forkit-connect 0.1.22 → 0.1.24

package/README.md

@@ -6,7 +6,8 @@ Naming convention:
 
 - Product name: Forkit Connect
 - Command name: `forkit-connect`
-- Package name: `@forkit/connect`
+- Published package name: `forkit-connect`
+- Workspace dependency alias: `@forkit/connect`
 
 ## Install Surface
 
@@ -60,10 +61,13 @@ If `~/.local/bin` is already on your `PATH`, the command is immediately accessib
 - `forkit-connect login` — link this device to Forkit.dev with the device flow
 - `forkit-connect scan` — discover local runtimes and AI models
 - `forkit-connect inbox` — review the Smart Registration Inbox
+- `forkit-connect connect <modelNameOrDiscoveryHash>` — prepare or sync a passport draft for a detected model
 - `forkit-connect runtime register` — register or reuse the current repo/worktree as a governed runtime
 - `forkit-connect runtime observe --gaid <gaid>` — emit a repo-scoped runtime journal for the current runtime target
 - `forkit-connect status` — show public Connect readiness status
 - `forkit-connect changes` — view collected local evidence, runtime signal history, and pending sync items
+- `forkit-connect doctor` — run local environment, secure-storage, backend-session, and account checks
+- `forkit-connect update-check` — inspect release metadata without enabling auto-update
 - `forkit-connect start` — start the local daemon loop
 - `forkit-connect stop` — stop the background daemon without deleting local state
 - `forkit-connect uninstall` — preview a cautious uninstall plan and write local backup logs
@@ -72,7 +76,7 @@ If `~/.local/bin` is already on your `PATH`, the command is immediately accessib
 
 ## Advanced Commands
 
-Advanced flows remain available under the same binary, including `connect`, `review`, `daemon`, `config`, `pulse`, `c2`, `train`, `agent`, notification utilities, and runtime target management.
+Advanced flows remain available under the same binary, including `review`, `daemon`, `config`, `pulse`, `c2`, `train`, `agent`, notification utilities, and runtime target management.
 
 Runtime registration notes:
 
@@ -117,7 +121,7 @@ Then install the generated tarball into a clean directory:
 mkdir -p /tmp/forkit-connect-smoke
 cd /tmp/forkit-connect-smoke
 npm init -y
-npm install /absolute/path/to/forkit-connect-0.1.1.tgz
+npm install /absolute/path/to/forkit-connect-0.1.24.tgz
 npx forkit-connect --help
 npx forkit-connect status
 npx forkit-connect inbox

package/dist/cli.js

@@ -253,10 +253,10 @@ function printDeviceLoginInstructions(start) {
 }
 function printSessionExportFallback(token) {
     void token;
-    console.log('[forkit-connect] Approval succeeded, but secure credential storage is unavailable in this Linux session.');
-    console.log('[forkit-connect] Forkit Connect can keep using this approved session in the current interactive run.');
-    console.log('[forkit-connect] For persistent login, install libsecret-tools and run forkit-connect login again.');
-    console.log('[forkit-connect] Headless automation may pass FORKIT_CONNECT_SESSION_REF explicitly, but Connect will not print session tokens.');
+    console.log('[forkit-connect] Approval succeeded, but secure credential storage is unavailable or timed out on this machine.');
+    console.log('[forkit-connect] Forkit Connect will not print session tokens. Persistent login requires working secure storage.');
+    console.log('[forkit-connect] macOS: unlock Keychain and run forkit-connect login again. Linux: install libsecret-tools and run inside a DBus user session.');
+    console.log('[forkit-connect] Headless automation may pass FORKIT_CONNECT_SESSION_REF explicitly from a secret manager.');
 }
 function hasLinuxGuiSession() {
     if (process.platform !== 'linux') {
@@ -935,7 +935,7 @@ function formatCliScopeLabel(workspaceId, projectId) {
     if (workspace) {
         return `${shortId(workspace)} / project needed`;
     }
-    return 'solo / no workspace';
+    return 'personal device / workspace not selected';
 }
 function summarizeReviewQueueCounts(values) {
     const parts = [
@@ -2637,7 +2637,12 @@ async function run() {
         const overview = withSmartInboxSnapshotCounts(service.getConnectStatusOverview({ includeInbox: false }));
         const localScopeCached = Boolean(String(overview.workspace_id || '').trim() || String(overview.project_id || '').trim());
         const displayOverview = accountTrusted
-            ? overview
+            ? {
+                ...overview,
+                lifecycle_note: !localScopeCached && overview.device_paired
+                    ? 'Account connected. Personal scanning works; select workspace/project later for C2.'
+                    : overview.lifecycle_note,
+            }
             : {
                 ...overview,
                 workspace_id: null,
@@ -2767,7 +2772,8 @@ async function run() {
         }
         console.log(`[forkit-connect] Queue processed=${result.sync.processed} succeeded=${result.sync.succeeded} failed=${result.sync.failed}`);
         if (!result.ok) {
-            process.exitCode = 2;
+            console.log('[forkit-connect] No runtime passport was created. Start Ollama, LM Studio, an OpenAI-compatible local server, or add local model directories, then rerun scan.');
+            process.exitCode = 0;
         }
     };
     const runPublicUpdateCheck = async () => {

