crewly 1.20.132 → 1.20.133

package/dist/backend/backend/src/services/cloud/cloud-device-pairing.client.d.ts

@@ -0,0 +1,132 @@
+/**
+ * Cloud device-code pairing client.
+ *
+ * Talks to crewly-auth's `/api/cloud/device/*` endpoints so this machine can
+ * sign in to the owner's Crewly account without anyone at it:
+ *
+ * 1. {@link startCloudDevicePairing} — get a secret `deviceCode`, a short
+ *    `userCode` (`ABCD-2345`) and the link the owner opens
+ *    (`crewlyai.com/cloud/pair?code=ABCD-2345`).
+ * 2. {@link waitForCloudDeviceApproval} — poll at the Cloud's interval
+ *    (backing off on `slow_down` and rate limits) until the owner approves,
+ *    denies, or the pairing expires. On approval the Cloud hands over the
+ *    token pair exactly once.
+ *
+ * Shared by `crewly cloud login` (CLI) and {@link CloudDevicePairingService}
+ * (backend, for `/setup` and Settings → Cloud). No state; the device code
+ * never leaves the caller's memory.
+ *
+ * @module services/cloud/cloud-device-pairing.client
+ */
+/** `fetch` signature (injectable for tests). */
+export type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+/** What `start` returns. */
+export interface DevicePairingStartResult {
+    /** Secret the machine polls with — never show or log it */
+    deviceCode: string;
+    /** Short code the owner checks on the approve page */
+    userCode: string;
+    /** Approve page with the code filled in (show / encode as QR) */
+    verificationUrl: string;
+    /** Approve page without the code (for typing it by hand) */
+    verificationUri?: string;
+    /** Pairing lifetime (seconds) */
+    expiresIn: number;
+    /** Minimum seconds between polls */
+    interval: number;
+}
+/** The token pair handed over on approval. */
+export interface DevicePairingCredentials {
+    token: string;
+    refreshToken: string;
+    tier: string;
+    email?: string;
+}
+/** One poll's answer. */
+export type DevicePairingPollResult = {
+    status: 'authorization_pending' | 'slow_down';
+    interval?: number;
+} | {
+    status: 'expired' | 'denied';
+} | {
+    status: 'approved';
+    credentials: DevicePairingCredentials;
+};
+/** How waiting ended. */
+export type DevicePairingOutcome = {
+    status: 'approved';
+    credentials: DevicePairingCredentials;
+} | {
+    status: 'expired' | 'denied' | 'cancelled';
+};
+/** A request the Cloud refused (or could not answer). */
+export declare class DevicePairingError extends Error {
+    readonly status: number;
+    readonly retryable: boolean;
+    /**
+     * @param message - Human-readable reason (never contains a secret)
+     * @param status - HTTP status, 0 when the Cloud was unreachable
+     * @param retryable - True for network errors, 5xx and 429
+     */
+    constructor(message: string, status: number, retryable: boolean);
+}
+/**
+ * Ask the Cloud for a pairing.
+ *
+ * @param cloudUrl - Cloud API base URL (e.g. https://api.crewlyai.com)
+ * @param input - How the device introduces itself on the approve page
+ * @param fetchImpl - fetch (tests)
+ * @returns Device code, user code, link, lifetime and interval
+ * @throws DevicePairingError when the Cloud refuses or is unreachable
+ */
+export declare function startCloudDevicePairing(cloudUrl: string, input: {
+    deviceName: string;
+    deviceId?: string;
+    purpose?: string;
+}, fetchImpl?: FetchLike): Promise<DevicePairingStartResult>;
+/**
+ * Poll a pairing once.
+ *
+ * @param cloudUrl - Cloud API base URL
+ * @param deviceCode - Secret from {@link startCloudDevicePairing}
+ * @param fetchImpl - fetch (tests)
+ * @returns The Cloud's answer
+ * @throws DevicePairingError when the request fails (see `retryable`)
+ */
+export declare function pollCloudDevicePairing(cloudUrl: string, deviceCode: string, fetchImpl?: FetchLike): Promise<DevicePairingPollResult>;
+/**
+ * Wait `ms`, resolving early when `signal` aborts.
