@kraki/tentacle 0.1.0

package/dist/logger.js

@@ -0,0 +1,30 @@
+/**
+ * Structured logging for Kraki tentacle.
+ *
+ * - Development: pretty-prints to stdout
+ * - Production: writes to rotating log files under ~/.kraki/logs/
+ */
+import pino from 'pino';
+import { mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+const LOG_DIR = join(homedir(), '.kraki', 'logs');
+export function createLogger(name) {
+    const level = process.env.LOG_LEVEL ?? 'info';
+    const isDev = process.env.NODE_ENV !== 'production';
+    if (isDev) {
+        return pino({ name, level });
+    }
+    // Production: rotate log files via pino-roll
+    mkdirSync(LOG_DIR, { recursive: true });
+    const transport = pino.transport({
+        target: 'pino-roll',
+        options: {
+            file: join(LOG_DIR, `${name}.log`),
+            size: '5m',
+            limit: { count: 5 },
+        },
+    });
+    return pino({ name, level }, transport);
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAElD,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IAEpD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,6CAA6C;IAC7C,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE;YACP,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,MAAM,CAAC;YAClC,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;SACpB;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;AAC1C,CAAC"}

package/dist/pair.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Pairing command — generates a QR code for mobile app pairing.
+ *
+ * Requests a one-time pairing token from the head,
+ * then displays a QR code in the terminal containing:
+ * - relay URL
+ * - pairing token (expires in 5 min)
+ * - tentacle's public key (for E2E)
+ */
+export interface PairingInfo {
+    relay: string;
+    pairingToken: string;
+    publicKey?: string;
+    expiresIn: number;
+}
+/**
+ * Request a pairing token from the head and return pairing info.
+ */
+export declare function requestPairingToken(relayUrl: string, authToken?: string): Promise<PairingInfo>;
+/**
+ * Generate the pairing URL that will be encoded in the QR code.
+ * Phone camera scans → opens this URL → web app auto-pairs.
+ */
+export declare function buildPairingUrl(info: PairingInfo, appBaseUrl?: string): string;
+/**
+ * Legacy: build compact JSON payload (for manual transfer).
+ */
+export declare function buildPairingPayload(info: PairingInfo): string;
+/**
+ * Render a QR code to the terminal. Copy link to clipboard.
+ */
+export declare function renderQrToTerminal(url: string): Promise<string>;