package/dist/v1/credential-store.js

@@ -20,6 +20,7 @@ exports.ConnectCredentialStoreError = ConnectCredentialStoreError;
 const SERVICE_BASE_NAME = 'ForkitConnect';
 const LEGACY_SERVICE_NAME = SERVICE_BASE_NAME;
 const LINUX_SECRET_TOOL_TIMEOUT_MS = 1200;
+const MACOS_SECURITY_TIMEOUT_MS = Number(process.env.FORKIT_CONNECT_MACOS_SECURITY_TIMEOUT_MS || 15000);
 function nowIso() {
     return new Date().toISOString();
 }
@@ -187,6 +188,7 @@ class MacOsKeychainBackend {
             '-w',
         ], {
             encoding: 'utf8',
+            timeout: MACOS_SECURITY_TIMEOUT_MS,
         });
         if (result.error) {
             throw new ConnectCredentialStoreError('secure_storage_read_failed', `Forkit Connect could not read secure credentials from macOS Keychain: ${result.error.message}`);
@@ -211,6 +213,7 @@ class MacOsKeychainBackend {
             value,
         ], {
             encoding: 'utf8',
+            timeout: MACOS_SECURITY_TIMEOUT_MS,
         });
         if (result.error) {
             throw new ConnectCredentialStoreError('secure_storage_write_failed', `Forkit Connect could not write secure credentials to macOS Keychain: ${result.error.message}`);
@@ -229,6 +232,7 @@ class MacOsKeychainBackend {
             account,
         ], {
             encoding: 'utf8',
+            timeout: MACOS_SECURITY_TIMEOUT_MS,
         });
         if (result.error) {
             throw new ConnectCredentialStoreError('secure_storage_delete_failed', `Forkit Connect could not remove secure credentials from macOS Keychain: ${result.error.message}`);
@@ -241,6 +245,7 @@ class MacOsKeychainBackend {
     getStatus() {
         const result = (0, node_child_process_1.spawnSync)('security', ['list-keychains'], {
             encoding: 'utf8',
+            timeout: MACOS_SECURITY_TIMEOUT_MS,
         });
         if (result.error) {
             return {

