habi-agent 0.1.0

package/dist/cli.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+/**
+ * HABI Agent CLI
+ * Usage:
+ *   habi-agent start     — start the local identity daemon
+ *   habi-agent status    — check if agent is running
+ *   habi-agent identity  — print hardware identity
+ *   habi-agent init      — generate a Project Context File
+ *   habi-agent verify    — verify current session
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG"}

package/dist/cli.js

@@ -0,0 +1,295 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * HABI Agent CLI
+ * Usage:
+ *   habi-agent start     — start the local identity daemon
+ *   habi-agent status    — check if agent is running
+ *   habi-agent identity  — print hardware identity
+ *   habi-agent init      — generate a Project Context File
+ *   habi-agent verify    — verify current session
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const server_1 = require("./server");
+const hardware_1 = require("./hardware");
+const context_1 = require("./context");
+const cloud_1 = require("./cloud");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const http = __importStar(require("http"));
+const os = __importStar(require("os"));
+const AGENT_PORT = 7432;
+const command = process.argv[2] || 'start';
+// ── Utility: ping the running agent ────────────────────────────────────────
+function pingAgent(p = '/health') {
+    return new Promise((resolve, reject) => {
+        const req = http.get({ host: '127.0.0.1', port: AGENT_PORT, path: p }, (res) => {
+            let body = '';
+            res.on('data', (chunk) => body += chunk.toString());
+            res.on('end', () => {
+                try {
+                    resolve(JSON.parse(body));
+                }
+                catch {
+                    reject(new Error('Invalid JSON from agent'));
+                }
+            });
+        });
+        req.on('error', reject);
+        req.setTimeout(2000, () => { req.destroy(); reject(new Error('timeout')); });
+    });
+}
+async function cmdStart() {
+    console.log('\n┌─────────────────────────────────────────────┐');
+    console.log('│  HABI Local Identity Agent v0.1.0           │');
+    console.log('│  On Spot Solutions LLC — hardware-first AI  │');
+    console.log('└─────────────────────────────────────────────┘\n');
+    // Check if already running
+    try {
+        await pingAgent();
+        console.log('⚠  HABI agent is already running on port 7432.');
+        console.log('   Run: habi-agent status  to check it.');
+        process.exit(0);
+    }
+    catch {
+        // Not running — proceed
+    }
+    const server = new server_1.HabiLocalServer();
+    // Graceful shutdown
+    const shutdown = () => {
+        console.log('\n[HABI] Shutting down agent...');
+        server.stop();
+        process.exit(0);
+    };
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+    try {
+        await server.start();
+        // ── Cloud registration ──────────────────────────────────────────────
+        const hw = (0, hardware_1.readHardwareIdentity)();
+        const habiKey = process.env.HABI_KEY || process.env.HABI_OWNER_EMAIL || "";
+        const friendlyName = process.env.HABI_DEVICE_NAME || os.hostname();
+        if (!habiKey) {
+            console.log('[HABI Cloud] HABI_OWNER_EMAIL not set — running in local-only mode.');
+            console.log('[HABI Cloud] Set export HABI_OWNER_EMAIL=you@example.com to enable cloud registration.\n');
+        }
+        else {
+            console.log(`[HABI Cloud] Registering "${friendlyName}" via HABI key...`);
+            const cloudState = await (0, cloud_1.registerDevice)({
+                friendlyName,
+                hardwareFingerprint: hw.fingerprint,
+                fingerprintType: hw.type,
+                agentVersion: '0.1.0',
+                osPlatform: os.platform(),
+            });
+            if (cloudState) {
+                console.log(`[HABI Cloud] ✓ Device registered — ID: ${cloudState.deviceId.slice(0, 8)}...`);
+                console.log(`[HABI Cloud] ✓ Session token active until ${new Date(cloudState.sessionTokenExpiresAt).toLocaleTimeString()}\n`);
+                // ── Heartbeat loop every 30s ──────────────────────────────────
