@exreve/exk 1.0.50 → 1.0.52

package/dist/cli/index.js

@@ -0,0 +1,1262 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import { io } from 'socket.io-client';
+import { v4 as uuidv4 } from 'uuid';
+import fs from 'fs/promises';
+import fsSync from 'fs';
+import path from 'path';
+import os, { networkInterfaces } from 'os';
+import { Buffer } from 'buffer';
+import crypto from 'crypto';
+import { createProject, deleteProject } from './projectManager.js';
+import { startSending, startReceiving } from './transferService.js';
+import { registerGitHubHandlers } from './githubHandlers.js';
+import { registerFsHandlers } from './fsHandlers.js';
+import { registerAppHandlers } from './appHandlers.js';
+import { registerSessionHandlers } from './sessionHandlers.js';
+import { registerContainerHandlers } from './containerHandlers.js';
+import { registerCloudflaredHandlers } from './cloudflaredHandlers.js';
+import { spawn, execSync } from 'child_process';
+import readline from 'readline';
+import { fileURLToPath } from 'url';
+import { createHash } from 'crypto';
+// ============ Constants ============
+const CONFIG_DIR = path.join(os.homedir(), '.talk-to-code');
+const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
+const DEVICE_ID_FILE = path.join(CONFIG_DIR, 'device-id.json');
+const DEVICE_CONFIG_FILE = path.join(CONFIG_DIR, 'device-config.json');
+const DEFAULT_API_URL = 'https://api.talk-to-code.com';
+// ============ Helpers ============
+async function readConfig() {
+    try {
+        const data = await fs.readFile(CONFIG_FILE, 'utf-8');
+        return JSON.parse(data);
+    }
+    catch {
+        return { apiUrl: DEFAULT_API_URL };
+    }
+}
+async function writeConfig(config) {
+    await fs.mkdir(CONFIG_DIR, { recursive: true });
+    await fs.writeFile(CONFIG_FILE, JSON.stringify(config, null, 2));
+}
+/**
+ * Fetch AI config from server and save to ~/.talk-to-code/ai-config.json
+ * Called after device registration and on daemon start
+ */
+async function fetchAiConfig(authToken) {
+    try {
+        const config = await readConfig();
+        const res = await fetch(`${config.apiUrl}/config/ai`, {
+            headers: { Authorization: `Bearer ${authToken}` }
+        });
+        if (!res.ok) {
+            console.log(`[fetchAiConfig] Server returned ${res.status}`);
+            return false;
+        }
+        const data = await res.json();
+        if (!data.success || !data.aiConfig) {
+            console.log('[fetchAiConfig] No AI config available for this user');
+            return false;
+        }
+        await fs.writeFile(AI_CONFIG_FILE, JSON.stringify(data.aiConfig, null, 2));
+        console.log('[fetchAiConfig] AI config saved successfully');
+        return true;
+    }
+    catch (error) {
+        console.log(`[fetchAiConfig] Failed: ${error.message}`);
+        return false;
+    }
+}
+const AI_CONFIG_FILE = path.join(CONFIG_DIR, 'ai-config.json');
+const PROXY_CONFIG_FILE = path.join(CONFIG_DIR, 'proxy.json');
+/** Write proxy toggle state to disk */
+async function writeProxyConfig(cfg) {
+    await fs.mkdir(CONFIG_DIR, { recursive: true });
+    await fs.writeFile(PROXY_CONFIG_FILE, JSON.stringify(cfg, null, 2));
+}
+/** TTL cache for ai-config.json reads (shared by getProxyUrl / hasAiCredentials) */
+let _aiCfgCache = null;
+const _AI_CFG_TTL = 5_000;
+function readAiConfigCached() {
+    const now = Date.now();
+    if (_aiCfgCache && (now - _aiCfgCache.ts) < _AI_CFG_TTL)
+        return _aiCfgCache.raw;
+    try {
+        const raw = fsSync.readFileSync(AI_CONFIG_FILE, 'utf-8');
+        _aiCfgCache = { raw, ts: now };
+        return raw;
+    }
+    catch {
+        return '';
+    }
+}
+/** Get the proxy URL from ai-config.json (saved from backend) */
+function getProxyUrl() {
+    try {
+        const raw = readAiConfigCached();
+        if (!raw)
+            return '';
+        const j = JSON.parse(raw);
+        return typeof j.proxy === 'string' ? j.proxy.trim() : '';
+    }
+    catch {
+        return '';
+    }
+}
+/** True if ai-config.json has a model API key (not read from host ANTHROPIC_* env). */
+function hasAiCredentials() {
+    try {
+        const raw = readAiConfigCached();
+        if (!raw)
+            return false;
+        const j = JSON.parse(raw);
+        return typeof j.authToken === 'string' && j.authToken.trim().length > 0;
+    }
+    catch {
+        return false;
+    }
+}
+async function readDeviceAuthToken() {
+    const env = process.env.TTC_AUTH_TOKEN?.trim();
+    if (env)
+        return env;
+    try {
+        const raw = await fs.readFile(DEVICE_CONFIG_FILE, 'utf-8');
+        const j = JSON.parse(raw);
+        return typeof j.authToken === 'string' ? j.authToken.trim() : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function readDiskDeviceConfig() {
+    try {
+        const raw = await fs.readFile(DEVICE_CONFIG_FILE, 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Update device-config.json without dropping an existing authToken.
+ * Omit authToken to keep the file’s current token; pass authToken: '' to clear (rare).
