@nordbyte/nordrelay 0.8.0 → 0.8.2

package/dist/{access-control.js → access/access-control.js}

@@ -1,4 +1,4 @@
-import { permissionForWebRequestFromContract } from "./web-api-contract.js";
+import { permissionForWebRequestFromContract } from "../web/web-api-contract.js";
 export const ALL_PERMISSIONS = [
     "inspect",
     "sessions.read",

package/dist/{audit-log.js → access/audit-log.js}

@@ -1,6 +1,6 @@
 import { randomUUID } from "node:crypto";
-import { auditCategoryForAction, } from "./activity-events.js";
-import { createDocumentStore } from "./state-backend.js";
+import { auditCategoryForAction, } from "../core/activity-events.js";
+import { createDocumentStore } from "../state/state-backend.js";
 export class AuditLogStore {
     store;
     maxEvents;

package/dist/{session-locks.js → access/session-locks.js}

@@ -1,4 +1,4 @@
-import { createDocumentStore } from "./state-backend.js";
+import { createDocumentStore } from "../state/state-backend.js";
 export class SessionLockStore {
     store;
     constructor(workspace, backend = "json") {

package/dist/{user-management.js → access/user-management.js}

@@ -2,7 +2,7 @@ import { closeSync, mkdirSync, openSync, rmSync, statSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { ADMIN_GROUP_ID, USER_GROUP_ID, } from "./access-control.js";
-import { readJsonFileWithBackup, writeJsonFileAtomic } from "./persistence.js";
+import { readJsonFileWithBackup, writeJsonFileAtomic } from "../state/persistence.js";
 import { allPermissionsSafe as ALL_PERMISSIONS_SAFE, assertActiveAdminExists, isPathInside, normalizeDiscordId, normalizeEmail, normalizeGroupIds, normalizeNumberList, normalizePayload, normalizePermissions, normalizeSlackId, normalizeStringList, normalizeWorkspacePath, slugify, } from "./user-management-normalize.js";
 import { constantTimeStringEqual, hashPassword, hashToken, randomId, randomLinkCode, randomSessionToken, sleepSync, verifyPasswordHash, } from "./user-management-crypto.js";
 const SESSION_TTL_MS = 7 * 24 * 60 * 60 * 1000;

package/dist/{claude-code-cli.js → agents/claude-code/claude-code-cli.js}

@@ -1,10 +1,10 @@
-import { findExecutableOnPath } from "./codex-cli.js";
+import { findExecutableOnPath } from "../codex/codex-cli.js";
 export function resolveClaudeCodeCli(env = process.env, explicitPath) {
     const configuredPath = optionalString(explicitPath) ?? optionalString(env.CLAUDE_CODE_CLI_PATH);
     if (configuredPath) {
         return { path: configuredPath, source: "env" };
     }
-    const pathMatch = findExecutableOnPath("claude", env.PATH);
+    const pathMatch = findExecutableOnPath("claude", env.PATH, { pathext: env.PATHEXT });
     return pathMatch ? { path: pathMatch, source: "path" } : { source: "bundled" };
 }
 export function describeClaudeCodeCli(resolution) {

package/dist/{claude-code-session.js → agents/claude-code/claude-code-session.js}

@@ -1,7 +1,7 @@
 import { query } from "@anthropic-ai/claude-agent-sdk";
 import { readFile } from "node:fs/promises";
 import path from "node:path";
-import { CLAUDE_CODE_AGENT_CAPABILITIES, CLAUDE_CODE_EFFORT_LEVELS, } from "./agent.js";
+import { CLAUDE_CODE_AGENT_CAPABILITIES, CLAUDE_CODE_EFFORT_LEVELS, } from "../shared/agent.js";
 import { resolveClaudeCodeCli } from "./claude-code-cli.js";
 import { claudeCodeProfileAsLaunchProfile, findClaudeCodeLaunchProfile, listClaudeCodeLaunchProfiles, } from "./claude-code-launch.js";
 import { getClaudeCodeSession, listClaudeCodeSessions, listClaudeCodeWorkspaces, } from "./claude-code-state.js";

