@tongil_kim/clautunnel 1.6.2 → 1.7.0

package/dist/index.d.ts

@@ -31,6 +31,7 @@ declare class Config {
     requireConfiguration(): void;
     getMachineId(): string | undefined;
     setMachineId(machineId: string): void;
+    clearMachineId(): void;
     getSessionTokens(): ConfigData['sessionTokens'] | undefined;
     setSessionTokens(tokens: ConfigData['sessionTokens']): void;
     setSession(tokens: {

package/dist/index.js

@@ -202,7 +202,7 @@ var require_dist = __commonJS({
 // src/index.ts
 import { config } from "dotenv";
 import { resolve as resolve2, dirname as dirname3 } from "path";
-import { readFileSync as readFileSync5 } from "fs";
+import { readFileSync as readFileSync6 } from "fs";
 import { fileURLToPath } from "url";
 
 // src/utils/config.ts
@@ -293,6 +293,10 @@ var Config = class {
     this.data.machineId = machineId;
     this.saveConfig();
   }
+  clearMachineId() {
+    delete this.data.machineId;
+    this.saveConfig();
+  }
   getSessionTokens() {
     return this.data.sessionTokens;
   }
@@ -311,8 +315,8 @@ var Config = class {
   getMobileProjectPath() {
     return this.data.mobileProjectPath;
   }
-  setMobileProjectPath(path4) {
-    this.data.mobileProjectPath = path4;
+  setMobileProjectPath(path5) {
+    this.data.mobileProjectPath = path5;
     this.saveConfig();
   }
 };
@@ -419,10 +423,11 @@ var RealtimeClient = class extends EventEmitter {
     this.sessionId = options.sessionId;
   }
   async connect() {
+    const privateConfig = { config: { private: true } };
     const outputChannelName = import_clautunnel_shared.REALTIME_CHANNELS.sessionOutput(this.sessionId);
-    this.outputChannel = this.supabase.channel(outputChannelName);
+    this.outputChannel = this.supabase.channel(outputChannelName, privateConfig);
     const inputChannelName = import_clautunnel_shared.REALTIME_CHANNELS.sessionInput(this.sessionId);
-    this.inputChannel = this.supabase.channel(inputChannelName);
+    this.inputChannel = this.supabase.channel(inputChannelName, privateConfig);
     this.inputChannel.on("broadcast", { event: "input" }, (payload) => {
       this.emit("input", payload.payload);
     });
@@ -433,7 +438,7 @@ var RealtimeClient = class extends EventEmitter {
     this.realtimeEnabled = results.every((success) => success);
     if (this.realtimeEnabled) {
       const presenceChannelName = import_clautunnel_shared.REALTIME_CHANNELS.sessionPresence(this.sessionId);
-      this.presenceChannel = this.supabase.channel(presenceChannelName);
+      this.presenceChannel = this.supabase.channel(presenceChannelName, privateConfig);
       this.presenceChannel.subscribe(async (status, err) => {
         if (status === "SUBSCRIBED" && this.presenceChannel) {
           try {
@@ -1884,23 +1889,23 @@ var ConfigManager = class {
   getProjectSettingsPath() {
     return join3(this.cwd, ".claude", "settings.json");
   }
-  readSettingsFile(path4) {
+  readSettingsFile(path5) {
     try {
-      if (existsSync3(path4)) {
-        const content = readFileSync3(path4, "utf-8");
+      if (existsSync3(path5)) {
+        const content = readFileSync3(path5, "utf-8");
         return JSON.parse(content);
       }
     } catch {
     }
     return null;
   }
-  writeSettingsFile(path4, settings) {
+  writeSettingsFile(path5, settings) {
     try {
-      const dir = dirname(path4);
+      const dir = dirname(path5);
       if (!existsSync3(dir)) {
         mkdirSync2(dir, { recursive: true });
       }
-      writeFileSync2(path4, JSON.stringify(settings, null, 2));
+      writeFileSync2(path5, JSON.stringify(settings, null, 2));
       return true;
     } catch {
