@hivefloor/cli 0.1.4 → 0.1.8

package/dist/{chunk-DNG5CRT3.js → chunk-K2IRTZH5.js}

@@ -1,12 +1,14 @@
 #!/usr/bin/env node
+import { createRequire as __hfCreateRequire } from 'node:module';
+const require = __hfCreateRequire(import.meta.url);
 
 // package.json
 var package_default = {
   name: "@hivefloor/cli",
-  version: "0.1.4",
-  description: "Connect your coding agents (Claude Code, Codex, Cursor, Gemini, Grok) to Hivefloor: live presence, task coordination and usage on one floor.",
+  version: "0.1.8",
+  description: "Connect your coding agents (Claude Code, Codex, Cursor, Gemini, Grok) to HiveFloor: live presence, task coordination and usage on one floor.",
   author: {
-    name: "Errr0rr404",
+    name: "Zan",
     url: "https://github.com/Errr0rr404"
   },
   keywords: [
@@ -21,14 +23,13 @@ var package_default = {
   ],
   homepage: "https://hivefloor.worldofz.info",
   bugs: {
-    url: "https://github.com/Errr0rr404/hivefloor/issues"
+    url: "https://github.com/Errr0rr404/hivefloor-cli/issues"
   },
   repository: {
     type: "git",
-    url: "git+https://github.com/Errr0rr404/hivefloor.git",
-    directory: "packages/cli"
+    url: "git+https://github.com/Errr0rr404/hivefloor-cli.git"
   },
-  license: "MIT",
+  license: "UNLICENSED",
   type: "module",
   bin: {
     hivefloor: "dist/index.js"

