@kraki/tentacle 0.1.0

package/dist/config.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Configuration management for Kraki tentacle.
+ *
+ * Config is stored at ~/.kraki/config.json (no secrets).
+ * Channel keys are stored separately at ~/.kraki/channel.key with 0o600 permissions.
+ * Daemon PID is tracked at ~/.kraki/daemon.pid.
+ */
+export type KrakiLogVerbosity = 'normal' | 'verbose';
+export interface KrakiConfig {
+    relay: string;
+    authMethod: 'github' | 'channel-key' | 'open';
+    device: {
+        name: string;
+        id?: string;
+    };
+    logging?: {
+        verbosity?: KrakiLogVerbosity;
+    };
+}
+export declare const DEFAULT_LOG_VERBOSITY: KrakiLogVerbosity;
+export declare function getConfigDir(): string;
+/**
+ * Get the stable device ID for this machine.
+ * Generated once and persisted at ~/.kraki/device-id.
+ * Sent to the head on auth so reconnections don't create ghost devices.
+ */
+export declare function getOrCreateDeviceId(): string;
+export declare function configExists(): boolean;
+export declare function getLogVerbosity(config: Pick<KrakiConfig, 'logging'> | null | undefined): KrakiLogVerbosity;
+export declare function loadConfig(): KrakiConfig | null;
+export declare function saveConfig(config: KrakiConfig): void;
+export declare function getChannelKeyPath(): string;
+export declare function saveChannelKey(key: string): void;
+export declare function loadChannelKey(): string | null;
+export declare function getDaemonPidPath(): string;
+export declare function saveDaemonPid(pid: number): void;
+export declare function loadDaemonPid(): number | null;
+export declare function clearDaemonPid(): void;

