whale-code 6.5.5 → 6.5.6

package/dist/node/portal/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","names":["createInterface","ROLE_CAPABILITIES","admin","member","viewer","approvalCache","Map","approvalTtlMs","setApprovalTtl","minutes","getCacheKey","requesterNodeId","storeId","cacheApproval","capabilities","set","expiresAt","Date","now","getCachedApproval","key","entry","get","delete","clearApprovalCache","clear","getAllowedCapabilities","role","requested","allowed","filter","c","includes","requiresApproval","promptApproval","request","caps","join","from","requester_hostname","requester_node_id","Promise","resolve","rl","input","process","stdin","output","stderr","write","requester_role","timeout","setTimeout","close","once","line","clearTimeout","answer","trim","toLowerCase","checkPermission","autoAcceptAdmins","accepted","length","reason","cached","allCached","every","isTTY","undefined"],"sources":["../../../src/node/portal/permissions.ts"],"sourcesContent":["/**\n * Portal Permissions — role checks, approval prompts, and approval cache.\n *\n * Permission model:\n *   Admin  → all capabilities, auto-accept\n *   Member → shell + file + clipboard, requires first-connect approval\n *   Viewer → screen (view only) + file pull, always requires approval\n */\n\nimport { createInterface } from \"node:readline\";\nimport type { ChannelType, PortalRequest } from \"./protocol.js\";\n\n// ============================================================================\n// TYPES\n// ============================================================================\n\nexport type Role = \"admin\" | \"member\" | \"viewer\";\n\ninterface ApprovalCacheEntry {\n  requesterNodeId: string;\n  capabilities: ChannelType[];\n  expiresAt: number;\n}\n\n// ============================================================================\n// CAPABILITY MATRIX\n// ============================================================================\n\nconst ROLE_CAPABILITIES: Record<Role, ChannelType[]> = {\n  admin:  [\"shell\", \"file\", \"clipboard\", \"forward\", \"screen\"],\n  member: [\"shell\", \"file\", \"clipboard\"],\n  viewer: [\"screen\", \"file\"], // file = pull only, enforced at channel level\n};\n\n// ============================================================================\n// APPROVAL CACHE\n// ============================================================================\n\nconst approvalCache = new Map<string, ApprovalCacheEntry>();\nlet approvalTtlMs = 60 * 60 * 1000; // default 1 hour\n\nexport function setApprovalTtl(minutes: number): void {\n  approvalTtlMs = minutes * 60 * 1000;\n}\n\nfunction getCacheKey(requesterNodeId: string, storeId: string): string {\n  return `${storeId}:${requesterNodeId}`;\n}\n\nexport function cacheApproval(requesterNodeId: string, storeId: string, capabilities: ChannelType[]): void {\n  approvalCache.set(getCacheKey(requesterNodeId, storeId), {\n    requesterNodeId,\n    capabilities,\n    expiresAt: Date.now() + approvalTtlMs,\n  });\n}\n\nexport function getCachedApproval(requesterNodeId: string, storeId: string): ChannelType[] | null {\n  const key = getCacheKey(requesterNodeId, storeId);\n  const entry = approvalCache.get(key);\n  if (!entry) return null;\n  if (Date.now() > entry.expiresAt) {\n    approvalCache.delete(key);\n    return null;\n  }\n  return entry.capabilities;\n}\n\nexport function clearApprovalCache(): void {\n  approvalCache.clear();\n}\n\n// ============================================================================\n// PERMISSION CHECKS\n// ============================================================================\n\n/**\n * Check if a role can access the requested capabilities.\n * Returns the subset of capabilities that are allowed.\n */\nexport function getAllowedCapabilities(role: Role, requested: ChannelType[]): ChannelType[] {\n  const allowed = ROLE_CAPABILITIES[role];\n  return requested.filter(c => allowed.includes(c));\n}\n\n/**\n * Check if a role requires interactive approval.\n */\nexport function requiresApproval(role: Role): boolean {\n  return role !== \"admin\";\n}\n\n// ============================================================================\n// APPROVAL PROMPT\n// ============================================================================\n\n/**\n * Show an interactive approval prompt on the target node's terminal.\n * Returns true if accepted, false if denied.\n */\nexport async function promptApproval(request: PortalRequest): Promise<boolean> {\n  const caps = request.capabilities.join(\", \");\n  const from = request.requester_hostname || request.requester_node_id;\n\n  return new Promise((resolve) => {\n    const rl = createInterface({\n      input: process.stdin,\n      output: process.stderr, // use stderr so it doesn't interfere with stdout piping\n    });\n\n    process.stderr.write(\n      `\\n[portal] Connection request from \"${from}\" (${request.requester_role})\\n` +\n      `  Capabilities: ${caps}\\n` +\n      `  [A]ccept / [D]eny: `\n    );\n\n    const timeout = setTimeout(() => {\n      process.stderr.write(\"\\n[portal] Approval timed out, denying.\\n\");\n      rl.close();\n      resolve(false);\n    }, 30_000);\n\n    rl.once(\"line\", (line) => {\n      clearTimeout(timeout);\n      rl.close();\n      const answer = line.trim().toLowerCase();\n      resolve(answer === \"a\" || answer === \"accept\" || answer === \"y\" || answer === \"yes\");\n    });\n  });\n}\n\n/**\n * Decide whether to accept a portal request.\n * For admins: auto-accept. For others: check cache, then prompt.