@synap-core/cli 1.2.0 → 1.5.0

package/dist/lib/browser-auth.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Browser-based connect flow — the recommended provisioning path.
+ *
+ * 1. Start a local HTTP server on an ephemeral port.
+ * 2. Build `{podUrl}/admin/connect?integration=cli&redirect_uri=http://127.0.0.1:<port>/callback`.
+ * 3. Open the user's default browser at that URL.
+ * 4. Admin UI authenticates the user (Kratos session), mints a scoped Hub
+ *    Protocol API key via `trpc.apiKeys.connectIntegration`, and redirects
+ *    to `http://127.0.0.1:<port>/callback?context={apiKey,podUrl,workspaceId}`.
+ * 5. Local server receives the callback, extracts credentials, shuts down.
+ *
+ * This is the same flow Raycast uses (via a `raycast://` deeplink) — for CLI
+ * we just swap the deeplink for a loopback HTTP URL. The admin UI's redirect
+ * whitelist accepts both.
+ *
+ * Security notes:
+ *   - Loopback only (127.0.0.1) — no external network can intercept.
+ *   - One-shot: server only handles the first /callback, then exits.
+ *   - 5-minute timeout.
+ *   - No CSRF token: single-use, host-local, bound to the process.
+ */
+export interface BrowserAuthResult {
+    apiKey: string;
+    podUrl: string;
+    workspaceId?: string;
+}
+export interface BrowserAuthOptions {
+    podUrl: string;
+    integration: "cli" | "raycast" | "openclaw" | "custom";
+    /** Milliseconds to wait for the callback. Default 5min. */
+    timeoutMs?: number;
+    /** Hook invoked with the admin-panel URL right before opening the browser. */
+    onUrlReady?: (url: string) => void;
+}
+export declare function runBrowserAuth(opts: BrowserAuthOptions): Promise<BrowserAuthResult>;

