whale-code 6.5.5 → 6.5.6

package/dist/node/portal/multiplexer.js

@@ -4,204 +4,214 @@
  * Sits between the WebSocket transport and individual PortalStreams.
  * Handles frame routing, stream lifecycle (SYN/ACK/FIN/RST), and keepalive.
  */
+
 import { EventEmitter } from "node:events";
-import { FrameType, decodeFrame, makeDataFrame, makeSynFrame, makeAckFrame, makeFinFrame, makeRstFrame, makePingFrame, makePongFrame, } from "./protocol.js";
+import { FrameType, decodeFrame, makeDataFrame, makeSynFrame, makeAckFrame, makeFinFrame, makeRstFrame, makePingFrame, makePongFrame } from "./protocol.js";
 import { PortalStream } from "./stream.js";
 const CHUNK_SIZE = 64 * 1024; // 64KB max per DATA frame
 const KEEPALIVE_INTERVAL = 15_000;
 const KEEPALIVE_TIMEOUT = 30_000;
 export class Multiplexer extends EventEmitter {
-    streams = new Map();
-    nextStreamId;
-    sendRaw;
-    recvBuffer = Buffer.alloc(0);
-    keepaliveTimer = null;
-    lastRecv = Date.now();
-    closed = false;
-    constructor(opts) {
-        super();
-        this.sendRaw = opts.sendRaw;
-        // Initiator uses odd IDs (1, 3, 5...), responder uses even (2, 4, 6...)
-        this.nextStreamId = opts.isInitiator ? 1 : 2;
-        this.keepaliveTimer = setInterval(() => {
-            if (this.closed)
-                return;
-            const now = Date.now();
-            if (now - this.lastRecv > KEEPALIVE_TIMEOUT) {
-                this.emit("timeout");
-                this.close();
-                return;
-            }
-            this.sendRaw(makePingFrame());
-        }, KEEPALIVE_INTERVAL);
-        this.keepaliveTimer.unref();
+  streams = new Map();
+  recvBuffer = Buffer.alloc(0);
+  keepaliveTimer = null;
+  lastRecv = Date.now();
+  closed = false;
+  constructor(opts) {
+    super();
+    this.sendRaw = opts.sendRaw;
+    // Initiator uses odd IDs (1, 3, 5...), responder uses even (2, 4, 6...)
+    this.nextStreamId = opts.isInitiator ? 1 : 2;
+    this.keepaliveTimer = setInterval(() => {
+      if (this.closed) return;
+      const now = Date.now();
+      if (now - this.lastRecv > KEEPALIVE_TIMEOUT) {
+        this.emit("timeout");
+        this.close();
+        return;
+      }
+      this.sendRaw(makePingFrame());
+    }, KEEPALIVE_INTERVAL);
+    this.keepaliveTimer.unref();
+  }
+
+  /**
+   * Open a new stream with the given channel metadata.
+   * Returns a Duplex stream that can be piped to/from.
+   */
+  openStream(meta) {
+    if (this.closed) throw new Error("Multiplexer is closed");
+    const streamId = this.nextStreamId;
+    this.nextStreamId += 2;
+    const stream = this.createStream(streamId, meta);
+    this.streams.set(streamId, stream);
+
+    // Send SYN
+    this.sendRaw(makeSynFrame(streamId, meta));
+    return stream;
+  }
+
+  /**
+   * Feed raw bytes from the transport into the multiplexer.
+   * Call this whenever data arrives on the WebSocket.
+   */
+  receive(data) {
+    if (this.closed) return;
+    this.lastRecv = Date.now();
+
+    // Append to buffer
+    if (this.recvBuffer.length === 0) {
+      this.recvBuffer = data;
+    } else {
+      const combined = Buffer.concat([this.recvBuffer, data]);
+      this.recvBuffer = combined;
+    }
+
+    // Decode frames
+    let offset = 0;
+    while (true) {
+      let result;
+      try {
+        result = decodeFrame(this.recvBuffer, offset);
+      } catch (err) {
+        this.emit("error", err);
+        // Skip corrupted data
+        this.recvBuffer = Buffer.alloc(0);
+        return;
+      }
+      if (!result) break;
+      offset += result.bytesConsumed;
+      this.handleFrame(result.frame);
+    }
+
+    // Compact buffer
+    if (offset > 0) {
+      this.recvBuffer = this.recvBuffer.subarray(offset);
     }
-    /**
-     * Open a new stream with the given channel metadata.
-     * Returns a Duplex stream that can be piped to/from.
-     */
-    openStream(meta) {
-        if (this.closed)
-            throw new Error("Multiplexer is closed");
-        const streamId = this.nextStreamId;
-        this.nextStreamId += 2;
-        const stream = this.createStream(streamId, meta);
-        this.streams.set(streamId, stream);
-        // Send SYN
-        this.sendRaw(makeSynFrame(streamId, meta));
-        return stream;
+  }
+
+  /**
+   * Get a stream by ID.
+   */
+  getStream(streamId) {
+    return this.streams.get(streamId);
+  }
+
+  /**
+   * Close all streams and stop keepalive.
+   */
+  close() {
+    if (this.closed) return;
+    this.closed = true;
+    if (this.keepaliveTimer) {
+      clearInterval(this.keepaliveTimer);
+      this.keepaliveTimer = null;
     }
-    /**
-     * Feed raw bytes from the transport into the multiplexer.