+                let currentToken = cloudState.sessionToken;
+                setInterval(async () => {
+                    const hb = await (0, cloud_1.sendHeartbeat)({
+                        deviceId: cloudState.deviceId,
+                        sessionToken: currentToken,
+                        hardwareFingerprint: hw.fingerprint,
+                    });
+                    if (hb) {
+                        currentToken = hb.sessionToken;
+                        if (hb.pendingJobs && hb.pendingJobs.length > 0) {
+                            console.log(`[HABI Cloud] ${hb.pendingJobs.length} pending job(s) received from dispatch queue.`);
+                            // Job execution handled in Phase 2 — log for now
+                            for (const job of hb.pendingJobs) {
+                                console.log(`[HABI Cloud]   Job ${job.id.slice(0, 8)}: ${JSON.stringify(job.payload).slice(0, 80)}`);
+                            }
+                        }
+                    }
+                }, 30000);
+            }
+        }
+        // Keep alive
+        await new Promise(() => { });
+    }
+    catch (err) {
+        console.error(`\n✗ HABI agent failed to start:\n  ${err}\n`);
+        process.exit(1);
+    }
+}
+async function cmdStatus() {
+    try {
+        const health = await pingAgent('/health');
+        console.log('\n✓ HABI agent is RUNNING');
+        console.log(`  Port:    ${AGENT_PORT}`);
+        console.log(`  Version: ${health.version || 'unknown'}`);
+        const identity = await pingAgent('/identity');
+        const hw = identity.hardware;
+        const sess = identity.session;
+        if (hw) {
+            console.log(`  Hardware: ${hw.fingerprint} (${hw.type})`);
+            console.log(`  Platform: ${hw.platform} / ${hw.hostname}`);
+        }
+        if (sess) {
+            const expiresAt = new Date(sess.expiresAt);
+            const active = sess.active ? '✓ ACTIVE' : '✗ EXPIRED';
+            console.log(`  Session:  ${sess.fingerprint?.slice(0, 16)}...`);
+            console.log(`  Status:   ${active} (expires ${expiresAt.toLocaleTimeString()})`);
+        }
+        console.log();
+    }
+    catch {
+        console.log('\n✗ HABI agent is NOT RUNNING');
+        console.log('  Start it with: npx ts-node src/cli.ts start\n');
+        process.exit(1);
+    }
+}
+async function cmdIdentity() {
+    try {
+        const hw = (0, hardware_1.readHardwareIdentity)();
+        const ctx = (() => {
+            try {
+                const p = (0, context_1.findContextFile)();
+                return p ? (0, context_1.loadContext)(p) : null;
+            }
+            catch {
+                return null;
+            }
+        })();
+        const contextHash = ctx?.contextHash ?? (0, hardware_1.sha256)('no-context');
+        const fingerprint = (0, hardware_1.generateSessionFingerprint)(hw.fingerprint, contextHash, Date.now());
+        console.log('\n┌─ HABI Hardware Identity ──────────────────────────────────┐');
+        console.log(`│  Hardware ID:  ${hw.fingerprint}`);
+        console.log(`│  Type:         ${hw.type}`);
+        console.log(`│  Interface:    ${hw.iface}`);
+        console.log(`│  Platform:     ${hw.platform}`);
+        console.log(`│  Hostname:     ${hw.hostname}`);
+        console.log(`│  Context:      ${ctx ? ctx.context.project : 'none loaded'}`);
+        console.log(`│  Context Hash: ${ctx ? ctx.contextHash.slice(0, 24) + '...' : 'n/a'}`);
+        console.log(`│  Session FP:   ${fingerprint.slice(0, 24)}...`);
+        console.log('└────────────────────────────────────────────────────────────┘\n');
+    }
+    catch (err) {
+        console.error(`\n✗ Could not read hardware identity:\n  ${err}\n`);
+        process.exit(1);
+    }
+}
+async function cmdInit() {
+    const hw = (0, hardware_1.readHardwareIdentity)();
+    const projectName = process.argv[3] || path.basename(process.cwd());
+    const contextContent = {
+        project: projectName,
+        version: '1.0.0',
+        owner: process.env.HABI_OWNER_EMAIL || process.env.USER || process.env.USERNAME || 'owner',
+        allowedMachines: [hw.fingerprint],