package/dist/lib/browser-auth.js

@@ -0,0 +1,170 @@
+/**
+ * Browser-based connect flow — the recommended provisioning path.
+ *
+ * 1. Start a local HTTP server on an ephemeral port.
+ * 2. Build `{podUrl}/admin/connect?integration=cli&redirect_uri=http://127.0.0.1:<port>/callback`.
+ * 3. Open the user's default browser at that URL.
+ * 4. Admin UI authenticates the user (Kratos session), mints a scoped Hub
+ *    Protocol API key via `trpc.apiKeys.connectIntegration`, and redirects
+ *    to `http://127.0.0.1:<port>/callback?context={apiKey,podUrl,workspaceId}`.
+ * 5. Local server receives the callback, extracts credentials, shuts down.
+ *
+ * This is the same flow Raycast uses (via a `raycast://` deeplink) — for CLI
+ * we just swap the deeplink for a loopback HTTP URL. The admin UI's redirect
+ * whitelist accepts both.
+ *
+ * Security notes:
+ *   - Loopback only (127.0.0.1) — no external network can intercept.
+ *   - One-shot: server only handles the first /callback, then exits.
+ *   - 5-minute timeout.
+ *   - No CSRF token: single-use, host-local, bound to the process.
+ */
+import http from "node:http";
+import { URL } from "node:url";
+import { spawn } from "node:child_process";
+export async function runBrowserAuth(opts) {
+    const podUrl = opts.podUrl.replace(/\/$/, "");
+    const timeoutMs = opts.timeoutMs ?? 5 * 60_000;
+    return new Promise((resolve, reject) => {
+        const server = http.createServer();
+        let settled = false;
+        const settle = (fn) => {
+            if (settled)
+                return;
+            settled = true;
+            fn();
+            server.close();
+            clearTimeout(timeout);
+        };
+        const timeout = setTimeout(() => {
+            settle(() => reject(new Error("Timed out waiting for browser approval. Run again, or use --manual-key.")));
+        }, timeoutMs);
+        server.on("request", (req, res) => {
+            // Only accept GET /callback — reject anything else.
+            const reqUrl = new URL(req.url ?? "/", `http://127.0.0.1`);
+            if (reqUrl.pathname !== "/callback") {
+                res.writeHead(404).end("Not found");
+                return;
+            }
+            const raw = reqUrl.searchParams.get("context");
+            if (!raw) {
+                res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                res.end(errorHtml("No context received — try again."));
+                settle(() => reject(new Error("Callback missing `context` parameter")));
+                return;
+            }
+            try {
+                const parsed = JSON.parse(raw);
+                if (!parsed.apiKey || !parsed.podUrl) {
+                    throw new Error("Callback missing apiKey or podUrl");
+                }
+                res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+                res.end(successHtml(opts.integration));
+                settle(() => resolve({
+                    apiKey: parsed.apiKey,
+                    podUrl: parsed.podUrl,
+                    workspaceId: parsed.workspaceId ?? undefined,
+                }));
+            }
+            catch (err) {
+                res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
+                res.end(errorHtml("Invalid callback payload."));
+                settle(() => reject(err instanceof Error ? err : new Error(String(err))));
+            }
+        });
+        server.on("error", (err) => {
+            settle(() => reject(err));
+        });
+        server.listen(0, "127.0.0.1", () => {
+            const port = server.address().port;
+            const redirectUri = `http://127.0.0.1:${port}/callback`;
+            const adminUrl = new URL(`${podUrl}/admin/connect`);
+            adminUrl.searchParams.set("integration", opts.integration);
+            adminUrl.searchParams.set("redirect_uri", redirectUri);
+            const fullUrl = adminUrl.toString();
+            opts.onUrlReady?.(fullUrl);
+            openBrowser(fullUrl).catch(() => {
+                // Browser open failure is non-fatal — user can paste the URL themselves.
+            });
+        });
+    });
+}
+/**
+ * Cross-platform browser open. Returns when the launcher has been kicked off,
+ * not when the user has actually seen the page.
+ */
+async function openBrowser(url) {
+    const platform = process.platform;
+    const [command, args] = platform === "darwin"
+        ? ["open", [url]]
+        : platform === "win32"
+            ? ["cmd", ["/c", "start", "", url]]
+            : ["xdg-open", [url]];
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, args, {
+            stdio: "ignore",
+            detached: true,
+        });
+        child.once("error", reject);
+        child.once("spawn", () => {
+            child.unref();
+            resolve();
+        });
+    });
+}
+// ─── Page HTML ──────────────────────────────────────────────────────────────
+// Short, no external deps, CLI-tool vibe. Shown once per connect.
+function successHtml(integration) {
+    const label = integration.charAt(0).toUpperCase() + integration.slice(1);
+    return `<!doctype html>
+<html lang="en">
+  <head><meta charset="utf-8"><title>Synap connected</title>
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <style>
+      :root { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Helvetica, Arial, sans-serif; }
+      body { margin: 0; background: #0A0A0A; color: #FAFAFA; display: grid; place-items: center; min-height: 100vh; }
+      .card { max-width: 420px; padding: 32px; text-align: center; }
+      .check { width: 48px; height: 48px; margin: 0 auto 16px; border-radius: 9999px; background: rgba(16, 185, 129, 0.12); display: grid; place-items: center; color: #10B981; }
+      h1 { font-size: 20px; margin: 0 0 8px; font-weight: 600; letter-spacing: -0.01em; }
+      p { margin: 0; color: rgba(250, 250, 250, 0.6); font-size: 14px; line-height: 1.5; }
+      code { background: rgba(250, 250, 250, 0.08); padding: 2px 6px; border-radius: 4px; font-size: 12px; }
+    </style>
+  </head>
+  <body>
+    <div class="card">
+      <div class="check">
+        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><polyline points="20 6 9 17 4 12"></polyline></svg>
+      </div>
+      <h1>${label} connected</h1>
+      <p>You can close this tab and return to your terminal.</p>
+    </div>
+    <script>setTimeout(() => window.close(), 3000);</script>
+  </body>
+</html>`;
+}
+function errorHtml(reason) {
+    return `<!doctype html>
+<html lang="en">
+  <head><meta charset="utf-8"><title>Synap connect failed</title>
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <style>
+      :root { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Helvetica, Arial, sans-serif; }
+      body { margin: 0; background: #0A0A0A; color: #FAFAFA; display: grid; place-items: center; min-height: 100vh; }
+      .card { max-width: 420px; padding: 32px; text-align: center; }
+      .x { width: 48px; height: 48px; margin: 0 auto 16px; border-radius: 9999px; background: rgba(239, 68, 68, 0.12); display: grid; place-items: center; color: #EF4444; }
+      h1 { font-size: 20px; margin: 0 0 8px; font-weight: 600; }
+      p { margin: 0; color: rgba(250, 250, 250, 0.6); font-size: 14px; line-height: 1.5; }
+    </style>
+  </head>
+  <body>
+    <div class="card">
+      <div class="x">
+        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><line x1="18" y1="6" x2="6" y2="18"></line><line x1="6" y1="6" x2="18" y2="18"></line></svg>
+      </div>
+      <h1>Connect failed</h1>
+      <p>${reason}</p>
+    </div>
+  </body>
+</html>`;
+}
+//# sourceMappingURL=browser-auth.js.map

