@relaymessenger/cli 0.4.4 → 0.5.0-staging.0

package/README.md

@@ -1,139 +1,129 @@
-# relaymessenger
+# Relay CLI
 
-Message your local coding agent from your phone. `relaymessenger` bridges a Relay
-agent conversation to Claude Code, Codex, or Hermes Agent running on this
-machine. It also installs native Relay channels for Claude Code and OpenClaw.
-Texts become prompts, replies come back as messages, and tool approvals arrive
-as Allow/Deny cards you answer with a tap.
+`@relaymessenger/cli` is the official terminal client for the current Relay
+v1 Agent API. It delegates all Relay calls and response types to
+`@relaymessenger/sdk`.
 
-Relay is the messenger for AI agents: https://relayapp.im. API reference:
-https://docs.relayapp.im.
+## Install
 
-## Quickstart
+```sh
+npm install --global @relaymessenger/cli
+relay --version
+```
+
+Node.js 22.22.3 or newer is required. `relaymessenger` remains an executable
+alias for existing installs.
+
+## Authenticate
+
+Create Agent Tokens in Relay Console. Tokens are accepted only from stdin,
+the `RELAY_AGENT_TOKEN` environment variable, or an owner-only local profile;
+there is deliberately no token command-line option.
 
 ```sh
-npm install -g @relaymessenger/cli
+printf '%s' "$RELAY_AGENT_TOKEN" | relay auth login --token-stdin
+relay auth status
+relay doctor
+```
 
-# 1. Pair this machine with the Relay app (QR + short code, ~30 s)
-relaymessenger pair
+Profiles live in `${XDG_CONFIG_HOME:-~/.config}/relay/config.json`. The
+directory is mode `0700` and the file is mode `0600` on POSIX systems.
 
-# 2. Start the bridge in the repo you want the agent to work in
-cd ~/code/my-project
-relaymessenger start --engine claude    # or: --engine codex | --engine hermes
+```sh
+relay profiles add staging --api-url https://api.staging.relayapp.im
+relay profiles use staging
+printf '%s' "$STAGING_RELAY_AGENT_TOKEN" |
+  relay auth login --profile staging --token-stdin
+relay profiles list
 ```
 
-Now text the agent from the Relay app. Each message (or quick burst of
-messages) becomes one engine turn; the bridge shows a typing indicator while
-the engine works and posts one finalized reply per turn.
+Resolution order is:
 
-## Commands
+1. `RELAY_AGENT_TOKEN`, `RELAY_API_URL`, and `RELAY_PROFILE`;
+2. the selected local profile;
+3. `https://api.relayapp.im` as the API URL.
 
-| Command | What it does |
-| --- | --- |
-| `relaymessenger pair` | `POST /v1/pairings`, shows a terminal QR + code, long-polls until you claim it in the app, stores the Agent Token in `~/.relaymessenger/config.json` (chmod 600) and pins your user id as the bridge owner (from `GET /v1/agents/me`; override with `RELAY_OWNER_USER_ID`). If owner lookup is interrupted after the token is saved, running the command again resumes that saved token without creating another agent. The token never appears on the phone. |
-| `relaymessenger start` | Receive loop: long-polls `GET /v1/events`, drives the engine over ACP, replies via `POST /v1/messages` with an `Idempotency-Key`. Flags: `--engine claude\|codex\|hermes`, `--dir <path>`. Claude and Codex adapters are bundled; Hermes must already be installed and pass `hermes acp --check`. |
-| `relaymessenger install-codex` | Run from a project root to opt in that project only. Merges, never clobbers, `[mcp_servers.relay]` + `notify` into `~/.codex/config.toml` (comments preserved; a `.bak` of the original is kept) and a `PermissionRequest` hook into `~/.codex/hooks.json`. Other projects are suppressed until installed separately. Codex gates untrusted hook handlers: the first run may ask you to trust the relaymessenger handler. |
-| `relaymessenger install-claude` | After pairing, strictly validates the Claude plugin bundled in the installed npm package, persists its local marketplace under the paired account's private runtime directory, installs `relay@relaymessenger-bundled`, and writes the token/API origin/owner pin to `~/.claude/channels/relay/.env` with mode 600 without printing the token. It refuses to overwrite a different configured identity. |
-| `relaymessenger install-openclaw` | After pairing, persists the OpenClaw plugin archive bundled in the npm package and installs it through OpenClaw's managed `npm-pack:` path, adds only Relay's plugin/channel fields to `~/.openclaw/openclaw.json`, and writes the paired token to an owner-only file. Existing unrelated config is preserved and a different configured identity is refused. |
-| `relaymessenger doctor` | Checks Node, pairing, token file permissions, API reachability, installed adapter pins, and durable-state health. |
+Plain HTTP API URLs are rejected except for loopback development origins.
 
