@telora/daemon 0.21.134 → 0.21.146

package/dist/cli/connect.d.ts

@@ -21,6 +21,9 @@ export { renderClineRules, writeClineProjectRules, renderClineMcpSettings, write
 export { DEFAULT_IDE_HARNESS_PRELOAD, IDE_MCP_REGISTRATION_SENTENCE, IDE_MCP_CONFIG_PATH, renderIdeMcpConfig, writeIdeMcpConfig, writeIdeHarnessScaffolding, } from './connect/ide.js';
 export type { IdeHarness } from './connect/ide.js';
 export { harnessGitignoreEntries, writeHarnessScaffolding } from './connect/scaffolding.js';
+export { resolveCodexCliPath, writeConnectDaemonConfig, writeStarterPromptArtifacts, ensureGitignoreEntries, startDaemonOnDisk, } from './connect/config-write.js';
+export { findExistingProductForRepo, readConnectedIdentity, locateTeloraAi, registerWorkstationLocally, mergeUserClaudeSettingsHooks, } from './connect/registration.js';
+export type { ConnectedIdentity } from './connect/registration.js';
 /**
  * Production Telora API URL embedded in the published @telora/daemon package.
  * Override with TELORA_URL for local dev.
@@ -116,147 +119,6 @@ export declare function defaultIO(io?: Partial<ConnectIO>): ConnectIO;
  * Validate that the token has the expected `TOK_*` shape.
  */
 export declare function validateTokenShape(token: string): boolean;
-/**
- * Resolve Codex to a stable on-disk executable for daemon config.
- *
- * The daemon runs detached and may not inherit the operator's login-shell PATH.
- * Persisting an absolute path during `connect --harness codex` keeps future
- * agent spawns independent of shell startup files.
- */
-export declare function resolveCodexCliPath(repoPath: string): string | null;
-/**
- * Write the daemon config to ~/.telora/daemon.json.
- *
- * Connect-flow config is single-product. If a config already exists,
- * we overwrite it and print a warning -- re-running connect is the
- * supported recovery path.
- *
- * The `trackerId` is persisted in this file (mode 0600 in $HOME) so the
- * background daemon can read it on startup without an env var. This matches
- * the security profile of `.mcp.json`, which already stores the same secret.
- */
-export declare function writeConnectDaemonConfig(params: {
-    teloraUrl: string;
-    trackerId: string;
-    organizationId: string;
-    productId: string;
-    repoPath: string;
-    io: ConnectIO;
-    /** Absolute path of the per-product isolated CODEX_HOME (local-model flow). */
-    codexHome?: string;
-    /** Default coding engine for the product (local-model flow). */
-    defaultCodingEngine?: string;
-    /** Model id the local-model server exposes (local-model flow). */
-    codexModel?: string;
-    /** Absolute path to the Codex CLI for detached daemon spawns. */
-    codexPath?: string;
-}): string;
-/**
- * Write the AHA starter prompt + first-session marker into the repo's
- * `.telora/` directory. The bash bootstrap reads `starter-prompt.md` and
- * passes it to `claude` as the first user message.
- *
- * Returns the absolute path of the prompt file (or null on failure -- the
- * caller treats prompt injection as best-effort and falls back to plain
- * `claude` if this artifact is missing).
- */
-export declare function writeStarterPromptArtifacts(repoPath: string, io: ConnectIO): string | null;
-/**
- * Append `.telora/` and `.mcp.json` to .gitignore in the repo root if missing.
- *
- * `.mcp.json` is per-user-machine (absolute path to the daemon's bundled
- * MCP). It's regenerated by `connect` and refreshed by the daemon on every
- * startup, so collaborators don't need to share it.
- */
-export declare function ensureGitignoreEntries(repoPath: string, io: ConnectIO, extra?: readonly string[]): void;
-/**
- * Start the daemon as a detached background process from a stable on-disk
- * install -- never from an ephemeral npx cache (which cannot self-update).