+ *
+ * @param ms - Milliseconds
+ * @param signal - Optional abort signal
+ * @returns Resolves after the delay or on abort
+ */
+export declare function abortableSleep(ms: number, signal?: AbortSignal): Promise<void>;
+/** Options for {@link waitForCloudDeviceApproval}. */
+export interface WaitForApprovalOptions {
+    cloudUrl: string;
+    start: DevicePairingStartResult;
+    fetchImpl?: FetchLike;
+    /** Sleep (tests pass an instant one) */
+    sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
+    /** Clock (tests) */
+    now?: () => number;
+    /** Stop waiting (returns `cancelled`) */
+    signal?: AbortSignal;
+    /** Called after every poll with the status seen (progress display) */
+    onPoll?: (status: DevicePairingPollResult['status'], intervalS: number) => void;
+}
+/**
+ * Poll until the owner approves or denies, or the pairing expires.
+ *
+ * Honours the Cloud's interval, adds {@link CLOUD_DEVICE_PAIRING_CONSTANTS.SLOW_DOWN_INCREMENT_S}
+ * on `slow_down` / HTTP 429 (capped), and rides out up to
+ * {@link CLOUD_DEVICE_PAIRING_CONSTANTS.MAX_CONSECUTIVE_POLL_ERRORS} network
+ * or server errors in a row (a laptop changing Wi-Fi mid-login).
+ *
+ * @param options - Cloud URL, the started pairing and hooks
+ * @returns How it ended; `approved` carries the token pair
+ * @throws DevicePairingError on a non-retryable refusal or too many errors in a row
+ */
+export declare function waitForCloudDeviceApproval(options: WaitForApprovalOptions): Promise<DevicePairingOutcome>;
+//# sourceMappingURL=cloud-device-pairing.client.d.ts.map

package/dist/backend/backend/src/services/cloud/cloud-device-pairing.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-device-pairing.client.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-device-pairing.client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAeH,gDAAgD;AAChD,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF,4BAA4B;AAC5B,MAAM,WAAW,wBAAwB;IACvC,2DAA2D;IAC3D,UAAU,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,eAAe,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,8CAA8C;AAC9C,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,yBAAyB;AACzB,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,uBAAuB,GAAG,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAA;CAAE,GAChC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAElE,yBAAyB;AACzB,MAAM,MAAM,oBAAoB,GAC5B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,wBAAwB,CAAA;CAAE,GAC7D;IAAE,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAA;CAAE,CAAC;AAEnD,yDAAyD;AACzD,qBAAa,kBAAmB,SAAQ,KAAK;IAMd,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,SAAS,EAAE,OAAO;IALjF;;;;OAIG;gBACS,OAAO,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM,EAAW,SAAS,EAAE,OAAO;CAIlF;AA+CD;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,EAClE,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,CAanC;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,uBAAuB,CAAC,CA6BlC;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB9E;AAED,sDAAsD;AACtD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,wBAAwB,CAAC;IAChC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,wCAAwC;IACxC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,oBAAoB;IACpB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,yCAAyC;IACzC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sEAAsE;IACtE,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;CACjF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,0BAA0B,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA4C/G"}

package/dist/backend/backend/src/services/cloud/cloud-device-pairing.client.js

@@ -0,0 +1,228 @@
+/**
+ * Cloud device-code pairing client.
+ *
+ * Talks to crewly-auth's `/api/cloud/device/*` endpoints so this machine can
+ * sign in to the owner's Crewly account without anyone at it:
+ *
+ * 1. {@link startCloudDevicePairing} — get a secret `deviceCode`, a short
+ *    `userCode` (`ABCD-2345`) and the link the owner opens
+ *    (`crewlyai.com/cloud/pair?code=ABCD-2345`).
+ * 2. {@link waitForCloudDeviceApproval} — poll at the Cloud's interval
+ *    (backing off on `slow_down` and rate limits) until the owner approves,
+ *    denies, or the pairing expires. On approval the Cloud hands over the
+ *    token pair exactly once.
+ *
+ * Shared by `crewly cloud login` (CLI) and {@link CloudDevicePairingService}
+ * (backend, for `/setup` and Settings → Cloud). No state; the device code
+ * never leaves the caller's memory.
