@openacp/cli 0.5.2 → 0.6.0

package/dist/{chunk-OORPX73T.js → chunk-W3EYKZNQ.js}

@@ -3,6 +3,7 @@ import * as fs from "fs";
 import * as path from "path";
 import * as os from "os";
 var DEFAULT_PORT_FILE = path.join(os.homedir(), ".openacp", "api.port");
+var DEFAULT_SECRET_FILE = path.join(os.homedir(), ".openacp", "api-secret");
 function readApiPort(portFilePath = DEFAULT_PORT_FILE) {
   try {
     const content = fs.readFileSync(portFilePath, "utf-8").trim();
@@ -12,6 +13,14 @@ function readApiPort(portFilePath = DEFAULT_PORT_FILE) {
     return null;
   }
 }
+function readApiSecret(secretFilePath = DEFAULT_SECRET_FILE) {
+  try {
+    const content = fs.readFileSync(secretFilePath, "utf-8").trim();
+    return content || null;
+  } catch {
+    return null;
+  }
+}
 function removeStalePortFile(portFilePath = DEFAULT_PORT_FILE) {
   try {
     fs.unlinkSync(portFilePath);
@@ -19,12 +28,18 @@ function removeStalePortFile(portFilePath = DEFAULT_PORT_FILE) {
   }
 }
 async function apiCall(port, urlPath, options) {
-  return fetch(`http://127.0.0.1:${port}${urlPath}`, options);
+  const secret = readApiSecret();
+  const headers = new Headers(options?.headers);
+  if (secret) {
+    headers.set("Authorization", `Bearer ${secret}`);
+  }
+  return fetch(`http://127.0.0.1:${port}${urlPath}`, { ...options, headers });
 }
 
 export {
   readApiPort,
+  readApiSecret,
   removeStalePortFile,
   apiCall
 };
-//# sourceMappingURL=chunk-OORPX73T.js.map
+//# sourceMappingURL=chunk-W3EYKZNQ.js.map

package/dist/chunk-W3EYKZNQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/api-client.ts"],"sourcesContent":["import * as fs from 'node:fs'\nimport * as path from 'node:path'\nimport * as os from 'node:os'\n\nconst DEFAULT_PORT_FILE = path.join(os.homedir(), '.openacp', 'api.port')\nconst DEFAULT_SECRET_FILE = path.join(os.homedir(), '.openacp', 'api-secret')\n\nexport function readApiPort(portFilePath: string = DEFAULT_PORT_FILE): number | null {\n  try {\n    const content = fs.readFileSync(portFilePath, 'utf-8').trim()\n    const port = parseInt(content, 10)\n    return isNaN(port) ? null : port\n  } catch {\n    return null\n  }\n}\n\nexport function readApiSecret(secretFilePath: string = DEFAULT_SECRET_FILE): string | null {\n  try {\n    const content = fs.readFileSync(secretFilePath, 'utf-8').trim()\n    return content || null\n  } catch {\n    return null\n  }\n}\n\nexport function removeStalePortFile(portFilePath: string = DEFAULT_PORT_FILE): void {\n  try {\n    fs.unlinkSync(portFilePath)\n  } catch {\n    // ignore\n  }\n}\n\nexport async function apiCall(\n  port: number,\n  urlPath: string,\n  options?: RequestInit,\n): Promise<Response> {\n  const secret = readApiSecret()\n  const headers = new Headers(options?.headers)\n  if (secret) {\n    headers.set('Authorization', `Bearer ${secret}`)\n  }\n  return fetch(`http://127.0.0.1:${port}${urlPath}`, { ...options, headers })\n}\n"],"mappings":";AAAA,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AAEpB,IAAM,oBAAyB,UAAQ,WAAQ,GAAG,YAAY,UAAU;AACxE,IAAM,sBAA2B,UAAQ,WAAQ,GAAG,YAAY,YAAY;AAErE,SAAS,YAAY,eAAuB,mBAAkC;AACnF,MAAI;AACF,UAAM,UAAa,gBAAa,cAAc,OAAO,EAAE,KAAK;AAC5D,UAAM,OAAO,SAAS,SAAS,EAAE;AACjC,WAAO,MAAM,IAAI,IAAI,OAAO;AAAA,EAC9B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,cAAc,iBAAyB,qBAAoC;AACzF,MAAI;AACF,UAAM,UAAa,gBAAa,gBAAgB,OAAO,EAAE,KAAK;AAC9D,WAAO,WAAW;AAAA,EACpB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,oBAAoB,eAAuB,mBAAyB;AAClF,MAAI;AACF,IAAG,cAAW,YAAY;AAAA,EAC5B,QAAQ;AAAA,EAER;AACF;AAEA,eAAsB,QACpB,MACA,SACA,SACmB;AACnB,QAAM,SAAS,cAAc;AAC7B,QAAM,UAAU,IAAI,QAAQ,SAAS,OAAO;AAC5C,MAAI,QAAQ;AACV,YAAQ,IAAI,iBAAiB,UAAU,MAAM,EAAE;AAAA,EACjD;AACA,SAAO,MAAM,oBAAoB,IAAI,GAAG,OAAO,IAAI,EAAE,GAAG,SAAS,QAAQ,CAAC;AAC5E;","names":[]}

package/dist/{chunk-VBEWSWVL.js → chunk-YYQXWA62.js}

@@ -1,6 +1,6 @@
 import {
   expandHome
-} from "./chunk-JRF4G4X7.js";
+} from "./chunk-DWQKUECJ.js";
 