- *
- * Resolution order:
- *   1. Use an existing on-disk binary (global install on PATH, or a repo-local
- *      `node_modules/.bin/telora-daemon` dev dependency).
- *   2. If none exists, run `npm install -g @telora/daemon` best-effort. Global
- *      install keeps the connect flow language-agnostic -- it leaves no
- *      `package.json`/`node_modules`/dev-dependency footprint in the user's
- *      repo (Rust/Python/Go/empty repos stay untouched).
- *   3. Spawn the resolved on-disk `telora-daemon run`.
- *
- * On install failure this throws (the caller surfaces the manual
- * `npm install -g @telora/daemon` instruction and skips auto-start); it does
- * NOT fall back to npx, because an npx-run daemon is exactly what this focus
- * retires.
- *
- * Bin name is explicit (`telora-daemon`) because the package's bins are
- * `telora-daemon` and `telora-daemon-wrapper`; neither matches the unscoped
- * package name `daemon`.
- */
-export declare function startDaemonOnDisk(repoPath: string): number;
-/**
- * Look up an existing product entry in `~/.telora/daemon.json` whose
- * repoPath matches the given path. Returns the product id when found,
- * else null. Used by runConnect for re-run idempotency: a second run on
- * the same dir reuses the existing binding instead of creating a duplicate
- * product on the unbound path.
- */
-export declare function findExistingProductForRepo(repoPath: string): string | null;
-/**
- * Workstation identity for an already-connected repo, resolved from the single
- * source `~/.telora/daemon.json`. Returned by `readConnectedIdentity` and
- * consumed by the token-free `harness add` verb -- which never re-redeems a
- * connect token, it just reads what `connect` already persisted.
- */
-export interface ConnectedIdentity {
-    teloraUrl: string;
-    organizationId: string;
-    productId: string;
-}
-/**
- * Resolve the connected-workstation identity for `repoPath` from
- * `~/.telora/daemon.json`: the top-level `teloraUrl` / `organizationId` plus the
- * `products[]` entry whose `repoPath` matches. Returns null when there is no
- * config, the config lacks url/org, or no product entry binds this repo -- i.e.
- * the repo is not connected, so `harness add` must direct the operator to
- * `connect` first.
- */
-export declare function readConnectedIdentity(repoPath: string): ConnectedIdentity | null;
-/**
- * Locate the `telora-ai` Python CLI on PATH. Returns the absolute path if
- * found, else null. Detection is the entire install model -- if the user
- * doesn't have it, connect prints a remediation hint and continues
- * (tracking is opt-in).
- */
-export declare function locateTeloraAi(): string | null;
-/**
- * Pre-populate the user's `~/.syntelyos/ai_tracking.db` config table with
- * the redeem-derived credentials. Skips the
- * `telora-ai register <code>` round-trip that Settings > AI Trackers
- * normally requires -- the tracker row already exists in Telora (the
- * redeem RPC inserted it), so all we need is to point the local DB at
- * it.
- *
- * Each `telora-ai config <key> <value>` call is a single sqlite UPSERT;
- * idempotent on re-runs.
- *
- * Returns true on success, false if any sub-call failed (the failure is
- * surfaced via io.err but never aborts the connect flow).
- */
-export declare function registerWorkstationLocally(params: {
-    teloraAiPath: string;
-    trackerId: string;
-    organizationId: string;
-    teloraUrl: string;
-    io: ConnectIO;
-}): boolean;
-/**
- * Idempotent merge of `PostToolUse` and `UserPromptSubmit` hook entries
- * into `~/.claude/settings.json`. Mirrors the shape of `telora-ai
- * setup-hooks` in scripts/telora-ai but runs from the daemon connect flow
- * so the user doesn't have to invoke it manually.
- *
- * Existing hook entries are preserved. Re-runs do not duplicate.
