@exreve/exk 1.0.55 → 1.0.56

package/dist/index.js

@@ -1,1262 +0,0 @@
-#!/usr/bin/env node
-import { Command } from 'commander';
-import { io } from 'socket.io-client';
-import { v4 as uuidv4 } from 'uuid';
-import fs from 'fs/promises';
-import fsSync from 'fs';
-import path from 'path';
-import os, { networkInterfaces } from 'os';
-import { Buffer } from 'buffer';
-import crypto from 'crypto';
-import { createProject, deleteProject } from './projectManager.js';
-import { startSending, startReceiving } from './transferService.js';
-import { registerGitHubHandlers } from './githubHandlers.js';
-import { registerFsHandlers } from './fsHandlers.js';
-import { registerAppHandlers } from './appHandlers.js';
-import { registerSessionHandlers } from './sessionHandlers.js';
-import { registerContainerHandlers } from './containerHandlers.js';
-import { registerCloudflaredHandlers } from './cloudflaredHandlers.js';
-import { spawn, execSync } from 'child_process';
-import readline from 'readline';
-import { fileURLToPath } from 'url';
-import { createHash } from 'crypto';
-// ============ Constants ============
-const CONFIG_DIR = path.join(os.homedir(), '.talk-to-code');
-const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
-const DEVICE_ID_FILE = path.join(CONFIG_DIR, 'device-id.json');
-const DEVICE_CONFIG_FILE = path.join(CONFIG_DIR, 'device-config.json');
-const DEFAULT_API_URL = 'https://api.talk-to-code.com';
-// ============ Helpers ============
-async function readConfig() {
-    try {
-        const data = await fs.readFile(CONFIG_FILE, 'utf-8');
-        return JSON.parse(data);
-    }
-    catch {
-        return { apiUrl: DEFAULT_API_URL };
-    }
-}
-async function writeConfig(config) {
-    await fs.mkdir(CONFIG_DIR, { recursive: true });
-    await fs.writeFile(CONFIG_FILE, JSON.stringify(config, null, 2));
-}
-/**
- * Fetch AI config from server and save to ~/.talk-to-code/ai-config.json
- * Called after device registration and on daemon start
- */
-async function fetchAiConfig(authToken) {
-    try {
-        const config = await readConfig();
-        const res = await fetch(`${config.apiUrl}/config/ai`, {
-            headers: { Authorization: `Bearer ${authToken}` }
-        });
-        if (!res.ok) {
-            console.log(`[fetchAiConfig] Server returned ${res.status}`);
-            return false;
-        }
-        const data = await res.json();
-        if (!data.success || !data.aiConfig) {
-            console.log('[fetchAiConfig] No AI config available for this user');
-            return false;
-        }
-        await fs.writeFile(AI_CONFIG_FILE, JSON.stringify(data.aiConfig, null, 2));
-        console.log('[fetchAiConfig] AI config saved successfully');
-        return true;
-    }
-    catch (error) {
-        console.log(`[fetchAiConfig] Failed: ${error.message}`);
-        return false;
-    }
-}
-const AI_CONFIG_FILE = path.join(CONFIG_DIR, 'ai-config.json');
-const PROXY_CONFIG_FILE = path.join(CONFIG_DIR, 'proxy.json');
-/** Write proxy toggle state to disk */
-async function writeProxyConfig(cfg) {
-    await fs.mkdir(CONFIG_DIR, { recursive: true });
-    await fs.writeFile(PROXY_CONFIG_FILE, JSON.stringify(cfg, null, 2));
-}
-/** TTL cache for ai-config.json reads (shared by getProxyUrl / hasAiCredentials) */
-let _aiCfgCache = null;
-const _AI_CFG_TTL = 5_000;
-function readAiConfigCached() {
-    const now = Date.now();
-    if (_aiCfgCache && (now - _aiCfgCache.ts) < _AI_CFG_TTL)
-        return _aiCfgCache.raw;
-    try {
-        const raw = fsSync.readFileSync(AI_CONFIG_FILE, 'utf-8');
-        _aiCfgCache = { raw, ts: now };
-        return raw;
-    }
-    catch {
-        return '';
-    }
-}
-/** Get the proxy URL from ai-config.json (saved from backend) */
-function getProxyUrl() {
-    try {
-        const raw = readAiConfigCached();
-        if (!raw)
-            return '';
-        const j = JSON.parse(raw);
-        return typeof j.proxy === 'string' ? j.proxy.trim() : '';
-    }
-    catch {
-        return '';
-    }
-}
-/** True if ai-config.json has a model API key (not read from host ANTHROPIC_* env). */
-function hasAiCredentials() {
-    try {
-        const raw = readAiConfigCached();
-        if (!raw)
-            return false;
-        const j = JSON.parse(raw);
-        return typeof j.authToken === 'string' && j.authToken.trim().length > 0;
-    }
-    catch {
-        return false;
-    }
-}
-async function readDeviceAuthToken() {
-    const env = process.env.TTC_AUTH_TOKEN?.trim();
-    if (env)
-        return env;
-    try {
-        const raw = await fs.readFile(DEVICE_CONFIG_FILE, 'utf-8');
-        const j = JSON.parse(raw);
-        return typeof j.authToken === 'string' ? j.authToken.trim() : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-async function readDiskDeviceConfig() {
-    try {
-        const raw = await fs.readFile(DEVICE_CONFIG_FILE, 'utf-8');
-        return JSON.parse(raw);
-    }
-    catch {
-        return {};
-    }
-}
-/**
- * Update device-config.json without dropping an existing authToken.
- * Omit authToken to keep the file’s current token; pass authToken: '' to clear (rare).