\n */\nexport async function checkPermission(\n  request: PortalRequest,\n  storeId: string,\n  autoAcceptAdmins: boolean,\n): Promise<{ accepted: boolean; reason?: string }> {\n  const role = (request.requester_role || \"member\") as Role;\n\n  // Admin auto-accept\n  if (role === \"admin\" && autoAcceptAdmins) {\n    return { accepted: true };\n  }\n\n  // Check capability restrictions\n  const allowed = getAllowedCapabilities(role, request.capabilities);\n  if (allowed.length === 0) {\n    return { accepted: false, reason: `Role \"${role}\" has no access to requested capabilities` };\n  }\n\n  // Check approval cache\n  const cached = getCachedApproval(request.requester_node_id, storeId);\n  if (cached) {\n    const allCached = request.capabilities.every(c => cached.includes(c));\n    if (allCached) {\n      return { accepted: true };\n    }\n  }\n\n  // Interactive prompt (if terminal available)\n  if (process.stdin.isTTY) {\n    const accepted = await promptApproval(request);\n    if (accepted) {\n      cacheApproval(request.requester_node_id, storeId, allowed);\n    }\n    return { accepted, reason: accepted ? undefined : \"Denied by user\" };\n  }\n\n  // Headless mode — deny unless cached\n  return { accepted: false, reason: \"No interactive terminal for approval (headless mode)\" };\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,eAAe,QAAQ,eAAe;;AAG/C;AACA;AACA;;AAUA;AACA;AACA;;AAEA,MAAMC,iBAA8C,GAAG;EACrDC,KAAK,EAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC3DC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC;EACtCC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAE;AAC9B,CAAC;;AAED;AACA;AACA;;AAEA,MAAMC,aAAa,GAAG,IAAIC,GAAG,CAA6B,CAAC;AAC3D,IAAIC,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;;AAEpC,OAAO,SAASC,cAAcA,CAACC,OAAe,EAAQ;EACpDF,aAAa,GAAGE,OAAO,GAAG,EAAE,GAAG,IAAI;AACrC;AAEA,SAASC,WAAWA,CAACC,eAAuB,EAAEC,OAAe,EAAU;EACrE,OAAO,GAAGA,OAAO,IAAID,eAAe,EAAE;AACxC;AAEA,OAAO,SAASE,aAAaA,CAACF,eAAuB,EAAEC,OAAe,EAAEE,YAA2B,EAAQ;EACzGT,aAAa,CAACU,GAAG,CAACL,WAAW,CAACC,eAAe,EAAEC,OAAO,CAAC,EAAE;IACvDD,eAAe;IACfG,YAAY;IACZE,SAAS,EAAEC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGX;EAC1B,CAAC,CAAC;AACJ;AAEA,OAAO,SAASY,iBAAiBA,CAACR,eAAuB,EAAEC,OAAe,EAAwB;EAChG,MAAMQ,GAAG,GAAGV,WAAW,CAACC,eAAe,EAAEC,OAAO,CAAC;EACjD,MAAMS,KAAK,GAAGhB,aAAa,CAACiB,GAAG,CAACF,GAAG,CAAC;EACpC,IAAI,CAACC,KAAK,EAAE,OAAO,IAAI;EACvB,IAAIJ,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGG,KAAK,CAACL,SAAS,EAAE;IAChCX,aAAa,CAACkB,MAAM,CAACH,GAAG,CAAC;IACzB,OAAO,IAAI;EACb;EACA,OAAOC,KAAK,CAACP,YAAY;AAC3B;AAEA,OAAO,SAASU,kBAAkBA,CAAA,EAAS;EACzCnB,aAAa,CAACoB,KAAK,CAAC,CAAC;AACvB;;AAEA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASC,sBAAsBA,CAACC,IAAU,EAAEC,SAAwB,EAAiB;EAC1F,MAAMC,OAAO,GAAG5B,iBAAiB,CAAC0B,IAAI,CAAC;EACvC,OAAOC,SAAS,CAACE,MAAM,CAACC,CAAC,IAAIF,OAAO,CAACG,QAAQ,CAACD,CAAC,CAAC,CAAC;AACnD;;AAEA;AACA;AACA;AACA,OAAO,SAASE,gBAAgBA,CAACN,IAAU,EAAW;EACpD,OAAOA,IAAI,KAAK,OAAO;AACzB;;AAEA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,OAAO,eAAeO,cAAcA,CAACC,OAAsB,EAAoB;EAC7E,MAAMC,IAAI,GAAGD,OAAO,CAACrB,YAAY,CAACuB,IAAI,CAAC,IAAI,CAAC;EAC5C,MAAMC,IAAI,GAAGH,OAAO,CAACI,kBAAkB,IAAIJ,OAAO,CAACK,iBAAiB;EAEpE,OAAO,IAAIC,OAAO,CAAEC,OAAO,IAAK;IAC9B,MAAMC,EAAE,GAAG3C,eAAe,CAAC;MACzB4C,KAAK,EAAEC,OAAO,CAACC,KAAK;MACpBC,MAAM,EAAEF,OAAO,CAACG,MAAM,CAAE;IAC1B,CAAC,CAAC;IAEFH,OAAO,CAACG,MAAM,CAACC,KAAK,CAClB,uCAAuCX,IAAI,MAAMH,OAAO,CAACe,cAAc,KAAK,GAC5E,mBAAmBd,IAAI,IAAI,GAC3B,uBACF,CAAC;IAED,MAAMe,OAAO,GAAGC,UAAU,CAAC,MAAM;MAC/BP,OAAO,CAACG,MAAM,CAACC,KAAK,CAAC,2CAA2C,CAAC;MACjEN,EAAE,CAACU,KAAK,CAAC,CAAC;MACVX,OAAO,CAAC,KAAK,CAAC;IAChB,CAAC,EAAE,MAAM,CAAC;IAEVC,EAAE,CAACW,IAAI,CAAC,MAAM,EAAGC,IAAI,IAAK;MACxBC,YAAY,CAACL,OAAO,CAAC;MACrBR,EAAE,CAACU,KAAK,CAAC,CAAC;MACV,MAAMI,MAAM,GAAGF,IAAI,CAACG,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;MACxCjB,OAAO,CAACe,MAAM,KAAK,GAAG,IAAIA,MAAM,KAAK,QAAQ,IAAIA,MAAM,KAAK,GAAG,IAAIA,MAAM,KAAK,KAAK,CAAC;IACtF,CAAC,CAAC;EACJ,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;AACA;AACA,OAAO,eAAeG,eAAeA,CACnCzB,OAAsB,EACtBvB,OAAe,EACfiD,gBAAyB,EACwB;EACjD,MAAMlC,IAAI,GAAIQ,OAAO,CAACe,cAAc,IAAI,QAAiB;;EAEzD;EACA,IAAIvB,IAAI,KAAK,OAAO,IAAIkC,gBAAgB,EAAE;IACxC,OAAO;MAAEC,QAAQ,EAAE;IAAK,CAAC;EAC3B;;EAEA;EACA,MAAMjC,OAAO,GAAGH,sBAAsB,CAACC,IAAI,EAAEQ,OAAO,CAACrB,YAAY,CAAC;EAClE,IAAIe,OAAO,CAACkC,MAAM,KAAK,CAAC,EAAE;IACxB,OAAO;MAAED,QAAQ,EAAE,KAAK;MAAEE,MAAM,EAAE,SAASrC,IAAI;IAA4C,CAAC;EAC9F;;EAEA;EACA,MAAMsC,MAAM,GAAG9C,iBAAiB,CAACgB,OAAO,CAACK,iBAAiB,EAAE5B,OAAO,CAAC;EACpE,IAAIqD,MAAM,EAAE;IACV,MAAMC,SAAS,GAAG/B,OAAO,CAACrB,YAAY,CAACqD,KAAK,CAACpC,CAAC,IAAIkC,MAAM,CAACjC,QAAQ,CAACD,CAAC,CAAC,CAAC;IACrE,IAAImC,SAAS,EAAE;MACb,OAAO;QAAEJ,QAAQ,EAAE;MAAK,CAAC;IAC3B;EACF;;EAEA;EACA,IAAIjB,OAAO,CAACC,KAAK,CAACsB,KAAK,EAAE;IACvB,MAAMN,QAAQ,GAAG,MAAM5B,cAAc,CAACC,OAAO,CAAC;IAC9C,IAAI2B,QAAQ,EAAE;MACZjD,aAAa,CAACsB,OAAO,CAACK,iBAAiB,EAAE5B,OAAO,EAAEiB,OAAO,CAAC;IAC5D;IACA,OAAO;MAAEiC,QAAQ;MAAEE,MAAM,EAAEF,QAAQ,GAAGO,SAAS,GAAG;IAAiB,CAAC;EACtE;;EAEA;EACA,OAAO;IAAEP,QAAQ,EAAE,KAAK;IAAEE,MAAM,EAAE;EAAuD,CAAC;AAC5F","ignoreList":[]}

package/dist/node/portal/protocol.js

@@ -13,181 +13,218 @@
  *   └──────────┴──────────┴──────────┴──────────┴───────────────┘
  *   Total header: 12 bytes + variable payload (max 1MB per frame)
  */
+
 // ============================================================================
 // CONSTANTS
 // ============================================================================
+
 export const PORTAL_MARKER = 0x01;
 export const PROTOCOL_VERSION = 0x01;
 export const HEADER_SIZE = 12;
 export const MAX_PAYLOAD_SIZE = 1024 * 1024; // 1MB
 export const SESSION_UUID_SIZE = 16;
 export const RELAY_HEADER_SIZE = 1 + SESSION_UUID_SIZE; // marker + uuid
+
 // ============================================================================
 // FRAME TYPES
 // ============================================================================
-export var FrameType;
-(function (FrameType) {
-    FrameType[FrameType["DATA"] = 0] = "DATA";
-    FrameType[FrameType["SYN"] = 1] = "SYN";
-    FrameType[FrameType["ACK"] = 2] = "ACK";
-    FrameType[FrameType["FIN"] = 3] = "FIN";
-    FrameType[FrameType["RST"] = 4] = "RST";
-    FrameType[FrameType["PING"] = 5] = "PING";
-    FrameType[FrameType["PONG"] = 6] = "PONG";
-})(FrameType || (FrameType = {}));
+
+export let FrameType = /*#__PURE__*/function (FrameType) {
+  FrameType[FrameType["DATA"] = 0] = "DATA";
+  FrameType[FrameType["SYN"] = 1] = "SYN";
+  FrameType[FrameType["ACK"] = 2] = "ACK";
+  FrameType[FrameType["FIN"] = 3] = "FIN";
+  FrameType[FrameType["RST"] = 4] = "RST";
+  FrameType[FrameType["PING"] = 5] = "PING";
+  FrameType[FrameType["PONG"] = 6] = "PONG";
+  return FrameType;