-     * Call this whenever data arrives on the WebSocket.
-     */
-    receive(data) {
-        if (this.closed)
+    for (const [id, stream] of this.streams) {
+      stream.pushRst("Multiplexer closed");
+      this.streams.delete(id);
+    }
+    this.emit("close");
+  }
+  get activeStreams() {
+    return this.streams.size;
+  }
+  get isClosed() {
+    return this.closed;
+  }
+
+  // ============================================================================
+  // INTERNAL
+  // ============================================================================
+
+  handleFrame(frame) {
+    switch (frame.type) {
+      case FrameType.DATA:
+        {
+          const stream = this.streams.get(frame.streamId);
+          if (stream) {
+            stream.pushData(frame.payload);
+          }
+          break;
+        }
+      case FrameType.SYN:
+        {
+          // Remote wants to open a new stream
+          let meta;
+          try {
+            meta = JSON.parse(frame.payload.toString());
+          } catch {
+            this.sendRaw(makeRstFrame(frame.streamId, "Invalid SYN payload"));
             return;
-        this.lastRecv = Date.now();
-        // Append to buffer
-        if (this.recvBuffer.length === 0) {
-            this.recvBuffer = data;
+          }
+          const stream = this.createStream(frame.streamId, meta);
+          this.streams.set(frame.streamId, stream);
+
+          // Send ACK
+          this.sendRaw(makeAckFrame(frame.streamId));
+          this.emit("stream", stream, meta);
+          break;
         }
-        else {
-            const combined = Buffer.concat([this.recvBuffer, data]);
-            this.recvBuffer = combined;
+      case FrameType.ACK:
+        {
+          const stream = this.streams.get(frame.streamId);
+          if (stream) {
+            this.emit("stream:ack", stream);
+          }
+          break;
         }
-        // Decode frames
-        let offset = 0;
-        while (true) {
-            let result;
-            try {
-                result = decodeFrame(this.recvBuffer, offset);
-            }
-            catch (err) {
-                this.emit("error", err);
-                // Skip corrupted data
-                this.recvBuffer = Buffer.alloc(0);
-                return;
+      case FrameType.FIN:
+        {
+          const stream = this.streams.get(frame.streamId);
+          if (stream) {
+            stream.pushFin();
+            if (stream.isFullyClosed) {
+              this.streams.delete(frame.streamId);
             }
-            if (!result)
-                break;
-            offset += result.bytesConsumed;
-            this.handleFrame(result.frame);
+          }
+          break;
         }
-        // Compact buffer
-        if (offset > 0) {
-            this.recvBuffer = this.recvBuffer.subarray(offset);
+      case FrameType.RST:
+        {
+          const stream = this.streams.get(frame.streamId);
+          if (stream) {
+            stream.pushRst(frame.payload.length > 0 ? frame.payload.toString() : undefined);
+            this.streams.delete(frame.streamId);
+          }
+          break;
         }
-    }
-    /**
-     * Get a stream by ID.
-     */
-    getStream(streamId) {
-        return this.streams.get(streamId);
-    }
-    /**
-     * Close all streams and stop keepalive.
-     */
-    close() {
-        if (this.closed)
-            return;
-        this.closed = true;
-        if (this.keepaliveTimer) {
-            clearInterval(this.keepaliveTimer);
-            this.keepaliveTimer = null;
+      case FrameType.PING:
+        {
+          this.sendRaw(makePongFrame());
+          break;
         }
-        for (const [id, stream] of this.streams) {
-            stream.pushRst("Multiplexer closed");
-            this.streams.delete(id);
+      case FrameType.PONG:
+        {
+          // Just updates lastRecv (already done at top of receive())
+          break;
         }
-        this.emit("close");
     }
-    get activeStreams() {
-        return this.streams.size;
-    }
-    get isClosed() {
-        return this.closed;