+ *
+ * @module services/cloud/cloud-device-pairing.client
+ */
+import { CLOUD_DEVICE_PAIRING_CONSTANTS } from '../../../../config/constants.js';
+const C = CLOUD_DEVICE_PAIRING_CONSTANTS;
+/** Milliseconds per second. */
+const MS_PER_S = 1000;
+/** HTTP 429. */
+const HTTP_TOO_MANY_REQUESTS = 429;
+/** Lowest HTTP status treated as a server-side (retryable) failure. */
+const HTTP_SERVER_ERROR_MIN = 500;
+/** A request the Cloud refused (or could not answer). */
+export class DevicePairingError extends Error {
+    status;
+    retryable;
+    /**
+     * @param message - Human-readable reason (never contains a secret)
+     * @param status - HTTP status, 0 when the Cloud was unreachable
+     * @param retryable - True for network errors, 5xx and 429
+     */
+    constructor(message, status, retryable) {
+        super(message);
+        this.status = status;
+        this.retryable = retryable;
+        this.name = 'DevicePairingError';
+    }
+}
+/**
+ * POST JSON to crewly-auth and unwrap `{ success, data }`.
+ *
+ * @param fetchImpl - fetch
+ * @param url - Absolute URL
+ * @param body - JSON body
+ * @returns `data`
+ * @throws DevicePairingError on transport errors and non-success replies
+ */
+async function postJson(fetchImpl, url, body) {
+    let response;
+    try {
+        response = await fetchImpl(url, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(body),
+            signal: AbortSignal.timeout(C.REQUEST_TIMEOUT_MS),
+        });
+    }
+    catch (err) {
+        throw new DevicePairingError(`Crewly Cloud unreachable: ${err instanceof Error ? err.message : String(err)}`, 0, true);
+    }
+    let parsed = {};
+    try {
+        parsed = (await response.json());
+    }
+    catch {
+        // handled below
+    }
+    if (!response.ok || !parsed.success || parsed.data === undefined) {
+        const retryable = response.status === HTTP_TOO_MANY_REQUESTS || response.status >= HTTP_SERVER_ERROR_MIN;
+        throw new DevicePairingError(parsed.error || `Crewly Cloud returned HTTP ${response.status}`, response.status, retryable);
+    }
+    return parsed.data;
+}
+/**
+ * Join the Cloud base URL and an endpoint path.
+ *
+ * @param cloudUrl - Cloud API base URL
+ * @param path - Endpoint path
+ * @returns Absolute URL
+ */
+function endpoint(cloudUrl, path) {
+    return `${cloudUrl.replace(/\/+$/, '')}${path}`;
+}
+/**
+ * Ask the Cloud for a pairing.
+ *
+ * @param cloudUrl - Cloud API base URL (e.g. https://api.crewlyai.com)
+ * @param input - How the device introduces itself on the approve page
+ * @param fetchImpl - fetch (tests)
+ * @returns Device code, user code, link, lifetime and interval
+ * @throws DevicePairingError when the Cloud refuses or is unreachable
+ */
+export async function startCloudDevicePairing(cloudUrl, input, fetchImpl = fetch) {
+    const data = await postJson(fetchImpl, endpoint(cloudUrl, C.CLOUD_ENDPOINTS.START), input);
+    if (!data.deviceCode || !data.userCode || !data.verificationUrl) {
+        throw new DevicePairingError('Crewly Cloud returned an incomplete pairing', 0, false);
+    }
+    return {
+        deviceCode: data.deviceCode,
+        userCode: data.userCode,
+        verificationUrl: data.verificationUrl,
+        ...(data.verificationUri ? { verificationUri: data.verificationUri } : {}),
+        expiresIn: typeof data.expiresIn === 'number' ? data.expiresIn : C.DEFAULT_EXPIRES_IN_S,
+        interval: typeof data.interval === 'number' ? data.interval : C.DEFAULT_INTERVAL_S,
+    };
+}
+/**
+ * Poll a pairing once.