- */
-export declare function mergeUserClaudeSettingsHooks(io: ConnectIO, homeOverride?: string): boolean;
 /**
  * Write `.telora/.product-bootstrapped` -- a marker the starter prompt
  * detects on first turn to offer a rename of the basename-derived product

package/dist/cli/connect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/cli/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAoBH,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAoBtE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAE5F;;;GAGG;AACH,eAAO,MAAM,kBAAkB,8BAA8B,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,IAAI,CAAC;IACT,4DAA4D;IAC5D,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,IAAI,CAS9E;AAED,eAAO,MAAM,wBAAwB,EAAE,eAA0B,CAAC;AAElE,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAMxD,CAAC;AAEF,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,eAAe,CAEzE;AAED,MAAM,WAAW,cAAc;IAC7B,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,gDAAgD;IAChD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mCAAmC;IACnC,EAAE,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,yEAAyE;IACzE,iBAAiB,EAAE,OAAO,CAAC;IAC3B;kEAC8D;IAC9D,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CA8B/D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAM5D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzD;AA+BD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgBnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,SAAS,CAAC;IACd,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CA4CT;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,SAAS,GACZ,MAAM,GAAG,IAAI,CAsBf;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,SAAS,EACb,KAAK,GAAE,SAAS,MAAM,EAAO,GAC5B,IAAI,CAiBN;AAkCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CA+B1D;AAiCD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAkB1E;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAyBhF;AAID;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAQ9C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,SAAS,CAAC;CACf,GAAG,OAAO,CA0BV;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,EAAE,EAAE,SAAS,EACb,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAwET;AAWD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,GAAG,IAAI,CAY1E;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAmP7E"}
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/cli/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAcH,OAAO,EAGL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAyBtE,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAI5F,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,2BAA2B,EAC3B,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,cAAc,EACd,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEnE;;;GAGG;AACH,eAAO,MAAM,kBAAkB,8BAA8B,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,IAAI,CAAC;IACT,4DAA4D;IAC5D,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,IAAI,CAS9E;AAED,eAAO,MAAM,wBAAwB,EAAE,eAA0B,CAAC;AAElE,0EAA0E;AAC1E,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAMxD,CAAC;AAEF,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,eAAe,CAEzE;AAED,MAAM,WAAW,cAAc;IAC7B,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,gDAAgD;IAChD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mCAAmC;IACnC,EAAE,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,yEAAyE;IACzE,iBAAiB,EAAE,OAAO,CAAC;IAC3B;kEAC8D;IAC9D,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CA8B/D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAM5D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzD;AAmCD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,GAAG,IAAI,CAY1E;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAmP7E"}

package/dist/cli/connect.js

@@ -11,28 +11,25 @@
  * node_modules, no dev dependency) in the user's repo, so Rust/Python/Go/empty
  * repos stay untouched.
  */
-import { closeSync, existsSync, mkdirSync, openSync, readFileSync, writeFileSync, } from 'node:fs';
-import { spawn, spawnSync, execFileSync } from 'node:child_process';
-import { resolve, delimiter } from 'node:path';
-import { homedir } from 'node:os';
+import { existsSync, mkdirSync, readFileSync, writeFileSync, } from 'node:fs';
+import { resolve } from 'node:path';
 import { isLegacyMcpConfigShape, resolveMcpServerPath, writeMcpConfigFile, } from '../shell/mcp-resolution.js';
-import { ensureGlobalStateDir, resolveDaemonLogPath } from '../shell/daemon-process.js';
-import { STARTER_PROMPT } from '../prompts/starter-prompt.js';
 import { writeProductCodexHome, renderManualCodexProfile, } from './codex-provision.js';
 import { writeProductCodexAgentsMd } from './connect/agents.js';
 import { harnessGitignoreEntries, writeHarnessScaffolding, } from './connect/scaffolding.js';
-import { cliLog } from '../shell/log.js';
-import { convergeGitignore } from '../shell/gitignore-convergence.js';
-// Interactive command feedback: plain console text for the operator
-// terminal, never JSON envelopes (review TEL-5). The daemon process's own
-// modules keep the structured createLogger.