- */
-async function writeDeviceConfigMerged(partial) {
-    const prev = await readDiskDeviceConfig();
-    const email = partial.email !== undefined ? partial.email : prev.email;
-    let token;
-    if (partial.authToken !== undefined) {
-        token = partial.authToken.trim() || undefined;
-    }
-    else {
-        token = typeof prev.authToken === 'string' && prev.authToken.trim() ? prev.authToken.trim() : undefined;
-    }
-    const out = {};
-    if (email)
-        out.email = email;
-    if (token)
-        out.authToken = token;
-    await fs.mkdir(CONFIG_DIR, { recursive: true });
-    await fs.writeFile(DEVICE_CONFIG_FILE, JSON.stringify(out, null, 2));
-}
-/** If AI cache is empty but we have a device JWT, try GET /config/ai once (non-fatal). */
-async function maybeFetchAiConfigIfMissing() {
-    if (hasAiCredentials())
-        return;
-    const jwt = await readDeviceAuthToken();
-    if (!jwt)
-        return;
-    const ok = await fetchAiConfig(jwt);
-    if (!ok && !hasAiCredentials()) {
-        const cfg = await readConfig();
-        console.warn(`[CLI] No AI key in ai-config.json yet. Could not sync from ${cfg.apiUrl}/config/ai — agent prompts will fail until this succeeds.`);
-    }
-}
-function scheduleAiConfigSync(authToken) {
-    void fetchAiConfig(authToken).then((ok) => {
-        if (!ok && !hasAiCredentials()) {
-            console.warn('[CLI] AI config sync failed; check backend /config/ai and apiUrl.');
-        }
-    });
-}
-async function getDeviceId() {
-    try {
-        const data = await fs.readFile(DEVICE_ID_FILE, 'utf-8');
-        return JSON.parse(data).deviceId;
-    }
-    catch {
-        const deviceId = uuidv4();
-        await fs.mkdir(CONFIG_DIR, { recursive: true });
-        await fs.writeFile(DEVICE_ID_FILE, JSON.stringify({ deviceId }, null, 2));
-        return deviceId;
-    }
-}
-function getLocalIpAddress() {
-    const nets = networkInterfaces();
-    for (const name of Object.keys(nets)) {
-        for (const net of nets[name]) {
-            if (net.family === 'IPv4' && !net.internal) {
-                return net.address;
-            }
-        }
-    }
-    return 'Unknown';
-}
-function getHostname() {
-    return os.hostname() || 'Unknown';
-}
-async function connect() {
-    const config = await readConfig();
-    const deviceId = await getDeviceId();
-    return new Promise((resolve, reject) => {
-        const socket = io(config.apiUrl, {
-            transports: ['websocket', 'polling'],
-        });
-        socket.on('connect', () => {
-            socket.emit('register', { type: 'cli', deviceId });
-            resolve(socket);
-        });
-        socket.on('registered', ({ type }) => {
-            console.log(`Connected as ${type}`);
-        });
-        socket.on('connect_error', (err) => {
-            reject(err);
-        });
-    });
-}
-// ============ Version Helpers ============
-/** Read CLI version from the npm package.json (works when installed via npm i -g @exreve/exk) */
-function getCliVersion() {
-    try {
-        // Compiled JS is in dist/, package.json is one level up
-        const pkgPath = path.join(__dirname, '..', 'package.json');
-        const raw = fsSync.readFileSync(pkgPath, 'utf-8');
-        const pkg = JSON.parse(raw);
-        return pkg.version || '0.0.0';
-    }
-    catch {
-        return '0.0.0';
-    }
-}
-const CURRENT_FILE = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(CURRENT_FILE);
-function getCliHash() {
-    return createHash('sha256').update(fsSync.readFileSync(CURRENT_FILE)).digest('hex');
-}
-async function checkForUpdate() {
-    try {
-        const config = await readConfig();
-        const res = await fetch(`${config.apiUrl}/update/check`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ hash: getCliHash(), platform: os.platform() })
-        });
-        if (!res.ok)
-            return null;
-        return await res.json();
-    }
-    catch {
-        return null;
-    }
-}
-// ============ Commands ============
-async function registerDevice(name, email) {
-    try {
-        const deviceId = await getDeviceId();
-        let deviceEmail = email;
-        // If we already have a valid token, skip approval email and just register
-        try {
-            const deviceConfig = await readDiskDeviceConfig();
-            const existingToken = deviceConfig.authToken;
-            if (existingToken && typeof existingToken === 'string') {
-                const config = await readConfig();
-                const meRes = await fetch(`${config.apiUrl}/auth/me`, {
-                    headers: { Authorization: `Bearer ${existingToken}` }
-                });
-                const meData = await meRes.json();
-                if (meRes.ok && meData.success && meData.user?.email) {
-                    console.log(`✓ Using existing auth token for ${meData.user.email}`);
-                    deviceEmail = deviceEmail || meData.user.email;
-                    const socket = await connect();
-                    await new Promise((resolve, reject) => {
-                        socket.emit('device:register', {
-                            deviceId,
-                            name: name || `CLI Device ${deviceId.slice(0, 8)}`,
-                            ipAddress: getLocalIpAddress(),
-                            hostname: getHostname(),
-                            email: deviceEmail,
-                            cliVersion: getCliVersion()
-                        }, ({ success, device, error }) => {
-                            socket.disconnect();
-                            if (success && device) {
-                                console.log(`✓ Device registered!`);
-                                console.log(`Device ID: ${device.deviceId}`);
-                                console.log(`Name: ${device.name}`);
-                                console.log(`Email: ${device.email}`);
-                                resolve();
-                            }
-                            else {
-                                reject(new Error(error || 'Registration failed'));
-                            }
-                        });
-                    });
-                    // Fetch AI config from server after registration
-                    await fetchAiConfig(existingToken);
-                    return;
-                }
-            }
-        }
-        catch {
-            // No config or invalid token - continue with approval flow
-        }
-        // Prompt for email if not provided
-        if (!deviceEmail) {
-            const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-            deviceEmail = await new Promise((resolve) => {
-                rl.question('Enter your email address: ', (answer) => {
-                    rl.close();
-                    resolve(answer.trim());
-                });
-            });
-        }
-        if (!deviceEmail?.includes('@')) {
-            console.error('✗ Valid email address is required');
-            throw new Error('Valid email address is required');
