@vess-id/vess 0.2.0-alpha.1

package/dist/cli/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/cli/install.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyDA,gCA+HC;AAxLD,uCAAwB;AACxB,2CAA4B;AAC5B,uCAAwB;AACxB,iEAAkD;AAClD,2CAA2C;AAC3C,mDAAyD;AACzD,6CAA6C;AAC7C,2CAA8C;AAC9C,iDAA2E;AAqB3E,SAAS,0BAA0B;IACjC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAA;AAChD,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAElD,MAAM,GAAG,GAAG,IAAA,0BAAW,EAAC,OAAO,CAAC,CAAA;IAChC,MAAM,IAAI,GAAG,IAAA,2BAAY,EAAC,QAAQ,CAAC,CAAA;IAEnC,IAAI,GAAG,KAAK,IAAI,IAAI,IAAA,8BAAe,EAAC,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1D,OAAO;YACL,GAAG,EAAE,oBAAoB,IAAI,MAAM;YACnC,IAAI,EAAE,MAAM;SACb,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM;QACf,IAAI,EAAE,CAAC,OAAO,CAAC;QACf,IAAI,EAAE,OAAO;KACd,CAAA;AACH,CAAC;AAEM,KAAK,UAAU,UAAU,CAAC,UAA0B,EAAE;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,iBAAS,EAAE,CAAA;IAC9C,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,EAAE,CAAA;IAEjF,qCAAqC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,iDAAiD,CAClD,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAA;IACH,CAAC;IAED,4CAA4C;IAC5C,IAAI,QAAkB,CAAA;IACtB,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,+BAAmB,CAAA;QACtD,QAAQ,GAAG,EAAE,GAAG,EAAE,oBAAoB,IAAI,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IAClE,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;QACxC,QAAQ,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IAChE,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAA;IAE7C,qCAAqC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrC,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;QACP,IAAA,eAAG,EAAC,mCAAmC,GAAG,gBAAgB,CAAC,CAAA;QAC3D,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;QACP,IAAA,eAAG,EAAC,0EAA0E,CAAC,CAAA;QAC/E,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;QACP,IAAI,YAAY,EAAE,CAAC;YACjB,IAAA,eAAG,EAAC,mBAAmB,CAAC,CAAA;YACxB,IAAA,eAAG,EAAC,eAAe,CAAC,CAAA;YACpB,IAAA,eAAG,EAAC,iBAAiB,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAA;YACtC,IAAA,eAAG,EAAC,sBAAsB,CAAC,CAAA;YAC3B,IAAA,eAAG,EAAC,OAAO,CAAC,CAAA;YACZ,IAAA,eAAG,EAAC,KAAK,CAAC,CAAA;QACZ,CAAC;aAAM,CAAC;YACN,IAAA,eAAG,EAAC,mBAAmB,CAAC,CAAA;YACxB,IAAA,eAAG,EAAC,eAAe,CAAC,CAAA;YACpB,IAAA,eAAG,EAAC,0BAA0B,CAAC,CAAA;YAC/B,IAAA,eAAG,EAAC,0BAA0B,CAAC,CAAA;YAC/B,IAAA,eAAG,EAAC,uBAAuB,CAAC,CAAA;YAC5B,IAAA,eAAG,EAAC,OAAO,CAAC,CAAA;YACZ,IAAA,eAAG,EAAC,KAAK,CAAC,CAAA;QACZ,CAAC;QACD,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;QACP,OAAM;IACR,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA4B,CAAA;IAErE,oDAAoD;IACpD,MAAM,UAAU,GAAG,CAAC,YAAY,CAAC,UAAU,IAAI,EAAE,CAA4B,CAAA;IAC7E,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QACpB,IAAA,eAAG,EAAC,8DAA8D,CAAC,CAAA;QACnE,OAAM;IACR,CAAC;IAED,0BAA0B;IAC1B,MAAM,iBAAiB,GAAG,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAC3D,MAAM,aAAa,GAAG,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAA;IAExE,mBAAmB;IACnB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAChE,MAAM,UAAU,GAAG,gBAAgB,GAAG,UAAU,GAAG,SAAS,CAAA;IAC5D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC3E,IAAA,eAAG,EAAC,kBAAkB,GAAG,UAAU,CAAC,CAAA;IAEpC,eAAe;IACf,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;IACP,IAAA,eAAG,EAAC,wCAAwC,GAAG,gBAAgB,GAAG,GAAG,CAAC,CAAA;IACtE,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;IACP,IAAI,YAAY,EAAE,CAAC;QACjB,IAAA,eAAG,EAAC,uBAAuB,CAAC,CAAA;QAC5B,IAAA,eAAG,EAAC,4BAA4B,CAAC,CAAA;QACjC,IAAA,eAAG,EAAC,eAAe,CAAC,CAAA;QACpB,IAAA,eAAG,EAAC,iBAAiB,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAA;QACtC,IAAA,eAAG,EAAC,sBAAsB,CAAC,CAAA;QAC3B,IAAA,eAAG,EAAC,OAAO,CAAC,CAAA;IACd,CAAC;SAAM,CAAC;QACN,IAAA,eAAG,EAAC,eAAe,CAAC,CAAA;QACpB,IAAA,eAAG,EAAC,4BAA4B,CAAC,CAAA;QACjC,IAAA,eAAG,EAAC,eAAe,CAAC,CAAA;QACpB,IAAA,eAAG,EAAC,0BAA0B,CAAC,CAAA;QAC/B,IAAA,eAAG,EAAC,0BAA0B,CAAC,CAAA;QAC/B,IAAA,eAAG,EAAC,uBAAuB,CAAC,CAAA;QAC5B,IAAA,eAAG,EAAC,OAAO,CAAC,CAAA;IACd,CAAC;IACD,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;IAEP,+CAA+C;IAC/C,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAA;QACF,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAA,uBAAW,EAAC,EAAE,EAAE,sBAAsB,CAAC,CAAA;YAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAA,eAAG,EAAC,yBAAyB,CAAC,CAAA;gBAC9B,OAAM;YACR,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAA;QACZ,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,EAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IAEnF,sBAAsB;IACtB,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;IACP,IAAA,eAAG,EAAC,yDAAyD,CAAC,CAAA;IAC9D,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;IACP,IAAA,eAAG,EAAC,aAAa,CAAC,CAAA;IAClB,IAAA,eAAG,EAAC,wDAAwD,CAAC,CAAA;IAC7D,IAAA,eAAG,EAAC,wDAAwD,CAAC,CAAA;AAC/D,CAAC"}