 // src/core/daemon.ts
 import { spawn } from "child_process";
@@ -78,23 +78,66 @@ function startDaemon(pidPath = DEFAULT_PID_PATH, logDir) {
   child.unref();
   return { pid: child.pid };
 }
-function stopDaemon(pidPath = DEFAULT_PID_PATH) {
-  const pid = readPidFile(pidPath);
-  if (pid === null) return { stopped: false, error: "Not running (no PID file)" };
+function sleep(ms) {
+  return new Promise((resolve2) => setTimeout(resolve2, ms));
+}
+function isProcessAlive(pid) {
   try {
     process.kill(pid, 0);
-  } catch {
+    return "alive";
+  } catch (e) {
+    const err = e;
+    if (err.code === "EPERM") return "eperm";
+    return "dead";
+  }
+}
+async function stopDaemon(pidPath = DEFAULT_PID_PATH) {
+  const pid = readPidFile(pidPath);
+  if (pid === null) return { stopped: false, error: "Not running (no PID file)" };
+  const status = isProcessAlive(pid);
+  if (status === "dead") {
     removePidFile(pidPath);
     return { stopped: false, error: "Not running (stale PID file removed)" };
   }
+  if (status === "eperm") {
+    removePidFile(pidPath);
+    return { stopped: false, error: "PID belongs to another process (stale PID file removed)" };
+  }
   try {
     process.kill(pid, "SIGTERM");
-    clearRunning();
-    removePidFile(pidPath);
-    return { stopped: true, pid };
   } catch (e) {
     return { stopped: false, error: `Failed to stop: ${e.message}` };
   }
+  clearRunning();
+  const POLL_INTERVAL = 100;
+  const TIMEOUT = 5e3;
+  const start = Date.now();
+  while (Date.now() - start < TIMEOUT) {
+    await sleep(POLL_INTERVAL);
+    const s = isProcessAlive(pid);
+    if (s === "dead" || s === "eperm") {
+      removePidFile(pidPath);
+      return { stopped: true, pid };
+    }
+  }
+  try {
+    process.kill(pid, "SIGKILL");
+  } catch (e) {
+    const err = e;
+    if (err.code === "EPERM") {
+      return { stopped: false, pid, error: "PID may have been reused by another process. Run `openacp status` to verify, or manually delete the PID file." };
+    }
+  }
+  const killStart = Date.now();
+  while (Date.now() - killStart < 1e3) {
+    await sleep(POLL_INTERVAL);
+    const s = isProcessAlive(pid);
+    if (s === "dead" || s === "eperm") {
+      removePidFile(pidPath);
+      return { stopped: true, pid };
+    }
+  }
+  return { stopped: false, pid, error: "Process did not exit after SIGKILL (possible uninterruptible I/O). PID file retained." };
 }
 function getPidPath() {
   return DEFAULT_PID_PATH;
@@ -126,4 +169,4 @@ export {
   clearRunning,
   shouldAutoStart
 };
-//# sourceMappingURL=chunk-VBEWSWVL.js.map
+//# sourceMappingURL=chunk-YYQXWA62.js.map

