vibelet 0.1.35 → 0.1.36

package/app.json

@@ -0,0 +1,5 @@
+{
+  "ios": {
+    "bundleIdentifier": "com.anonymous.-vibeletdaemon"
+  }
+}

package/dist/advertised-hosts.d.ts

@@ -0,0 +1,34 @@
+import { execFileSync } from 'child_process';
+import type { NetworkInterfaceInfo } from 'os';
+export interface AdvertisedHostsOptions {
+    canonicalHost: string;
+    configuredCanonicalHost?: string;
+    configuredFallbackHosts?: string[];
+    tailscaleCanonicalHost?: string;
+    tailscaleFallbackHosts?: string[];
+    interfaces: NodeJS.Dict<NetworkInterfaceInfo[]>;
+}
+export interface TailscaleHosts {
+    canonicalHost?: string;
+    fallbackHosts: string[];
+}
+export interface AdvertisedConnectionTargetOptions {
+    canonicalHost: string;
+    fallbackHosts?: string[];
+    port: number;
+    relayUrl?: string;
+}
+export interface AdvertisedConnectionTarget {
+    canonicalHost: string;
+    fallbackHosts: string[];
+    port: number;
+}
+export declare function readConfiguredFallbackHosts(rawValue: string | undefined): string[];
+export declare function parseTailscaleStatus(rawStatus: string): TailscaleHosts;
+export declare function readTailscaleHosts(runCommand?: typeof execFileSync): TailscaleHosts;
+export declare function computeAdvertisedConnectionTarget(options: AdvertisedConnectionTargetOptions): AdvertisedConnectionTarget;
+export declare function computeAdvertisedHosts(options: AdvertisedHostsOptions): {
+    canonicalHost: string;
+    fallbackHosts: string[];
+};
+//# sourceMappingURL=advertised-hosts.d.ts.map

package/dist/advertised-hosts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advertised-hosts.d.ts","sourceRoot":"","sources":["../src/advertised-hosts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,IAAI,CAAC;AAE/C,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC;CACjD;AASD,MAAM,WAAW,cAAc;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd;AAiDD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAMlF;AAsBD,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,CAiBtE;AAED,wBAAgB,kBAAkB,CAAC,UAAU,GAAE,OAAO,YAA2B,GAAG,cAAc,CA6BjG;AAED,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,iCAAiC,GACzC,0BAA0B,CAmC5B;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,sBAAsB,GAAG;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAuB1H"}