-        }
-        // Generate 32-byte random token (base64url encoded)
-        const randomBytes = crypto.randomBytes(32);
-        const approvalToken = randomBytes.toString('base64url'); // base64url encoding (no padding, URL-safe)
-        console.log(`\n📧 Sending approval request to ${deviceEmail}...`);
-        // Send approval request
-        const config = await readConfig();
-        const response = await fetch(`${config.apiUrl}/auth/approval-request`, {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json'
-            },
-            body: JSON.stringify({
-                email: deviceEmail,
-                deviceId,
-                approvalToken
-            })
-        });
-        const result = await response.json();
-        if (!result.success) {
-            console.error(`✗ Failed to send approval request: ${result.error || 'Unknown error'}`);
-            throw new Error(result.error || 'Failed to send approval request');
-        }
-        console.log(`✓ Approval email sent! Check your inbox (${deviceEmail})`);
-        console.log(`⏳ Waiting for approval...`);
-        // Poll every 5 seconds for approval
-        const maxAttempts = 120; // 10 minutes max (120 * 5s)
-        let attempts = 0;
-        const checkApproval = async () => {
-            attempts++;
-            try {
-                const statusResponse = await fetch(`${config.apiUrl}/auth/approval-status?token=${approvalToken}`);
-                const statusResult = await statusResponse.json();
-                if (statusResult.success && statusResult.approved) {
-                    return statusResult.token || null; // Return permanent auth token
-                }
-                if (statusResult.error && !statusResult.pending) {
-                    console.error(`\n✗ ${statusResult.error}`);
-                    return null;
-                }
-                return null; // Still pending
-            }
-            catch (error) {
-                console.error(`\n✗ Error checking approval status: ${error.message}`);
-                return null;
-            }
-        };
-        // Poll until approved or timeout
-        while (attempts < maxAttempts) {
-            await new Promise(resolve => setTimeout(resolve, 5000)); // Wait 5 seconds
-            const token = await checkApproval();
-            if (token) {
-                // Device approved! Store permanent token
-                await writeDeviceConfigMerged({ email: deviceEmail, authToken: token });
-                console.log(`\n✓ Device approved!`);
-                // Register device with backend and wait for completion
-                const socket = await connect();
-                await new Promise((resolve, reject) => {
-                    socket.emit('device:register', {
-                        deviceId,
-                        name: name || `CLI Device ${deviceId.slice(0, 8)}`,
-                        ipAddress: getLocalIpAddress(),
-                        hostname: getHostname(),
-                        email: deviceEmail,
-                        cliVersion: getCliVersion()
-                    }, ({ success, device, error }) => {
-                        socket.disconnect();
-                        if (success && device) {
-                            console.log(`✓ Device registered!`);
-                            console.log(`Device ID: ${device.deviceId}`);
-                            console.log(`Name: ${device.name}`);
-                            console.log(`Email: ${device.email}`);
-                            console.log(`IP Address: ${device.ipAddress || 'Unknown'}`);
-                            console.log(`Hostname: ${device.hostname || 'Unknown'}`);
-                            resolve();
-                        }
-                        else {
-                            reject(new Error(error || 'Registration failed'));
-                        }
-                    });
-                });
-                // Fetch AI config from server after registration
-                await fetchAiConfig(token);
-                return; // Successfully registered
-            }
-            // Show progress every 30 seconds
-            if (attempts % 6 === 0) {
-                process.stdout.write(`\r⏳ Still waiting... (${attempts * 5}s)`);
-            }
-        }
-        console.error(`\n✗ Approval timeout. Please check your email and try again.`);
-        throw new Error('Approval timeout');
-    }
-    catch (error) {
-        console.error('Failed to register device:', error.message);
-        throw error;
-    }
-}
-// Active sessions map - persists across reconnections
-const activeSessions = new Map();
-async function runDaemon(foreground = false, email) {
-    const config = await readConfig();
-    const deviceId = await getDeviceId();
-    const ipAddress = getLocalIpAddress();
-    const hostname = getHostname();
-    // Silent update check on startup
-    checkForUpdate().then(info => {
-        if (info?.updateAvailable)
-            console.log('📦 Update available: run "ttc update"');
-    }).catch(() => { });
-    if (foreground)
-        console.log('=== TalkToCode CLI (Foreground) ===');
-    else
-        console.log('Starting daemon...');
-    console.log(`API: ${config.apiUrl}`);
-    console.log(`Device: ${deviceId}`);
-    console.log(`Host: ${hostname}`);
-    // Test if server is reachable
-    if (foreground) {
-        try {
-            const url = new URL(config.apiUrl);
-            const testUrl = `${url.protocol}//${url.host}`;
-            console.log(`Testing connection to ${testUrl}...`);
-            const response = await fetch(testUrl, {
-                method: 'GET',
-                signal: AbortSignal.timeout(5000)
-            });
-            console.log(`✓ Server is reachable (HTTP ${response.status})`);
-        }
-        catch (error) {
-            console.error(`✗ Cannot reach server: ${error.message}`);
-            console.error(`  Make sure the backend server is running at ${config.apiUrl}`);
-        }
-    }
-    console.log('');
-    await maybeFetchAiConfigIfMissing();
-    let socket = null;
-    let reconnectTimeout = null;
-    let reconnectAttempts = 0;
-    const MAX_RECONNECT_ATTEMPTS = Infinity; // Keep trying forever
-    const connectAndRegister = async () => {
-        try {
-            // Destroy any existing socket to prevent zombie connections
-            if (socket) {
-                socket.removeAllListeners();
-                socket.disconnect();
-                socket = null;
-            }
-            socket = io(config.apiUrl, {
-                transports: ['websocket', 'polling'],
-                reconnection: true,
-                reconnectionDelay: 1000,
-                reconnectionDelayMax: 10000,
-                reconnectionAttempts: MAX_RECONNECT_ATTEMPTS,
-                timeout: 20000,
-                forceNew: true,
-                upgrade: true,
-            });
-            if (foreground) {
-                console.log(`Attempting to connect to: ${config.apiUrl}`);