-const log = cliLog;
+import { resolveCodexCliPath, writeConnectDaemonConfig, writeStarterPromptArtifacts, ensureGitignoreEntries, startDaemonOnDisk, } from './connect/config-write.js';
+import { findExistingProductForRepo, locateTeloraAi, registerWorkstationLocally, mergeUserClaudeSettingsHooks, } from './connect/registration.js';
 export { retireClaudeMdSeed, writeOrMergeClaudeSettings } from './connect/claude.js';
 export { writeOrMergeAgentsMd, writeOrMergeGlobalAgentsMd, writeProductCodexAgentsMd, retireAgentsMdSeed, globalAgentsMdPath, } from './connect/agents.js';
 export { renderCodexMcpBlock, writeOrMergeCodexMcpToml } from './connect/codex.js';
 export { renderClineRules, writeClineProjectRules, renderClineMcpSettings, writeOrMergeClineMcpSettings, } from './connect/cline.js';
 export { DEFAULT_IDE_HARNESS_PRELOAD, IDE_MCP_REGISTRATION_SENTENCE, IDE_MCP_CONFIG_PATH, renderIdeMcpConfig, writeIdeMcpConfig, writeIdeHarnessScaffolding, } from './connect/ide.js';
 export { harnessGitignoreEntries, writeHarnessScaffolding } from './connect/scaffolding.js';
+// Config + daemon-start writers and workstation registration split out to
+// connect/config-write.ts + connect/registration.ts (file-size limit),
+// re-exported so existing importers keep resolving them from './connect.js'.
+export { resolveCodexCliPath, writeConnectDaemonConfig, writeStarterPromptArtifacts, ensureGitignoreEntries, startDaemonOnDisk, } from './connect/config-write.js';
+export { findExistingProductForRepo, readConnectedIdentity, locateTeloraAi, registerWorkstationLocally, mergeUserClaudeSettingsHooks, } from './connect/registration.js';
 /**
  * Production Telora API URL embedded in the published @telora/daemon package.
  * Override with TELORA_URL for local dev.
@@ -118,243 +115,6 @@ export function defaultIO(io) {
 export function validateTokenShape(token) {
     return typeof token === 'string' && token.startsWith('TOK_') && token.length > 8;
 }
-function executableExists(path) {
-    return existsSync(path);
-}
-function resolveCommandOnPath(command) {
-    const pathEnv = process.env.PATH ?? '';
-    for (const dir of pathEnv.split(delimiter).filter(Boolean)) {
-        const candidate = resolve(dir, command);
-        if (executableExists(candidate))
-            return candidate;
-    }
-    return null;
-}
-function npmGlobalBinDir() {
-    if (process.env.NPM_CONFIG_PREFIX) {
-        return resolve(process.env.NPM_CONFIG_PREFIX, 'bin');
-    }
-    try {
-        const prefix = execFileSync('npm', ['prefix', '-g'], {
-            encoding: 'utf-8',
-            timeout: 5_000,
-        }).trim();
-        return prefix ? resolve(prefix, 'bin') : null;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Resolve Codex to a stable on-disk executable for daemon config.
- *
- * The daemon runs detached and may not inherit the operator's login-shell PATH.
- * Persisting an absolute path during `connect --harness codex` keeps future
- * agent spawns independent of shell startup files.
- */
-export function resolveCodexCliPath(repoPath) {
-    const onPath = resolveCommandOnPath('codex');
-    if (onPath)
-        return onPath;
-    const npmBinDir = npmGlobalBinDir();
-    const candidates = [
-        npmBinDir ? resolve(npmBinDir, 'codex') : null,
-        resolve(homedir(), '.npm-global', 'bin', 'codex'),
-        resolve(homedir(), '.local', 'bin', 'codex'),
-        resolve(repoPath, 'node_modules', '.bin', 'codex'),
-    ];
-    for (const candidate of candidates) {
-        if (candidate && executableExists(candidate))
-            return candidate;
-    }
-    return null;
-}
-/**
- * Write the daemon config to ~/.telora/daemon.json.