       return false;
@@ -2099,7 +2104,7 @@ var ConfigManager = class {
       };
     }
   }
-  applyConfigChange(settings, path4, payload) {
+  applyConfigChange(settings, path5, payload) {
     if (!settings.preferences) {
       settings.preferences = {};
     }
@@ -2119,33 +2124,33 @@ var ConfigManager = class {
       default:
         return { success: false, message: `Unknown config key: ${payload.key}` };
     }
-    if (this.writeSettingsFile(path4, settings)) {
+    if (this.writeSettingsFile(path5, settings)) {
       return { success: true, message: `Config ${payload.key} updated` };
     }
     return { success: false, message: "Failed to write settings file" };
   }
-  applyPermissionsChange(settings, path4, payload) {
+  applyPermissionsChange(settings, path5, payload) {
     if (!settings.permissions) {
       settings.permissions = {};
     }
     settings.permissions.mode = payload.value;
-    if (this.writeSettingsFile(path4, settings)) {
+    if (this.writeSettingsFile(path5, settings)) {
       return { success: true, message: `Permission mode set to ${payload.value}` };
     }
     return { success: false, message: "Failed to write settings file" };
   }
-  applyVimChange(settings, path4, payload) {
+  applyVimChange(settings, path5, payload) {
     if (payload.action === "toggle") {
       settings.vim = !settings.vim;
     } else {
       settings.vim = payload.value;
     }
-    if (this.writeSettingsFile(path4, settings)) {
+    if (this.writeSettingsFile(path5, settings)) {
       return { success: true, message: `Vim mode ${settings.vim ? "enabled" : "disabled"}` };
     }
     return { success: false, message: "Failed to write settings file" };
   }
-  applyAllowedToolsChange(settings, path4, payload) {
+  applyAllowedToolsChange(settings, path5, payload) {
     if (!settings.permissions) {
       settings.permissions = {};
     }
@@ -2177,7 +2182,7 @@ var ConfigManager = class {
         }
         break;
     }
-    if (this.writeSettingsFile(path4, settings)) {
+    if (this.writeSettingsFile(path5, settings)) {
       return { success: true, message: "Allowed tools updated" };
     }
     return { success: false, message: "Failed to write settings file" };
@@ -2644,7 +2649,7 @@ ${confirmationMsg}
 };
 
 // src/index.ts
-import { Command as Command9 } from "commander";
+import { Command as Command10 } from "commander";
 
 // src/commands/start.ts
 import { Command } from "commander";
@@ -2665,13 +2670,14 @@ var MachineRealtimeClient = class extends EventEmitter4 {
     this.machineId = options.machineId;
   }
   async connect() {
+    const privateConfig = { config: { private: true } };
     const inputChannelName = import_clautunnel_shared4.REALTIME_CHANNELS.machineInput(this.machineId);
-    this.inputChannel = this.supabase.channel(inputChannelName);
+    this.inputChannel = this.supabase.channel(inputChannelName, privateConfig);
     this.inputChannel.on("broadcast", { event: "machine-command" }, (payload) => {
       this.emit("command", payload.payload);
     });
     const outputChannelName = import_clautunnel_shared4.REALTIME_CHANNELS.machineOutput(this.machineId);
-    this.outputChannel = this.supabase.channel(outputChannelName);
+    this.outputChannel = this.supabase.channel(outputChannelName, privateConfig);
     const results = await Promise.all([
       subscribeWithTimeout(this.inputChannel, "machine-input"),
       subscribeWithTimeout(this.outputChannel, "machine-output")
@@ -2679,7 +2685,7 @@ var MachineRealtimeClient = class extends EventEmitter4 {
     const connected = results.every((success) => success);
     if (connected) {