-            }
-            // Register event handlers once (outside registered callback to prevent duplicates)
-            // Project handlers
-            socket.on('project:create', async (data, callback) => {
-                try {
-                    if (foreground) {
-                        console.log(`📁 Creating project: ${data.name} at ${data.path}`);
-                    }
-                    const result = await createProject({
-                        projectId: data.projectId || uuidv4(),
-                        name: data.name,
-                        path: data.path,
-                        sourcePath: data.sourcePath
-                    });
-                    if (result.success) {
-                        if (foreground) {
-                            console.log(`✓ Project created: ${data.name} at ${result.actualPath || data.path}`);
-                        }
-                        else {
-                            console.log(`Project created: ${data.name} at ${result.actualPath || data.path}`);
-                        }
-                    }
-                    else {
-                        if (foreground) {
-                            console.error(`✗ Failed to create project: ${result.error || 'Unknown error'}`);
-                        }
-                    }
-                    callback?.({
-                        success: result.success,
-                        error: result.error,
-                        actualPath: result.actualPath
-                    });
-                }
-                catch (error) {
-                    if (foreground) {
-                        console.error(`✗ Error creating project: ${error.message}`);
-                    }
-                    callback?.({ success: false, error: error.message });
-                }
-            });
-            socket.on('project:delete', async (data, callback) => {
-                try {
-                    const { projectId, path } = data;
-                    if (!path) {
-                        callback?.({ success: false, error: 'Project path required for deletion' });
-                        return;
-                    }
-                    if (foreground) {
-                        console.log(`🗑️  Deleting project: ${projectId} at ${path}`);
-                    }
-                    const result = await deleteProject(path);
-                    if (result.success) {
-                        if (foreground) {
-                            console.log(`✓ Project deleted: ${projectId} at ${path}`);
-                        }
-                        else {
-                            console.log(`Project deleted: ${projectId} at ${path}`);
-                        }
-                    }
-                    else {
-                        if (foreground) {
-                            console.error(`✗ Failed to delete project: ${result.error || 'Unknown error'}`);
-                        }
-                    }
-                    callback?.(result);
-                }
-                catch (error) {
-                    if (foreground) {
-                        console.error(`✗ Error deleting project: ${error.message}`);
-                    }
-                    callback?.({ success: false, error: error.message });
-                }
-            });
-            // GitHub handlers (delegated to githubHandlers module for proper response format)
-            registerGitHubHandlers(socket, foreground);
-            // Filesystem handlers (delegated to fsHandlers module)
-            registerFsHandlers(socket);
-            // Session handlers (delegated to sessionHandlers module)
-            registerSessionHandlers(socket, foreground, activeSessions, () => socket);
-            // App control handlers (delegated to appHandlers module)
-            registerAppHandlers(socket, foreground);
-            // Handle image save request - saves base64 images to tmp directory
-            socket.on('image:save', async (data) => {
-                try {
-                    const { images, saveCallbackId, projectPath } = data;
-                    if (foreground) {
-                        console.log(`[CLI] 🖼️  Received request to save ${images.length} image(s)`);
-                    }
-                    // Use project-specific tmp directory (inside the project)
-                    // If projectPath is provided, use it; otherwise fall back to current working directory
-                    const basePath = projectPath || process.cwd();
-                    const tmpDir = path.join(basePath, 'tmp');
-                    await fs.mkdir(tmpDir, { recursive: true });
-                    if (foreground) {
-                        console.log(`[CLI] 📁 Saving to directory: ${tmpDir}`);
-                    }
-                    let savedCount = 0;
-                    const errors = [];
-                    for (const image of images) {
-                        try {
-                            const imagePath = path.join(tmpDir, image.name);
-                            // Convert base64 to buffer and write to file
-                            const buffer = Buffer.from(image.data, 'base64');
-                            await fs.writeFile(imagePath, buffer);
-                            if (foreground) {
-                                console.log(`[CLI] ✓ Saved image: ${imagePath}`);
-                            }
-                            savedCount++;
-                        }
-                        catch (saveError) {
-                            const errorMsg = `Failed to save ${image.name}: ${saveError.message}`;
-                            errors.push(errorMsg);
-                            if (foreground) {
-                                console.error(`[CLI] ✗ ${errorMsg}`);
-                            }
-                        }
-                    }
-                    // Send response back via app:control:response
-                    console.log(`[CLI] Sending app:control:response with appControlId=${saveCallbackId}, success=${errors.length === 0}, savedCount=${savedCount}`);
-                    socket.emit('app:control:response', {
-                        appControlId: saveCallbackId,
-                        success: errors.length === 0,
-                        savedCount,
-                        error: errors.length > 0 ? errors.join('; ') : undefined
-                    });
-                    console.log(`[CLI] Emitted app:control:response`);
-                    if (foreground) {
-                        if (errors.length > 0) {
-                            console.log(`[CLI] ⚠️  Saved ${savedCount}/${images.length} images with errors`);
-                        }
-                        else {
-                            console.log(`[CLI] ✓ Successfully saved all ${savedCount} images to ${tmpDir}`);
-                        }
-                    }
-                }
-                catch (error) {
-                    console.error(`[CLI] ✗ Error saving images: ${error.message}`);