+ */
+async function writeDeviceConfigMerged(partial) {
+    const prev = await readDiskDeviceConfig();
+    const email = partial.email !== undefined ? partial.email : prev.email;
+    let token;
+    if (partial.authToken !== undefined) {
+        token = partial.authToken.trim() || undefined;
+    }
+    else {
+        token = typeof prev.authToken === 'string' && prev.authToken.trim() ? prev.authToken.trim() : undefined;
+    }
+    const out = {};
+    if (email)
+        out.email = email;
+    if (token)
+        out.authToken = token;
+    await fs.mkdir(CONFIG_DIR, { recursive: true });
+    await fs.writeFile(DEVICE_CONFIG_FILE, JSON.stringify(out, null, 2));
+}
+/** If AI cache is empty but we have a device JWT, try GET /config/ai once (non-fatal). */
+async function maybeFetchAiConfigIfMissing() {
+    if (hasAiCredentials())
+        return;
+    const jwt = await readDeviceAuthToken();
+    if (!jwt)
+        return;
+    const ok = await fetchAiConfig(jwt);
+    if (!ok && !hasAiCredentials()) {
+        const cfg = await readConfig();
+        console.warn(`[CLI] No AI key in ai-config.json yet. Could not sync from ${cfg.apiUrl}/config/ai — agent prompts will fail until this succeeds.`);
+    }
+}
+function scheduleAiConfigSync(authToken) {
+    void fetchAiConfig(authToken).then((ok) => {
+        if (!ok && !hasAiCredentials()) {
+            console.warn('[CLI] AI config sync failed; check backend /config/ai and apiUrl.');
+        }
+    });
+}
+async function getDeviceId() {
+    try {
+        const data = await fs.readFile(DEVICE_ID_FILE, 'utf-8');
+        return JSON.parse(data).deviceId;
+    }
+    catch {
+        const deviceId = uuidv4();
+        await fs.mkdir(CONFIG_DIR, { recursive: true });
+        await fs.writeFile(DEVICE_ID_FILE, JSON.stringify({ deviceId }, null, 2));
+        return deviceId;
+    }
+}
+function getLocalIpAddress() {
+    const nets = networkInterfaces();
+    for (const name of Object.keys(nets)) {
+        for (const net of nets[name]) {
+            if (net.family === 'IPv4' && !net.internal) {
+                return net.address;
+            }
+        }
+    }
+    return 'Unknown';
+}
+function getHostname() {
+    return os.hostname() || 'Unknown';
+}
+async function connect() {
+    const config = await readConfig();
+    const deviceId = await getDeviceId();
+    return new Promise((resolve, reject) => {
+        const socket = io(config.apiUrl, {
+            transports: ['websocket', 'polling'],
+        });
+        socket.on('connect', () => {
+            socket.emit('register', { type: 'cli', deviceId });
+            resolve(socket);
+        });
+        socket.on('registered', ({ type }) => {
+            console.log(`Connected as ${type}`);
+        });
+        socket.on('connect_error', (err) => {
+            reject(err);
+        });
+    });
+}
+// ============ Version Helpers ============
+/** Read CLI version from the npm package.json (works when installed via npm i -g @exreve/exk) */
+function getCliVersion() {
+    try {
+        // Compiled JS is in dist/, package.json is one level up
+        const pkgPath = path.join(__dirname, '..', 'package.json');
+        const raw = fsSync.readFileSync(pkgPath, 'utf-8');
+        const pkg = JSON.parse(raw);
+        return pkg.version || '0.0.0';
+    }
+    catch {
+        return '0.0.0';
+    }
+}
+const CURRENT_FILE = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(CURRENT_FILE);
+function getCliHash() {
+    return createHash('sha256').update(fsSync.readFileSync(CURRENT_FILE)).digest('hex');
+}
+async function checkForUpdate() {
+    try {
+        const config = await readConfig();
+        const res = await fetch(`${config.apiUrl}/update/check`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ hash: getCliHash(), platform: os.platform() })
+        });
+        if (!res.ok)
+            return null;
+        return await res.json();
+    }
+    catch {
+        return null;
+    }
+}
+// ============ Commands ============
+async function registerDevice(name, email) {
+    try {
+        const deviceId = await getDeviceId();
+        let deviceEmail = email;
+        // If we already have a valid token, skip approval email and just register
+        try {
+            const deviceConfig = await readDiskDeviceConfig();
+            const existingToken = deviceConfig.authToken;
+            if (existingToken && typeof existingToken === 'string') {
+                const config = await readConfig();
+                const meRes = await fetch(`${config.apiUrl}/auth/me`, {
+                    headers: { Authorization: `Bearer ${existingToken}` }
+                });
+                const meData = await meRes.json();
+                if (meRes.ok && meData.success && meData.user?.email) {
+                    console.log(`✓ Using existing auth token for ${meData.user.email}`);
+                    deviceEmail = deviceEmail || meData.user.email;
+                    const socket = await connect();
+                    await new Promise((resolve, reject) => {
+                        socket.emit('device:register', {
+                            deviceId,
+                            name: name || `CLI Device ${deviceId.slice(0, 8)}`,
+                            ipAddress: getLocalIpAddress(),
+                            hostname: getHostname(),
+                            email: deviceEmail,
+                            cliVersion: getCliVersion()
+                        }, ({ success, device, error }) => {
+                            socket.disconnect();
+                            if (success && device) {
+                                console.log(`✓ Device registered!`);
+                                console.log(`Device ID: ${device.deviceId}`);
+                                console.log(`Name: ${device.name}`);
+                                console.log(`Email: ${device.email}`);
+                                resolve();
+                            }
+                            else {
+                                reject(new Error(error || 'Registration failed'));
+                            }
+                        });
+                    });
+                    // Fetch AI config from server after registration
+                    await fetchAiConfig(existingToken);
+                    return;
+                }
+            }
+        }
+        catch {
+            // No config or invalid token - continue with approval flow
+        }
+        // Prompt for email if not provided
+        if (!deviceEmail) {
+            const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+            deviceEmail = await new Promise((resolve) => {
+                rl.question('Enter your email address: ', (answer) => {
+                    rl.close();
+                    resolve(answer.trim());
+                });
+            });
+        }
+        if (!deviceEmail?.includes('@')) {
+            console.error('✗ Valid email address is required');
+            throw new Error('Valid email address is required');