       const presenceChannelName = import_clautunnel_shared4.REALTIME_CHANNELS.machinePresence(this.machineId);
-      this.presenceChannel = this.supabase.channel(presenceChannelName);
+      this.presenceChannel = this.supabase.channel(presenceChannelName, privateConfig);
       this.presenceChannel.subscribe(async (status) => {
         if (status === "SUBSCRIBED" && this.presenceChannel) {
           try {
@@ -3089,12 +3095,12 @@ var MobileServerManager = class {
   }
   ensureEnvFile() {
     const envPath = join5(this.mobileProjectPath, ".env");
-    const envContent = [
+    const lines = [
       `EXPO_PUBLIC_SUPABASE_URL=${this.options.supabaseUrl}`,
       `EXPO_PUBLIC_SUPABASE_ANON_KEY=${this.options.supabaseAnonKey}`,
       ""
-    ].join("\n");
-    writeFileSync3(envPath, envContent);
+    ];
+    writeFileSync3(envPath, lines.join("\n"));
   }
   installDependencies() {
     const nodeModulesPath = join5(this.mobileProjectPath, "node_modules");
@@ -3153,7 +3159,7 @@ var MobileServerManager = class {
       }
     }
     this.ngrokError = this.diagnoseNgrokFailure(stderrData);
-    this.killProcess(this.ngrokProcess);
+    this.killProcessTree(this.ngrokProcess);
     this.ngrokProcess = null;
     return null;
   }
@@ -3176,12 +3182,14 @@ var MobileServerManager = class {
   }
   async startExpo(tunnelUrl) {
     this.ensureLogDir();
+    this.killProcessOnPort(this.expoPort);
     this.expoLogStream = createWriteStream(join5(this.logDir, "expo.log"));
-    this.expoProcess = spawn2("npx", ["expo", "start", "--port", String(this.expoPort)], {
+    this.expoProcess = spawn2("npx", ["expo", "start", "--clear", "--port", String(this.expoPort)], {
       cwd: this.mobileProjectPath,
       env: {
         ...process.env,
-        EXPO_PACKAGER_PROXY_URL: tunnelUrl
+        EXPO_PACKAGER_PROXY_URL: tunnelUrl,
+        EXPO_PUBLIC_TUNNEL_URL: tunnelUrl
       },
       stdio: ["ignore", "pipe", "pipe"],
       detached: false
@@ -3259,13 +3267,13 @@ var MobileServerManager = class {
         return { started: false, error: "Failed to install mobile dependencies" };
       }
     }
-    this.onProgress("Syncing credentials...");
-    this.ensureEnvFile();
     this.onProgress("Starting ngrok tunnel...");
     const tunnelUrl = await this.startNgrok();
     if (!tunnelUrl) {
       return { started: false, error: this.ngrokError ?? "Failed to start ngrok tunnel" };
     }
+    this.onProgress("Syncing credentials...");
+    this.ensureEnvFile();
     this.onProgress("Starting Expo server...");
     const expoStarted = await this.startExpo(tunnelUrl);
     if (!expoStarted) {
@@ -3273,14 +3281,8 @@ var MobileServerManager = class {
       return { started: false, error: "Failed to start Expo server" };
     }
     const host = tunnelUrl.replace(/^https?:\/\//, "");
-    const expoUrl = `exp://${host}:443`;
-    console.log("");
-    console.log("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
-    console.log("  \u2502  Expo Go is required to open this QR code.      \u2502");
-    console.log("  \u2502  iOS:     https://apps.apple.com/app/id982107779\u2502");
-    console.log("  \u2502  Android: https://play.google.com/store/apps/   \u2502");
-    console.log("  \u2502           details?id=host.exp.exponent          \u2502");
-    console.log("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
+    const pairingParam = this.options.pairingCode ? `/--/pair?code=${this.options.pairingCode}` : "";
+    const expoUrl = `exp://${host}:443${pairingParam}`;
     console.log("");
     console.log("  Scan with Expo Go:");
     qrcode.generate(expoUrl, { small: true }, (code) => {