package/dist/chunk-YYQXWA62.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/daemon.ts"],"sourcesContent":["import { spawn } from 'node:child_process'\nimport * as fs from 'node:fs'\nimport * as path from 'node:path'\nimport * as os from 'node:os'\nimport { expandHome } from './config.js'\n\nconst DEFAULT_PID_PATH = path.join(os.homedir(), '.openacp', 'openacp.pid')\nconst DEFAULT_LOG_DIR = path.join(os.homedir(), '.openacp', 'logs')\nconst RUNNING_MARKER = path.join(os.homedir(), '.openacp', 'running')\n\nexport function writePidFile(pidPath: string, pid: number): void {\n  const dir = path.dirname(pidPath)\n  fs.mkdirSync(dir, { recursive: true })\n  fs.writeFileSync(pidPath, String(pid))\n}\n\nexport function readPidFile(pidPath: string): number | null {\n  try {\n    const content = fs.readFileSync(pidPath, 'utf-8').trim()\n    const pid = parseInt(content, 10)\n    return isNaN(pid) ? null : pid\n  } catch {\n    return null\n  }\n}\n\nexport function removePidFile(pidPath: string): void {\n  try {\n    fs.unlinkSync(pidPath)\n  } catch {\n    // ignore if already gone\n  }\n}\n\nexport function isProcessRunning(pidPath: string): boolean {\n  const pid = readPidFile(pidPath)\n  if (pid === null) return false\n  try {\n    process.kill(pid, 0)\n    return true\n  } catch {\n    // Process not running, clean up stale PID file\n    removePidFile(pidPath)\n    return false\n  }\n}\n\nexport function getStatus(pidPath: string = DEFAULT_PID_PATH): { running: boolean; pid?: number } {\n  const pid = readPidFile(pidPath)\n  if (pid === null) return { running: false }\n  try {\n    process.kill(pid, 0)\n    return { running: true, pid }\n  } catch {\n    removePidFile(pidPath)\n    return { running: false }\n  }\n}\n\nexport function startDaemon(pidPath: string = DEFAULT_PID_PATH, logDir?: string): { pid: number } | { error: string } {\n  // Mark as running so auto-start works on next boot\n  markRunning()\n\n  // Check if already running\n  if (isProcessRunning(pidPath)) {\n    const pid = readPidFile(pidPath)!\n    return { error: `Already running (PID ${pid})` }\n  }\n\n  const resolvedLogDir = logDir ? expandHome(logDir) : DEFAULT_LOG_DIR\n  fs.mkdirSync(resolvedLogDir, { recursive: true })\n  const logFile = path.join(resolvedLogDir, 'openacp.log')\n\n  // Find the CLI entry point\n  const cliPath = path.resolve(process.argv[1])\n  const nodePath = process.execPath\n\n  const out = fs.openSync(logFile, 'a')\n  const err = fs.openSync(logFile, 'a')\n\n  const child = spawn(nodePath, [cliPath, '--daemon-child'], {\n    detached: true,\n    stdio: ['ignore', out, err],\n  })\n\n  // Close file descriptors in parent — child has its own copies\n  fs.closeSync(out)\n  fs.closeSync(err)\n\n  if (!child.pid) {\n    return { error: 'Failed to spawn daemon process' }\n  }\n\n  // PID file is written by the child process itself (in main.ts startServer)\n  // to avoid race conditions and ensure consistency with LaunchAgent/systemd starts.\n  // We still write it here as a fallback in case the child hasn't written it yet\n  // when the parent needs to report the PID.\n  writePidFile(pidPath, child.pid)\n  child.unref()\n\n  return { pid: child.pid }\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise(resolve => setTimeout(resolve, ms))\n}\n\nfunction isProcessAlive(pid: number): 'alive' | 'dead' | 'eperm' {\n  try {\n    process.kill(pid, 0)\n    return 'alive'\n  } catch (e) {\n    const err = e as NodeJS.ErrnoException\n    if (err.code === 'EPERM') return 'eperm'\n    return 'dead'\n  }\n}\n\nexport async function stopDaemon(pidPath: string = DEFAULT_PID_PATH): Promise<{ stopped: boolean; pid?: number; error?: string }> {\n  const pid = readPidFile(pidPath)\n  if (pid === null) return { stopped: false, error: 'Not running (no PID file)' }\n\n  const status = isProcessAlive(pid)\n  if (status === 'dead') {\n    removePidFile(pidPath)\n    return { stopped: false, error: 'Not running (stale PID file removed)' }\n  }\n  if (status === 'eperm') {\n    removePidFile(pidPath)\n    return { stopped: false, error: 'PID belongs to another process (stale PID file removed)' }\n  }\n\n  try {\n    process.kill(pid, 'SIGTERM')\n  } catch (e) {\n    return { stopped: false, error: `Failed to stop: ${(e as Error).message}` }\n  }\n\n  clearRunning()\n\n  const POLL_INTERVAL = 100\n  const TIMEOUT = 5000\n  const start = Date.now()\n\n  while (Date.now() - start < TIMEOUT) {\n    await sleep(POLL_INTERVAL)\n    const s = isProcessAlive(pid)\n    if (s === 'dead' || s === 'eperm') {\n      removePidFile(pidPath)\n      return { stopped: true, pid }\n    }\n  }\n\n  try {\n    process.kill(pid, 'SIGKILL')\n  } catch (e) {\n    const err = e as NodeJS.ErrnoException\n    if (err.code === 'EPERM') {\n      return { stopped: false, pid, error: 'PID may have been reused by another process. Run `openacp status` to verify, or manually delete the PID file.' }\n    }\n  }\n\n  const killStart = Date.now()\n  while (Date.now() - killStart < 1000) {\n    await sleep(POLL_INTERVAL)\n    const s = isProcessAlive(pid)\n    if (s === 'dead' || s === 'eperm') {\n      removePidFile(pidPath)\n      return { stopped: true, pid }\n    }\n  }\n\n  // SIGKILL sent but process still alive after 1s — extremely rare (uninterruptible I/O).