vibedate 0.8.3 → 0.8.6

package/dist/{chunk-XUWNLMOY.js → chunk-NSSNOQJG.js}

@@ -29,9 +29,10 @@ import {
   signHelloClaims,
   startDiscovery,
   startRoom
-} from "./chunk-3FJDVN72.js";
+} from "./chunk-ZU5UPYSF.js";
 
 // src/mcp.ts
+import { createRequire } from "module";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
@@ -14890,6 +14891,7 @@ function uninstallDaemonService(opts) {
 
 // src/pairing.ts
 var MAX_BUFFERED = 100;
+var MAX_QUEUE = 100;
 function createPairing() {
   const queue = [];
   const matchCbs = /* @__PURE__ */ new Set();
@@ -14923,7 +14925,14 @@ function createPairing() {
     link.onClose(() => {
       buffers.delete(link);
       if (current === link) {
-        const nextUp = queue.shift();
+        let nextUp;
+        while (queue.length > 0) {
+          const cand = queue.shift();
+          if (!cand.closed) {
+            nextUp = cand;
+            break;
+          }
+        }
         setCurrent(nextUp);
       } else {
         const idx = queue.indexOf(link);
@@ -14980,6 +14989,10 @@ function createPairing() {
         setCurrent(link);
       } else {
         queue.push(link);
+        if (queue.length > MAX_QUEUE) {
+          const oldest = queue.shift();
+          oldest.close();
+        }
       }
     },
     next() {
@@ -14987,7 +15000,14 @@ function createPairing() {
         current.close();
         current = void 0;
       }
-      const nextUp = queue.shift();
+      let nextUp;
+      while (queue.length > 0) {
+        const cand = queue.shift();
+        if (!cand.closed) {
+          nextUp = cand;
+          break;
+        }
+      }
       setCurrent(nextUp);
       return current;
     },
@@ -15027,7 +15047,14 @@ function textBlock(text) {
 function jsonResult(value) {
   return { content: [textBlock(JSON.stringify(value, null, 2))] };
 }
-var VERSION = "0.7.1";
+var VERSION = (() => {
+  try {
+    const require2 = createRequire(import.meta.url);
+    return require2("../package.json").version ?? "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+})();
 function discoveryScope(myLeague, any2) {
   const names = any2 ? allLeagueNames() : leaguesWithin(myLeague, 1);
   const ordered = [myLeague, ...names.filter((n) => n !== myLeague)];