-    }
-    // ============================================================================
-    // INTERNAL
-    // ============================================================================
-    handleFrame(frame) {
-        switch (frame.type) {
-            case FrameType.DATA: {
-                const stream = this.streams.get(frame.streamId);
-                if (stream) {
-                    stream.pushData(frame.payload);
-                }
-                break;
-            }
-            case FrameType.SYN: {
-                // Remote wants to open a new stream
-                let meta;
-                try {
-                    meta = JSON.parse(frame.payload.toString());
-                }
-                catch {
-                    this.sendRaw(makeRstFrame(frame.streamId, "Invalid SYN payload"));
-                    return;
-                }
-                const stream = this.createStream(frame.streamId, meta);
-                this.streams.set(frame.streamId, stream);
-                // Send ACK
-                this.sendRaw(makeAckFrame(frame.streamId));
-                this.emit("stream", stream, meta);
-                break;
-            }
-            case FrameType.ACK: {
-                const stream = this.streams.get(frame.streamId);
-                if (stream) {
-                    this.emit("stream:ack", stream);
-                }
-                break;
-            }
-            case FrameType.FIN: {
-                const stream = this.streams.get(frame.streamId);
-                if (stream) {
-                    stream.pushFin();
-                    if (stream.isFullyClosed) {
-                        this.streams.delete(frame.streamId);
-                    }
-                }
-                break;
-            }
-            case FrameType.RST: {
-                const stream = this.streams.get(frame.streamId);
-                if (stream) {
-                    stream.pushRst(frame.payload.length > 0 ? frame.payload.toString() : undefined);
-                    this.streams.delete(frame.streamId);
-                }
-                break;
-            }
-            case FrameType.PING: {
-                this.sendRaw(makePongFrame());
-                break;
-            }
-            case FrameType.PONG: {
-                // Just updates lastRecv (already done at top of receive())
-                break;
-            }
-        }
-    }
-    createStream(streamId, meta) {
-        return new PortalStream({
-            streamId,
-            channelMeta: meta,
-            sendFrame: (id, data) => this.sendStreamData(id, data),
-            sendFin: (id) => this.sendRaw(makeFinFrame(id)),
-            sendRst: (id, reason) => this.sendRaw(makeRstFrame(id, reason)),
-        });
-    }
-    sendStreamData(streamId, data) {
-        if (this.closed)
-            return;
-        // Chunk large writes
-        let offset = 0;
-        while (offset < data.length) {
-            const end = Math.min(offset + CHUNK_SIZE, data.length);
-            const chunk = data.subarray(offset, end);
-            this.sendRaw(makeDataFrame(streamId, chunk));
-            offset = end;
-        }
+  }
+  createStream(streamId, meta) {
+    return new PortalStream({
+      streamId,
+      channelMeta: meta,
+      sendFrame: (id, data) => this.sendStreamData(id, data),
+      sendFin: id => this.sendRaw(makeFinFrame(id)),
+      sendRst: (id, reason) => this.sendRaw(makeRstFrame(id, reason))
+    });
+  }
+  sendStreamData(streamId, data) {
+    if (this.closed) return;
+
+    // Chunk large writes
+    let offset = 0;
+    while (offset < data.length) {
+      const end = Math.min(offset + CHUNK_SIZE, data.length);
+      const chunk = data.subarray(offset, end);
+      this.sendRaw(makeDataFrame(streamId, chunk));
+      offset = end;
     }
+  }
 }
+//# sourceMappingURL=multiplexer.js.map