package/dist/advertised-hosts.js

@@ -0,0 +1,176 @@
+import { execFileSync } from 'child_process';
+function isIpv4(address) {
+    const parts = address.split('.');
+    if (parts.length !== 4)
+        return false;
+    return parts.every((part) => /^\d+$/.test(part) && Number(part) >= 0 && Number(part) <= 255);
+}
+function isTailscaleIpv4(address) {
+    if (!isIpv4(address))
+        return false;
+    const [first, second] = address.split('.').map(Number);
+    return first === 100 && second >= 64 && second <= 127;
+}
+function isLinkLocalIpv4(address) {
+    if (!isIpv4(address))
+        return false;
+    const [first, second] = address.split('.').map(Number);
+    return first === 169 && second === 254;
+}
+function isBenchmarkIpv4(address) {
+    if (!isIpv4(address))
+        return false;
+    const [first, second] = address.split('.').map(Number);
+    return first === 198 && (second === 18 || second === 19);
+}
+function isUsableHost(address) {
+    return Boolean(address)
+        && !isLinkLocalIpv4(address)
+        && !isBenchmarkIpv4(address);
+}
+function normalizeHost(host) {
+    if (!host)
+        return undefined;
+    const trimmed = host.trim().replace(/\.$/, '');
+    return trimmed ? trimmed.toLowerCase() : undefined;
+}
+function normalizeFallbackHosts(hosts, canonicalHost) {
+    return (hosts ?? [])
+        .map((host) => normalizeHost(host))
+        .filter((host) => Boolean(host))
+        .filter((host) => isUsableHost(host))
+        .filter((host, index, all) => host !== canonicalHost && all.indexOf(host) === index);
+}
+export function readConfiguredFallbackHosts(rawValue) {
+    if (!rawValue)
+        return [];
+    return rawValue
+        .split(',')
+        .map((entry) => entry.trim())
+        .filter(Boolean);
+}
+function collectInterfaceHosts(interfaces) {
+    const tailscaleHosts = [];
+    const lanHosts = [];
+    for (const entries of Object.values(interfaces)) {
+        if (!entries)
+            continue;
+        for (const entry of entries) {
+            if (entry.internal || entry.family !== 'IPv4')
+                continue;
+            if (!isUsableHost(entry.address))
+                continue;
+            if (isTailscaleIpv4(entry.address)) {
+                tailscaleHosts.push(entry.address);
+            }
+            else {
+                lanHosts.push(entry.address);
+            }
+        }
+    }
+    return [...tailscaleHosts, ...lanHosts];
+}
+export function parseTailscaleStatus(rawStatus) {
+    const parsed = JSON.parse(rawStatus);
+    const dnsName = normalizeHost(parsed.Self?.DNSName);
+    const tailscaleIps = (parsed.Self?.TailscaleIPs ?? [])
+        .map((host) => normalizeHost(host))
+        .filter((host) => Boolean(host))
+        .filter((host) => isTailscaleIpv4(host) && isUsableHost(host));
+    const canonicalHost = tailscaleIps[0] ?? dnsName;
+    const fallbackHosts = [
+        ...(dnsName && dnsName !== canonicalHost ? [dnsName] : []),
+        ...tailscaleIps.filter((host) => host !== canonicalHost),
+    ];
+    return {
+        canonicalHost,
+        fallbackHosts,
+    };
+}
+export function readTailscaleHosts(runCommand = execFileSync) {
+    const socketPaths = [
+        process.env.TAILSCALE_SOCKET,
+        '/tmp/tailscale.sock',
+    ].filter(Boolean);
+    // Try with custom socket paths first
+    for (const socket of socketPaths) {
+        try {
+            const rawStatus = runCommand('tailscale', ['--socket', socket, 'status', '--json'], {
+                encoding: 'utf8',
+                stdio: ['ignore', 'pipe', 'pipe'],
+                timeout: 1500,
+            });
+            return parseTailscaleStatus(rawStatus);
+        }
+        catch { /* try next */ }
+    }
+    // Fallback to default socket
+    try {
+        const rawStatus = runCommand('tailscale', ['status', '--json'], {
+            encoding: 'utf8',
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout: 1500,
+        });
+        return parseTailscaleStatus(rawStatus);
+    }
+    catch {
+        return { fallbackHosts: [] };
+    }
+}
+export function computeAdvertisedConnectionTarget(options) {
+    const baseCanonicalHost = normalizeHost(options.canonicalHost) || 'localhost';
+    const baseFallbackHosts = normalizeFallbackHosts(options.fallbackHosts, baseCanonicalHost);
+    if (!options.relayUrl) {
+        return {
+            canonicalHost: baseCanonicalHost,
+            fallbackHosts: baseFallbackHosts,
+            port: options.port,
+        };
+    }
+    try {
+        const relay = new URL(options.relayUrl);
+        const relayCanonicalHost = normalizeHost(relay.hostname);
+        if (!relayCanonicalHost) {
+            throw new Error('invalid relay hostname');
+        }
+        const relayPort = relay.port
+            ? Number(relay.port)
+            : (relay.protocol === 'https:' ? 443 : 80);
+        return {
+            canonicalHost: relayCanonicalHost,
+            fallbackHosts: normalizeFallbackHosts([baseCanonicalHost, ...baseFallbackHosts], relayCanonicalHost),
+            port: Number.isFinite(relayPort) && relayPort > 0 ? Math.floor(relayPort) : options.port,
+        };
+    }
+    catch {
+        return {
+            canonicalHost: baseCanonicalHost,
+            fallbackHosts: baseFallbackHosts,
+            port: options.port,
+        };
+    }
+}
+export function computeAdvertisedHosts(options) {
+    const baseCanonicalHost = normalizeHost(options.canonicalHost);
+    const canonicalHost = normalizeHost(options.configuredCanonicalHost)
+        || normalizeHost(options.tailscaleCanonicalHost)
+        || baseCanonicalHost
+        || 'localhost';
+    const fallbackHosts = [
+        ...(baseCanonicalHost && baseCanonicalHost !== canonicalHost
+            ? [baseCanonicalHost]
+            : []),
+        ...(options.configuredFallbackHosts ?? []),
+        ...(options.tailscaleFallbackHosts ?? []),
+        ...collectInterfaceHosts(options.interfaces),
+    ]
+        .map((host) => normalizeHost(host))
+        .filter((host) => Boolean(host))
+        .filter((host) => isUsableHost(host))
+        .filter((host, index, all) => host !== canonicalHost && all.indexOf(host) === index);
+    return {
+        canonicalHost,
+        fallbackHosts,
+    };
+}
+//# sourceMappingURL=advertised-hosts.js.map