package/dist/{chunk-3FJDVN72.js → chunk-ZU5UPYSF.js}

@@ -18,13 +18,18 @@ import { makeEvent, notify as vibeCoreNotify } from "@pooriaarab/vibe-core";
 var MAX_TEXT_LEN = 4e3;
 var MAX_ID_LEN = 64;
 var MAX_B64_CHUNK_LEN = 16 * 1024;
+var MAX_BINARY_CHUNK_BYTES = 64 * 1024;
 var MAX_MEDIA_SIZE = 25 * 1024 * 1024;
 var MAX_MIME_LEN = 128;
 var MAX_NAME_LEN = 256;
 var MAX_SDP_LEN = 64 * 1024;
 var MAX_CANDIDATE_LEN = 4 * 1024;
 var MAX_FRAME_LEN = Math.max(MAX_B64_CHUNK_LEN, 2 * MAX_SDP_LEN) + 2048;
+var BIN_MEDIA_CHUNK_TAG = 1;
 function serializeFrame(f) {
+  if (f.t === "media-chunk" && "data" in f) {
+    throw new Error("binary media-chunk must use serializeBinaryMediaChunk, not serializeFrame");
+  }
   return JSON.stringify(f);
 }
 function parseFrame(raw) {
@@ -123,6 +128,107 @@ function parseFrame(raw) {
       return null;
   }
 }
+function serializeBinaryMediaChunk(parts) {
+  const { id, seq, data } = parts;
+  if (typeof id !== "string" || id.length === 0 || id.length > MAX_ID_LEN) {
+    throw new Error(`invalid media chunk id length: ${typeof id === "string" ? id.length : "?"}`);
+  }
+  if (typeof seq !== "number" || !Number.isFinite(seq) || !Number.isInteger(seq) || seq < 0) {
+    throw new Error(`invalid media chunk seq: ${String(seq)}`);
+  }
+  if (!Buffer.isBuffer(data) || data.length === 0 || data.length > MAX_BINARY_CHUNK_BYTES) {
+    throw new Error(
+      `invalid media chunk payload length: ${Buffer.isBuffer(data) ? data.length : "n/a"}`
+    );
+  }
+  const hdr = Buffer.from(JSON.stringify({ id, seq }), "utf8");
+  if (hdr.length > 65535) throw new Error(`media chunk header too large: ${hdr.length}`);
+  const out = Buffer.allocUnsafe(1 + 2 + 4 + hdr.length + data.length);
+  let o = 0;
+  out[o++] = BIN_MEDIA_CHUNK_TAG;
+  out.writeUInt16BE(hdr.length, o);
+  o += 2;
+  out.writeUInt32BE(data.length, o);
+  o += 4;
+  hdr.copy(out, o);
+  o += hdr.length;
+  data.copy(out, o);
+  return out;
+}
+function tryParseBinaryMediaChunk(buf) {
+  if (buf.length === 0) return { frame: null, bytesConsumed: 0 };
+  if (buf[0] !== BIN_MEDIA_CHUNK_TAG) return { frame: null, bytesConsumed: 0 };
+  if (buf.length < 7) return { frame: null, bytesConsumed: 0 };
+  const hdrLen = buf.readUInt16BE(1);
+  const payloadLen = buf.readUInt32BE(3);
+  const MAX_HDR_LEN = 512;
+  if (hdrLen === 0 || hdrLen > MAX_HDR_LEN || payloadLen === 0 || payloadLen > MAX_BINARY_CHUNK_BYTES) {
+    return { frame: null, bytesConsumed: 1 };
+  }
+  const total = 7 + hdrLen + payloadLen;
+  if (buf.length < total) return { frame: null, bytesConsumed: 0 };
+  const hdrBuf = buf.subarray(7, 7 + hdrLen);
+  let hdrObj;
+  try {
+    hdrObj = JSON.parse(hdrBuf.toString("utf8"));
+  } catch {
+    return { frame: null, bytesConsumed: 1 };
+  }
+  if (typeof hdrObj !== "object" || hdrObj === null || Array.isArray(hdrObj)) {
+    return { frame: null, bytesConsumed: 1 };
+  }
+  const r = hdrObj;
+  const id = r["id"];
+  const seq = r["seq"];
+  if (typeof id !== "string" || id.length === 0 || id.length > MAX_ID_LEN) {
+    return { frame: null, bytesConsumed: 1 };
+  }
+  if (typeof seq !== "number" || !Number.isFinite(seq) || !Number.isInteger(seq) || seq < 0) {
+    return { frame: null, bytesConsumed: 1 };
+  }
+  const data = Buffer.from(buf.subarray(7 + hdrLen, 7 + hdrLen + payloadLen));
+  return {
+    frame: { t: "media-chunk", id, seq, data },
+    bytesConsumed: total
+  };
+}
+function pullFramesFromBuffer(buf) {
+  const frames = [];
+  let offset = 0;
+  while (offset < buf.length) {
+    const first = buf[offset];
+    if (first === BIN_MEDIA_CHUNK_TAG) {
+      const slice = offset === 0 ? buf : buf.subarray(offset);
+      const { frame: frame2, bytesConsumed } = tryParseBinaryMediaChunk(slice);
+      if (bytesConsumed === 0) {
+        break;
+      }
+      if (frame2 !== null) frames.push(frame2);
+      offset += bytesConsumed;
+      continue;
+    }
+    const nlRel = buf.indexOf(10, offset);
+    if (nlRel < 0) {
+      break;
+    }
+    const lineBuf = buf.subarray(offset, nlRel);
+    offset = nlRel + 1;
+    if (lineBuf.length === 0) continue;
+    let onlyWs = true;
+    for (let i = 0; i < lineBuf.length; i++) {
+      const c = lineBuf[i];
+      if (c !== 32 && c !== 9 && c !== 13) {
+        onlyWs = false;
+        break;
+      }
+    }
+    if (onlyWs) continue;
+    const frame = parseFrame(lineBuf);
+    if (frame !== null) frames.push(frame);
+  }
+  const rest = offset === 0 ? buf : buf.subarray(offset);
+  return { frames, rest: rest.length === 0 ? Buffer.alloc(0) : Buffer.from(rest) };
+}
 
 // src/identity.ts
 import {
@@ -137,14 +243,20 @@ import { chmodSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writ
 import path2 from "path";
 
