@nessielabs/daemon 0.4.0 → 0.5.26

package/vendor/proto/nessie.edge.v1.proto

@@ -0,0 +1,475 @@
+syntax = "proto3";
+
+package nessie.edge.v1;
+
+service Nera {
+  rpc GetHealth(GetHealthRequest) returns (GetHealthResponse);
+
+  // Interactive sign-in (RFC 8252 loopback): nera binds a one-shot HTTP
+  // listener on 127.0.0.1 and returns a Google OAuth URL for the shell to
+  // open in a browser. The OAuth callback lands directly on the listener;
+  // tokens never transit the shell. A completed sign-in ADDS an account and
+  // makes it active. Watch WatchAuthState for the outcome.
+  rpc BeginSignIn(BeginSignInRequest) returns (BeginSignInResponse);
+
+  // Headless sign-in: device pairing approved from a signed-in Nessie app,
+  // or a static sk_nes_v1 API key. Nera polls the pairing endpoint
+  // internally; a redeemed pairing adds an account and makes it active.
+  // SetApiKey validates the key against the backend, resolves its identity,
+  // and adds it as a first-class account. Watch WatchAuthState for the
+  // outcome.
+  rpc StartDevicePairing(StartDevicePairingRequest) returns (DevicePairingInfo);
+  rpc SetApiKey(SetApiKeyRequest) returns (AuthStateResponse);
+
+  // Makes a stored account the active one. Fails with NotFound for an
+  // unknown account id.
+  rpc SwitchAccount(SwitchAccountRequest) returns (AuthStateResponse);
+
+  // Removes one account's credential and cached identity. Defaults to the
+  // active account; its database file is closed but kept on disk. If other
+  // accounts remain, the most recently used one becomes active.
+  rpc SignOut(SignOutRequest) returns (AuthStateResponse);
+
+  rpc GetAuthState(GetAuthStateRequest) returns (AuthStateResponse);
+  rpc WatchAuthState(WatchAuthStateRequest) returns (stream AuthStateResponse);
+
+  // Team membership for the ACTIVE account. These proxy the backend with
+  // nera's stored credential — no team state is cached locally; the backend
+  // stays the source of truth. Membership management (creating teams,
+  // inviting others) is out of scope for this surface.
+  rpc ListTeams(ListTeamsRequest) returns (ListTeamsResponse);
+  rpc ListTeamInvites(ListTeamInvitesRequest) returns (ListTeamInvitesResponse);
+  rpc RespondToTeamInvite(RespondToTeamInviteRequest) returns (RespondToTeamInviteResponse);
+  rpc ListTeamSharingPolicies(ListTeamSharingPoliciesRequest) returns (ListTeamSharingPoliciesResponse);
+
+  // Team sharing (ACL) for one node, proxied to the backend like the team
+  // RPCs — the backend stays the source of truth, nothing is cached
+  // locally. GetNodeSharing reads the node's full grant list; ShareNode
+  // and UnshareNode mutate it and return the fresh state. All three
+  // require an OAuth-backed active account.
+  rpc GetNodeSharing(GetNodeSharingRequest) returns (NodeSharing);
+  rpc ShareNode(ShareNodeRequest) returns (NodeSharing);
+  rpc UnshareNode(UnshareNodeRequest) returns (NodeSharing);
+
+  // Capture sources for the ACTIVE account, stored in its database's
+  // integration table (a strict subset of the Mac app's model). Discovery
+  // is a read-only scan; nothing is captured until a source is explicitly
+  // added AND the ingestion engine runs it (per-source `enabled` gates
+  // membership in the automatic loop).
+  rpc DiscoverSources(DiscoverSourcesRequest) returns (DiscoverSourcesResponse);
+  rpc AddSource(AddSourceRequest) returns (Source);