package/dist/{codex-cli.js → agents/codex/codex-cli.js}

@@ -12,7 +12,7 @@ export function resolveCodexCli(env = process.env) {
     if (isEnabled(env.CODEX_USE_BUNDLED_CLI)) {
         return { source: "bundled" };
     }
-    const pathMatch = findExecutableOnPath("codex", env.PATH);
+    const pathMatch = findExecutableOnPath("codex", env.PATH, { pathext: env.PATHEXT });
     return pathMatch ? { path: pathMatch, source: "path" } : { source: "bundled" };
 }
 export function describeCodexCli(resolution) {
@@ -21,13 +21,11 @@ export function describeCodexCli(resolution) {
     }
     return "bundled @openai/codex";
 }
-export function findExecutableOnPath(command, pathValue) {
+export function findExecutableOnPath(command, pathValue, options = {}) {
     if (!pathValue) {
         return undefined;
     }
-    const extensions = process.platform === "win32"
-        ? ["", ...(process.env.PATHEXT || ".EXE;.CMD;.BAT;.COM").split(";")]
-        : [""];
+    const extensions = executableExtensions(options.platform ?? process.platform, options.pathext ?? process.env.PATHEXT);
     for (const rawDirectory of pathValue.split(path.delimiter)) {
         const directory = rawDirectory.trim();
         if (!directory) {
@@ -43,6 +41,17 @@ export function findExecutableOnPath(command, pathValue) {
     }
     return undefined;
 }
+function executableExtensions(platform, pathextValue) {
+    if (platform !== "win32") {
+        return [""];
+    }
+    const pathext = (pathextValue || ".COM;.EXE;.BAT;.CMD")
+        .split(";")
+        .map((extension) => extension.trim())
+        .filter(Boolean)
+        .map((extension) => extension.startsWith(".") ? extension : `.${extension}`);
+    return [...new Set([...pathext, ""])];
+}
 function isExecutable(filePath) {
     try {
         accessSync(filePath, constants.X_OK);

package/dist/{codex-session.js → agents/codex/codex-session.js}

@@ -3,7 +3,7 @@ import { resolveCodexCli } from "./codex-cli.js";
 import { readCodexFastMode, writeCodexFastMode } from "./codex-config.js";
 import { getThread, getThreadUsage, listModels, listThreads, listWorkspaces, } from "./codex-state.js";
 import { createLaunchProfile, findLaunchProfile, formatLaunchProfileBehavior, } from "./codex-launch.js";
-import { CODEX_AGENT_CAPABILITIES, } from "./agent.js";
+import { CODEX_AGENT_CAPABILITIES, } from "../shared/agent.js";
 export class CodexSessionService {
     config;
     codex = null;
@@ -47,8 +47,6 @@ export class CodexSessionService {
         const effectiveLaunchProfile = this.activeThreadLaunchProfile ?? this.currentLaunchProfile;
         const codexFastMode = readCodexFastMode();
         this.lastObservedFastMode = codexFastMode;
-        const attachedThreadFastMode = effectiveLaunchProfile.id === "attached-thread" &&
-            effectiveLaunchProfile.approvalPolicy === "never";
         const info = {
             agentId: "codex",
             agentLabel: "Codex",
@@ -60,7 +58,7 @@ export class CodexSessionService {
             launchProfileBehavior: formatLaunchProfileBehavior(effectiveLaunchProfile),
             sandboxMode: effectiveLaunchProfile.sandboxMode,
             approvalPolicy: effectiveLaunchProfile.approvalPolicy,
-            fastMode: attachedThreadFastMode || (codexFastMode ?? (effectiveLaunchProfile.approvalPolicy === "never")),
+            fastMode: codexFastMode ?? (effectiveLaunchProfile.approvalPolicy === "never"),
             unsafeLaunch: effectiveLaunchProfile.unsafe,
             capabilities: CODEX_AGENT_CAPABILITIES,
         };

package/dist/{hermes-cli.js → agents/hermes/hermes-cli.js}

@@ -1,10 +1,10 @@
-import { findExecutableOnPath } from "./codex-cli.js";
+import { findExecutableOnPath } from "../codex/codex-cli.js";
 export function resolveHermesCli(env = process.env, explicitPath) {
     const configuredPath = optionalString(explicitPath) ?? optionalString(env.HERMES_CLI_PATH);
     if (configuredPath) {
         return { path: configuredPath, source: "env" };
     }
-    const pathMatch = findExecutableOnPath("hermes", env.PATH);
+    const pathMatch = findExecutableOnPath("hermes", env.PATH, { pathext: env.PATHEXT });
     return pathMatch ? { path: pathMatch, source: "path" } : { source: "missing" };
 }
 export function describeHermesCli(resolution) {

package/dist/{hermes-launch.js → agents/hermes/hermes-launch.js}

@@ -1,4 +1,4 @@
-import { createLaunchProfile } from "./codex-launch.js";
+import { createLaunchProfile } from "../codex/codex-launch.js";
 export const HERMES_LAUNCH_PROFILES = [
     {
         id: "default",