 // src/state.ts
-import { mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
+import { mkdirSync, readFileSync, rmSync, renameSync, writeFileSync } from "fs";
 import os from "os";
 import path from "path";
 import { createConsentLedger } from "@pooriaarab/vibe-core";
+function writeJsonAtomic(filePath, obj) {
+  const tmpPath = `${filePath}.tmp`;
+  writeFileSync(tmpPath, JSON.stringify(obj, null, 2) + "\n", "utf8");
+  renameSync(tmpPath, filePath);
+}
 var CONSENT_SCOPE = "share:league";
 var LIVE_CONSENT_SCOPE = "share:live";
 function defaultStateDir() {
-  return path.join(os.homedir(), ".vibedating");
+  const home = process.env["VIBEDATE_HOME"];
+  return home && home.length > 0 ? home : path.join(os.homedir(), ".vibedating");
 }
 var FileConsentStore = class {
   constructor(file) {
@@ -162,7 +274,7 @@ var FileConsentStore = class {
   }
   save(grants) {
     mkdirSync(path.dirname(this.file), { recursive: true });
-    writeFileSync(this.file, JSON.stringify({ grants }, null, 2) + "\n", "utf8");
+    writeJsonAtomic(this.file, { grants });
   }
 };
 function createLedger(dir = defaultStateDir()) {
@@ -184,7 +296,7 @@ function connectProfile(snapshot, handle, dir = defaultStateDir()) {
     connectedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
   mkdirSync(dir, { recursive: true });
-  writeFileSync(profilePath(dir), JSON.stringify(state, null, 2) + "\n", "utf8");
+  writeJsonAtomic(profilePath(dir), state);
   return state;
 }
 function loadProfile(dir = defaultStateDir()) {
@@ -245,14 +357,10 @@ function saveHandle(handle, dir = defaultStateDir()) {
     );
   }
   mkdirSync(dir, { recursive: true });
-  writeFileSync(handleFilePath(dir), JSON.stringify({ handle: canonical }, null, 2) + "\n", "utf8");
+  writeJsonAtomic(handleFilePath(dir), { handle: canonical });
   const existing = loadProfile(dir);
   if (existing !== null) {
-    writeFileSync(
-      profilePath(dir),
-      JSON.stringify({ ...existing, handle: canonical }, null, 2) + "\n",
-      "utf8"
-    );
+    writeJsonAtomic(profilePath(dir), { ...existing, handle: canonical });
   }
   return canonical;
 }
@@ -270,7 +378,7 @@ function blocklistPath(dir) {
 }
 function persistBlocklist(blocked, dir) {
   mkdirSync(dir, { recursive: true });
-  writeFileSync(blocklistPath(dir), JSON.stringify({ blocked }, null, 2) + "\n", "utf8");
+  writeJsonAtomic(blocklistPath(dir), { blocked });
 }
 function loadBlocklist(dir = defaultStateDir()) {
   try {
@@ -442,7 +550,7 @@ import { readFile } from "fs/promises";
 import { writeFileSync as writeFileSync3 } from "fs";
 import os2 from "os";
 import path3 from "path";
-var DEFAULT_CHUNK_BYTES = Math.floor(MAX_B64_CHUNK_LEN * 3 / 4);
+var DEFAULT_CHUNK_BYTES = MAX_BINARY_CHUNK_BYTES;
 var MIME_BY_EXT = {
   ".png": "image/png",
   ".jpg": "image/jpeg",
@@ -455,11 +563,32 @@ var MIME_BY_EXT = {
 function inferMime(name) {
   return MIME_BY_EXT[path3.extname(name).toLowerCase()] ?? "application/octet-stream";
 }
-function writeFrame(socket, line) {
-  return new Promise((resolve) => {
-    const ok = socket.write(line);
+function writeBytes(socket, data) {
+  return new Promise((resolve, reject) => {
+    const ok = socket.write(data);
     if (ok) resolve();
-    else socket.once("drain", () => resolve());
+    else {
+      const onDrain = () => {
+        cleanup();
+        resolve();
+      };
+      const onClose = () => {
+        cleanup();
+        reject(new Error("Socket closed before drain"));
+      };
+      const onError = (err) => {
+        cleanup();
+        reject(err);
+      };
+      const cleanup = () => {
+        socket.removeListener("drain", onDrain);
+        socket.removeListener("close", onClose);
+        socket.removeListener("error", onError);
+      };
+      socket.once("drain", onDrain);
+      socket.once("close", onClose);
+      socket.once("error", onError);
+    }
   });
 }
 async function sendMedia(opts) {
@@ -471,15 +600,23 @@ async function sendMedia(opts) {
   }
   if (mime.length > MAX_MIME_LEN) throw new Error(`mime too long: ${mime.length} > ${MAX_MIME_LEN}`);
   if (name.length > MAX_NAME_LEN) throw new Error(`name too long: ${name.length} > ${MAX_NAME_LEN}`);
-  await writeFrame(socket, serializeFrame({ t: "media-start", id, mime, size, name }) + "\n");
-  const chunkBytes = opts.chunkBytes ?? DEFAULT_CHUNK_BYTES;
+  await writeBytes(socket, serializeFrame({ t: "media-start", id, mime, size, name }) + "\n");
+  const chunkBytes = Math.min(
+    opts.chunkBytes ?? DEFAULT_CHUNK_BYTES,
+    opts.legacyJson ? Math.floor(16 * 1024 * 3 / 4) : MAX_BINARY_CHUNK_BYTES
+  );
   let seq = 0;
   for (let off = 0; off < size; off += chunkBytes) {
-    const b64 = data.subarray(off, off + chunkBytes).toString("base64");
-    await writeFrame(socket, serializeFrame({ t: "media-chunk", id, seq, b64 }) + "\n");
+    const slice = data.subarray(off, off + chunkBytes);
+    if (opts.legacyJson) {
+      const b64 = slice.toString("base64");
+      await writeBytes(socket, serializeFrame({ t: "media-chunk", id, seq, b64 }) + "\n");
+    } else {
+      await writeBytes(socket, serializeBinaryMediaChunk({ id, seq, data: slice }));
+    }
     seq++;
   }
-  await writeFrame(socket, serializeFrame({ t: "media-end", id }) + "\n");
+  await writeBytes(socket, serializeFrame({ t: "media-end", id }) + "\n");
   return { id, size };
 }
 async function sendMediaFile(opts) {
@@ -492,7 +629,8 @@ async function sendMediaFile(opts) {