+}({});
+
 // ============================================================================
 // FLAGS
 // ============================================================================
-export var FrameFlag;
-(function (FrameFlag) {
-    FrameFlag[FrameFlag["SYN"] = 1] = "SYN";
-    FrameFlag[FrameFlag["ACK"] = 2] = "ACK";
-    FrameFlag[FrameFlag["FIN"] = 4] = "FIN";
-})(FrameFlag || (FrameFlag = {}));
+
+export let FrameFlag = /*#__PURE__*/function (FrameFlag) {
+  FrameFlag[FrameFlag["SYN"] = 1] = "SYN";
+  FrameFlag[FrameFlag["ACK"] = 2] = "ACK";
+  FrameFlag[FrameFlag["FIN"] = 4] = "FIN";
+  return FrameFlag;
+}({});
+
+// ============================================================================
+// CHANNEL TYPES (for SYN payloads)
+// ============================================================================
+
+// ============================================================================
+// FRAME
+// ============================================================================
+
+// ============================================================================
+// CONTROL MESSAGES (sent on stream 0 as JSON)
+// ============================================================================
+
 // ============================================================================
 // ENCODING
 // ============================================================================
+
 export function encodeFrame(frame) {
-    const payloadLen = frame.payload.length;
-    if (payloadLen > MAX_PAYLOAD_SIZE) {
-        throw new Error(`Payload too large: ${payloadLen} > ${MAX_PAYLOAD_SIZE}`);
-    }
-    const buf = Buffer.allocUnsafe(HEADER_SIZE + payloadLen);
-    buf[0] = frame.version;
-    buf[1] = frame.type;
-    buf.writeUInt16BE(frame.flags, 2);
-    buf.writeUInt32BE(frame.streamId, 4);
-    buf.writeUInt32BE(payloadLen, 8);
-    if (payloadLen > 0) {
-        frame.payload.copy(buf, HEADER_SIZE);
-    }
-    return buf;
+  const payloadLen = frame.payload.length;
+  if (payloadLen > MAX_PAYLOAD_SIZE) {
+    throw new Error(`Payload too large: ${payloadLen} > ${MAX_PAYLOAD_SIZE}`);
+  }
+  const buf = Buffer.allocUnsafe(HEADER_SIZE + payloadLen);
+  buf[0] = frame.version;
+  buf[1] = frame.type;
+  buf.writeUInt16BE(frame.flags, 2);
+  buf.writeUInt32BE(frame.streamId, 4);
+  buf.writeUInt32BE(payloadLen, 8);
+  if (payloadLen > 0) {
+    frame.payload.copy(buf, HEADER_SIZE);
+  }
+  return buf;
 }
 export function encodeRelayEnvelope(sessionUuid, innerFrame) {
-    const buf = Buffer.allocUnsafe(RELAY_HEADER_SIZE + innerFrame.length);
-    buf[0] = PORTAL_MARKER;
-    sessionUuid.copy(buf, 1);
-    innerFrame.copy(buf, RELAY_HEADER_SIZE);
-    return buf;
+  const buf = Buffer.allocUnsafe(RELAY_HEADER_SIZE + innerFrame.length);
+  buf[0] = PORTAL_MARKER;
+  sessionUuid.copy(buf, 1);
+  innerFrame.copy(buf, RELAY_HEADER_SIZE);
+  return buf;
 }
+
+// ============================================================================
+// DECODING
+// ============================================================================
+
 /**
  * Try to decode a frame from the buffer. Returns null if not enough data.
  */
 export function decodeFrame(buf, offset = 0) {
-    const remaining = buf.length - offset;
-    if (remaining < HEADER_SIZE)
-        return null;
-    const version = buf[offset];
-    const type = buf[offset + 1];
-    const flags = buf.readUInt16BE(offset + 2);
-    const streamId = buf.readUInt32BE(offset + 4);
-    const payloadLen = buf.readUInt32BE(offset + 8);
-    if (payloadLen > MAX_PAYLOAD_SIZE) {
-        throw new Error(`Invalid payload length: ${payloadLen}`);
-    }
-    const totalLen = HEADER_SIZE + payloadLen;
-    if (remaining < totalLen)
-        return null;
-    const payload = Buffer.allocUnsafe(payloadLen);
-    buf.copy(payload, 0, offset + HEADER_SIZE, offset + totalLen);
-    return {
-        frame: { version, type, flags, streamId, payload },
-        bytesConsumed: totalLen,
-    };
+  const remaining = buf.length - offset;
+  if (remaining < HEADER_SIZE) return null;
+  const version = buf[offset];
+  const type = buf[offset + 1];
+  const flags = buf.readUInt16BE(offset + 2);
+  const streamId = buf.readUInt32BE(offset + 4);
+  const payloadLen = buf.readUInt32BE(offset + 8);
+  if (payloadLen > MAX_PAYLOAD_SIZE) {
+    throw new Error(`Invalid payload length: ${payloadLen}`);
+  }
+  const totalLen = HEADER_SIZE + payloadLen;
+  if (remaining < totalLen) return null;
+  const payload = Buffer.allocUnsafe(payloadLen);
+  buf.copy(payload, 0, offset + HEADER_SIZE, offset + totalLen);
+  return {
+    frame: {
+      version,
+      type,
+      flags,
+      streamId,
+      payload
+    },
+    bytesConsumed: totalLen
+  };
 }
+
 /**
  * Parse a relay envelope. Returns session UUID and inner frame buffer.
  */
 export function decodeRelayEnvelope(buf) {
-    if (buf.length < RELAY_HEADER_SIZE)
-        return null;
-    if (buf[0] !== PORTAL_MARKER)
-        return null;
-    const sessionUuid = Buffer.allocUnsafe(SESSION_UUID_SIZE);
-    buf.copy(sessionUuid, 0, 1, 1 + SESSION_UUID_SIZE);
-    const innerFrame = Buffer.allocUnsafe(buf.length - RELAY_HEADER_SIZE);
-    buf.copy(innerFrame, 0, RELAY_HEADER_SIZE);
-    return { sessionUuid, innerFrame };
+  if (buf.length < RELAY_HEADER_SIZE) return null;
+  if (buf[0] !== PORTAL_MARKER) return null;
+  const sessionUuid = Buffer.allocUnsafe(SESSION_UUID_SIZE);
+  buf.copy(sessionUuid, 0, 1, 1 + SESSION_UUID_SIZE);
+  const innerFrame = Buffer.allocUnsafe(buf.length - RELAY_HEADER_SIZE);
+  buf.copy(innerFrame, 0, RELAY_HEADER_SIZE);
+  return {
+    sessionUuid,
+    innerFrame
+  };
 }
+
 // ============================================================================
 // UUID HELPERS
 // ============================================================================
+
 /**
  * Convert a UUID string (with dashes) to a 16-byte buffer.
  */
 export function uuidToBuffer(uuid) {
-    return Buffer.from(uuid.replace(/-/g, ""), "hex");
+  return Buffer.from(uuid.replace(/-/g, ""), "hex");
 }
+
 /**
  * Convert a 16-byte buffer to a UUID string (with dashes).
