[Skeyelab]

Problem

The relay's HTTP fallback (used when the WebSocket is down) has never delivered an event:

1. It called /api/nodes/pull with GET, but the route only exports POST.
2. Even with the right method, it expected a bare array. The route returns { ok, nodeId, events }, so Array.isArray(...) was false and it returned silently.

Separately, systemd stops clawproxy-relay.service with SIGTERM, but only SIGINT was handled, so the graceful shutdown path never ran.

Change

• Pull with POST, a JSON body of { maxEvents }, and read events from the response.
• registerShutdown() handles both SIGINT and SIGTERM.
• main() runs only when relay.ts is executed directly, so tests can import it. I checked that yarn tsx relay.ts (the service's ExecStart) and yarn relay both still run main().

Tests (written first)

tests/relay/relay.test.ts:

• pull uses POST, the bearer token, and maxEvents
• events from the { events } response are forwarded to Hermes with the right HMAC signature, then acked
• both SIGTERM and SIGINT are registered

yarn vitest run: all pass. Lint clean, no type errors outside tests.

After merge

On hermes: git pull in ~/projects/clawproxy and systemctl --user restart clawproxy-relay, then confirm Auth ok in the journal.

[strix-security]

Strix Security Review

No security issues found.

_{Updated for ae76a8d.}

---

Reviewed by Strix
_{Re-run review · Configure security review settings}