package/dist/chunk-KQMPCV57.js

@@ -0,0 +1,122 @@
+#!/usr/bin/env node
+import { createRequire as __hfCreateRequire } from 'node:module';
+const require = __hfCreateRequire(import.meta.url);
+import {
+  atomicWrite,
+  controlFile,
+  isRecord
+} from "./chunk-XPGL7VYE.js";
+
+// src/service/control/config.ts
+import fs from "fs";
+import path from "path";
+var VERBS = ["message", "approve", "deny", "stop", "resume", "peek"];
+var allOff = () => ({ version: 1, enabled: false, verbs: { message: false, approve: false, deny: false, stop: false, resume: false, peek: false }, from: "owner", replies: "after_message", adapters: [], orchestrator: false, orchestrator_full: false });
+var MAX_CONTROL_BYTES = 1024 * 1024;
+function statTrouble(file, st) {
+  if (!st.isFile()) return `${file} is not a regular file`;
+  if (process.platform === "win32") return void 0;
+  if (typeof process.getuid === "function" && st.uid !== process.getuid()) return `${file} is owned by another user`;
+  if ((st.mode & 18) !== 0) return `${file} is writable by group or others (chmod 600 it)`;
+  return void 0;
+}
+function fileTrouble(file) {
+  let st;
+  try {
+    st = fs.lstatSync(file);
+  } catch {
+    return void 0;
+  }
+  if (st.isSymbolicLink()) return `${file} is a symbolic link`;
+  return statTrouble(file, st);
+}
+function dirTrouble(dir) {
+  if (process.platform === "win32") return void 0;
+  let st;
+  try {
+    st = fs.statSync(dir);
+  } catch {
+    return void 0;
+  }
+  if (!st.isDirectory()) return `${dir} is not a folder`;
+  if (typeof process.getuid === "function" && st.uid !== process.getuid()) return `${dir} is owned by another user`;
+  if ((st.mode & 18) !== 0) return `${dir} is writable by group or others (chmod 700 it)`;
+  return void 0;
+}
+function sanitize(j) {
+  const c = allOff();
+  c.enabled = j.enabled === true;
+  const v = isRecord(j.verbs) ? j.verbs : {};
+  for (const k of VERBS) c.verbs[k] = v[k] === true;
+  c.from = j.from === "admins" ? "admins" : "owner";
+  c.orchestrator = j.orchestrator === true;
+  c.orchestrator_full = j.orchestrator_full === true;
+  c.replies = j.replies === "off" || j.replies === "always" ? j.replies : "after_message";
+  if (Array.isArray(j.adapters)) {
+    for (const a of j.adapters) {
+      if (!isRecord(a) || typeof a.name !== "string" || typeof a.exec !== "string") continue;
+      const verbs = Array.isArray(a.verbs) ? a.verbs.filter((x) => VERBS.includes(x)) : [];
+      const tools = Array.isArray(a.tools) ? a.tools.filter((x) => typeof x === "string") : [];
+      c.adapters.push({ name: a.name.slice(0, 60), exec: a.exec, verbs, tools });
+    }
+  }
+  return c;
+}
+function readControl(file = controlFile()) {
+  const bad = (reason) => ({ state: "invalid", reason, config: allOff() });
+  const trouble = dirTrouble(path.dirname(file)) ?? fileTrouble(file);
+  if (trouble) return bad(trouble);
+  let fd;
+  try {
+    fd = fs.openSync(file, fs.constants.O_RDONLY | (fs.constants.O_NOFOLLOW ?? 0) | (fs.constants.O_NONBLOCK ?? 0));
+  } catch (e) {
+    const code = e.code;
+    if (code === "ENOENT") return { state: "missing", config: allOff() };
+    if (code === "ELOOP" || code === "EMLINK") return bad(`${file} is a symbolic link`);
+    return bad(`${file} cannot be read`);
+  }
+  let text;
+  try {
+    const st = fs.fstatSync(fd);
+    const t = statTrouble(file, st);
+    if (t) return bad(t);
+    if (st.size > MAX_CONTROL_BYTES) return bad(`${file} is too large`);
+    text = fs.readFileSync(fd, "utf8");
+  } catch {
+    return bad(`${file} cannot be read`);
+  } finally {
+    fs.closeSync(fd);
+  }
+  try {
+    const j = JSON.parse(text);
+    if (!isRecord(j)) return { state: "invalid", reason: `${file} is not a JSON object`, config: allOff() };
+    return { state: "ok", config: sanitize(j) };
+  } catch {
+    return { state: "invalid", reason: `${file} is not valid JSON`, config: allOff() };
+  }
+}
+function activeVerbs(r) {
+  const out = allOff().verbs;
+  if (r.state !== "ok" || !r.config.enabled) return out;
+  for (const k of VERBS) out[k] = r.config.verbs[k];
+  return out;
+}
+var orchestratorOn = (r) => r.state === "ok" && r.config.enabled && r.config.orchestrator;
+var orchestratorFullOn = (r) => orchestratorOn(r) && r.config.orchestrator_full === true;
+var controlOn = (r) => Object.values(activeVerbs(r)).some(Boolean);
+function writeControl(c, file = controlFile()) {
+  fs.mkdirSync(path.dirname(file), { recursive: true, mode: 448 });
+  atomicWrite(file, `${JSON.stringify(c, null, 2)}
+`, 384);
+}
+
+export {
+  VERBS,
+  allOff,
+  readControl,
+  activeVerbs,
+  orchestratorOn,
+  orchestratorFullOn,
+  controlOn,
+  writeControl
+};

package/dist/{chunk-UJ4BQFWV.js → chunk-L6EFW2SJ.js}

@@ -1,30 +1,40 @@
 #!/usr/bin/env node
+import { createRequire as __hfCreateRequire } from 'node:module';
+const require = __hfCreateRequire(import.meta.url);
 import {
   home,
   isDir,
   isRecord,
   readText
-} from "./chunk-VNCQFFQO.js";
+} from "./chunk-XPGL7VYE.js";
 import {
   PROFILE_KEY_RE
-} from "./chunk-ZC2DAKB5.js";
+} from "./chunk-HWBUESB4.js";
 