package/dist/pair.js

@@ -0,0 +1,131 @@
+/**
+ * Pairing command — generates a QR code for mobile app pairing.
+ *
+ * Requests a one-time pairing token from the head,
+ * then displays a QR code in the terminal containing:
+ * - relay URL
+ * - pairing token (expires in 5 min)
+ * - tentacle's public key (for E2E)
+ */
+import { WebSocket } from 'ws';
+import { execSync } from 'node:child_process';
+import { KeyManager } from './key-manager.js';
+/**
+ * Request a pairing token from the head and return pairing info.
+ */
+export async function requestPairingToken(relayUrl, authToken) {
+    return new Promise((resolve, reject) => {
+        const ws = new WebSocket(relayUrl);
+        const timeout = setTimeout(() => {
+            ws.close();
+            reject(new Error('Pairing request timed out'));
+        }, 10_000);
+        ws.on('open', () => {
+            // One-shot: send token inline, no device registration
+            ws.send(JSON.stringify({
+                type: 'request_pairing_token',
+                token: authToken,
+            }));
+        });
+        ws.on('message', (data) => {
+            let msg;
+            try {
+                msg = JSON.parse(data.toString());
+            }
+            catch {
+                return;
+            }
+            if (msg.type === 'pairing_token_created') {
+                clearTimeout(timeout);
+                const km = new KeyManager();
+                resolve({
+                    relay: relayUrl,
+                    pairingToken: msg.token,
+                    publicKey: km.getCompactPublicKey(),
+                    expiresIn: msg.expiresIn,
+                });
+                ws.close();
+                return;
+            }
+            if (msg.type === 'auth_error' || msg.type === 'server_error') {
+                clearTimeout(timeout);
+                reject(new Error(msg.message));
+                ws.close();
+            }
+        });
+        ws.on('error', (err) => {
+            clearTimeout(timeout);
+            reject(new Error(`Connection failed: ${err.message}`));
+        });
+    });
+}
+/**
+ * Generate the pairing URL that will be encoded in the QR code.
+ * Phone camera scans → opens this URL → web app auto-pairs.
+ */
+export function buildPairingUrl(info, appBaseUrl) {
+    const base = appBaseUrl ?? process.env.KRAKI_APP_URL ?? 'https://kraki.corelli.cloud';
+    const params = new URLSearchParams();
+    params.set('relay', info.relay);
+    params.set('token', info.pairingToken);
+    // Don't include public key in URL — it makes the QR code too large.
+    // The app will exchange keys through the relay after pairing.
+    return `${base}?${params.toString()}`;
+}
+/**
+ * Legacy: build compact JSON payload (for manual transfer).
+ */
+export function buildPairingPayload(info) {
+    return JSON.stringify({
+        r: info.relay,
+        t: info.pairingToken,
+        k: info.publicKey,
+    });
+}
+/**
+ * Render a QR code to the terminal. Copy link to clipboard.
+ */
+export async function renderQrToTerminal(url) {
+    // Copy to clipboard silently
+    try {
+        const platform = process.platform;
+        if (platform === 'darwin') {
+            execSync('pbcopy', { input: url });
+        }
+        else if (platform === 'linux') {
+            execSync('xclip -selection clipboard', { input: url });
+        }
+    }
+    catch {
+        // Clipboard not available — that's fine
+    }
+    const appBase = process.env.KRAKI_APP_URL ?? 'https://kraki.corelli.cloud';
+    const appLink = `\u001b]8;;${appBase}\u0007${appBase.replace(/^https?:\/\//, '')}\u001b]8;;\u0007`;
+    try {
+        const qr = await import('qrcode-terminal');
+        return new Promise((resolve) => {
+            (qr.default ?? qr).generate(url, { small: true }, (qrString) => {
+                // Indent each line of the QR code
+                const indented = qrString.split('\n').map(line => '    ' + line).join('\n');
+                resolve([
+                    '',
+                    `  Scan with your phone camera, or visit ${appLink} and sign in with GitHub.`,
+                    '  Link copied to clipboard.',
+                    '',
+                    indented,
+                ].join('\n'));
+            });
+        });
+    }
+    catch {
+        return [
+            '',
+            `  Open on your phone, or visit ${appLink} and sign in with GitHub.`,
+            '  Link copied to clipboard.',
+            '',
+            `  ${url}`,
+            '',
+        ].join('\n');
+    }
+}
+//# sourceMappingURL=pair.js.map

package/dist/pair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair.js","sourceRoot":"","sources":["../src/pair.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAG9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAS9C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,SAAkB;IAElB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACjD,CAAC,EAAE,MAAM,CAAC,CAAC;QAEX,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACjB,sDAAsD;YACtD,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;gBACrB,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,SAAS;aACjB,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,GAAQ,CAAC;YACb,IAAI,CAAC;gBAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO;YAAC,CAAC;YAE5D,IAAI,GAAG,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBACzC,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC5B,OAAO,CAAC;oBACN,KAAK,EAAE,QAAQ;oBACf,YAAY,EAAE,GAAG,CAAC,KAAK;oBACvB,SAAS,EAAE,EAAE,CAAC,mBAAmB,EAAE;oBACnC,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB,CAAC,CAAC;gBACH,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC7D,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAiB,EAAE,UAAmB;IACpE,MAAM,IAAI,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,6BAA6B,CAAC;IACtF,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,oEAAoE;IACpE,8DAA8D;IAC9D,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAiB;IACnD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,CAAC,EAAE,IAAI,CAAC,KAAK;QACb,CAAC,EAAE,IAAI,CAAC,YAAY;QACpB,CAAC,EAAE,IAAI,CAAC,SAAS;KAClB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,6BAA6B;IAC7B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,QAAQ,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,QAAQ,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,6BAA6B,CAAC;IAC3E,MAAM,OAAO,GAAG,aAAa,OAAO,SAAS,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,kBAAkB,CAAC;IAEnG,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,QAAgB,EAAE,EAAE;gBACrE,kCAAkC;gBAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5E,OAAO,CAAC;oBACN,EAAE;oBACF,2CAA2C,OAAO,2BAA2B;oBAC7E,6BAA6B;oBAC7B,EAAE;oBACF,QAAQ;iBACT,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE;YACF,kCAAkC,OAAO,2BAA2B;YACpE,6BAA6B;YAC7B,EAAE;YACF,KAAK,GAAG,EAAE;YACV,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/parse-permission.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Parse raw Copilot SDK PermissionRequest into human-readable fields.
+ *
+ * Shared utility so future adapters (Claude, Codex) can reuse the same logic.
+ * Returns proper @kraki/protocol ToolArgs for end-to-end type safety.
+ */
+import type { PermissionRequest } from '@github/copilot-sdk';
+import type { ToolArgs } from '@kraki/protocol';
+/** Normalised representation of a permission request with typed tool args. */
+export interface ParsedPermission {
+    toolArgs: ToolArgs;
+    description: string;
+}
+/**
+ * Parse the raw SDK PermissionRequest into typed protocol fields.
+ *
+ * The Copilot SDK sends permission requests like:
+ *   { kind: "write", fileName: "/tmp/foo.txt", intention: "Create file", diff: "..." }
+ *   { kind: "shell", command: "npm test" }
+ *   { kind: "read",  fileName: "src/index.ts" }
+ *   { kind: "url",   url: "https://example.com" }
+ *
+ * We normalise these into typed ToolArgs + a human-readable description.
+ */
+export declare function parsePermission(req: PermissionRequest): ParsedPermission;