-                    // Send error response
-                    console.log(`[CLI] Sending error app:control:response with appControlId=${data.saveCallbackId}`);
-                    socket.emit('app:control:response', {
-                        appControlId: data.saveCallbackId,
-                        success: false,
-                        error: error.message
-                    });
-                    console.log(`[CLI] Emitted error app:control:response`);
-                }
-            });
-            // Handle folder transfer — this device is the source (pack & upload)
-            socket.on('transfer:pack', (data) => {
-                if (foreground) {
-                    console.log(`[transfer] Pack request: ${data.sourcePath} (${data.selectedItems?.length || 0} items) → device ${data.destDeviceId.slice(0, 8)}`);
-                }
-                startSending(socket, data, foreground);
-            });
-            // Handle folder transfer — this device is the destination (download & extract)
-            socket.on('transfer:pull', (data) => {
-                if (foreground) {
-                    console.log(`[transfer] Pull request: device ${data.sourceDeviceId.slice(0, 8)} → ${data.destPath} (${(data.totalBytes / (1024 * 1024)).toFixed(1)} MB)`);
-                }
-                startReceiving(socket, data, foreground);
-            });
-            socket.on('connect', () => {
-                if (foreground) {
-                    console.log(`✓ Connected to backend at ${config.apiUrl}`);
-                    if (socket) {
-                        console.log(`   Socket ID: ${socket.id}`);
-                    }
-                }
-                else {
-                    console.log('Connected to backend');
-                }
-                reconnectAttempts = 0;
-                // Register as CLI device
-                if (socket) {
-                    socket.emit('register', { type: 'cli', deviceId });
-                }
-            });
-            socket.on('registered', async ({ type }) => {
-                if (foreground) {
-                    console.log(`✓ Registered as ${type}`);
-                }
-                else {
-                    console.log(`Registered as ${type}`);
-                }
-                // Check for auth token: env TTC_AUTH_TOKEN or device-config.json (from previous approval)
-                let authToken = process.env.TTC_AUTH_TOKEN;
-                let deviceEmail = email;
-                let skipEmailFlow = false;
-                // Load from device-config if no env token (reuse state from previous approval)
-                if (!authToken) {
-                    try {
-                        const deviceConfig = await readDiskDeviceConfig();
-                        authToken = deviceConfig.authToken;
-                        if (!deviceEmail && deviceConfig.email)
-                            deviceEmail = deviceConfig.email;
-                    }
-                    catch {
-                        // No device config yet
-                    }
-                }
-                if (authToken) {
-                    try {
-                        const parts = authToken.split('.');
-                        if (parts.length === 3) {
-                            const payload = JSON.parse(Buffer.from(parts[1], 'base64').toString());
-                            if (payload.type === 'device_auth' && payload.email) {
-                                deviceEmail = payload.email;
-                                skipEmailFlow = true;
-                                if (foreground) {
-                                    console.log(`✓ Using stored auth token for ${deviceEmail}`);
-                                }
-                            }
-                        }
-                    }
-                    catch (err) {
-                        if (foreground) {
-                            console.warn(`⚠️  Invalid auth token in config, falling back to normal auth`);
-                        }
-                        authToken = undefined;
-                    }
-                }
-                // Load device email from config if not using token and not provided
-                if (!deviceEmail && !skipEmailFlow) {
-                    try {
-                        const deviceConfig = await readDiskDeviceConfig();
-                        deviceEmail = deviceConfig.email;
-                    }
-                    catch {
-                        // No device config yet
-                    }
-                }
-                // Register device with backend
-                let needsApprovalLoggedOnce = false;
-                const registerDevice = () => {
-                    // Determine device name
-                    const containerName = process.env.CONTAINER_NAME;
-                    const deviceName = containerName ? `Container: ${containerName}` : `CLI Device ${hostname}`;
-                    socket.emit('device:register', {
-                        deviceId,
-                        name: deviceName,
-                        ipAddress,
-                        hostname,
-                        email: deviceEmail,
-                        cliVersion: getCliVersion(),
-                        // When using auth token, include the token for verification
-                        authToken: skipEmailFlow ? authToken : undefined
-                    }, ({ success, needsApproval, message, device, error }) => {
-                        if (success && device) {
-                            needsApprovalLoggedOnce = false;
-                            if (foreground) {
-                                console.log(`✓ Device registered: ${device.name}`);
-                                if (device.approved) {
-                                    console.log(`✓ Device approved and ready`);
-                                }
-                            }
-                            else {
-                                console.log(`Device registered: ${device.name}${device.approved ? ' (approved)' : ' (pending approval)'}`);
-                            }
-                            // Save config: merge email; keep existing file authToken if in-memory token absent
-                            if (device.email) {
-                                void writeDeviceConfigMerged({
-                                    email: device.email,
-                                    ...(authToken ? { authToken } : {}),
-                                }).catch(() => { });
-                            }
-                            if (authToken) {
-                                scheduleAiConfigSync(authToken);
-                            }
-                        }
-                        else if (needsApproval) {
-                            // Persist email when approval was requested; do not wipe authToken
-                            if (deviceEmail) {
-                                void writeDeviceConfigMerged({ email: deviceEmail }).catch(() => { });