\n  return { stopped: false, pid, error: 'Process did not exit after SIGKILL (possible uninterruptible I/O). PID file retained.' }\n}\n\nexport function getPidPath(): string {\n  return DEFAULT_PID_PATH\n}\n\n/** Mark that the daemon should auto-start on boot */\nexport function markRunning(): void {\n  fs.mkdirSync(path.dirname(RUNNING_MARKER), { recursive: true })\n  fs.writeFileSync(RUNNING_MARKER, '')\n}\n\n/** Remove running marker — daemon won't auto-start on boot */\nexport function clearRunning(): void {\n  try { fs.unlinkSync(RUNNING_MARKER) } catch { /* ignore */ }\n}\n\n/** Check if the daemon was running before (should auto-start on boot) */\nexport function shouldAutoStart(): boolean {\n  return fs.existsSync(RUNNING_MARKER)\n}\n"],"mappings":";;;;;AAAA,SAAS,aAAa;AACtB,YAAY,QAAQ;AACpB,YAAY,UAAU;AACtB,YAAY,QAAQ;AAGpB,IAAM,mBAAwB,UAAQ,WAAQ,GAAG,YAAY,aAAa;AAC1E,IAAM,kBAAuB,UAAQ,WAAQ,GAAG,YAAY,MAAM;AAClE,IAAM,iBAAsB,UAAQ,WAAQ,GAAG,YAAY,SAAS;AAE7D,SAAS,aAAa,SAAiB,KAAmB;AAC/D,QAAM,MAAW,aAAQ,OAAO;AAChC,EAAG,aAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AACrC,EAAG,iBAAc,SAAS,OAAO,GAAG,CAAC;AACvC;AAEO,SAAS,YAAY,SAAgC;AAC1D,MAAI;AACF,UAAM,UAAa,gBAAa,SAAS,OAAO,EAAE,KAAK;AACvD,UAAM,MAAM,SAAS,SAAS,EAAE;AAChC,WAAO,MAAM,GAAG,IAAI,OAAO;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,SAAS,cAAc,SAAuB;AACnD,MAAI;AACF,IAAG,cAAW,OAAO;AAAA,EACvB,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,iBAAiB,SAA0B;AACzD,QAAM,MAAM,YAAY,OAAO;AAC/B,MAAI,QAAQ,KAAM,QAAO;AACzB,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,QAAQ;AAEN,kBAAc,OAAO;AACrB,WAAO;AAAA,EACT;AACF;AAEO,SAAS,UAAU,UAAkB,kBAAsD;AAChG,QAAM,MAAM,YAAY,OAAO;AAC/B,MAAI,QAAQ,KAAM,QAAO,EAAE,SAAS,MAAM;AAC1C,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO,EAAE,SAAS,MAAM,IAAI;AAAA,EAC9B,QAAQ;AACN,kBAAc,OAAO;AACrB,WAAO,EAAE,SAAS,MAAM;AAAA,EAC1B;AACF;AAEO,SAAS,YAAY,UAAkB,kBAAkB,QAAsD;AAEpH,cAAY;AAGZ,MAAI,iBAAiB,OAAO,GAAG;AAC7B,UAAM,MAAM,YAAY,OAAO;AAC/B,WAAO,EAAE,OAAO,wBAAwB,GAAG,IAAI;AAAA,EACjD;AAEA,QAAM,iBAAiB,SAAS,WAAW,MAAM,IAAI;AACrD,EAAG,aAAU,gBAAgB,EAAE,WAAW,KAAK,CAAC;AAChD,QAAM,UAAe,UAAK,gBAAgB,aAAa;AAGvD,QAAM,UAAe,aAAQ,QAAQ,KAAK,CAAC,CAAC;AAC5C,QAAM,WAAW,QAAQ;AAEzB,QAAM,MAAS,YAAS,SAAS,GAAG;AACpC,QAAM,MAAS,YAAS,SAAS,GAAG;AAEpC,QAAM,QAAQ,MAAM,UAAU,CAAC,SAAS,gBAAgB,GAAG;AAAA,IACzD,UAAU;AAAA,IACV,OAAO,CAAC,UAAU,KAAK,GAAG;AAAA,EAC5B,CAAC;AAGD,EAAG,aAAU,GAAG;AAChB,EAAG,aAAU,GAAG;AAEhB,MAAI,CAAC,MAAM,KAAK;AACd,WAAO,EAAE,OAAO,iCAAiC;AAAA,EACnD;AAMA,eAAa,SAAS,MAAM,GAAG;AAC/B,QAAM,MAAM;AAEZ,SAAO,EAAE,KAAK,MAAM,IAAI;AAC1B;AAEA,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,CAAAA,aAAW,WAAWA,UAAS,EAAE,CAAC;AACvD;AAEA,SAAS,eAAe,KAAyC;AAC/D,MAAI;AACF,YAAQ,KAAK,KAAK,CAAC;AACnB,WAAO;AAAA,EACT,SAAS,GAAG;AACV,UAAM,MAAM;AACZ,QAAI,IAAI,SAAS,QAAS,QAAO;AACjC,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,WAAW,UAAkB,kBAA+E;AAChI,QAAM,MAAM,YAAY,OAAO;AAC/B,MAAI,QAAQ,KAAM,QAAO,EAAE,SAAS,OAAO,OAAO,4BAA4B;AAE9E,QAAM,SAAS,eAAe,GAAG;AACjC,MAAI,WAAW,QAAQ;AACrB,kBAAc,OAAO;AACrB,WAAO,EAAE,SAAS,OAAO,OAAO,uCAAuC;AAAA,EACzE;AACA,MAAI,WAAW,SAAS;AACtB,kBAAc,OAAO;AACrB,WAAO,EAAE,SAAS,OAAO,OAAO,0DAA0D;AAAA,EAC5F;AAEA,MAAI;AACF,YAAQ,KAAK,KAAK,SAAS;AAAA,EAC7B,SAAS,GAAG;AACV,WAAO,EAAE,SAAS,OAAO,OAAO,mBAAoB,EAAY,OAAO,GAAG;AAAA,EAC5E;AAEA,eAAa;AAEb,QAAM,gBAAgB;AACtB,QAAM,UAAU;AAChB,QAAM,QAAQ,KAAK,IAAI;AAEvB,SAAO,KAAK,IAAI,IAAI,QAAQ,SAAS;AACnC,UAAM,MAAM,aAAa;AACzB,UAAM,IAAI,eAAe,GAAG;AAC5B,QAAI,MAAM,UAAU,MAAM,SAAS;AACjC,oBAAc,OAAO;AACrB,aAAO,EAAE,SAAS,MAAM,IAAI;AAAA,IAC9B;AAAA,EACF;AAEA,MAAI;AACF,YAAQ,KAAK,KAAK,SAAS;AAAA,EAC7B,SAAS,GAAG;AACV,UAAM,MAAM;AACZ,QAAI,IAAI,SAAS,SAAS;AACxB,aAAO,EAAE,SAAS,OAAO,KAAK,OAAO,gHAAgH;AAAA,IACvJ;AAAA,EACF;AAEA,QAAM,YAAY,KAAK,IAAI;AAC3B,SAAO,KAAK,IAAI,IAAI,YAAY,KAAM;AACpC,UAAM,MAAM,aAAa;AACzB,UAAM,IAAI,eAAe,GAAG;AAC5B,QAAI,MAAM,UAAU,MAAM,SAAS;AACjC,oBAAc,OAAO;AACrB,aAAO,EAAE,SAAS,MAAM,IAAI;AAAA,IAC9B;AAAA,EACF;AAGA,SAAO,EAAE,SAAS,OAAO,KAAK,OAAO,wFAAwF;AAC/H;AAEO,SAAS,aAAqB;AACnC,SAAO;AACT;AAGO,SAAS,cAAoB;AAClC,EAAG,aAAe,aAAQ,cAAc,GAAG,EAAE,WAAW,KAAK,CAAC;AAC9D,EAAG,iBAAc,gBAAgB,EAAE;AACrC;AAGO,SAAS,eAAqB;AACnC,MAAI;AAAE,IAAG,cAAW,cAAc;AAAA,EAAE,QAAQ;AAAA,EAAe;AAC7D;AAGO,SAAS,kBAA2B;AACzC,SAAU,cAAW,cAAc;AACrC;","names":["resolve"]}

