kraki 0.1.0

package/dist/config.js

@@ -0,0 +1,102 @@
+/**
+ * Configuration management for Kraki tentacle.
+ *
+ * Config is stored at ~/.kraki/config.json (no secrets).
+ * Channel keys are stored separately at ~/.kraki/channel.key with 0o600 permissions.
+ * Daemon PID is tracked at ~/.kraki/daemon.pid.
+ */
+import { mkdirSync, readFileSync, writeFileSync, unlinkSync, existsSync, chmodSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { randomUUID } from 'node:crypto';
+// ── Paths ───────────────────────────────────────────────
+const CONFIG_DIR = join(homedir(), '.kraki');
+const CONFIG_PATH = join(CONFIG_DIR, 'config.json');
+const CHANNEL_KEY_PATH = join(CONFIG_DIR, 'channel.key');
+const DAEMON_PID_PATH = join(CONFIG_DIR, 'daemon.pid');
+const DEVICE_ID_PATH = join(CONFIG_DIR, 'device-id');
+export function getConfigDir() {
+    mkdirSync(CONFIG_DIR, { recursive: true });
+    return CONFIG_DIR;
+}
+// ── Device ID ───────────────────────────────────────────
+/**
+ * Get the stable device ID for this machine.
+ * Generated once and persisted at ~/.kraki/device-id.
+ * Sent to the head on auth so reconnections don't create ghost devices.
+ */
+export function getOrCreateDeviceId() {
+    try {
+        const existing = readFileSync(DEVICE_ID_PATH, 'utf8').trim();
+        if (existing)
+            return existing;
+    }
+    catch {
+        // File doesn't exist — generate one
+    }
+    const id = `dev_${randomUUID().slice(0, 12)}`;
+    getConfigDir();
+    writeFileSync(DEVICE_ID_PATH, id, 'utf8');
+    return id;
+}
+// ── Config ──────────────────────────────────────────────
+export function configExists() {
+    return existsSync(CONFIG_PATH);
+}
+export function loadConfig() {
+    try {
+        const raw = readFileSync(CONFIG_PATH, 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export function saveConfig(config) {
+    getConfigDir();
+    writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2) + '\n', 'utf8');
+}
+// ── Channel key ─────────────────────────────────────────
+export function getChannelKeyPath() {
+    return CHANNEL_KEY_PATH;
+}
+export function saveChannelKey(key) {
+    getConfigDir();
+    writeFileSync(CHANNEL_KEY_PATH, key, 'utf8');
+    chmodSync(CHANNEL_KEY_PATH, 0o600);
+}
+export function loadChannelKey() {
+    try {
+        return readFileSync(CHANNEL_KEY_PATH, 'utf8').trim();
+    }
+    catch {
+        return null;
+    }
+}
+// ── Daemon PID ──────────────────────────────────────────
+export function getDaemonPidPath() {
+    return DAEMON_PID_PATH;
+}
+export function saveDaemonPid(pid) {
+    getConfigDir();
+    writeFileSync(DAEMON_PID_PATH, String(pid), 'utf8');
+}
+export function loadDaemonPid() {
+    try {
+        const raw = readFileSync(DAEMON_PID_PATH, 'utf8').trim();
+        const pid = parseInt(raw, 10);
+        return Number.isFinite(pid) ? pid : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function clearDaemonPid() {
+    try {
+        unlinkSync(DAEMON_PID_PATH);
+    }
+    catch {
+        // File may not exist — that's fine
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAUzC,2DAA2D;AAE3D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AACpD,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AACzD,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AACvD,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAErD,MAAM,UAAU,YAAY;IAC1B,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,2DAA2D;AAE3D;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7D,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC9C,YAAY,EAAE,CAAC;IACf,aAAa,CAAC,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,2DAA2D;AAE3D,MAAM,UAAU,YAAY;IAC1B,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,YAAY,EAAE,CAAC;IACf,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,2DAA2D;AAE3D,MAAM,UAAU,iBAAiB;IAC/B,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,YAAY,EAAE,CAAC;IACf,aAAa,CAAC,gBAAgB,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7C,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2DAA2D;AAE3D,MAAM,UAAU,gBAAgB;IAC9B,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,YAAY,EAAE,CAAC;IACf,aAAa,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,IAAI,CAAC;QACH,UAAU,CAAC,eAAe,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC"}