package/dist/advertised-hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advertised-hosts.js","sourceRoot":"","sources":["../src/advertised-hosts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAqC7C,SAAS,MAAM,CAAC,OAAe;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,KAAK,KAAK,GAAG,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,GAAG,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,KAAK,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC;AACzC,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,KAAK,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,OAAO,CAAC,OAAO,CAAC;WAClB,CAAC,eAAe,CAAC,OAAO,CAAC;WACzB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,IAAwB;IAC7C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAA2B,EAC3B,aAAqB;IAErB,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;SAClC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SAC/C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;SACpC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,KAAK,aAAa,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,QAA4B;IACtE,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,OAAO,QAAQ;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,qBAAqB,CAAC,UAA+C;IAC5E,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;gBAAE,SAAS;YACxD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC3C,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,cAAc,EAAE,GAAG,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA2B,CAAC;IAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC;SACnD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;SAClC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SAC/C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IACjD,MAAM,aAAa,GAAG;QACpB,GAAG,CAAC,OAAO,IAAI,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,aAAa,CAAC;KACzD,CAAC;IAEF,OAAO;QACL,aAAa;QACb,aAAa;KACd,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,aAAkC,YAAY;IAC/E,MAAM,WAAW,GAAG;QAClB,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC5B,qBAAqB;KACtB,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC;IAE9B,qCAAqC;IACrC,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE;gBAClF,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAC5B,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;YAC9D,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,OAA0C;IAE1C,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC;IAC9E,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,OAAO,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAE3F,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO;YACL,aAAa,EAAE,iBAAiB;YAChC,aAAa,EAAE,iBAAiB;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,kBAAkB,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI;YAC1B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YACpB,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAE7C,OAAO;YACL,aAAa,EAAE,kBAAkB;YACjC,aAAa,EAAE,sBAAsB,CAAC,CAAC,iBAAiB,EAAE,GAAG,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;YACpG,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;SACzF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,aAAa,EAAE,iBAAiB;YAChC,aAAa,EAAE,iBAAiB;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAA+B;IACpE,MAAM,iBAAiB,GAAG,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,aAAa,CAAC,OAAO,CAAC,uBAAuB,CAAC;WAC/D,aAAa,CAAC,OAAO,CAAC,sBAAsB,CAAC;WAC7C,iBAAiB;WACjB,WAAW,CAAC;IACjB,MAAM,aAAa,GAAG;QACpB,GAAG,CAAC,iBAAiB,IAAI,iBAAiB,KAAK,aAAa;YAC1D,CAAC,CAAC,CAAC,iBAAiB,CAAC;YACrB,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,uBAAuB,IAAI,EAAE,CAAC;QAC1C,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE,CAAC;QACzC,GAAG,qBAAqB,CAAC,OAAO,CAAC,UAAU,CAAC;KAC7C;SACE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;SAClC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SAC/C,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;SACpC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,KAAK,aAAa,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;IAEvF,OAAO;QACL,aAAa;QACb,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/advertised-hosts.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=advertised-hosts.test.d.ts.map

package/dist/advertised-hosts.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advertised-hosts.test.d.ts","sourceRoot":"","sources":["../src/advertised-hosts.test.ts"],"names":[],"mappings":""}