package/dist/cli.js

@@ -3,21 +3,21 @@ import {
   installPlugin,
   listPlugins,
   uninstallPlugin
-} from "./chunk-NDR5JCS7.js";
-import "./chunk-JRF4G4X7.js";
+} from "./chunk-437NLISU.js";
+import "./chunk-DWQKUECJ.js";
 import "./chunk-ESOPMQAY.js";
 import {
   apiCall,
   readApiPort,
   removeStalePortFile
-} from "./chunk-OORPX73T.js";
+} from "./chunk-W3EYKZNQ.js";
 import {
   checkAndPromptUpdate,
   compareVersions,
   getCurrentVersion,
   getLatestVersion,
   runUpdate
-} from "./chunk-KSIQZC3J.js";
+} from "./chunk-EVFJW45N.js";
 
 // src/cli.ts
 import { setDefaultAutoSelectFamily } from "net";
@@ -29,7 +29,7 @@ function wantsHelp(args2) {
 function printHelp() {
   console.log(`
 \x1B[1mOpenACP\x1B[0m \u2014 Self-hosted bridge for AI coding agents
-Connect Telegram (and more) to 28+ AI coding agents via ACP protocol.
+Connect messaging platforms (Telegram, Discord) to 28+ AI coding agents via ACP protocol.
 