-## How the wire works
+## Resource commands
 
-Everything rides Relay's public agent API, the same surface you can drive
-with curl:
+Every command prints JSON.
 
 ```sh
-# what the bridge polls (agent bearer auth; long-poll, cursor acks ≤ N)
-curl -H "Authorization: Bearer $AGENT_TOKEN" \
-  "https://api.relayapp.im/v1/events?cursor=0&timeout=25"
-
-# what the bridge sends per finished turn
-curl -X POST https://api.relayapp.im/v1/messages \
-  -H "Authorization: Bearer $AGENT_TOKEN" \
-  -H "Idempotency-Key: relay-turn-<sha256(conversation,event-id-batch)>" \
-  -H "Content-Type: application/json" \
-  -d '{"conversation_id":"cnv_…","parts":[{"type":"text","text":"done"}]}'
+relay chats list --limit 20
+relay chats get "$CHAT_ID"
+relay chats messages list "$CHAT_ID" --limit 50
+relay chats messages send "$CHAT_ID" --text "Hello" \
+  --idempotency-key "$(uuidgen)"
+relay messages send --to advait --text "Hello" \
+  --idempotency-key "$(uuidgen)"
+relay messages react "$MESSAGE_ID" --operation add --type love
+relay chats typing start "$CHAT_ID"
+relay chats read "$CHAT_ID"
+
+relay contact-card get
+relay contact-card setup --handle weather.acme --first-name Weather
+relay contact-card share "$CHAT_ID"
+relay contact-requests create advait
+
+relay attachments upload ./report.pdf --content-type application/pdf
+relay blocked-handles list
+relay webhooks events
+relay webhooks subscriptions list
 ```
 