     mime,
     name,
     id: opts.id,
-    chunkBytes: opts.chunkBytes
+    chunkBytes: opts.chunkBytes,
+    legacyJson: opts.legacyJson
   });
 }
 function safeName(id, name) {
@@ -533,9 +671,20 @@ var MediaReceiver = class {
           return;
         }
         let bytes;
-        try {
-          bytes = Buffer.from(frame.b64, "base64");
-        } catch {
+        if ("data" in frame && Buffer.isBuffer(frame.data)) {
+          bytes = frame.data;
+          if (bytes.length === 0 || bytes.length > MAX_BINARY_CHUNK_BYTES) {
+            this.abort(frame.id);
+            return;
+          }
+        } else if ("b64" in frame && typeof frame.b64 === "string") {
+          try {
+            bytes = Buffer.from(frame.b64, "base64");
+          } catch {
+            this.abort(frame.id);
+            return;
+          }
+        } else {
           this.abort(frame.id);
           return;
         }
@@ -558,7 +707,9 @@ var MediaReceiver = class {
         const filePath = path3.join(this.opts.tmpDir ?? os2.tmpdir(), safeName(frame.id, tx.name));
         try {
           writeFileSync3(filePath, buf);
-        } catch {
+        } catch (err) {
+          const error = err instanceof Error ? err : new Error(String(err));
+          this.onMedia({ mime: tx.mime, name: tx.name, path: filePath, size: tx.received, error });
           return;
         }
         this.onMedia({ mime: tx.mime, name: tx.name, path: filePath, size: tx.received });
@@ -576,7 +727,7 @@ function createPeerLink(socket, hello, initialBuffer = "", linkOpts = {}) {
   const mediaCbs = /* @__PURE__ */ new Set();
   const signalCbs = /* @__PURE__ */ new Set();
   const closeCbs = /* @__PURE__ */ new Set();
-  let buf = initialBuffer;
+  let buf = typeof initialBuffer === "string" ? Buffer.from(initialBuffer, "utf8") : Buffer.from(initialBuffer);
   let closed = false;
   let mediaReceiver;
   const ensureMediaReceiver = () => {
@@ -624,19 +775,15 @@ function createPeerLink(socket, hello, initialBuffer = "", linkOpts = {}) {
     }
   };
   const pump = () => {
-    let nl;
-    while ((nl = buf.indexOf("\n")) >= 0) {
-      const line = buf.slice(0, nl);
-      buf = buf.slice(nl + 1);
-      if (line.trim() === "") continue;
-      const frame = parseFrame(line);
-      if (frame === null) continue;
-      dispatch(frame);
-    }
+    if (buf.length === 0) return;
+    const { frames, rest } = pullFramesFromBuffer(buf);
+    buf = rest;
+    for (const frame of frames) dispatch(frame);
   };
   pump();
   socket.on("data", (chunk) => {
-    buf += chunk.toString("utf8");
+    const bytes = typeof chunk === "string" ? Buffer.from(chunk, "utf8") : chunk;
+    buf = buf.length === 0 ? Buffer.from(bytes) : Buffer.concat([buf, bytes]);
     pump();
   });
   socket.on("end", () => {
@@ -659,6 +806,9 @@ function createPeerLink(socket, hello, initialBuffer = "", linkOpts = {}) {
   });
   return {
     hello,
+    get closed() {
+      return closed;
+    },
     send(text) {
       if (closed) return;
       const frame = { t: "msg", id: randomUUID2(), text, at: Date.now() };
@@ -846,7 +996,8 @@ async function startDiscovery(opts) {
   const topics = opts.topics ? [...opts.topics] : opts.topic !== void 0 ? [opts.topic] : [leagueTopic(hello.league)];
   const acceptLeague = opts.acceptLeague ?? ((l) => l === hello.league);
   const { default: Hyperswarm } = await import("hyperswarm");
-  const swarm = new Hyperswarm(opts.bootstrap === void 0 ? {} : { bootstrap: opts.bootstrap });
+  const bootstrap = opts.bootstrap ?? parseBootstrapEnv(process.env["VIBEDATE_BOOTSTRAP"]);
+  const swarm = new Hyperswarm(bootstrap === void 0 ? {} : { bootstrap });
   await swarm.dht.fullyBootstrapped();
   const peers = /* @__PURE__ */ new Map();
   swarm.on("connection", (socket, info) => {
@@ -863,15 +1014,18 @@ async function startDiscovery(opts) {
         ...hello.sig !== void 0 ? { sig: hello.sig } : {}
       }) + "\n"
     );
-    let buf = "";
+    let buf = Buffer.alloc(0);
     let handedOff = false;
     const onData = (chunk) => {
       if (handedOff) return;
-      buf += chunk.toString("utf8");
+      buf = buf.length === 0 ? Buffer.from(chunk) : Buffer.concat([buf, chunk]);
       let nl;
-      while ((nl = buf.indexOf("\n")) >= 0) {
-        const line = buf.slice(0, nl);
-        buf = buf.slice(nl + 1);
+      while ((nl = buf.indexOf(
+        10
+        /* \n */
+      )) >= 0) {
+        const line = buf.subarray(0, nl).toString("utf8");
+        buf = buf.subarray(nl + 1);
         if (line.trim() === "") continue;
         const frame = parseFrame(line);
         if (frame === null) continue;
@@ -917,7 +1071,7 @@ async function startDiscovery(opts) {
           });
           onLink(link);
         }
-        buf = "";
+        buf = Buffer.alloc(0);
         return;
       }
     };
@@ -958,6 +1112,21 @@ async function startDiscovery(opts) {
     }
   };
 }
+function parseBootstrapEnv(raw) {
+  if (raw === void 0 || raw.trim() === "") return void 0;
+  const nodes = [];
+  for (const entry of raw.split(",")) {
+    const trimmed = entry.trim();
+    if (trimmed === "") continue;
+    const idx = trimmed.lastIndexOf(":");
+    if (idx <= 0) continue;
+    const host = trimmed.slice(0, idx);
+    const port = Number(trimmed.slice(idx + 1));
+    if (!Number.isInteger(port) || port <= 0 || port > 65535) continue;
+    nodes.push({ host, port });
+  }
+  return nodes.length > 0 ? nodes : void 0;
+}
 