+ *
+ * @param cloudUrl - Cloud API base URL
+ * @param deviceCode - Secret from {@link startCloudDevicePairing}
+ * @param fetchImpl - fetch (tests)
+ * @returns The Cloud's answer
+ * @throws DevicePairingError when the request fails (see `retryable`)
+ */
+export async function pollCloudDevicePairing(cloudUrl, deviceCode, fetchImpl = fetch) {
+    const data = await postJson(fetchImpl, endpoint(cloudUrl, C.CLOUD_ENDPOINTS.POLL), { deviceCode });
+    switch (data.status) {
+        case C.POLL_STATUS.APPROVED:
+            if (!data.token || !data.refreshToken) {
+                throw new DevicePairingError('Crewly Cloud approved the device but sent no tokens', 0, false);
+            }
+            return {
+                status: 'approved',
+                credentials: { token: data.token, refreshToken: data.refreshToken, tier: data.tier || 'free', ...(data.email ? { email: data.email } : {}) },
+            };
+        case C.POLL_STATUS.PENDING:
+        case C.POLL_STATUS.SLOW_DOWN:
+            return { status: data.status, ...(typeof data.interval === 'number' ? { interval: data.interval } : {}) };
+        case C.POLL_STATUS.DENIED:
+            return { status: 'denied' };
+        case C.POLL_STATUS.EXPIRED:
+            return { status: 'expired' };
+        default:
+            throw new DevicePairingError(`Unexpected pairing status: ${String(data.status)}`, 0, false);
+    }
+}
+/**
+ * Wait `ms`, resolving early when `signal` aborts.
+ *
+ * @param ms - Milliseconds
+ * @param signal - Optional abort signal
+ * @returns Resolves after the delay or on abort
+ */
+export function abortableSleep(ms, signal) {
+    return new Promise((resolve) => {
+        if (signal?.aborted) {
+            resolve();
+            return;
+        }
+        const timer = setTimeout(() => {
+            signal?.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            resolve();
+        };
+        signal?.addEventListener('abort', onAbort, { once: true });
+    });
+}
+/**
+ * Poll until the owner approves or denies, or the pairing expires.
+ *
+ * Honours the Cloud's interval, adds {@link CLOUD_DEVICE_PAIRING_CONSTANTS.SLOW_DOWN_INCREMENT_S}
+ * on `slow_down` / HTTP 429 (capped), and rides out up to
+ * {@link CLOUD_DEVICE_PAIRING_CONSTANTS.MAX_CONSECUTIVE_POLL_ERRORS} network
+ * or server errors in a row (a laptop changing Wi-Fi mid-login).
+ *
+ * @param options - Cloud URL, the started pairing and hooks
+ * @returns How it ended; `approved` carries the token pair
+ * @throws DevicePairingError on a non-retryable refusal or too many errors in a row
+ */
+export async function waitForCloudDeviceApproval(options) {
+    const { cloudUrl, start, signal, onPoll } = options;
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const sleep = options.sleep ?? abortableSleep;
+    const now = options.now ?? (() => Date.now());
+    const deadline = now() + start.expiresIn * MS_PER_S;
+    let intervalS = Math.max(1, start.interval || C.DEFAULT_INTERVAL_S);
+    let consecutiveErrors = 0;
+    for (;;) {
+        await sleep(intervalS * MS_PER_S, signal);
+        if (signal?.aborted)
+            return { status: 'cancelled' };
+        if (now() >= deadline)
+            return { status: 'expired' };
+        let result;
+        try {
+            result = await pollCloudDevicePairing(cloudUrl, start.deviceCode, fetchImpl);
+            consecutiveErrors = 0;
+        }
+        catch (err) {
+            if (!(err instanceof DevicePairingError) || !err.retryable)
+                throw err;
+            consecutiveErrors++;
+            if (consecutiveErrors > C.MAX_CONSECUTIVE_POLL_ERRORS)
+                throw err;
+            if (err.status === HTTP_TOO_MANY_REQUESTS) {
+                intervalS = Math.min(C.MAX_INTERVAL_S, intervalS + C.SLOW_DOWN_INCREMENT_S);
+            }
+            continue;
+        }
+        if (signal?.aborted)
+            return { status: 'cancelled' };
+        onPoll?.(result.status, intervalS);
+        switch (result.status) {
+            case 'approved':
+                return result;
+            case 'expired':
+            case 'denied':
+                return { status: result.status };
+            case 'slow_down':
+                intervalS = Math.min(C.MAX_INTERVAL_S, result.interval ?? intervalS + C.SLOW_DOWN_INCREMENT_S);
+                break;
+            default:
+                if (typeof result.interval === 'number')
+                    intervalS = Math.min(C.MAX_INTERVAL_S, Math.max(1, result.interval));
+        }
+    }
+}
+//# sourceMappingURL=cloud-device-pairing.client.js.map