package/dist/parse-permission.js

@@ -0,0 +1,67 @@
+/**
+ * Parse raw Copilot SDK PermissionRequest into human-readable fields.
+ *
+ * Shared utility so future adapters (Claude, Codex) can reuse the same logic.
+ * Returns proper @kraki/protocol ToolArgs for end-to-end type safety.
+ */
+/**
+ * Parse the raw SDK PermissionRequest into typed protocol fields.
+ *
+ * The Copilot SDK sends permission requests like:
+ *   { kind: "write", fileName: "/tmp/foo.txt", intention: "Create file", diff: "..." }
+ *   { kind: "shell", command: "npm test" }
+ *   { kind: "read",  fileName: "src/index.ts" }
+ *   { kind: "url",   url: "https://example.com" }
+ *
+ * We normalise these into typed ToolArgs + a human-readable description.
+ */
+export function parsePermission(req) {
+    const kind = req.kind ?? 'unknown';
+    const intention = req.intention ?? '';
+    switch (kind) {
+        case 'shell': {
+            const command = (req.fullCommandText ?? req.command ?? req.cmd ?? req.script ?? '');
+            return {
+                toolArgs: { toolName: 'shell', args: { command } },
+                description: `Run: ${command}`,
+            };
+        }
+        case 'write': {
+            const path = (req.fileName ?? req.path ?? '');
+            return {
+                toolArgs: { toolName: 'write_file', args: { path, content: '' } },
+                description: `${intention || 'Write'}: ${path}`,
+            };
+        }
+        case 'read': {
+            const path = (req.fileName ?? req.path ?? '');
+            return {
+                toolArgs: { toolName: 'read_file', args: { path } },
+                description: `${intention || 'Read'}: ${path}`,
+            };
+        }
+        case 'url': {
+            const url = (req.url ?? '');
+            return {
+                toolArgs: { toolName: 'fetch_url', args: { url } },
+                description: `Fetch: ${url}`,
+            };
+        }
+        case 'mcp': {
+            const server = (req.serverName ?? '') || 'unknown';
+            const tool = (req.toolName ?? '') || 'unknown';
+            return {
+                toolArgs: { toolName: 'mcp', args: { server, tool, params: {} } },
+                description: `MCP tool: ${tool} on ${server}`,
+            };
+        }
+        default: {
+            const { kind: _, toolCallId: __, ...rest } = req;
+            return {
+                toolArgs: { toolName: intention || kind, args: rest },
+                description: intention || `${kind}: ${JSON.stringify(rest).slice(0, 200)}`,
+            };
+        }
+    }
+}
+//# sourceMappingURL=parse-permission.js.map