package/dist/daemon-worker.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Kraki tentacle daemon worker.
+ *
+ * This file is spawned as a detached background process by daemon.ts.
+ * It loads config, resolves authentication, starts the Copilot adapter,
+ * and connects to the head via RelayClient.
+ *
+ * RelayClient wires all adapter events to the head automatically.
+ * SessionManager handles durable session state and crash recovery.
+ * KeyManager handles E2E encryption keys.
+ */
+import { CopilotAdapter } from './adapters/copilot.js';
+import { RelayClient } from './relay-client.js';
+import { SessionManager } from './session-manager.js';
+export interface WorkerResult {
+    adapter: CopilotAdapter;
+    relay: RelayClient;
+    sessionManager: SessionManager;
+    shutdown: () => Promise<void>;
+}
+export declare function startWorker(): Promise<WorkerResult>;

package/dist/daemon-worker.js

@@ -0,0 +1,127 @@
+/**
+ * Kraki tentacle daemon worker.
+ *
+ * This file is spawned as a detached background process by daemon.ts.
+ * It loads config, resolves authentication, starts the Copilot adapter,
+ * and connects to the head via RelayClient.
+ *
+ * RelayClient wires all adapter events to the head automatically.
+ * SessionManager handles durable session state and crash recovery.
+ * KeyManager handles E2E encryption keys.
+ */
+import { execSync } from 'node:child_process';
+import { loadConfig, loadChannelKey, getOrCreateDeviceId } from './config.js';
+import { CopilotAdapter } from './adapters/copilot.js';
+import { RelayClient } from './relay-client.js';
+import { SessionManager } from './session-manager.js';
+import { KeyManager } from './key-manager.js';
+import { createLogger } from './logger.js';
+const logger = createLogger('daemon');
+// ── Uncaught exception / rejection handlers ─────────────
+process.on('uncaughtException', (err) => {
+    logger.fatal({ err }, 'Uncaught exception');
+    process.exit(1);
+});
+process.on('unhandledRejection', (reason) => {
+    logger.fatal({ reason }, 'Unhandled rejection');
+    process.exit(1);
+});
+export async function startWorker() {
+    logger.info('Daemon starting…');
+    // 1. Load config
+    const config = loadConfig();
+    if (!config) {
+        logger.fatal('No config found at ~/.kraki/config.json — run `kraki` to set up');
+        process.exit(1);
+    }
+    // 2. Resolve auth token
+    let token;
+    if (config.authMethod === 'github') {
+        try {
+            token = execSync('gh auth token 2>/dev/null', { encoding: 'utf8' }).trim() || undefined;
+            if (token)
+                logger.info('Resolved GitHub token from `gh auth token`');
+        }
+        catch {
+            logger.warn('Could not resolve GitHub token from gh CLI');
+        }
+    }
+    else {
+        const channelKey = loadChannelKey();
+        if (channelKey) {
+            token = channelKey;
+            logger.info('Loaded channel key from ~/.kraki/channel.key');
+        }
+        else {
+            logger.warn('No channel key found at ~/.kraki/channel.key');
+        }
+    }
+    // 3. Initialize components
+    const adapter = new CopilotAdapter();
+    const sessionManager = new SessionManager();
+    const keyManager = new KeyManager();
+    const deviceId = getOrCreateDeviceId();
+    // 4. Start Copilot adapter
+    if (token) {
+        process.env.GITHUB_TOKEN = token;
+    }
+    await adapter.start();
+    logger.info('Copilot adapter started');
+    // 5. Fetch available models for device capabilities
+    let models = [];
+    try {
+        models = await adapter.listModels();
+        logger.info({ count: models.length }, 'Fetched available models');
+    }
+    catch {
+        logger.warn('Could not fetch available models');
+    }
+    // 6. Connect to relay via RelayClient
+    const relay = new RelayClient(adapter, sessionManager, {
+        relayUrl: config.relay,
+        device: {
+            name: config.device.name,
+            role: 'tentacle',
+            kind: 'desktop',
+            deviceId,
+            capabilities: models.length > 0 ? { models } : undefined,
+        },
+        token,
+        reconnectDelay: 3000,
+    }, keyManager);
+    relay.onStateChange = (state) => {
+        logger.info({ state }, 'Relay connection state changed');
+    };
+    relay.onAuthenticated = (info) => {
+        logger.info({
+            channel: info.channel,
+            deviceId: info.deviceId,
+            e2e: info.e2e,
+            devices: info.devices.length,
+            sessions: info.sessions.length,
+        }, 'Connected to relay');
+    };
+    relay.onFatalError = (message) => {
+        logger.fatal({ message }, 'Relay fatal error');
+    };
+    relay.connect();
+    logger.info({ relay: config.relay, device: config.device.name }, 'Daemon running');
+    // 6. Graceful shutdown
+    const shutdown = async () => {
+        logger.info('Shutting down…');
+        relay.disconnect();
+        await adapter.stop();
+    };
+    process.on('SIGTERM', async () => { await shutdown(); process.exit(0); });
+    process.on('SIGINT', async () => { await shutdown(); process.exit(0); });
+    return { adapter, relay, sessionManager, shutdown };
+}
+// Auto-run when executed directly (not imported for testing)
+const isDirectRun = process.argv[1]?.endsWith('daemon-worker.js') || process.argv[1]?.endsWith('daemon-worker.ts');
+if (isDirectRun) {
+    startWorker().catch((err) => {
+        logger.fatal({ err }, 'Daemon failed to start');
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=daemon-worker.js.map