package/dist/advertised-hosts.test.js

@@ -0,0 +1,96 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { computeAdvertisedConnectionTarget, computeAdvertisedHosts, parseTailscaleStatus, readConfiguredFallbackHosts, readTailscaleHosts, } from './advertised-hosts.js';
+function ipv4(address) {
+    return {
+        address,
+        netmask: '255.255.255.0',
+        family: 'IPv4',
+        mac: '00:00:00:00:00:00',
+        internal: false,
+        cidr: `${address}/24`,
+    };
+}
+test('computeAdvertisedHosts prefers configured canonical host and prioritizes Tailscale IPs', () => {
+    const advertised = computeAdvertisedHosts({
+        canonicalHost: 'desk-mac.local',
+        configuredCanonicalHost: 'desk.tailnet.ts.net',
+        configuredFallbackHosts: ['100.88.1.9'],
+        tailscaleCanonicalHost: '100.77.2.3',
+        tailscaleFallbackHosts: ['desk.ts.net'],
+        interfaces: {
+            en0: [ipv4('192.168.31.20')],
+            utun8: [ipv4('100.77.2.3')],
+        },
+    });
+    assert.equal(advertised.canonicalHost, 'desk.tailnet.ts.net');
+    assert.deepStrictEqual(advertised.fallbackHosts, ['desk-mac.local', '100.88.1.9', 'desk.ts.net', '100.77.2.3', '192.168.31.20']);
+});
+test('computeAdvertisedHosts removes duplicates and excludes the canonical host', () => {
+    const advertised = computeAdvertisedHosts({
+        canonicalHost: '100.77.2.3',
+        configuredFallbackHosts: ['100.77.2.3', '192.168.31.20', '192.168.31.20'],
+        interfaces: {
+            utun8: [ipv4('100.77.2.3')],
+            en0: [ipv4('192.168.31.20')],
+        },
+    });
+    assert.equal(advertised.canonicalHost, '100.77.2.3');
+    assert.deepStrictEqual(advertised.fallbackHosts, ['192.168.31.20']);
+});
+test('computeAdvertisedHosts filters out link-local and benchmark addresses', () => {
+    const advertised = computeAdvertisedHosts({
+        canonicalHost: 'desk-mac.local',
+        interfaces: {
+            en0: [ipv4('192.168.31.20'), ipv4('169.254.12.2')],
+            utun4: [ipv4('198.19.0.1')],
+        },
+    });
+    assert.equal(advertised.canonicalHost, 'desk-mac.local');
+    assert.deepStrictEqual(advertised.fallbackHosts, ['192.168.31.20']);
+});
+test('parseTailscaleStatus prefers the first Tailscale IP and keeps MagicDNS as fallback', () => {
+    const advertised = parseTailscaleStatus(JSON.stringify({
+        Self: {
+            DNSName: 'desk.tailnet.ts.net.',
+            TailscaleIPs: ['100.88.1.9', '100.99.2.4'],
+        },
+    }));
+    assert.deepStrictEqual(advertised, {
+        canonicalHost: '100.88.1.9',
+        fallbackHosts: ['desk.tailnet.ts.net', '100.99.2.4'],
+    });
+});
+test('readTailscaleHosts returns empty data when tailscale is unavailable', () => {
+    const advertised = readTailscaleHosts(() => {
+        throw new Error('tailscale unavailable');
+    });
+    assert.deepStrictEqual(advertised, { fallbackHosts: [] });
+});
+test('readConfiguredFallbackHosts parses comma separated env values', () => {
+    assert.deepStrictEqual(readConfiguredFallbackHosts(' 100.77.2.3, desk.tailnet.ts.net , 192.168.31.20 '), ['100.77.2.3', 'desk.tailnet.ts.net', '192.168.31.20']);
+});
+test('computeAdvertisedConnectionTarget keeps the base host and port without a relay', () => {
+    assert.deepStrictEqual(computeAdvertisedConnectionTarget({
+        canonicalHost: 'desk-mac.local',
+        fallbackHosts: ['100.88.1.9', '192.168.31.20'],
+        port: 9876,
+    }), {
+        canonicalHost: 'desk-mac.local',
+        fallbackHosts: ['100.88.1.9', '192.168.31.20'],
+        port: 9876,
+    });
+});
+test('computeAdvertisedConnectionTarget prefers the relay host and preserves local fallbacks', () => {
+    assert.deepStrictEqual(computeAdvertisedConnectionTarget({
+        canonicalHost: 'desk-mac.local',
+        fallbackHosts: ['desk-mac.local', '100.88.1.9', '100.88.1.9', '192.168.31.20'],
+        port: 9876,
+        relayUrl: 'https://relay.example.com',
+    }), {
+        canonicalHost: 'relay.example.com',
+        fallbackHosts: ['desk-mac.local', '100.88.1.9', '192.168.31.20'],
+        port: 443,
+    });
+});
+//# sourceMappingURL=advertised-hosts.test.js.map