+  rpc ListSources(ListSourcesRequest) returns (ListSourcesResponse);
+  rpc ConfigureSource(ConfigureSourceRequest) returns (Source);
+  // Mac-app removal semantics: cancel sync, clear team ACLs (aborting the
+  // removal if that fails), tombstone the source's nodes and its
+  // integration root, then soft-delete the integration row. Tombstones
+  // propagate to the cloud on the next sync cycle.
+  rpc RemoveSource(RemoveSourceRequest) returns (RemoveSourceResponse);
+
+  // Engine control. Start/Stop toggle the PERSISTED automatic schedules
+  // (per account); Trigger runs one pass immediately regardless of the
+  // automatic state. Ingestion scans enabled sources into the local
+  // database; cloud sync runs one preflight -> pull -> push cycle against
+  // the cloud with the active account's credential.
+  rpc StartIngestion(StartIngestionRequest) returns (StartIngestionResponse);
+  rpc StopIngestion(StopIngestionRequest) returns (StopIngestionResponse);
+  rpc TriggerIngestion(TriggerIngestionRequest) returns (TriggerIngestionResponse);
+  rpc StartCloudSync(StartCloudSyncRequest) returns (StartCloudSyncResponse);
+  rpc StopCloudSync(StopCloudSyncRequest) returns (StopCloudSyncResponse);
+  rpc TriggerCloudSync(TriggerCloudSyncRequest) returns (TriggerCloudSyncResponse);
+  rpc GetRuntimeStatus(GetRuntimeStatusRequest) returns (RuntimeStatusResponse);
+
+  // Account-level cloud sync opt-in, distinct from the Start/Stop loop
+  // toggles above (which require the account to already be opted in).
+  // The backend's CloudSyncEnabled flag is latched by the first sync
+  // preflight, so Enable runs one preflight explicitly — that IS the
+  // opt-in — then re-reads the user and turns the automatic loop on.
+  // Disable turns the automatic loop off; matching the Mac app, it does
+  // not clear the account-level flag on the backend (other devices keep
+  // their own sync state). Both return the refreshed auth state so the
+  // caller sees cloud_sync_enabled without a follow-up GetAuthState.
+  rpc EnableCloudSync(EnableCloudSyncRequest) returns (AuthStateResponse);
+  rpc DisableCloudSync(DisableCloudSyncRequest) returns (AuthStateResponse);
+}
+
+message GetHealthRequest {}
+
+message GetHealthResponse {
+  string status = 1;
+  string version = 2;
+}
+
+message BeginSignInRequest {}
+
+message BeginSignInResponse {
+  // Google OAuth URL to open in the user's browser.
+  string url = 1;
+}
+
+message SwitchAccountRequest {
+  // Account (user) id to activate.
+  string user_id = 1;
+}
+
+message SignOutRequest {
+  // Account (user) id to sign out; empty means the active account.
+  string user_id = 1;
+}
+
+message StartDevicePairingRequest {
+  // Human-readable name shown in the approving app, e.g. a hostname.
+  string device_name = 1;
+}
+
+message DevicePairingInfo {
+  // Code the user enters in an already-signed-in Nessie app to approve.
+  string user_code = 1;
+  string verification_hint = 2;
+  // RFC 3339; the pairing must be approved before this instant.
+  string expires_at = 3;
+}
+
+message SetApiKeyRequest {
+  string api_key = 1;
+}
+
+message GetAuthStateRequest {}
+
+message WatchAuthStateRequest {}
+
+enum AuthStatus {
+  AUTH_STATUS_UNSPECIFIED = 0;
+  AUTH_STATUS_SIGNED_OUT = 1;
+  // A device pairing is awaiting approval; pairing_user_code is set.
+  AUTH_STATUS_PAIRING_PENDING = 2;
+  AUTH_STATUS_SIGNED_IN = 3;
+  // The active account's credentials were rejected and cannot be