package/dist/daemon-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-worker.js","sourceRoot":"","sources":["../src/daemon-worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AAEtC,2DAA2D;AAE3D,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;IACtC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;IAC1C,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAWH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAEhC,iBAAiB;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,wBAAwB;IACxB,IAAI,KAAyB,CAAC;IAE9B,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,GAAG,QAAQ,CAAC,2BAA2B,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;YACxF,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;QACpC,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,GAAG,UAAU,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;IACrC,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IAEvC,2BAA2B;IAC3B,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAEvC,oDAAoD;IACpD,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IAED,sCAAsC;IACtC,MAAM,KAAK,GAAG,IAAI,WAAW,CAC3B,OAAkC,EAClC,cAAc,EACd;QACE,QAAQ,EAAE,MAAM,CAAC,KAAK;QACtB,MAAM,EAAE;YACN,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,SAAS;YACf,QAAQ;YACR,YAAY,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;SACzD;QACD,KAAK;QACL,cAAc,EAAE,IAAI;KACrB,EACD,UAAU,CACX,CAAC;IAEF,KAAK,CAAC,aAAa,GAAG,CAAC,KAAK,EAAE,EAAE;QAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,gCAAgC,CAAC,CAAC;IAC3D,CAAC,CAAC;IAEF,KAAK,CAAC,eAAe,GAAG,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,CAAC,IAAI,CAAC;YACV,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;SAC/B,EAAE,oBAAoB,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,KAAK,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,EAAE;QAC/B,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,KAAK,CAAC,OAAO,EAAE,CAAC;IAChB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAEnF,uBAAuB;IACvB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9B,KAAK,CAAC,UAAU,EAAE,CAAC;QACnB,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC;AAED,6DAA6D;AAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AACnH,IAAI,WAAW,EAAE,CAAC;IAChB,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Daemon process management for Kraki tentacle.
+ *
+ * The daemon runs as a detached child process executing daemon-worker.js.
+ * Its PID is tracked in ~/.kraki/daemon.pid.
+ */
+import { type KrakiConfig } from './config.js';
+export interface DaemonStatus {
+    running: boolean;
+    pid: number | null;
+}
+export declare function isDaemonRunning(): boolean;
+export declare function getDaemonStatus(): DaemonStatus;
+export declare function startDaemon(_config: KrakiConfig): number;
+export declare function stopDaemon(): boolean;

