topics, acceptLeague } = discoveryScope(profile.league, any);
+        void startDiscovery({
+          hello,
+          topics,
+          acceptLeague,
+          isBlocked: blockedChecker(),
+          onLink: (link) => live.addLink(link)
+        }).then((s) => {
+          session = s;
+        }).catch(() => {
+        });
+      }
     }
   }
   process2.stdout.write(`
@@ -3390,10 +3429,17 @@ async function cmdLive(dating, any, to, keepAlive, viaRelay) {
 `);
       }
       link.onMedia((m) => {
-        process2.stdout.write(
-          `  \u{1F4CE} <${sanitizePeerText(link.hello.handle)}> sent ${sanitizePeerText(m.name)} \u2014 saved to ${m.path}
+        if (m.error) {
+          process2.stdout.write(
+            `  \u{1F4CE} <${sanitizePeerText(link.hello.handle)}> sent ${sanitizePeerText(m.name)} \u2014 FAILED to save: ${m.error.message}
 `
-        );
+          );
+        } else {
+          process2.stdout.write(
+            `  \u{1F4CE} <${sanitizePeerText(link.hello.handle)}> sent ${sanitizePeerText(m.name)} \u2014 saved to ${m.path}
+`
+          );
+        }
       });
       pairing.add(link);
     }
@@ -3884,7 +3930,7 @@ async function main(argv) {
     case "discover":
       return cmdDiscover(parsed.live, parsed.any, parsed.viaRelay);
     case "open":
-      return cmdOpen(parsed.port, parsed.any, parsed.room);
+      return cmdOpen(parsed.port, parsed.any, parsed.room, parsed.viaRelay, parsed.to);
     case "live":
       return cmdLive(parsed.dating, parsed.any, parsed.to, parsed.keepAlive, parsed.viaRelay);
     case "find":

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { UsageSnapshot, UsageSource, Harness, HarnessUsageOptions } from '@pooriaarab/vibe-core';
 export { Harness, UsageSnapshot, UsageSource, createConsentLedger } from '@pooriaarab/vibe-core';
-import { P as PeerHello, a as PeerLink } from './room-BStsMaeT.js';
-export { D as DiscoveryOptions, b as DiscoverySession, L as LIVE_NOTICE, R as ROOM_TOPIC_PREFIX, c as RoomMember, d as RoomMessage, e as RoomOptions, f as RoomSession, S as StoredPeer, T as TOPIC_PREFIX, l as leagueTopic, g as loadPeers, p as parseHandshake, r as recordPeer, h as recordPeerMessage, i as roomTopic, s as serializeHandshake, j as startDiscovery, k as startRoom } from './room-BStsMaeT.js';
+import { P as PeerHello, a as PeerLink } from './room-B-0DreC0.js';
+export { D as DiscoveryOptions, b as DiscoverySession, L as LIVE_NOTICE, R as ROOM_TOPIC_PREFIX, c as RoomMember, d as RoomMessage, e as RoomOptions, f as RoomSession, S as StoredPeer, T as TOPIC_PREFIX, l as leagueTopic, g as loadPeers, p as parseHandshake, r as recordPeer, h as recordPeerMessage, i as roomTopic, s as serializeHandshake, j as startDiscovery, k as startRoom } from './room-B-0DreC0.js';
 import { KeyObject } from 'node:crypto';
 
 /**

package/dist/index.js

@@ -36,7 +36,7 @@ import {
   startDiscovery,
   startRoom,
   verifyHelloClaims
-} from "./chunk-S7MO5OSO.js";
+} from "./chunk-KIFZHCWP.js";
 export {
   BELOW_LEAGUE,
   CANDIDATES,

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { a as PeerLink, P as PeerHello, f as RoomSession, b as DiscoverySession, d as RoomMessage } from './room-BStsMaeT.js';
+import { a as PeerLink, P as PeerHello, f as RoomSession, b as DiscoverySession, d as RoomMessage } from './room-B-0DreC0.js';
 import '@pooriaarab/vibe-core';
 