+  // refreshed; a new sign-in is required for that account.
+  AUTH_STATUS_REAUTH_REQUIRED = 4;
+}
+
+message AuthUser {
+  string id = 1;
+  string email = 2;
+  string name = 3;
+  bool cloud_sync_enabled = 4;
+}
+
+message ListTeamsRequest {}
+
+message Team {
+  string team_id = 1;
+  string name = 2;
+  // The active account's role in the team: "admin" or "member".
+  string role = 3;
+}
+
+message ListTeamsResponse {
+  repeated Team teams = 1;
+}
+
+message ListTeamInvitesRequest {}
+
+message TeamInvite {
+  string team_id = 1;
+  string team_name = 2;
+  // Display name of the inviter, e.g. for "Erik invited you to Parrot".
+  string invited_by_name = 3;
+  // RFC 3339.
+  string created_at = 4;
+}
+
+message ListTeamInvitesResponse {
+  repeated TeamInvite invites = 1;
+}
+
+message RespondToTeamInviteRequest {
+  string team_id = 1;
+  // false declines the invite.
+  bool accept = 2;
+}
+
+message RespondToTeamInviteResponse {
+  // The joined team; unset when the invite was declined.
+  Team team = 1;
+}
+
+message ListTeamSharingPoliciesRequest {
+  string team_id = 1;
+}
+
+message TeamSharingPolicy {
+  string id = 1;
+  string team_id = 2;
+  string name = 3;
+  repeated string resource_kinds = 4;
+  string share_scope = 5;
+  repeated string repo_keys = 6;
+  string audience = 7;
+  repeated string audience_user_ids = 8;
+  bool enabled = 9;
+}
+
+message ListTeamSharingPoliciesResponse {
+  repeated TeamSharingPolicy policies = 1;
+}
+
+message AuthStateResponse {
+  // Status of the ACTIVE account (SIGNED_OUT when no account is active).
+  AuthStatus status = 1;
+  // The active account's identity; set when status is SIGNED_IN or
+  // REAUTH_REQUIRED.
+  AuthUser user = 2;
+  // Set while a device pairing is pending, even when an account is active
+  // (status only becomes PAIRING_PENDING when no account is).
+  string pairing_user_code = 3;
+  // Every stored account, active one included.
+  repeated AuthUser accounts = 4;
+  // Last known billing status for the ACTIVE account. Unset when no
+  // status has been fetched yet (freshly signed in, offline) — unset
+  // means "unknown", never "no access". Refreshed on auth changes and at
+  // the start of every cloud sync cycle.
+  BillingState billing = 5;
+}
+
+// The active account's subscription state, read from the backend's
+// GET /billing/status (never initiated or computed locally when the
+// backend supplies entitlements). nera enforces it: no access pauses
+// ingestion and cloud sync; the integration limit caps enabled sources.
+// Auth and team RPCs are never billing-gated — joining a team is often
+// how an account gains a subscription.
+message BillingState {
+  // Backend tier vocabulary: "none", "plus", "plus_v2", "pro", "team",
+  // "grandfathered_*".
+  string tier = 1;
+  // Stripe subscription status: "active", "trialing", "past_due", ...
+  string status = 2;
+  // Product access. false pauses ingestion and cloud sync.
+  bool has_access = 3;
+  // CLI/MCP access.
+  bool has_mcp_access = 4;
+  // Max ACTIVE integrations; 0 = unlimited.
+  uint32 active_integration_limit = 5;
+  // "personal_subscription" | "team_subscription" | "grandfathered" |
+  // "none".
+  string access_source = 6;
+  // Set when access is inherited from a team subscription.
+  string team_name = 7;
+}
+
+// --- Node sharing ---
+
+message GetNodeSharingRequest {
+  // Node id (UUID) whose sharing state to read.