package/dist/v1/native-shell.d.ts

@@ -0,0 +1,23 @@
+import { type ReleaseCheckResult } from './update';
+export interface NativeShellStatus {
+    supported: boolean;
+    installed: boolean;
+    platform: 'macos' | 'windows' | 'linux';
+    installationPath: string | null;
+    trayAvailable: boolean;
+    startupAvailable: boolean;
+    directInstallerAvailable: boolean;
+    downloadUrl: string | null;
+    releaseNotesUrl: string | null;
+    note: string;
+}
+export interface NativeShellOpenResult {
+    ok: boolean;
+    opened: 'installed' | 'download';
+    installationPath: string | null;
+    downloadUrl: string | null;
+    message: string;
+}
+export declare function getNativeShellStatus(updateCheck?: ReleaseCheckResult): Promise<NativeShellStatus>;
+export declare function openNativeShell(updateCheck?: ReleaseCheckResult): Promise<NativeShellOpenResult>;
+//# sourceMappingURL=native-shell.d.ts.map

package/dist/v1/native-shell.js

@@ -0,0 +1,170 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getNativeShellStatus = getNativeShellStatus;
+exports.openNativeShell = openNativeShell;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_child_process_1 = require("node:child_process");
+const update_1 = require("./update");
+const CONNECT_DESKTOP_FALLBACK_URL = 'https://www.forkit.dev/connect';
+function normalizePlatform() {
+    if (process.platform === 'darwin')
+        return 'macos';
+    if (process.platform === 'win32')
+        return 'windows';
+    return 'linux';
+}
+function getCandidatePaths(platform) {
+    const home = node_os_1.default.homedir();
+    if (platform === 'macos') {
+        return [
+            '/Applications/Forkit Connect.app',
+            node_path_1.default.join(home, 'Applications', 'Forkit Connect.app'),
+        ];
+    }
+    if (platform === 'windows') {
+        const localAppData = process.env.LOCALAPPDATA || node_path_1.default.join(home, 'AppData', 'Local');
+        const programFiles = process.env.ProgramFiles || 'C:\\Program Files';
+        const programFilesX86 = process.env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)';
+        return [
+            node_path_1.default.join(localAppData, 'Programs', 'Forkit Connect', 'Forkit Connect.exe'),
+            node_path_1.default.join(programFiles, 'Forkit Connect', 'Forkit Connect.exe'),
+            node_path_1.default.join(programFilesX86, 'Forkit Connect', 'Forkit Connect.exe'),
+        ];
+    }
+    return [
+        node_path_1.default.join(home, '.local', 'bin', 'forkit-connect-desktop'),
+        node_path_1.default.join(home, '.local', 'share', 'Forkit Connect', 'Forkit Connect.AppImage'),
+        '/usr/local/bin/forkit-connect-desktop',
+        '/opt/Forkit Connect/forkit-connect-desktop',
+    ];
+}
+function findInstalledPath(platform) {
+    for (const candidate of getCandidatePaths(platform)) {
+        try {
+            if (node_fs_1.default.existsSync(candidate)) {
+                return candidate;
+            }
+        }
+        catch {
+            continue;
+        }
+    }
+    return null;
+}
+function parseVersion(version) {
+    const cleaned = String(version || '').trim().replace(/^v/i, '').split('-')[0] || '0.0.0';
+    const [major, minor, patch] = cleaned.split('.').map((value) => Number.parseInt(value || '0', 10));
+    return [major || 0, minor || 0, patch || 0];
+}
+function compareVersions(left, right) {
+    const [leftMajor, leftMinor, leftPatch] = parseVersion(left);
+    const [rightMajor, rightMinor, rightPatch] = parseVersion(right);
+    if (leftMajor !== rightMajor)
+        return leftMajor - rightMajor;
+    if (leftMinor !== rightMinor)
+        return leftMinor - rightMinor;
+    return leftPatch - rightPatch;
+}
+function buildDownloadUrl(updateCheck) {
+    if (!updateCheck.ok) {
+        return CONNECT_DESKTOP_FALLBACK_URL;
+    }
+    if (compareVersions(updateCheck.manifest.latestVersion, updateCheck.currentVersion) < 0) {
+        return CONNECT_DESKTOP_FALLBACK_URL;
+    }
