@addai/node 0.10.0 → 0.11.0

package/dist/cli.js

@@ -4,6 +4,7 @@
 //
 //   ainode                run this node: daemon + live dashboard
 //   ainode entities       the same, pairing into +Ai Entities rather than Vault
+//   ainode entities CODE  pair straight away with a code the page minted
 //   ainode harnesses      interactive harness manager (install / login)
 //   ainode startup …      start this node when the machine starts
 //   ainode unpair --yes   disconnect from +Ai, cancel in-flight work
@@ -194,6 +195,7 @@ async function main() {
 usage:
   ainode                    run this +Ai Node — daemon + live dashboard
   ainode entities           the same, but pair into +Ai Entities
+  ainode entities <CODE>    pair with a code from the page — no browser
   ainode harnesses          install / log in agent harnesses (interactive)
   ainode startup enable     start this node whenever you log in
   ainode startup disable    stop starting at login

package/dist/pair-destination.d.ts

@@ -18,3 +18,13 @@ export interface BrowserEnv {
 }
 /** Would opening a browser here actually show the user anything? */
 export declare function canOpenBrowser({ isTTY, platform, env }: BrowserEnv): boolean;
+/**
+ * The pairing code someone pasted into the command, if there is one.
+ *
+ * `npx -y @addai/node@latest entities WXYZ4` is the flow where the page mints
+ * the code and the browser never opens. Everything else here — no argument, a
+ * flag, something that is not code-shaped — falls through to the normal flow.
+ * Refusing to guess matters: a mistyped code that we accepted anyway would
+ * sit in the finalize loop for fifteen minutes before admitting it.
+ */
+export declare function pairCodeFromArgv(argv: string[]): string | null;

package/dist/pair-destination.js

@@ -15,6 +15,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.pairDestination = pairDestination;
 exports.canOpenBrowser = canOpenBrowser;
+exports.pairCodeFromArgv = pairCodeFromArgv;
 const config_1 = require("./config");
 const destination = (product, url) => ({
     product,
@@ -57,3 +58,30 @@ function canOpenBrowser({ isTTY, platform, env }) {
         return false;
     return true;
 }
+/** Pairing codes are five characters of A–Z and 0–9. */
+const CODE_SHAPE = /^[A-Z0-9]{5}$/;
+/**
+ * The pairing code someone pasted into the command, if there is one.
+ *
+ * `npx -y @addai/node@latest entities WXYZ4` is the flow where the page mints
+ * the code and the browser never opens. Everything else here — no argument, a
+ * flag, something that is not code-shaped — falls through to the normal flow.
+ * Refusing to guess matters: a mistyped code that we accepted anyway would
+ * sit in the finalize loop for fifteen minutes before admitting it.
+ */
+function pairCodeFromArgv(argv) {
+    for (const raw of argv) {
+        if (raw.startsWith('-'))
+            continue;
+        // Skip the subcommand itself.
+        if (['entities', 'run', 'start'].includes(raw))
+            continue;
+        const cleaned = raw.replace(/[^a-zA-Z0-9]/g, '').toUpperCase();
+        if (CODE_SHAPE.test(cleaned))
+            return cleaned;
+        // A non-flag argument that is not a code is a mistake, not a code we
+        // should keep hunting for behind it.
+        return null;
+    }
+    return null;
+}

package/dist/pairing.js

@@ -82,7 +82,11 @@ async function awaitPairing(code) {
     const deadline = Date.now() + config_1.PAIR_TIMEOUT_MS;
     while (Date.now() < deadline) {
         try {
-            const rows = await (0, supabase_client_1.rpc)('runtime_pair_finalize', { p_code: code });
+            const rows = await (0, supabase_client_1.rpc)('runtime_pair_finalize', 
+            // The machine is the authority on what it is called. A code minted by
+            // the browser carries no hostname, so without this every node paired
+            // from the page arrives called "Untitled runtime".
+            { p_code: code, p_hostname: os.hostname(), p_platform: platform() });
             // PostgREST returns a `setof record` as an array of objects.
             const row = Array.isArray(rows) ? rows[0] : rows;
             if (row?.daemon_token) {
@@ -131,6 +135,16 @@ async function awaitPairing(code) {
 async function runPairing(argv) {
     const dest = (0, pair_destination_1.pairDestination)(argv);
     const hostname = os.hostname();
+    // A code handed to us on the command line was minted by a page the user was
+    // already looking at, and claimed by them as it was made. There is nothing
+    // to ask and nobody to send anywhere: finalize it and get on with running.
+    const given = (0, pair_destination_1.pairCodeFromArgv)(argv);
+    if (given) {
+        process.stdout.write(`\n  Connecting ${hostname} to ${dest.product}…\n`);
+        const result = await awaitPairing(given);
+        process.stdout.write(`  ✓ Connected as ${hostname}\n\n`);
+        return result;
+    }
     const interactive = (0, pair_destination_1.canOpenBrowser)({
         isTTY: Boolean(process.stdout.isTTY) && Boolean(process.stdin.isTTY),
         platform: process.platform,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@addai/node",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Daemon that pairs a machine with your +Ai account and runs Claude / Codex / Kimi / Gemini agents on its behalf. Reachable via Supabase from Vault, Entity Studio, or any other +Ai surface.",
   "license": "MIT",
   "keywords": [