@@ -3290,17 +3292,25 @@ var MobileServerManager = class {
     });
     console.log(`  ${expoUrl}`);
     console.log("");
+    console.log("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
+    console.log("  \u2502  Expo Go is required to open this QR code.      \u2502");
+    console.log("  \u2502  iOS:     https://apps.apple.com/app/id982107779\u2502");
+    console.log("  \u2502  Android: https://play.google.com/store/apps/   \u2502");
+    console.log("  \u2502           details?id=host.exp.exponent          \u2502");
+    console.log("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
+    console.log("");
     return { started: true, tunnelUrl };
   }
   async stop() {
     if (this.expoProcess) {
-      this.killProcess(this.expoProcess);
+      this.killProcessTree(this.expoProcess);
       this.expoProcess = null;
     }
     if (this.ngrokProcess) {
-      this.killProcess(this.ngrokProcess);
+      this.killProcessTree(this.ngrokProcess);
       this.ngrokProcess = null;
     }
+    this.killProcessOnPort(this.expoPort);
     if (this.expoLogStream) {
       this.expoLogStream.end();
       this.expoLogStream = null;
@@ -3344,15 +3354,21 @@ var MobileServerManager = class {
       });
     });
   }
-  killProcess(proc) {
+  killProcessTree(proc) {
+    const pid = proc.pid;
+    if (!pid) return;
     try {
       proc.kill("SIGTERM");
-      setTimeout(() => {
+    } catch {
+    }
+    try {
+      const children = execSync2(`pgrep -P ${pid}`, { stdio: "pipe" }).toString().trim();
+      for (const childPid of children.split("\n").filter(Boolean)) {
         try {
-          proc.kill("SIGKILL");
+          process.kill(parseInt(childPid, 10), "SIGTERM");
         } catch {
         }
-      }, 3e3);
+      }
     } catch {
     }
   }
@@ -3361,6 +3377,20 @@ var MobileServerManager = class {
       mkdirSync3(this.logDir, { recursive: true });
     }
   }
+  killProcessOnPort(port) {
+    try {
+      const output = execSync2(`lsof -ti tcp:${port}`, { stdio: "pipe" }).toString().trim();
+      if (output) {
+        for (const pid of output.split("\n")) {
+          try {
+            process.kill(parseInt(pid, 10), "SIGTERM");
+          } catch {
+          }
+        }
+      }
+    } catch {
+    }
+  }
   sleep(ms) {
     return new Promise((resolve3) => setTimeout(resolve3, ms));
   }
@@ -3631,11 +3661,23 @@ function createStartCommand() {
       }
       let mobileServer = null;
       if (options.mobile !== false) {
+        const { data: { session: currentSession } } = await supabase.auth.getSession();
+        const { data: pairingData, error: pairingError } = await supabase.functions.invoke("create-mobile-pairing", {
+          headers: { Authorization: `Bearer ${currentSession?.access_token}` }
+        });
+        if (pairingError || !pairingData?.code) {
+          spinner.fail("Failed to create mobile pairing code");
+          logger.error(pairingError?.message ?? "No pairing code returned");
+          removePidFile();
+          process.exit(1);
+        }
+        const pairingCode = pairingData.code;
         const mobileProjectPath = config2.getMobileProjectPath();
         mobileServer = new MobileServerManager({
           mobileProjectPath,
           supabaseUrl: config2.getSupabaseUrl(),
           supabaseAnonKey: config2.getSupabaseAnonKey(),
+          pairingCode,
           onProgress: (msg) => spinner.update(msg)
         });
         const result = await mobileServer.start();
@@ -4069,7 +4111,7 @@ function createLoginCommand() {
 import { Command as Command5 } from "commander";
 function createLogoutCommand() {