+        }
+        // Generate 32-byte random token (base64url encoded)
+        const randomBytes = crypto.randomBytes(32);
+        const approvalToken = randomBytes.toString('base64url'); // base64url encoding (no padding, URL-safe)
+        console.log(`\n📧 Sending approval request to ${deviceEmail}...`);
+        // Send approval request
+        const config = await readConfig();
+        const response = await fetch(`${config.apiUrl}/auth/approval-request`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json'
+            },
+            body: JSON.stringify({
+                email: deviceEmail,
+                deviceId,
+                approvalToken
+            })
+        });
+        const result = await response.json();
+        if (!result.success) {
+            console.error(`✗ Failed to send approval request: ${result.error || 'Unknown error'}`);
+            throw new Error(result.error || 'Failed to send approval request');
+        }
+        console.log(`✓ Approval email sent! Check your inbox (${deviceEmail})`);
+        console.log(`⏳ Waiting for approval...`);
+        // Poll every 5 seconds for approval
+        const maxAttempts = 120; // 10 minutes max (120 * 5s)
+        let attempts = 0;
+        const checkApproval = async () => {
+            attempts++;
+            try {
+                const statusResponse = await fetch(`${config.apiUrl}/auth/approval-status?token=${approvalToken}`);
+                const statusResult = await statusResponse.json();
+                if (statusResult.success && statusResult.approved) {
+                    return statusResult.token || null; // Return permanent auth token
+                }
+                if (statusResult.error && !statusResult.pending) {
+                    console.error(`\n✗ ${statusResult.error}`);
+                    return null;
+                }
+                return null; // Still pending
+            }
+            catch (error) {
+                console.error(`\n✗ Error checking approval status: ${error.message}`);
+                return null;
+            }
+        };
+        // Poll until approved or timeout
+        while (attempts < maxAttempts) {
+            await new Promise(resolve => setTimeout(resolve, 5000)); // Wait 5 seconds
+            const token = await checkApproval();
+            if (token) {
+                // Device approved! Store permanent token
+                await writeDeviceConfigMerged({ email: deviceEmail, authToken: token });
+                console.log(`\n✓ Device approved!`);
+                // Register device with backend and wait for completion
+                const socket = await connect();
+                await new Promise((resolve, reject) => {
+                    socket.emit('device:register', {
+                        deviceId,
+                        name: name || `CLI Device ${deviceId.slice(0, 8)}`,
+                        ipAddress: getLocalIpAddress(),
+                        hostname: getHostname(),
+                        email: deviceEmail,
+                        cliVersion: getCliVersion()
+                    }, ({ success, device, error }) => {
+                        socket.disconnect();
+                        if (success && device) {
+                            console.log(`✓ Device registered!`);
+                            console.log(`Device ID: ${device.deviceId}`);
+                            console.log(`Name: ${device.name}`);
+                            console.log(`Email: ${device.email}`);
+                            console.log(`IP Address: ${device.ipAddress || 'Unknown'}`);
+                            console.log(`Hostname: ${device.hostname || 'Unknown'}`);
+                            resolve();
+                        }
+                        else {
+                            reject(new Error(error || 'Registration failed'));
+                        }
+                    });
+                });
+                // Fetch AI config from server after registration
+                await fetchAiConfig(token);
+                return; // Successfully registered
+            }
+            // Show progress every 30 seconds
+            if (attempts % 6 === 0) {
+                process.stdout.write(`\r⏳ Still waiting... (${attempts * 5}s)`);
+            }
+        }
+        console.error(`\n✗ Approval timeout. Please check your email and try again.`);
+        throw new Error('Approval timeout');
+    }
+    catch (error) {
+        console.error('Failed to register device:', error.message);
+        throw error;
+    }
+}
+// Active sessions map - persists across reconnections
+const activeSessions = new Map();
+async function runDaemon(foreground = false, email) {
+    const config = await readConfig();
+    const deviceId = await getDeviceId();
+    const ipAddress = getLocalIpAddress();
+    const hostname = getHostname();
+    // Silent update check on startup
+    checkForUpdate().then(info => {
+        if (info?.updateAvailable)
+            console.log('📦 Update available: run "ttc update"');
+    }).catch(() => { });
+    if (foreground)
+        console.log('=== TalkToCode CLI (Foreground) ===');
+    else
+        console.log('Starting daemon...');
+    console.log(`API: ${config.apiUrl}`);
+    console.log(`Device: ${deviceId}`);
+    console.log(`Host: ${hostname}`);
+    // Test if server is reachable
+    if (foreground) {
+        try {
+            const url = new URL(config.apiUrl);
+            const testUrl = `${url.protocol}//${url.host}`;
+            console.log(`Testing connection to ${testUrl}...`);
+            const response = await fetch(testUrl, {
+                method: 'GET',
+                signal: AbortSignal.timeout(5000)
+            });
+            console.log(`✓ Server is reachable (HTTP ${response.status})`);
+        }
+        catch (error) {
+            console.error(`✗ Cannot reach server: ${error.message}`);
+            console.error(`  Make sure the backend server is running at ${config.apiUrl}`);
+        }
+    }
+    console.log('');
+    await maybeFetchAiConfigIfMissing();
+    let socket = null;
+    let reconnectTimeout = null;
+    let reconnectAttempts = 0;
+    const MAX_RECONNECT_ATTEMPTS = Infinity; // Keep trying forever
+    const connectAndRegister = async () => {
+        try {
+            // Destroy any existing socket to prevent zombie connections
+            if (socket) {
+                socket.removeAllListeners();
+                socket.disconnect();
+                socket = null;
+            }
+            socket = io(config.apiUrl, {
+                transports: ['websocket', 'polling'],
+                reconnection: true,
+                reconnectionDelay: 1000,
+                reconnectionDelayMax: 10000,
+                reconnectionAttempts: MAX_RECONNECT_ATTEMPTS,
+                timeout: 20000,
+                forceNew: true,
+                upgrade: true,
+            });
+            if (foreground) {
+                console.log(`Attempting to connect to: ${config.apiUrl}`);