 /**

package/dist/mcp.js

@@ -3,8 +3,8 @@ import {
   createMcpServer,
   createSessionState,
   runMcp
-} from "./chunk-JBADPOR5.js";
-import "./chunk-S7MO5OSO.js";
+} from "./chunk-VHO7JWSS.js";
+import "./chunk-KIFZHCWP.js";
 export {
   MCP_TOOL_NAMES,
   createMcpServer,

package/dist/{room-BStsMaeT.d.ts → room-B-0DreC0.d.ts}

@@ -24,11 +24,20 @@ type Frame = {
     mime: string;
     size: number;
     name: string;
-} | {
+}
+/** Legacy JSON media-chunk (base64). Prefer binary wire for new sends. */
+ | {
     t: 'media-chunk';
     id: string;
     seq: number;
     b64: string;
+}
+/** Binary-path media-chunk: raw bytes, no base64. Produced by the binary framer. */
+ | {
+    t: 'media-chunk';
+    id: string;
+    seq: number;
+    data: Buffer;
 } | {
     t: 'media-end';
     id: string;
@@ -56,11 +65,14 @@ interface ReceivedMedia {
     /** Temp file path holding the reassembled bytes. */
     readonly path: string;
     readonly size: number;
+    readonly error?: Error;
 }
 
 interface PeerLink {
     /** The validated identity of the remote peer (from the hello handshake). */
     readonly hello: PeerHello;
+    /** Whether the link has been closed. */
+    readonly closed: boolean;
     /** Send a line of text as a `msg` frame. */
     send(text: string): void;
     /** Read a file from disk and send it as a chunked media transfer. */
@@ -149,10 +161,10 @@ interface StoredPeer extends PeerHello {
     readonly lastMessageAt?: string;
 }
 /** Load persisted live peers, or `[]` if none/corrupt. Local-only data. */
-declare function loadPeers(dir?: string): StoredPeer[];
+declare function loadPeers(dir?: string, maxAgeMs?: number): StoredPeer[];
 /**
- * Record a successfully handshaken peer, keyed by handle (a peer may reconnect
- * from a different key). Returns whether this handle is NEW (first time seen).
+ * Record a successfully handshaken peer, keyed by pubkey (if verified) or handle (legacy).
+ * Returns whether this peer is NEW (first time seen).
  */
 declare function recordPeer(hello: PeerHello, dir?: string, now?: Date): {
     peer: StoredPeer;
@@ -163,7 +175,7 @@ declare function recordPeer(hello: PeerHello, dir?: string, now?: Date): {
  * Local metadata only; never on the wire. Returns false when the handle isn't
  * a known peer. Never throws — best-effort bookkeeping.
  */
-declare function recordPeerMessage(handle: string, dir?: string, now?: Date): boolean;
+declare function recordPeerMessage(peer: PeerHello, dir?: string, now?: Date): boolean;
 /** Injection point for the match notification (defaults to vibe-core notify). */
 type NotifySink = (event: VibeEvent) => void;
 interface DiscoveryOptions {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibedate",
-  "version": "0.8.2",
+  "version": "0.8.5",
   "description": "Dating by tokens — matched by usage league across agentic CLIs. Raw usage stays local; only your league is shared. CLI + local web app + MCP. Local-first.",
   "type": "module",
   "license": "MIT",
@@ -25,7 +25,8 @@
     "build": "tsup src/index.ts src/cli.ts src/mcp.ts --format esm --dts --clean",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
-    "test:watch": "vitest"
+    "test:watch": "vitest",
+    "bench": "tsx bench/run.ts"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
@@ -37,6 +38,7 @@
     "@types/node": "^20.11.0",
     "hyperdht": "^6.33.0",
     "tsup": "^8.0.0",
+    "tsx": "^4.23.1",
     "typescript": "^5.4.0",
     "vitest": "^1.6.0",
     "werift": "^0.24.1"