 // src/profiles.ts
 import fs from "fs";
 import path from "path";
-function profileKeyOf(tool, dir, homeDir = home()) {
-  const std = tool === "claude" ? path.join(homeDir, ".claude") : path.join(homeDir, ".codex");
-  if (path.resolve(dir) === path.resolve(std)) return "default";
-  let base = path.basename(path.resolve(dir)).toLowerCase().replace(/^\.+/, "");
+function pathFor(platform) {
+  return platform === "win32" ? path.win32 : path;
+}
+function resolvedKey(dir, platform) {
+  const r = pathFor(platform).resolve(dir);
+  return platform === "win32" ? r.toLowerCase() : r;
+}
+function profileKeyOf(tool, dir, homeDir = home(), platform = process.platform) {
+  const p = pathFor(platform);
+  const std = tool === "claude" ? p.join(homeDir, ".claude") : p.join(homeDir, ".codex");
+  if (resolvedKey(dir, platform) === resolvedKey(std, platform)) return "default";
+  let base = p.basename(p.resolve(dir)).toLowerCase().replace(/^\.+/, "");
   base = base.replace(new RegExp(`^${tool}[-_.]?`), "").replace(new RegExp(`[-_.]?${tool}$`), "");
   base = base.replace(/[^a-z0-9._-]+/g, "-").replace(/^[^a-z0-9]+/, "").slice(0, 40);
   return PROFILE_KEY_RE.test(base) ? base : "profile";
 }
-function profileKeys(tool, dirs, homeDir = home()) {
+function profileKeys(tool, dirs, homeDir = home(), platform = process.platform) {
   const out = /* @__PURE__ */ new Map();
   const used = /* @__PURE__ */ new Set();
   for (const d of dirs) {
-    out.set(d, uniqueProfileKey(profileKeyOf(tool, d, homeDir), used));
+    out.set(d, uniqueProfileKey(profileKeyOf(tool, d, homeDir, platform), used));
   }
   return out;
 }
@@ -38,17 +48,27 @@ function uniqueProfileKey(base, used) {
   used.add(k);
   return k;
 }
-var RC_FILES = [".zshrc", ".zprofile", ".zshenv", ".bashrc", ".bash_profile", ".profile", ".config/fish/config.fish"];
+var RC_FILES = [
+  ".zshrc",
+  ".zprofile",
+  ".zshenv",
+  ".bashrc",
+  ".bash_profile",
+  ".profile",
+  ".config/fish/config.fish",
+  ["Documents", "PowerShell", "Microsoft.PowerShell_profile.ps1"],
+  ["Documents", "WindowsPowerShell", "Microsoft.PowerShell_profile.ps1"]
+];
 function claudeDirsFromRc(homeDir = home()) {
   const found = [];
   for (const rel of RC_FILES) {
-    const text = readText0(path.join(homeDir, rel));
+    const text = readText0(Array.isArray(rel) ? path.join(homeDir, ...rel) : path.join(homeDir, rel));
     if (!text) continue;
     for (const line of text.split("\n")) {
       if (/^\s*#/.test(line)) continue;
-      for (const m of line.matchAll(/CLAUDE_CONFIG_DIR(?:=|\s+)(?:"([^"\n]+)"|'([^'\n]+)'|([^\s"'`;&|)]+))/g)) {
+      for (const m of line.matchAll(/CLAUDE_CONFIG_DIR\s*(?:=\s*|\s+)(?:"([^"\n]+)"|'([^'\n]+)'|([^\s"'`;&|)]+))/g)) {
         const raw = (m[1] ?? m[2] ?? m[3] ?? "").trim();
-        const dir = expand(raw, homeDir);
+        const dir = expandHome(raw, homeDir);
         if (dir && isDir(dir)) found.push(dir);
       }
     }
@@ -62,11 +82,10 @@ function readText0(file) {
     return void 0;
   }
 }
-function expand(raw, homeDir) {
-  let s = raw.replace(/^~(?=\/|$)/, homeDir).replace(/\$\{?HOME\}?/g, homeDir);
-  if (/[$`]/.test(s) || !path.isAbsolute(s)) return void 0;
-  s = path.resolve(s);
-  return s;
+function expandHome(raw, homeDir, p = path) {
+  const s = raw.replace(/^~(?=[/\\]|$)/, () => homeDir).replace(/\$\{?HOME\}?/g, () => homeDir);
+  if (/[$`]/.test(s) || !p.isAbsolute(s)) return void 0;
+  return p.resolve(s);
 }
 function claudeSiblingDirs(homeDir = home()) {
   const out = [];
@@ -87,15 +106,16 @@ function claudeSiblingDirs(homeDir = home()) {
   }
   return out;
 }
-function claudeConfigDirs(fromProcesses, homeDir = home()) {
-  const all = [path.join(homeDir, ".claude"), ...fromProcesses, ...claudeDirsFromRc(homeDir), ...claudeSiblingDirs(homeDir)];
+function claudeConfigDirs(fromProcesses, homeDir = home(), platform = process.platform) {
+  const p = pathFor(platform);
+  const all = [p.join(homeDir, ".claude"), ...fromProcesses, ...claudeDirsFromRc(homeDir), ...claudeSiblingDirs(homeDir)];
   const seen = /* @__PURE__ */ new Set();
   const out = [];
   for (const d of all) {
-    const r = path.resolve(d);
-    if (seen.has(r)) continue;
-    seen.add(r);
-    out.push(r);
+    const key = resolvedKey(d, platform);
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push(p.resolve(d));
   }
   return out;
 }
@@ -103,14 +123,16 @@ function codexConfigDir(env = process.env) {
   return env.CODEX_HOME ? path.resolve(env.CODEX_HOME) : path.join(home(), ".codex");
 }
 var PLAN = { max: "Max", pro: "Pro", team: "Team", enterprise: "Enterprise", free: "Free" };
-function claudeLabel(dir, key) {
-  let plan;
-  try {
-    const j = JSON.parse(fs.readFileSync(path.join(dir, ".credentials.json"), "utf8"));
-    const oauth = isRecord(j) ? j.claudeAiOauth : void 0;
-    const t = isRecord(oauth) ? oauth.subscriptionType : void 0;
-    if (typeof t === "string") plan = PLAN[t.toLowerCase()];
-  } catch {
+function claudeLabel(dir, key, tokenPlan) {
+  let plan = tokenPlan;
+  if (!plan) {
+    try {
+      const j = JSON.parse(fs.readFileSync(path.join(dir, ".credentials.json"), "utf8"));
+      const oauth = isRecord(j) ? j.claudeAiOauth : void 0;
+      const t = isRecord(oauth) ? oauth.subscriptionType : void 0;
+      if (typeof t === "string") plan = PLAN[t.toLowerCase()];
+    } catch {
+    }
   }
   return `Claude${plan ? ` ${plan}` : ""} (${key})`;
 }