package/dist/node/portal/multiplexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multiplexer.js","names":["EventEmitter","FrameType","decodeFrame","makeDataFrame","makeSynFrame","makeAckFrame","makeFinFrame","makeRstFrame","makePingFrame","makePongFrame","PortalStream","CHUNK_SIZE","KEEPALIVE_INTERVAL","KEEPALIVE_TIMEOUT","Multiplexer","streams","Map","recvBuffer","Buffer","alloc","keepaliveTimer","lastRecv","Date","now","closed","constructor","opts","sendRaw","nextStreamId","isInitiator","setInterval","emit","close","unref","openStream","meta","Error","streamId","stream","createStream","set","receive","data","length","combined","concat","offset","result","err","bytesConsumed","handleFrame","frame","subarray","getStream","get","clearInterval","id","pushRst","delete","activeStreams","size","isClosed","type","DATA","pushData","payload","SYN","JSON","parse","toString","ACK","FIN","pushFin","isFullyClosed","RST","undefined","PING","PONG","channelMeta","sendFrame","sendStreamData","sendFin","sendRst","reason","end","Math","min","chunk"],"sources":["../../../src/node/portal/multiplexer.ts"],"sourcesContent":["/**\n * Multiplexer — manages multiple streams over a single binary channel.\n *\n * Sits between the WebSocket transport and individual PortalStreams.\n * Handles frame routing, stream lifecycle (SYN/ACK/FIN/RST), and keepalive.\n */\n\nimport { EventEmitter } from \"node:events\";\nimport {\n  type Frame, type SynPayload, type DecodeResult,\n  FrameType,\n  decodeFrame,\n  makeDataFrame, makeSynFrame, makeAckFrame, makeFinFrame, makeRstFrame,\n  makePingFrame, makePongFrame,\n} from \"./protocol.js\";\nimport { PortalStream } from \"./stream.js\";\n\nconst CHUNK_SIZE = 64 * 1024; // 64KB max per DATA frame\nconst KEEPALIVE_INTERVAL = 15_000;\nconst KEEPALIVE_TIMEOUT = 30_000;\n\nexport interface MultiplexerOptions {\n  /** Callback to send raw bytes to the transport (WebSocket) */\n  sendRaw: (data: Buffer) => void;\n  /** Whether this side is the initiator (odd stream IDs) or responder (even stream IDs) */\n  isInitiator: boolean;\n}\n\nexport class Multiplexer extends EventEmitter {\n  private streams = new Map<number, PortalStream>();\n  private nextStreamId: number;\n  private sendRaw: (data: Buffer) => void;\n  private recvBuffer: Buffer = Buffer.alloc(0);\n  private keepaliveTimer: ReturnType<typeof setInterval> | null = null;\n  private lastRecv = Date.now();\n  private closed = false;\n\n  constructor(opts: MultiplexerOptions) {\n    super();\n    this.sendRaw = opts.sendRaw;\n    // Initiator uses odd IDs (1, 3, 5...), responder uses even (2, 4, 6...)\n    this.nextStreamId = opts.isInitiator ? 1 : 2;\n\n    this.keepaliveTimer = setInterval(() => {\n      if (this.closed) return;\n      const now = Date.now();\n      if (now - this.lastRecv > KEEPALIVE_TIMEOUT) {\n        this.emit(\"timeout\");\n        this.close();\n        return;\n      }\n      this.sendRaw(makePingFrame());\n    }, KEEPALIVE_INTERVAL);\n    this.keepaliveTimer.unref();\n  }\n\n  /**\n   * Open a new stream with the given channel metadata.\n   * Returns a Duplex stream that can be piped to/from.\n   */\n  openStream(meta: SynPayload): PortalStream {\n    if (this.closed) throw new Error(\"Multiplexer is closed\");\n\n    const streamId = this.nextStreamId;\n    this.nextStreamId += 2;\n\n    const stream = this.createStream(streamId, meta);\n    this.streams.set(streamId, stream);\n\n    // Send SYN\n    this.sendRaw(makeSynFrame(streamId, meta));\n\n    return stream;\n  }\n\n  /**\n   * Feed raw bytes from the transport into the multiplexer.\n   * Call this whenever data arrives on the WebSocket.\n   */\n  receive(data: Buffer): void {\n    if (this.closed) return;\n    this.lastRecv = Date.now();\n\n    // Append to buffer\n    if (this.recvBuffer.length === 0) {\n      this.recvBuffer = data;\n    } else {\n      const combined = Buffer.concat([this.recvBuffer, data]);\n      this.recvBuffer = combined;\n    }\n\n    // Decode frames\n    let offset = 0;\n    while (true) {\n      let result: DecodeResult | null;\n      try {\n        result = decodeFrame(this.recvBuffer, offset);\n      } catch (err) {\n        this.emit(\"error\", err);\n        // Skip corrupted data\n        this.recvBuffer = Buffer.alloc(0);\n        return;\n      }\n\n      if (!result) break;\n      offset += result.bytesConsumed;\n      this.handleFrame(result.frame);\n    }\n\n    // Compact buffer\n    if (offset > 0) {\n      this.recvBuffer = this.recvBuffer.subarray(offset);\n    }\n  }\n\n  /**\n   * Get a stream by ID.