package/dist/advertised-hosts.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advertised-hosts.test.js","sourceRoot":"","sources":["../src/advertised-hosts.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAExC,OAAO,EACL,iCAAiC,EACjC,sBAAsB,EACtB,oBAAoB,EACpB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAE/B,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO;QACL,OAAO;QACP,OAAO,EAAE,eAAe;QACxB,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,mBAAmB;QACxB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,GAAG,OAAO,KAAK;KACtB,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,wFAAwF,EAAE,GAAG,EAAE;IAClG,MAAM,UAAU,GAAG,sBAAsB,CAAC;QACxC,aAAa,EAAE,gBAAgB;QAC/B,uBAAuB,EAAE,qBAAqB;QAC9C,uBAAuB,EAAE,CAAC,YAAY,CAAC;QACvC,sBAAsB,EAAE,YAAY;QACpC,sBAAsB,EAAE,CAAC,aAAa,CAAC;QACvC,UAAU,EAAE;YACV,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,KAAK,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;SAC5B;KACF,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IAC9D,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC,gBAAgB,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;AACnI,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2EAA2E,EAAE,GAAG,EAAE;IACrF,MAAM,UAAU,GAAG,sBAAsB,CAAC;QACxC,aAAa,EAAE,YAAY;QAC3B,uBAAuB,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,eAAe,CAAC;QACzE,UAAU,EAAE;YACV,KAAK,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;SAC7B;KACF,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACjF,MAAM,UAAU,GAAG,sBAAsB,CAAC;QACxC,aAAa,EAAE,gBAAgB;QAC/B,UAAU,EAAE;YACV,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAClD,KAAK,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;SAC5B;KACF,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IACzD,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oFAAoF,EAAE,GAAG,EAAE;IAC9F,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC;QACrD,IAAI,EAAE;YACJ,OAAO,EAAE,sBAAsB;YAC/B,YAAY,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;SAC3C;KACF,CAAC,CAAC,CAAC;IAEJ,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE;QACjC,aAAa,EAAE,YAAY;QAC3B,aAAa,EAAE,CAAC,qBAAqB,EAAE,YAAY,CAAC;KACrD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE;QACzC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,GAAG,EAAE;IACzE,MAAM,CAAC,eAAe,CACpB,2BAA2B,CAAC,mDAAmD,CAAC,EAChF,CAAC,YAAY,EAAE,qBAAqB,EAAE,eAAe,CAAC,CACvD,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC1F,MAAM,CAAC,eAAe,CACpB,iCAAiC,CAAC;QAChC,aAAa,EAAE,gBAAgB;QAC/B,aAAa,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC;QAC9C,IAAI,EAAE,IAAI;KACX,CAAC,EACF;QACE,aAAa,EAAE,gBAAgB;QAC/B,aAAa,EAAE,CAAC,YAAY,EAAE,eAAe,CAAC;QAC9C,IAAI,EAAE,IAAI;KACX,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wFAAwF,EAAE,GAAG,EAAE;IAClG,MAAM,CAAC,eAAe,CACpB,iCAAiC,CAAC;QAChC,aAAa,EAAE,gBAAgB;QAC/B,aAAa,EAAE,CAAC,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,CAAC;QAC9E,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,2BAA2B;KACtC,CAAC,EACF;QACE,aAAa,EAAE,mBAAmB;QAClC,aAAa,EAAE,CAAC,gBAAgB,EAAE,YAAY,EAAE,eAAe,CAAC;QAChE,IAAI,EAAE,GAAG;KACV,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/audit.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Size-bounded audit log for session lifecycle events.
+ *
+ * Writes JSONL to ~/.vibelet/data/audit.jsonl.
+ * Each line is a self-contained event with timestamp, event type, and context.
+ *
+ * Usage:
+ *   import { audit } from './audit.js';
+ *   audit.emit('session.create', { sessionId, agent, cwd });
+ *   audit.emit('session.done', { sessionId, cost, usage });
+ */
+export type AuditEvent = 'session.create' | 'session.resume' | 'session.reconnect' | 'session.send' | 'session.done' | 'session.interrupted' | 'session.stop' | 'session.delete' | 'session.interrupt' | 'driver.spawn' | 'driver.init' | 'driver.exit' | 'driver.error' | 'driver.idle_timeout' | 'driver.stall_timeout' | 'approval.request' | 'approval.response' | 'ws.connect' | 'ws.disconnect' | 'daemon.start' | 'daemon.shutdown' | 'daemon.error' | 'app.log';
+export type AuditSource = 'daemon' | 'app';
+interface AuditEntry {
+    ts: string;
+    event: AuditEvent | string;
+    source?: AuditSource;
+    [key: string]: unknown;
+}
+export declare function sanitizeAppAuditData(data?: Record<string, unknown>): Record<string, unknown>;
+export declare function buildAppAuditEntry(appEvent: string, level: string, data?: Record<string, unknown>, clientTs?: string): AuditEntry;
+declare class AuditLog {
+    emit(event: AuditEvent, data?: Record<string, unknown>): void;
+    /** Write an app-reported log entry. Preserves client-side timestamp if provided. */
+    emitApp(appEvent: string, level: string, data?: Record<string, unknown>, clientTs?: string): void;
+    private write;
+}
+export declare const audit: AuditLog;
+export {};
+//# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAQH,MAAM,MAAM,UAAU,GAClB,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,GACnB,cAAc,GACd,cAAc,GACd,qBAAqB,GACrB,cAAc,GACd,gBAAgB,GAChB,mBAAmB,GACnB,cAAc,GACd,aAAa,GACb,aAAa,GACb,cAAc,GACd,qBAAqB,GACrB,sBAAsB,GACtB,kBAAkB,GAClB,mBAAmB,GACnB,YAAY,GACZ,eAAe,GACf,cAAc,GACd,iBAAiB,GACjB,cAAc,GACd,SAAS,CAAC;AAEd,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE3C,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,UAAU,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AASD,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOhG;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,QAAQ,CAAC,EAAE,MAAM,GAChB,UAAU,CASZ;AAQD,cAAM,QAAQ;IACZ,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAIjE,oFAAoF;IACpF,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAIrG,OAAO,CAAC,KAAK;CAcd;AAED,eAAO,MAAM,KAAK,UAAiB,CAAC"}