package/dist/{chunk-T7TG6WA4.js → chunk-LX5A25O6.js}

@@ -1,4 +1,6 @@
 #!/usr/bin/env node
+import { createRequire as __hfCreateRequire } from 'node:module';
+const require = __hfCreateRequire(import.meta.url);
 import {
   atomicWrite,
   configDir,
@@ -6,7 +8,7 @@ import {
   machineFile,
   readText,
   serviceStateFile
-} from "./chunk-VNCQFFQO.js";
+} from "./chunk-XPGL7VYE.js";
 
 // src/machine.ts
 import fs from "fs";
@@ -61,7 +63,7 @@ async function secureWindowsMachine(run, username = os.userInfo().username) {
     if (f.code === 0) return;
   }
   removeMachineFile();
-  throw new Error("could not restrict the Hivefloor config to your Windows user with icacls; the machine token was not kept");
+  throw new Error("could not restrict the HiveFloor config to your Windows user with icacls; the machine token was not kept");
 }
 var SERVICE_ALIVE_MS = 9e4;
 function readServiceState() {

package/dist/{chunk-W7DROKC7.js → chunk-MYJCU5JL.js}

@@ -1,11 +1,17 @@
 #!/usr/bin/env node
+import { createRequire as __hfCreateRequire } from 'node:module';
+const require = __hfCreateRequire(import.meta.url);
 import {
   claudeConfigDirs,
   claudeLabel,
   codexConfigDir,
   codexLabel,
   profileKeys
-} from "./chunk-UJ4BQFWV.js";
+} from "./chunk-L6EFW2SJ.js";
+import {
+  agentIsCursor,
+  findBin
+} from "./chunk-XPGL7VYE.js";
 