- *
- * Connect-flow config is single-product. If a config already exists,
- * we overwrite it and print a warning -- re-running connect is the
- * supported recovery path.
- *
- * The `trackerId` is persisted in this file (mode 0600 in $HOME) so the
- * background daemon can read it on startup without an env var. This matches
- * the security profile of `.mcp.json`, which already stores the same secret.
- */
-export function writeConnectDaemonConfig(params) {
-    const teloraDir = resolve(homedir(), '.telora');
-    if (!existsSync(teloraDir)) {
-        mkdirSync(teloraDir, { recursive: true, mode: 0o700 });
-    }
-    const configPath = resolve(teloraDir, 'daemon.json');
-    const alreadyExists = existsSync(configPath);
-    const config = {
-        teloraUrl: params.teloraUrl,
-        trackerId: params.trackerId,
-        organizationId: params.organizationId,
-        ...(params.codexPath ? { codexPath: params.codexPath } : {}),
-        products: [
-            {
-                id: params.productId,
-                repoPath: resolve(params.repoPath),
-                ...(params.codexHome ? { codexHome: params.codexHome } : {}),
-                ...(params.defaultCodingEngine
-                    ? { defaultCodingEngine: params.defaultCodingEngine }
-                    : {}),
-                ...(params.codexModel ? { codexModel: params.codexModel } : {}),
-            },
-        ],
-        engines: {
-            focus: {
-                enabled: true,
-                integrationBranch: 'integration',
-                maxTotalSessions: 5,
-            },
-            // The factory engine is retired. Newly generated configs carry only the
-            // focus engine; a legacy `engines.factory` block in an existing config is
-            // still tolerated (ignored, force-disabled) on load by unified-shell.
-        },
-    };
-    writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n', { mode: 0o600 });
-    if (alreadyExists) {
-        params.io.err(`Note: replaced existing ${configPath}.\n`);
-    }
-    return configPath;
-}
-/**
- * Write the AHA starter prompt + first-session marker into the repo's
- * `.telora/` directory. The bash bootstrap reads `starter-prompt.md` and
- * passes it to `claude` as the first user message.
- *
- * Returns the absolute path of the prompt file (or null on failure -- the
- * caller treats prompt injection as best-effort and falls back to plain
- * `claude` if this artifact is missing).
- */
-export function writeStarterPromptArtifacts(repoPath, io) {
-    const teloraDir = resolve(repoPath, '.telora');
-    try {
-        if (!existsSync(teloraDir)) {
-            mkdirSync(teloraDir, { recursive: true });
-        }
-        const promptPath = resolve(teloraDir, 'starter-prompt.md');
-        writeFileSync(promptPath, STARTER_PROMPT);
-        // First-session marker: presence indicates the AHA prompt has not yet
-        // been consumed. Future logic (subsequent sessions, idempotent re-runs)
-        // can read or delete it. This delivery only writes it.
-        writeFileSync(resolve(teloraDir, '.first-session'), '');
-        io.out(`Wrote ${promptPath}.\n`);
-        return promptPath;
-    }
-    catch (err) {
-        io.err(`Warning: could not write starter prompt: ${err instanceof Error ? err.message : String(err)}\n`);
-        return null;
-    }
-}
-/**
- * Append `.telora/` and `.mcp.json` to .gitignore in the repo root if missing.
- *
- * `.mcp.json` is per-user-machine (absolute path to the daemon's bundled
- * MCP). It's regenerated by `connect` and refreshed by the daemon on every
- * startup, so collaborators don't need to share it.
- */
-export function ensureGitignoreEntries(repoPath, io, extra = []) {
-    const entries = ['.telora/', '.mcp.json', ...extra];
-    const result = convergeGitignore(repoPath, entries);
-    if (result.created) {
-        io.out(`Created ${result.gitignorePath}.\n`);
-    }
-    else if (result.added.length > 0) {
-        io.out(`Updated ${result.gitignorePath}: added ${result.added.join(', ')}.\n`);
-    }
-    if (result.alreadyTracked.length > 0) {
-        io.err(`Warning: ${result.alreadyTracked.join(', ')} already tracked by git in ` +
-            `${repoPath}; the .gitignore entry is a no-op over tracked content. ` +
-            `Run 'git rm -r --cached ${result.alreadyTracked.join(' ')}' to stop tracking.\n`);
-    }
-}
-/**
- * Resolve an existing on-disk `telora-daemon` binary.