package/dist/config.js

@@ -0,0 +1,113 @@
+/**
+ * Configuration management for Kraki tentacle.
+ *
+ * Config is stored at ~/.kraki/config.json (no secrets).
+ * Channel keys are stored separately at ~/.kraki/channel.key with 0o600 permissions.
+ * Daemon PID is tracked at ~/.kraki/daemon.pid.
+ */
+import { mkdirSync, readFileSync, writeFileSync, unlinkSync, existsSync, chmodSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { randomUUID } from 'node:crypto';
+export const DEFAULT_LOG_VERBOSITY = 'normal';
+// ── Paths ───────────────────────────────────────────────
+const CONFIG_DIR = join(homedir(), '.kraki');
+const CONFIG_PATH = join(CONFIG_DIR, 'config.json');
+const CHANNEL_KEY_PATH = join(CONFIG_DIR, 'channel.key');
+const DAEMON_PID_PATH = join(CONFIG_DIR, 'daemon.pid');
+const DEVICE_ID_PATH = join(CONFIG_DIR, 'device-id');
+export function getConfigDir() {
+    mkdirSync(CONFIG_DIR, { recursive: true });
+    return CONFIG_DIR;
+}
+// ── Device ID ───────────────────────────────────────────
+/**
+ * Get the stable device ID for this machine.
+ * Generated once and persisted at ~/.kraki/device-id.
+ * Sent to the head on auth so reconnections don't create ghost devices.
+ */
+export function getOrCreateDeviceId() {
+    try {
+        const existing = readFileSync(DEVICE_ID_PATH, 'utf8').trim();
+        if (existing)
+            return existing;
+    }
+    catch {
+        // File doesn't exist — generate one
+    }
+    const id = `dev_${randomUUID().slice(0, 12)}`;
+    getConfigDir();
+    writeFileSync(DEVICE_ID_PATH, id, 'utf8');
+    return id;
+}
+// ── Config ──────────────────────────────────────────────
+export function configExists() {
+    return existsSync(CONFIG_PATH);
+}
+export function getLogVerbosity(config) {
+    return config?.logging?.verbosity === 'verbose' ? 'verbose' : DEFAULT_LOG_VERBOSITY;
+}
+function normalizeConfig(config) {
+    return {
+        ...config,
+        device: { ...config.device },
+        logging: { verbosity: getLogVerbosity(config) },
+    };
+}
+export function loadConfig() {
+    try {
+        const raw = readFileSync(CONFIG_PATH, 'utf8');
+        return normalizeConfig(JSON.parse(raw));
+    }
+    catch {
+        return null;
+    }
+}
+export function saveConfig(config) {
+    getConfigDir();
+    writeFileSync(CONFIG_PATH, JSON.stringify(normalizeConfig(config), null, 2) + '\n', 'utf8');
+}
+// ── Channel key ─────────────────────────────────────────
+export function getChannelKeyPath() {
+    return CHANNEL_KEY_PATH;
+}
+export function saveChannelKey(key) {
+    getConfigDir();
+    writeFileSync(CHANNEL_KEY_PATH, key, 'utf8');
+    chmodSync(CHANNEL_KEY_PATH, 0o600);
+}
+export function loadChannelKey() {
+    try {
+        return readFileSync(CHANNEL_KEY_PATH, 'utf8').trim();
+    }
+    catch {
+        return null;
+    }
+}
+// ── Daemon PID ──────────────────────────────────────────
+export function getDaemonPidPath() {
+    return DAEMON_PID_PATH;
+}
+export function saveDaemonPid(pid) {
+    getConfigDir();
+    writeFileSync(DAEMON_PID_PATH, String(pid), 'utf8');
+}
+export function loadDaemonPid() {
+    try {
+        const raw = readFileSync(DAEMON_PID_PATH, 'utf8').trim();
+        const pid = parseInt(raw, 10);
+        return Number.isFinite(pid) ? pid : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function clearDaemonPid() {
+    try {
+        unlinkSync(DAEMON_PID_PATH);
+    }
+    catch {
+        // File may not exist — that's fine
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAezC,MAAM,CAAC,MAAM,qBAAqB,GAAsB,QAAQ,CAAC;AAEjE,2DAA2D;AAE3D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AACpD,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AACzD,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AACvD,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAErD,MAAM,UAAU,YAAY;IAC1B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,2DAA2D;AAE3D;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC9C,YAAY,EAAE,CAAC;IACf,aAAa,CAAC,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,2DAA2D;AAE3D,MAAM,UAAU,YAAY;IAC1B,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAuD;IACrF,OAAO,MAAM,EAAE,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC;AACtF,CAAC;AAED,SAAS,eAAe,CAAC,MAAmB;IAC1C,OAAO;QACL,GAAG,MAAM;QACT,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE;QAC5B,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE;KAChD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9C,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,YAAY,EAAE,CAAC;IACf,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9F,CAAC;AAED,2DAA2D;AAE3D,MAAM,UAAU,iBAAiB;IAC/B,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,YAAY,EAAE,CAAC;IACf,aAAa,CAAC,gBAAgB,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7C,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2DAA2D;AAE3D,MAAM,UAAU,gBAAgB;IAC9B,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,YAAY,EAAE,CAAC;IACf,aAAa,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,UAAU,CAAC,eAAe,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC"}

package/dist/daemon-worker.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Kraki tentacle daemon worker.
+ *
+ * This file is spawned as a detached background process by daemon.ts.
+ * It loads config, resolves authentication, starts the Copilot adapter,
+ * and connects to the head via RelayClient.
+ *
+ * RelayClient wires all adapter events to the head automatically.
+ * SessionManager handles durable session state and crash recovery.
+ * KeyManager handles E2E encryption keys.
+ */
+import { CopilotAdapter } from './adapters/copilot.js';
+import { RelayClient } from './relay-client.js';
+import { SessionManager } from './session-manager.js';
+export interface WorkerResult {
+    adapter: CopilotAdapter;
+    relay: RelayClient;
+    sessionManager: SessionManager;
+    shutdown: () => Promise<void>;
+}
+export declare function startWorker(): Promise<WorkerResult>;