  */
 export function bufferToUuid(buf) {
-    const hex = buf.toString("hex");
-    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+  const hex = buf.toString("hex");
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
 }
+
 // ============================================================================
 // HELPERS
 // ============================================================================
+
 export function makeDataFrame(streamId, data) {
-    return encodeFrame({
-        version: PROTOCOL_VERSION,
-        type: FrameType.DATA,
-        flags: 0,
-        streamId,
-        payload: data,
-    });
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.DATA,
+    flags: 0,
+    streamId,
+    payload: data
+  });
 }
 export function makeSynFrame(streamId, payload) {
-    return encodeFrame({
-        version: PROTOCOL_VERSION,
-        type: FrameType.SYN,
-        flags: FrameFlag.SYN,
-        streamId,
-        payload: Buffer.from(JSON.stringify(payload)),
-    });
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.SYN,
+    flags: FrameFlag.SYN,
+    streamId,
+    payload: Buffer.from(JSON.stringify(payload))
+  });
 }
 export function makeAckFrame(streamId) {
-    return encodeFrame({
-        version: PROTOCOL_VERSION,
-        type: FrameType.ACK,
-        flags: FrameFlag.ACK,
-        streamId,
-        payload: Buffer.alloc(0),
-    });
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.ACK,
+    flags: FrameFlag.ACK,
+    streamId,
+    payload: Buffer.alloc(0)
+  });
 }
 export function makeFinFrame(streamId) {
-    return encodeFrame({
-        version: PROTOCOL_VERSION,
-        type: FrameType.FIN,
-        flags: FrameFlag.FIN,
-        streamId,
-        payload: Buffer.alloc(0),
-    });
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.FIN,
+    flags: FrameFlag.FIN,
+    streamId,
+    payload: Buffer.alloc(0)
+  });
 }
 export function makeRstFrame(streamId, reason = "") {
-    return encodeFrame({
-        version: PROTOCOL_VERSION,
-        type: FrameType.RST,
-        flags: 0,
-        streamId,
-        payload: reason ? Buffer.from(reason) : Buffer.alloc(0),
-    });
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.RST,
+    flags: 0,
+    streamId,
+    payload: reason ? Buffer.from(reason) : Buffer.alloc(0)
+  });
 }
 export function makePingFrame() {
-    return encodeFrame({
-        version: PROTOCOL_VERSION,
-        type: FrameType.PING,
-        flags: 0,
-        streamId: 0,
-        payload: Buffer.alloc(0),
-    });
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.PING,
+    flags: 0,
+    streamId: 0,
+    payload: Buffer.alloc(0)
+  });
 }
 export function makePongFrame() {
-    return encodeFrame({
-        version: PROTOCOL_VERSION,
-        type: FrameType.PONG,
-        flags: 0,
-        streamId: 0,
-        payload: Buffer.alloc(0),
-    });
+  return encodeFrame({
+    version: PROTOCOL_VERSION,
+    type: FrameType.PONG,
+    flags: 0,
+    streamId: 0,
+    payload: Buffer.alloc(0)
+  });
 }
+//# sourceMappingURL=protocol.js.map

package/dist/node/portal/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","names":["PORTAL_MARKER","PROTOCOL_VERSION","HEADER_SIZE","MAX_PAYLOAD_SIZE","SESSION_UUID_SIZE","RELAY_HEADER_SIZE","FrameType","FrameFlag","encodeFrame","frame","payloadLen","payload","length","Error","buf","Buffer","allocUnsafe","version","type","writeUInt16BE","flags","writeUInt32BE","streamId","copy","encodeRelayEnvelope","sessionUuid","innerFrame","decodeFrame","offset","remaining","readUInt16BE","readUInt32BE","totalLen","bytesConsumed","decodeRelayEnvelope","uuidToBuffer","uuid","from","replace","bufferToUuid","hex","toString","slice","makeDataFrame","data","DATA","makeSynFrame","SYN","JSON","stringify","makeAckFrame","ACK","alloc","makeFinFrame","FIN","makeRstFrame","reason","RST","makePingFrame","PING","makePongFrame","PONG"],"sources":["../../../src/node/portal/protocol.ts"],"sourcesContent":["/**\n * Portal Wire Protocol — frame encoding/decoding for multiplexed portal connections.\n *\n * Relay Envelope (over WebSocket binary):\n *   Byte 0:      0x01 (portal frame marker)\n *   Bytes 1-16:  Session UUID (16 bytes, binary)\n *   Bytes 17+:   Multiplexed frame (forwarded as-is)\n *\n * Multiplexed Frame (inner protocol, between nodes):\n *   ┌──────────┬──────────┬──────────┬──────────┬───────────────┐\n *   │ Version  │  Type    │  Flags   │ StreamID │  Length        │\n *   │  1 byte  │  1 byte  │  2 bytes │  4 bytes │  4 bytes      │\n *   └──────────┴──────────┴──────────┴──────────┴───────────────┘\n *   Total header: 12 bytes + variable payload (max 1MB per frame)\n */\n\n// ============================================================================\n// CONSTANTS\n// ============================================================================\n\nexport const PORTAL_MARKER = 0x01;\nexport const PROTOCOL_VERSION = 0x01;\nexport const HEADER_SIZE = 12;\nexport const MAX_PAYLOAD_SIZE = 1024 * 1024; // 1MB\nexport const SESSION_UUID_SIZE = 16;\nexport const RELAY_HEADER_SIZE = 1 + SESSION_UUID_SIZE; // marker + uuid\n\n// ============================================================================\n// FRAME TYPES\n// ============================================================================\n\nexport enum FrameType {\n  DATA = 0x00,\n  SYN  = 0x01,\n  ACK  = 0x02,\n  FIN  = 0x03,\n  RST  = 0x04,\n  PING = 0x05,\n  PONG = 0x06,\n}\n\n// ============================================================================\n// FLAGS\n// ============================================================================\n\nexport enum FrameFlag {\n  SYN = 0x01,\n  ACK = 0x02,\n  FIN = 0x04,\n}\n\n// ============================================================================\n// CHANNEL TYPES (for SYN payloads)\n// ============================================================================\n\nexport type ChannelType = \"shell\" | \"file\" | \"forward\" | \"clipboard\" | \"screen\";\n\nexport interface SynShell {\n  channel: \"shell\";\n  term: string;\n  cols: number;\n  rows: number;\n  cwd?: string;\n  command?: string; // single command mode (-c)\n}\n\nexport interface