package/dist/daemon.js

@@ -0,0 +1,117 @@
+/**
+ * Daemon process management for Kraki tentacle.
+ *
+ * The daemon runs as a detached child process executing daemon-worker.js.
+ * Its PID is tracked in ~/.kraki/daemon.pid.
+ */
+import { spawn, execSync } from 'node:child_process';
+import { join, dirname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { saveDaemonPid, loadDaemonPid, clearDaemonPid, } from './config.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+export function isDaemonRunning() {
+    const pid = loadDaemonPid();
+    if (pid === null)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        // Process doesn't exist — stale PID file
+        clearDaemonPid();
+        return false;
+    }
+}
+export function getDaemonStatus() {
+    const pid = loadDaemonPid();
+    if (pid === null)
+        return { running: false, pid: null };
+    try {
+        process.kill(pid, 0);
+        return { running: true, pid };
+    }
+    catch {
+        clearDaemonPid();
+        return { running: false, pid: null };
+    }
+}
+// ── Start / Stop ────────────────────────────────────────
+export function startDaemon(_config) {
+    // Kill any existing daemon(s) before starting a new one
+    stopDaemon();
+    // Detect if running from source (.ts) or built (.js)
+    const currentUrl = import.meta.url;
+    const isTsSource = currentUrl.endsWith('.ts');
+    const workerFile = isTsSource ? 'daemon-worker.ts' : 'daemon-worker.js';
+    const workerPath = join(__dirname, workerFile);
+    let runtime;
+    let args;
+    if (isTsSource) {
+        // In dev: use node with --import tsx for ESM TypeScript support
+        runtime = process.execPath; // full path to node
+        args = ['--import', 'tsx', workerPath];
+    }
+    else {
+        runtime = process.execPath;
+        args = [workerPath];
+    }
+    // Ensure node_modules/.bin is in PATH for tsx resolution
+    const projectRoot = join(__dirname, '..', '..');
+    const binPath = join(projectRoot, 'node_modules', '.bin');
+    const env = {
+        ...process.env,
+        NODE_ENV: 'production',
+        NODE_PATH: join(projectRoot, 'node_modules'),
+        PATH: `${binPath}:${process.env.PATH ?? ''}`,
+    };
+    const child = spawn(runtime, args, {
+        detached: true,
+        stdio: 'ignore',
+        cwd: projectRoot,
+        env,
+    });
+    child.unref();
+    const pid = child.pid;
+    saveDaemonPid(pid);
+    return pid;
+}
+export function stopDaemon() {
+    const pid = loadDaemonPid();
+    if (pid !== null) {
+        try {
+            process.kill(pid, 'SIGTERM');
+        }
+        catch {
+            // Process already gone
+        }
+        clearDaemonPid();
+    }
+    // Kill any orphaned daemon-worker processes (missed by PID tracking)
+    killOrphanedWorkers();
+    return pid !== null;
+}
+/**
+ * Find and kill any daemon-worker processes not tracked by the PID file.
+ */
+function killOrphanedWorkers() {
+    try {
+        const output = execSync('ps -eo pid,command', { encoding: 'utf8' });
+        for (const line of output.split('\n')) {
+            if (line.includes('daemon-worker') && !line.includes('grep')) {
+                const pidStr = line.trim().split(/\s+/)[0];
+                const orphanPid = parseInt(pidStr, 10);
+                if (orphanPid && orphanPid !== process.pid) {
+                    try {
+                        process.kill(orphanPid, 'SIGTERM');
+                    }
+                    catch { /* already gone */ }
+                }
+            }
+        }
+    }
+    catch {
+        // ps not available — skip orphan cleanup
+    }
+}
+//# sourceMappingURL=daemon.js.map