package/dist/lib/browser-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-auth.js","sourceRoot":"","sources":["../../src/lib/browser-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAkB3C,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,MAAM,CAAC;IAE/C,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,EAAE,EAAE,CAAC;YACL,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,IAAI,KAAK,CACP,yEAAyE,CAC1E,CACF,CACF,CAAC;QACJ,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAChC,oDAAoD;YACpD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACpC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBACvD,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC,CAAC;gBACxE,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAI5B,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;oBACrC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACvD,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;gBACvC,MAAM,CAAC,GAAG,EAAE,CACV,OAAO,CAAC;oBACN,MAAM,EAAE,MAAM,CAAC,MAAO;oBACtB,MAAM,EAAE,MAAM,CAAC,MAAO;oBACtB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,SAAS;iBAC7C,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC,CAAC;gBAChD,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;YACpD,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;YACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,gBAAgB,CAAC,CAAC;YACpD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3D,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;YAC3B,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC9B,yEAAyE;YAC3E,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GACnB,QAAQ,KAAK,QAAQ;QACnB,CAAC,CAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAW;QAC5B,CAAC,CAAC,QAAQ,KAAK,OAAO;YACpB,CAAC,CAAE,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAW;YAC9C,CAAC,CAAE,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAW,CAAC;IAEvC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,kEAAkE;AAElE,SAAS,WAAW,CAAC,WAAmB;IACtC,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO;;;;;;;;;;;;;;;;;;;YAmBG,KAAK;;;;;QAKT,CAAC;AACT,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO;;;;;;;;;;;;;;;;;;;WAmBE,MAAM;;;QAGT,CAAC;AACT,CAAC"}

package/dist/lib/hub-client.d.ts

@@ -0,0 +1,17 @@
+export interface HubConfig {
+    podUrl: string;
+    apiKey: string;
+    userId: string;
+    /** Active workspace — from `synap use`, pod default, or env var. Undefined if none configured. */
+    workspaceId?: string;
+    scopes?: string[];
+}
+export declare function resolveUserId(cfg: HubConfig): Promise<string>;
+export declare function assertScope(cfg: HubConfig, required: string): void;
+export declare function resolveHubConfig(opts?: {
+    podUrl?: string;
+    apiKey?: string;
+}): Promise<HubConfig>;
+export declare function hubGet(path: string, params: Record<string, string | number | undefined>, cfg: HubConfig): Promise<unknown>;
+export declare function hubPost(path: string, body: unknown, cfg: HubConfig): Promise<unknown>;
+export declare function hubPatch(path: string, body: unknown, cfg: HubConfig): Promise<unknown>;