SynFilePush {\n  channel: \"file\";\n  direction: \"push\";\n  name: string;\n  size: number;\n  mode: number;\n  mtime: number;\n  isDirectory?: boolean;\n}\n\nexport interface SynFilePull {\n  channel: \"file\";\n  direction: \"pull\";\n  path: string;\n}\n\nexport interface SynForward {\n  channel: \"forward\";\n  remotePort: number;\n  description?: string;\n}\n\nexport interface SynScreen {\n  channel: \"screen\";\n  control: boolean;\n}\n\nexport interface SynClipboard {\n  channel: \"clipboard\";\n  mode: \"push\" | \"pull\" | \"sync\";\n}\n\nexport type SynPayload = SynShell | SynFilePush | SynFilePull | SynForward | SynScreen | SynClipboard;\n\n// ============================================================================\n// FRAME\n// ============================================================================\n\nexport interface Frame {\n  version: number;\n  type: FrameType;\n  flags: number;\n  streamId: number;\n  payload: Buffer;\n}\n\n// ============================================================================\n// CONTROL MESSAGES (sent on stream 0 as JSON)\n// ============================================================================\n\nexport interface PortalRequest {\n  type: \"portal_request\";\n  session_id: string;\n  target_node_id: string;\n  capabilities: ChannelType[];\n  requester_node_id: string;\n  requester_hostname: string;\n  requester_role: string;\n}\n\nexport interface PortalAccept {\n  type: \"portal_accept\";\n  session_id: string;\n  hostname: string;\n}\n\nexport interface PortalReject {\n  type: \"portal_reject\";\n  session_id: string;\n  reason: string;\n}\n\nexport interface PortalClose {\n  type: \"portal_close\";\n  session_id: string;\n}\n\nexport interface ResizeMessage {\n  type: \"resize\";\n  cols: number;\n  rows: number;\n}\n\nexport type ControlMessage = PortalRequest | PortalAccept | PortalReject | PortalClose | ResizeMessage;\n\n// ============================================================================\n// ENCODING\n// ============================================================================\n\nexport function encodeFrame(frame: Frame): Buffer {\n  const payloadLen = frame.payload.length;\n  if (payloadLen > MAX_PAYLOAD_SIZE) {\n    throw new Error(`Payload too large: ${payloadLen} > ${MAX_PAYLOAD_SIZE}`);\n  }\n\n  const buf = Buffer.allocUnsafe(HEADER_SIZE + payloadLen);\n  buf[0] = frame.version;\n  buf[1] = frame.type;\n  buf.writeUInt16BE(frame.flags, 2);\n  buf.writeUInt32BE(frame.streamId, 4);\n  buf.writeUInt32BE(payloadLen, 8);\n  if (payloadLen > 0) {\n    frame.payload.copy(buf, HEADER_SIZE);\n  }\n  return buf;\n}\n\nexport function encodeRelayEnvelope(sessionUuid: Buffer, innerFrame: Buffer): Buffer {\n  const buf = Buffer.allocUnsafe(RELAY_HEADER_SIZE + innerFrame.length);\n  buf[0] = PORTAL_MARKER;\n  sessionUuid.copy(buf, 1);\n  innerFrame.copy(buf, RELAY_HEADER_SIZE);\n  return buf;\n}\n\n// ============================================================================\n// DECODING\n// ============================================================================\n\nexport interface DecodeResult {\n  frame: Frame;\n  bytesConsumed: number;\n}\n\n/**\n * Try to decode a frame from the buffer. Returns null if not enough data.\n */\nexport function decodeFrame(buf: Buffer, offset = 0): DecodeResult | null {\n  const remaining = buf.length - offset;\n  if (remaining < HEADER_SIZE) return null;\n\n  const version = buf[offset];\n  const type = buf[offset + 1] as FrameType;\n  const flags = buf.readUInt16BE(offset + 2);\n  const streamId = buf.readUInt32BE(offset + 4);\n  const payloadLen = buf.readUInt32BE(offset + 8);\n\n  if (payloadLen > MAX_PAYLOAD_SIZE) {\n    throw new Error(`Invalid payload length: ${payloadLen}`);\n  }\n\n  const totalLen = HEADER_SIZE + payloadLen;\n  if (remaining < totalLen) return null;\n\n  const payload = Buffer.allocUnsafe(payloadLen);\n  buf.copy(payload, 0, offset + HEADER_SIZE, offset + totalLen);\n\n  return {\n    frame: { version, type, flags, streamId, payload },\n    bytesConsumed: totalLen,\n  };\n}\n\n/**\n * Parse a relay envelope. Returns session UUID and inner frame buffer.\n */\nexport function decodeRelayEnvelope(buf: Buffer): { sessionUuid: Buffer; innerFrame: Buffer } | null {\n  if (buf.length < RELAY_HEADER_SIZE) return null;\n  if (buf[0] !== PORTAL_MARKER) return null;\n\n  const sessionUuid = Buffer.allocUnsafe(SESSION_UUID_SIZE);\n  buf.copy(sessionUuid, 0, 1, 1 + SESSION_UUID_SIZE);\n\n  const innerFrame = Buffer.allocUnsafe(buf.length - RELAY_HEADER_SIZE);\n  buf.copy(innerFrame, 0, RELAY_HEADER_SIZE);\n\n  return { sessionUuid, innerFrame };\n}\n\n// ============================================================================\n// UUID HELPERS\n// ============================================================================\n\n/**\n * Convert a UUID string (with dashes) to a 16-byte buffer.\n */\nexport function uuidToBuffer(uuid: string): Buffer {\n  return Buffer.from(uuid.replace(/-/g, \"\"), \"hex\");\n}\n\n/**\n * Convert a 16-byte buffer to a UUID string (with dashes).\n */\nexport function bufferToUuid(buf: Buffer): string {\n  const hex = buf.toString(\"hex\");\n  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;\n}\n\n// ============================================================================\n// HELPERS\n// ============================================================================\n\nexport function makeDataFrame(streamId: number, data: Buffer): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.DATA,\n    flags: 0,\n    streamId,\n    payload: data,\n  });\n}\n\nexport function makeSynFrame(streamId: number, payload: SynPayload): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.SYN,\n    flags: FrameFlag.SYN,\n    streamId,\n    payload: Buffer.from(JSON.stringify(payload)),\n  });\n}\n\nexport function makeAckFrame(streamId: number): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.ACK,\n    flags: FrameFlag.ACK,\n    streamId,\n    payload: Buffer.alloc(0),\n  });\n}\n\nexport function makeFinFrame(streamId: number): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.FIN,\n    flags: FrameFlag.FIN,\n    streamId,\n    payload: Buffer.alloc(0),\n  });\n}\n\nexport function makeRstFrame(streamId: number, reason = \"\"): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.RST,\n    flags: 0,\n    streamId,\n    payload: reason ? Buffer.from(reason) : Buffer.alloc(0),\n  });\n}\n\nexport function makePingFrame(): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.PING,\n    flags: 0,\n    streamId: 0,\n    payload: Buffer.alloc(0),\n  });\n}\n\nexport function makePongFrame(): Buffer {\n  return encodeFrame({\n    version: PROTOCOL_VERSION,\n    type: FrameType.PONG,\n    flags: 0,\n    streamId: 0,\n    payload: Buffer.alloc(0),\n  });\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;AACA;AACA;;AAEA,OAAO,MAAMA,aAAa,GAAG,IAAI;AACjC,OAAO,MAAMC,gBAAgB,GAAG,IAAI;AACpC,OAAO,MAAMC,WAAW,GAAG,EAAE;AAC7B,OAAO,MAAMC,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;AAC7C,OAAO,MAAMC,iBAAiB,GAAG,EAAE;AACnC,OAAO,MAAMC,iBAAiB,GAAG,CAAC,GAAGD,iBAAiB,CAAC,CAAC;;AAExD;AACA;AACA;;AAEA,WAAYE,SAAS,0BAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAAA,OAATA,SAAS;AAAA;;AAUrB;AACA;AACA;;AAEA,WAAYC,SAAS,0BAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAATA,SAAS,CAATA,SAAS;EAAA,OAATA,SAAS;AAAA;;AAMrB;AACA;AACA;;AA+CA;AACA;AACA;;AAUA;AACA;AACA;;AAqCA;AACA;AACA;;AAEA,OAAO,SAASC,WAAWA,CAACC,KAAY,EAAU;EAChD,MAAMC,UAAU,GAAGD,KAAK,CAACE,OAAO,CAACC,MAAM;EACvC,IAAIF,UAAU,GAAGP,gBAAgB,EAAE;IACjC,MAAM,IAAIU,KAAK,CAAC,sBAAsBH,UAAU,MAAMP,gBAAgB,EAAE,CAAC;EAC3E;EAEA,MAAMW,GAAG,GAAGC,MAAM,CAACC,WAAW,CAACd,WAAW,GAAGQ,UAAU,CAAC;EACxDI,GAAG,CAAC,CAAC,CAAC,GAAGL,KAAK,CAACQ,OAAO;EACtBH,GAAG,CAAC,CAAC,CAAC,GAAGL,KAAK,CAACS,IAAI;EACnBJ,GAAG,CAACK,aAAa,CAACV,KAAK,CAACW,KAAK,EAAE,CAAC,CAAC;EACjCN,GAAG,CAACO,aAAa,CAACZ,KAAK,CAACa,QAAQ,EAAE,CAAC,CAAC;EACpCR,GAAG,CAACO,aAAa,CAACX,UAAU,EAAE,CAAC,CAAC;EAChC,IAAIA,UAAU,GAAG,CAAC,EAAE;IAClBD,KAAK,CAACE,OAAO,CAACY,IAAI,CAACT,GAAG,EAAEZ,WAAW,CAAC;EACtC;EACA,OAAOY,GAAG;AACZ;AAEA,OAAO,SAASU,mBAAmBA,CAACC,WAAmB,EAAEC,UAAkB,EAAU;EACnF,MAAMZ,GAAG,GAAGC,MAAM,CAACC,WAAW,CAACX,iBAAiB,GAAGqB,UAAU,CAACd,MAAM,CAAC;EACrEE,GAAG,CAAC,CAAC,CAAC,GAAGd,aAAa;EACtByB,WAAW,CAACF,IAAI,CAACT,GAAG,EAAE,CAAC,CAAC;EACxBY,UAAU,CAACH,IAAI,CAACT,GAAG,EAAET,iBAAiB,CAAC;EACvC,OAAOS,GAAG;AACZ;;AAEA;AACA;AACA;;AAOA;AACA;AACA;AACA,OAAO,SAASa,WAAWA,CAACb,GAAW,EAAEc,MAAM,GAAG,CAAC,EAAuB;EACxE,MAAMC,SAAS,GAAGf,GAAG,CAACF,MAAM,GAAGgB,MAAM;EACrC,IAAIC,SAAS,GAAG3B,WAAW,EAAE,OAAO,IAAI;EAExC,MAAMe,OAAO,GAAGH,GAAG,CAACc,MAAM,CAAC;EAC3B,MAAMV,IAAI,GAAGJ,GAAG,CAACc,MAAM,GAAG,CAAC,CAAc;EACzC,MAAMR,KAAK,GAAGN,GAAG,CAACgB,YAAY,CAACF,MAAM,GAAG,CAAC,CAAC;EAC1C,MAAMN,QAAQ,GAAGR,GAAG,CAACiB,YAAY,CAACH,MAAM,GAAG,CAAC,CAAC;EAC7C,MAAMlB,UAAU,GAAGI,GAAG,CAACiB,YAAY,CAACH,MAAM,GAAG,CAAC,CAAC;EAE/C,IAAIlB,UAAU,GAAGP,gBAAgB,EAAE;IACjC,MAAM,IAAIU,KAAK,CAAC,2BAA2BH,UAAU,EAAE,CAAC;EAC1D;EAEA,MAAMsB,QAAQ,GAAG9B,WAAW,GAAGQ,UAAU;EACzC,IAAImB,SAAS,GAAGG,QAAQ,EAAE,OAAO,IAAI;EAErC,MAAMrB,OAAO,GAAGI,MAAM,CAACC,WAAW,CAACN,UAAU,CAAC;EAC9CI,GAAG,CAACS,IAAI,CAACZ,OAAO,EAAE,CAAC,EAAEiB,MAAM,GAAG1B,WAAW,EAAE0B,MAAM,GAAGI,QAAQ,CAAC;EAE7D,OAAO;IACLvB,KAAK,EAAE;MAAEQ,OAAO;MAAEC,IAAI;MAAEE,KAAK;MAAEE,QAAQ;MAAEX;IAAQ,CAAC;IAClDsB,aAAa,EAAED;EACjB,CAAC;AACH;;AAEA;AACA;AACA;AACA,OAAO,SAASE,mBAAmBA,CAACpB,GAAW,EAAsD;EACnG,IAAIA,GAAG,CAACF,MAAM,GAAGP,iBAAiB,EAAE,OAAO,IAAI;EAC/C,IAAIS,GAAG,CAAC,CAAC,CAAC,KAAKd,aAAa,EAAE,OAAO,IAAI;EAEzC,MAAMyB,WAAW,GAAGV,MAAM,CAACC,WAAW,CAACZ,iBAAiB,CAAC;EACzDU,GAAG,CAACS,IAAI,CAACE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAGrB,iBAAiB,CAAC;EAElD,MAAMsB,UAAU,GAAGX,MAAM,CAACC,WAAW,CAACF,GAAG,CAACF,MAAM,GAAGP,iBAAiB,CAAC;EACrES,GAAG,CAACS,IAAI,CAACG,UAAU,EAAE,CAAC,EAAErB,iBAAiB,CAAC;EAE1C,OAAO;IAAEoB,WAAW;IAAEC;EAAW,CAAC;AACpC;;AAEA;AACA;AACA;;AAEA;AACA;AACA;AACA,OAAO,SAASS,YAAYA,CAACC,IAAY,EAAU;EACjD,OAAOrB,MAAM,CAACsB,IAAI,CAACD,IAAI,CAACE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC;AACnD;;AAEA;AACA;AACA;AACA,OAAO,SAASC,YAAYA,CAACzB,GAAW,EAAU;EAChD,MAAM0B,GAAG,GAAG1B,GAAG,CAAC2B,QAAQ,CAAC,KAAK,CAAC;EAC/B,OAAO,GAAGD,GAAG,CAACE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAIF,GAAG,CAACE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAIF,GAAG,CAACE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAIF,GAAG,CAACE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAIF,GAAG,CAACE,KAAK,CAAC,EAAE,CAAC,EAAE;AAC5G;;AAEA;AACA;AACA;;AAEA,OAAO,SAASC,aAAaA,CAACrB,QAAgB,EAAEsB,IAAY,EAAU;EACpE,OAAOpC,WAAW,CAAC;IACjBS,OAAO,EAAEhB,gBAAgB;IACzBiB,IAAI,EAAEZ,SAAS,CAACuC,IAAI;IACpBzB,KAAK,EAAE,CAAC;IACRE,QAAQ;IACRX,OAAO,EAAEiC;EACX,CAAC,CAAC;AACJ;AAEA,OAAO,SAASE,YAAYA,CAACxB,QAAgB,EAAEX,OAAmB,EAAU;EAC1E,OAAOH,WAAW,CAAC;IACjBS,OAAO,EAAEhB,gBAAgB;IACzBiB,IAAI,EAAEZ,SAAS,CAACyC,GAAG;IACnB3B,KAAK,EAAEb,SAAS,CAACwC,GAAG;IACpBzB,QAAQ;IACRX,OAAO,EAAEI,MAAM,CAACsB,IAAI,CAACW,IAAI,CAACC,SAAS,CAACtC,OAAO,CAAC;EAC9C,CAAC,CAAC;AACJ;AAEA,OAAO,SAASuC,YAAYA,CAAC5B,QAAgB,EAAU;EACrD,OAAOd,WAAW,CAAC;IACjBS,OAAO,EAAEhB,gBAAgB;IACzBiB,IAAI,EAAEZ,SAAS,CAAC6C,GAAG;IACnB/B,KAAK,EAAEb,SAAS,CAAC4C,GAAG;IACpB7B,QAAQ;IACRX,OAAO,EAAEI,MAAM,CAACqC,KAAK,CAAC,CAAC;EACzB,CAAC,CAAC;AACJ;AAEA,OAAO,SAASC,YAAYA,CAAC/B,QAAgB,EAAU;EACrD,OAAOd,WAAW,CAAC;IACjBS,OAAO,EAAEhB,gBAAgB;IACzBiB,IAAI,EAAEZ,SAAS,CAACgD,GAAG;IACnBlC,KAAK,EAAEb,SAAS,CAAC+C,GAAG;IACpBhC,QAAQ;IACRX,OAAO,EAAEI,MAAM,CAACqC,KAAK,CAAC,CAAC;EACzB,CAAC,CAAC;AACJ;AAEA,OAAO,SAASG,YAAYA,CAACjC,QAAgB,EAAEkC,MAAM,GAAG,EAAE,EAAU;EAClE,OAAOhD,WAAW,CAAC;IACjBS,OAAO,EAAEhB,gBAAgB;IACzBiB,IAAI,EAAEZ,SAAS,CAACmD,GAAG;IACnBrC,KAAK,EAAE,CAAC;IACRE,QAAQ;IACRX,OAAO,EAAE6C,MAAM,GAAGzC,MAAM,CAACsB,IAAI,CAACmB,MAAM,CAAC,GAAGzC,MAAM,CAACqC,KAAK,CAAC,CAAC;EACxD,CAAC,CAAC;AACJ;AAEA,OAAO,SAASM,aAAaA,CAAA,EAAW;EACtC,OAAOlD,WAAW,CAAC;IACjBS,OAAO,EAAEhB,gBAAgB;IACzBiB,IAAI,EAAEZ,SAAS,CAACqD,IAAI;IACpBvC,KAAK,EAAE,CAAC;IACRE,QAAQ,EAAE,CAAC;IACXX,OAAO,EAAEI,MAAM,CAACqC,KAAK,CAAC,CAAC;EACzB,CAAC,CAAC;AACJ;AAEA,OAAO,SAASQ,aAAaA,CAAA,EAAW;EACtC,OAAOpD,WAAW,CAAC;IACjBS,OAAO,EAAEhB,gBAAgB;IACzBiB,IAAI,EAAEZ,SAAS,CAACuD,IAAI;IACpBzC,KAAK,EAAE,CAAC;IACRE,QAAQ,EAAE,CAAC;IACXX,OAAO,EAAEI,MAAM,CAACqC,KAAK,CAAC,CAAC;EACzB,CAAC,CAAC;AACJ","ignoreList":[]}

package/dist/node/portal/screen.js

@@ -7,87 +7,98 @@
  *
  * Initiator side: opens a portal stream and pipes it to the UI.