+        allowedOperations: {
+            paths: [`${process.cwd()}/**`],
+            cloudAccounts: [],
+            databases: [],
+            repos: [],
+        },
+        deniedOperations: [
+            'DROP TABLE',
+            'DROP DATABASE',
+            'rm -rf /',
+            'DELETE FROM audit_log',
+            'truncate audit_log',
+        ],
+    };
+    const contextHash = (0, hardware_1.sha256)(JSON.stringify(contextContent, null, 2));
+    const fullContext = { ...contextContent, contextHash };
+    const outPath = path.join(process.cwd(), 'habi-context.json');
+    if (fs.existsSync(outPath)) {
+        console.log(`\n⚠  Context file already exists: ${outPath}`);
+        console.log('   Delete it first if you want to regenerate.\n');
+        process.exit(1);
+    }
+    fs.writeFileSync(outPath, JSON.stringify(fullContext, null, 2), 'utf8');
+    console.log('\n✓ HABI Project Context File created');
+    console.log(`  File:     ${outPath}`);
+    console.log(`  Project:  ${projectName}`);
+    console.log(`  Machine:  ${hw.fingerprint} (${hw.type})`);
+    console.log(`  Hash:     ${contextHash.slice(0, 24)}...`);
+    console.log('\n⚠  IMPORTANT: Add habi-context.json to your .gitignore');
+    console.log('   This file contains your machine identity — do not commit it.\n');
+}
+async function cmdVerify() {
+    try {
+        const data = await pingAgent('/verify');
+        if (data.verified) {
+            console.log('\n✓ Session VERIFIED');
+            console.log(`  Hardware ID: ${data.hardwareId}`);
+            console.log(`  Fingerprint: ${data.fingerprint?.slice(0, 24)}...`);
+            console.log(`  Expires in:  ${data.expiresIn}s\n`);
+        }
+        else {
+            console.log('\n✗ Session NOT VERIFIED');
+            console.log(`  Reason: ${data.reason || data.error}\n`);
+            process.exit(1);
+        }
+    }
+    catch {
+        console.log('\n✗ HABI agent not running. Start with: npx ts-node src/cli.ts start\n');
+        process.exit(1);
+    }
+}
+// ── Dispatch ────────────────────────────────────────────────────────────────
+(async () => {
+    switch (command) {
+        case 'start':
+            await cmdStart();
+            break;
+        case 'status':
+            await cmdStatus();
+            break;
+        case 'identity':
+            await cmdIdentity();
+            break;
+        case 'init':
+            await cmdInit();
+            break;
+        case 'verify':
+            await cmdVerify();
+            break;
+        default:
+            console.log(`\nHABI Agent v0.1.0 — On Spot Solutions LLC`);
+            console.log(`Usage: npx ts-node src/cli.ts <command>`);
+            console.log(`\nCommands:`);
+            console.log(`  start     Start the local identity daemon on port 7432`);
+            console.log(`  status    Show agent status and hardware identity`);
+            console.log(`  identity  Print hardware fingerprint`);
+            console.log(`  init      Generate a Project Context File for this directory`);
+            console.log(`  verify    Verify the current session\n`);
+    }
+})();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AACA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,qCAA2C;AAC3C,yCAAsF;AACtF,uCAAyD;AACzD,mCAAwD;AACxD,uCAAyB;AACzB,2CAA6B;AAC7B,2CAA6B;AAC7B,uCAAyB;AAEzB,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;AAE3C,8EAA8E;AAC9E,SAAS,SAAS,CAAC,IAAY,SAAS;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,EAChD,CAAC,GAAG,EAAE,EAAE;YACN,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAClC,MAAM,CAAC;oBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;gBAAC,CAAC;YACzD,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IAEjE,2BAA2B;IAC3B,IAAI,CAAC;QACH,MAAM,SAAS,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,wBAAe,EAAE,CAAC;IAErC,oBAAoB;IACpB,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEhC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAErB,uEAAuE;QACvE,MAAM,EAAE,GAAG,IAAA,+BAAoB,GAAE,CAAC;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAC3E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;QAEnE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;YACnF,OAAO,CAAC,GAAG,CAAC,0FAA0F,CAAC,CAAC;QAC1G,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,6BAA6B,YAAY,mBAAmB,CAAC,CAAC;YAC1E,MAAM,UAAU,GAAG,MAAM,IAAA,sBAAc,EAAC;gBACtC,YAAY;gBACZ,mBAAmB,EAAE,EAAE,CAAC,WAAW;gBACnC,eAAe,EAAE,EAAE,CAAC,IAAI;gBACxB,YAAY,EAAE,OAAO;gBACrB,UAAU,EAAE,EAAE,CAAC,QAAQ,EAAE;aAC1B,CAAC,CAAC;YAEH,IAAI,UAAU,EAAE,CAAC;gBACf,OAAO,CAAC,GAAG,CAAC,0CAA0C,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC5F,OAAO,CAAC,GAAG,CAAC,6CAA6C,IAAI,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;gBAE9H,iEAAiE;gBACjE,IAAI,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC;gBAC3C,WAAW,CAAC,KAAK,IAAI,EAAE;oBACrB,MAAM,EAAE,GAAG,MAAM,IAAA,qBAAa,EAAC;wBAC7B,QAAQ,EAAE,UAAU,CAAC,QAAQ;wBAC7B,YAAY,EAAE,YAAY;wBAC1B,mBAAmB,EAAE,EAAE,CAAC,WAAW;qBACpC,CAAC,CAAC;oBACH,IAAI,EAAE,EAAE,CAAC;wBACP,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC;wBAC/B,IAAI,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BAChD,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,WAAW,CAAC,MAAM,+CAA+C,CAAC,CAAC;4BAClG,iDAAiD;4BACjD,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gCACjC,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;4BACvG,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC,EAAE,KAAK,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;QAED,aAAa;QACb,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,GAAG,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAA4B,CAAC;QACzE,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAmC,CAAC;QACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAkC,CAAC;QACzD,IAAI,EAAE,EAAE,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,WAAW,KAAK,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,QAAQ,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAmB,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,eAAgB,IAAI,CAAC,WAAsB,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,aAAa,SAAS,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAA,+BAAoB,GAAE,CAAC;QAClC,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE;YAChB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAA,yBAAe,GAAE,CAAC;gBAC5B,OAAO,CAAC,CAAC,CAAC,CAAC,IAAA,qBAAW,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;QAC1B,CAAC,CAAC,EAAE,CAAC;QAEL,MAAM,WAAW,GAAG,GAAG,EAAE,WAAW,IAAI,IAAA,iBAAM,EAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,IAAA,qCAA0B,EAAC,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAExF,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,GAAG,CAAC,oBAAoB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,4CAA4C,GAAG,IAAI,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,MAAM,EAAE,GAAG,IAAA,+BAAoB,GAAE,CAAC;IAClC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEpE,MAAM,cAAc,GAAG;QACrB,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO;QAC1F,eAAe,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC;QACjC,iBAAiB,EAAE;YACjB,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC;YAC9B,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,EAAE;YACb,KAAK,EAAE,EAAE;SACV;QACD,gBAAgB,EAAE;YAChB,YAAY;YACZ,eAAe;YACf,UAAU;YACV,uBAAuB;YACvB,oBAAoB;SACrB;KACF,CAAC;IAEF,MAAM,WAAW,GAAG,IAAA,iBAAM,EAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,EAAE,GAAG,cAAc,EAAE,WAAW,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAE9D,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAExE,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,WAAW,KAAK,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,eAAe,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,SAAS,CAA4B,CAAC;QACnE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,kBAAmB,IAAI,CAAC,WAAsB,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YAC/E,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,CAAC,KAAK,IAAI,EAAE;IACV,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YAAK,MAAM,QAAQ,EAAE,CAAC;YAAI,MAAM;QAC5C,KAAK,QAAQ;YAAI,MAAM,SAAS,EAAE,CAAC;YAAG,MAAM;QAC5C,KAAK,UAAU;YAAE,MAAM,WAAW,EAAE,CAAC;YAAC,MAAM;QAC5C,KAAK,MAAM;YAAM,MAAM,OAAO,EAAE,CAAC;YAAK,MAAM;QAC5C,KAAK,QAAQ;YAAI,MAAM,SAAS,EAAE,CAAC;YAAG,MAAM;QAC5C;YACE,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC,CAAC,EAAE,CAAC"}

package/dist/cloud.d.ts

@@ -0,0 +1,50 @@
+/**
+ * HABI Cloud Sync
+ * Authenticates via HABI_KEY, registers device, and sends heartbeats.