- *
- * Checks, in order:
- *   1. A global install on PATH (`which telora-daemon`) -- the canonical
- *      long-running install.
- *   2. A repo-local `node_modules/.bin/telora-daemon` dev dependency.
- *
- * Returns the absolute path to the binary, or null when none is on disk.
- * Deliberately does NOT resolve an npx-cache binary: a daemon launched from
- * `~/.npm/_npx/<hash>/` cannot self-update (the running process keeps loading
- * from the cache while `npm install -g` writes the global prefix), so the
- * long-running daemon must run from a stable on-disk install.
- */
-function resolveOnDiskDaemonBinary(repoPath) {
-    try {
-        const resolved = execFileSync('which', ['telora-daemon'], {
-            encoding: 'utf-8',
-            timeout: 5_000,
-        }).trim();
-        if (resolved && existsSync(resolved))
-            return resolved;
-    }
-    catch (err) {
-        // Not on PATH -- fall through to the repo-local dev dependency.
-        log.debug('Not on PATH -- fall through to the repo-local dev dependency', { error: String(err?.message ?? err) });
-    }
-    const localBin = resolve(repoPath, 'node_modules', '.bin', 'telora-daemon');
-    if (existsSync(localBin))
-        return localBin;
-    return null;
-}
-/**
- * Start the daemon as a detached background process from a stable on-disk
- * install -- never from an ephemeral npx cache (which cannot self-update).
- *
- * Resolution order:
- *   1. Use an existing on-disk binary (global install on PATH, or a repo-local
- *      `node_modules/.bin/telora-daemon` dev dependency).
- *   2. If none exists, run `npm install -g @telora/daemon` best-effort. Global
- *      install keeps the connect flow language-agnostic -- it leaves no
- *      `package.json`/`node_modules`/dev-dependency footprint in the user's
- *      repo (Rust/Python/Go/empty repos stay untouched).
- *   3. Spawn the resolved on-disk `telora-daemon run`.
- *
- * On install failure this throws (the caller surfaces the manual
- * `npm install -g @telora/daemon` instruction and skips auto-start); it does
- * NOT fall back to npx, because an npx-run daemon is exactly what this focus
- * retires.
- *
- * Bin name is explicit (`telora-daemon`) because the package's bins are
- * `telora-daemon` and `telora-daemon-wrapper`; neither matches the unscoped
- * package name `daemon`.
- */
-export function startDaemonOnDisk(repoPath) {
-    let binary = resolveOnDiskDaemonBinary(repoPath);
-    if (!binary) {
-        // No on-disk install -- install globally (no repo footprint), best-effort.
-        execFileSync('npm', ['install', '-g', '@telora/daemon'], {
-            stdio: 'inherit',
-            timeout: 120_000,
-        });
-        binary = resolveOnDiskDaemonBinary(repoPath);
-        if (!binary) {
-            throw new Error('telora-daemon is not on disk after `npm install -g @telora/daemon`.');
-        }
-    }
-    ensureGlobalStateDir();
-    const logPath = resolveDaemonLogPath();
-    const logFd = openSync(logPath, 'a', 0o600);
-    try {
-        const child = spawn(binary, ['run'], {
-            detached: true,
-            stdio: ['ignore', logFd, logFd],
-            cwd: repoPath,
-            env: { ...process.env },
-        });
-        child.unref();
-        return child.pid ?? 0;
-    }
-    finally {
-        closeSync(logFd);
-    }
-}
 async function redeemToken(token, teloraUrl, proposedProductName, io) {
     let response;
     const requestBody = { token };
@@ -379,198 +139,6 @@ async function redeemToken(token, teloraUrl, proposedProductName, io) {
     }
     return body;
 }
-/**
- * Look up an existing product entry in `~/.telora/daemon.json` whose
- * repoPath matches the given path. Returns the product id when found,
- * else null. Used by runConnect for re-run idempotency: a second run on
- * the same dir reuses the existing binding instead of creating a duplicate
- * product on the unbound path.