 \x1B[1mGetting Started:\x1B[0m
   openacp                              First run launches setup wizard
@@ -65,7 +65,7 @@ Connect Telegram (and more) to 28+ AI coding agents via ACP protocol.
   openacp doctor --dry-run             Check only, don't fix
 
 \x1B[1mPlugins:\x1B[0m
-  openacp install <package>            Install adapter (e.g. @openacp/adapter-discord)
+  openacp install <package>            Install adapter plugin
   openacp uninstall <package>          Remove adapter
   openacp plugins                      List installed plugins
 
@@ -74,6 +74,12 @@ Connect Telegram (and more) to 28+ AI coding agents via ACP protocol.
   openacp integrate <agent> --uninstall
   openacp adopt <agent> <id>           Adopt an external session
 
+\x1B[1mTunnels:\x1B[0m
+  openacp tunnel add <port> [--label name]  Create tunnel to local port
+  openacp tunnel list                       List active tunnels
+  openacp tunnel stop <port>                Stop a tunnel
+  openacp tunnel stop-all                   Stop all user tunnels
+
 \x1B[1mDaemon API:\x1B[0m \x1B[2m(requires running daemon)\x1B[0m
   openacp api status                   Active sessions
   openacp api session <id>             Session details
@@ -90,7 +96,7 @@ Connect Telegram (and more) to 28+ AI coding agents via ACP protocol.
 `);
 }
 async function cmdVersion() {
-  const { getCurrentVersion: getCurrentVersion2 } = await import("./version-VC5CPXBX.js");
+  const { getCurrentVersion: getCurrentVersion2 } = await import("./version-ALWGGVKM.js");
   console.log(`openacp v${getCurrentVersion2()}`);
 }
 async function cmdInstall(args2) {
@@ -765,8 +771,8 @@ Requires an existing config \u2014 run 'openacp' first to set up.
     return;
   }
   await checkAndPromptUpdate();
-  const { startDaemon, getPidPath } = await import("./daemon-JZLFRUW6.js");
-  const { ConfigManager } = await import("./config-PCPIBPUA.js");
+  const { startDaemon, getPidPath } = await import("./daemon-U6UC7OM4.js");
+  const { ConfigManager } = await import("./config-KF2MQWAP.js");
   const cm = new ConfigManager();
   if (await cm.exists()) {
     await cm.load();
@@ -794,8 +800,8 @@ Sends a stop signal to the running OpenACP daemon process.
 `);
     return;
   }
-  const { stopDaemon } = await import("./daemon-JZLFRUW6.js");
-  const result = stopDaemon();
+  const { stopDaemon } = await import("./daemon-U6UC7OM4.js");
+  const result = await stopDaemon();
   if (result.stopped) {
     console.log(`OpenACP daemon stopped (was PID ${result.pid})`);
   } else {
@@ -815,7 +821,7 @@ Shows whether the OpenACP daemon is running and its PID.
 `);
     return;
   }
-  const { getStatus } = await import("./daemon-JZLFRUW6.js");
+  const { getStatus } = await import("./daemon-U6UC7OM4.js");
   const status = getStatus();
   if (status.running) {
     console.log(`OpenACP is running (PID ${status.pid})`);
@@ -839,7 +845,7 @@ Log file location is configured in config (default: ~/.openacp/logs/).
     return;
   }
   const { spawn } = await import("child_process");
-  const { ConfigManager, expandHome } = await import("./config-PCPIBPUA.js");
+  const { ConfigManager, expandHome } = await import("./config-KF2MQWAP.js");
   const pathMod = await import("path");
   const cm = new ConfigManager();
   let logDir = "~/.openacp/logs";
@@ -909,7 +915,7 @@ the API for live updates. When stopped, edits config file directly.
       console.error("Usage: openacp config set <path> <value>");
       process.exit(1);
     }
-    const { ConfigSchema } = await import("./config-PCPIBPUA.js");
+    const { ConfigSchema } = await import("./config-KF2MQWAP.js");
     const topLevelKey = configPath.split(".")[0];
     const validConfigKeys = Object.keys(ConfigSchema.shape);
     if (!validConfigKeys.includes(topLevelKey)) {
@@ -941,7 +947,7 @@ the API for live updates. When stopped, edits config file directly.
         console.log("Note: restart required for this change to take effect.");
       }
     } else {
-      const { ConfigManager: ConfigManager2 } = await import("./config-PCPIBPUA.js");
+      const { ConfigManager: ConfigManager2 } = await import("./config-KF2MQWAP.js");
       const cm2 = new ConfigManager2();
       if (!await cm2.exists()) {
         console.error('No config found. Run "openacp" first to set up.');
@@ -954,8 +960,8 @@ the API for live updates. When stopped, edits config file directly.
     }
     return;
   }
-  const { runConfigEditor } = await import("./config-editor-DDF3ZFJK.js");