+  string node_id = 1;
+}
+
+// Who a grant covers within its team.
+enum Audience {
+  AUDIENCE_UNSPECIFIED = 0;
+  // Everyone in the team.
+  AUDIENCE_TEAM = 1;
+  // Team admins only.
+  AUDIENCE_ADMINS = 2;
+  // One specific member (user_id).
+  AUDIENCE_USER = 3;
+}
+
+// How much of the node's data a grant covers.
+enum Scope {
+  SCOPE_UNSPECIFIED = 0;
+  // Everything under the node.
+  SCOPE_ALL = 1;
+  // Only the listed repo_keys.
+  SCOPE_REPOS = 2;
+}
+
+// One ACL grant covering the node: either the node's own grant or one
+// inherited from an ancestor (see `inherited`).
+message SharingGrant {
+  string team_id = 1;
+  Audience audience = 2;
+  // Set when audience is AUDIENCE_USER.
+  string user_id = 3;
+  Scope scope = 4;
+  // Set when scope is SCOPE_REPOS.
+  repeated string repo_keys = 5;
+  // True when the grant lives on an ancestor's ACL, not this node's.
+  // Mac-parity semantics: the local `contains` chain is walked
+  // closest-first, and for each team only the CLOSEST shared ancestor
+  // contributes grants; an inherited grant whose (team, audience, user)
+  // exactly matches one of the node's own grants is dropped (the own
+  // grant wins). Inherited grants are read-only through this API —
+  // ShareNode/UnshareNode operate on the node's own ACL only, so to
+  // remove one, unshare the ancestor it came from (the Mac disables
+  // removal of inherited rows the same way).
+  bool inherited = 6;
+  // The ancestor node whose ACL carries the grant; empty on own grants.
+  string inherited_from_node_id = 7;
+}
+
+message NodeSharing {
+  // Canonical (lowercase) node id.
+  string node_id = 1;
+  repeated SharingGrant grants = 2;
+  // Distinct repo keys among the node's live children in the local store,
+  // sorted — lets a share sheet offer repo-scoped choices without another
+  // RPC.
+  repeated string available_repo_keys = 3;
+}
+
+message ShareNodeRequest {
+  string node_id = 1;
+  string team_id = 2;
+  // AUDIENCE_TEAM and AUDIENCE_ADMINS share one backend row per
+  // (team, node) — the backend key has no admin component — so sharing
+  // one over the other replaces it rather than adding a second grant
+  // (Mac parity: selecting Everyone displaces Admins and vice versa).
+  Audience audience = 3;
+  // AUDIENCE_USER only: one grant is written per listed member.
+  repeated string user_ids = 4;
+  Scope scope = 5;
+  // Required iff scope is SCOPE_REPOS.
+  repeated string repo_keys = 6;
+}
+
+// Selectors address the NODE'S OWN ACL only. Grants inherited from an
+// ancestor are never touched: a selector that only matches inherited
+// grants is a no-op (the deletes are keyed on this node's id, which has
+// no such rows). This mirrors the Mac, whose share modal disables the
+// remove action on inherited rows without calling the server.
+message UnshareNodeRequest {
+  string node_id = 1;
+  // Empty (with empty user_ids): remove every grant the caller owns for
+  // the node, across all teams. Set alone: remove that team's grants
+  // (team-wide and per-user).
+  string team_id = 2;
+  // Remove only these members' per-user grants; team_id is required.
+  repeated string user_ids = 3;
+}
+
+// --- Capture sources ---
+
+enum SourceState {
+  SOURCE_STATE_UNSPECIFIED = 0;
+  // Detected / configured; will be scanned when enabled.
+  SOURCE_STATE_READY = 1;
+  // The source's base path does not exist on this machine.