package/dist/lib/hub-client.js

@@ -0,0 +1,115 @@
+import { getActivePodConfig, getActiveWorkspaceId, listPodProfiles } from "./pod.js";
+import { resolveAgentOverride } from "./agents-config.js";
+const userIdCache = new Map();
+export async function resolveUserId(cfg) {
+    if (cfg.userId && cfg.userId !== "cli")
+        return cfg.userId;
+    const cached = userIdCache.get(cfg.apiKey);
+    if (cached)
+        return cached;
+    const me = await hubGet("/users/me", {}, cfg);
+    const id = String(me.id ?? cfg.userId);
+    userIdCache.set(cfg.apiKey, id);
+    return id;
+}
+export function assertScope(cfg, required) {
+    // scopes are on the HubConfig only if we fetched them; skip check if unknown
+    if (!cfg.scopes)
+        return;
+    if (!cfg.scopes.includes(required)) {
+        throw new Error(`API key is missing required scope: ${required}\n` +
+            `Re-run: synap connect --target=<surface>  to get a key with the right scopes.`);
+    }
+}
+export async function resolveHubConfig(opts) {
+    // 1. Explicit flags (escape hatch)
+    if (opts?.podUrl && opts?.apiKey) {
+        return {
+            podUrl: opts.podUrl,
+            apiKey: opts.apiKey,
+            userId: process.env.SYNAP_USER_ID ?? "cli",
+        };
+    }
+    // 2. Agent override: SYNAP_AGENT env var selects a named identity
+    const agentOverride = resolveAgentOverride();
+    if (agentOverride) {
+        const profiles = listPodProfiles();
+        const podProfile = profiles.find(p => p.name === agentOverride.podName);
+        const podUrl = podProfile?.config.podUrl ?? getActivePodConfig()?.podUrl ?? "";
+        const envScopes = process.env.SYNAP_KEY_SCOPES;
+        return {
+            podUrl,
+            apiKey: agentOverride.apiKey,
+            userId: agentOverride.podName ?? "agent",
+            scopes: envScopes ? envScopes.split(",") : undefined,
+        };
+    }
+    // 3. Env vars — set by `synap connect --target=claude-code`
+    const envPod = process.env.SYNAP_POD_URL;
+    const envKey = process.env.SYNAP_HUB_API_KEY;
+    const envUser = process.env.SYNAP_USER_ID;
+    const envScopes = process.env.SYNAP_KEY_SCOPES;
+    const envWorkspace = process.env.SYNAP_WORKSPACE_ID;
+    if (envPod && envKey && envUser) {
+        return {
+            podUrl: envPod,
+            apiKey: envKey,
+            userId: envUser,
+            workspaceId: envWorkspace || getActiveWorkspaceId(),
+            scopes: envScopes ? envScopes.split(",") : undefined,
+        };
+    }
+    // 4. Active CLI pod profile
+    const config = getActivePodConfig();
+    if (!config)
+        throw new Error("No pod configured. Run: synap pods add");
+    return {
+        podUrl: config.podUrl,
+        apiKey: config.hubApiKey,
+        userId: config.agentUserId,
+        workspaceId: getActiveWorkspaceId(),
+    };
+}
+export async function hubGet(path, params, cfg) {
+    const url = new URL(`${cfg.podUrl}/api/hub${path}`);
+    for (const [k, v] of Object.entries(params)) {
+        if (v !== undefined)
+            url.searchParams.set(k, String(v));
+    }
+    const res = await fetch(url.toString(), {
+        headers: { Authorization: `Bearer ${cfg.apiKey}` },
+        signal: AbortSignal.timeout(15_000),
+    });
+    if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        throw new Error(`Hub API error (HTTP ${res.status}): ${body.slice(0, 300)}`);
+    }
+    return res.json();
+}
+export async function hubPost(path, body, cfg) {
+    const res = await fetch(`${cfg.podUrl}/api/hub${path}`, {
+        method: "POST",
+        headers: { Authorization: `Bearer ${cfg.apiKey}`, "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+        signal: AbortSignal.timeout(15_000),
+    });
+    if (!res.ok) {
+        const bodyText = await res.text().catch(() => "");
+        throw new Error(`Hub API error (HTTP ${res.status}): ${bodyText.slice(0, 300)}`);
+    }
+    return res.json();
+}
+export async function hubPatch(path, body, cfg) {
+    const res = await fetch(`${cfg.podUrl}/api/hub${path}`, {
+        method: "PATCH",
+        headers: { Authorization: `Bearer ${cfg.apiKey}`, "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+        signal: AbortSignal.timeout(15_000),
+    });
+    if (!res.ok) {
+        const bodyText = await res.text().catch(() => "");
+        throw new Error(`Hub API error (HTTP ${res.status}): ${bodyText.slice(0, 300)}`);
+    }
+    return res.json();
+}
+//# sourceMappingURL=hub-client.js.map

