@bulolo/hermes-link 0.1.0 → 0.2.1

package/dist/cli/index.js

@@ -10,21 +10,23 @@ import {
   disableAutostart,
   enableAutostart,
   ensureIdentity,
-  generateAppConnectToken,
   getAutostartStatus,
   loadConfig,
   loadIdentity,
   normalizeLanHost,
+  readJsonFile,
   readRecentGatewayLogEntries,
   readRecentLogEntries,
   resolveRuntimePaths,
   saveAssignedLinkId,
   saveConfig,
-  startLinkService
-} from "../chunk-C24HF73Y.js";
+  startLinkService,
+  writeJsonFile
+} from "../chunk-CIUWLPSN.js";
 
 // src/cli/index.ts
 import { mkdir as mkdir2 } from "fs/promises";
+import qrcode from "qrcode-terminal";
 
 // src/daemon/process.ts
 import { execFile, spawn } from "child_process";
@@ -188,6 +190,43 @@ async function runDaemonSupervisor(options) {
   await cleanup();
 }
 
+// src/security/app-connect-token.ts
+import crypto from "crypto";
+import path2 from "path";
+var TOKENS_FILE = "app-connect-tokens.json";
+var TOKEN_EXPIRY_MS = 5 * 60 * 1e3;
+function tokensFilePath(paths) {
+  return path2.join(paths.homeDir, TOKENS_FILE);
+}
+async function readTokens(paths) {
+  const raw = await readJsonFile(tokensFilePath(paths));
+  if (!Array.isArray(raw)) return [];
+  const now = /* @__PURE__ */ new Date();
+  return raw.filter(isValidToken).filter((t) => new Date(t.expiresAt) > now);
+}
+function isValidToken(value) {
+  if (!value || typeof value !== "object") return false;
+  const t = value;
+  return typeof t.token === "string" && typeof t.createdAt === "string" && typeof t.expiresAt === "string";
+}
+async function saveTokens(tokens, paths) {
+  await writeJsonFile(tokensFilePath(paths), tokens);
+}
+async function generateAppConnectToken(paths) {
+  const runtimePaths = paths ?? resolveRuntimePaths();
+  const now = /* @__PURE__ */ new Date();
+  const token = {
+    token: crypto.randomBytes(32).toString("base64url"),
+    createdAt: now.toISOString(),
+    usedAt: null,
+    expiresAt: new Date(now.getTime() + TOKEN_EXPIRY_MS).toISOString()
+  };
+  const tokens = await readTokens(runtimePaths);
+  tokens.push(token);
+  await saveTokens(tokens, runtimePaths);
+  return token;
+}
+
 // src/runtime/browser.ts
 import { spawn as spawn2 } from "child_process";
 async function openSystemBrowser(url) {
@@ -400,7 +439,10 @@ async function cmdPair(paths) {
     return;
   }
   const result = await runPairingPreflight({ identity, config, paths });
-  process.stdout.write(`Pairing URL: ${result.pairingUrl}
+  process.stdout.write("\n");
+  qrcode.generate(result.pairingUrl, { small: true });
+  process.stdout.write(`
+Pairing URL:   ${result.pairingUrl}
 `);
   process.stdout.write(`Connect token: ${result.connectToken}
 `);

package/dist/http/app.js

@@ -1,6 +1,6 @@
 import {
   startLinkService
-} from "../chunk-C24HF73Y.js";
+} from "../chunk-CIUWLPSN.js";
 export {
   startLinkService
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bulolo/hermes-link",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "description": "Hermes Link companion service and CLI for connecting hermes-agent through zhiji",
   "license": "MIT",
   "type": "module",