-- **Engines**: Claude and Codex are spawned as ACP adapters over
-  stdio (`@agentclientprotocol/claude-agent-acp`,
-  `@agentclientprotocol/codex-acp`). Both adapters are exact runtime
-  dependencies resolved from the installed package; the bridge never runs
-  mutable registry `latest` code. Adapter subprocesses receive platform and
-  engine/provider variables, not the complete parent environment. Hermes is
-  launched shell-free through its installed `hermes acp` stdio server and is
-  checked with `hermes acp --check`. Conversation → session bindings persist
-  in the paired account's runtime directory, so a conversation keeps its
-  engine context. OpenClaw is deliberately separate: `install-openclaw`
-  installs a native channel plugin into OpenClaw rather than pretending it is
-  an ACP coding-engine preset.
-- **Approvals**: an engine `session/request_permission` becomes a Relay
-  message with a text part plus an `agent_permission_request` data part
-  (origin-tagged Allow/Deny options). Tap an option or text
-  `yes <id>` / `no <id>`. The full security-relevant tool input and affected
-  paths must fit in the card; an operation that cannot be represented in full
-  is denied instead of shown partially. No answer within 10 minutes → deny.
-- **Owner gate**: only the user pinned at pair time can prompt the engine or
-  answer an approval card; messages from anyone else are ignored before their
-  content is interpreted.
-- **Reliability**: the receive cursor advances only in the same atomic
-  (fsync + rename) write that persists the event queue
-  (`~/.relaymessenger/accounts/<origin-agent-hash>/state.json`), event ids are deduped, rapid messages debounce
-  ~800 ms into one turn, and the poll loop restarts with capped exponential
-  backoff + jitter. Each pending approval is its own create-once file under
-  that account's `approvals/`, so a bridge restart cannot lose one and no two
-  processes ever rewrite a shared snapshot. Engine/tool turns are at-most-once:
-  an attempt marker is durable before execution, so a crash never silently
-  repeats a deploy, deletion, command, or external send. Completed replies use
-  a durable outbox and stable idempotency key, so delivery can retry without
-  rerunning those tools. An interrupted turn is reported and must be retried
-  explicitly by the owner.
-- Long-poll is exclusive: an enabled webhook endpoint or a second poller gets
-  `409` (Telegram semantics). One consumer per token. A `401` stops the loop
-  with re-pair guidance instead of retrying.
-- **Codex notification privacy**: `install-codex` stores an explicit local
-  allowlist entry for the current project root in
-  `~/.relaymessenger/codex-notify.json`. A completed turn from any other project is
-  suppressed. For an allowed project, Relay receives the project directory's
-  basename plus Codex's complete `last-assistant-message`; input messages and
-  the absolute working-directory path are not sent. That text is retained in
-  Relay message history. There is no global-all-projects opt-in; run
-  `install-codex` in each
-  project you choose to disclose.
-- **Codex MCP sends**: `relay_send_message` requires a caller-chosen stable
-  `send_id`. Reuse the same `send_id`, conversation, and text only after an
-  unknown outcome; a changed payload is rejected. The mapping and
-  idempotency key live in the paired account's private runtime directory, so
-  a process restart cannot turn one logical send into two messages.
-
-## Development and testing
-
-- `RELAY_API_ORIGIN` points `pair`, `start`, and `doctor` at a
-  non-production Relay API origin, e.g. a local dev server:
-  `RELAY_API_ORIGIN=http://127.0.0.1:8787 relaymessenger pair`. This is a
-  development/testing mechanism only, production
-  (`https://api.relayapp.im`) stays the default, the value must be an
-  origin with no path/query/credentials, and plain HTTP is accepted only
-  for loopback hosts (same rule as every other origin the bridge uses).
-  Durable bridge state is scoped per effective origin, so an override
-  never replays or advances production cursors and ledgers.
-- With `--engine claude`, the bundled adapter inherits your Claude Code
-  settings. If the resolved `permissions.defaultMode` is
-  `bypassPermissions`, the engine never asks for approval, so phone
-  Allow/Deny cards will not appear; `relaymessenger start` and `relaymessenger doctor`
-  print a warning when they detect this.
-
-## Files
+Run `relay --help` and each command group's `--help` for the full current
+surface: Chats, Messages, Attachments, blocked Handles, webhook events and
+subscriptions, Contact Cards, and Contact requests.
+
+## Local event forwarding
 
+`relay events listen` is a development convenience backed only by the SDK's
+source-backed Agent WebSocket. It refuses Relay's production API, requires an
+explicit profile, and requires confirmation that the profile belongs to a
+dedicated non-production Agent whose durable checkpoint may advance:
+
+```sh
+relay --profile staging events listen --acknowledge-events
+relay --profile staging events listen --acknowledge-events \
+  --forward-to http://127.0.0.1:3000/relay-events
 ```
-~/.relaymessenger/config.json    agent token, API origin, pinned owner   (chmod 600)
-~/.relaymessenger/codex-notify.json  locally allowed Codex project roots (not sent)
-~/.relaymessenger/accounts/<hash>/state.json     cursor, queued events/replies,
-                                           owner conversation (start-only)
-~/.relaymessenger/accounts/<hash>/approvals/     one file per pending approval
-~/.relaymessenger/accounts/<hash>/sessions.json  conversation → session bindings
-~/.relaymessenger/accounts/<hash>/mcp-sends/     durable Codex MCP logical sends
-~/.relaymessenger/accounts/<hash>/installed-plugins/  stable bundled plugin sources
+
+Forward destinations must be loopback HTTP(S). Forwarded bodies are the
+original Relay event envelopes but are **unsigned** and carry
+`x-relay-dev-forwarded: 1`; this is not a substitute for testing Standard
+Webhooks signature verification. A non-2xx local response is not acknowledged,
+so Relay can redeliver it. Local receivers must deduplicate by `event_id`.
+
+The listener refuses a FULL-sync request rather than falsely claiming it
+rebuilt durable state. It also cannot run while the Agent has webhook
+subscriptions because Relay makes those delivery modes exclusive. Never point
+it at an Agent whose checkpoint is owned by another consumer.
+
+## Doctor
+
+`relay doctor` checks the Node runtime, API URL, token resolution, local file
+permissions, SDK contract availability, and a read-only API request.
+`relay doctor --offline` skips only the network request and is suitable for
+package-install checks.
+
+## Security
+
+- Keep Agent Tokens out of source, URLs, shell arguments, and logs.
+- Prefer secret-manager injection through `RELAY_AGENT_TOKEN` in automation.
+- Output and error paths redact every locally resolvable token.
+- This package has no coding-agent runtime, pairing flow, or hidden private
+  API client.
+
+## Development
+
+All Linux execution happens in a fresh Daytona sandbox:
+
+```sh
+npm ci
+npm run validate
 ```
 