+  SOURCE_STATE_NOT_DETECTED = 2;
+  // Account-backed source needs a sign-in (future kinds; unused for
+  // local coding agents).
+  SOURCE_STATE_NEEDS_AUTH = 3;
+  SOURCE_STATE_ERROR = 4;
+}
+
+message Source {
+  // Integration row id (UUID).
+  string source_id = 1;
+  // "codex" | "claude_code" | "cursor" | "claude_cowork" | "pi".
+  string kind = 2;
+  // e.g. "Claude Code on tigers-mbp".
+  string display_name = 3;
+  // Member of the automatic ingestion loop.
+  bool enabled = 4;
+  SourceState state = 5;
+  string base_path = 6;
+  // Connected account for account-backed kinds; empty for local agents.
+  string account_hint = 7;
+  // RFC 3339 instant of the last successful ingestion pass; empty if never.
+  string last_synced_at = 8;
+  // Detail for SOURCE_STATE_ERROR; empty when healthy.
+  string last_error = 9;
+}
+
+message DiscoverSourcesRequest {}
+
+message DiscoveredSource {
+  string kind = 1;
+  string display_name = 2;
+  string base_path = 3;
+  // An instance of this kind is already added for the active account.
+  bool already_added = 4;
+}
+
+message DiscoverSourcesResponse {
+  repeated DiscoveredSource sources = 1;
+}
+
+message AddSourceRequest {
+  string kind = 1;
+  // Override the default base path for the kind.
+  string base_path = 2;
+  // false registers the source without entering the automatic loop (the
+  // onboarding pattern: add during consent, start capture later).
+  bool enabled = 3;
+}
+
+message ListSourcesRequest {}
+
+message ListSourcesResponse {
+  repeated Source sources = 1;
+}
+
+message ConfigureSourceRequest {
+  string source_id = 1;
+  optional bool enabled = 2;
+  optional string base_path = 3;
+}
+
+message RemoveSourceRequest {
+  string source_id = 1;
+}
+
+message RemoveSourceResponse {}
+
+// --- Engine control ---
+
+message StartIngestionRequest {}
+message StartIngestionResponse {}
+message StopIngestionRequest {}
+message StopIngestionResponse {}
+
+message TriggerIngestionRequest {}
+message TriggerIngestionResponse {
+  // Enabled sources the pass covers.
+  repeated string source_ids = 1;
+}
+
+message StartCloudSyncRequest {}
+message StartCloudSyncResponse {}
+message StopCloudSyncRequest {}
+message StopCloudSyncResponse {}
+
+message TriggerCloudSyncRequest {}
+message TriggerCloudSyncResponse {}
+
+message GetRuntimeStatusRequest {}
+
+message EngineStatus {
+  // Persisted automatic schedule state for the active account.
+  bool auto_enabled = 1;
+  // True while a pass/cycle is currently executing.
+  bool running = 2;
+  // "manual", "timer", or "dirty_nudge" for the last started pass/cycle.
+  string last_trigger = 3;
+  // RFC 3339 instant for the last started pass/cycle; empty if unknown.
+  string last_started_at = 4;
+  // RFC 3339 instant for the last completed pass/cycle; empty if unknown.
+  string last_completed_at = 5;
+  // RFC 3339 instant for the last successful pass/cycle; empty if unknown.
+  string last_success_at = 6;
+  // Last observed failure; empty when the last pass/cycle succeeded or none ran.
+  string last_error = 7;
+  // RFC 3339 instant for the last skipped pass/cycle; empty if none skipped.
+  string last_skipped_at = 8;
+  // Reason the last pass/cycle was skipped; empty if none skipped.
+  string last_skip_reason = 9;
+}
+
+message RuntimeStatusResponse {
+  EngineStatus ingestion = 1;
+  EngineStatus cloud_sync = 2;
+}
+
+message EnableCloudSyncRequest {}
+message DisableCloudSyncRequest {}