package/dist/daemon-worker.js

@@ -0,0 +1,127 @@
+/**
+ * Kraki tentacle daemon worker.
+ *
+ * This file is spawned as a detached background process by daemon.ts.
+ * It loads config, resolves authentication, starts the Copilot adapter,
+ * and connects to the head via RelayClient.
+ *
+ * RelayClient wires all adapter events to the head automatically.
+ * SessionManager handles durable session state and crash recovery.
+ * KeyManager handles E2E encryption keys.
+ */
+import { execSync } from 'node:child_process';
+import { loadConfig, loadChannelKey, getOrCreateDeviceId } from './config.js';
+import { CopilotAdapter } from './adapters/copilot.js';
+import { RelayClient } from './relay-client.js';
+import { SessionManager } from './session-manager.js';
+import { KeyManager } from './key-manager.js';
+import { createLogger } from './logger.js';
+const logger = createLogger('daemon');
+// ── Uncaught exception / rejection handlers ─────────────
+process.on('uncaughtException', (err) => {
+    logger.fatal({ err }, 'Uncaught exception');
+    process.exit(1);
+});
+process.on('unhandledRejection', (reason) => {
+    logger.fatal({ reason }, 'Unhandled rejection');
+    process.exit(1);
+});
+export async function startWorker() {
+    logger.info('Daemon starting…');
+    // 1. Load config
+    const config = loadConfig();
+    if (!config) {
+        logger.fatal('No config found at ~/.kraki/config.json — run `kraki` to set up');
+        process.exit(1);
+    }
+    // 2. Resolve auth token
+    let token;
+    if (config.authMethod === 'github') {
+        try {
+            token = execSync('gh auth token 2>/dev/null', { encoding: 'utf8' }).trim() || undefined;
+            if (token)
+                logger.debug('Resolved GitHub token from `gh auth token`');
+        }
+        catch {
+            logger.warn('Could not resolve GitHub token from gh CLI');
+        }
+    }
+    else {
+        const channelKey = loadChannelKey();
+        if (channelKey) {
+            token = channelKey;
+            logger.debug('Loaded channel key from ~/.kraki/channel.key');
+        }
+        else {
+            logger.warn('No channel key found at ~/.kraki/channel.key');
+        }
+    }
+    // 3. Initialize components
+    const adapter = new CopilotAdapter();
+    const sessionManager = new SessionManager();
+    const keyManager = new KeyManager();
+    const deviceId = getOrCreateDeviceId();
+    // 4. Start Copilot adapter
+    if (token) {
+        process.env.GITHUB_TOKEN = token;
+    }
+    await adapter.start();
+    logger.info('Copilot adapter started');
+    // 5. Fetch available models for device capabilities
+    let models = [];
+    try {
+        models = await adapter.listModels();
+        logger.debug({ count: models.length }, 'Fetched available models');
+    }
+    catch {
+        logger.warn('Could not fetch available models');
+    }
+    // 6. Connect to relay via RelayClient
+    const relay = new RelayClient(adapter, sessionManager, {
+        relayUrl: config.relay,
+        device: {
+            name: config.device.name,
+            role: 'tentacle',
+            kind: 'desktop',
+            deviceId,
+            capabilities: models.length > 0 ? { models } : undefined,
+        },
+        token,
+        reconnectDelay: 3000,
+    }, keyManager);
+    relay.onStateChange = (state) => {
+        logger.debug({ state }, 'Relay connection state changed');
+    };
+    relay.onAuthenticated = (info) => {
+        logger.info({
+            channel: info.channel,
+            deviceId: info.deviceId,
+            e2e: info.e2e,
+            devices: info.devices.length,
+            sessions: info.sessions.length,
+        }, 'Connected to relay');
+    };
+    relay.onFatalError = (message) => {
+        logger.fatal({ message }, 'Relay fatal error');
+    };
+    relay.connect();
+    logger.info({ relay: config.relay, device: config.device.name }, 'Daemon running');
+    // 6. Graceful shutdown
+    const shutdown = async () => {
+        logger.info('Shutting down…');
+        relay.disconnect();
+        await adapter.stop();
+    };
+    process.on('SIGTERM', async () => { await shutdown(); process.exit(0); });
+    process.on('SIGINT', async () => { await shutdown(); process.exit(0); });
+    return { adapter, relay, sessionManager, shutdown };
+}
+// Auto-run when executed directly (not imported for testing)
+const isDirectRun = process.argv[1]?.endsWith('daemon-worker.js') || process.argv[1]?.endsWith('daemon-worker.ts');
+if (isDirectRun) {
+    startWorker().catch((err) => {
+        logger.fatal({ err }, 'Daemon failed to start');
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=daemon-worker.js.map