- */
-export function findExistingProductForRepo(repoPath) {
-    const configPath = resolve(homedir(), '.telora', 'daemon.json');
-    if (!existsSync(configPath))
-        return null;
-    try {
-        const config = JSON.parse(readFileSync(configPath, 'utf-8'));
-        const target = resolve(repoPath);
-        for (const entry of config.products ?? []) {
-            if (entry.repoPath && resolve(entry.repoPath) === target && entry.id) {
-                return entry.id;
-            }
-        }
-    }
-    catch (err) {
-        // Malformed config -- treat as no match; runConnect overwrites it anyway.
-        log.debug('Malformed config -- treat as no match; runConnect overwrites it anyway', { error: String(err?.message ?? err) });
-    }
-    return null;
-}
-/**
- * Resolve the connected-workstation identity for `repoPath` from
- * `~/.telora/daemon.json`: the top-level `teloraUrl` / `organizationId` plus the
- * `products[]` entry whose `repoPath` matches. Returns null when there is no
- * config, the config lacks url/org, or no product entry binds this repo -- i.e.
- * the repo is not connected, so `harness add` must direct the operator to
- * `connect` first.
- */
-export function readConnectedIdentity(repoPath) {
-    const configPath = resolve(homedir(), '.telora', 'daemon.json');
-    if (!existsSync(configPath))
-        return null;
-    try {
-        const config = JSON.parse(readFileSync(configPath, 'utf-8'));
-        if (!config.teloraUrl || !config.organizationId)
-            return null;
-        const target = resolve(repoPath);
-        for (const entry of config.products ?? []) {
-            if (entry.repoPath && resolve(entry.repoPath) === target && entry.id) {
-                return {
-                    teloraUrl: config.teloraUrl,
-                    organizationId: config.organizationId,
-                    productId: entry.id,
-                };
-            }
-        }
-    }
-    catch {
-        // Malformed config -- treat as not-connected.
-        return null;
-    }
-    return null;
-}
-// ── Workstation tracking (D4): telora-ai detection + hook merge ─────────
-/**
- * Locate the `telora-ai` Python CLI on PATH. Returns the absolute path if
- * found, else null. Detection is the entire install model -- if the user
- * doesn't have it, connect prints a remediation hint and continues
- * (tracking is opt-in).
- */
-export function locateTeloraAi() {
-    const path = process.env.PATH ?? '';
-    const entries = path.split(delimiter).filter(Boolean);
-    for (const entry of entries) {
-        const candidate = resolve(entry, 'telora-ai');
-        if (existsSync(candidate))
-            return candidate;
-    }
-    return null;
-}
-/**
- * Pre-populate the user's `~/.syntelyos/ai_tracking.db` config table with
- * the redeem-derived credentials. Skips the
- * `telora-ai register <code>` round-trip that Settings > AI Trackers
- * normally requires -- the tracker row already exists in Telora (the
- * redeem RPC inserted it), so all we need is to point the local DB at
- * it.
- *
- * Each `telora-ai config <key> <value>` call is a single sqlite UPSERT;
- * idempotent on re-runs.
- *
- * Returns true on success, false if any sub-call failed (the failure is
- * surfaced via io.err but never aborts the connect flow).
- */
-export function registerWorkstationLocally(params) {
-    const entries = [
-        ['telora_url', params.teloraUrl],
-        ['tracker_id', params.trackerId],
-        // The python tool's data model treats access_token and tracker_id as
-        // separate fields, but in our model the tracker_id IS the bearer
-        // token. Setting both keeps cmd_status / cmd_sync happy.