package/dist/cli/login.d.ts

@@ -0,0 +1,6 @@
+import { VessPaths } from '../config/paths';
+export interface LoginOptions {
+    paths?: VessPaths;
+}
+export declare function runLogin(options?: LoginOptions): Promise<void>;
+//# sourceMappingURL=login.d.ts.map

package/dist/cli/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/cli/login.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAI3C,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB;AAED,wBAAsB,QAAQ,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkFxE"}

package/dist/cli/login.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runLogin = runLogin;
+const ai_identity_1 = require("@vess-id/ai-identity");
+const key_manager_1 = require("../identity/key-manager");
+const paths_1 = require("../config/paths");
+const config_1 = require("../config/config");
+const cli_utils_1 = require("./cli-utils");
+async function runLogin(options = {}) {
+    const paths = options.paths ?? new paths_1.VessPaths();
+    // 1. Load existing config
+    const config = (0, config_1.loadConfig)(paths.configFile);
+    // 2. Validate device is initialized
+    if (!config.rootDid) {
+        throw new Error('Device is not initialized. Run "vess init" first.');
+    }
+    const { gatewayUrl, rootDid } = config;
+    // 3. Retrieve root private key from Keychain
+    const km = new key_manager_1.KeyManager();
+    const rootKeyJson = km.getRootKey();
+    if (!rootKeyJson) {
+        throw new Error('Root key not found in Keychain. Run "vess init" to re-initialize.');
+    }
+    // 4. Extract public key from stored private key JWK
+    let privateJwk;
+    try {
+        privateJwk = JSON.parse(rootKeyJson);
+    }
+    catch {
+        throw new Error('Root key in Keychain is corrupted. Run "vess init --force" to re-initialize.');
+    }
+    if (!privateJwk.kty || !privateJwk.x) {
+        throw new Error('Root key in Keychain is invalid (missing kty or x). Run "vess init --force" to re-initialize.');
+    }
+    // Strip private key material, keep only public fields
+    const { d: _d, p: _p, q: _q, dp: _dp, dq: _dq, qi: _qi, k: _k, ...publicKeyJwk } = privateJwk;
+    // 5. Run device enrollment flow (re-authenticate)
+    (0, cli_utils_1.log)('Starting device re-authentication...');
+    const enrollManager = new ai_identity_1.DeviceEnrollManager(gatewayUrl);
+    let result;
+    let cleanupBrowserPrompt;
+    try {
+        result = await enrollManager.enrollAndWait({
+            rootDid,
+            publicKeyJwk: publicKeyJwk,
+        }, (info) => {
+            (0, cli_utils_1.log)('');
+            (0, cli_utils_1.log)('=== Device Verification Required ===');
+            (0, cli_utils_1.log)(`Open this URL:  ${info.verificationUrl}`);
+            (0, cli_utils_1.log)(`Enter code:     ${info.userCode}`);
+            (0, cli_utils_1.log)('');
+            (0, cli_utils_1.log)('Waiting for approval...');
+            cleanupBrowserPrompt = (0, cli_utils_1.promptEnterToOpenBrowser)(info.verificationUrl);
+        });
+    }
+    catch (err) {
+        throw new Error(`Device re-authentication failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    finally {
+        cleanupBrowserPrompt?.();
+    }
+    // 6. Check result
+    if (result.status !== 'approved') {
+        throw new Error(`Device re-authentication ${result.status}. Please try again with 'vess login'.`);
+    }
+    // 7. Store new session token
+    if (result.deviceSessionToken) {
+        km.storeSessionToken(result.deviceSessionToken);
+    }
+    // 8. Done
+    (0, cli_utils_1.log)('');
+    (0, cli_utils_1.log)('Login successful!');
+    (0, cli_utils_1.log)(`  DID: ${rootDid}`);
+    (0, cli_utils_1.log)('');
+}
+//# sourceMappingURL=login.js.map