   const command = new Command5("logout");
-  command.description("Log out of ClauTunnel").action(async () => {
+  command.description("Log out of ClauTunnel and revoke all device sessions").action(async () => {
     const config2 = new Config();
     const logger = new Logger();
     const session = config2.getSessionTokens();
@@ -4077,7 +4119,26 @@ function createLogoutCommand() {
       logger.info("Not currently logged in.");
       return;
     }
+    try {
+      const supabase = createSupabaseClient(
+        config2.getSupabaseUrl(),
+        config2.getSupabaseAnonKey()
+      );
+      const restored = await restoreSession(supabase, config2);
+      if (restored) {
+        const { error } = await supabase.auth.signOut({ scope: "global" });
+        if (error) {
+          logger.warn(`Warning: failed to revoke remote sessions: ${error.message}`);
+          logger.warn("Local credentials cleared, but mobile devices may remain active until their tokens expire.");
+        } else {
+          logger.info("All device sessions revoked.");
+        }
+      }
+    } catch {
+      logger.warn("Warning: could not reach server to revoke sessions.");
+    }
     config2.clearSessionTokens();
+    config2.clearMachineId();
     logger.info("Logged out successfully.");
   });
   return command;
@@ -4276,15 +4337,246 @@ function createMobileSetupCommand() {
   return command;
 }
 
+// src/commands/reset.ts
+import { Command as Command9 } from "commander";
+import * as fs4 from "fs";
+import * as path4 from "path";
+import * as os5 from "os";
+import { execSync as execSync4 } from "child_process";
+function createResetCommand() {
+  const command = new Command9("reset");
+  command.description("Reset to fresh user state (uninstall CLI, clean config & DB)").option("--skip-db", "Skip Supabase DB cleanup").option("--skip-ngrok", "Keep ngrok installed and configured").option("-y, --yes", "Skip confirmation prompt").action(async (options) => {
+    const logger = new Logger();
+    if (!options.yes) {
+      logger.info("This will:");
+      logger.info("  - Stop any running clautunnel processes");
+      logger.info("  - Restore macOS sleep settings");
+      if (!options.skipDb) {
+        logger.info("  - Delete all your data from Supabase (machines, sessions, messages)");
+      }
+      if (!options.skipNgrok) {
+        logger.info("  - Uninstall ngrok and remove its config");
+      }
+      logger.info("  - Delete ~/.clautunnel/ config directory");
+      logger.info("  - Uninstall clautunnel (npm & Homebrew)");
+      logger.info("");
+      const confirmed = await promptYesNo("Are you sure? [y/N]: ");
+      if (!confirmed) {
+        logger.info("Aborted.");
+        return;
+      }
+      logger.info("");
+    }
+    logger.info("[1/7] Stopping running processes...");
+    const pid = readPidFile();
+    if (pid !== null && isProcessAlive(pid)) {
+      try {
+        process.kill(pid, "SIGTERM");
+        logger.info(`  - clautunnel daemon stopped (PID ${pid})`);
+        await new Promise((resolve3) => setTimeout(resolve3, 1e3));
+      } catch {
+        logger.info("  - could not stop daemon");
+      }
+    } else {
+      logger.info("  - no running daemon");
+    }
+    try {
+      fs4.unlinkSync(PID_FILE);
+    } catch {
+    }
+    try {
+      execSync4('pkill -f "ngrok.*tunnel" 2>/dev/null', { stdio: "ignore" });
+      logger.info("  - ngrok tunnel process killed");
+    } catch {
+    }
+    try {
+      execSync4('pkill -f "expo start" 2>/dev/null', { stdio: "ignore" });
+      logger.info("  - expo process killed");
+    } catch {
+    }
+    try {