 // src/relay.ts
 import { createHash as createHash2 } from "crypto";
@@ -1067,6 +1236,14 @@ async function createNostrRelayLink(opts) {
         return;
       }
       peerNostrPubkey = event.pubkey;
+      try {
+        const parsed = JSON.parse(plaintext);
+        if (parsed && typeof parsed === "object" && "__vibe_rtc" in parsed) {
+          for (const cb of signalCbs) cb(parsed.__vibe_rtc);
+          return;
+        }
+      } catch {
+      }
       const msg = { id: event.id, text: plaintext, at: event.created_at * 1e3 };
       for (const cb of messageCbs) cb(msg);
       return;
@@ -1075,6 +1252,9 @@ async function createNostrRelayLink(opts) {
   publishPresence();
   return {
     hello,
+    get closed() {
+      return closed;
+    },
     send(text) {
       if (closed) return;
       if (peerNostrPubkey === void 0) {
@@ -1088,9 +1268,14 @@ async function createNostrRelayLink(opts) {
     async sendMedia() {
       return { id: "", size: 0 };
     },
-    // ponytail: relay WebRTC signaling (rtc-offer/answer/ice as kind-4 payloads)
-    // so A/V could also fall back through the relay. v0: text only.
-    sendSignal() {
+    sendSignal(frame) {
+      if (closed) return;
+      const payload = JSON.stringify({ __vibe_rtc: frame });
+      if (peerNostrPubkey === void 0) {
+        pending.push(payload);
+        return;
+      }
+      sendEncrypted(payload, peerNostrPubkey);
     },
     onMessage(cb) {
       messageCbs.add(cb);
@@ -1163,6 +1348,7 @@ var ROOM_TOPIC_PREFIX = "vibedate-room:";
 function roomTopic(name) {
   return createHash3("sha256").update(`${ROOM_TOPIC_PREFIX}${name}`, "utf8").digest();
 }
+var MAX_ROOM = 32;
 async function startRoom(opts) {
   const topic = roomTopic(opts.room);
   const entries = /* @__PURE__ */ new Map();
@@ -1186,7 +1372,19 @@ async function startRoom(opts) {
     ...opts.stateDir === void 0 ? {} : { stateDir: opts.stateDir },
     ...opts.notify === void 0 ? {} : { notify: opts.notify },
     onLink: (link) => {
+      const isSelf = link.hello.pubkey !== void 0 && opts.hello.pubkey !== void 0 ? link.hello.pubkey === opts.hello.pubkey : link.hello.handle === opts.hello.handle;
+      if (isSelf) {
+        link.close();
+        return;
+      }
       const handle = link.hello.handle;
+      if (!entries.has(handle) && entries.size >= MAX_ROOM) {
+        link.send(`Room is full (${MAX_ROOM} members max). Try again later.`);
+        link.close();
+        return;
+      }
+      const cur = entries.get(handle);
+      if (cur) cur.link.close();
       entries.set(handle, { hello: link.hello, link });
       memberHellos.set(handle, link.hello);
       fireRoster();
@@ -1197,8 +1395,8 @@ async function startRoom(opts) {
         for (const cb of signalCbs) cb(handle, frame);
       });
       link.onClose(() => {
-        const cur = entries.get(handle);
-        if (cur && cur.link === link) {
+        const cur2 = entries.get(handle);
+        if (cur2 && cur2.link === link) {
           entries.delete(handle);
           memberHellos.delete(handle);
           fireRoster();