+            }
+            // Register event handlers once (outside registered callback to prevent duplicates)
+            // Project handlers
+            socket.on('project:create', async (data, callback) => {
+                try {
+                    if (foreground) {
+                        console.log(`📁 Creating project: ${data.name} at ${data.path}`);
+                    }
+                    const result = await createProject({
+                        projectId: data.projectId || uuidv4(),
+                        name: data.name,
+                        path: data.path,
+                        sourcePath: data.sourcePath
+                    });
+                    if (result.success) {
+                        if (foreground) {
+                            console.log(`✓ Project created: ${data.name} at ${result.actualPath || data.path}`);
+                        }
+                        else {
+                            console.log(`Project created: ${data.name} at ${result.actualPath || data.path}`);
+                        }
+                    }
+                    else {
+                        if (foreground) {
+                            console.error(`✗ Failed to create project: ${result.error || 'Unknown error'}`);
+                        }
+                    }
+                    callback?.({
+                        success: result.success,
+                        error: result.error,
+                        actualPath: result.actualPath
+                    });
+                }
+                catch (error) {
+                    if (foreground) {
+                        console.error(`✗ Error creating project: ${error.message}`);
+                    }
+                    callback?.({ success: false, error: error.message });
+                }
+            });
+            socket.on('project:delete', async (data, callback) => {
+                try {
+                    const { projectId, path } = data;
+                    if (!path) {
+                        callback?.({ success: false, error: 'Project path required for deletion' });
+                        return;
+                    }
+                    if (foreground) {
+                        console.log(`🗑️  Deleting project: ${projectId} at ${path}`);
+                    }
+                    const result = await deleteProject(path);
+                    if (result.success) {
+                        if (foreground) {
+                            console.log(`✓ Project deleted: ${projectId} at ${path}`);
+                        }
+                        else {
+                            console.log(`Project deleted: ${projectId} at ${path}`);
+                        }
+                    }
+                    else {
+                        if (foreground) {
+                            console.error(`✗ Failed to delete project: ${result.error || 'Unknown error'}`);
+                        }
+                    }
+                    callback?.(result);
+                }
+                catch (error) {
+                    if (foreground) {
+                        console.error(`✗ Error deleting project: ${error.message}`);
+                    }
+                    callback?.({ success: false, error: error.message });
+                }
+            });
+            // GitHub handlers (delegated to githubHandlers module for proper response format)
+            registerGitHubHandlers(socket, foreground);
+            // Filesystem handlers (delegated to fsHandlers module)
+            registerFsHandlers(socket);
+            // Session handlers (delegated to sessionHandlers module)
+            registerSessionHandlers(socket, foreground, activeSessions, () => socket);
+            // App control handlers (delegated to appHandlers module)
+            registerAppHandlers(socket, foreground);
+            // Handle image save request - saves base64 images to tmp directory
+            socket.on('image:save', async (data) => {
+                try {
+                    const { images, saveCallbackId, projectPath } = data;
+                    if (foreground) {
+                        console.log(`[CLI] 🖼️  Received request to save ${images.length} image(s)`);
+                    }
+                    // Use project-specific tmp directory (inside the project)
+                    // If projectPath is provided, use it; otherwise fall back to current working directory
+                    const basePath = projectPath || process.cwd();
+                    const tmpDir = path.join(basePath, 'tmp');
+                    await fs.mkdir(tmpDir, { recursive: true });
+                    if (foreground) {
+                        console.log(`[CLI] 📁 Saving to directory: ${tmpDir}`);
+                    }
+                    let savedCount = 0;
+                    const errors = [];
+                    for (const image of images) {
+                        try {
+                            const imagePath = path.join(tmpDir, image.name);
+                            // Convert base64 to buffer and write to file
+                            const buffer = Buffer.from(image.data, 'base64');
+                            await fs.writeFile(imagePath, buffer);
+                            if (foreground) {
+                                console.log(`[CLI] ✓ Saved image: ${imagePath}`);
+                            }
+                            savedCount++;
+                        }
+                        catch (saveError) {
+                            const errorMsg = `Failed to save ${image.name}: ${saveError.message}`;
+                            errors.push(errorMsg);
+                            if (foreground) {
+                                console.error(`[CLI] ✗ ${errorMsg}`);
+                            }
+                        }
+                    }
+                    // Send response back via app:control:response
+                    console.log(`[CLI] Sending app:control:response with appControlId=${saveCallbackId}, success=${errors.length === 0}, savedCount=${savedCount}`);
+                    socket.emit('app:control:response', {
+                        appControlId: saveCallbackId,
+                        success: errors.length === 0,
+                        savedCount,
+                        error: errors.length > 0 ? errors.join('; ') : undefined
+                    });
+                    console.log(`[CLI] Emitted app:control:response`);
+                    if (foreground) {
+                        if (errors.length > 0) {
+                            console.log(`[CLI] ⚠️  Saved ${savedCount}/${images.length} images with errors`);
+                        }
+                        else {
+                            console.log(`[CLI] ✓ Successfully saved all ${savedCount} images to ${tmpDir}`);
+                        }
+                    }
+                }
+                catch (error) {
+                    console.error(`[CLI] ✗ Error saving images: ${error.message}`);