package/dist/daemon-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-worker.js","sourceRoot":"","sources":["../src/daemon-worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAEtC,2DAA2D;AAE3D,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;IACtC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;IAC1C,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAWH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAEhC,iBAAiB;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,wBAAwB;IACxB,IAAI,KAAyB,CAAC;IAE9B,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,GAAG,QAAQ,CAAC,2BAA2B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;YACxF,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;QACpC,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,GAAG,UAAU,CAAC;YACnB,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;IACrC,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IAEvC,2BAA2B;IAC3B,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAEvC,oDAAoD;IACpD,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IAED,sCAAsC;IACtC,MAAM,KAAK,GAAG,IAAI,WAAW,CAC3B,OAAkC,EAClC,cAAc,EACd;QACE,QAAQ,EAAE,MAAM,CAAC,KAAK;QACtB,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,SAAS;YACf,QAAQ;YACR,YAAY,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;SACzD;QACD,KAAK;QACL,cAAc,EAAE,IAAI;KACrB,EACD,UAAU,CACX,CAAC;IAEF,KAAK,CAAC,aAAa,GAAG,CAAC,KAAK,EAAE,EAAE;QAC9B,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,gCAAgC,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,KAAK,CAAC,eAAe,GAAG,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;SAC/B,EAAE,oBAAoB,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,KAAK,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,EAAE;QAC/B,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,KAAK,CAAC,OAAO,EAAE,CAAC;IAChB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAEnF,uBAAuB;IACvB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9B,KAAK,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC;AAED,6DAA6D;AAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AACnH,IAAI,WAAW,EAAE,CAAC;IAChB,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Daemon process management for Kraki tentacle.
+ *
+ * The daemon runs as a detached child process executing daemon-worker.js.
+ * Its PID is tracked in ~/.kraki/daemon.pid.
+ */
+import { type KrakiConfig } from './config.js';
+export interface DaemonLaunchSpec {
+    runtime: string;
+    args: string[];
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    workerPath: string;
+}
+export declare function getDaemonBootstrapLogPath(): string;
+export declare function resolveDaemonLaunch(currentUrl?: string): DaemonLaunchSpec;
+export interface DaemonStatus {
+    running: boolean;
+    pid: number | null;
+}
+export declare function isDaemonRunning(): boolean;
+export declare function getDaemonStatus(): DaemonStatus;
+export declare function startDaemon(config: KrakiConfig): Promise<number>;
+export declare function stopDaemon(): boolean;