package/dist/backend/backend/src/services/cloud/cloud-device-pairing.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-device-pairing.client.js","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-device-pairing.client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AAEjF,MAAM,CAAC,GAAG,8BAA8B,CAAC;AAEzC,+BAA+B;AAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC;AAEtB,gBAAgB;AAChB,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,uEAAuE;AACvE,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAwClC,yDAAyD;AACzD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAML;IAAyB;IAL/D;;;;OAIG;IACH,YAAY,OAAe,EAAW,MAAc,EAAW,SAAkB;QAC/E,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,WAAM,GAAN,MAAM,CAAQ;QAAW,cAAS,GAAT,SAAS,CAAS;QAE/E,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,QAAQ,CAAI,SAAoB,EAAE,GAAW,EAAE,IAAa;IACzE,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,MAAM,GAAoD,EAAE,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,KAAK,sBAAsB,IAAI,QAAQ,CAAC,MAAM,IAAI,qBAAqB,CAAC;QACzG,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,IAAI,8BAA8B,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC5H,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,QAAgB,EAAE,IAAY;IAC9C,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAgB,EAChB,KAAkE,EAClE,YAAuB,KAAK;IAE5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAoC,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9H,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAChE,MAAM,IAAI,kBAAkB,CAAC,6CAA6C,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACxF,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,SAAS,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB;QACvF,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB;KACnF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,UAAkB,EAClB,YAAuB,KAAK;IAE5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAOxB,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAE1E,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ;YACzB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtC,MAAM,IAAI,kBAAkB,CAAC,qDAAqD,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YAChG,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aAC7I,CAAC;QACJ,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;QAC3B,KAAK,CAAC,CAAC,WAAW,CAAC,SAAS;YAC1B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5G,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM;YACvB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC9B,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO;YACxB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B;YACE,MAAM,IAAI,kBAAkB,CAAC,8BAA8B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,MAAoB;IAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAiBD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAA+B;IAC9E,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAAC;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC;IACpD,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACpE,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,SAAS,CAAC;QACR,MAAM,KAAK,CAAC,SAAS,GAAG,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACpD,IAAI,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAEpD,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC7E,iBAAiB,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS;gBAAE,MAAM,GAAG,CAAC;YACtE,iBAAiB,EAAE,CAAC;YACpB,IAAI,iBAAiB,GAAG,CAAC,CAAC,2BAA2B;gBAAE,MAAM,GAAG,CAAC;YACjE,IAAI,GAAG,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;gBAC1C,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,SAAS,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAC9E,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAEpD,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACnC,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,UAAU;gBACb,OAAO,MAAM,CAAC;YAChB,KAAK,SAAS,CAAC;YACf,KAAK,QAAQ;gBACX,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACnC,KAAK,WAAW;gBACd,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC;gBAC/F,MAAM;YACR;gBACE,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;oBAAE,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/backend/backend/src/services/cloud/cloud-device-pairing.service.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Cloud device pairing (backend side).
+ *
+ * Lets the web UI (`/setup`'s Cloud step, Settings → Cloud) — often opened on
+ * the owner's phone over the LAN or the relay — connect this machine to
+ * Crewly Cloud with no token handling at all:
+ *
+ * 1. `start()` asks crewly-auth for a pairing and returns the link + short
+ *    code to show (as a QR code too).
+ * 2. The service polls crewly-auth in the background. When the owner taps
+ *    Approve on crewlyai.com/cloud/pair, it receives the token pair and
+ *    connects by itself through the same path as `POST /api/cloud/connect`
+ *    (injected as `connect`).
+ * 3. The UI polls `status()` until it reads `connected`.
+ *
+ * One pairing at a time; `start()` while one is pending returns the same
+ * code, so reloading the page does not spawn new codes. The device code and
+ * the tokens never appear in `status()`.