+                    // Send error response
+                    console.log(`[CLI] Sending error app:control:response with appControlId=${data.saveCallbackId}`);
+                    socket.emit('app:control:response', {
+                        appControlId: data.saveCallbackId,
+                        success: false,
+                        error: error.message
+                    });
+                    console.log(`[CLI] Emitted error app:control:response`);
+                }
+            });
+            // Handle folder transfer — this device is the source (pack & upload)
+            socket.on('transfer:pack', (data) => {
+                if (foreground) {
+                    console.log(`[transfer] Pack request: ${data.sourcePath} (${data.selectedItems?.length || 0} items) → device ${data.destDeviceId.slice(0, 8)}`);
+                }
+                startSending(socket, data, foreground);
+            });
+            // Handle folder transfer — this device is the destination (download & extract)
+            socket.on('transfer:pull', (data) => {
+                if (foreground) {
+                    console.log(`[transfer] Pull request: device ${data.sourceDeviceId.slice(0, 8)} → ${data.destPath} (${(data.totalBytes / (1024 * 1024)).toFixed(1)} MB)`);
+                }
+                startReceiving(socket, data, foreground);
+            });
+            socket.on('connect', () => {
+                if (foreground) {
+                    console.log(`✓ Connected to backend at ${config.apiUrl}`);
+                    if (socket) {
+                        console.log(`   Socket ID: ${socket.id}`);
+                    }
+                }
+                else {
+                    console.log('Connected to backend');
+                }
+                reconnectAttempts = 0;
+                // Register as CLI device
+                if (socket) {
+                    socket.emit('register', { type: 'cli', deviceId });
+                }
+            });
+            socket.on('registered', async ({ type }) => {
+                if (foreground) {
+                    console.log(`✓ Registered as ${type}`);
+                }
+                else {
+                    console.log(`Registered as ${type}`);
+                }
+                // Check for auth token: env TTC_AUTH_TOKEN or device-config.json (from previous approval)
+                let authToken = process.env.TTC_AUTH_TOKEN;
+                let deviceEmail = email;
+                let skipEmailFlow = false;
+                // Load from device-config if no env token (reuse state from previous approval)
+                if (!authToken) {
+                    try {
+                        const deviceConfig = await readDiskDeviceConfig();
+                        authToken = deviceConfig.authToken;
+                        if (!deviceEmail && deviceConfig.email)
+                            deviceEmail = deviceConfig.email;
+                    }
+                    catch {
+                        // No device config yet
+                    }
+                }
+                if (authToken) {
+                    try {
+                        const parts = authToken.split('.');
+                        if (parts.length === 3) {
+                            const payload = JSON.parse(Buffer.from(parts[1], 'base64').toString());
+                            if (payload.type === 'device_auth' && payload.email) {
+                                deviceEmail = payload.email;
+                                skipEmailFlow = true;
+                                if (foreground) {
+                                    console.log(`✓ Using stored auth token for ${deviceEmail}`);
+                                }
+                            }
+                        }
+                    }
+                    catch (err) {
+                        if (foreground) {
+                            console.warn(`⚠️  Invalid auth token in config, falling back to normal auth`);
+                        }
+                        authToken = undefined;
+                    }
+                }
+                // Load device email from config if not using token and not provided
+                if (!deviceEmail && !skipEmailFlow) {
+                    try {
+                        const deviceConfig = await readDiskDeviceConfig();
+                        deviceEmail = deviceConfig.email;
+                    }
+                    catch {
+                        // No device config yet
+                    }
+                }
+                // Register device with backend
+                let needsApprovalLoggedOnce = false;
+                const registerDevice = () => {
+                    // Determine device name
+                    const containerName = process.env.CONTAINER_NAME;
+                    const deviceName = containerName ? `Container: ${containerName}` : `CLI Device ${hostname}`;
+                    socket.emit('device:register', {
+                        deviceId,
+                        name: deviceName,
+                        ipAddress,
+                        hostname,
+                        email: deviceEmail,
+                        cliVersion: getCliVersion(),
+                        // When using auth token, include the token for verification
+                        authToken: skipEmailFlow ? authToken : undefined
+                    }, ({ success, needsApproval, message, device, error }) => {
+                        if (success && device) {
+                            needsApprovalLoggedOnce = false;
+                            if (foreground) {
+                                console.log(`✓ Device registered: ${device.name}`);
+                                if (device.approved) {
+                                    console.log(`✓ Device approved and ready`);
+                                }
+                            }
+                            else {
+                                console.log(`Device registered: ${device.name}${device.approved ? ' (approved)' : ' (pending approval)'}`);
+                            }
+                            // Save config: merge email; keep existing file authToken if in-memory token absent
+                            if (device.email) {
+                                void writeDeviceConfigMerged({
+                                    email: device.email,
+                                    ...(authToken ? { authToken } : {}),
+                                }).catch(() => { });
+                            }
+                            if (authToken) {
+                                scheduleAiConfigSync(authToken);
+                            }
+                        }
+                        else if (needsApproval) {
+                            // Persist email when approval was requested; do not wipe authToken
+                            if (deviceEmail) {
+                                void writeDeviceConfigMerged({ email: deviceEmail }).catch(() => { });