-                            }
-                            // Only log once to avoid flooding logs every 30s on heartbeat
-                            if (!needsApprovalLoggedOnce) {
-                                needsApprovalLoggedOnce = true;
-                                if (foreground) {
-                                    console.log(`\n⚠️  ${message || 'Device approval required'}`);
-                                    if (!deviceEmail) {
-                                        console.log(`   Please run: npx tsx index.ts register --email your@email.com`);
-                                    }
-                                    else {
-                                        console.log(`   Check your email (${deviceEmail}) and click the approval link.`);
-                                    }
-                                }
-                                else {
-                                    console.log(`⚠️  Device approval required: ${message || 'Please approve device'}`);
-                                }
-                            }
-                        }
-                        else if (error) {
-                            console.error(`✗ Registration error: ${error}`);
-                        }
-                    });
-                };
-                registerDevice();
-                // Update lastSeen every 30 seconds while connected
-                const heartbeatInterval = setInterval(() => {
-                    if (socket?.connected) {
-                        registerDevice();
-                    }
-                    else {
-                        clearInterval(heartbeatInterval);
-                    }
-                }, 30000);
-                socket.heartbeatInterval = heartbeatInterval;
-            });
-            // ========== Version & Update Handlers ==========
-            // Respond with CLI version info
-            socket.on('version:info', (_data, callback) => {
-                callback({
-                    success: true,
-                    version: getCliVersion(),
-                    hash: getCliHash(),
-                    date: new Date().toISOString(),
-                    nodeVersion: process.version,
-                    platform: os.platform(),
-                    arch: os.arch()
-                });
-            });
-            // Force update: npm update -g @exreve/exk then restart PM2
-            socket.on('force-update', (_data, callback) => {
-                if (foreground) {
-                    console.log('[force-update] Received force update command from server');
-                }
-                callback?.({ success: true, message: 'Update initiated' });
-                // Run npm update in background, then restart
-                const npmPaths = [
-                    path.join(os.homedir(), '.nvm/versions/node/v22/bin/npm'),
-                    path.join(os.homedir(), '.nvm/versions/node/v20/bin/npm')
-                ];
-                const npmBin = npmPaths.find(p => fsSync.existsSync(p)) || 'npm';
-                const updateProcess = spawn(npmBin, ['update', '-g', '@exreve/exk'], {
-                    stdio: 'pipe',
-                    detached: true
-                });
-                let output = '';
-                updateProcess.stdout?.on('data', (d) => { output += d.toString(); });
-                updateProcess.stderr?.on('data', (d) => { output += d.toString(); });
-                updateProcess.on('close', (code) => {
-                    if (foreground) {
-                        console.log(`[force-update] npm update exited with code ${code}`);
-                        if (output)
-                            console.log(output);
-                    }
-                    // Restart PM2 process "cli" after a short delay
-                    setTimeout(() => {
-                        try {
-                            execSync('pm2 restart cli', { stdio: 'inherit' });
-                        }
-                        catch {
-                            // If pm2 restart fails, just exit and let pm2 restart us
-                            process.exit(0);
-                        }
-                    }, 2000);
-                });
-                updateProcess.on('error', (err) => {
-                    if (foreground) {
-                        console.error(`[force-update] npm update failed: ${err.message}`);
-                    }
-                });
-            });
-            // ========== update:start handler (legacy compatibility) ==========
-            socket.on('update:start', (_data, callback) => {
-                // Use npm-based self-update
-                if (foreground) {
-                    console.log('[update:start] Starting npm self-update...');
-                }
-                callback?.({ success: true, message: 'Update started via npm' });
-                const npmPaths = [
-                    path.join(os.homedir(), '.nvm/versions/node/v22/bin/npm'),
-                    path.join(os.homedir(), '.nvm/versions/node/v20/bin/npm')
-                ];
-                const npmBin = npmPaths.find(p => fsSync.existsSync(p)) || 'npm';
-                const updateProcess = spawn(npmBin, ['update', '-g', '@exreve/exk'], {
-                    stdio: 'pipe',
-                    detached: true
-                });
-                updateProcess.on('close', () => {
-                    setTimeout(() => {
-                        try {
-                            execSync('pm2 restart cli', { stdio: 'inherit' });
-                        }
-                        catch {
-                            process.exit(0);
-                        }
-                    }, 2000);
-                });
-            });
-            // Cloudflared handlers (delegated to cloudflaredHandlers module)
-            registerCloudflaredHandlers(socket, foreground);
-            // Container handlers (delegated to containerHandlers module)
-            registerContainerHandlers(socket, foreground, __dirname);
-            socket.on('disconnect', (reason) => {
-                if (foreground) {
-                    console.log(`\n⚠️  Disconnected: ${reason}`);
-                    console.log('   Attempting to reconnect...');
-                }
-                else {
-                    console.log(`Disconnected: ${reason}`);
-                }
-                // Clear heartbeat interval
-                if (socket.heartbeatInterval) {
-                    clearInterval(socket.heartbeatInterval);
-                }
-                if (reason === 'io server disconnect') {
-                    // Server disconnected, reconnect manually
-                    socket.connect();
-                }
-                else {
-                    // Client disconnect or transport close: schedule full reconnect so process stays alive
-                    if (reconnectTimeout)
-                        clearTimeout(reconnectTimeout);
-                    const delay = 2000;
-                    if (!foreground)