+ *
+ * @module services/cloud/cloud-device-pairing.service
+ */
+import { type ComponentLogger } from '../core/logger.service.js';
+import { startCloudDevicePairing, type DevicePairingCredentials, type DevicePairingOutcome, type WaitForApprovalOptions } from './cloud-device-pairing.client.js';
+/** Where a pairing stands. */
+export type CloudDevicePairingState = 'idle' | 'pending' | 'connected' | 'expired' | 'denied' | 'cancelled' | 'error';
+/** What the UI sees (no secrets). */
+export interface CloudDevicePairingStatus {
+    state: CloudDevicePairingState;
+    /** Code the owner checks on the approve page */
+    userCode?: string;
+    /** Approve page with the code (show + QR) */
+    verificationUrl?: string;
+    /** Approve page without the code */
+    verificationUri?: string;
+    /** ISO expiry of the pending pairing */
+    expiresAt?: string;
+    /** Name shown to the owner on the approve page */
+    deviceName?: string;
+    /** Plan, once connected */
+    tier?: string;
+    /** Account, once connected */
+    email?: string;
+    /** Why it failed (`error`) */
+    error?: string;
+}
+/** Dependencies (injectable for tests). */
+export interface CloudDevicePairingDeps {
+    /** Cloud API base URL */
+    cloudUrl: () => string;
+    /** How this machine introduces itself */
+    identity: () => Promise<{
+        deviceId: string;
+        deviceName: string;
+    }>;
+    /** Connect with the approved token pair (performCloudConnect) */
+    connect: (credentials: DevicePairingCredentials) => Promise<{
+        tier: string;
+    }>;
+    start?: typeof startCloudDevicePairing;
+    wait?: (options: WaitForApprovalOptions) => Promise<DevicePairingOutcome>;
+    now?: () => number;
+    logger?: ComponentLogger;
+}
+/**
+ * Runs one device pairing at a time in the background.
+ */
+export declare class CloudDevicePairingService {
+    private readonly deps;
+    private readonly logger;
+    private status;
+    private controller;
+    /** Settles when the current background run ends (tests await it). */
+    private running;
+    /**
+     * @param deps - Cloud URL, identity, connect and the pairing client
+     */
+    constructor(deps: CloudDevicePairingDeps);
+    /**
+     * Current status (never contains the device code or tokens).
+     *
+     * @returns A copy of the status
+     */
+    getStatus(): CloudDevicePairingStatus;
+    /**
+     * Start a pairing, or return the one already pending.
+     *
+     * @param options - Optional device name override (defaults to the hostname)
+     * @returns Status with the link and code to show
+     * @throws Error when crewly-auth refuses or cannot be reached
+     */
+    start(options?: {
+        deviceName?: string;
+    }): Promise<CloudDevicePairingStatus>;
+    /**
+     * Stop waiting for the current pairing.
+     *
+     * @returns The status after cancelling
+     */
+    cancel(): CloudDevicePairingStatus;
+    /**
+     * Wait for the current background run to end (tests).
+     *
+     * @returns Resolves when no run is in flight
+     */
+    settled(): Promise<void>;
+    /**
+     * Background: wait for the owner, then connect.
+     *
+     * @param cloudUrl - Cloud API base URL
+     * @param started - The pairing
+     * @param controller - Aborts this run
+     */
+    private run;
+}
+//# sourceMappingURL=cloud-device-pairing.service.d.ts.map

package/dist/backend/backend/src/services/cloud/cloud-device-pairing.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-device-pairing.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-device-pairing.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EACL,uBAAuB,EAEvB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EAEzB,KAAK,sBAAsB,EAC5B,MAAM,kCAAkC,CAAC;AAK1C,8BAA8B;AAC9B,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;AAEtH,qCAAqC;AACrC,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,uBAAuB,CAAC;IAC/B,gDAAgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6CAA6C;IAC7C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oCAAoC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,yBAAyB;IACzB,QAAQ,EAAE,MAAM,MAAM,CAAC;IACvB,yCAAyC;IACzC,QAAQ,EAAE,MAAM,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,iEAAiE;IACjE,OAAO,EAAE,CAAC,WAAW,EAAE,wBAAwB,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9E,KAAK,CAAC,EAAE,OAAO,uBAAuB,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B;AAED;;GAEG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmD;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,MAAM,CAA+C;IAC7D,OAAO,CAAC,UAAU,CAAgC;IAClD,qEAAqE;IACrE,OAAO,CAAC,OAAO,CAA8B;IAE7C;;OAEG;gBACS,IAAI,EAAE,sBAAsB;IAYxC;;;;OAIG;IACH,SAAS,IAAI,wBAAwB;IAOrC;;;;;;OAMG;IACG,KAAK,CAAC,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA6BrF;;;;OAIG;IACH,MAAM,IAAI,wBAAwB;IAUlC;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9B;;;;;;OAMG;YACW,GAAG;CA4BlB"}

package/dist/backend/backend/src/services/cloud/cloud-device-pairing.service.js

@@ -0,0 +1,160 @@
+/**
+ * Cloud device pairing (backend side).