+                            }
+                            // Only log once to avoid flooding logs every 30s on heartbeat
+                            if (!needsApprovalLoggedOnce) {
+                                needsApprovalLoggedOnce = true;
+                                if (foreground) {
+                                    console.log(`\n⚠️  ${message || 'Device approval required'}`);
+                                    if (!deviceEmail) {
+                                        console.log(`   Please run: npx tsx index.ts register --email your@email.com`);
+                                    }
+                                    else {
+                                        console.log(`   Check your email (${deviceEmail}) and click the approval link.`);
+                                    }
+                                }
+                                else {
+                                    console.log(`⚠️  Device approval required: ${message || 'Please approve device'}`);
+                                }
+                            }
+                        }
+                        else if (error) {
+                            console.error(`✗ Registration error: ${error}`);
+                        }
+                    });
+                };
+                registerDevice();
+                // Update lastSeen every 30 seconds while connected
+                const heartbeatInterval = setInterval(() => {
+                    if (socket?.connected) {
+                        registerDevice();
+                    }
+                    else {
+                        clearInterval(heartbeatInterval);
+                    }
+                }, 30000);
+                socket.heartbeatInterval = heartbeatInterval;
+            });
+            // ========== Version & Update Handlers ==========
+            // Respond with CLI version info
+            socket.on('version:info', (_data, callback) => {
+                callback({
+                    success: true,
+                    version: getCliVersion(),
+                    hash: getCliHash(),
+                    date: new Date().toISOString(),
+                    nodeVersion: process.version,
+                    platform: os.platform(),
+                    arch: os.arch()
+                });
+            });
+            // Force update: npm update -g @exreve/exk then restart PM2
+            socket.on('force-update', (_data, callback) => {
+                if (foreground) {
+                    console.log('[force-update] Received force update command from server');
+                }
+                callback?.({ success: true, message: 'Update initiated' });
+                // Run npm update in background, then restart
+                const npmPaths = [
+                    path.join(os.homedir(), '.nvm/versions/node/v22/bin/npm'),
+                    path.join(os.homedir(), '.nvm/versions/node/v20/bin/npm')
+                ];
+                const npmBin = npmPaths.find(p => fsSync.existsSync(p)) || 'npm';
+                const updateProcess = spawn(npmBin, ['update', '-g', '@exreve/exk'], {
+                    stdio: 'pipe',
+                    detached: true
+                });
+                let output = '';
+                updateProcess.stdout?.on('data', (d) => { output += d.toString(); });
+                updateProcess.stderr?.on('data', (d) => { output += d.toString(); });
+                updateProcess.on('close', (code) => {
+                    if (foreground) {
+                        console.log(`[force-update] npm update exited with code ${code}`);
+                        if (output)
+                            console.log(output);
+                    }
+                    // Restart PM2 process "cli" after a short delay
+                    setTimeout(() => {
+                        try {
+                            execSync('pm2 restart cli', { stdio: 'inherit' });
+                        }
+                        catch {
+                            // If pm2 restart fails, just exit and let pm2 restart us
+                            process.exit(0);
+                        }
+                    }, 2000);
+                });
+                updateProcess.on('error', (err) => {
+                    if (foreground) {
+                        console.error(`[force-update] npm update failed: ${err.message}`);
+                    }
+                });
+            });
+            // ========== update:start handler (legacy compatibility) ==========
+            socket.on('update:start', (_data, callback) => {
+                // Use npm-based self-update
+                if (foreground) {
+                    console.log('[update:start] Starting npm self-update...');
+                }
+                callback?.({ success: true, message: 'Update started via npm' });
+                const npmPaths = [
+                    path.join(os.homedir(), '.nvm/versions/node/v22/bin/npm'),
+                    path.join(os.homedir(), '.nvm/versions/node/v20/bin/npm')
+                ];
+                const npmBin = npmPaths.find(p => fsSync.existsSync(p)) || 'npm';
+                const updateProcess = spawn(npmBin, ['update', '-g', '@exreve/exk'], {
+                    stdio: 'pipe',
+                    detached: true
+                });
+                updateProcess.on('close', () => {
+                    setTimeout(() => {
+                        try {
+                            execSync('pm2 restart cli', { stdio: 'inherit' });
+                        }
+                        catch {
+                            process.exit(0);
+                        }
+                    }, 2000);
+                });
+            });
+            // Cloudflared handlers (delegated to cloudflaredHandlers module)
+            registerCloudflaredHandlers(socket, foreground);
+            // Container handlers (delegated to containerHandlers module)
+            registerContainerHandlers(socket, foreground, __dirname);
+            socket.on('disconnect', (reason) => {
+                if (foreground) {
+                    console.log(`\n⚠️  Disconnected: ${reason}`);
+                    console.log('   Attempting to reconnect...');
+                }
+                else {
+                    console.log(`Disconnected: ${reason}`);
+                }
+                // Clear heartbeat interval
+                if (socket.heartbeatInterval) {
+                    clearInterval(socket.heartbeatInterval);
+                }
+                if (reason === 'io server disconnect') {
+                    // Server disconnected, reconnect manually
+                    socket.connect();
+                }
+                else {
+                    // Client disconnect or transport close: schedule full reconnect so process stays alive
+                    if (reconnectTimeout)
+                        clearTimeout(reconnectTimeout);
+                    const delay = 2000;
+                    if (!foreground)