package/dist/daemon.js

@@ -0,0 +1,163 @@
+/**
+ * Daemon process management for Kraki tentacle.
+ *
+ * The daemon runs as a detached child process executing daemon-worker.js.
+ * Its PID is tracked in ~/.kraki/daemon.pid.
+ */
+import { spawn, execSync } from 'node:child_process';
+import { closeSync, mkdirSync, openSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { getLogVerbosity, saveDaemonPid, loadDaemonPid, clearDaemonPid, } from './config.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const STARTUP_GRACE_MS = 1500;
+const BOOTSTRAP_LOG_PATH = join(homedir(), '.kraki', 'logs', 'daemon-bootstrap.log');
+export function getDaemonBootstrapLogPath() {
+    return BOOTSTRAP_LOG_PATH;
+}
+export function resolveDaemonLaunch(currentUrl = import.meta.url) {
+    const moduleDir = dirname(fileURLToPath(currentUrl));
+    const isTsSource = currentUrl.endsWith('.ts');
+    const packageRoot = resolve(moduleDir, '..');
+    const workspaceRoot = resolve(packageRoot, '..', '..');
+    const workerFile = isTsSource ? 'daemon-worker.ts' : 'daemon-worker.js';
+    const workerPath = join(moduleDir, workerFile);
+    const binPaths = isTsSource
+        ? [join(workspaceRoot, 'node_modules', '.bin'), join(packageRoot, 'node_modules', '.bin')]
+        : [join(packageRoot, 'node_modules', '.bin')];
+    return {
+        runtime: process.execPath,
+        args: isTsSource ? ['--import', 'tsx', workerPath] : [workerPath],
+        cwd: isTsSource ? workspaceRoot : packageRoot,
+        env: {
+            ...process.env,
+            NODE_ENV: 'production',
+            PATH: [...binPaths, process.env.PATH ?? ''].filter(Boolean).join(':'),
+        },
+        workerPath,
+    };
+}
+function waitForDaemonBootstrap(child, timeoutMs = STARTUP_GRACE_MS) {
+    return new Promise((resolve, reject) => {
+        const cleanup = () => {
+            clearTimeout(timer);
+            child.off('error', onError);
+            child.off('exit', onExit);
+        };
+        const onError = (err) => {
+            cleanup();
+            reject(new Error(`Kraki failed to start: ${err.message}. Check ${getDaemonBootstrapLogPath()}`));
+        };
+        const onExit = (code, signal) => {
+            cleanup();
+            reject(new Error(`Kraki exited during startup (code ${code ?? 'null'}, signal ${signal ?? 'none'}). Check ${getDaemonBootstrapLogPath()}`));
+        };
+        const timer = setTimeout(() => {
+            cleanup();
+            resolve();
+        }, timeoutMs);
+        child.once('error', onError);
+        child.once('exit', onExit);
+    });
+}
+export function isDaemonRunning() {
+    const pid = loadDaemonPid();
+    if (pid === null)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        // Process doesn't exist — stale PID file
+        clearDaemonPid();
+        return false;
+    }
+}
+export function getDaemonStatus() {
+    const pid = loadDaemonPid();
+    if (pid === null)
+        return { running: false, pid: null };
+    try {
+        process.kill(pid, 0);
+        return { running: true, pid };
+    }
+    catch {
+        clearDaemonPid();
+        return { running: false, pid: null };
+    }
+}
+// ── Start / Stop ────────────────────────────────────────
+export async function startDaemon(config) {
+    // Kill any existing daemon(s) before starting a new one
+    stopDaemon();
+    const launch = resolveDaemonLaunch();
+    launch.env.LOG_LEVEL = getLogVerbosity(config) === 'verbose' ? 'debug' : 'info';
+    mkdirSync(dirname(BOOTSTRAP_LOG_PATH), { recursive: true });
+    const bootstrapFd = openSync(BOOTSTRAP_LOG_PATH, 'w');
+    const child = spawn(launch.runtime, launch.args, {
+        detached: true,
+        stdio: ['ignore', bootstrapFd, bootstrapFd],
+        cwd: launch.cwd,
+        env: launch.env,
+    });
+    closeSync(bootstrapFd);
+    if (!child.pid) {
+        throw new Error(`Kraki failed to start: no daemon PID returned. Check ${getDaemonBootstrapLogPath()}`);
+    }
+    try {
+        await waitForDaemonBootstrap(child);
+    }
+    catch (err) {
+        try {
+            process.kill(child.pid, 'SIGTERM');
+        }
+        catch {
+            // Child may already be gone
+        }
+        throw err;
+    }
+    child.unref();
+    saveDaemonPid(child.pid);
+    return child.pid;
+}
+export function stopDaemon() {
+    const pid = loadDaemonPid();
+    if (pid !== null) {
+        try {
+            process.kill(pid, 'SIGTERM');
+        }
+        catch {
+            // Process already gone
+        }
+        clearDaemonPid();
+    }
+    // Kill any orphaned daemon-worker processes (missed by PID tracking)
+    killOrphanedWorkers();
+    return pid !== null;
+}
+/**
+ * Find and kill any daemon-worker processes not tracked by the PID file.
+ */
+function killOrphanedWorkers() {
+    try {
+        const output = execSync('ps -eo pid,command', { encoding: 'utf8' });
+        for (const line of output.split('\n')) {
+            if (line.includes('daemon-worker') && !line.includes('grep')) {
+                const pidStr = line.trim().split(/\s+/)[0];
+                const orphanPid = parseInt(pidStr, 10);
+                if (orphanPid && orphanPid !== process.pid) {
+                    try {
+                        process.kill(orphanPid, 'SIGTERM');
+                    }
+                    catch { /* already gone */ }
+                }
+            }
+        }
+    }
+    catch {
+        // ps not available — skip orphan cleanup
+    }
+}
+//# sourceMappingURL=daemon.js.map