package/dist/api/http.js

@@ -1,44 +0,0 @@
-export class ApiError extends Error {
-    status;
-    body;
-    constructor(message, status, body) {
-        super(message);
-        this.status = status;
-        this.body = body;
-    }
-}
-export async function postJson(baseUrl, path, body, options = {}) {
-    const fetchImpl = options.fetchImpl ?? fetch;
-    const response = await fetchImpl(new URL(path, baseUrl), {
-        method: "POST",
-        headers: {
-            "content-type": "application/json",
-            ...(options.token ? { authorization: `Bearer ${options.token}` } : {}),
-        },
-        body: JSON.stringify(body),
-    });
-    const text = await response.text();
-    if (!response.ok) {
-        throw new ApiError(`HTTP status ${response.status}: ${text || response.statusText}`, response.status, text);
-    }
-    return (text ? JSON.parse(text) : {});
-}
-export async function getJson(baseUrl, path, options = {}) {
-    const fetchImpl = options.fetchImpl ?? fetch;
-    const url = new URL(path, baseUrl);
-    for (const [key, value] of Object.entries(options.query ?? {})) {
-        if (value !== undefined)
-            url.searchParams.set(key, value);
-    }
-    const response = await fetchImpl(url, {
-        method: "GET",
-        headers: {
-            ...(options.token ? { authorization: `Bearer ${options.token}` } : {}),
-        },
-    });
-    const text = await response.text();
-    if (!response.ok) {
-        throw new ApiError(`HTTP status ${response.status}: ${text || response.statusText}`, response.status, text);
-    }
-    return (text ? JSON.parse(text) : {});
-}

package/dist/auth/deviceFlow.js

@@ -1,36 +0,0 @@
-import { setTimeout as sleep } from "node:timers/promises";
-import { postJson } from "../api/http.js";
-import { authApiUrl } from "../config/endpoints.js";
-export async function runDeviceAuth(input) {
-    const log = input.log ?? console;
-    const fetchImpl = input.fetchImpl ?? fetch;
-    const sleepMs = input.sleepMs ?? sleep;
-    const start = await postJson(authApiUrl, "/auth/device/start", {
-        device_name: input.deviceName,
-        platform: "linux",
-    }, { fetchImpl });
-    log.log(`Open ${start.verification_uri_complete ?? start.verification_uri ?? "Nessie"} and enter code ${start.user_code}.`);
-    const intervalMs = Math.max(1, start.interval ?? 5) * 1000;
-    const expiresAt = Date.now() + Math.max(60, start.expires_in ?? 600) * 1000;
-    while (Date.now() < expiresAt) {
-        await sleepMs(intervalMs);
-        const poll = await postJson(authApiUrl, "/auth/device/poll", {
-            device_code: start.device_code,
-        }, { fetchImpl });
-        if (poll.status === "pending")
-            continue;
-        if (poll.status === "approved" && poll.access_token && poll.device_id) {
-            return {
-                accessToken: poll.access_token,
-                refreshToken: poll.refresh_token ?? null,
-                deviceId: poll.device_id,
-            };
-        }
-        if (poll.status === "approved") {
-            throw new Error("Auth approved but server response missing access_token or device_id.");
-        }
-        if (poll.status === "expired")
-            break;
-    }
-    throw new Error("Device auth expired before approval.");
-}

package/dist/auth/tokens.js

@@ -1,30 +0,0 @@
-import { ApiError, postJson } from "../api/http.js";
-import { authApiUrl } from "../config/endpoints.js";
-export class AuthRefreshError extends Error {
-}
-export async function refreshAccessToken(config, options = {}) {
-    if (!config.refreshToken) {
-        throw new AuthRefreshError("Access token expired and no refresh token is configured.");
-    }
-    try {
-        const response = await postJson(authApiUrl, "/auth/refresh", {
-            refresh_token: config.refreshToken,
-        }, { fetchImpl: options.fetchImpl });
-        if (!response.access_token) {
-            throw new AuthRefreshError("Token refresh response missing access_token.");
-        }
-        return {
-            ...config,
-            accessToken: response.access_token,
-            refreshToken: response.refresh_token ?? config.refreshToken,
-        };
-    }
-    catch (error) {
-        if (error instanceof AuthRefreshError)
-            throw error;
-        if (error instanceof ApiError && error.status === 401) {
-            throw new AuthRefreshError("Refresh token is invalid or expired.");
-        }
-        throw error;
-    }
-}