package/dist/audit.js

@@ -0,0 +1,73 @@
+/**
+ * Size-bounded audit log for session lifecycle events.
+ *
+ * Writes JSONL to ~/.vibelet/data/audit.jsonl.
+ * Each line is a self-contained event with timestamp, event type, and context.
+ *
+ * Usage:
+ *   import { audit } from './audit.js';
+ *   audit.emit('session.create', { sessionId, agent, cwd });
+ *   audit.emit('session.done', { sessionId, cost, usage });
+ */
+import { appendFileSync, mkdirSync } from 'fs';
+import { dirname } from 'path';
+import { AUDIT_PATH } from './paths.js';
+import { config } from './config.js';
+import { trimFileTailSync } from './storage-housekeeping.js';
+let initialized = false;
+const APP_AUDIT_RESERVED_FIELDS = new Set(['ts', 'event', 'source', 'appEvent', 'level']);
+function isTestRuntime() {
+    return process.env.VIBE_TEST === '1' || process.argv.includes('--test');
+}
+export function sanitizeAppAuditData(data = {}) {
+    const sanitized = {};
+    for (const [key, value] of Object.entries(data)) {
+        if (APP_AUDIT_RESERVED_FIELDS.has(key))
+            continue;
+        sanitized[key] = value;
+    }
+    return sanitized;
+}
+export function buildAppAuditEntry(appEvent, level, data = {}, clientTs) {
+    return {
+        ts: clientTs ?? new Date().toISOString(),
+        event: 'app.log',
+        source: 'app',
+        appEvent,
+        level,
+        ...sanitizeAppAuditData(data),
+    };
+}
+function ensureDir() {
+    if (initialized)
+        return;
+    mkdirSync(dirname(AUDIT_PATH), { recursive: true });
+    initialized = true;
+}
+class AuditLog {
+    emit(event, data = {}) {
+        this.write({ ts: new Date().toISOString(), event, ...data });
+    }
+    /** Write an app-reported log entry. Preserves client-side timestamp if provided. */
+    emitApp(appEvent, level, data = {}, clientTs) {
+        this.write(buildAppAuditEntry(appEvent, level, data, clientTs));
+    }
+    write(entry) {
+        if (isTestRuntime())
+            return;
+        ensureDir();
+        try {
+            const line = JSON.stringify(entry) + '\n';
+            trimFileTailSync(AUDIT_PATH, {
+                maxBytes: config.auditMaxBytes,
+                incomingBytes: Buffer.byteLength(line),
+            });
+            appendFileSync(AUDIT_PATH, line);
+        }
+        catch {
+            // Audit log is best-effort — never crash the daemon
+        }
+    }
+}
+export const audit = new AuditLog();
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAoC7D,IAAI,WAAW,GAAG,KAAK,CAAC;AACxB,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAE1F,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgC,EAAE;IACrE,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACjD,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,KAAa,EACb,OAAgC,EAAE,EAClC,QAAiB;IAEjB,OAAO;QACL,EAAE,EAAE,QAAQ,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACxC,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,KAAoB;QAC5B,QAAQ;QACR,KAAK;QACL,GAAG,oBAAoB,CAAC,IAAI,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,WAAW;QAAE,OAAO;IACxB,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,WAAW,GAAG,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,QAAQ;IACZ,IAAI,CAAC,KAAiB,EAAE,OAAgC,EAAE;QACxD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,oFAAoF;IACpF,OAAO,CAAC,QAAgB,EAAE,KAAa,EAAE,OAAgC,EAAE,EAAE,QAAiB;QAC5F,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,KAA8B;QAC1C,IAAI,aAAa,EAAE;YAAE,OAAO;QAC5B,SAAS,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;YAC1C,gBAAgB,CAAC,UAAU,EAAE;gBAC3B,QAAQ,EAAE,MAAM,CAAC,aAAa;gBAC9B,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;aACvC,CAAC,CAAC;YACH,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,EAAE,CAAC"}