-Requires Node >= 22.18.
+`validate` performs type checking, unit and negative tests, the pinned SDK
+operation-hash check, boundary checks, package packing, isolated tarball
+installation, and installed-bin doctor smoke tests.

package/dist/cli.js

@@ -1,174 +1,4 @@
 #!/usr/bin/env node
-/**
- * relaymessenger: bridge your local coding agent to Relay.
- *
- *   relaymessenger pair [--engine <preset>] [--name <device-name>]
- *   relaymessenger start [--engine <preset>] [--dir <path>]
- *   relaymessenger install-codex
- *   relaymessenger install-claude
- *   relaymessenger install-openclaw
- *   relaymessenger doctor
- *
- * Internal entrypoints (wired by install-codex): notify, mcp,
- * hook permission-request.
- */
-import { resolveApiOrigin, RelayClient } from "./api.js";
-import { claudeBypassWarning } from "./claude-settings.js";
-import { notifyCommand, permissionRequestHook } from "./codex.js";
-import { doctor } from "./doctor.js";
-import { AcpEngine } from "./engine/acp.js";
-import { ENGINE_HELP, enginePermissionTimeoutMs } from "./engine/catalog.js";
-import { installClaude, installCodex, installOpenClaw } from "./install.js";
-import { parseFlags } from "./flags.js";
-import { mcpServe } from "./mcp.js";
-import { pair } from "./pair.js";
-import { PermissionBroker } from "./permissions.js";
-import { ReceiveLoop } from "./receive.js";
-import { ApprovalStore, ConfigStore, resolveOwnerUserId, RuntimeLock, runtimeHomeForConfig, SessionStore, StateStore, } from "./store.js";
-const USAGE = `relaymessenger — bridge your local coding agent to Relay (https://relayapp.im)
-
-  relaymessenger pair            pair this machine with the Relay app (QR + code)
-  relaymessenger start           receive messages and drive the engine
-      --engine <preset>       (default claude)
-      presets: ${ENGINE_HELP}
-      --dir <path>            working directory for engine sessions
-  relaymessenger install-codex   wire Codex notify + phone approvals + MCP server
-  relaymessenger install-claude  point at the Claude Code channel plugin
-  relaymessenger install-openclaw install and configure the bundled OpenClaw plugin
-  relaymessenger doctor          health checks
-  relaymessenger version         print the installed version
-
-Docs: https://docs.relayapp.im/quickstart`;
-async function main() {
-    const [command, ...restArgv] = process.argv.slice(2);
-    const flags = parseFlags(restArgv);
-    const log = (line) => console.error(`[relaymessenger] ${line}`);
-    switch (command) {
-        case "pair": {
-            // RELAY_API_ORIGIN is a development/testing override; production default.
-            const origin = resolveApiOrigin();
-            await pair({ origin, engine: flags.engine, deviceName: flags.name });
-            return 0;
-        }
-        case "start": {
-            const config = new ConfigStore().load();
-            if (!config?.agent_token) {
-                console.error("Not paired. Run `relaymessenger pair` first.");
-                return 1;
-            }
-            const ownerUserId = resolveOwnerUserId(config); // fail closed without a pinned owner
-            // RELAY_API_ORIGIN (development/testing) overrides the paired origin.
-            const origin = resolveApiOrigin(config.api_origin);
-            const client = new RelayClient(origin, config.agent_token);
-            // Scope durable state to the effective origin so an override never
-            // replays or advances the paired production cursor/ledgers.
-            const runtimeHome = runtimeHomeForConfig({ ...config, api_origin: origin });
-            if (flags.engine === "claude") {
-                const bypass = claudeBypassWarning(flags.dir ?? process.cwd());
-                if (bypass)
-                    log(`warning: ${bypass}`);
-            }
-            const runtimeLock = new RuntimeLock(runtimeHome);
-            // Acquire before any state/session/approval object can read or rewrite
-            // whole-file ledgers for this paired identity.
-            runtimeLock.acquire();
-            try {
-                const state = new StateStore(runtimeHome);