package/dist/cli.js

@@ -10,7 +10,7 @@ import {
   stopDaemon,
   uninstallDaemonService,
   writeDaemonState
-} from "./chunk-XUWNLMOY.js";
+} from "./chunk-NSSNOQJG.js";
 import {
   CANDIDATES,
   LIVE_NOTICE,
@@ -46,7 +46,7 @@ import {
   signHelloClaims,
   startDiscovery,
   startRoom
-} from "./chunk-3FJDVN72.js";
+} from "./chunk-ZU5UPYSF.js";
 
 // src/cli.ts
 import readline from "readline";
@@ -1389,9 +1389,8 @@ var webAppHtml = `<!DOCTYPE html>
   var idleIdx = 0;
 
   function rtcConfig(){
-    // A public STUN server crosses most NATs. No TURN in v0 \u2014 symmetric NATs
-    // won't connect, but signaling still completes and the call fails open.
-    return { iceServers: [{ urls: "stun:stun.l.google.com:19302" }] };
+    var extra = (window.__VIBE_ICE__ && window.__VIBE_ICE__.iceServers) || [];
+    return { iceServers: [{ urls: "stun:stun.l.google.com:19302" }].concat(extra) };
   }
   function sleep(ms){ return new Promise(function(r){ setTimeout(r, ms); }); }
 
@@ -2228,10 +2227,11 @@ function createLiveBridge() {
       link.onMedia((m) => {
         const mb = boxes.get(handle2);
         if (!mb) {
-          fs.unlink(m.path, () => {
+          if (!m.error) fs.unlink(m.path, () => {
           });
           return;
         }
+        if (m.error) return;
         mb.media.push({ ...m, name: sanitizePeerText(m.name), mime: sanitizePeerText(m.mime) });
         if (mb.media.length > MAX_QUEUED_MESSAGES) {
           const dropped = mb.media.splice(0, mb.media.length - MAX_QUEUED_MESSAGES);
@@ -2459,7 +2459,18 @@ async function handle(req, res, opts) {
   const url = new URL(req.url ?? "/", "http://localhost");
   const pathname = url.pathname;
   if (req.method === "GET" && pathname === "/") {
-    send(res, 200, "text/html; charset=utf-8", webAppHtml);
+    const turnUrl = process.env["VIBEDATE_TURN_URL"];
+    let html = webAppHtml;
+    if (turnUrl) {
+      const turnUser = process.env["VIBEDATE_TURN_USER"];
+      const turnCred = process.env["VIBEDATE_TURN_CRED"];
+      const server = { urls: turnUrl };
+      if (turnUser) server.username = turnUser;
+      if (turnCred) server.credential = turnCred;
+      const script = `<script>window.__VIBE_ICE__={iceServers:${JSON.stringify([server]).replace(/</g, "\\u003c")}};</script>`;
+      html = html.replace("<script>", script + "\n<script>");
+    }
+    send(res, 200, "text/html; charset=utf-8", html);
     return;
   }
   if (req.method === "GET" && pathname === "/api/state") {
@@ -2784,7 +2795,7 @@ async function handle(req, res, opts) {
 }
 
 // src/cli.ts
-var VERSION = "0.8.3";
+var VERSION = "0.8.6";
 function parsePort(raw) {
   const n = Number(raw);
   if (!Number.isInteger(n) || n < 1 || n > 65535) return void 0;
@@ -3136,7 +3147,7 @@ async function cmdDiscover(live, any, viaRelay) {
   );
   return 0;
 }
-async function cmdOpen(port, any, room) {
+async function cmdOpen(port, any, room, viaRelay, to) {
   const profile = loadProfile();
   let live;
   let roomBridge;
@@ -3167,17 +3178,45 @@ async function cmdOpen(port, any, room) {
       }).catch(() => {
       });
     } else if (live) {
-      const { topics, acceptLeague } = discoveryScope(profile.league, any);
-      void startDiscovery({
-        hello,
-        topics,
-        acceptLeague,
-        isBlocked: blockedChecker(),
-        onLink: (link) => live.addLink(link)
-      }).then((s) => {
-        session = s;
-      }).catch(() => {
-      });
+      if (viaRelay && to !== void 0) {
+        const target = normalizeHandle(to);
+        const peer = target ? loadPeers().find((p) => sameHandle(p.handle, target) && typeof p.pubkey === "string") : void 0;
+        if (peer && peer.pubkey) {
+          const peerPubkey = peer.pubkey;
+          void (async () => {
+            try {
+              const myNostr = await loadOrCreateNostrKey();
+              const transport = await createNostrPoolTransport();
+              const identity = loadOrCreateIdentity();
+              const link = await createNostrRelayLink({
+                myNostr,
+                myEd25519Hex: identity.publicKeyHex,
+                peerEd25519Hex: peerPubkey,
+                hello: peer,
+                transport
+              });
+              live.addLink(link);
+            } catch {
+            }
+          })();
+        } else {
+          process2.stderr.write(`
+  warning: --via-relay peer ${to} not found or lacks identity pubkey.
+`);
+        }
+      } else {
+        const { topics, acceptLeague } = discoveryScope(profile.league, any);
+        void startDiscovery({
+          hello,
+          topics,
+          acceptLeague,
+          isBlocked: blockedChecker(),
+          onLink: (link) => live.addLink(link)
+        }).then((s) => {
+          session = s;
+        }).catch(() => {
+        });
+      }
     }
   }
   process2.stdout.write(`
@@ -3390,10 +3429,17 @@ async function cmdLive(dating, any, to, keepAlive, viaRelay) {
 `);
       }
       link.onMedia((m) => {
-        process2.stdout.write(
-          `  \u{1F4CE} <${sanitizePeerText(link.hello.handle)}> sent ${sanitizePeerText(m.name)} \u2014 saved to ${m.path}
+        if (m.error) {
+          process2.stdout.write(
+            `  \u{1F4CE} <${sanitizePeerText(link.hello.handle)}> sent ${sanitizePeerText(m.name)} \u2014 FAILED to save: ${m.error.message}
 `
-        );
+          );
+        } else {
+          process2.stdout.write(
+            `  \u{1F4CE} <${sanitizePeerText(link.hello.handle)}> sent ${sanitizePeerText(m.name)} \u2014 saved to ${m.path}
+`
+          );
+        }
       });
       pairing.add(link);
     }
@@ -3884,7 +3930,7 @@ async function main(argv) {
     case "discover":
       return cmdDiscover(parsed.live, parsed.any, parsed.viaRelay);
     case "open":
-      return cmdOpen(parsed.port, parsed.any, parsed.room);
+      return cmdOpen(parsed.port, parsed.any, parsed.room, parsed.viaRelay, parsed.to);
     case "live":
       return cmdLive(parsed.dating, parsed.any, parsed.to, parsed.keepAlive, parsed.viaRelay);
     case "find":