 // src/osinfo.ts
 import os from "os";
@@ -47,7 +53,78 @@ function splitCommandLine(line) {
   if (started) toks.push(cur);
   return toks;
 }
-function fromTokens(pid, toks) {
+var KNOWN_EXE = /* @__PURE__ */ new Set([...Object.keys(BY_EXE), ...RUNNERS, "agent"]);
+function exeTool(tok, pid, env) {
+  const name = exeName(tok);
+  if (name !== "agent") return BY_EXE[name];
+  const file = agentFile(tok, pid, env);
+  return file && agentIsCursor(file, env) ? "cursor" : void 0;
+}
+function agentFile(tok, pid, env) {
+  const bare = !tok.includes("/") && !tok.includes("\\");
+  if (bare && process.platform === "linux" && pid > 0) {
+    try {
+      const link = fs.readlinkSync(`/proc/${pid}/exe`).replace(/ \(deleted\)$/, "");
+      if (link) return link;
+    } catch {
+    }
+  }
+  if (!bare) return tok.replace(/^"|"$/g, "");
+  return findBin("agent", env);
+}
+function psCommandTokens(command) {
+  const trimmed = command.trim();
+  let quotedExe;
+  let body = trimmed;
+  if (trimmed.startsWith('"')) {
+    const end = trimmed.indexOf('"', 1);
+    if (end > 1) {
+      quotedExe = trimmed.slice(1, end);
+      body = trimmed.slice(end + 1).trim();
+    }
+  }
+  const parts = body === "" ? [] : body.split(/\s+/);
+  const exe = quotedExe !== void 0 ? { token: quotedExe, next: 0 } : takeKnown(parts, 0);
+  if (!exe) return quotedExe !== void 0 ? [quotedExe, ...parts] : parts;
+  let rest = parts.slice(exe.next);
+  if (RUNNERS.has(exeName(exe.token)) && rest[0] && !rest[0].startsWith("-")) {
+    const script = takeScript(rest);
+    rest = [script.token, ...rest.slice(script.next)];
+  }
+  return [exe.token, ...rest];
+}
+var unwrap = (token) => token.length >= 2 && token.startsWith('"') && token.endsWith('"') ? token.slice(1, -1) : token;
+function isFile(file) {
+  try {
+    return fs.statSync(file).isFile();
+  } catch {
+    return false;
+  }
+}
+function takeKnown(parts, start) {
+  let token = "";
+  let best;
+  for (let i = start; i < parts.length; i++) {
+    const piece = parts[i];
+    if (i > start && (piece.startsWith("/") || piece.startsWith("\\") || piece.startsWith("-"))) break;
+    token = token ? `${token} ${piece}` : piece;
+    const bare = !token.includes("/") && !token.includes("\\");
+    const cleaned = unwrap(token);
+    if (KNOWN_EXE.has(exeName(cleaned)) || !bare && isFile(cleaned)) best = { token: cleaned, next: i + 1 };
+    if (bare) break;
+  }
+  return best;
+}
+function takeScript(parts) {
+  const first = parts[0];
+  if (/\.(?:js|mjs|cjs|exe|cmd)$/i.test(first.split(/[\\/]/).pop() ?? "")) return { token: first, next: 1 };
+  return takeKnown(parts, 0) ?? { token: first, next: 1 };
+}
+function psEnvValue(text, name) {
+  const m = new RegExp(`(?:^|\\s)${name}=(.*?)(?=\\s+[A-Za-z_][A-Za-z0-9_]*=|\\s*$)`).exec(text);
+  return m?.[1] || void 0;
+}
+function fromTokens(pid, toks, env) {
   const first = exeName(toks[0] ?? "");
   let rest = toks.slice(1);
   let tool;
@@ -55,7 +132,7 @@ function fromTokens(pid, toks) {
     tool = BY_EXE[exeName(toks[1])] ?? dirTool(toks[1]);
     rest = toks.slice(2);
   } else {
-    tool = BY_EXE[first];
+    tool = exeTool(toks[0] ?? "", pid, env);
   }
   if (!tool || pid === process.pid) return void 0;
   if (HELPER_ARGS.has(rest[0] ?? "")) return void 0;
@@ -64,19 +141,19 @@ function fromTokens(pid, toks) {
   const model = eq ? eq.slice(8) : mi >= 0 ? rest[mi + 1] : void 0;
   return { pid, tool, ...model && /^[\w.:\-/[\]]{1,100}$/.test(model) ? { model } : {} };
 }
-function parsePs(text, uid) {
+function parsePs(text, uid, env = process.env) {
   const out = [];
   for (const line of text.split("\n")) {
     const m = /^\s*(\d+)\s+(\d+)\s+\S+\s+(.+)$/.exec(line);