package/dist/cli/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/cli/login.ts"],"names":[],"mappings":";;AAUA,4BAkFC;AA5FD,sDAA0D;AAC1D,yDAAoD;AACpD,2CAA2C;AAC3C,6CAA6C;AAC7C,2CAA2D;AAMpD,KAAK,UAAU,QAAQ,CAAC,UAAwB,EAAE;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,iBAAS,EAAE,CAAA;IAE9C,0BAA0B;IAC1B,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAE3C,oCAAoC;IACpC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,mDAAmD,CACpD,CAAA;IACH,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,MAAM,CAAA;IAEtC,6CAA6C;IAC7C,MAAM,EAAE,GAAG,IAAI,wBAAU,EAAE,CAAA;IAC3B,MAAM,WAAW,GAAG,EAAE,CAAC,UAAU,EAAE,CAAA;IACnC,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAA;IACH,CAAC;IAED,oDAAoD;IACpD,IAAI,UAAmC,CAAA;IACvC,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;IACjG,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAA;IAClH,CAAC;IACD,sDAAsD;IACtD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,YAAY,EAAE,GAAG,UAAU,CAAA;IAE7F,kDAAkD;IAClD,IAAA,eAAG,EAAC,sCAAsC,CAAC,CAAA;IAC3C,MAAM,aAAa,GAAG,IAAI,iCAAmB,CAAC,UAAU,CAAC,CAAA;IAEzD,IAAI,MAA+D,CAAA;IACnE,IAAI,oBAA8C,CAAA;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,aAAa,CAAC,aAAa,CAC1C;YACE,OAAO;YACP,YAAY,EAAE,YAAiF;SAChG,EACD,CAAC,IAAI,EAAE,EAAE;YACP,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;YACP,IAAA,eAAG,EAAC,sCAAsC,CAAC,CAAA;YAC3C,IAAA,eAAG,EAAC,mBAAmB,IAAI,CAAC,eAAe,EAAE,CAAC,CAAA;YAC9C,IAAA,eAAG,EAAC,mBAAmB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;YACvC,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;YACP,IAAA,eAAG,EAAC,yBAAyB,CAAC,CAAA;YAC9B,oBAAoB,GAAG,IAAA,oCAAwB,EAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACvE,CAAC,CACF,CAAA;IACD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACzG,CAAC;YAAS,CAAC;QACT,oBAAoB,EAAE,EAAE,CAAA;IAC1B,CAAC;IAED,kBAAkB;IAClB,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,4BAA4B,MAAM,CAAC,MAAM,uCAAuC,CACjF,CAAA;IACH,CAAC;IAED,6BAA6B;IAC7B,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;IACjD,CAAC;IAED,UAAU;IACV,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;IACP,IAAA,eAAG,EAAC,mBAAmB,CAAC,CAAA;IACxB,IAAA,eAAG,EAAC,UAAU,OAAO,EAAE,CAAC,CAAA;IACxB,IAAA,eAAG,EAAC,EAAE,CAAC,CAAA;AACT,CAAC"}

package/dist/cli/logs.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Get the path to the daemon log file.
+ */
+export declare function getLogFilePath(baseDir?: string): string;
+/**
+ * Read the last N lines from a log file.
+ * Returns an empty array if the file does not exist or is empty.
+ */
+export declare function readLogLines(filePath: string, lines?: number): string[];
+/**
+ * Read recent error lines from a log file.
+ * Reads the last ~200 lines, filters for [ERROR] prefix,
+ * and returns the most recent `maxLines` matches.
+ */
+export declare function readRecentErrors(logFilePath: string, maxLines?: number): string[];
+/**
+ * Follow (tail -f) a log file, printing new lines as they appear.
+ * Uses fs.watchFile (polling) to reliably detect appended data,
+ * then re-opens the file from the last known position on each change.
+ * Returns an abort function to stop following.
+ */
+export declare function followLog(filePath: string): {
+    stop: () => void;
+};
+/**
+ * Run the logs command.
+ */
+export declare function runLogs(opts: {
+    follow?: boolean;
+    lines?: number;
+}): Promise<void>;
+//# sourceMappingURL=logs.d.ts.map