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { UsageSnapshot, UsageSource, Harness, HarnessUsageOptions } from '@pooriaarab/vibe-core';
 export { Harness, UsageSnapshot, UsageSource, createConsentLedger } from '@pooriaarab/vibe-core';
-import { P as PeerHello, a as PeerLink } from './room-DpZhNvuu.js';
-export { D as DiscoveryOptions, b as DiscoverySession, L as LIVE_NOTICE, R as ROOM_TOPIC_PREFIX, c as RoomMember, d as RoomMessage, e as RoomOptions, f as RoomSession, S as StoredPeer, T as TOPIC_PREFIX, l as leagueTopic, g as loadPeers, p as parseHandshake, r as recordPeer, h as recordPeerMessage, i as roomTopic, s as serializeHandshake, j as startDiscovery, k as startRoom } from './room-DpZhNvuu.js';
+import { a as PeerHello, P as PeerLink } from './room-DgdlQcRD.js';
+export { c as DiscoveryOptions, D as DiscoverySession, L as LIVE_NOTICE, d as ROOM_TOPIC_PREFIX, e as RoomMember, b as RoomMessage, f as RoomOptions, R as RoomSession, S as StoredPeer, T as TOPIC_PREFIX, l as leagueTopic, g as loadPeers, p as parseHandshake, r as recordPeer, h as recordPeerMessage, i as roomTopic, s as serializeHandshake, j as startDiscovery, k as startRoom } from './room-DgdlQcRD.js';
 import { KeyObject } from 'node:crypto';
 
 /**

package/dist/index.js

@@ -36,7 +36,7 @@ import {
   startDiscovery,
   startRoom,
   verifyHelloClaims
-} from "./chunk-3FJDVN72.js";
+} from "./chunk-ZU5UPYSF.js";
 export {
   BELOW_LEAGUE,
   CANDIDATES,

package/dist/mcp-bin.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/mcp-bin.js

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+import {
+  runMcp
+} from "./chunk-NSSNOQJG.js";
+import "./chunk-ZU5UPYSF.js";
+
+// src/mcp-bin.ts
+runMcp().catch((err) => {
+  process.stderr.write(
+    `vibedate-mcp: ${err instanceof Error ? err.stack ?? err.message : String(err)}
+`
+  );
+  process.exit(1);
+});

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { a as PeerLink, P as PeerHello, f as RoomSession, b as DiscoverySession, d as RoomMessage } from './room-DpZhNvuu.js';
+import { P as PeerLink, a as PeerHello, R as RoomSession, D as DiscoverySession, b as RoomMessage } from './room-DgdlQcRD.js';
 import '@pooriaarab/vibe-core';
 