+ */
+interface HeartbeatResponse {
+    ok: boolean;
+    sessionToken?: string;
+    sessionTokenExpiresAt?: string;
+    tokenRotated?: boolean;
+    pendingJobs?: Array<{
+        id: string;
+        payload: Record<string, unknown>;
+        payload_hash: string;
+    }>;
+    error?: string;
+}
+interface JobResultPayload {
+    jobId: string;
+    deviceId: string;
+    sessionToken: string;
+    status: 'COMPLETED' | 'FAILED';
+    result?: Record<string, unknown>;
+    error?: string;
+    durationMs?: number;
+}
+export interface CloudState {
+    deviceId: string;
+    ownerId: string;
+    sessionToken: string;
+    sessionTokenExpiresAt: string;
+    registered: boolean;
+}
+export declare function registerDevice(params: {
+    friendlyName: string;
+    hardwareFingerprint: string;
+    fingerprintType: 'mac' | 'ipv6_link_local';
+    agentVersion?: string;
+    osPlatform?: string;
+}): Promise<CloudState | null>;
+export declare function sendHeartbeat(params: {
+    deviceId: string;
+    sessionToken: string;
+    hardwareFingerprint: string;
+}): Promise<{
+    sessionToken: string;
+    pendingJobs: HeartbeatResponse['pendingJobs'];
+} | null>;
+export declare function reportJobResult(payload: JobResultPayload): Promise<void>;
+export {};
+//# sourceMappingURL=cloud.d.ts.map

package/dist/cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAoBH,UAAU,iBAAiB;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,gBAAgB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAyCD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,KAAK,GAAG,iBAAiB,CAAC;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAgC7B;AAED,wBAAsB,aAAa,CAAC,MAAM,EAAE;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,GAAG,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,iBAAiB,CAAC,aAAa,CAAC,CAAA;CAAE,GAAG,IAAI,CAAC,CAoB1F;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAS9E"}

package/dist/cloud.js

@@ -0,0 +1,147 @@
+"use strict";
+/**
+ * HABI Cloud Sync
+ * Authenticates via HABI_KEY, registers device, and sends heartbeats.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerDevice = registerDevice;
+exports.sendHeartbeat = sendHeartbeat;
+exports.reportJobResult = reportJobResult;
+const https = __importStar(require("https"));
+const HABI_API = process.env.HABI_API_URL ||
+    'https://dokcixjitwihtbdlkbdb.supabase.co/functions/v1';
+const HABI_KEY = process.env.HABI_KEY || '';
+const OWNER_EMAIL = process.env.HABI_OWNER_EMAIL || '';
+function post(path, body) {
+    return new Promise((resolve, reject) => {
+        const bodyStr = JSON.stringify(body);
+        const url = new URL(`${HABI_API}/${path}`);
+        const headers = {
+            'Content-Type': 'application/json',
+            'Content-Length': String(Buffer.byteLength(bodyStr)),
+        };
+        // Pass HABI_KEY in header if set
+        if (HABI_KEY) {
+            headers['x-habi-key'] = HABI_KEY;
+        }
+        const options = {
+            hostname: url.hostname,
+            port: 443,
+            path: url.pathname,
+            method: 'POST',
+            headers,
+        };
+        const req = https.request(options, (res) => {
+            let data = '';
+            res.on('data', (chunk) => data += chunk.toString());
+            res.on('end', () => {
+                try {
+                    resolve(JSON.parse(data));
+                }
+                catch {
+                    reject(new Error(`Parse error: ${data.slice(0, 100)}`));
+                }
+            });
+        });
+        req.on('error', reject);
+        req.setTimeout(10000, () => { req.destroy(); reject(new Error('Cloud sync timeout')); });
+        req.write(bodyStr);
+        req.end();
+    });
+}
+async function registerDevice(params) {
+    if (!HABI_KEY && !OWNER_EMAIL) {
+        console.warn('[HABI] No HABI_KEY or HABI_OWNER_EMAIL set — running offline.');
+        return null;
+    }
+    try {
+        const body = { ...params };
+        if (HABI_KEY)
+            body.habiKey = HABI_KEY;
+        if (OWNER_EMAIL)
+            body.ownerEmail = OWNER_EMAIL;
+        const res = await post('device-register', body);
+        if (!res.ok || !res.deviceId) {
+            console.error(`[HABI] Registration failed: ${res.error}`);
+            return null;
+        }
+        console.log(`[HABI] ✓ Device registered: ${params.friendlyName} (${res.deviceId.slice(0, 8)}...)`);
+        return {
+            deviceId: res.deviceId,
+            ownerId: res.ownerId,
+            sessionToken: res.sessionToken,
+            sessionTokenExpiresAt: res.sessionTokenExpiresAt,
+            registered: true,
+        };
+    }
+    catch (err) {
+        console.error(`[HABI] Registration error: ${err}`);
+        return null;
+    }
+}
+async function sendHeartbeat(params) {
+    try {
+        const body = { ...params };
+        if (HABI_KEY)
+            body.habiKey = HABI_KEY;
+        const res = await post('heartbeat', body);
+        if (!res.ok) {
+            console.error(`[HABI] Heartbeat failed: ${res.error}`);
+            return null;
+        }
+        return {
+            sessionToken: res.sessionToken || params.sessionToken,
+            pendingJobs: res.pendingJobs || [],
+        };
+    }
+    catch (err) {
+        console.error(`[HABI] Heartbeat error: ${err}`);
+        return null;
+    }