\n   */\n  getStream(streamId: number): PortalStream | undefined {\n    return this.streams.get(streamId);\n  }\n\n  /**\n   * Close all streams and stop keepalive.\n   */\n  close(): void {\n    if (this.closed) return;\n    this.closed = true;\n\n    if (this.keepaliveTimer) {\n      clearInterval(this.keepaliveTimer);\n      this.keepaliveTimer = null;\n    }\n\n    for (const [id, stream] of this.streams) {\n      stream.pushRst(\"Multiplexer closed\");\n      this.streams.delete(id);\n    }\n\n    this.emit(\"close\");\n  }\n\n  get activeStreams(): number {\n    return this.streams.size;\n  }\n\n  get isClosed(): boolean {\n    return this.closed;\n  }\n\n  // ============================================================================\n  // INTERNAL\n  // ============================================================================\n\n  private handleFrame(frame: Frame): void {\n    switch (frame.type) {\n      case FrameType.DATA: {\n        const stream = this.streams.get(frame.streamId);\n        if (stream) {\n          stream.pushData(frame.payload);\n        }\n        break;\n      }\n\n      case FrameType.SYN: {\n        // Remote wants to open a new stream\n        let meta: SynPayload;\n        try {\n          meta = JSON.parse(frame.payload.toString());\n        } catch {\n          this.sendRaw(makeRstFrame(frame.streamId, \"Invalid SYN payload\"));\n          return;\n        }\n\n        const stream = this.createStream(frame.streamId, meta);\n        this.streams.set(frame.streamId, stream);\n\n        // Send ACK\n        this.sendRaw(makeAckFrame(frame.streamId));\n\n        this.emit(\"stream\", stream, meta);\n        break;\n      }\n\n      case FrameType.ACK: {\n        const stream = this.streams.get(frame.streamId);\n        if (stream) {\n          this.emit(\"stream:ack\", stream);\n        }\n        break;\n      }\n\n      case FrameType.FIN: {\n        const stream = this.streams.get(frame.streamId);\n        if (stream) {\n          stream.pushFin();\n          if (stream.isFullyClosed) {\n            this.streams.delete(frame.streamId);\n          }\n        }\n        break;\n      }\n\n      case FrameType.RST: {\n        const stream = this.streams.get(frame.streamId);\n        if (stream) {\n          stream.pushRst(frame.payload.length > 0 ? frame.payload.toString() : undefined);\n          this.streams.delete(frame.streamId);\n        }\n        break;\n      }\n\n      case FrameType.PING: {\n        this.sendRaw(makePongFrame());\n        break;\n      }\n\n      case FrameType.PONG: {\n        // Just updates lastRecv (already done at top of receive())\n        break;\n      }\n    }\n  }\n\n  private createStream(streamId: number, meta?: SynPayload): PortalStream {\n    return new PortalStream({\n      streamId,\n      channelMeta: meta,\n      sendFrame: (id, data) => this.sendStreamData(id, data),\n      sendFin: (id) => this.sendRaw(makeFinFrame(id)),\n      sendRst: (id, reason) => this.sendRaw(makeRstFrame(id, reason)),\n    });\n  }\n\n  private sendStreamData(streamId: number, data: Buffer): void {\n    if (this.closed) return;\n\n    // Chunk large writes\n    let offset = 0;\n    while (offset < data.length) {\n      const end = Math.min(offset + CHUNK_SIZE, data.length);\n      const chunk = data.subarray(offset, end);\n      this.sendRaw(makeDataFrame(streamId, chunk));\n      offset = end;\n    }\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,YAAY,QAAQ,aAAa;AAC1C,SAEEC,SAAS,EACTC,WAAW,EACXC,aAAa,EAAEC,YAAY,EAAEC,YAAY,EAAEC,YAAY,EAAEC,YAAY,EACrEC,aAAa,EAAEC,aAAa,QACvB,eAAe;AACtB,SAASC,YAAY,QAAQ,aAAa;AAE1C,MAAMC,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAC9B,MAAMC,kBAAkB,GAAG,MAAM;AACjC,MAAMC,iBAAiB,GAAG,MAAM;AAShC,OAAO,MAAMC,WAAW,SAASd,YAAY,CAAC;EACpCe,OAAO,GAAG,IAAIC,GAAG,CAAuB,CAAC;EAGzCC,UAAU,GAAWC,MAAM,CAACC,KAAK,CAAC,CAAC,CAAC;EACpCC,cAAc,GAA0C,IAAI;EAC5DC,QAAQ,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC;EACrBC,MAAM,GAAG,KAAK;EAEtBC,WAAWA,CAACC,IAAwB,EAAE;IACpC,KAAK,CAAC,CAAC;IACP,IAAI,CAACC,OAAO,GAAGD,IAAI,CAACC,OAAO;IAC3B;IACA,IAAI,CAACC,YAAY,GAAGF,IAAI,CAACG,WAAW,GAAG,CAAC,GAAG,CAAC;IAE5C,IAAI,CAACT,cAAc,GAAGU,WAAW,CAAC,MAAM;MACtC,IAAI,IAAI,CAACN,MAAM,EAAE;MACjB,MAAMD,GAAG,GAAGD,IAAI,CAACC,GAAG,CAAC,CAAC;MACtB,IAAIA,GAAG,GAAG,IAAI,CAACF,QAAQ,GAAGR,iBAAiB,EAAE;QAC3C,IAAI,CAACkB,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,CAACC,KAAK,CAAC,CAAC;QACZ;MACF;MACA,IAAI,CAACL,OAAO,CAACnB,aAAa,CAAC,CAAC,CAAC;IAC/B,CAAC,EAAEI,kBAAkB,CAAC;IACtB,IAAI,CAACQ,cAAc,CAACa,KAAK,CAAC,CAAC;EAC7B;;EAEA;AACF;AACA;AACA;EACEC,UAAUA,CAACC,IAAgB,EAAgB;IACzC,IAAI,IAAI,CAACX,MAAM,EAAE,MAAM,IAAIY,KAAK,CAAC,uBAAuB,CAAC;IAEzD,MAAMC,QAAQ,GAAG,IAAI,CAACT,YAAY;IAClC,IAAI,CAACA,YAAY,IAAI,CAAC;IAEtB,MAAMU,MAAM,GAAG,IAAI,CAACC,YAAY,CAACF,QAAQ,EAAEF,IAAI,CAAC;IAChD,IAAI,CAACpB,OAAO,CAACyB,GAAG,CAACH,QAAQ,EAAEC,MAAM,CAAC;;IAElC;IACA,IAAI,CAACX,OAAO,CAACvB,YAAY,CAACiC,QAAQ,EAAEF,IAAI,CAAC,CAAC;IAE1C,OAAOG,MAAM;EACf;;EAEA;AACF;AACA;AACA;EACEG,OAAOA,CAACC,IAAY,EAAQ;IAC1B,IAAI,IAAI,CAAClB,MAAM,EAAE;IACjB,IAAI,CAACH,QAAQ,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC;;IAE1B;IACA,IAAI,IAAI,CAACN,UAAU,CAAC0B,MAAM,KAAK,CAAC,EAAE;MAChC,IAAI,CAAC1B,UAAU,GAAGyB,IAAI;IACxB,CAAC,MAAM;MACL,MAAME,QAAQ,GAAG1B,MAAM,CAAC2B,MAAM,CAAC,CAAC,IAAI,CAAC5B,UAAU,EAAEyB,IAAI,CAAC,CAAC;MACvD,IAAI,CAACzB,UAAU,GAAG2B,QAAQ;IAC5B;;IAEA;IACA,IAAIE,MAAM,GAAG,CAAC;IACd,OAAO,IAAI,EAAE;MACX,IAAIC,MAA2B;MAC/B,IAAI;QACFA,MAAM,GAAG7C,WAAW,CAAC,IAAI,CAACe,UAAU,EAAE6B,MAAM,CAAC;MAC/C,CAAC,CAAC,OAAOE,GAAG,EAAE;QACZ,IAAI,CAACjB,IAAI,CAAC,OAAO,EAAEiB,GAAG,CAAC;QACvB;QACA,IAAI,CAAC/B,UAAU,GAAGC,MAAM,CAACC,KAAK,CAAC,CAAC,CAAC;QACjC;MACF;MAEA,IAAI,CAAC4B,MAAM,EAAE;MACbD,MAAM,IAAIC,MAAM,CAACE,aAAa;MAC9B,IAAI,CAACC,WAAW,CAACH,MAAM,CAACI,KAAK,CAAC;IAChC;;IAEA;IACA,IAAIL,MAAM,GAAG,CAAC,EAAE;MACd,IAAI,CAAC7B,UAAU,GAAG,IAAI,CAACA,UAAU,CAACmC,QAAQ,CAACN,MAAM,CAAC;IACpD;EACF;;EAEA;AACF;AACA;EACEO,SAASA,CAAChB,QAAgB,EAA4B;IACpD,OAAO,IAAI,CAACtB,OAAO,CAACuC,GAAG,CAACjB,QAAQ,CAAC;EACnC;;EAEA;AACF;AACA;EACEL,KAAKA,CAAA,EAAS;IACZ,IAAI,IAAI,CAACR,MAAM,EAAE;IACjB,IAAI,CAACA,MAAM,GAAG,IAAI;IAElB,IAAI,IAAI,CAACJ,cAAc,EAAE;MACvBmC,aAAa,CAAC,IAAI,CAACnC,cAAc,CAAC;MAClC,IAAI,CAACA,cAAc,GAAG,IAAI;IAC5B;IAEA,KAAK,MAAM,CAACoC,EAAE,EAAElB,MAAM,CAAC,IAAI,IAAI,CAACvB,OAAO,EAAE;MACvCuB,MAAM,CAACmB,OAAO,CAAC,oBAAoB,CAAC;MACpC,IAAI,CAAC1C,OAAO,CAAC2C,MAAM,CAACF,EAAE,CAAC;IACzB;IAEA,IAAI,CAACzB,IAAI,CAAC,OAAO,CAAC;EACpB;EAEA,IAAI4B,aAAaA,CAAA,EAAW;IAC1B,OAAO,IAAI,CAAC5C,OAAO,CAAC6C,IAAI;EAC1B;EAEA,IAAIC,QAAQA,CAAA,EAAY;IACtB,OAAO,IAAI,CAACrC,MAAM;EACpB;;EAEA;EACA;EACA;;EAEQ0B,WAAWA,CAACC,KAAY,EAAQ;IACtC,QAAQA,KAAK,CAACW,IAAI;MAChB,KAAK7D,SAAS,CAAC8D,IAAI;QAAE;UACnB,MAAMzB,MAAM,GAAG,IAAI,CAACvB,OAAO,CAACuC,GAAG,CAACH,KAAK,CAACd,QAAQ,CAAC;UAC/C,IAAIC,MAAM,EAAE;YACVA,MAAM,CAAC0B,QAAQ,CAACb,KAAK,CAACc,OAAO,CAAC;UAChC;UACA;QACF;MAEA,KAAKhE,SAAS,CAACiE,GAAG;QAAE;UAClB;UACA,IAAI/B,IAAgB;UACpB,IAAI;YACFA,IAAI,GAAGgC,IAAI,CAACC,KAAK,CAACjB,KAAK,CAACc,OAAO,CAACI,QAAQ,CAAC,CAAC,CAAC;UAC7C,CAAC,CAAC,MAAM;YACN,IAAI,CAAC1C,OAAO,CAACpB,YAAY,CAAC4C,KAAK,CAACd,QAAQ,EAAE,qBAAqB,CAAC,CAAC;YACjE;UACF;UAEA,MAAMC,MAAM,GAAG,IAAI,CAACC,YAAY,CAACY,KAAK,CAACd,QAAQ,EAAEF,IAAI,CAAC;UACtD,IAAI,CAACpB,OAAO,CAACyB,GAAG,CAACW,KAAK,CAACd,QAAQ,EAAEC,MAAM,CAAC;;UAExC;UACA,IAAI,CAACX,OAAO,CAACtB,YAAY,CAAC8C,KAAK,CAACd,QAAQ,CAAC,CAAC;UAE1C,IAAI,CAACN,IAAI,CAAC,QAAQ,EAAEO,MAAM,EAAEH,IAAI,CAAC;UACjC;QACF;MAEA,KAAKlC,SAAS,CAACqE,GAAG;QAAE;UAClB,MAAMhC,MAAM,GAAG,IAAI,CAACvB,OAAO,CAACuC,GAAG,CAACH,KAAK,CAACd,QAAQ,CAAC;UAC/C,IAAIC,MAAM,EAAE;YACV,IAAI,CAACP,IAAI,CAAC,YAAY,EAAEO,MAAM,CAAC;UACjC;UACA;QACF;MAEA,KAAKrC,SAAS,CAACsE,GAAG;QAAE;UAClB,MAAMjC,MAAM,GAAG,IAAI,CAACvB,OAAO,CAACuC,GAAG,CAACH,KAAK,CAACd,QAAQ,CAAC;UAC/C,IAAIC,MAAM,EAAE;YACVA,MAAM,CAACkC,OAAO,CAAC,CAAC;YAChB,IAAIlC,MAAM,CAACmC,aAAa,EAAE;cACxB,IAAI,CAAC1D,OAAO,CAAC2C,MAAM,CAACP,KAAK,CAACd,QAAQ,CAAC;YACrC;UACF;UACA;QACF;MAEA,KAAKpC,SAAS,CAACyE,GAAG;QAAE;UAClB,MAAMpC,MAAM,GAAG,IAAI,CAACvB,OAAO,CAACuC,GAAG,CAACH,KAAK,CAACd,QAAQ,CAAC;UAC/C,IAAIC,MAAM,EAAE;YACVA,MAAM,CAACmB,OAAO,CAACN,KAAK,CAACc,OAAO,CAACtB,MAAM,GAAG,CAAC,GAAGQ,KAAK,CAACc,OAAO,CAACI,QAAQ,CAAC,CAAC,GAAGM,SAAS,CAAC;YAC/E,IAAI,CAAC5D,OAAO,CAAC2C,MAAM,CAACP,KAAK,CAACd,QAAQ,CAAC;UACrC;UACA;QACF;MAEA,KAAKpC,SAAS,CAAC2E,IAAI;QAAE;UACnB,IAAI,CAACjD,OAAO,CAAClB,aAAa,CAAC,CAAC,CAAC;UAC7B;QACF;MAEA,KAAKR,SAAS,CAAC4E,IAAI;QAAE;UACnB;UACA;QACF;IACF;EACF;EAEQtC,YAAYA,CAACF,QAAgB,EAAEF,IAAiB,EAAgB;IACtE,OAAO,IAAIzB,YAAY,CAAC;MACtB2B,QAAQ;MACRyC,WAAW,EAAE3C,IAAI;MACjB4C,SAAS,EAAEA,CAACvB,EAAE,EAAEd,IAAI,KAAK,IAAI,CAACsC,cAAc,CAACxB,EAAE,EAAEd,IAAI,CAAC;MACtDuC,OAAO,EAAGzB,EAAE,IAAK,IAAI,CAAC7B,OAAO,CAACrB,YAAY,CAACkD,EAAE,CAAC,CAAC;MAC/C0B,OAAO,EAAEA,CAAC1B,EAAE,EAAE2B,MAAM,KAAK,IAAI,CAACxD,OAAO,CAACpB,YAAY,CAACiD,EAAE,EAAE2B,MAAM,CAAC;IAChE,CAAC,CAAC;EACJ;EAEQH,cAAcA,CAAC3C,QAAgB,EAAEK,IAAY,EAAQ;IAC3D,IAAI,IAAI,CAAClB,MAAM,EAAE;;IAEjB;IACA,IAAIsB,MAAM,GAAG,CAAC;IACd,OAAOA,MAAM,GAAGJ,IAAI,CAACC,MAAM,EAAE;MAC3B,MAAMyC,GAAG,GAAGC,IAAI,CAACC,GAAG,CAACxC,MAAM,GAAGnC,UAAU,EAAE+B,IAAI,CAACC,MAAM,CAAC;MACtD,MAAM4C,KAAK,GAAG7C,IAAI,CAACU,QAAQ,CAACN,MAAM,EAAEsC,GAAG,CAAC;MACxC,IAAI,CAACzD,OAAO,CAACxB,aAAa,CAACkC,QAAQ,EAAEkD,KAAK,CAAC,CAAC;MAC5CzC,MAAM,GAAGsC,GAAG;IACd;EACF;AACF","ignoreList":[]}

package/dist/node/portal/permissions.js

@@ -6,126 +6,158 @@
  *   Member → shell + file + clipboard, requires first-connect approval
  *   Viewer → screen (view only) + file pull, always requires approval
  */
+
 import { createInterface } from "node:readline";
+
+// ============================================================================
+// TYPES
+// ============================================================================
+
 // ============================================================================
 // CAPABILITY MATRIX
 // ============================================================================
+
 const ROLE_CAPABILITIES = {
-    admin: ["shell", "file", "clipboard", "forward", "screen"],
-    member: ["shell", "file", "clipboard"],
-    viewer: ["screen", "file"], // file = pull only, enforced at channel level
+  admin: ["shell", "file", "clipboard", "forward", "screen"],
+  member: ["shell", "file", "clipboard"],
+  viewer: ["screen", "file"] // file = pull only, enforced at channel level
 };
+
 // ============================================================================
 // APPROVAL CACHE
 // ============================================================================
+
 const approvalCache = new Map();
 let approvalTtlMs = 60 * 60 * 1000; // default 1 hour
+
 export function setApprovalTtl(minutes) {
-    approvalTtlMs = minutes * 60 * 1000;
+  approvalTtlMs = minutes * 60 * 1000;
 }
 function getCacheKey(requesterNodeId, storeId) {
-    return `${storeId}:${requesterNodeId}`;
+  return `${storeId}:${requesterNodeId}`;
 }
 export function cacheApproval(requesterNodeId, storeId, capabilities) {
-    approvalCache.set(getCacheKey(requesterNodeId, storeId), {
-        requesterNodeId,
-        capabilities,
-        expiresAt: Date.now() + approvalTtlMs,
-    });
+  approvalCache.set(getCacheKey(requesterNodeId, storeId), {
+    requesterNodeId,
+    capabilities,
+    expiresAt: Date.now() + approvalTtlMs
+  });
 }
 export function getCachedApproval(requesterNodeId, storeId) {
-    const key = getCacheKey(requesterNodeId, storeId);
-    const entry = approvalCache.get(key);
-    if (!entry)
-        return null;
-    if (Date.now() > entry.expiresAt) {
-        approvalCache.delete(key);
-        return null;
-    }
-    return entry.capabilities;
+  const key = getCacheKey(requesterNodeId, storeId);
+  const entry = approvalCache.get(key);
+  if (!entry) return null;
+  if (Date.now() > entry.expiresAt) {
+    approvalCache.delete(key);
+    return null;
+  }
+  return entry.capabilities;
 }
 export function clearApprovalCache() {
-    approvalCache.clear();
+  approvalCache.clear();
 }
+
 // ============================================================================
 // PERMISSION CHECKS
 // ============================================================================
+
 /**
  * Check if a role can access the requested capabilities.