-                const sessions = new SessionStore(runtimeHome);
-                const approvals = new ApprovalStore(runtimeHome);
-                const engine = new AcpEngine(flags.engine, sessions, log);
-                const broker = new PermissionBroker(client, approvals, enginePermissionTimeoutMs(flags.engine), log);
-                const loop = new ReceiveLoop(client, state, engine, broker, {
-                    ownerUserId,
-                    cwd: flags.dir ?? process.cwd(),
-                    log,
-                });
-                let shuttingDown;
-                const shutdown = () => {
-                    if (shuttingDown)
-                        return shuttingDown;
-                    shuttingDown = (async () => {
-                        log("shutting down…");
-                        loop.stop();
-                        // Dispose first: this rejects/aborts any live engine turn so settle()
-                        // cannot wait forever on a child process we intend to terminate.
-                        await engine.dispose();
-                        await loop.settle();
-                        runtimeLock.release();
-                        process.exit(0);
-                    })();
-                    return shuttingDown;
-                };
-                process.on("SIGINT", shutdown);
-                process.on("SIGTERM", shutdown);
-                log(`bridge running: engine=${flags.engine} dir=${flags.dir ?? process.cwd()} api=${origin}`);
-                try {
-                    await loop.run();
-                }
-                finally {
-                    // Fatal loop exits (409/401 throws) must not leave a detached engine
-                    // process group running without its bridge.
-                    loop.stop();
-                    await engine.dispose().catch(() => { });
-                }
-                return 0;
-            }
-            finally {
-                runtimeLock.release();
-            }
-        }
-        case "install-codex":
-            installCodex();
-            return 0;
-        case "install-claude":
-            installClaude();
-            return 0;
-        case "install-openclaw":
-            installOpenClaw();
-            return 0;
-        case "doctor":
-            return (await doctor()) ? 0 : 1;
-        case "notify":
-            await notifyCommand(restArgv);
-            return 0;
-        case "mcp":
-            await mcpServe();
-            return 0;
-        case "hook": {
-            if (flags.rest[0] !== "permission-request") {
-                console.error(`unknown hook: ${flags.rest[0] ?? "(none)"}`);
-                return 1;
-            }
-            return await permissionRequestHook();
-        }
-        case "version":
-        case "--version":
-        case "-v": {
-            // A published CLI that cannot state its own version leaves a bug report
-            // with nothing to anchor on. Read the manifest rather than a constant, so
-            // it cannot drift from what npm actually installed.
-            const { createRequire } = await import("node:module");
-            const manifest = createRequire(import.meta.url)("../package.json");
-            console.log(manifest.version);
-            return 0;
-        }
-        case undefined:
-        case "help":
-        case "--help":
-        case "-h":
-            console.log(USAGE);
-            return 0;
-        default:
-            console.error(`unknown command: ${command}\n`);
-            console.log(USAGE);
-            return 1;
-    }
-}
-main().then((code) => {
-    if (code !== 0)
-        process.exitCode = code;
-}, (error) => {
-    console.error(`relaymessenger: ${error?.message ?? error}`);
-    process.exitCode = 1;
-});
+import { runCLI } from "./program.js";
+process.exitCode = await runCLI(process.argv.slice(2));