package/dist/lib/hub-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-client.js","sourceRoot":"","sources":["../../src/lib/hub-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAW1D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAc;IAChD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC;IAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,MAAM,CAAE,EAA8B,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACpE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAc,EAAE,QAAgB;IAC1D,6EAA6E;IAC7E,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO;IACxB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,sCAAsC,QAAQ,IAAI;YAClD,+EAA+E,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA2C;IAChF,mCAAmC;IACnC,IAAI,IAAI,EAAE,MAAM,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;QACjC,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,KAAK;SAC3C,CAAC;IACJ,CAAC;IACD,kEAAkE;IAClE,MAAM,aAAa,GAAG,oBAAoB,EAAE,CAAC;IAC7C,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,OAAO,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,UAAU,EAAE,MAAM,CAAC,MAAM,IAAI,kBAAkB,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC;QAC/E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC/C,OAAO;YACL,MAAM;YACN,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,MAAM,EAAE,aAAa,CAAC,OAAO,IAAI,OAAO;YACxC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACrD,CAAC;IACJ,CAAC;IACD,4DAA4D;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC/C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACpD,IAAI,MAAM,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,YAAY,IAAI,oBAAoB,EAAE;YACnD,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;SACrD,CAAC;IACJ,CAAC;IACD,4BAA4B;IAC5B,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACvE,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,SAAS;QACxB,MAAM,EAAE,MAAM,CAAC,WAAW;QAC1B,WAAW,EAAE,oBAAoB,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAY,EACZ,MAAmD,EACnD,GAAc;IAEd,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,WAAW,IAAI,EAAE,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACtC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE;QAClD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,IAAa,EAAE,GAAc;IACvE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,WAAW,IAAI,EAAE,EAAE;QACtD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QACtF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAa,EAAE,GAAc;IACxE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,WAAW,IAAI,EAAE,EAAE;QACtD,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QACtF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC"}

package/dist/lib/openclaw.js

@@ -10,25 +10,42 @@ const OPENCLAW_DIR = join(homedir(), ".openclaw");
 const OPENCLAW_CONFIG = join(OPENCLAW_DIR, "openclaw.json");
 const OPENCLAW_SKILLS = join(OPENCLAW_DIR, "skills");
 export function detectOpenClaw() {
-    // ── Path 1: Local install (npm -g or npx) ─────────────────────────────
-    if (existsSync(OPENCLAW_DIR)) {
+    // Detection priority:
+    //   1. Docker container (most reliable — actively running state)
+    //   2. Local install (openclaw binary in PATH + ~/.openclaw dir)
+    //
+    // Why Docker first: the presence of ~/.openclaw on the host doesn't prove
+    // OpenClaw is installed locally — it may be a stray directory, or the
+    // Synap deploy dir may live in the same home. A running Docker container
+    // is a much stronger signal.
+    // ── Path 1: Docker container ───────────────────────────────────────────
+    const dockerInfo = detectOpenClawDocker();
+    if (dockerInfo)
+        return dockerInfo;
+    // ── Path 2: Local install (npm -g or npx) ─────────────────────────────
+    // Require BOTH ~/.openclaw AND an `openclaw` binary in PATH.
+    // ~/.openclaw alone is not enough (could be a leftover dir).
+    let localBinaryVersion;
+    try {
+        const out = execSync("openclaw --version 2>/dev/null", {
+            encoding: "utf-8",
+            timeout: 5000,
+        }).trim();
+        const match = out.match(/\d+\.\d+\.\d+/);
+        if (match)
+            localBinaryVersion = match[0];
+    }
+    catch {
+        // binary not in PATH — not a local install
+    }
+    if (existsSync(OPENCLAW_DIR) && localBinaryVersion) {
         const info = {
             found: true,
             runtime: "local",
             configPath: OPENCLAW_CONFIG,
             skillsDir: OPENCLAW_SKILLS,
+            version: localBinaryVersion,
         };
-        // Version
-        try {
-            const out = execSync("openclaw --version 2>/dev/null", {
-                encoding: "utf-8",
-                timeout: 5000,
-            }).trim();
-            const match = out.match(/\d+\.\d+\.\d+/);
-            if (match)
-                info.version = match[0];
-        }
-        catch { /* binary not in PATH */ }
         // Config
         if (existsSync(OPENCLAW_CONFIG)) {
             try {
@@ -48,12 +65,6 @@ export function detectOpenClaw() {
         }
         return info;
     }
-    // ── Path 2: Docker container ───────────────────────────────────────────
-    // OpenClaw may be running in Docker (no host ~/.openclaw dir).
-    // Detect by: (a) docker ps, (b) gateway health probe on port 18789.
-    const dockerInfo = detectOpenClawDocker();
-    if (dockerInfo)
-        return dockerInfo;
     return { found: false };
 }
 function detectOpenClawDocker() {