+      const pids = execSync4("lsof -ti tcp:8081", { stdio: "pipe" }).toString().trim();
+      if (pids) {
+        for (const pid2 of pids.split("\n")) {
+          try {
+            process.kill(parseInt(pid2, 10), "SIGTERM");
+          } catch {
+          }
+        }
+        logger.info("  - port 8081 freed");
+      }
+    } catch {
+    }
+    logger.info("[2/7] Restoring macOS sleep settings...");
+    if (isMacOS()) {
+      try {
+        const pmsetOutput = execSync4("sudo pmset -g 2>/dev/null", { encoding: "utf-8" });
+        if (pmsetOutput.includes("disablesleep") && pmsetOutput.includes("1")) {
+          execSync4("sudo pmset -a disablesleep 0", { stdio: "inherit" });
+          logger.info("  - lid-close sleep restored");
+        } else {
+          logger.info("  - already normal");
+        }
+      } catch {
+        logger.info("  - already normal");
+      }
+      try {
+        execSync4("pkill -f caffeinate 2>/dev/null", { stdio: "ignore" });
+        logger.info("  - caffeinate stopped");
+      } catch {
+      }
+    } else {
+      logger.info("  - not macOS, skipped");
+    }
+    if (options.skipDb) {
+      logger.info("[3/7] Skipping DB cleanup (--skip-db)");
+    } else {
+      await cleanSupabaseDb(logger);
+    }
+    if (options.skipNgrok) {
+      logger.info("[4/7] Skipping ngrok cleanup (--skip-ngrok)");
+    } else {
+      logger.info("[4/7] Uninstalling ngrok...");
+      try {
+        execSync4("brew list ngrok", { stdio: "ignore" });
+        execSync4("brew uninstall ngrok", { stdio: "inherit" });
+        logger.info("  - ngrok removed");
+      } catch {
+        try {
+          execSync4("which ngrok", { stdio: "ignore" });
+          logger.info("  - ngrok found but not installed via Homebrew, remove manually");
+        } catch {
+          logger.info("  - not installed, skipped");
+        }
+      }
+      const ngrokConfigDir = path4.join(os5.homedir(), ".config", "ngrok");
+      const ngrokLegacyDir = path4.join(os5.homedir(), ".ngrok2");
+      if (fs4.existsSync(ngrokConfigDir)) {
+        fs4.rmSync(ngrokConfigDir, { recursive: true, force: true });
+        logger.info("  - ngrok config removed (~/.config/ngrok)");
+      }
+      if (fs4.existsSync(ngrokLegacyDir)) {
+        fs4.rmSync(ngrokLegacyDir, { recursive: true, force: true });
+        logger.info("  - ngrok legacy config removed (~/.ngrok2)");
+      }
+    }
+    logger.info("[5/7] Removing local data...");
+    const configDir = path4.join(os5.homedir(), ".clautunnel");
+    const legacyDir = path4.join(os5.homedir(), ".termbridge");
+    if (fs4.existsSync(configDir)) {
+      fs4.rmSync(configDir, { recursive: true, force: true });
+      logger.info("  - ~/.clautunnel removed (config, logs, repo)");
+    } else {
+      logger.info("  - ~/.clautunnel already clean");
+    }
+    if (fs4.existsSync(legacyDir)) {
+      fs4.rmSync(legacyDir, { recursive: true, force: true });
+      logger.info("  - ~/.termbridge removed (legacy)");
+    }
+    logger.info("[6/7] Uninstalling CLI (npm)...");
+    try {
+      execSync4("npm list -g @tongil_kim/clautunnel", { stdio: "ignore" });
+      execSync4("npm uninstall -g @tongil_kim/clautunnel", { stdio: "inherit" });
+      logger.info("  - npm package removed");
+    } catch {
+      logger.info("  - not installed via npm, skipped");
+    }
+    logger.info("[7/7] Uninstalling CLI (Homebrew)...");
+    try {
+      execSync4("brew list clautunnel", { stdio: "ignore" });
+      execSync4("brew uninstall clautunnel", { stdio: "inherit" });
+      logger.info("  - Homebrew package removed");
+    } catch {
+      logger.info("  - not installed via Homebrew, skipped");