+    return updateCheck.downloadUrl || updateCheck.manifest.releaseNotesUrl || CONNECT_DESKTOP_FALLBACK_URL;
+}
+function hasDirectInstaller(updateCheck) {
+    if (!updateCheck.ok)
+        return false;
+    if (compareVersions(updateCheck.manifest.latestVersion, updateCheck.currentVersion) < 0) {
+        return false;
+    }
+    return Boolean(updateCheck.downloadUrl);
+}
+function isInstallerOnlyRelease(updateCheck) {
+    if (!updateCheck.ok)
+        return false;
+    const manifest = updateCheck.manifest;
+    const integrity = manifest.integrity;
+    if (!integrity || typeof integrity !== 'object')
+        return false;
+    return integrity.installerOnly === true;
+}
+async function getNativeShellStatus(updateCheck) {
+    const platform = normalizePlatform();
+    const installationPath = findInstalledPath(platform);
+    const installed = Boolean(installationPath);
+    const resolvedUpdateCheck = updateCheck ?? await (0, update_1.checkForUpdates)();
+    const directInstallerAvailable = hasDirectInstaller(resolvedUpdateCheck);
+    const installerOnlyRelease = isInstallerOnlyRelease(resolvedUpdateCheck);
+    const downloadUrl = buildDownloadUrl(resolvedUpdateCheck);
+    const releaseNotesUrl = resolvedUpdateCheck.ok ? resolvedUpdateCheck.manifest.releaseNotesUrl : CONNECT_DESKTOP_FALLBACK_URL;
+    return {
+        supported: true,
+        installed,
+        platform,
+        installationPath,
+        trayAvailable: installed,
+        startupAvailable: installed,
+        directInstallerAvailable,
+        downloadUrl,
+        releaseNotesUrl,
+        note: installed
+            ? 'Desktop app installed. Tray or menu-bar controls and launch at sign-in are handled there.'
+            : installerOnlyRelease
+                ? 'Install the desktop app to get tray or menu-bar controls and launch at sign-in. In-app updates are not published for this release yet.'
+                : directInstallerAvailable
+                    ? 'Install the desktop app to get tray or menu-bar controls, launch at sign-in, and in-app updates.'
+                    : 'The desktop app installer is not published for this platform yet. Use the Connect downloads page for the current release.',
+    };
+}
+function spawnDetached(command, args, cwd) {
+    const child = (0, node_child_process_1.spawn)(command, args, {
+        detached: true,
+        stdio: 'ignore',
+        windowsHide: true,
+        ...(cwd ? { cwd } : {}),
+    });
+    child.unref();
+}
+function openInstalledShell(status) {
+    if (!status.installationPath) {
+        throw new Error('native_shell_missing');
+    }
+    if (status.platform === 'macos') {
+        spawnDetached('open', [status.installationPath]);
+        return;
+    }
+    if (status.platform === 'windows') {
+        spawnDetached(status.installationPath, [], node_path_1.default.dirname(status.installationPath));
+        return;
+    }
+    spawnDetached(status.installationPath, [], node_path_1.default.dirname(status.installationPath));
+}
+async function openNativeShell(updateCheck) {
+    const status = await getNativeShellStatus(updateCheck);
+    if (status.installed) {
+        openInstalledShell(status);
+        return {
+            ok: true,
+            opened: 'installed',
+            installationPath: status.installationPath,
+            downloadUrl: status.downloadUrl,
+            message: 'Opening the native Forkit Connect shell.',
+        };
+    }
+    return {
+        ok: false,
+        opened: 'download',
+        installationPath: null,
+        downloadUrl: status.downloadUrl,
+        message: 'Install the Forkit Connect desktop app to enable tray or menu-bar controls and launch at sign-in.',
+    };
+}
+//# sourceMappingURL=native-shell.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "forkit-connect",
-  "version": "0.1.22",
+  "version": "0.1.24",
   "description": "Forkit Connect Local Engine - The Global AI Governance Fabric",
   "license": "MIT",
   "main": "dist/index.js",