package/dist/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../src/daemon.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAqB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,eAAe,EAEf,aAAa,EACb,aAAa,EACb,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC;AAUrF,MAAM,UAAU,yBAAyB;IACvC,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,aAAqB,MAAM,CAAC,IAAI,CAAC,GAAG;IACtE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAE/C,MAAM,QAAQ,GAAG,UAAU;QACzB,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QAC1F,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACjE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW;QAC7C,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,CAAC,GAAG,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SACtE;QACD,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAmB,EAAE,SAAS,GAAG,gBAAgB;IAC/E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;YAC7B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,OAAO,WAAW,yBAAyB,EAAE,EAAE,CAAC,CAAC,CAAC;QACnG,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,MAA6B,EAAE,EAAE;YACpE,OAAO,EAAE,CAAC;YACV,MAAM,CACJ,IAAI,KAAK,CACP,qCAAqC,IAAI,IAAI,MAAM,YAAY,MAAM,IAAI,MAAM,YAAY,yBAAyB,EAAE,EAAE,CACzH,CACF,CAAC;QACJ,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AASD,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;QACzC,cAAc,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAEvD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,2DAA2D;AAE3D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAmB;IACnD,wDAAwD;IACxD,UAAU,EAAE,CAAC;IAEb,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAChF,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,QAAQ,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IAEtD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;QAC/C,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;QAC3C,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC,CAAC;IAEH,SAAS,CAAC,WAAW,CAAC,CAAC;IAEvB,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,wDAAwD,yBAAyB,EAAE,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,IAAI,CAAC;QACH,MAAM,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC,GAAG,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;QACD,cAAc,EAAE,CAAC;IACnB,CAAC;IAED,qEAAqE;IACrE,mBAAmB,EAAE,CAAC;IAEtB,OAAO,GAAG,KAAK,IAAI,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACvC,IAAI,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;oBAC3C,IAAI,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { AgentAdapter, CopilotAdapter, parsePermission } from './adapters/index.js';
+export type { CreateSessionConfig, SessionInfo, PermissionDecision, SessionCreatedEvent, MessageEvent, MessageDeltaEvent, PermissionRequestEvent, QuestionRequestEvent, ToolStartEvent, ToolCompleteEvent, SessionEndedEvent, ErrorEvent, ParsedPermission, } from './adapters/index.js';
+export { loadConfig, saveConfig, configExists, getOrCreateDeviceId } from './config.js';
+export { SessionManager } from './session-manager.js';
+export type { SessionContext, SessionMeta, RunRecord } from './session-manager.js';
+export { RelayClient } from './relay-client.js';
+export type { RelayClientOptions, RelayClientState } from './relay-client.js';
+export { KeyManager } from './key-manager.js';

package/dist/index.js

@@ -0,0 +1,11 @@
+// kraki — Kraki agent bridge
+//
+// The tentacle connects coding agents to the Kraki relay.
+// It wraps agent SDKs via adapters and translates their events
+// into the @kraki/protocol message types.
+export { AgentAdapter, CopilotAdapter, parsePermission } from './adapters/index.js';
+export { loadConfig, saveConfig, configExists, getOrCreateDeviceId } from './config.js';
+export { SessionManager } from './session-manager.js';
+export { RelayClient } from './relay-client.js';
+export { KeyManager } from './key-manager.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,EAAE;AACF,0DAA0D;AAC1D,+DAA+D;AAC/D,0CAA0C;AAE1C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAkBpF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/key-manager.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Tentacle key management for E2E encryption.
+ *
+ * Generates and persists RSA keypair on first run.
+ * Provides encrypt/decrypt helpers using @kraki/crypto.
+ */
+import type { KeyPair, EncryptedPayload, RecipientKey } from '@kraki/crypto';
+export declare class KeyManager {
+    private keysDir;
+    private keyPair;
+    constructor(keysDir?: string);
+    /**
+     * Get or create the device keypair. Generated once, persisted to disk.
+     */
+    getKeyPair(): KeyPair;
+    /**
+     * Get compact public key for sending to the head during auth.
+     */
+    getCompactPublicKey(): string;
+    /**
+     * Encrypt a message payload for a set of recipient devices.
+     */
+    encryptForRecipients(plaintext: string, recipients: RecipientKey[]): EncryptedPayload;
+    /**
+     * Decrypt a message payload intended for this device.
+     */
+    decryptForMe(payload: EncryptedPayload, myDeviceId: string): string;
+}