package/dist/cli/logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.d.ts","sourceRoot":"","sources":["../../src/cli/logs.ts"],"names":[],"mappings":"AAaA;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAGvD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAE,MAAsB,GAAG,MAAM,EAAE,CAWtF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,GAAE,MAA2B,GAAG,MAAM,EAAE,CAKrG;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,IAAI,CAAA;CAAE,CA6BhE;AAED;;GAEG;AACH,wBAAsB,OAAO,CAAC,IAAI,EAAE;IAClC,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBhB"}

package/dist/cli/logs.js

@@ -0,0 +1,147 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getLogFilePath = getLogFilePath;
+exports.readLogLines = readLogLines;
+exports.readRecentErrors = readRecentErrors;
+exports.followLog = followLog;
+exports.runLogs = runLogs;
+/**
+ * `vess logs` CLI command — view daemon log output.
+ *
+ * Reads from ~/.vess/logs/daemon.log.
+ */
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const paths_1 = require("../config/paths");
+const DEFAULT_LINES = 50;
+const DEFAULT_ERROR_TAIL = 200;
+const DEFAULT_MAX_ERRORS = 5;
+/**
+ * Get the path to the daemon log file.
+ */
+function getLogFilePath(baseDir) {
+    const dir = baseDir ?? new paths_1.VessPaths().baseDir;
+    return path.join(dir, 'logs', 'daemon.log');
+}
+/**
+ * Read the last N lines from a log file.
+ * Returns an empty array if the file does not exist or is empty.
+ */
+function readLogLines(filePath, lines = DEFAULT_LINES) {
+    try {
+        const content = fs.readFileSync(filePath, 'utf-8');
+        if (!content.trim())
+            return [];
+        const allLines = content.split('\n').filter((line) => line !== '');
+        if (allLines.length <= lines)
+            return allLines;
+        return allLines.slice(-lines);
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Read recent error lines from a log file.
+ * Reads the last ~200 lines, filters for [ERROR] prefix,
+ * and returns the most recent `maxLines` matches.
+ */
+function readRecentErrors(logFilePath, maxLines = DEFAULT_MAX_ERRORS) {
+    const tailLines = readLogLines(logFilePath, DEFAULT_ERROR_TAIL);
+    const errorLines = tailLines.filter((line) => line.includes('[ERROR]'));
+    if (errorLines.length <= maxLines)
+        return errorLines;
+    return errorLines.slice(-maxLines);
+}
+/**
+ * Follow (tail -f) a log file, printing new lines as they appear.
+ * Uses fs.watchFile (polling) to reliably detect appended data,
+ * then re-opens the file from the last known position on each change.
+ * Returns an abort function to stop following.
+ */
+function followLog(filePath) {
+    if (!fs.existsSync(filePath)) {
+        console.error(`Log file not found: ${filePath}`);
+        console.error('Is the daemon running? Start it with: vess daemon start');
+        process.exit(1);
+    }
+    let position = fs.statSync(filePath).size;
+    fs.watchFile(filePath, { interval: 500 }, () => {
+        const stat = fs.statSync(filePath);
+        if (stat.size > position) {
+            const stream = fs.createReadStream(filePath, { start: position, encoding: 'utf-8' });
+            stream.on('data', (chunk) => process.stdout.write(String(chunk)));
+            stream.on('end', () => { position = stat.size; });
+        }
+        else if (stat.size < position) {
+            // File was truncated (e.g. log rotation) — reset position
+            position = 0;
+        }
+    });
+    const stop = () => {
+        fs.unwatchFile(filePath);
+    };
+    process.on('SIGINT', stop);
+    process.on('SIGTERM', stop);
+    return { stop };
+}
+/**
+ * Run the logs command.
+ */
+async function runLogs(opts) {
+    const logFile = getLogFilePath();
+    if (opts.follow) {
+        // Print existing last N lines first, then follow
+        const existing = readLogLines(logFile, opts.lines ?? DEFAULT_LINES);
+        for (const line of existing) {
+            console.log(line);
+        }
+        followLog(logFile);
+        // followLog keeps the process alive
+        return;
+    }
+    const lines = readLogLines(logFile, opts.lines ?? DEFAULT_LINES);
+    if (lines.length === 0) {
+        console.error('No log entries found.');
+        console.error(`Log file: ${logFile}`);
+        console.error('Is the daemon running? Start it with: vess daemon start');
+        return;
+    }
+    for (const line of lines) {
+        console.log(line);
+    }
+}
+//# sourceMappingURL=logs.js.map