  * Returns the subset of capabilities that are allowed.
  */
 export function getAllowedCapabilities(role, requested) {
-    const allowed = ROLE_CAPABILITIES[role];
-    return requested.filter(c => allowed.includes(c));
+  const allowed = ROLE_CAPABILITIES[role];
+  return requested.filter(c => allowed.includes(c));
 }
+
 /**
  * Check if a role requires interactive approval.
  */
 export function requiresApproval(role) {
-    return role !== "admin";
+  return role !== "admin";
 }
+
 // ============================================================================
 // APPROVAL PROMPT
 // ============================================================================
+
 /**
  * Show an interactive approval prompt on the target node's terminal.
  * Returns true if accepted, false if denied.
  */
 export async function promptApproval(request) {
-    const caps = request.capabilities.join(", ");
-    const from = request.requester_hostname || request.requester_node_id;
-    return new Promise((resolve) => {
-        const rl = createInterface({
-            input: process.stdin,
-            output: process.stderr, // use stderr so it doesn't interfere with stdout piping
-        });
-        process.stderr.write(`\n[portal] Connection request from "${from}" (${request.requester_role})\n` +
-            `  Capabilities: ${caps}\n` +
-            `  [A]ccept / [D]eny: `);
-        const timeout = setTimeout(() => {
-            process.stderr.write("\n[portal] Approval timed out, denying.\n");
-            rl.close();
-            resolve(false);
-        }, 30_000);
-        rl.once("line", (line) => {
-            clearTimeout(timeout);
-            rl.close();
-            const answer = line.trim().toLowerCase();
-            resolve(answer === "a" || answer === "accept" || answer === "y" || answer === "yes");
-        });
+  const caps = request.capabilities.join(", ");
+  const from = request.requester_hostname || request.requester_node_id;
+  return new Promise(resolve => {
+    const rl = createInterface({
+      input: process.stdin,
+      output: process.stderr // use stderr so it doesn't interfere with stdout piping
     });
+    process.stderr.write(`\n[portal] Connection request from "${from}" (${request.requester_role})\n` + `  Capabilities: ${caps}\n` + `  [A]ccept / [D]eny: `);
+    const timeout = setTimeout(() => {
+      process.stderr.write("\n[portal] Approval timed out, denying.\n");
+      rl.close();
+      resolve(false);
+    }, 30_000);
+    rl.once("line", line => {
+      clearTimeout(timeout);
+      rl.close();
+      const answer = line.trim().toLowerCase();
+      resolve(answer === "a" || answer === "accept" || answer === "y" || answer === "yes");
+    });
+  });
 }
+
 /**
  * Decide whether to accept a portal request.
  * For admins: auto-accept. For others: check cache, then prompt.
  */
 export async function checkPermission(request, storeId, autoAcceptAdmins) {
-    const role = (request.requester_role || "member");
-    // Admin auto-accept
-    if (role === "admin" && autoAcceptAdmins) {
-        return { accepted: true };
-    }
-    // Check capability restrictions
-    const allowed = getAllowedCapabilities(role, request.capabilities);
-    if (allowed.length === 0) {
-        return { accepted: false, reason: `Role "${role}" has no access to requested capabilities` };
-    }
-    // Check approval cache
-    const cached = getCachedApproval(request.requester_node_id, storeId);
-    if (cached) {
-        const allCached = request.capabilities.every(c => cached.includes(c));
-        if (allCached) {
-            return { accepted: true };
-        }
+  const role = request.requester_role || "member";
+
+  // Admin auto-accept
+  if (role === "admin" && autoAcceptAdmins) {
+    return {
+      accepted: true
+    };
+  }
+
+  // Check capability restrictions
+  const allowed = getAllowedCapabilities(role, request.capabilities);
+  if (allowed.length === 0) {
+    return {
+      accepted: false,
+      reason: `Role "${role}" has no access to requested capabilities`
+    };
+  }
+
+  // Check approval cache
+  const cached = getCachedApproval(request.requester_node_id, storeId);
+  if (cached) {
+    const allCached = request.capabilities.every(c => cached.includes(c));
+    if (allCached) {
+      return {
+        accepted: true
+      };
     }
-    // Interactive prompt (if terminal available)
-    if (process.stdin.isTTY) {
-        const accepted = await promptApproval(request);
-        if (accepted) {
-            cacheApproval(request.requester_node_id, storeId, allowed);
-        }
-        return { accepted, reason: accepted ? undefined : "Denied by user" };
+  }
+
+  // Interactive prompt (if terminal available)
+  if (process.stdin.isTTY) {
+    const accepted = await promptApproval(request);
+    if (accepted) {
+      cacheApproval(request.requester_node_id, storeId, allowed);
     }
-    // Headless mode — deny unless cached
-    return { accepted: false, reason: "No interactive terminal for approval (headless mode)" };
+    return {
+      accepted,
+      reason: accepted ? undefined : "Denied by user"
+    };
+  }
+
+  // Headless mode — deny unless cached
+  return {
+    accepted: false,
+    reason: "No interactive terminal for approval (headless mode)"
+  };
 }
+//# sourceMappingURL=permissions.js.map