+ *
+ * Lets the web UI (`/setup`'s Cloud step, Settings → Cloud) — often opened on
+ * the owner's phone over the LAN or the relay — connect this machine to
+ * Crewly Cloud with no token handling at all:
+ *
+ * 1. `start()` asks crewly-auth for a pairing and returns the link + short
+ *    code to show (as a QR code too).
+ * 2. The service polls crewly-auth in the background. When the owner taps
+ *    Approve on crewlyai.com/cloud/pair, it receives the token pair and
+ *    connects by itself through the same path as `POST /api/cloud/connect`
+ *    (injected as `connect`).
+ * 3. The UI polls `status()` until it reads `connected`.
+ *
+ * One pairing at a time; `start()` while one is pending returns the same
+ * code, so reloading the page does not spawn new codes. The device code and
+ * the tokens never appear in `status()`.
+ *
+ * @module services/cloud/cloud-device-pairing.service
+ */
+import { CLOUD_DEVICE_PAIRING_CONSTANTS } from '../../../../config/constants.js';
+import { LoggerService } from '../core/logger.service.js';
+import { startCloudDevicePairing, waitForCloudDeviceApproval, } from './cloud-device-pairing.client.js';
+/** Milliseconds per second. */
+const MS_PER_S = 1000;
+/**
+ * Runs one device pairing at a time in the background.
+ */
+export class CloudDevicePairingService {
+    deps;
+    logger;
+    status = { state: 'idle' };
+    controller = null;
+    /** Settles when the current background run ends (tests await it). */
+    running = null;
+    /**
+     * @param deps - Cloud URL, identity, connect and the pairing client
+     */
+    constructor(deps) {
+        this.deps = {
+            cloudUrl: deps.cloudUrl,
+            identity: deps.identity,
+            connect: deps.connect,
+            start: deps.start ?? startCloudDevicePairing,
+            wait: deps.wait ?? waitForCloudDeviceApproval,
+            now: deps.now ?? (() => Date.now()),
+        };
+        this.logger = deps.logger ?? LoggerService.getInstance().createComponentLogger('CloudDevicePairing');
+    }
+    /**
+     * Current status (never contains the device code or tokens).
+     *
+     * @returns A copy of the status
+     */
+    getStatus() {
+        if (this.status.state === 'pending' && this.status.expiresAt && Date.parse(this.status.expiresAt) <= this.deps.now()) {
+            return { ...this.status, state: 'expired' };
+        }
+        return { ...this.status };
+    }
+    /**
+     * Start a pairing, or return the one already pending.
+     *
+     * @param options - Optional device name override (defaults to the hostname)
+     * @returns Status with the link and code to show
+     * @throws Error when crewly-auth refuses or cannot be reached
+     */
+    async start(options = {}) {
+        const current = this.getStatus();
+        if (current.state === 'pending')
+            return current;
+        const identity = await this.deps.identity();
+        const deviceName = options.deviceName?.trim() || identity.deviceName;
+        const cloudUrl = this.deps.cloudUrl();
+        const started = await this.deps.start(cloudUrl, {
+            deviceName,
+            deviceId: identity.deviceId,
+            purpose: CLOUD_DEVICE_PAIRING_CONSTANTS.PURPOSES.SETUP,
+        });
+        this.controller?.abort();
+        const controller = new AbortController();
+        this.controller = controller;
+        this.status = {
+            state: 'pending',
+            userCode: started.userCode,
+            verificationUrl: started.verificationUrl,
+            ...(started.verificationUri ? { verificationUri: started.verificationUri } : {}),
+            expiresAt: new Date(this.deps.now() + started.expiresIn * MS_PER_S).toISOString(),
+            deviceName,
+        };
+        this.logger.info('Cloud device pairing started', { userCode: started.userCode, deviceName });
+        this.running = this.run(cloudUrl, started, controller);
+        return this.getStatus();
+    }
+    /**
+     * Stop waiting for the current pairing.