package/dist/cli/logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../src/cli/logs.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,wCAGC;AAMD,oCAWC;AAOD,4CAKC;AAQD,8BA6BC;AAKD,0BA4BC;AAtHD;;;;GAIG;AACH,4CAA6B;AAC7B,gDAAiC;AACjC,2CAA2C;AAE3C,MAAM,aAAa,GAAG,EAAE,CAAA;AACxB,MAAM,kBAAkB,GAAG,GAAG,CAAA;AAC9B,MAAM,kBAAkB,GAAG,CAAC,CAAA;AAE5B;;GAEG;AACH,SAAgB,cAAc,CAAC,OAAgB;IAC7C,MAAM,GAAG,GAAG,OAAO,IAAI,IAAI,iBAAS,EAAE,CAAC,OAAO,CAAA;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,CAAA;AAC7C,CAAC;AAED;;;GAGG;AACH,SAAgB,YAAY,CAAC,QAAgB,EAAE,QAAgB,aAAa;IAC1E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,CAAA;QAE9B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;QAClE,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK;YAAE,OAAO,QAAQ,CAAA;QAC7C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,WAAmB,EAAE,WAAmB,kBAAkB;IACzF,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAA;IAC/D,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;IACvE,IAAI,UAAU,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,UAAU,CAAA;IACpD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAA;AACpC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,SAAS,CAAC,QAAgB;IACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAA;QAChD,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAA;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,IAAI,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAA;IAEzC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE;QAC7C,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAClC,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;YACpF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACjE,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAA,CAAC,CAAC,CAAC,CAAA;QAClD,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YAChC,0DAA0D;YAC1D,QAAQ,GAAG,CAAC,CAAA;QACd,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;IAC1B,CAAC,CAAA;IAED,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC1B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAE3B,OAAO,EAAE,IAAI,EAAE,CAAA;AACjB,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,OAAO,CAAC,IAG7B;IACC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAA;IAEhC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,iDAAiD;QACjD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC,CAAA;QACnE,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;QACD,SAAS,CAAC,OAAO,CAAC,CAAA;QAClB,oCAAoC;QACpC,OAAM;IACR,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC,CAAA;IAChE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;QACtC,OAAO,CAAC,KAAK,CAAC,aAAa,OAAO,EAAE,CAAC,CAAA;QACrC,OAAO,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAA;QACxE,OAAM;IACR,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACnB,CAAC;AACH,CAAC"}

package/dist/cli/project.d.ts

@@ -0,0 +1,8 @@
+import { VessPaths } from '../config/paths';
+export interface ProjectOptions {
+    paths?: VessPaths;
+}
+export declare function runProjectList(options?: ProjectOptions): Promise<void>;
+export declare function runProjectUse(projectId: string, options?: ProjectOptions): Promise<void>;
+export declare function runProjectSync(options?: ProjectOptions): Promise<void>;
+//# sourceMappingURL=project.d.ts.map

package/dist/cli/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../src/cli/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAM3C,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB;AAQD,wBAAsB,cAAc,CAClC,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAwBf;AAID,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAID,wBAAsB,cAAc,CAClC,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAwDf"}

package/dist/cli/project.js

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runProjectList = runProjectList;
+exports.runProjectUse = runProjectUse;
+exports.runProjectSync = runProjectSync;
+const paths_1 = require("../config/paths");
+const config_1 = require("../config/config");
+const sqlite_1 = require("../wallet/sqlite");
+const key_manager_1 = require("../identity/key-manager");
+const init_guard_1 = require("./init-guard");
+function log(msg) {
+    process.stderr.write(msg + '\n');
+}
+// ── list ────────────────────────────────────────────────
+async function runProjectList(options = {}) {
+    const paths = options.paths ?? new paths_1.VessPaths();
+    if (!(0, init_guard_1.ensureInitialized)(paths, 'project list'))
+        return;
+    const db = (0, sqlite_1.openDatabase)(paths.walletDb);
+    (0, sqlite_1.initSchema)(db);
+    const rows = db
+        .prepare('SELECT id, name, is_default FROM projects ORDER BY name')
+        .all();
+    db.close();
+    if (rows.length === 0) {
+        log('No projects found. Run "vess project sync" or "vess init".');
+        return;
+    }
+    log('Projects:');
+    for (const row of rows) {
+        const marker = row.is_default ? '★' : ' ';
+        log(`  ${marker} ${row.name}  (${row.id})`);
+    }
+}
+// ── use ─────────────────────────────────────────────────
+async function runProjectUse(projectId, options = {}) {
+    const paths = options.paths ?? new paths_1.VessPaths();
+    if (!(0, init_guard_1.ensureInitialized)(paths, 'project use'))
+        return;
+    const db = (0, sqlite_1.openDatabase)(paths.walletDb);
+    (0, sqlite_1.initSchema)(db);
+    const project = db
+        .prepare('SELECT id, name FROM projects WHERE id = ?')
+        .get(projectId);
+    if (!project) {
+        db.close();
+        throw new Error(`Project not found: ${projectId}. Run "vess project list" to see available projects.`);
+    }
+    const switchDefault = db.transaction(() => {
+        db.prepare('UPDATE projects SET is_default = 0').run();
+        db.prepare('UPDATE projects SET is_default = 1 WHERE id = ?').run(projectId);
+    });
+    switchDefault();
+    db.close();
+    const config = (0, config_1.loadConfig)(paths.configFile);
+    config.defaultProjectId = projectId;
+    (0, config_1.saveConfig)(paths.configFile, config);
+    log(`Switched default project to: ${project.name} (${project.id})`);
+}
+// ── sync ────────────────────────────────────────────────
+async function runProjectSync(options = {}) {
+    const paths = options.paths ?? new paths_1.VessPaths();
+    const km = new key_manager_1.KeyManager();
+    const sessionToken = km.getSessionToken();
+    if (!sessionToken) {
+        throw new Error('Not authenticated. Run "vess init" first to obtain a session token.');
+    }
+    if (!(0, init_guard_1.ensureInitialized)(paths, 'project sync'))
+        return;
+    const config = (0, config_1.loadConfig)(paths.configFile);
+    const gatewayUrl = config.gatewayUrl;
+    log('Fetching projects...');
+    let fetched;
+    try {
+        const response = await fetch(`${gatewayUrl}/api/v1/projects`, {
+            method: 'GET',
+            headers: {
+                'X-Device-Session-Token': sessionToken,
+            },
+            signal: AbortSignal.timeout(10000),
+        });
+        if (!response.ok) {
+            log(`Failed to fetch projects (HTTP ${response.status}).`);
+            return;
+        }
+        const body = (await response.json());
+        fetched = body.projects || body.data || [];
+    }
+    catch {
+        log('Could not fetch projects. Check your network and gateway URL.');
+        return;
+    }
+    const db = (0, sqlite_1.openDatabase)(paths.walletDb);
+    (0, sqlite_1.initSchema)(db);
+    for (const project of fetched) {
+        db.prepare(`INSERT INTO projects (id, name, is_default, synced_at) VALUES (?, ?, 0, ?)
+       ON CONFLICT(id) DO UPDATE SET name = excluded.name, synced_at = excluded.synced_at`).run(project.id, project.name, Date.now());
+    }
+    db.close();
+    log(`Synced ${fetched.length} project(s).`);
+}
+//# sourceMappingURL=project.js.map