+}
+async function reportJobResult(payload) {
+    try {
+        const body = { ...payload };
+        if (HABI_KEY)
+            body.habiKey = HABI_KEY;
+        await post('job-result', body);
+        console.log(`[HABI] Job result reported: ${payload.jobId} → ${payload.status}`);
+    }
+    catch (err) {
+        console.error(`[HABI] Job result error: ${err}`);
+    }
+}
+//# sourceMappingURL=cloud.js.map

package/dist/cloud.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.js","sourceRoot":"","sources":["../src/cloud.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsFH,wCAsCC;AAED,sCAwBC;AAED,0CASC;AA/JD,6CAA+B;AAG/B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY;IACvC,uDAAuD,CAAC;AAE1D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;AAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;AA8BvD,SAAS,IAAI,CAAI,IAAY,EAAE,IAA6B;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;QAE3C,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;SACrD,CAAC;QAEF,iCAAiC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,YAAY,CAAC,GAAG,QAAQ,CAAC;QACnC,CAAC;QAED,MAAM,OAAO,GAAyB;YACpC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,MAAM,EAAE,MAAM;YACd,OAAO;SACR,CAAC;QAEF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACzC,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC,CAAC;gBAAC,CAAC;gBACvC,MAAM,CAAC;oBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,CAAC;YACpE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAUM,KAAK,UAAU,cAAc,CAAC,MAMpC;IAEC,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;QACpD,IAAI,QAAQ;YAAM,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QAC1C,IAAI,WAAW;YAAG,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC;QAEhD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAmB,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAElE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,+BAA+B,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,YAAY,KAAK,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QAEnG,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,OAAQ;YACrB,YAAY,EAAE,GAAG,CAAC,YAAa;YAC/B,qBAAqB,EAAE,GAAG,CAAC,qBAAsB;YACjD,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,aAAa,CAAC,MAInC;IACC,IAAI,CAAC;QACH,MAAM,IAAI,GAA4B,EAAE,GAAG,MAAM,EAAE,CAAC;QACpD,IAAI,QAAQ;YAAE,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QAEtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAoB,WAAW,EAAE,IAAI,CAAC,CAAC;QAE7D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,4BAA4B,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY;YACrD,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE;SACnC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,OAAyB;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,GAAG,OAA6C,EAAE,CAAC;QAClE,IAAI,QAAQ;YAAE,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QACtC,MAAM,IAAI,CAAkB,YAAY,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,+BAA+B,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,62 @@
+/**
+ * HABI Project Context File Loader
+ *
+ * The Project Context File is the source of truth for what is authorized
+ * on this machine for this project. It lives OUTSIDE version control.
+ *
+ * The SHA-256 hash of the file is computed on load and included in every
+ * session fingerprint. Tampering with the file invalidates active sessions.
+ */
+export interface AllowedOperations {
+    paths?: string[];
+    cloudAccounts?: string[];
+    databases?: string[];
+    repos?: string[];
+    commands?: string[];
+}
+export interface ProjectContext {
+    project: string;
+    version: string;
+    owner: string;
+    allowedMachines: string[];
+    allowedOperations: AllowedOperations;
+    deniedOperations: string[];
+    contextHash: string;
+}
+export interface LoadedContext {
+    context: ProjectContext;
+    contextHash: string;
+    filePath: string;
+}
+/**
+ * Locates the context file by walking up from cwd.
+ * Searches: cwd → parent → grandparent → $HOME
+ */
+export declare function findContextFile(startDir?: string): string | null;
+/**
+ * Loads and validates a Project Context File.
+ *
+ * Validation:
+ * 1. File exists and is valid JSON
+ * 2. Required fields are present
+ * 3. Recomputed hash matches stored contextHash
+ *    (if mismatch → file was tampered with → reject)
+ */
+export declare function loadContext(filePath: string): LoadedContext;
+/**
+ * Checks whether a proposed operation is authorized under the loaded context.
+ *
+ * Returns: { allowed: true } or { allowed: false, reason: string }
+ */
+export declare function assertOperation(operation: string, context: ProjectContext): {
+    allowed: boolean;
+    reason?: string;
+};
+/**
+ * Checks whether this machine's hardware ID is authorized in the context file.
+ */
+export declare function assertMachineAuthorized(hardwareId: string, context: ProjectContext): {
+    allowed: boolean;
+    reason?: string;
+};
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,cAAc,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAQD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAe/E;AAMD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CA4C3D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,GACtB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CA8BvC;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,cAAc,GACtB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAevC"}