+    }
+    logger.info("");
+    logger.info("Done! Fresh user state restored.");
+    logger.info("");
+    logger.info("Next steps:");
+    logger.info("  1. npm install -g @tongil_kim/clautunnel");
+    logger.info("  2. clautunnel setup");
+    logger.info("  3. clautunnel login");
+    logger.info("  4. clautunnel start");
+  });
+  return command;
+}
+async function cleanSupabaseDb(logger) {
+  const configDir = path4.join(os5.homedir(), ".clautunnel");
+  const configFile = path4.join(configDir, "config.json");
+  if (!fs4.existsSync(configFile)) {
+    logger.info("[3/7] Skipping DB cleanup (no config file found)");
+    return;
+  }
+  let configData;
+  try {
+    configData = JSON.parse(fs4.readFileSync(configFile, "utf-8"));
+  } catch {
+    logger.info("[3/7] Skipping DB cleanup (invalid config file)");
+    return;
+  }
+  const supabaseUrl = configData.supabaseUrl;
+  const anonKey = configData.supabaseAnonKey;
+  const accessToken = configData.sessionTokens?.accessToken;
+  const refreshToken = configData.sessionTokens?.refreshToken;
+  if (!supabaseUrl || !anonKey || !accessToken) {
+    logger.info("[3/7] Skipping DB cleanup (missing credentials)");
+    return;
+  }
+  logger.info("[3/7] Cleaning Supabase DB data...");
+  const supabase = createSupabaseClient(supabaseUrl, anonKey);
+  let token = accessToken;
+  if (refreshToken) {
+    const { data } = await supabase.auth.setSession({
+      access_token: accessToken,
+      refresh_token: refreshToken
+    });
+    if (data?.session) {
+      token = data.session.access_token;
+    }
+  }
+  const headers = {
+    apikey: anonKey,
+    Authorization: `Bearer ${token}`,
+    Prefer: "return=minimal"
+  };
+  try {
+    const res = await fetch(`${supabaseUrl}/rest/v1/push_tokens?select=*`, {
+      method: "DELETE",
+      headers
+    });
+    logger.info(res.ok ? "  - push_tokens cleared" : "  - push_tokens: skipped");
+  } catch {
+    logger.info("  - push_tokens: skipped");
+  }
+  try {
+    const res = await fetch(`${supabaseUrl}/rest/v1/machines?select=*`, {
+      method: "DELETE",
+      headers
+    });
+    logger.info(res.ok ? "  - machines cleared (sessions + messages cascade)" : "  - machines: skipped");
+  } catch {
+    logger.info("  - machines: skipped");
+  }
+  try {
+    const res = await fetch(`${supabaseUrl}/rest/v1/mobile_pairings?select=*`, {
+      method: "DELETE",
+      headers
+    });
+    logger.info(res.ok ? "  - mobile_pairings cleared" : "  - mobile_pairings: skipped");
+  } catch {
+    logger.info("  - mobile_pairings: skipped");
+  }
+}
+
 // src/index.ts
 var __filename = fileURLToPath(import.meta.url);
 var __dirname = dirname3(__filename);
 config({ path: resolve2(__dirname, "../.env"), quiet: true });
 var packageJson = JSON.parse(
-  readFileSync5(resolve2(__dirname, "../package.json"), "utf-8")
+  readFileSync6(resolve2(__dirname, "../package.json"), "utf-8")
 );
 var version = packageJson.version || "0.0.0";
-var program = new Command9();
+var program = new Command10();
 program.name("clautunnel").description("Remote control for Claude Code CLI").version(version);
 program.addCommand(createSetupCommand());
 program.addCommand(createStartCommand());
@@ -4294,6 +4586,7 @@ program.addCommand(createLoginCommand());
 program.addCommand(createLogoutCommand());
 program.addCommand(createSignupCommand());
 program.addCommand(createMobileSetupCommand());
+program.addCommand(createResetCommand());
 if (process.argv[1]?.includes("clautunnel") || process.argv[1]?.endsWith("/index.js") || process.argv[1]?.endsWith("/index.ts")) {
   program.parse();
 }