package/dist/lib/openclaw.js.map

@@ -1 +1 @@
-{"version":3,"file":"openclaw.js","sourceRoot":"","sources":["../../src/lib/openclaw.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAgBzC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAClD,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;AAC5D,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAErD,MAAM,UAAU,cAAc;IAC5B,yEAAyE;IACzE,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAiB;YACzB,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,OAAO;YAChB,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,eAAe;SAC3B,CAAC;QAEF,UAAU;QACV,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,gCAAgC,EAAE;gBACrD,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,IAAI;aACd,CAAC,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACzC,IAAI,KAAK;gBAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;QAEpC,SAAS;QACT,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAC7B,CAAC;QAED,UAAU;QACV,MAAM,IAAI,GAAI,IAAI,CAAC,MAAoE,EAAE,OAAO,EAAE,IAAI,IAAI,KAAK,CAAC;QAChH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,QAAQ,CAAC,6BAA6B,IAAI,yBAAyB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC9B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,+DAA+D;IAC/D,oEAAoE;IACpE,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;IAC1C,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,oBAAoB;IAC3B,sEAAsE;IACtE,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,OAA2B,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CACpB,0DAA0D,EAC1D,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CACrC,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;gBACpD,yDAAyD;gBACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBAClD,IAAI,QAAQ;oBAAE,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACpC,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAEtC,yEAAyE;IACzE,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,QAAQ,CAAC,wDAAwD,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAEhC,0CAA0C;IAC1C,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IAEnD,OAAO;QACL,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,aAAa,IAAI,UAAU;QAC1C,OAAO;QACP,cAAc;QACd,WAAW,EAAE,KAAK;QAClB,oEAAoE;QACpE,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,SAAS;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA+B;IACjE,aAAa,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,8BAA8B;IAClF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,iFAAiF;QACjF,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA+B,EAC/B,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAY,MAAM,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACrE,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA+B,EAC/B,IAAY,EACZ,KAAc;IAEd,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAA4B,CAAC;IACzD,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"openclaw.js","sourceRoot":"","sources":["../../src/lib/openclaw.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAgBzC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;AAClD,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;AAC5D,MAAM,eAAe,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAErD,MAAM,UAAU,cAAc;IAC5B,sBAAsB;IACtB,iEAAiE;IACjE,iEAAiE;IACjE,EAAE;IACF,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,6BAA6B;IAE7B,0EAA0E;IAC1E,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;IAC1C,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAElC,yEAAyE;IACzE,6DAA6D;IAC7D,6DAA6D;IAC7D,IAAI,kBAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,gCAAgC,EAAE;YACrD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QACzC,IAAI,KAAK;YAAE,kBAAkB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IAED,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,kBAAkB,EAAE,CAAC;QACnD,MAAM,IAAI,GAAiB;YACzB,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,OAAO;YAChB,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,eAAe;YAC1B,OAAO,EAAE,kBAAkB;SAC5B,CAAC;QAEF,SAAS;QACT,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAC7B,CAAC;QAED,UAAU;QACV,MAAM,IAAI,GAAI,IAAI,CAAC,MAAoE,EAAE,OAAO,EAAE,IAAI,IAAI,KAAK,CAAC;QAChH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC;YACH,QAAQ,CAAC,6BAA6B,IAAI,yBAAyB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC9B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,oBAAoB;IAC3B,sEAAsE;IACtE,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,OAA2B,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CACpB,0DAA0D,EAC1D,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CACrC,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;gBACpD,yDAAyD;gBACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBAClD,IAAI,QAAQ;oBAAE,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACpC,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IAEtC,yEAAyE;IACzE,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,QAAQ,CAAC,wDAAwD,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAEhC,0CAA0C;IAC1C,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IAEnD,OAAO;QACL,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,QAAQ;QACjB,aAAa,EAAE,aAAa,IAAI,UAAU;QAC1C,OAAO;QACP,cAAc;QACd,WAAW,EAAE,KAAK;QAClB,oEAAoE;QACpE,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,SAAS;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA+B;IACjE,aAAa,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,8BAA8B;IAClF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,iFAAiF;QACjF,MAAM,IAAI,GAAI,GAA6B,EAAE,IAAI,CAAC;QAClD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA+B,EAC/B,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAY,MAAM,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACrE,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,MAA+B,EAC/B,IAAY,EACZ,KAAc;IAEd,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAA4B,CAAC;IACzD,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAC3C,CAAC"}