     if (!m) continue;
     const pid = Number(m[1]);
     if (uid !== void 0 && Number(m[2]) !== uid) continue;
-    const p = fromTokens(pid, m[3].trim().split(/\s+/));
+    const p = fromTokens(pid, psCommandTokens(m[3].trim()), env);
     if (p) out.push(p);
   }
   return out;
 }
-function parseWindowsProcesses(text) {
+function parseWindowsProcesses(text, env = process.env) {
   const raw = text.replace(/^\uFEFF/, "").trim();
   if (raw === "" || raw === "null") return [];
   let data;
@@ -91,7 +168,7 @@ function parseWindowsProcesses(text) {
     const p = item;
     const pid = typeof p.ProcessId === "number" ? p.ProcessId : typeof p.ProcessId === "string" ? Number(p.ProcessId) : NaN;
     if (!Number.isInteger(pid) || pid <= 0 || typeof p.CommandLine !== "string" || p.CommandLine.trim() === "") continue;
-    const found = fromTokens(pid, splitCommandLine(p.CommandLine));
+    const found = fromTokens(pid, splitCommandLine(p.CommandLine), env);
     if (found) out.push(found);
   }
   return out;
@@ -107,8 +184,7 @@ function makeEnvReader(platform, run) {
       }
       if (platform === "darwin") {
         const r = await run("ps", ["-E", "-ww", "-p", String(pid), "-o", "command="], { timeoutMs: 5e3 });
-        const m = new RegExp(`(?:^|\\s)${name}=(\\S+)`).exec(r.stdout);
-        return m?.[1];
+        return psEnvValue(r.stdout, name);
       }
     } catch {
     }
@@ -118,7 +194,7 @@ function makeEnvReader(platform, run) {
 var WINDOWS_PROCESS_QUERY = [
   "[Console]::OutputEncoding = [System.Text.Encoding]::UTF8",
   "$me = [Security.Principal.WindowsIdentity]::GetCurrent().Name",
-  "$names = @('claude.exe', 'claude', 'codex.exe', 'codex', 'cursor-agent.exe', 'cursor-agent', 'gemini.exe', 'gemini', 'grok.exe', 'grok', 'node.exe', 'node', 'bun.exe', 'bun', 'deno.exe', 'deno', 'npx.cmd', 'npx')",
+  "$names = @('claude.exe', 'claude', 'codex.exe', 'codex', 'cursor-agent.exe', 'cursor-agent', 'agent.exe', 'agent', 'gemini.exe', 'gemini', 'grok.exe', 'grok', 'node.exe', 'node', 'bun.exe', 'bun', 'deno.exe', 'deno', 'npx.cmd', 'npx')",
   '$rows = @(Get-CimInstance Win32_Process | Where-Object { $names -contains $_.Name.ToLowerInvariant() } | ForEach-Object { $p = $_; $o = Invoke-CimMethod -InputObject $p -MethodName GetOwner; if ($o.ReturnValue -eq 0) { $owner = if ($o.Domain) { "$($o.Domain)\\$($o.User)" } else { $o.User }; if ($owner -ieq $me) { [pscustomobject]@{ ProcessId = $p.ProcessId; CommandLine = $p.CommandLine } } } })',
   "ConvertTo-Json -InputObject $rows -Compress"
 ].join("; ");
@@ -126,14 +202,14 @@ async function scanProcesses(d) {
   if (d.platform === "win32") {
     const r2 = await d.run("powershell", ["-NoProfile", "-NonInteractive", "-Command", WINDOWS_PROCESS_QUERY], { timeoutMs: 1e4 });
     if (r2.code !== 0) return { procs: [] };
-    return { procs: parseWindowsProcesses(r2.stdout) };
+    return { procs: parseWindowsProcesses(r2.stdout, d.env) };
   }
-  const r = await d.run("ps", ["-axo", "pid=,uid=,etime=,command="], { timeoutMs: 1e4 });
+  const r = await d.run("ps", ["-ww", "-axo", "pid=,uid=,etime=,command="], { timeoutMs: 1e4 });
   if (r.code !== 0) return { procs: [] };
   const readEnv = d.readEnv ?? makeEnvReader(d.platform, d.run);
   const procs = [];
   const uid = d.uid ?? (typeof process.getuid === "function" ? process.getuid() : void 0);
-  for (const p of parsePs(r.stdout, uid)) {
+  for (const p of parsePs(r.stdout, uid, d.env)) {
     const dir = p.tool === "claude" ? await readEnv(p.pid, "CLAUDE_CONFIG_DIR") : p.tool === "codex" ? await readEnv(p.pid, "CODEX_HOME") : void 0;
     procs.push({ ...p, ...dir ? { dir } : {} });
   }