  */
+
 // ============================================================================
 // INITIATOR SIDE — receive screen frames
 // ============================================================================
+
 export async function openScreen(session, control) {
-    const stream = session.openStream({
-        channel: "screen",
-        control,
+  const stream = session.openStream({
+    channel: "screen",
+    control
+  });
+  await new Promise((resolve, reject) => {
+    const timeout = setTimeout(() => reject(new Error("Screen open timed out")), 10_000);
+    session.once("stream:ack", s => {
+      if (s.streamId === stream.streamId) {
+        clearTimeout(timeout);
+        resolve();
+      }
     });
-    await new Promise((resolve, reject) => {
-        const timeout = setTimeout(() => reject(new Error("Screen open timed out")), 10_000);
-        session.once("stream:ack", (s) => {
-            if (s.streamId === stream.streamId) {
-                clearTimeout(timeout);
-                resolve();
-            }
-        });
-    });
-    const cleanup = () => {
-        if (!stream.destroyed)
-            stream.end();
-    };
-    return { stream, cleanup };
+  });
+  const cleanup = () => {
+    if (!stream.destroyed) stream.end();
+  };
+  return {
+    stream,
+    cleanup
+  };
 }
+
 // ============================================================================
 // TARGET SIDE — bridge ScreenCaptureService to portal stream
 // ============================================================================
+
 export function handleScreen(stream, meta, captureService) {
-    if (!captureService) {
-        stream.destroy(new Error("Screen capture not available on this node"));
-        return;
-    }
-    // Send SPS/PPS config immediately so remote decoder can initialize
-    const config = captureService.latestConfig;
-    if (config) {
-        stream.write(config);
+  if (!captureService) {
+    stream.destroy(new Error("Screen capture not available on this node"));
+    return;
+  }
+
+  // Send SPS/PPS config immediately so remote decoder can initialize
+  const config = captureService.latestConfig;
+  if (config) {
+    stream.write(config);
+  }
+
+  // Send latest frame for instant first image
+  const latest = captureService.latestFrame;
+  if (latest) {
+    stream.write(latest);
+  }
+
+  // Forward all subsequent frames
+  const onFrame = data => {
+    if (!stream.destroyed) {
+      stream.write(data);
     }
-    // Send latest frame for instant first image
-    const latest = captureService.latestFrame;
-    if (latest) {
-        stream.write(latest);
+  };
+  const onConfig = data => {
+    if (!stream.destroyed) {
+      stream.write(data);
     }
-    // Forward all subsequent frames
-    const onFrame = (data) => {
-        if (!stream.destroyed) {
-            stream.write(data);
+  };
+  captureService.on("frame", onFrame);
+  captureService.on("config", onConfig);
+
+  // Forward control input from remote viewer → capture service
+  if (meta.control) {
+    stream.on("data", data => {
+      try {
+        const msg = JSON.parse(data.toString());
+        if (!msg.type) return;
+
+        // Input events (mouse, keyboard, scroll)
+        if (msg.type.startsWith("mouse_") || msg.type.startsWith("key_") || msg.type === "scroll") {
+          captureService.injectInput(msg);
         }
-    };
-    const onConfig = (data) => {
-        if (!stream.destroyed) {
-            stream.write(data);
+        // Control messages (keyframe request, quality adjustment)
+        else if (msg.type === "request_keyframe" || msg.type === "quality" || msg.type === "set_fps") {
+          captureService.sendControlMessage(msg);
         }
-    };
-    captureService.on("frame", onFrame);
-    captureService.on("config", onConfig);
-    // Forward control input from remote viewer → capture service
-    if (meta.control) {
-        stream.on("data", (data) => {
-            try {
-                const msg = JSON.parse(data.toString());
-                if (!msg.type)
-                    return;
-                // Input events (mouse, keyboard, scroll)
-                if (msg.type.startsWith("mouse_") || msg.type.startsWith("key_") || msg.type === "scroll") {
-                    captureService.injectInput(msg);
-                }
-                // Control messages (keyframe request, quality adjustment)
-                else if (msg.type === "request_keyframe" || msg.type === "quality" || msg.type === "set_fps") {
-                    captureService.sendControlMessage(msg);
-                }
-            }
-            catch {
-                // Binary frame data flowing the wrong direction, ignore
-            }
-        });
-    }
-    // Cleanup listeners when stream closes
-    const cleanup = () => {
-        captureService.removeListener("frame", onFrame);
-        captureService.removeListener("config", onConfig);
-    };
-    stream.on("end", cleanup);
-    stream.on("error", cleanup);
-    stream.on("close", cleanup);
+      } catch {
+        // Binary frame data flowing the wrong direction, ignore
+      }
+    });
+  }
+
+  // Cleanup listeners when stream closes
+  const cleanup = () => {
+    captureService.removeListener("frame", onFrame);
+    captureService.removeListener("config", onConfig);
+  };
+  stream.on("end", cleanup);
+  stream.on("error", cleanup);
+  stream.on("close", cleanup);
 }
+//# sourceMappingURL=screen.js.map