-        ['access_token', params.trackerId],
-        ['org_id', params.organizationId],
-    ];
-    for (const [key, value] of entries) {
-        const result = spawnSync(params.teloraAiPath, ['config', key, value], {
-            stdio: 'pipe',
-            encoding: 'utf-8',
-        });
-        if (result.status !== 0) {
-            params.io.err(`Warning: workstation registration step '${key}' failed (${result.status ?? 'no exit'}): ${result.stderr ?? result.stdout ?? ''}\n`);
-            return false;
-        }
-    }
-    return true;
-}
-/**
- * Idempotent merge of `PostToolUse` and `UserPromptSubmit` hook entries
- * into `~/.claude/settings.json`. Mirrors the shape of `telora-ai
- * setup-hooks` in scripts/telora-ai but runs from the daemon connect flow
- * so the user doesn't have to invoke it manually.
- *
- * Existing hook entries are preserved. Re-runs do not duplicate.
- */
-export function mergeUserClaudeSettingsHooks(io, homeOverride) {
-    const home = homeOverride ?? homedir();
-    const settingsDir = resolve(home, '.claude');
-    const settingsPath = resolve(settingsDir, 'settings.json');
-    const hookBin = locateBinaryOnPath('telora-ai-hook');
-    const humanHookBin = locateBinaryOnPath('telora-ai-human-hook');
-    if (!hookBin || !humanHookBin) {
-        io.err(`Warning: telora-ai-hook / telora-ai-human-hook not on PATH. Skipping ~/.claude/settings.json merge.\n`);
-        return false;
-    }
-    if (!existsSync(settingsDir))
-        mkdirSync(settingsDir, { recursive: true });
-    let parsed = {};
-    if (existsSync(settingsPath)) {
-        try {
-            const raw = readFileSync(settingsPath, 'utf-8');
-            const candidate = JSON.parse(raw);
-            if (candidate && typeof candidate === 'object' && !Array.isArray(candidate)) {
-                parsed = candidate;
-            }
-        }
-        catch (err) {
-            io.err(`Warning: ${settingsPath} is not valid JSON; leaving it alone: ${err instanceof Error ? err.message : String(err)}\n`);
-            return false;
-        }
-    }
-    const hooks = typeof parsed.hooks === 'object' && parsed.hooks !== null
-        ? parsed.hooks
-        : {};
-    const desired = {
-        PostToolUse: {
-            matcher: '',
-            hooks: [{ type: 'command', command: hookBin }],
-        },
-        UserPromptSubmit: {
-            matcher: '',
-            hooks: [{ type: 'command', command: humanHookBin }],
-        },
-    };
-    for (const [eventName, entry] of Object.entries(desired)) {
-        const existing = hooks[eventName] ?? [];
-        let alreadyPresent = false;
-        for (const rule of existing) {
-            for (const h of rule.hooks ?? []) {
-                const cmd = h.command ?? '';
-                if (cmd.includes('telora-ai-hook') || cmd.includes('telora-ai-human-hook')) {
-                    alreadyPresent = true;
-                    // Refresh path in case the binary moved between runs.
-                    const desiredCmd = entry.hooks[0].command;
-                    if (cmd !== desiredCmd)
-                        h.command = desiredCmd;
-                }
-            }
-        }
-        if (!alreadyPresent)
-            existing.push(entry);
-        hooks[eventName] = existing;
-    }
-    parsed.hooks = hooks;
-    writeFileSync(settingsPath, JSON.stringify(parsed, null, 2) + '\n');
-    io.out(`Merged Telora tracking hooks into ${settingsPath}.\n`);
-    return true;
-}
-function locateBinaryOnPath(name) {
-    const path = process.env.PATH ?? '';
-    for (const entry of path.split(delimiter).filter(Boolean)) {
-        const candidate = resolve(entry, name);
-        if (existsSync(candidate))
-            return candidate;
-    }
-    return null;
-}
 /**
  * Write `.telora/.product-bootstrapped` -- a marker the starter prompt
  * detects on first turn to offer a rename of the basename-derived product