package/dist/cli/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/cli/project.ts"],"names":[],"mappings":";;AAgBA,wCA0BC;AAID,sCAkCC;AAID,wCA0DC;AA9ID,2CAA2C;AAC3C,6CAAyD;AACzD,6CAA2D;AAC3D,yDAAoD;AACpD,6CAAgD;AAMhD,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAA;AAClC,CAAC;AAED,2DAA2D;AAEpD,KAAK,UAAU,cAAc,CAClC,UAA0B,EAAE;IAE5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,iBAAS,EAAE,CAAA;IAE9C,IAAI,CAAC,IAAA,8BAAiB,EAAC,KAAK,EAAE,cAAc,CAAC;QAAE,OAAM;IAErD,MAAM,EAAE,GAAG,IAAA,qBAAY,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACvC,IAAA,mBAAU,EAAC,EAAE,CAAC,CAAA;IAEd,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,yDAAyD,CAAC;SAClE,GAAG,EAA6D,CAAA;IAEnE,EAAE,CAAC,KAAK,EAAE,CAAA;IAEV,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,4DAA4D,CAAC,CAAA;QACjE,OAAM;IACR,CAAC;IAED,GAAG,CAAC,WAAW,CAAC,CAAA;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;QACzC,GAAG,CAAC,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;IAC7C,CAAC;AACH,CAAC;AAED,2DAA2D;AAEpD,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,UAA0B,EAAE;IAE5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,iBAAS,EAAE,CAAA;IAE9C,IAAI,CAAC,IAAA,8BAAiB,EAAC,KAAK,EAAE,aAAa,CAAC;QAAE,OAAM;IAEpD,MAAM,EAAE,GAAG,IAAA,qBAAY,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACvC,IAAA,mBAAU,EAAC,EAAE,CAAC,CAAA;IAEd,MAAM,OAAO,GAAG,EAAE;SACf,OAAO,CAAC,4CAA4C,CAAC;SACrD,GAAG,CAAC,SAAS,CAA6C,CAAA;IAE7D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,EAAE,CAAC,KAAK,EAAE,CAAA;QACV,MAAM,IAAI,KAAK,CACb,sBAAsB,SAAS,sDAAsD,CACtF,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QACxC,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,EAAE,CAAA;QACtD,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IACF,aAAa,EAAE,CAAA;IACf,EAAE,CAAC,KAAK,EAAE,CAAA;IAEV,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC3C,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAA;IACnC,IAAA,mBAAU,EAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAEpC,GAAG,CAAC,gCAAgC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,GAAG,CAAC,CAAA;AACrE,CAAC;AAED,2DAA2D;AAEpD,KAAK,UAAU,cAAc,CAClC,UAA0B,EAAE;IAE5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,iBAAS,EAAE,CAAA;IAC9C,MAAM,EAAE,GAAG,IAAI,wBAAU,EAAE,CAAA;IAC3B,MAAM,YAAY,GAAG,EAAE,CAAC,eAAe,EAAE,CAAA;IAEzC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAA;IACH,CAAC;IAED,IAAI,CAAC,IAAA,8BAAiB,EAAC,KAAK,EAAE,cAAc,CAAC;QAAE,OAAM;IAErD,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IAEpC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IAE3B,IAAI,OAA4C,CAAA;IAChD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,kBAAkB,EAAE;YAC5D,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,wBAAwB,EAAE,YAAY;aACvC;YACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAA;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,GAAG,CAAC,kCAAkC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAA;YAC1D,OAAM;QACR,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAA;QACD,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,+DAA+D,CAAC,CAAA;QACpE,OAAM;IACR,CAAC;IAED,MAAM,EAAE,GAAG,IAAA,qBAAY,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACvC,IAAA,mBAAU,EAAC,EAAE,CAAC,CAAA;IAEd,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,EAAE,CAAC,OAAO,CACR;0FACoF,CACrF,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC7C,CAAC;IAED,EAAE,CAAC,KAAK,EAAE,CAAA;IAEV,GAAG,CAAC,UAAU,OAAO,CAAC,MAAM,cAAc,CAAC,CAAA;AAC7C,CAAC"}