package/dist/chunk-NMUH5NXN.js

@@ -0,0 +1,52 @@
+#!/usr/bin/env node
+import { createRequire as __hfCreateRequire } from 'node:module';
+const require = __hfCreateRequire(import.meta.url);
+import {
+  TOKEN_FP_HEX,
+  defaultHost,
+  hostKey,
+  loadToken,
+  readCredentials,
+  tokenFingerprint
+} from "./chunk-QLMLB7RB.js";
+import {
+  flagStr
+} from "./chunk-QPAFN47B.js";
+import {
+  isTool
+} from "./chunk-XPGL7VYE.js";
+import {
+  hostFromEnv,
+  hostFromFlag,
+  sameOrigin
+} from "./chunk-QGULSOQ2.js";
+
+// src/session.ts
+function envTokenForHost(env, host) {
+  const token = env.HIVEFLOOR_TOKEN;
+  if (!token) return void 0;
+  const creds = readCredentials();
+  const key = hostKey(creds, host);
+  if (!key) {
+    if (Object.keys(creds.hosts).length > 0) return void 0;
+    return sameOrigin(hostFromEnv(env), host) ? token : void 0;
+  }
+  const fp = creds.hosts[key]?.token_fp;
+  if (typeof fp !== "string" || fp.length !== TOKEN_FP_HEX || !/^[0-9a-f]+$/.test(fp)) return void 0;
+  return tokenFingerprint(token) === fp ? token : void 0;
+}
+async function resolveSession(ctx, p) {
+  const flagHost = flagStr(p, "host");
+  const host = flagHost ? hostFromFlag(ctx, flagHost) : ctx.env.HIVEFLOOR_URL ? hostFromEnv(ctx.env) : defaultHost() ?? hostFromEnv(ctx.env);
+  const toolFlag = flagStr(p, "tool");
+  const t = await loadToken(host, toolFlag && isTool(toolFlag) ? toolFlag : void 0);
+  if (t) return { host, token: t.token, tool: t.tool };
+  const envToken = envTokenForHost(ctx.env, host);
+  if (envToken) return { host, token: envToken, tool: toolFlag ?? "other" };
+  return void 0;
+}
+
+export {
+  envTokenForHost,
+  resolveSession
+};

package/dist/chunk-NRJONTFT.js

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+import { createRequire as __hfCreateRequire } from 'node:module';
+const require = __hfCreateRequire(import.meta.url);
+import {
+  assertTokenTransport
+} from "./chunk-QGULSOQ2.js";
+
+// src/api.ts
+var ApiError = class extends Error {
+  constructor(status, code, message) {
+    super(message);
+    this.status = status;
+    this.code = code;
+  }
+  status;
+  code;
+};
+async function apiRequest(ctx, host, path, opts = {}) {
+  if (opts.token) assertTokenTransport(host);
+  const headers = { accept: "application/json", ...opts.headers };
+  if (opts.token) headers.authorization = `Bearer ${opts.token}`;
+  if (opts.body !== void 0) headers["content-type"] = "application/json";
+  let res;
+  try {
+    res = await ctx.fetch(`${host}${path}`, {
+      method: opts.method ?? (opts.body !== void 0 ? "POST" : "GET"),
+      headers,
+      body: opts.body !== void 0 ? JSON.stringify(opts.body) : void 0,
+      redirect: "error",
+      signal: AbortSignal.timeout(opts.timeoutMs ?? 15e3)
+    });
+  } catch (e) {
+    throw networkError(host, e);
+  }
+  const text = await res.text();
+  let json = null;
+  try {
+    json = text ? JSON.parse(text) : null;
+  } catch {
+    json = null;
+  }
+  return { status: res.status, json };
+}
+function networkError(host, e) {
+  const err = e;
+  let why;
+  if (err?.name === "TimeoutError" || err?.name === "AbortError") why = "timed out";
+  else if (err?.cause?.code) why = err.cause.code;
+  else if (err?.code) why = err.code;
+  else why = err?.cause?.message ?? err?.message ?? "network error";
+  let name = host;
+  try {
+    name = new URL(host).host;
+  } catch {
+  }
+  return new ApiError(0, "network", `cannot reach ${name}: ${why}. Check --host or HIVEFLOOR_URL.`);
+}
+function errorOf(r) {
+  const j = r.json ?? {};
+  return new ApiError(r.status, typeof j.error === "string" ? j.error : "error", typeof j.message === "string" ? j.message : `HTTP ${r.status}`);
+}
+
+export {
+  ApiError,
+  apiRequest,
+  errorOf
+};