+     *
+     * @returns The status after cancelling
+     */
+    cancel() {
+        if (this.status.state === 'pending') {
+            this.controller?.abort();
+            this.controller = null;
+            this.status = { state: 'cancelled' };
+            this.logger.info('Cloud device pairing cancelled');
+        }
+        return this.getStatus();
+    }
+    /**
+     * Wait for the current background run to end (tests).
+     *
+     * @returns Resolves when no run is in flight
+     */
+    async settled() {
+        await this.running;
+    }
+    /**
+     * Background: wait for the owner, then connect.
+     *
+     * @param cloudUrl - Cloud API base URL
+     * @param started - The pairing
+     * @param controller - Aborts this run
+     */
+    async run(cloudUrl, started, controller) {
+        const isCurrent = () => this.controller === controller && !controller.signal.aborted;
+        try {
+            const outcome = await this.deps.wait({ cloudUrl, start: started, signal: controller.signal });
+            if (!isCurrent())
+                return;
+            if (outcome.status !== 'approved') {
+                this.status = { ...this.status, state: outcome.status };
+                this.logger.info('Cloud device pairing ended', { state: outcome.status });
+                return;
+            }
+            const { tier } = await this.deps.connect(outcome.credentials);
+            if (!isCurrent())
+                return;
+            this.status = {
+                state: 'connected',
+                deviceName: this.status.deviceName,
+                tier,
+                ...(outcome.credentials.email ? { email: outcome.credentials.email } : {}),
+            };
+            this.logger.info('Connected to Crewly Cloud via device pairing', { tier });
+        }
+        catch (err) {
+            if (!isCurrent())
+                return;
+            const message = err instanceof Error ? err.message : String(err);
+            this.status = { state: 'error', error: message, deviceName: this.status.deviceName };
+            this.logger.warn('Cloud device pairing failed', { error: message });
+        }
+        finally {
+            if (this.controller === controller)
+                this.controller = null;
+        }
+    }
+}
+//# sourceMappingURL=cloud-device-pairing.service.js.map

package/dist/backend/backend/src/services/cloud/cloud-device-pairing.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-device-pairing.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-device-pairing.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EACL,uBAAuB,EACvB,0BAA0B,GAK3B,MAAM,kCAAkC,CAAC;AAE1C,+BAA+B;AAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC;AAwCtB;;GAEG;AACH,MAAM,OAAO,yBAAyB;IACnB,IAAI,CAAmD;IACvD,MAAM,CAAkB;IACjC,MAAM,GAA6B,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACrD,UAAU,GAA2B,IAAI,CAAC;IAClD,qEAAqE;IAC7D,OAAO,GAAyB,IAAI,CAAC;IAE7C;;OAEG;IACH,YAAY,IAA4B;QACtC,IAAI,CAAC,IAAI,GAAG;YACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,uBAAuB;YAC5C,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,0BAA0B;YAC7C,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;SACpC,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;IACvG,CAAC;IAED;;;;OAIG;IACH,SAAS;QACP,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACrH,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,KAAK,CAAC,UAAmC,EAAE;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAEhD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC9C,UAAU;YACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,OAAO,EAAE,8BAA8B,CAAC,QAAQ,CAAC,KAAK;SACvD,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG;YACZ,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,eAAe,EAAE,OAAO,CAAC,eAAe;YACxC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE;YACjF,UAAU;SACX,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,MAAM;QACJ,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,GAAG,CAAC,QAAgB,EAAE,OAAiC,EAAE,UAA2B;QAChG,MAAM,SAAS,GAAG,GAAY,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9F,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,SAAS,EAAE;gBAAE,OAAO;YACzB,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAClC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;gBACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1E,OAAO;YACT,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC9D,IAAI,CAAC,SAAS,EAAE;gBAAE,OAAO;YACzB,IAAI,CAAC,MAAM,GAAG;gBACZ,KAAK,EAAE,WAAW;gBAClB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;gBAClC,IAAI;gBACJ,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,EAAE;gBAAE,OAAO;YACzB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACrF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU;gBAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QAC7D,CAAC;IACH,CAAC;CACF"}