package/dist/cli/reset.d.ts

@@ -0,0 +1,8 @@
+import { VessPaths } from '../config/paths';
+export interface ResetOptions {
+    paths?: VessPaths;
+    /** Skip confirmation prompt (for testing / CI) */
+    skipConfirm?: boolean;
+}
+export declare function runReset(options?: ResetOptions): Promise<void>;
+//# sourceMappingURL=reset.d.ts.map

package/dist/cli/reset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset.d.ts","sourceRoot":"","sources":["../../src/cli/reset.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAI3C,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,kDAAkD;IAClD,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB;AAMD,wBAAsB,QAAQ,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDxE"}

package/dist/cli/reset.js

@@ -0,0 +1,137 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runReset = runReset;
+const fs = __importStar(require("fs"));
+const key_manager_1 = require("../identity/key-manager");
+const paths_1 = require("../config/paths");
+const service_manager_1 = require("../daemon/service-manager");
+const uninstall_1 = require("./uninstall");
+function log(msg) {
+    process.stderr.write(msg + '\n');
+}
+async function runReset(options = {}) {
+    const paths = options.paths ?? new paths_1.VessPaths();
+    const skipConfirm = options.skipConfirm ?? false;
+    if (!skipConfirm) {
+        // Interactive confirmation via stdin
+        log('');
+        log('⚠  This will completely uninstall VESS:');
+        log('   - MCP server registration from Claude Code');
+        log('   - Daemon OS service (auto-start)');
+        log(`   - Config, policy, wallet: ${paths.baseDir}`);
+        log('   - Root key & session token from OS Keychain');
+        log('');
+        const confirmed = await promptConfirm('Are you sure? (y/N) ');
+        if (!confirmed) {
+            log('Aborted.');
+            return;
+        }
+    }
+    // 1. Remove MCP server registration from Claude Code
+    log('Removing MCP server registration...');
+    try {
+        // runUninstall() only removes MCP server registration from Claude Code config.
+        // Full cleanup (daemon, keychain, files) is handled by the subsequent steps below.
+        await (0, uninstall_1.runUninstall)({ skipConfirm: true });
+    }
+    catch {
+        // Claude Code config may not exist — non-fatal
+    }
+    // 2. Uninstall daemon OS service (LaunchAgent / systemd) if present
+    if (service_manager_1.ServiceManager.isInstalled()) {
+        log('Removing daemon OS service...');
+        await service_manager_1.ServiceManager.uninstall();
+    }
+    // 3. Delete keys from OS Keychain
+    log('Cleaning Keychain entries...');
+    const km = new key_manager_1.KeyManager();
+    km.deleteRootKey();
+    km.deleteSessionToken();
+    // 4. Delete agent keys listed in wallet.db (best-effort)
+    deleteAgentKeysFromDb(paths, km);
+    // 5. Remove ~/.vess directory
+    if (fs.existsSync(paths.baseDir)) {
+        log(`Removing ${paths.baseDir}...`);
+        fs.rmSync(paths.baseDir, { recursive: true, force: true });
+    }
+    else {
+        log(`${paths.baseDir} does not exist, skipping.`);
+    }
+    log('');
+    log('VESS has been completely uninstalled. Run "vess init" to set up again.');
+}
+function deleteAgentKeysFromDb(paths, km) {
+    if (!fs.existsSync(paths.walletDb))
+        return;
+    try {
+        // Dynamic import to avoid hard failure if db is corrupt
+        const Database = require('better-sqlite3');
+        const db = new Database(paths.walletDb, { readonly: true });
+        const rows = db
+            .prepare("SELECT project_id, client_name FROM keys WHERE key_type = 'agent' AND project_id IS NOT NULL AND client_name IS NOT NULL")
+            .all();
+        db.close();
+        for (const row of rows) {
+            km.deleteAgentKey(row.project_id, row.client_name);
+        }
+        if (rows.length > 0) {
+            log(`  Removed ${rows.length} agent key(s) from Keychain.`);
+        }
+    }
+    catch {
+        // DB might be corrupt or not fully initialized — that's fine
+    }
+}
+function promptConfirm(message) {
+    return new Promise((resolve) => {
+        if (!process.stdin.isTTY) {
+            resolve(false);
+            return;
+        }
+        process.stderr.write(message);
+        const stdin = process.stdin;
+        stdin.setEncoding('utf-8');
+        stdin.resume();
+        stdin.once('data', (data) => {
+            stdin.pause();
+            resolve(data.trim().toLowerCase() === 'y');
+        });
+        stdin.once('end', () => {
+            resolve(false);
+        });
+    });
+}
+//# sourceMappingURL=reset.js.map