-                        console.log(`Reconnecting in ${delay}ms...`);
-                    reconnectTimeout = setTimeout(connectAndRegister, delay);
-                }
-            });
-            socket.on('connect_error', (err) => {
-                reconnectAttempts++;
-                if (foreground) {
-                    console.error(`✗ Connection error (attempt ${reconnectAttempts}): ${err.message}`);
-                    if (err.type) {
-                        console.error(`   Error type: ${err.type}`);
-                    }
-                    if (err.description) {
-                        console.error(`   Error description: ${err.description}`);
-                    }
-                    console.error(`   Connecting to: ${config.apiUrl}`);
-                    if (err.cause) {
-                        console.error(`   Cause:`, err.cause);
-                    }
-                }
-                else {
-                    console.error(`Connection error (attempt ${reconnectAttempts}):`, err.message);
-                }
-            });
-            // Keep process alive
-            socket.on('error', (err) => {
-                if (foreground) {
-                    console.error(`✗ Socket error: ${err}`);
-                }
-                else {
-                    console.error('Socket error:', err);
-                }
-            });
-        }
-        catch (error) {
-            if (foreground) {
-                console.error(`✗ Failed to connect: ${error.message}`);
-            }
-            else {
-                console.error('Failed to connect:', error.message);
-            }
-            reconnectAttempts++;
-            if (reconnectAttempts < MAX_RECONNECT_ATTEMPTS) {
-                const delay = Math.min(1000 * Math.pow(2, reconnectAttempts), 30000);
-                if (foreground) {
-                    console.log(`⏳ Reconnecting in ${delay}ms...`);
-                }
-                else {
-                    console.log(`Reconnecting in ${delay}ms...`);
-                }
-                reconnectTimeout = setTimeout(connectAndRegister, delay);
-            }
-        }
-    };
-    // Handle graceful shutdown
-    const shutdown = () => {
-        if (foreground) {
-            console.log('\n\n🛑 Shutting down gracefully...');
-        }
-        else {
-            console.log('\nShutting down...');
-        }
-        if (reconnectTimeout) {
-            clearTimeout(reconnectTimeout);
-        }
-        if (socket) {
-            // Clear heartbeat interval
-            if (socket.heartbeatInterval) {
-                clearInterval(socket.heartbeatInterval);
-            }
-            socket.disconnect();
-        }
-        process.exit(0);
-    };
-    process.on('SIGTERM', shutdown);
-    process.on('SIGINT', shutdown);
-    process.on('SIGHUP', shutdown);
-    // Start connection
-    await connectAndRegister();
-    // Keep process alive
-    process.stdin.resume();
-}
-// ============ CLI Program ============
-const program = new Command();
-program
-    .name('exk')
-    .description('exk - Control Claude CLI with voice and programmable interfaces')
-    .version(getCliVersion());
-// Config command
-program
-    .command('config')
-    .description('Get or set config (api-url)')
-    .option('--api-url <url>', 'API base URL')
-    .action(async (opts) => {
-    const config = await readConfig();
-    if (opts.apiUrl !== undefined) {
-        config.apiUrl = opts.apiUrl;
-        await writeConfig(config);
-        console.log('Set api-url:', config.apiUrl);
-    }
-    else {
-        console.log('Config:', JSON.stringify(config, null, 2));
-    }
-    process.exit(0);
-});
-// Register command
-program
-    .command('register')
-    .description('Register this device and install as persistent daemon')
-    .argument('[email]', 'Email address for device approval')
-    .action(async (email) => {
-    try {
-        // First register the device
-        await registerDevice(undefined, email);
-        // After successful registration, install as PM2 service (Linux/macOS only)
-        if (process.platform === 'win32') {
-            console.log('\n✓ Device registered.');
-            console.log('On Windows, run the daemon manually: exk daemon');
-        }
-        else {
-            console.log('\n📦 Installing exk daemon with pm2...');
-            const exkBin = process.argv[1] || 'exk';
-            try {
-                // Check if pm2 is installed
-                try {
-                    execSync('which pm2', { stdio: 'ignore' });
-                }
-                catch {
-                    console.log('Installing pm2...');
-                    execSync('npm i -g pm2', { stdio: 'inherit' });
-                }
-                // Delete existing pm2 process if any, then start fresh
-                try {
-                    execSync('pm2 delete cli 2>/dev/null', { stdio: 'ignore' });
-                }
-                catch { }
-                // Start exk daemon with pm2
-                execSync(`pm2 start "${exkBin}" --name cli --interpreter none -- daemon`, {
-                    stdio: 'inherit'
-                });
-                // Configure pm2 to start on boot (creates systemd/launchd service)
-                let startupConfigured = false;
-                try {
-                    const startupResult = execSync('pm2 startup 2>&1', { encoding: 'utf-8' });
-                    if (startupResult.includes('sudo') || startupResult.includes('[PM2] You have to run')) {
-                        // pm2 startup needs sudo - try running the suggested command
-                        const match = startupResult.match(/(sudo .+)/);
-                        if (match) {
-                            console.log('\n⚙ PM2 startup requires admin privileges.');
-                            console.log('Run this command to enable auto-start on reboot:');
-                            console.log(`  ${match[1]}`);
-                        }
-                    }
-                    else {
-                        startupConfigured = true;
-                    }
-                }
-                catch (err) {
-                    const execErr = err;
-                    const output = execErr.stderr || '';
-                    const match = output.match(/(sudo .+)/);
-                    if (match) {
-                        console.log('\n⚙ PM2 startup requires admin privileges.');
-                        console.log('Run this command to enable auto-start on reboot:');
-                        console.log(`  ${match[1]}`);
-                    }
-                    // Non-critical - pm2 startup may need sudo
-                }
-                // Save pm2 process list for auto-restart on reboot
-                try {
-                    execSync('pm2 save', { stdio: 'inherit' });
-                }
-                catch {
-                    // Non-critical
-                }
-                console.log('\n✓ exk installation complete!');