package/dist/lib/pod.d.ts

@@ -7,10 +7,41 @@ export interface LocalPodConfig {
     workspaceId: string;
     agentUserId: string;
     hubApiKey: string;
+    label?: string;
     savedAt: string;
 }
-export declare function saveLocalPodConfig(config: LocalPodConfig): void;
+export type SurfaceName = "raycast" | "claude-code" | "claude-desktop" | "cursor" | "openclaw";
+export interface MultiPodConfig {
+    activePod: string;
+    /** Per-surface pod overrides. When set, takes priority over activePod for that surface. */
+    surfaces?: Partial<Record<SurfaceName, string>>;
+    pods: Record<string, LocalPodConfig>;
+    /** Active workspace override — set by `synap use <workspaceId>`. Takes priority over the pod's default workspaceId. */
+    activeWorkspaceId?: string;
+}
+/** Get the pod config for a specific surface, falling back to the global activePod. */
+export declare function getSurfacePod(surface: SurfaceName): LocalPodConfig | null;
+/** Get the name of the pod assigned to a surface (or the global active pod name). */
+export declare function getSurfacePodName(surface: SurfaceName): string | null;
+/** Assign a pod to a specific surface without changing the global activePod. */
+export declare function setSurfacePod(surface: SurfaceName, podName: string): LocalPodConfig;
+export declare function getActivePodConfig(surface?: SurfaceName): LocalPodConfig | null;
+/** @deprecated Use getActivePodConfig() */
 export declare function getLocalPodConfig(): LocalPodConfig | null;
+export declare function listPodProfiles(): Array<{
+    name: string;
+    config: LocalPodConfig;
+    active: boolean;
+}>;
+export declare function addPodProfile(name: string, podConfig: LocalPodConfig): void;
+export declare function setActivePod(name: string): LocalPodConfig;
+/** Get the active workspace ID: explicit override first, then the pod default. */
+export declare function getActiveWorkspaceId(): string | undefined;
+/** Persist a workspace as the active context for all subsequent commands. */
+export declare function setActiveWorkspaceId(workspaceId: string): void;
+export declare function removePodProfile(name: string): void;
+/** @deprecated Use addPodProfile("default", config) */
+export declare function saveLocalPodConfig(podConfig: LocalPodConfig): void;
 export interface PodStatus {
     url: string;
     healthy: boolean;