package/dist/{hermes-session.js → agents/hermes/hermes-session.js}

@@ -1,7 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { readFile } from "node:fs/promises";
 import path from "node:path";
-import { HERMES_AGENT_CAPABILITIES, HERMES_REASONING_EFFORTS, } from "./agent.js";
+import { HERMES_AGENT_CAPABILITIES, HERMES_REASONING_EFFORTS, } from "../shared/agent.js";
 import { HermesApiClient } from "./hermes-api.js";
 import { resolveHermesCli } from "./hermes-cli.js";
 import { findHermesLaunchProfile, hermesProfileAsLaunchProfile, listHermesLaunchProfiles, } from "./hermes-launch.js";

package/dist/{openclaw-cli.js → agents/openclaw/openclaw-cli.js}

@@ -1,10 +1,10 @@
-import { findExecutableOnPath } from "./codex-cli.js";
+import { findExecutableOnPath } from "../codex/codex-cli.js";
 export function resolveOpenClawCli(env = process.env, explicitPath) {
     const configuredPath = optionalString(explicitPath) ?? optionalString(env.OPENCLAW_CLI_PATH);
     if (configuredPath) {
         return { path: configuredPath, source: "env" };
     }
-    const pathMatch = findExecutableOnPath("openclaw", env.PATH);
+    const pathMatch = findExecutableOnPath("openclaw", env.PATH, { pathext: env.PATHEXT });
     return pathMatch ? { path: pathMatch, source: "path" } : { source: "missing" };
 }
 export function describeOpenClawCli(resolution) {

package/dist/{openclaw-launch.js → agents/openclaw/openclaw-launch.js}

@@ -1,4 +1,4 @@
-import { createLaunchProfile } from "./codex-launch.js";
+import { createLaunchProfile } from "../codex/codex-launch.js";
 export const OPENCLAW_LAUNCH_PROFILES = [
     {
         id: "default",

package/dist/{openclaw-session.js → agents/openclaw/openclaw-session.js}

@@ -2,7 +2,7 @@ import { randomUUID } from "node:crypto";
 import { spawnSync } from "node:child_process";
 import { readFile } from "node:fs/promises";
 import path from "node:path";
-import { OPENCLAW_AGENT_CAPABILITIES, OPENCLAW_THINKING_LEVELS, } from "./agent.js";
+import { OPENCLAW_AGENT_CAPABILITIES, OPENCLAW_THINKING_LEVELS, } from "../shared/agent.js";
 import { OpenClawGatewayClient, extractOpenClawOutputText } from "./openclaw-gateway.js";
 import { findOpenClawLaunchProfile, listOpenClawLaunchProfiles, openClawProfileAsLaunchProfile, } from "./openclaw-launch.js";
 import { resolveOpenClawCli } from "./openclaw-cli.js";

package/dist/{pi-cli.js → agents/pi/pi-cli.js}

@@ -1,10 +1,10 @@
-import { findExecutableOnPath } from "./codex-cli.js";
+import { findExecutableOnPath } from "../codex/codex-cli.js";
 export function resolvePiCli(env = process.env, explicitPath) {
     const configuredPath = optionalString(explicitPath) ?? optionalString(env.PI_CLI_PATH);
     if (configuredPath) {
         return { path: configuredPath, source: "env" };
     }
-    const pathMatch = findExecutableOnPath("pi", env.PATH);
+    const pathMatch = findExecutableOnPath("pi", env.PATH, { pathext: env.PATHEXT });
     return pathMatch ? { path: pathMatch, source: "path" } : { source: "missing" };
 }
 export function describePiCli(resolution) {

package/dist/{pi-launch.js → agents/pi/pi-launch.js}

@@ -1,4 +1,4 @@
-import { createLaunchProfile } from "./codex-launch.js";
+import { createLaunchProfile } from "../codex/codex-launch.js";
 export const PI_LAUNCH_PROFILES = [
     {
         id: "default",

package/dist/{pi-session.js → agents/pi/pi-session.js}

@@ -1,7 +1,7 @@
 import { spawnSync } from "node:child_process";
 import { readFile } from "node:fs/promises";
 import path from "node:path";
-import { PI_AGENT_CAPABILITIES, PI_THINKING_LEVELS, } from "./agent.js";
+import { PI_AGENT_CAPABILITIES, PI_THINKING_LEVELS, } from "../shared/agent.js";
 import { findPiLaunchProfile, listPiLaunchProfiles, piProfileAsLaunchProfile } from "./pi-launch.js";
 import { resolvePiCli } from "./pi-cli.js";
 import { PiRpcClient } from "./pi-rpc.js";