package/dist/node/portal/screen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"screen.js","names":["openScreen","session","control","stream","openStream","channel","Promise","resolve","reject","timeout","setTimeout","Error","once","s","streamId","clearTimeout","cleanup","destroyed","end","handleScreen","meta","captureService","destroy","config","latestConfig","write","latest","latestFrame","onFrame","data","onConfig","on","msg","JSON","parse","toString","type","startsWith","injectInput","sendControlMessage","removeListener"],"sources":["../../../src/node/portal/screen.ts"],"sourcesContent":["/**\n * ScreenChannel — bridges portal stream to ScreenCaptureService.\n *\n * Target side: subscribes to ScreenCaptureService events, forwards H.264 frames\n * over the portal stream. Sends SPS/PPS config + latest frame immediately so the\n * remote viewer gets an instant first frame.\n *\n * Initiator side: opens a portal stream and pipes it to the UI.\n */\n\nimport type { PortalStream } from \"./stream.js\";\nimport type { SynScreen } from \"./protocol.js\";\nimport type { PortalSession } from \"./session.js\";\nimport type { ScreenCaptureService } from \"../remote-desktop/index.js\";\n\n// ============================================================================\n// INITIATOR SIDE — receive screen frames\n// ============================================================================\n\nexport async function openScreen(\n  session: PortalSession,\n  control: boolean,\n): Promise<{ stream: PortalStream; cleanup: () => void }> {\n  const stream = session.openStream({\n    channel: \"screen\",\n    control,\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    const timeout = setTimeout(() => reject(new Error(\"Screen open timed out\")), 10_000);\n    session.once(\"stream:ack\", (s: PortalStream) => {\n      if (s.streamId === stream.streamId) {\n        clearTimeout(timeout);\n        resolve();\n      }\n    });\n  });\n\n  const cleanup = () => {\n    if (!stream.destroyed) stream.end();\n  };\n\n  return { stream, cleanup };\n}\n\n// ============================================================================\n// TARGET SIDE — bridge ScreenCaptureService to portal stream\n// ============================================================================\n\nexport function handleScreen(\n  stream: PortalStream,\n  meta: SynScreen,\n  captureService: ScreenCaptureService | null,\n): void {\n  if (!captureService) {\n    stream.destroy(new Error(\"Screen capture not available on this node\"));\n    return;\n  }\n\n  // Send SPS/PPS config immediately so remote decoder can initialize\n  const config = captureService.latestConfig;\n  if (config) {\n    stream.write(config);\n  }\n\n  // Send latest frame for instant first image\n  const latest = captureService.latestFrame;\n  if (latest) {\n    stream.write(latest);\n  }\n\n  // Forward all subsequent frames\n  const onFrame = (data: Buffer) => {\n    if (!stream.destroyed) {\n      stream.write(data);\n    }\n  };\n  const onConfig = (data: Buffer) => {\n    if (!stream.destroyed) {\n      stream.write(data);\n    }\n  };\n\n  captureService.on(\"frame\", onFrame);\n  captureService.on(\"config\", onConfig);\n\n  // Forward control input from remote viewer → capture service\n  if (meta.control) {\n    stream.on(\"data\", (data: Buffer) => {\n      try {\n        const msg = JSON.parse(data.toString());\n        if (!msg.type) return;\n\n        // Input events (mouse, keyboard, scroll)\n        if (msg.type.startsWith(\"mouse_\") || msg.type.startsWith(\"key_\") || msg.type === \"scroll\") {\n          captureService.injectInput(msg);\n        }\n        // Control messages (keyframe request, quality adjustment)\n        else if (msg.type === \"request_keyframe\" || msg.type === \"quality\" || msg.type === \"set_fps\") {\n          captureService.sendControlMessage(msg);\n        }\n      } catch {\n        // Binary frame data flowing the wrong direction, ignore\n      }\n    });\n  }\n\n  // Cleanup listeners when stream closes\n  const cleanup = () => {\n    captureService.removeListener(\"frame\", onFrame);\n    captureService.removeListener(\"config\", onConfig);\n  };\n  stream.on(\"end\", cleanup);\n  stream.on(\"error\", cleanup);\n  stream.on(\"close\", cleanup);\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOA;AACA;AACA;;AAEA,OAAO,eAAeA,UAAUA,CAC9BC,OAAsB,EACtBC,OAAgB,EACwC;EACxD,MAAMC,MAAM,GAAGF,OAAO,CAACG,UAAU,CAAC;IAChCC,OAAO,EAAE,QAAQ;IACjBH;EACF,CAAC,CAAC;EAEF,MAAM,IAAII,OAAO,CAAO,CAACC,OAAO,EAAEC,MAAM,KAAK;IAC3C,MAAMC,OAAO,GAAGC,UAAU,CAAC,MAAMF,MAAM,CAAC,IAAIG,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,MAAM,CAAC;IACpFV,OAAO,CAACW,IAAI,CAAC,YAAY,EAAGC,CAAe,IAAK;MAC9C,IAAIA,CAAC,CAACC,QAAQ,KAAKX,MAAM,CAACW,QAAQ,EAAE;QAClCC,YAAY,CAACN,OAAO,CAAC;QACrBF,OAAO,CAAC,CAAC;MACX;IACF,CAAC,CAAC;EACJ,CAAC,CAAC;EAEF,MAAMS,OAAO,GAAGA,CAAA,KAAM;IACpB,IAAI,CAACb,MAAM,CAACc,SAAS,EAAEd,MAAM,CAACe,GAAG,CAAC,CAAC;EACrC,CAAC;EAED,OAAO;IAAEf,MAAM;IAAEa;EAAQ,CAAC;AAC5B;;AAEA;AACA;AACA;;AAEA,OAAO,SAASG,YAAYA,CAC1BhB,MAAoB,EACpBiB,IAAe,EACfC,cAA2C,EACrC;EACN,IAAI,CAACA,cAAc,EAAE;IACnBlB,MAAM,CAACmB,OAAO,CAAC,IAAIX,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACtE;EACF;;EAEA;EACA,MAAMY,MAAM,GAAGF,cAAc,CAACG,YAAY;EAC1C,IAAID,MAAM,EAAE;IACVpB,MAAM,CAACsB,KAAK,CAACF,MAAM,CAAC;EACtB;;EAEA;EACA,MAAMG,MAAM,GAAGL,cAAc,CAACM,WAAW;EACzC,IAAID,MAAM,EAAE;IACVvB,MAAM,CAACsB,KAAK,CAACC,MAAM,CAAC;EACtB;;EAEA;EACA,MAAME,OAAO,GAAIC,IAAY,IAAK;IAChC,IAAI,CAAC1B,MAAM,CAACc,SAAS,EAAE;MACrBd,MAAM,CAACsB,KAAK,CAACI,IAAI,CAAC;IACpB;EACF,CAAC;EACD,MAAMC,QAAQ,GAAID,IAAY,IAAK;IACjC,IAAI,CAAC1B,MAAM,CAACc,SAAS,EAAE;MACrBd,MAAM,CAACsB,KAAK,CAACI,IAAI,CAAC;IACpB;EACF,CAAC;EAEDR,cAAc,CAACU,EAAE,CAAC,OAAO,EAAEH,OAAO,CAAC;EACnCP,cAAc,CAACU,EAAE,CAAC,QAAQ,EAAED,QAAQ,CAAC;;EAErC;EACA,IAAIV,IAAI,CAAClB,OAAO,EAAE;IAChBC,MAAM,CAAC4B,EAAE,CAAC,MAAM,EAAGF,IAAY,IAAK;MAClC,IAAI;QACF,MAAMG,GAAG,GAAGC,IAAI,CAACC,KAAK,CAACL,IAAI,CAACM,QAAQ,CAAC,CAAC,CAAC;QACvC,IAAI,CAACH,GAAG,CAACI,IAAI,EAAE;;QAEf;QACA,IAAIJ,GAAG,CAACI,IAAI,CAACC,UAAU,CAAC,QAAQ,CAAC,IAAIL,GAAG,CAACI,IAAI,CAACC,UAAU,CAAC,MAAM,CAAC,IAAIL,GAAG,CAACI,IAAI,KAAK,QAAQ,EAAE;UACzFf,cAAc,CAACiB,WAAW,CAACN,GAAG,CAAC;QACjC;QACA;QAAA,KACK,IAAIA,GAAG,CAACI,IAAI,KAAK,kBAAkB,IAAIJ,GAAG,CAACI,IAAI,KAAK,SAAS,IAAIJ,GAAG,CAACI,IAAI,KAAK,SAAS,EAAE;UAC5Ff,cAAc,CAACkB,kBAAkB,CAACP,GAAG,CAAC;QACxC;MACF,CAAC,CAAC,MAAM;QACN;MAAA;IAEJ,CAAC,CAAC;EACJ;;EAEA;EACA,MAAMhB,OAAO,GAAGA,CAAA,KAAM;IACpBK,cAAc,CAACmB,cAAc,CAAC,OAAO,EAAEZ,OAAO,CAAC;IAC/CP,cAAc,CAACmB,cAAc,CAAC,QAAQ,EAAEV,QAAQ,CAAC;EACnD,CAAC;EACD3B,MAAM,CAAC4B,EAAE,CAAC,KAAK,EAAEf,OAAO,CAAC;EACzBb,MAAM,CAAC4B,EAAE,CAAC,OAAO,EAAEf,OAAO,CAAC;EAC3Bb,MAAM,CAAC4B,EAAE,CAAC,OAAO,EAAEf,OAAO,CAAC;AAC7B","ignoreList":[]}