package/dist/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../src/daemon.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAEL,aAAa,EACb,aAAa,EACb,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAS1D,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;QACzC,cAAc,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAEvD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,2DAA2D;AAE3D,MAAM,UAAU,WAAW,CAAC,OAAoB;IAC9C,wDAAwD;IACxD,UAAU,EAAE,CAAC;IACb,qDAAqD;IACrD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IACnC,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAE/C,IAAI,OAAe,CAAC;IACpB,IAAI,IAAc,CAAC;IACnB,IAAI,UAAU,EAAE,CAAC;QACf,gEAAgE;QAChE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,oBAAoB;QAChD,IAAI,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC3B,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACtB,CAAC;IAED,yDAAyD;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG;QACV,GAAG,OAAO,CAAC,GAAG;QACd,QAAQ,EAAE,YAAY;QACtB,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC;QAC5C,IAAI,EAAE,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE;KAC7C,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;QACjC,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,WAAW;QAChB,GAAG;KACJ,CAAC,CAAC;IAEH,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,MAAM,GAAG,GAAG,KAAK,CAAC,GAAI,CAAC;IACvB,aAAa,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;QACD,cAAc,EAAE,CAAC;IACnB,CAAC;IAED,qEAAqE;IACrE,mBAAmB,EAAE,CAAC;IAEtB,OAAO,GAAG,KAAK,IAAI,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB;IAC1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBACvC,IAAI,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;oBAC3C,IAAI,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { AgentAdapter, CopilotAdapter, parsePermission } from './adapters/index.js';
+export type { CreateSessionConfig, SessionInfo, PermissionDecision, SessionCreatedEvent, MessageEvent, MessageDeltaEvent, PermissionRequestEvent, QuestionRequestEvent, ToolStartEvent, ToolCompleteEvent, SessionEndedEvent, ErrorEvent, ParsedPermission, } from './adapters/index.js';
+export { loadConfig, saveConfig, configExists, getOrCreateDeviceId } from './config.js';
+export { SessionManager } from './session-manager.js';
+export type { SessionContext, SessionMeta, RunRecord } from './session-manager.js';
+export { RelayClient } from './relay-client.js';
+export type { RelayClientOptions, RelayClientState } from './relay-client.js';
+export { KeyManager } from './key-manager.js';

package/dist/index.js

@@ -0,0 +1,11 @@
+// kraki — Kraki agent bridge
+//
+// The tentacle connects coding agents to the Kraki relay.
+// It wraps agent SDKs via adapters and translates their events
+// into the @kraki/protocol message types.
+export { AgentAdapter, CopilotAdapter, parsePermission } from './adapters/index.js';
+export { loadConfig, saveConfig, configExists, getOrCreateDeviceId } from './config.js';
+export { SessionManager } from './session-manager.js';
+export { RelayClient } from './relay-client.js';
+export { KeyManager } from './key-manager.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,EAAE;AACF,0DAA0D;AAC1D,+DAA+D;AAC/D,0CAA0C;AAE1C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAkBpF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/key-manager.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Tentacle key management for E2E encryption.
+ *
+ * Generates and persists RSA keypair on first run.
+ * Provides encrypt/decrypt helpers using @kraki/crypto.
+ */
+import type { KeyPair, EncryptedPayload, RecipientKey } from '@kraki/crypto';
+export declare class KeyManager {
+    private keysDir;
+    private keyPair;
+    constructor(keysDir?: string);
+    /**
+     * Get or create the device keypair. Generated once, persisted to disk.
+     */
+    getKeyPair(): KeyPair;
+    /**
+     * Get compact public key for sending to the head during auth.
+     */
+    getCompactPublicKey(): string;
+    /**
+     * Encrypt a message payload for a set of recipient devices.
+     */
+    encryptForRecipients(plaintext: string, recipients: RecipientKey[]): EncryptedPayload;
+    /**
+     * Decrypt a message payload intended for this device.
+     */
+    decryptForMe(payload: EncryptedPayload, myDeviceId: string): string;
+}