package/dist/{adapter-conformance.js → agents/shared/adapter-conformance.js}

@@ -1,7 +1,7 @@
 import { listAgentAdapterDescriptors } from "./agent-adapter.js";
 import { agentFeatureStates } from "./agent-feature-matrix.js";
-import { listChannelDescriptors, } from "./channel-adapter.js";
-import { channelCatalogCommandNames, } from "./channel-command-core.js";
+import { listChannelDescriptors, } from "../../channels/shared/channel-adapter.js";
+import { channelCatalogCommandNames, } from "../../channels/shared/channel-command-core.js";
 export const CHANNEL_FEATURES = [
     { key: "text", label: "Text", description: "Send and receive plain text prompts and replies." },
     { key: "streaming-edits", label: "Streaming edits", description: "Update an in-flight answer instead of sending only a final message." },

package/dist/{agent-activity.js → agents/shared/agent-activity.js}

@@ -1,9 +1,9 @@
 import { CODEX_AGENT_CAPABILITIES, } from "./agent.js";
-import { getThreadActivity, getThreadActivityLog, getThreadRolloutSnapshot, } from "./codex-state.js";
-import { getClaudeCodeSessionActivity, getClaudeCodeSessionActivityLog, getClaudeCodeSessionDiagnostics, getClaudeCodeSessionSnapshot, } from "./claude-code-state.js";
-import { getHermesSessionActivity, getHermesSessionActivityLog, getHermesSessionDiagnostics, getHermesSessionSnapshot, } from "./hermes-state.js";
-import { getOpenClawSessionActivity, getOpenClawSessionActivityLog, getOpenClawSessionDiagnostics, getOpenClawSessionSnapshot, } from "./openclaw-state.js";
-import { getPiSessionActivity, getPiSessionActivityLog, getPiSessionDiagnostics, getPiSessionSnapshot, } from "./pi-state.js";
+import { getThreadActivity, getThreadActivityLog, getThreadRolloutSnapshot, } from "../codex/codex-state.js";
+import { getClaudeCodeSessionActivity, getClaudeCodeSessionActivityLog, getClaudeCodeSessionDiagnostics, getClaudeCodeSessionSnapshot, } from "../claude-code/claude-code-state.js";
+import { getHermesSessionActivity, getHermesSessionActivityLog, getHermesSessionDiagnostics, getHermesSessionSnapshot, } from "../hermes/hermes-state.js";
+import { getOpenClawSessionActivity, getOpenClawSessionActivityLog, getOpenClawSessionDiagnostics, getOpenClawSessionSnapshot, } from "../openclaw/openclaw-state.js";
+import { getPiSessionActivity, getPiSessionActivityLog, getPiSessionDiagnostics, getPiSessionSnapshot, } from "../pi/pi-state.js";
 export function getExternalActivityForSession(session, config) {
     const info = session?.getInfo();
     if (!info || !(info.capabilities ?? CODEX_AGENT_CAPABILITIES).externalActivity) {

package/dist/agents/shared/agent-auth-commands.js

@@ -0,0 +1,30 @@
+export function agentIdForAuth(info) {
+    return info?.agentId ?? "codex";
+}
+export function agentLabelForAuth(info) {
+    return info?.agentLabel ?? "Codex";
+}
+export function hostAgentLoginCommand(config, info) {
+    const agentId = agentIdForAuth(info);
+    if (agentId === "hermes")
+        return `${config.hermesCliPath ?? "hermes"} login --no-browser`;
+    if (agentId === "claude-code")
+        return `${config.claudeCodeCliPath ?? "claude"} auth login`;
+    if (agentId === "pi")
+        return `${config.piCliPath ?? "pi"} auth login`;
+    if (agentId === "openclaw")
+        return `${config.openClawCliPath ?? "openclaw"} login`;
+    return "codex login --device-auth";
+}
+export function hostAgentLogoutCommand(config, info) {
+    const agentId = agentIdForAuth(info);
+    if (agentId === "hermes")
+        return `${config.hermesCliPath ?? "hermes"} logout`;
+    if (agentId === "claude-code")
+        return `${config.claudeCodeCliPath ?? "claude"} auth logout`;
+    if (agentId === "pi")
+        return `${config.piCliPath ?? "pi"} auth logout`;
+    if (agentId === "openclaw")
+        return `${config.openClawCliPath ?? "openclaw"} logout`;
+    return "codex logout";
+}