package/dist/parse-permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-permission.js","sourceRoot":"","sources":["../src/parse-permission.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,GAAsB;IACpD,MAAM,IAAI,GAAW,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC;IAC3C,MAAM,SAAS,GAAI,GAAG,CAAC,SAAgC,IAAI,EAAE,CAAC;IAE9D,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,OAAO,GAAI,CAAC,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAY,CAAC;YAChG,OAAO;gBACL,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE;gBAClD,WAAW,EAAE,QAAQ,OAAO,EAAE;aAC/B,CAAC;QACJ,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,IAAI,GAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAY,CAAC;YAC1D,OAAO;gBACL,QAAQ,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE;gBACjE,WAAW,EAAE,GAAG,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE;aAChD,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAY,CAAC;YAC1D,OAAO;gBACL,QAAQ,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE;gBACnD,WAAW,EAAE,GAAG,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE;aAC/C,CAAC;QACJ,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,GAAG,GAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAY,CAAC;YACxC,OAAO;gBACL,QAAQ,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE;gBAClD,WAAW,EAAE,UAAU,GAAG,EAAE;aAC7B,CAAC;QACJ,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,MAAM,GAAI,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAY,IAAI,SAAS,CAAC;YAC/D,MAAM,IAAI,GAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAY,IAAI,SAAS,CAAC;YAC3D,OAAO;gBACL,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;gBACjE,WAAW,EAAE,aAAa,IAAI,OAAO,MAAM,EAAE;aAC9C,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;YACjD,OAAO;gBACL,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI,EAAE,IAAI,EAAE,IAA+B,EAAE;gBAChF,WAAW,EAAE,SAAS,IAAI,GAAG,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aAC3E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/relay-client.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Relay client — connects the tentacle to the head via WebSocket.
+ *
+ * Translates adapter events into protocol messages and sends them to the head.
+ * Receives consumer actions from the head and routes them to the adapter.
+ * Handles auth, reconnection, and session lifecycle.
+ */
+import type { DeviceInfo, AuthOkMessage } from '@kraki/protocol';
+import type { AgentAdapter } from './adapters/base.js';
+import type { SessionManager } from './session-manager.js';
+import type { KeyManager } from './key-manager.js';
+export interface RelayClientOptions {
+    /** Relay WebSocket URL (e.g., wss://kraki.corelli.cloud) */
+    relayUrl: string;
+    /** Device info for auth */
+    device: DeviceInfo;
+    /** GitHub token or channel key */
+    token?: string;
+    /** Reconnect delay in ms. Default: 3000 */
+    reconnectDelay?: number;
+    /** Max reconnect attempts. Default: Infinity */
+    maxReconnects?: number;
+}
+export type RelayClientState = 'disconnected' | 'connecting' | 'authenticating' | 'connected';
+export declare class RelayClient {
+    private ws;
+    private adapter;
+    private sessionManager;
+    private keyManager;
+    private options;
+    private state;
+    private reconnectAttempts;
+    private reconnectTimer;
+    private authInfo;
+    private e2eEnabled;
+    /** Cached consumer public keys for E2E encryption */
+    private consumerKeys;
+    /** Messages queued when E2E is enabled but no consumer keys are available yet */
+    private pendingE2eQueue;
+    /** Maps pre-generated sessionId → requestId for concurrent create_session correlation */
+    private pendingRequestIds;
+    private lastServerPingAt;
+    private staleCheckTimer;
+    /** How long without a server ping before we consider the connection stale (ms) */
+    private static readonly STALE_THRESHOLD;
+    /** How often to check for stale connection (ms) */
+    private static readonly STALE_CHECK_INTERVAL;
+    /** Called when relay state changes */
+    onStateChange: ((state: RelayClientState) => void) | null;
+    /** Called on auth success */
+    onAuthenticated: ((info: AuthOkMessage) => void) | null;
+    /** Called on fatal error (won't reconnect) */
+    onFatalError: ((message: string) => void) | null;
+    constructor(adapter: AgentAdapter, sessionManager: SessionManager, options: RelayClientOptions, keyManager?: KeyManager | null);
+    /**
+     * Connect to the relay. Auto-reconnects on disconnect.
+     */
+    connect(): void;
+    /**
+     * Disconnect from the relay. No reconnect.
+     */
+    disconnect(): void;
+    /**
+     * Get current connection state.
+     */
+    getState(): RelayClientState;
+    /**
+     * Get auth info from last successful connection.
+     */
+    getAuthInfo(): AuthOkMessage | null;
+    private handleMessage;
+    private handleConsumerMessage;
+    private handleCreateSession;
+    private wireAdapterEvents;
+    private resumeDisconnectedSessions;
+    private send;
+    /**
+     * Encrypt and send a message to the relay.
+     */
+    private sendEncrypted;
+    /**
+     * Flush queued E2E messages once consumer keys become available.
+     */
+    private flushE2eQueue;
+    private updateConsumerKeys;
+    private startStaleCheck;
+    private stopStaleCheck;
+    private scheduleReconnect;
+    private setState;
+}