package/dist/key-manager.js

@@ -0,0 +1,61 @@
+/**
+ * Tentacle key management for E2E encryption.
+ *
+ * Generates and persists RSA keypair on first run.
+ * Provides encrypt/decrypt helpers using @kraki/crypto.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { generateKeyPair, exportPublicKey, encrypt, decrypt } from '@kraki/crypto';
+import { getConfigDir } from './config.js';
+const KEYS_DIR_NAME = 'keys';
+const PRIVATE_KEY_FILE = 'private.pem';
+const PUBLIC_KEY_FILE = 'public.pem';
+export class KeyManager {
+    keysDir;
+    keyPair = null;
+    constructor(keysDir) {
+        this.keysDir = keysDir ?? join(getConfigDir(), KEYS_DIR_NAME);
+        mkdirSync(this.keysDir, { recursive: true });
+    }
+    /**
+     * Get or create the device keypair. Generated once, persisted to disk.
+     */
+    getKeyPair() {
+        if (this.keyPair)
+            return this.keyPair;
+        const privPath = join(this.keysDir, PRIVATE_KEY_FILE);
+        const pubPath = join(this.keysDir, PUBLIC_KEY_FILE);
+        if (existsSync(privPath) && existsSync(pubPath)) {
+            this.keyPair = {
+                privateKey: readFileSync(privPath, 'utf8'),
+                publicKey: readFileSync(pubPath, 'utf8'),
+            };
+        }
+        else {
+            this.keyPair = generateKeyPair();
+            writeFileSync(privPath, this.keyPair.privateKey, { mode: 0o600 });
+            writeFileSync(pubPath, this.keyPair.publicKey, { mode: 0o644 });
+        }
+        return this.keyPair;
+    }
+    /**
+     * Get compact public key for sending to the head during auth.
+     */
+    getCompactPublicKey() {
+        return exportPublicKey(this.getKeyPair().publicKey);
+    }
+    /**
+     * Encrypt a message payload for a set of recipient devices.
+     */
+    encryptForRecipients(plaintext, recipients) {
+        return encrypt(plaintext, recipients);
+    }
+    /**
+     * Decrypt a message payload intended for this device.
+     */
+    decryptForMe(payload, myDeviceId) {
+        return decrypt(payload, myDeviceId, this.getKeyPair().privateKey);
+    }
+}
+//# sourceMappingURL=key-manager.js.map

package/dist/key-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-manager.js","sourceRoot":"","sources":["../src/key-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAmB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEpG,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,gBAAgB,GAAG,aAAa,CAAC;AACvC,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC,MAAM,OAAO,UAAU;IACb,OAAO,CAAS;IAChB,OAAO,GAAmB,IAAI,CAAC;IAEvC,YAAY,OAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC;QAC9D,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAEpD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,OAAO,GAAG;gBACb,UAAU,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAC1C,SAAS,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC;aACzC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,GAAG,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,OAAO,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAiB,EAAE,UAA0B;QAChE,OAAO,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,OAAyB,EAAE,UAAkB;QACxD,OAAO,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC;CACF"}

package/dist/logger.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Structured logging for Kraki tentacle.
+ *
+ * - Development: pretty-prints to stdout
+ * - Production: writes to rotating log files under ~/.kraki/logs/
+ */
+import pino from 'pino';
+export declare function createLogger(name: string): pino.Logger;