+                        console.log(`Reconnecting in ${delay}ms...`);
+                    reconnectTimeout = setTimeout(connectAndRegister, delay);
+                }
+            });
+            socket.on('connect_error', (err) => {
+                reconnectAttempts++;
+                if (foreground) {
+                    console.error(`✗ Connection error (attempt ${reconnectAttempts}): ${err.message}`);
+                    if (err.type) {
+                        console.error(`   Error type: ${err.type}`);
+                    }
+                    if (err.description) {
+                        console.error(`   Error description: ${err.description}`);
+                    }
+                    console.error(`   Connecting to: ${config.apiUrl}`);
+                    if (err.cause) {
+                        console.error(`   Cause:`, err.cause);
+                    }
+                }
+                else {
+                    console.error(`Connection error (attempt ${reconnectAttempts}):`, err.message);
+                }
+            });
+            // Keep process alive
+            socket.on('error', (err) => {
+                if (foreground) {
+                    console.error(`✗ Socket error: ${err}`);
+                }
+                else {
+                    console.error('Socket error:', err);
+                }
+            });
+        }
+        catch (error) {
+            if (foreground) {
+                console.error(`✗ Failed to connect: ${error.message}`);
+            }
+            else {
+                console.error('Failed to connect:', error.message);
+            }
+            reconnectAttempts++;
+            if (reconnectAttempts < MAX_RECONNECT_ATTEMPTS) {
+                const delay = Math.min(1000 * Math.pow(2, reconnectAttempts), 30000);
+                if (foreground) {
+                    console.log(`⏳ Reconnecting in ${delay}ms...`);
+                }
+                else {
+                    console.log(`Reconnecting in ${delay}ms...`);
+                }
+                reconnectTimeout = setTimeout(connectAndRegister, delay);
+            }
+        }
+    };
+    // Handle graceful shutdown
+    const shutdown = () => {
+        if (foreground) {
+            console.log('\n\n🛑 Shutting down gracefully...');
+        }
+        else {
+            console.log('\nShutting down...');
+        }
+        if (reconnectTimeout) {
+            clearTimeout(reconnectTimeout);
+        }
+        if (socket) {
+            // Clear heartbeat interval
+            if (socket.heartbeatInterval) {
+                clearInterval(socket.heartbeatInterval);
+            }
+            socket.disconnect();
+        }
+        process.exit(0);
+    };
+    process.on('SIGTERM', shutdown);
+    process.on('SIGINT', shutdown);
+    process.on('SIGHUP', shutdown);
+    // Start connection
+    await connectAndRegister();
+    // Keep process alive
+    process.stdin.resume();
+}
+// ============ CLI Program ============
+const program = new Command();
+program
+    .name('exk')
+    .description('exk - Control Claude CLI with voice and programmable interfaces')
+    .version(getCliVersion());
+// Config command
+program
+    .command('config')
+    .description('Get or set config (api-url)')
+    .option('--api-url <url>', 'API base URL')
+    .action(async (opts) => {
+    const config = await readConfig();
+    if (opts.apiUrl !== undefined) {
+        config.apiUrl = opts.apiUrl;
+        await writeConfig(config);
+        console.log('Set api-url:', config.apiUrl);
+    }
+    else {
+        console.log('Config:', JSON.stringify(config, null, 2));
+    }
+    process.exit(0);
+});
+// Register command
+program
+    .command('register')
+    .description('Register this device and install as persistent daemon')
+    .argument('[email]', 'Email address for device approval')
+    .action(async (email) => {
+    try {
+        // First register the device
+        await registerDevice(undefined, email);
+        // After successful registration, install as PM2 service (Linux/macOS only)
+        if (process.platform === 'win32') {
+            console.log('\n✓ Device registered.');
+            console.log('On Windows, run the daemon manually: exk daemon');
+        }
+        else {
+            console.log('\n📦 Installing exk daemon with pm2...');
+            const exkBin = process.argv[1] || 'exk';
+            try {
+                // Check if pm2 is installed
+                try {
+                    execSync('which pm2', { stdio: 'ignore' });
+                }
+                catch {
+                    console.log('Installing pm2...');
+                    execSync('npm i -g pm2', { stdio: 'inherit' });
+                }
+                // Delete existing pm2 process if any, then start fresh
+                try {
+                    execSync('pm2 delete cli 2>/dev/null', { stdio: 'ignore' });
+                }
+                catch { }
+                // Start exk daemon with pm2
+                execSync(`pm2 start "${exkBin}" --name cli --interpreter none -- daemon`, {
+                    stdio: 'inherit'
+                });
+                // Configure pm2 to start on boot (creates systemd/launchd service)
+                let startupConfigured = false;
+                try {
+                    const startupResult = execSync('pm2 startup 2>&1', { encoding: 'utf-8' });
+                    if (startupResult.includes('sudo') || startupResult.includes('[PM2] You have to run')) {
+                        // pm2 startup needs sudo - try running the suggested command
+                        const match = startupResult.match(/(sudo .+)/);
+                        if (match) {
+                            console.log('\n⚙ PM2 startup requires admin privileges.');
+                            console.log('Run this command to enable auto-start on reboot:');
+                            console.log(`  ${match[1]}`);
+                        }
+                    }
+                    else {
+                        startupConfigured = true;
+                    }
+                }
+                catch (err) {
+                    const execErr = err;
+                    const output = execErr.stderr || '';
+                    const match = output.match(/(sudo .+)/);
+                    if (match) {
+                        console.log('\n⚙ PM2 startup requires admin privileges.');
+                        console.log('Run this command to enable auto-start on reboot:');
+                        console.log(`  ${match[1]}`);
+                    }
+                    // Non-critical - pm2 startup may need sudo
+                }
+                // Save pm2 process list for auto-restart on reboot
+                try {
+                    execSync('pm2 save', { stdio: 'inherit' });
+                }
+                catch {
+                    // Non-critical
+                }
+                console.log('\n✓ exk installation complete!');