package/dist/cli/reset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset.js","sourceRoot":"","sources":["../../src/cli/reset.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,4BAuDC;AAvED,uCAAwB;AACxB,yDAAoD;AACpD,2CAA2C;AAC3C,+DAA0D;AAC1D,2CAA0C;AAQ1C,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAA;AAClC,CAAC;AAEM,KAAK,UAAU,QAAQ,CAAC,UAAwB,EAAE;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,iBAAS,EAAE,CAAA;IAC9C,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,KAAK,CAAA;IAEhD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,qCAAqC;QACrC,GAAG,CAAC,EAAE,CAAC,CAAA;QACP,GAAG,CAAC,yCAAyC,CAAC,CAAA;QAC9C,GAAG,CAAC,+CAA+C,CAAC,CAAA;QACpD,GAAG,CAAC,qCAAqC,CAAC,CAAA;QAC1C,GAAG,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QACpD,GAAG,CAAC,gDAAgD,CAAC,CAAA;QACrD,GAAG,CAAC,EAAE,CAAC,CAAA;QACP,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,sBAAsB,CAAC,CAAA;QAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,UAAU,CAAC,CAAA;YACf,OAAM;QACR,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,GAAG,CAAC,qCAAqC,CAAC,CAAA;IAC1C,IAAI,CAAC;QACH,+EAA+E;QAC/E,mFAAmF;QACnF,MAAM,IAAA,wBAAY,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IAED,oEAAoE;IACpE,IAAI,gCAAc,CAAC,WAAW,EAAE,EAAE,CAAC;QACjC,GAAG,CAAC,+BAA+B,CAAC,CAAA;QACpC,MAAM,gCAAc,CAAC,SAAS,EAAE,CAAA;IAClC,CAAC;IAED,kCAAkC;IAClC,GAAG,CAAC,8BAA8B,CAAC,CAAA;IACnC,MAAM,EAAE,GAAG,IAAI,wBAAU,EAAE,CAAA;IAC3B,EAAE,CAAC,aAAa,EAAE,CAAA;IAClB,EAAE,CAAC,kBAAkB,EAAE,CAAA;IAEvB,yDAAyD;IACzD,qBAAqB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAEhC,8BAA8B;IAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,YAAY,KAAK,CAAC,OAAO,KAAK,CAAC,CAAA;QACnC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAA;IACnD,CAAC;IAED,GAAG,CAAC,EAAE,CAAC,CAAA;IACP,GAAG,CAAC,wEAAwE,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAgB,EAAE,EAAc;IAC7D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAM;IAC1C,IAAI,CAAC;QACH,wDAAwD;QACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC1C,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3D,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CACN,0HAA0H,CAC3H;aACA,GAAG,EAAwD,CAAA;QAC9D,EAAE,CAAC,KAAK,EAAE,CAAA;QAEV,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAA;QACpD,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,8BAA8B,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,CAAC,CAAA;YACd,OAAM;QACR,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;QAC3B,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;QAC1B,KAAK,CAAC,MAAM,EAAE,CAAA;QACd,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YAClC,KAAK,CAAC,KAAK,EAAE,CAAA;YACb,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,OAAO,CAAC,KAAK,CAAC,CAAA;QAChB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/cli/run.d.ts

@@ -0,0 +1,22 @@
+export interface RunOptions {
+    command: string[];
+    profile?: string;
+    workingDirectory?: string;
+    timeout?: number;
+}
+/**
+ * Execute a command with VESS env profile injection.
+ *
+ * This is the CLI-direct path: the user explicitly runs `vess run` in their terminal.
+ * Policy/grant/VC checks are NOT applied here because:
+ * - The user has direct shell access and could run any command anyway
+ * - Policy enforcement is for the MCP path where AI requests execution
+ * - The value of `vess run` is env injection, not access control
+ *
+ * Note: The profile parameter is logged for clarity. The actual profile used
+ * for resolution is determined by the vess://env/<profile>/<key> references
+ * in .env. The .env file is expected to contain references to a single
+ * profile (created by `vess env import --profile <name>`).
+ */
+export declare function runProcessCommand(options: RunOptions): Promise<void>;
+//# sourceMappingURL=run.d.ts.map

package/dist/cli/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/cli/run.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAqD1E"}