-  const { ConfigManager } = await import("./config-PCPIBPUA.js");
+  const { runConfigEditor } = await import("./config-editor-OTODXUF7.js");
+  const { ConfigManager } = await import("./config-KF2MQWAP.js");
   const cm = new ConfigManager();
   if (!await cm.exists()) {
     console.error('No config found. Run "openacp" first to set up.');
@@ -994,7 +1000,7 @@ start fresh with the setup wizard. The daemon must be stopped first.
 `);
     return;
   }
-  const { getStatus } = await import("./daemon-JZLFRUW6.js");
+  const { getStatus } = await import("./daemon-U6UC7OM4.js");
   const status = getStatus();
   if (status.running) {
     console.error("OpenACP is running. Stop it first: openacp stop");
@@ -1009,7 +1015,7 @@ start fresh with the setup wizard. The daemon must be stopped first.
     console.log("Aborted.");
     return;
   }
-  const { uninstallAutoStart } = await import("./autostart-K73RQZVV.js");
+  const { uninstallAutoStart } = await import("./autostart-A7JRU4WJ.js");
   uninstallAutoStart();
   const fs = await import("fs");
   const os = await import("os");
@@ -1090,7 +1096,8 @@ as a Telegram topic. Requires a running daemon.
     process.exit(1);
   }
   try {
-    const res = await fetch(`http://127.0.0.1:${port}/api/sessions/adopt`, {
+    const { apiCall: apiCall2 } = await import("./api-client-BH2JFHQW.js");
+    const res = await apiCall2(port, "/api/sessions/adopt", {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ agent, agentSessionId: sessionId, cwd })
@@ -1098,9 +1105,9 @@ as a Telegram topic. Requires a running daemon.
     const data = await res.json();
     if (data.ok) {
       if (data.status === "existing") {
-        console.log(`Session already on Telegram. Topic pinged.`);
+        console.log(`Session already active. Topic pinged.`);
       } else {
-        console.log(`Session transferred to Telegram.`);
+        console.log(`Session transferred to messaging platform.`);
       }
       console.log(`  Session ID: ${data.sessionId}`);
       console.log(`  Thread ID:  ${data.threadId}`);
@@ -1139,7 +1146,7 @@ a "Handoff" slash command to Claude Code.
 `);
     return;
   }
-  const { getIntegration, listIntegrations } = await import("./integrate-BLETI3UO.js");
+  const { getIntegration, listIntegrations } = await import("./integrate-VOUYBPPZ.js");
   const agent = args2[1];
   const uninstall = args2.includes("--uninstall");
   if (!agent) {
@@ -1213,7 +1220,7 @@ Fixable issues can be auto-repaired when not using --dry-run.
     process.exit(1);
   }
   const dryRun = args2.includes("--dry-run");
-  const { DoctorEngine } = await import("./doctor-N2HKKUUQ.js");
+  const { DoctorEngine } = await import("./doctor-SYWNJFYK.js");
   const engine = new DoctorEngine({ dryRun });
   console.log("\n\u{1FA7A} OpenACP Doctor\n");
   const report = await engine.runAll();
@@ -1255,6 +1262,87 @@ Fixable issues can be auto-repaired when not using --dry-run.
     process.exit(1);
   }
 }
+async function cmdTunnel(args2) {
+  const subCmd = args2[1];
+  const port = readApiPort();
+  if (port === null) {
+    console.error("OpenACP is not running. Start with `openacp start`");
+    process.exit(1);
+  }
+  try {
+    if (subCmd === "add") {
+      const tunnelPort = args2[2];
+      if (!tunnelPort) {
+        console.error("Usage: openacp tunnel add <port> [--label name] [--session id]");
+        process.exit(1);
+      }
+      const labelIdx = args2.indexOf("--label");
+      const label = labelIdx !== -1 ? args2[labelIdx + 1] : void 0;
+      const sessionIdx = args2.indexOf("--session");
+      const sessionId = sessionIdx !== -1 ? args2[sessionIdx + 1] : void 0;
+      const body = { port: parseInt(tunnelPort, 10) };
+      if (label) body.label = label;
+      if (sessionId) body.sessionId = sessionId;
+      const res = await apiCall(port, "/api/tunnel", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(body)
+      });
+      const data = await res.json();
+      if (!res.ok) {
+        console.error(`Error: ${data.error}`);
+        process.exit(1);
+      }
+      console.log(`Tunnel active: port ${data.port} \u2192 ${data.publicUrl}`);
+    } else if (subCmd === "list") {
+      const res = await apiCall(port, "/api/tunnel/list");
+      const data = await res.json();
+      if (data.length === 0) {
+        console.log("No active tunnels.");
+        return;
+      }
+      console.log("Active tunnels:\n");
+      for (const t of data) {