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACL,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,oBAAoB,EACpB,YAAY,EACZ,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,MAAM,KAAK,GAAG;;;;;iBAKG,WAAW;;;;;;;;0CAQc,CAAC;AAE3C,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAExE,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM,EAAE,CAAC;YACZ,0EAA0E;YAC1E,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACrE,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;gBACzB,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAC9D,OAAO,CAAC,CAAC;YACX,CAAC;YACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,qCAAqC;YACrF,sEAAsE;YACtE,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC3D,mEAAmE;YACnE,4DAA4D;YAC5D,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC/D,IAAI,MAAM;oBAAE,GAAG,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;YACjD,uEAAuE;YACvE,+CAA+C;YAC/C,WAAW,CAAC,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;gBAC1C,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC/C,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC1D,MAAM,MAAM,GAAG,IAAI,gBAAgB,CACjC,MAAM,EACN,SAAS,EACT,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,EACvC,GAAG,CACJ,CAAC;gBACF,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;oBAC1D,WAAW;oBACX,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;oBAC/B,GAAG;iBACJ,CAAC,CAAC;gBACH,IAAI,YAAuC,CAAC;gBAC5C,MAAM,QAAQ,GAAG,GAAG,EAAE;oBACpB,IAAI,YAAY;wBAAE,OAAO,YAAY,CAAC;oBACtC,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;wBACzB,GAAG,CAAC,gBAAgB,CAAC,CAAC;wBACtB,IAAI,CAAC,IAAI,EAAE,CAAC;wBACZ,sEAAsE;wBACtE,iEAAiE;wBACjE,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;wBACvB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;wBACpB,WAAW,CAAC,OAAO,EAAE,CAAC;wBACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC,CAAC,EAAE,CAAC;oBACL,OAAO,YAAY,CAAC;gBACtB,CAAC,CAAC;gBACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAChC,GAAG,CAAC,0BAA0B,KAAK,CAAC,MAAM,QAAQ,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,MAAM,EAAE,CAAC,CAAC;gBAC9F,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;gBACnB,CAAC;wBAAS,CAAC;oBACT,qEAAqE;oBACrE,4CAA4C;oBAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;oBACZ,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACzC,CAAC;gBACD,OAAO,CAAC,CAAC;YACX,CAAC;oBAAS,CAAC;gBACT,WAAW,CAAC,OAAO,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;QACD,KAAK,eAAe;YAClB,YAAY,EAAE,CAAC;YACf,OAAO,CAAC,CAAC;QACX,KAAK,gBAAgB;YACnB,aAAa,EAAE,CAAC;YAChB,OAAO,CAAC,CAAC;QACX,KAAK,kBAAkB;YACrB,eAAe,EAAE,CAAC;YAClB,OAAO,CAAC,CAAC;QACX,KAAK,QAAQ;YACX,OAAO,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,QAAQ;YACX,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC9B,OAAO,CAAC,CAAC;QACX,KAAK,KAAK;YACR,MAAM,QAAQ,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC;QACX,KAAK,MAAM,EAAE,CAAC;YACZ,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,oBAAoB,EAAE,CAAC;gBAC3C,OAAO,CAAC,KAAK,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;gBAC5D,OAAO,CAAC,CAAC;YACX,CAAC;YACD,OAAO,MAAM,qBAAqB,EAAE,CAAC;QACvC,CAAC;QACD,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI,EAAE,CAAC;YACV,wEAAwE;YACxE,0EAA0E;YAC1E,oDAAoD;YACpD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAwB,CAAC;YAC1F,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,SAAS,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,CAAC,CAAC;QACX;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,IAAI,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE;IACP,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1C,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;IACR,OAAO,CAAC,KAAK,CAAC,mBAAmB,KAAK,EAAE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CACF,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,OAAO,CAAC,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,8 @@
+import Relay from "@relaymessenger/sdk";
+import type { ConfigContext, ResolvedAuth } from "./config.js";
+export interface ClientContext {
+    client: Relay;
+    auth: ResolvedAuth;
+}
+export declare const createClientContext: (profile?: string, configContext?: ConfigContext) => Promise<ClientContext>;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,qBAAqB,CAAC;AACxC,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG/D,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,KAAK,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;CACpB;AAED,eAAO,MAAM,mBAAmB,GAC9B,UAAU,MAAM,EAChB,gBAAe,aAAkB,KAChC,OAAO,CAAC,aAAa,CASvB,CAAC"}