+                console.log('The service is now running in the background.');
+                if (startupConfigured) {
+                    console.log('✓ Auto-start on reboot is configured.');
+                }
+                console.log('\nUseful commands:');
+                console.log('  pm2 logs cli     - View logs');
+                console.log('  pm2 restart cli  - Restart service');
+                console.log('  pm2 stop cli     - Stop service');
+                console.log('  pm2 delete cli   - Remove service');
+            }
+            catch (err) {
+                const error = err;
+                console.log('\n⚠ PM2 installation had issues, but device is registered.');
+                const execErr = error;
+                const errDetail = execErr.stderr?.toString() || execErr.stdout?.toString() || error.message;
+                if (errDetail)
+                    console.error('Error:', errDetail);
+                console.log('You can start the daemon manually with: exk daemon');
+            }
+        }
+    }
+    catch (error) {
+        const err = error;
+        const errorMsg = err.message || String(error);
+        if (errorMsg.includes('approval') || errorMsg.includes('email')) {
+            // Registration failed - exit with error
+            process.exit(1);
+        }
+        // Service installation failed, but device is registered
+        console.log('\n⚠ Service installation had issues, but device is registered.');
+        console.error('Error:', err.stderr?.toString() || errorMsg);
+        console.log('You can start the daemon manually with: exk daemon');
+    }
+    // Exit after install is complete
+    process.exit(0);
+});
+// Uninstall command
+program
+    .command('uninstall')
+    .description('Uninstall exk daemon (removes pm2 service and config)')
+    .action(async () => {
+    console.log('Uninstalling exk daemon...');
+    if (process.platform === 'win32') {
+        console.log('On Windows there is no service to remove.');
+        console.log('To remove exk completely: npm uninstall -g @exreve/exk');
+    }
+    else {
+        try {
+            execSync('pm2 delete cli', { stdio: 'inherit' });
+            try {
+                execSync('pm2 save', { stdio: 'inherit' });
+            }
+            catch { /* non-critical */ }
+            console.log('\n✓ Service uninstalled!');
+            console.log('To remove the package completely: npm uninstall -g @exreve/exk');
+        }
+        catch {
+            console.log('\n⚠ PM2 service not found or already removed.');
+            console.log('To remove exk: npm uninstall -g @exreve/exk');
+            console.log('  rm -rf ~/.talk-to-code');
+        }
+    }
+    // Exit after uninstall is complete
+    process.exit(0);
+});
+// Update command - uses npm to update the global package
+program
+    .command('update')
+    .description('Update exk to the latest version via npm')
+    .option('-f, --force', 'Update without confirmation')
+    .action(async (options) => {
+    const currentVersion = getCliVersion();
+    console.log(`Current version: ${currentVersion}`);
+    // Check latest version from npm
+    try {
+        const latestVersion = execSync('npm view @exreve/exk version', { encoding: 'utf-8' }).trim();
+        console.log(`Latest version: ${latestVersion}`);
+        if (latestVersion === currentVersion) {
+            console.log('✓ Already up to date');
+            process.exit(0);
+        }
+        if (!options.force && process.stdin.isTTY) {
+            const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+            const answer = await new Promise(r => rl.question('Update now? [Y/n] ', a => { rl.close(); r(a.trim()); }));
+            if (answer.toLowerCase().startsWith('n')) {
+                process.exit(0);
+            }
+        }
+        console.log('Updating...');
+        execSync('npm i -g @exreve/exk@latest', { stdio: 'inherit' });
+        console.log(`\n✓ Updated to ${latestVersion}`);
+        // Restart PM2 if running
+        try {
+            execSync('pm2 restart cli', { stdio: 'inherit' });
+        }
+        catch {
+            // Not running under PM2, that's fine
+        }
+    }
+    catch (error) {
+        console.error('Update failed:', error.message);
+        process.exit(1);
+    }
+    process.exit(0);
+});
+program
+    .command('check-update')
+    .description('Check for updates')
+    .action(async () => {
+    const currentVersion = getCliVersion();
+    console.log(`Current version: ${currentVersion}`);
+    try {
+        const latestVersion = execSync('npm view @exreve/exk version', { encoding: 'utf-8' }).trim();
+        console.log(`Latest version: ${latestVersion}`);
+        if (latestVersion === currentVersion) {
+            console.log('✓ Up to date');
+        }
+        else {
+            console.log(`📦 Update available: ${currentVersion} → ${latestVersion}`);
+            console.log('Run "exk update" to install');
+        }
+    }
+    catch (error) {
+        console.error('Failed to check for updates:', error.message);
+        process.exit(1);
+    }
+    process.exit(0);
+});
+// Run (connect to backend and process prompts)
+program
+    .command('run')
+    .description('Run CLI and connect to backend')
+    .option('--email <email>', 'Email for device approval')
+    .action((options) => {
+    runDaemon(false, options.email).catch((error) => {
+        console.error('Run error:', error.message);
+        process.exit(1);
+    });
+});
+// Hidden daemon command (internal alias)
+program
+    .command('daemon', { hidden: true })
+    .description('Run daemon (internal)')
+    .option('--foreground', 'Run in foreground', false)
+    .option('--email <email>', 'Email address')
+    .action((options) => {
+    runDaemon(options.foreground, options.email).catch((error) => {
+        console.error('Daemon error:', error.message);
+        process.exit(1);
+    });
+});
+// Enable proxy command
+program
+    .command('enable')
+    .description('Enable a feature (e.g. proxy)')
+    .argument('<feature>', 'Feature to enable (proxy)')
+    .action(async (feature) => {
+    if (feature !== 'proxy') {
+        console.error(`Unknown feature: ${feature}. Available: proxy`);
+        process.exit(1);
+    }
+    const proxyUrl = getProxyUrl();
+    if (!proxyUrl) {
+        console.log('No proxy URL configured. Run "exk daemon" first to sync config from server.');
+        process.exit(1);
+    }
+    await writeProxyConfig({ enabled: true });
+    console.log(`Proxy enabled: ${proxyUrl}`);
+    process.exit(0);
+});
+// Disable proxy command
+program
+    .command('disable')
+    .description('Disable a feature (e.g. proxy)')
+    .argument('<feature>', 'Feature to disable (proxy)')
+    .action(async (feature) => {
+    if (feature !== 'proxy') {
+        console.error(`Unknown feature: ${feature}. Available: proxy`);
+        process.exit(1);
+    }
+    await writeProxyConfig({ enabled: false });
+    console.log('Proxy disabled');
+    process.exit(0);
+});
+program.parse();