+        const label = t.label ? ` (${t.label})` : "";
+        const status = t.status === "active" ? "\u2705" : t.status === "starting" ? "\u23F3" : "\u274C";
+        console.log(`  ${status} Port ${t.port}${label}`);
+        if (t.publicUrl) console.log(`     \u2192 ${t.publicUrl}`);
+      }
+    } else if (subCmd === "stop") {
+      const tunnelPort = args2[2];
+      if (!tunnelPort) {
+        console.error("Usage: openacp tunnel stop <port>");
+        process.exit(1);
+      }
+      const res = await apiCall(port, `/api/tunnel/${tunnelPort}`, { method: "DELETE" });
+      if (!res.ok) {
+        const data = await res.json();
+        console.error(`Error: ${data.error}`);
+        process.exit(1);
+      }
+      console.log(`Tunnel stopped: port ${tunnelPort}`);
+    } else if (subCmd === "stop-all") {
+      const res = await apiCall(port, "/api/tunnel", { method: "DELETE" });
+      if (!res.ok) {
+        const data = await res.json();
+        console.error(`Error: ${data.error}`);
+        process.exit(1);
+      }
+      console.log("All user tunnels stopped.");
+    } else {
+      console.log(`
+Tunnel Management:
+  openacp tunnel add <port> [--label name] [--session id]
+  openacp tunnel list
+  openacp tunnel stop <port>
+  openacp tunnel stop-all
+`);
+    }
+  } catch (err) {
+    console.error(`Failed to connect to daemon: ${err.message}`);
+    process.exit(1);
+  }
+}
 async function cmdAgents(args2) {
   const subcommand = args2[1];
   if (wantsHelp(args2) && (!subcommand || subcommand === "--help" || subcommand === "-h")) {
@@ -1428,7 +1516,7 @@ Run 'openacp agents' to see available agents.
   const { getAgentCapabilities } = await import("./agent-dependencies-QY5QSULV.js");
   const caps = getAgentCapabilities(result.agentKey);
   if (caps.integration) {
-    const { installIntegration } = await import("./integrate-BLETI3UO.js");
+    const { installIntegration } = await import("./integrate-VOUYBPPZ.js");
     const intResult = await installIntegration(result.agentKey, caps.integration);
     if (intResult.success) {
       console.log(`  \x1B[32m\u2713\x1B[0m Handoff integration installed for ${result.agentKey}`);
@@ -1470,7 +1558,7 @@ async function agentsUninstall(name, help = false) {
     const { getAgentCapabilities } = await import("./agent-dependencies-QY5QSULV.js");
     const caps = getAgentCapabilities(name);
     if (caps.integration) {
-      const { uninstallIntegration } = await import("./integrate-BLETI3UO.js");
+      const { uninstallIntegration } = await import("./integrate-VOUYBPPZ.js");
       await uninstallIntegration(name, caps.integration);
       console.log(`  \x1B[32m\u2713\x1B[0m Handoff integration removed for ${name}`);
     }
@@ -1674,17 +1762,17 @@ async function cmdDefault(command2) {
     process.exit(1);
   }
   await checkAndPromptUpdate();
-  const { ConfigManager } = await import("./config-PCPIBPUA.js");
+  const { ConfigManager } = await import("./config-KF2MQWAP.js");
   const cm = new ConfigManager();
   if (!await cm.exists()) {
-    const { runSetup } = await import("./setup-7JINXQOA.js");
+    const { runSetup } = await import("./setup-LI5CKYDK.js");
     const shouldStart = await runSetup(cm);
     if (!shouldStart) process.exit(0);
   }
   await cm.load();
   const config = cm.get();
   if (!forceForeground && config.runMode === "daemon") {
-    const { startDaemon, getPidPath } = await import("./daemon-JZLFRUW6.js");
+    const { startDaemon, getPidPath } = await import("./daemon-U6UC7OM4.js");
     const result = startDaemon(getPidPath(), config.logging.logDir);
     if ("error" in result) {
       console.error(result.error);
@@ -1693,9 +1781,9 @@ async function cmdDefault(command2) {
     console.log(`OpenACP daemon started (PID ${result.pid})`);
     return;
   }
-  const { markRunning } = await import("./daemon-JZLFRUW6.js");
+  const { markRunning } = await import("./daemon-U6UC7OM4.js");
   markRunning();
-  const { startServer } = await import("./main-AH3NCVM3.js");
+  const { startServer } = await import("./main-M6RH3SS5.js");
   await startServer();
 }
 
@@ -1723,8 +1811,9 @@ var commands = {
   "integrate": () => cmdIntegrate(args),
   "doctor": () => cmdDoctor(args),
   "agents": () => cmdAgents(args),
+  "tunnel": () => cmdTunnel(args),
   "--daemon-child": async () => {
-    const { startServer } = await import("./main-AH3NCVM3.js");
+    const { startServer } = await import("./main-M6RH3SS5.js");
     await startServer();
   }
 };