package/dist/lib/pod.js

@@ -6,24 +6,136 @@ import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";
 const CP_URL = process.env.SYNAP_CP_URL ?? "https://api.synap.live";
-// ─── Local CLI config (persists pod connection even without OpenClaw) ─────────
+// ─── Local CLI config (persists pod connections) ──────────────────────────────
 const CONFIG_DIR = path.join(os.homedir(), ".synap");
-const CONFIG_FILE = path.join(CONFIG_DIR, "pod-config.json");
-export function saveLocalPodConfig(config) {
+const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
+const LEGACY_CONFIG_FILE = path.join(CONFIG_DIR, "pod-config.json");
+function ensureConfigDir() {
     if (!fs.existsSync(CONFIG_DIR)) {
         fs.mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });
     }
-    fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 0o600 });
 }
-export function getLocalPodConfig() {
+function readMultiConfig() {
+    // Read new format
     try {
-        if (!fs.existsSync(CONFIG_FILE))
-            return null;
-        return JSON.parse(fs.readFileSync(CONFIG_FILE, "utf-8"));
+        if (fs.existsSync(CONFIG_FILE)) {
+            const parsed = JSON.parse(fs.readFileSync(CONFIG_FILE, "utf-8"));
+            if (parsed.pods)
+                return { activePod: parsed.activePod ?? "", pods: parsed.pods };
+            // File exists but has old/unrecognized shape — fall through to migration
+        }
     }
-    catch {
+    catch { /* fall through */ }
+    // Migrate from legacy flat format
+    try {
+        if (fs.existsSync(LEGACY_CONFIG_FILE)) {
+            const legacy = JSON.parse(fs.readFileSync(LEGACY_CONFIG_FILE, "utf-8"));
+            if (legacy.podUrl) {
+                const migrated = { activePod: "default", pods: { default: legacy } };
+                writeMultiConfig(migrated);
+                return migrated;
+            }
+        }
+    }
+    catch { /* fall through */ }
+    return { activePod: "", pods: {} };
+}
+function writeMultiConfig(config) {
+    ensureConfigDir();
+    fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 0o600 });
+}
+// ─── Public API ───────────────────────────────────────────────────────────────
+/** Get the pod config for a specific surface, falling back to the global activePod. */
+export function getSurfacePod(surface) {
+    const config = readMultiConfig();
+    const podName = config.surfaces?.[surface] ?? config.activePod;
+    if (!podName || !config.pods[podName])
+        return null;
+    return config.pods[podName];
+}
+/** Get the name of the pod assigned to a surface (or the global active pod name). */
+export function getSurfacePodName(surface) {
+    const config = readMultiConfig();
+    return config.surfaces?.[surface] ?? config.activePod ?? null;
+}
+/** Assign a pod to a specific surface without changing the global activePod. */
+export function setSurfacePod(surface, podName) {
+    const config = readMultiConfig();
+    if (!config.pods[podName])
+        throw new Error(`Pod profile '${podName}' not found`);
+    config.surfaces = config.surfaces ?? {};
+    config.surfaces[surface] = podName;
+    writeMultiConfig(config);
+    return config.pods[podName];
+}
+export function getActivePodConfig(surface) {
+    if (surface)
+        return getSurfacePod(surface);
+    const config = readMultiConfig();
+    if (!config.activePod || !config.pods[config.activePod])
         return null;
+    return config.pods[config.activePod];
+}
+/** @deprecated Use getActivePodConfig() */
+export function getLocalPodConfig() {
+    return getActivePodConfig();
+}
+export function listPodProfiles() {
+    const config = readMultiConfig();
+    return Object.entries(config.pods).map(([name, podConfig]) => ({
+        name,
+        config: podConfig,
+        active: name === config.activePod,
+    }));
+}
+export function addPodProfile(name, podConfig) {
+    const config = readMultiConfig();
+    config.pods[name] = podConfig;
+    if (!config.activePod)
+        config.activePod = name;
+    writeMultiConfig(config);
+}
+export function setActivePod(name) {
+    const config = readMultiConfig();
+    if (!config.pods[name])
+        throw new Error(`Pod profile '${name}' not found`);
+    config.activePod = name;
+    writeMultiConfig(config);
+    return config.pods[name];
+}
+/** Get the active workspace ID: explicit override first, then the pod default. */
+export function getActiveWorkspaceId() {
+    const config = readMultiConfig();
+    if (config.activeWorkspaceId)
+        return config.activeWorkspaceId;
+    const pod = config.activePod ? config.pods[config.activePod] : undefined;
+    return pod?.workspaceId || undefined;
+}
+/** Persist a workspace as the active context for all subsequent commands. */
+export function setActiveWorkspaceId(workspaceId) {
+    const config = readMultiConfig();
+    config.activeWorkspaceId = workspaceId;
+    writeMultiConfig(config);
+}
+export function removePodProfile(name) {
+    const config = readMultiConfig();
+    if (!config.pods[name])
+        throw new Error(`Pod profile '${name}' not found`);
+    delete config.pods[name];
+    if (config.activePod === name) {
+        const remaining = Object.keys(config.pods);
+        config.activePod = remaining[0] ?? "";
     }
+    writeMultiConfig(config);
+}
+/** @deprecated Use addPodProfile("default", config) */
+export function saveLocalPodConfig(podConfig) {
+    const config = readMultiConfig();
+    const name = config.activePod || "default";
+    config.pods[name] = podConfig;
+    if (!config.activePod)
+        config.activePod = name;
+    writeMultiConfig(config);
 }
 /**
  * Check if a Synap pod is healthy.