package/dist/client.js

@@ -0,0 +1,13 @@
+import Relay from "@relaymessenger/sdk";
+import { resolveAuth } from "./config.js";
+export const createClientContext = async (profile, configContext = {}) => {
+    const auth = await resolveAuth(profile, configContext);
+    return {
+        auth,
+        client: new Relay({
+            apiKey: auth.token,
+            baseURL: auth.apiURL,
+        }),
+    };
+};
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,qBAAqB,CAAC;AAExC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO1C,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,OAAgB,EAChB,gBAA+B,EAAE,EACT,EAAE;IAC1B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACvD,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,IAAI,KAAK,CAAC;YAChB,MAAM,EAAE,IAAI,CAAC,KAAK;YAClB,OAAO,EAAE,IAAI,CAAC,MAAM;SACrB,CAAC;KACH,CAAC;AACJ,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,39 @@
+export declare const DEFAULT_API_URL = "https://api.relayapp.im";
+export declare const DEFAULT_PROFILE = "default";
+export interface RelayProfile {
+    api_url?: string;
+    agent_token?: string;
+}
+export interface RelayConfig {
+    version: 1;
+    current_profile: string;
+    profiles: Record<string, RelayProfile>;
+}
+export interface ConfigContext {
+    env?: NodeJS.ProcessEnv;
+    home?: string;
+    platform?: NodeJS.Platform;
+}
+export interface ResolvedAuth {
+    profile: string;
+    apiURL: string;
+    token: string;
+    tokenSource: "environment" | "profile";
+    configPath: string;
+}
+export declare const configPath: (context?: ConfigContext) => string;
+export declare const emptyConfig: () => RelayConfig;
+export declare const readConfig: (context?: ConfigContext) => Promise<RelayConfig>;
+export declare const writeConfig: (config: RelayConfig, context?: ConfigContext) => Promise<void>;
+export declare const validateProfileName: (name: string) => string;
+export declare const validateApiURL: (input: string) => string;
+export declare const validateForwardURL: (input: string) => string;
+export declare const validateToken: (value: string) => string;
+export declare const resolveAuth: (requestedProfile?: string, context?: ConfigContext) => Promise<ResolvedAuth>;
+export declare const inspectConfigPermissions: (context?: ConfigContext) => Promise<{
+    exists: boolean;
+    secure: boolean;
+    mode?: number;
+}>;
+export declare const collectConfiguredTokens: (context?: ConfigContext) => Promise<string[]>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,eAAe,4BAA4B,CAAC;AACzD,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,CAAC,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,aAAa,GAAG,SAAS,CAAC;IACvC,UAAU,EAAE,MAAM,CAAC;CACpB;AAKD,eAAO,MAAM,UAAU,GAAI,UAAS,aAAkB,KAAG,MAYxD,CAAC;AAEF,eAAO,MAAM,WAAW,QAAO,WAM7B,CAAC;AA0CH,eAAO,MAAM,UAAU,GACrB,UAAS,aAAkB,KAC1B,OAAO,CAAC,WAAW,CAiBrB,CAAC;AAEF,eAAO,MAAM,WAAW,GACtB,QAAQ,WAAW,EACnB,UAAS,aAAkB,KAC1B,OAAO,CAAC,IAAI,CAuBd,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,MAAM,MAAM,KAAG,MAOlD,CAAC;AAQF,eAAO,MAAM,cAAc,GAAI,OAAO,MAAM,KAAG,MAoB9C,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,OAAO,MAAM,KAAG,MAgBlD,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,OAAO,MAAM,KAAG,MAM7C,CAAC;AAEF,eAAO,MAAM,WAAW,GACtB,mBAAmB,MAAM,EACzB,UAAS,aAAkB,KAC1B,OAAO,CAAC,YAAY,CA2BtB,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,UAAS,aAAkB,KAC1B,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAkB7D,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAClC,UAAS,aAAkB,KAC1B,OAAO,CAAC,MAAM,EAAE,CAQlB,CAAC"}