package/dist/audit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=audit.test.d.ts.map

package/dist/audit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.test.d.ts","sourceRoot":"","sources":["../src/audit.test.ts"],"names":[],"mappings":""}

package/dist/audit.test.js

@@ -0,0 +1,33 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { buildAppAuditEntry, sanitizeAppAuditData } from './audit.js';
+test('sanitizeAppAuditData strips reserved audit fields from client payloads', () => {
+    assert.deepEqual(sanitizeAppAuditData({
+        event: 'override',
+        source: 'app',
+        level: 'debug',
+        appEvent: 'fake',
+        ts: '2026-01-01T00:00:00.000Z',
+        sessionId: 'session-123',
+        agent: 'codex',
+    }), {
+        sessionId: 'session-123',
+        agent: 'codex',
+    });
+});
+test('buildAppAuditEntry preserves the audit envelope while keeping client data', () => {
+    const entry = buildAppAuditEntry('app.session.send', 'info', {
+        sessionId: 'session-123',
+        event: 'override',
+        level: 'debug',
+    }, '2026-03-21T12:00:00.000Z');
+    assert.deepEqual(entry, {
+        ts: '2026-03-21T12:00:00.000Z',
+        event: 'app.log',
+        source: 'app',
+        appEvent: 'app.session.send',
+        level: 'info',
+        sessionId: 'session-123',
+    });
+});
+//# sourceMappingURL=audit.test.js.map

package/dist/audit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.test.js","sourceRoot":"","sources":["../src/audit.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEtE,IAAI,CAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,MAAM,CAAC,SAAS,CACd,oBAAoB,CAAC;QACnB,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,MAAM;QAChB,EAAE,EAAE,0BAA0B;QAC9B,SAAS,EAAE,aAAa;QACxB,KAAK,EAAE,OAAO;KACf,CAAC,EACF;QACE,SAAS,EAAE,aAAa;QACxB,KAAK,EAAE,OAAO;KACf,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2EAA2E,EAAE,GAAG,EAAE;IACrF,MAAM,KAAK,GAAG,kBAAkB,CAAC,kBAAkB,EAAE,MAAM,EAAE;QAC3D,SAAS,EAAE,aAAa;QACxB,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,OAAO;KACf,EAAE,0BAA0B,CAAC,CAAC;IAE/B,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE;QACtB,EAAE,EAAE,0BAA0B;QAC9B,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,kBAAkB;QAC5B,KAAK,EAAE,MAAM;QACb,SAAS,EAAE,aAAa;KACzB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth.d.ts

@@ -0,0 +1,6 @@
+export declare function isLoopbackAddress(address: string | undefined): boolean;
+export declare function readBearerToken(header: string | undefined): string | null;
+export declare function resolveRequestToken(authHeader: string | undefined, queryToken: string | null): string | null;
+export declare function isLegacyToken(token: string | null, legacyToken: string): boolean;
+export declare function isAuthorizedToken(token: string | null, legacyToken: string, validatePairToken: (token: string, touch?: boolean) => unknown, touch?: boolean): boolean;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAKtE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAIzE;AAED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAE5G;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAEhF;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,GAAG,IAAI,EACpB,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,EAC9D,KAAK,UAAO,GACX,OAAO,CAIT"}