package/dist/commands/setup.js

@@ -1,75 +0,0 @@
-import { checkbox, confirm } from "@inquirer/prompts";
-import { hostname } from "node:os";
-import { runDeviceAuth } from "../auth/deviceFlow.js";
-import { getDaemonPaths } from "../config/paths.js";
-import { createConfig, writeConfig } from "../config/store.js";
-import { installUserService } from "../service/systemd.js";
-import { detectSources } from "../sources/detect.js";
-export async function runSetup(options, depsOverride = {}) {
-    const deps = resolveSetupDeps(depsOverride);
-    const deviceName = hostname();
-    if (options.apiKey !== undefined) {
-        await runAPIKeySetup({
-            apiKey: options.apiKey,
-            deviceName,
-            deps,
-        });
-        return;
-    }
-    const auth = await runDeviceAuth({ deviceName });
-    const detectedSources = await deps.detectSources();
-    if (detectedSources.length === 0) {
-        throw new Error("No supported Codex or Claude Code history directories were found.");
-    }
-    const selectedSources = await checkbox({
-        message: "Select sources for this daemon to ingest",
-        choices: detectedSources.map((source) => ({
-            name: `${source.displayName} (${source.basePath})`,
-            value: source,
-            checked: true,
-        })),
-        required: true,
-    });
-    const config = createConfig({
-        accessToken: auth.accessToken,
-        refreshToken: auth.refreshToken,
-        deviceId: auth.deviceId,
-        deviceName,
-        selectedSources,
-    });
-    await deps.writeConfig(config, deps.paths);
-    console.log(`Saved config to ${deps.paths.configFile}`);
-    if (await confirm({ message: "Install and start the user systemd service?", default: true })) {
-        await installUserService(deps.paths);
-        console.log("Installed and started nessie-daemon.service");
-    }
-}
-async function runAPIKeySetup(input) {
-    const apiKey = input.apiKey.trim();
-    if (!apiKey)
-        throw new Error("--api-key cannot be empty.");
-    const detectedSources = await input.deps.detectSources();
-    if (detectedSources.length === 0) {
-        throw new Error("No supported Codex or Claude Code history directories were found.");
-    }
-    const config = createConfig({
-        apiKey,
-        deviceName: input.deviceName,
-        selectedSources: detectedSources,
-    });
-    await input.deps.writeConfig(config, input.deps.paths);
-    console.log("Configured Nessie daemon with API key auth.");
-    console.log(`Selected ${detectedSources.length} source(s):`);
-    for (const source of detectedSources) {
-        console.log(`- ${source.displayName} (${source.basePath})`);
-    }
-    console.log(`Saved config to ${input.deps.paths.configFile}`);
-    console.log("Run `nessie-daemon start` to start syncing.");
-}
-function resolveSetupDeps(overrides) {
-    return {
-        detectSources: overrides.detectSources ?? detectSources,
-        writeConfig: overrides.writeConfig ?? writeConfig,
-        paths: overrides.paths ?? getDaemonPaths(),
-    };
-}

package/dist/config/endpoints.js

@@ -1,2 +0,0 @@
-export const syncApiUrl = "https://nessie-codebase-843813578359.us-west1.run.app";
-export const authApiUrl = "https://nessie-notes-go-843813578359.us-west1.run.app";

package/dist/config/paths.js

@@ -1,19 +0,0 @@
-import { homedir } from "node:os";
-import { join } from "node:path";
-export function getDaemonPaths(env = process.env, home = homedir()) {
-    const configHome = env.XDG_CONFIG_HOME ?? join(home, ".config");
-    const stateHome = env.XDG_STATE_HOME ?? join(home, ".local", "state");
-    const configDir = join(configHome, "nessie-daemon");
-    const stateDir = join(stateHome, "nessie-daemon");
-    const systemdUserDir = join(configHome, "systemd", "user");
-    return {
-        configDir,
-        stateDir,
-        configFile: join(configDir, "config.json"),
-        databaseFile: join(stateDir, "nessie.sqlite"),
-        pidFile: join(stateDir, "daemon.pid"),
-        logFile: join(stateDir, "daemon.log"),
-        systemdUserDir,
-        systemdServiceFile: join(systemdUserDir, "nessie-daemon.service"),
-    };
-}