-                console.log('The service is now running in the background.');
-                if (startupConfigured) {
-                    console.log('✓ Auto-start on reboot is configured.');
-                }
-                console.log('\nUseful commands:');
-                console.log('  pm2 logs cli     - View logs');
-                console.log('  pm2 restart cli  - Restart service');
-                console.log('  pm2 stop cli     - Stop service');
-                console.log('  pm2 delete cli   - Remove service');
-            }
-            catch (err) {
-                const error = err;
-                console.log('\n⚠ PM2 installation had issues, but device is registered.');
-                const execErr = error;
-                const errDetail = execErr.stderr?.toString() || execErr.stdout?.toString() || error.message;
-                if (errDetail)
-                    console.error('Error:', errDetail);
-                console.log('You can start the daemon manually with: exk daemon');
-            }
-        }
-    }
-    catch (error) {
-        const err = error;
-        const errorMsg = err.message || String(error);
-        if (errorMsg.includes('approval') || errorMsg.includes('email')) {
-            // Registration failed - exit with error
-            process.exit(1);
-        }
-        // Service installation failed, but device is registered
-        console.log('\n⚠ Service installation had issues, but device is registered.');
-        console.error('Error:', err.stderr?.toString() || errorMsg);
-        console.log('You can start the daemon manually with: exk daemon');
-    }
-    // Exit after install is complete
-    process.exit(0);
-});
-// Uninstall command
-program
-    .command('uninstall')
-    .description('Uninstall exk daemon (removes pm2 service and config)')
-    .action(async () => {
-    console.log('Uninstalling exk daemon...');
-    if (process.platform === 'win32') {
-        console.log('On Windows there is no service to remove.');
-        console.log('To remove exk completely: npm uninstall -g @exreve/exk');
-    }
-    else {
-        try {
-            execSync('pm2 delete cli', { stdio: 'inherit' });
-            try {
-                execSync('pm2 save', { stdio: 'inherit' });
-            }
-            catch { /* non-critical */ }
-            console.log('\n✓ Service uninstalled!');
-            console.log('To remove the package completely: npm uninstall -g @exreve/exk');
-        }
-        catch {
-            console.log('\n⚠ PM2 service not found or already removed.');
-            console.log('To remove exk: npm uninstall -g @exreve/exk');
-            console.log('  rm -rf ~/.talk-to-code');
-        }
-    }
-    // Exit after uninstall is complete
-    process.exit(0);
-});
-// Update command - uses npm to update the global package
-program
-    .command('update')
-    .description('Update exk to the latest version via npm')
-    .option('-f, --force', 'Update without confirmation')
-    .action(async (options) => {
-    const currentVersion = getCliVersion();
-    console.log(`Current version: ${currentVersion}`);
-    // Check latest version from npm
-    try {
-        const latestVersion = execSync('npm view @exreve/exk version', { encoding: 'utf-8' }).trim();
-        console.log(`Latest version: ${latestVersion}`);
-        if (latestVersion === currentVersion) {
-            console.log('✓ Already up to date');
-            process.exit(0);
-        }
-        if (!options.force && process.stdin.isTTY) {
-            const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-            const answer = await new Promise(r => rl.question('Update now? [Y/n] ', a => { rl.close(); r(a.trim()); }));
-            if (answer.toLowerCase().startsWith('n')) {
-                process.exit(0);
-            }
-        }
-        console.log('Updating...');
-        execSync('npm i -g @exreve/exk@latest', { stdio: 'inherit' });
-        console.log(`\n✓ Updated to ${latestVersion}`);
-        // Restart PM2 if running
-        try {
-            execSync('pm2 restart cli', { stdio: 'inherit' });
-        }
-        catch {
-            // Not running under PM2, that's fine
-        }
-    }
-    catch (error) {
-        console.error('Update failed:', error.message);
-        process.exit(1);
-    }
-    process.exit(0);
-});
-program
-    .command('check-update')
-    .description('Check for updates')
-    .action(async () => {
-    const currentVersion = getCliVersion();
-    console.log(`Current version: ${currentVersion}`);
-    try {
-        const latestVersion = execSync('npm view @exreve/exk version', { encoding: 'utf-8' }).trim();
-        console.log(`Latest version: ${latestVersion}`);
-        if (latestVersion === currentVersion) {
-            console.log('✓ Up to date');
-        }
-        else {
-            console.log(`📦 Update available: ${currentVersion} → ${latestVersion}`);
-            console.log('Run "exk update" to install');
-        }
-    }
-    catch (error) {
-        console.error('Failed to check for updates:', error.message);
-        process.exit(1);
-    }
-    process.exit(0);
-});
-// Run (connect to backend and process prompts)
-program
-    .command('run')
-    .description('Run CLI and connect to backend')
-    .option('--email <email>', 'Email for device approval')
-    .action((options) => {
-    runDaemon(false, options.email).catch((error) => {
-        console.error('Run error:', error.message);
-        process.exit(1);
-    });
-});
-// Hidden daemon command (internal alias)
-program
-    .command('daemon', { hidden: true })
-    .description('Run daemon (internal)')
-    .option('--foreground', 'Run in foreground', false)
-    .option('--email <email>', 'Email address')
-    .action((options) => {
-    runDaemon(options.foreground, options.email).catch((error) => {
-        console.error('Daemon error:', error.message);
-        process.exit(1);
-    });
-});
-// Enable proxy command
-program
-    .command('enable')
-    .description('Enable a feature (e.g. proxy)')
-    .argument('<feature>', 'Feature to enable (proxy)')
-    .action(async (feature) => {
-    if (feature !== 'proxy') {
-        console.error(`Unknown feature: ${feature}. Available: proxy`);
-        process.exit(1);
-    }
-    const proxyUrl = getProxyUrl();
-    if (!proxyUrl) {
-        console.log('No proxy URL configured. Run "exk daemon" first to sync config from server.');
-        process.exit(1);
-    }
-    await writeProxyConfig({ enabled: true });
-    console.log(`Proxy enabled: ${proxyUrl}`);
-    process.exit(0);
-});
-// Disable proxy command
-program
-    .command('disable')
-    .description('Disable a feature (e.g. proxy)')
-    .argument('<feature>', 'Feature to disable (proxy)')
-    .action(async (feature) => {
-    if (feature !== 'proxy') {
-        console.error(`Unknown feature: ${feature}. Available: proxy`);
-        process.exit(1);
-    }
-    await writeProxyConfig({ enabled: false });
-    console.log('Proxy disabled');
-    process.exit(0);
-});
-program.parse();