 /**
@@ -86,36 +86,6 @@ interface LivePairing {
     queued(): PeerLink[];
 }
 
-/**
- * vibedating MCP server (stdio) — full agent-native tool surface.
- *
- * An agent drives vibedate ENTIRELY via tool calls — no interactive terminal.
- * This is the fix for agents whose interactive `live` sessions time out.
- *
- * Tools (every response is structured JSON with `{ ok, ... }` / `{ ok:false, error }`):
- *
- *   READ/STATE
- *     get_profile · connect · matches · handle_get · handle_set · blocklist
- *     block · unblock · daemon_status
- *
- *   DISCOVERY
- *     discover · who · find
- *
- *   LIVE CHAT (stateful in-process session — poll, don't block a TTY)
- *     live_start · live_peers · live_send · live_poll · live_open · live_next · live_stop
- *
- *   ROOMS
- *     room_join · room_send · room_poll · room_who · room_leave
- *
- *   MEDIA
- *     media_send
- *
- * Legacy aliases `profile` / `matches` remain registered for back-compat.
- *
- * AEGIS: peer text is UNTRUSTED display data — sanitized before return, never
- * executed, never fed to a shell.
- */
-
 /** Injectable hooks so tests can drive live/room without the real DHT. */
 interface McpLiveHooks {
     /** Build (or inject) the pairing object used by live_* tools. */

package/dist/mcp.js

@@ -3,8 +3,8 @@ import {
   createMcpServer,
   createSessionState,
   runMcp
-} from "./chunk-XUWNLMOY.js";
-import "./chunk-3FJDVN72.js";
+} from "./chunk-NSSNOQJG.js";
+import "./chunk-ZU5UPYSF.js";
 export {
   MCP_TOOL_NAMES,
   createMcpServer,

package/dist/{room-DpZhNvuu.d.ts → room-DgdlQcRD.d.ts}

@@ -24,11 +24,20 @@ type Frame = {
     mime: string;
     size: number;
     name: string;
-} | {
+}
+/** Legacy JSON media-chunk (base64). Prefer binary wire for new sends. */
+ | {
     t: 'media-chunk';
     id: string;
     seq: number;
     b64: string;
+}
+/** Binary-path media-chunk: raw bytes, no base64. Produced by the binary framer. */
+ | {
+    t: 'media-chunk';
+    id: string;
+    seq: number;
+    data: Buffer;
 } | {
     t: 'media-end';
     id: string;
@@ -56,11 +65,14 @@ interface ReceivedMedia {
     /** Temp file path holding the reassembled bytes. */
     readonly path: string;
     readonly size: number;
+    readonly error?: Error;
 }
 
 interface PeerLink {
     /** The validated identity of the remote peer (from the hello handshake). */
     readonly hello: PeerHello;
+    /** Whether the link has been closed. */
+    readonly closed: boolean;
     /** Send a line of text as a `msg` frame. */
     send(text: string): void;
     /** Read a file from disk and send it as a chunked media transfer. */
@@ -317,4 +329,4 @@ interface RoomSession {
  */
 declare function startRoom(opts: RoomOptions): Promise<RoomSession>;
 
-export { type DiscoveryOptions as D, LIVE_NOTICE as L, type PeerHello as P, ROOM_TOPIC_PREFIX as R, type StoredPeer as S, TOPIC_PREFIX as T, type PeerLink as a, type DiscoverySession as b, type RoomMember as c, type RoomMessage as d, type RoomOptions as e, type RoomSession as f, loadPeers as g, recordPeerMessage as h, roomTopic as i, startDiscovery as j, startRoom as k, leagueTopic as l, parseHandshake as p, recordPeer as r, serializeHandshake as s };
+export { type DiscoverySession as D, LIVE_NOTICE as L, type PeerLink as P, type RoomSession as R, type StoredPeer as S, TOPIC_PREFIX as T, type PeerHello as a, type RoomMessage as b, type DiscoveryOptions as c, ROOM_TOPIC_PREFIX as d, type RoomMember as e, type RoomOptions as f, loadPeers as g, recordPeerMessage as h, roomTopic as i, startDiscovery as j, startRoom as k, leagueTopic as l, parseHandshake as p, recordPeer as r, serializeHandshake as s };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vibedate",
-  "version": "0.8.3",
+  "version": "0.8.6",
   "description": "Dating by tokens — matched by usage league across agentic CLIs. Raw usage stays local; only your league is shared. CLI + local web app + MCP. Local-first.",
   "type": "module",
   "license": "MIT",
@@ -8,7 +8,7 @@
   "bin": {
     "vibedate": "./dist/cli.js",
     "vibedating": "./dist/cli.js",
-    "vibedate-mcp": "./dist/mcp.js"
+    "vibedate-mcp": "./dist/mcp-bin.js"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -22,10 +22,12 @@
     "dist"
   ],
   "scripts": {
-    "build": "tsup src/index.ts src/cli.ts src/mcp.ts --format esm --dts --clean",
+    "build": "tsup src/index.ts src/cli.ts src/mcp.ts src/mcp-bin.ts --format esm --dts --clean",
     "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "test:watch": "vitest"
+    "test": "vitest run --exclude '**/*.harness.test.ts'",
+    "test:watch": "vitest",
+    "bench": "tsx bench/run.ts",
+    "test:harness": "npm run build && vitest run harness.test"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
@@ -37,6 +39,7 @@
     "@types/node": "^20.11.0",
     "hyperdht": "^6.33.0",
     "tsup": "^8.0.0",
+    "tsx": "^4.23.1",
     "typescript": "^5.4.0",
     "vitest": "^1.6.0",
     "werift": "^0.24.1"