package/dist/auth.js

@@ -0,0 +1,27 @@
+export function isLoopbackAddress(address) {
+    if (!address)
+        return false;
+    return address === '127.0.0.1'
+        || address === '::1'
+        || address === '::ffff:127.0.0.1';
+}
+export function readBearerToken(header) {
+    if (!header)
+        return null;
+    const match = header.match(/^Bearer\s+(.+)$/i);
+    return match?.[1]?.trim() || null;
+}
+export function resolveRequestToken(authHeader, queryToken) {
+    return readBearerToken(authHeader) ?? queryToken;
+}
+export function isLegacyToken(token, legacyToken) {
+    return Boolean(token && legacyToken && token === legacyToken);
+}
+export function isAuthorizedToken(token, legacyToken, validatePairToken, touch = true) {
+    if (!token)
+        return false;
+    if (isLegacyToken(token, legacyToken))
+        return true;
+    return Boolean(validatePairToken(token, touch));
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,OAAO,KAAK,WAAW;WACzB,OAAO,KAAK,KAAK;WACjB,OAAO,KAAK,kBAAkB,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAA0B;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC/C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,UAA8B,EAAE,UAAyB;IAC3F,OAAO,eAAe,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAoB,EAAE,WAAmB;IACrE,OAAO,OAAO,CAAC,KAAK,IAAI,WAAW,IAAI,KAAK,KAAK,WAAW,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,KAAoB,EACpB,WAAmB,EACnB,iBAA8D,EAC9D,KAAK,GAAG,IAAI;IAEZ,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/claude-hooks.d.ts

@@ -0,0 +1,58 @@
+export declare const CLAUDE_HOOK_APPROVAL_PREFIX = "claude-hook:";
+export declare const CLAUDE_HOOK_SECRET_HEADER = "x-vibelet-claude-hook-secret";
+export type ClaudeSessionHookData = {
+    session_id?: string;
+    sessionId?: string;
+    transcript_path?: string;
+    transcriptPath?: string;
+    cwd?: string;
+    hook_event_name?: string;
+    hookEventName?: string;
+    source?: string;
+    [key: string]: unknown;
+};
+export type ClaudePermissionHookData = {
+    session_id?: string;
+    sessionId?: string;
+    transcript_path?: string;
+    transcriptPath?: string;
+    cwd?: string;
+    hook_event_name?: string;
+    hookEventName?: string;
+    permission_mode?: string;
+    permissionMode?: string;
+    tool_name?: string;
+    toolName?: string;
+    tool_input?: unknown;
+    toolInput?: unknown;
+    tool_use_id?: string;
+    toolUseId?: string;
+    permission_suggestions?: unknown;
+    permissionSuggestions?: unknown;
+    [key: string]: unknown;
+};
+export type ClaudePermissionHookResponse = {
+    continue: boolean;
+    suppressOutput?: boolean;
+    stopReason?: string;
+    systemMessage?: string;
+    hookSpecificOutput?: {
+        hookEventName?: 'PreToolUse';
+        permissionDecision?: 'allow' | 'deny' | 'ask';
+        permissionDecisionReason?: string;
+        updatedInput?: unknown;
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+};
+export type ClaudeHookFiles = {
+    secret: string;
+    dirPath: string;
+    settingsPath: string;
+    sessionScriptPath: string;
+    permissionScriptPath: string;
+};
+export declare const DEFAULT_CLAUDE_PERMISSION_HOOK_RESPONSE: ClaudePermissionHookResponse;
+export declare function createClaudeHookFiles(port: number, secret: string): ClaudeHookFiles;
+export declare function cleanupClaudeHookFiles(hookFiles: ClaudeHookFiles | null | undefined): void;
+//# sourceMappingURL=claude-hooks.d.ts.map

package/dist/claude-hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-hooks.d.ts","sourceRoot":"","sources":["../src/claude-hooks.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,2BAA2B,iBAAiB,CAAC;AAC1D,eAAO,MAAM,yBAAyB,iCAAiC,CAAC;AAExE,MAAM,MAAM,qBAAqB,GAAG;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE;QACnB,aAAa,CAAC,EAAE,YAAY,CAAC;QAC7B,kBAAkB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;QAC9C,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,eAAO,MAAM,uCAAuC,EAAE,4BAMrD,CAAC;AAmEF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CAgDnF;AAED,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAO1F"}