package/dist/{agent-factory.js → agents/shared/agent-factory.js}

@@ -1,8 +1,8 @@
-import { CodexSessionService } from "./codex-session.js";
-import { ClaudeCodeSessionService } from "./claude-code-session.js";
-import { HermesSessionService } from "./hermes-session.js";
-import { OpenClawSessionService } from "./openclaw-session.js";
-import { PiSessionService } from "./pi-session.js";
+import { CodexSessionService } from "../codex/codex-session.js";
+import { ClaudeCodeSessionService } from "../claude-code/claude-code-session.js";
+import { HermesSessionService } from "../hermes/hermes-session.js";
+import { OpenClawSessionService } from "../openclaw/openclaw-session.js";
+import { PiSessionService } from "../pi/pi-session.js";
 export async function createAgentSessionService(config, agentId, options) {
     if (agentId === "pi") {
         if (config.piEnabled !== true) {

package/dist/{agent-feature-matrix.js → agents/shared/agent-feature-matrix.js}

@@ -1,4 +1,4 @@
-import { escapeHTML } from "./format.js";
+import { escapeHTML } from "../../core/format.js";
 export const AGENT_FEATURES = [
     { key: "modelSelection", label: "Model", description: "Pick the model used for new turns or sessions." },
     { key: "reasoningSelection", label: "Reasoning", description: "Pick thinking/reasoning effort where the agent exposes it." },
@@ -7,7 +7,7 @@ export const AGENT_FEATURES = [
     { key: "workspaces", label: "Workspaces", description: "List and switch allowed workspaces." },
     { key: "attachments", label: "Files/images", description: "Send files, photos, staged attachments, and voice transcripts." },
     { key: "externalActivity", label: "External busy", description: "Detect active CLI turns started outside NordRelay." },
-    { key: "cliMirror", label: "CLI mirror", description: "Mirror CLI-started turns back to Telegram/WebUI." },
+    { key: "cliMirror", label: "CLI mirror", description: "Mirror CLI-started turns back to chat adapters and the WebUI." },
     { key: "activityLog", label: "Activity", description: "Read activity timelines for sessions and turns." },
     { key: "usageStats", label: "Usage stats", description: "Show token/context usage reported by the agent." },
     { key: "subscriptionLimits", label: "Limits", description: "Show subscription/quota limits when the agent exposes them." },

package/dist/{agent-updates.js → agents/shared/agent-updates.js}

@@ -3,13 +3,13 @@ import { appendFileSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileS
 import os from "node:os";
 import path from "node:path";
 import { agentLabel } from "./agent.js";
-import { resolveClaudeCodeCli } from "./claude-code-cli.js";
-import { resolveCodexCli } from "./codex-cli.js";
-import { resolveHermesCli } from "./hermes-cli.js";
-import { resolveOpenClawCli } from "./openclaw-cli.js";
-import { getAgentUpdateLogPath, getConnectorHome, resolveNpmSpawnCommand } from "./operations.js";
-import { resolvePiCli } from "./pi-cli.js";
-import { redactText } from "./redaction.js";
+import { resolveClaudeCodeCli } from "../claude-code/claude-code-cli.js";
+import { resolveCodexCli } from "../codex/codex-cli.js";
+import { resolveHermesCli } from "../hermes/hermes-cli.js";
+import { resolveOpenClawCli } from "../openclaw/openclaw-cli.js";
+import { getAgentUpdateLogPath, getConnectorHome, resolveNpmSpawnCommand } from "../../support/operations.js";
+import { resolvePiCli } from "../pi/pi-cli.js";
+import { redactText } from "../../core/redaction.js";
 const AGENT_INSTALL_PACKAGES = {
     codex: "@openai/codex",
     pi: "@earendil-works/pi-coding-agent",

package/dist/{discord-artifacts.js → channels/discord/discord-artifacts.js}

@@ -1,7 +1,7 @@
-import { collectRecentWorkspaceArtifacts, createArtifactZipBundle, formatArtifactSummary, listRecentArtifactReports } from "./artifacts.js";
-import { filterArtifactReports as filterArtifactReportsForCommand } from "./bot-rendering.js";
-import { renderArtifactReportsAction } from "./channel-actions.js";
-import { deliverChannelAction } from "./channel-runtime.js";
+import { collectRecentWorkspaceArtifacts, createArtifactZipBundle, formatArtifactSummary, listRecentArtifactReports } from "../../artifacts/artifacts.js";
+import { filterArtifactReports as filterArtifactReportsForCommand } from "../shared/bot-rendering.js";
+import { renderArtifactReportsAction } from "../shared/channel-actions.js";
+import { deliverChannelAction } from "../shared/channel-runtime.js";
 export function createDiscordArtifactCommandHandler(deps) {
     return async (request, argument) => {
         const session = await deps.getSession(request, { deferThreadStart: true });