package/dist/key-manager.js

@@ -0,0 +1,61 @@
+/**
+ * Tentacle key management for E2E encryption.
+ *
+ * Generates and persists RSA keypair on first run.
+ * Provides encrypt/decrypt helpers using @kraki/crypto.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { generateKeyPair, exportPublicKey, encrypt, decrypt } from '@kraki/crypto';
+import { getConfigDir } from './config.js';
+const KEYS_DIR_NAME = 'keys';
+const PRIVATE_KEY_FILE = 'private.pem';
+const PUBLIC_KEY_FILE = 'public.pem';
+export class KeyManager {
+    keysDir;
+    keyPair = null;
+    constructor(keysDir) {
+        this.keysDir = keysDir ?? join(getConfigDir(), KEYS_DIR_NAME);
+        mkdirSync(this.keysDir, { recursive: true });
+    }
+    /**
+     * Get or create the device keypair. Generated once, persisted to disk.
+     */
+    getKeyPair() {
+        if (this.keyPair)
+            return this.keyPair;
+        const privPath = join(this.keysDir, PRIVATE_KEY_FILE);
+        const pubPath = join(this.keysDir, PUBLIC_KEY_FILE);
+        if (existsSync(privPath) && existsSync(pubPath)) {
+            this.keyPair = {
+                privateKey: readFileSync(privPath, 'utf8'),
+                publicKey: readFileSync(pubPath, 'utf8'),
+            };
+        }
+        else {
+            this.keyPair = generateKeyPair();
+            writeFileSync(privPath, this.keyPair.privateKey, { mode: 0o600 });
+            writeFileSync(pubPath, this.keyPair.publicKey, { mode: 0o644 });
+        }
+        return this.keyPair;
+    }
+    /**
+     * Get compact public key for sending to the head during auth.
+     */
+    getCompactPublicKey() {
+        return exportPublicKey(this.getKeyPair().publicKey);
+    }
+    /**
+     * Encrypt a message payload for a set of recipient devices.
+     */
+    encryptForRecipients(plaintext, recipients) {
+        return encrypt(plaintext, recipients);
+    }
+    /**
+     * Decrypt a message payload intended for this device.
+     */
+    decryptForMe(payload, myDeviceId) {
+        return decrypt(payload, myDeviceId, this.getKeyPair().privateKey);
+    }
+}
+//# sourceMappingURL=key-manager.js.map

package/dist/key-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-manager.js","sourceRoot":"","sources":["../src/key-manager.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAmB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEpG,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,gBAAgB,GAAG,aAAa,CAAC;AACvC,MAAM,eAAe,GAAG,YAAY,CAAC;AAErC,MAAM,OAAO,UAAU;IACb,OAAO,CAAS;IAChB,OAAO,GAAmB,IAAI,CAAC;IAEvC,YAAY,OAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,CAAC;QAC9D,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,UAAU;QACR,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QAEtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAEpD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,OAAO,GAAG;gBACb,UAAU,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAC1C,SAAS,EAAE,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC;aACzC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,GAAG,eAAe,EAAE,CAAC;YACjC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,OAAO,eAAe,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAiB,EAAE,UAA0B;QAChE,OAAO,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,OAAyB,EAAE,UAAkB;QACxD,OAAO,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC;CACF"}

package/dist/logger.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Structured logging for Kraki tentacle.
+ *
+ * - Development: pretty-prints to stdout
+ * - Production: writes to rotating log files under ~/.kraki/logs/
+ */
+import pino from 'pino';
+export declare function createLogger(name: string): pino.Logger;

package/dist/logger.js

@@ -0,0 +1,30 @@
+/**
+ * Structured logging for Kraki tentacle.
+ *
+ * - Development: pretty-prints to stdout
+ * - Production: writes to rotating log files under ~/.kraki/logs/
+ */
+import pino from 'pino';
+import { mkdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+const LOG_DIR = join(homedir(), '.kraki', 'logs');
+export function createLogger(name) {
+    const level = process.env.LOG_LEVEL ?? 'info';
+    const isDev = process.env.NODE_ENV !== 'production';
+    if (isDev) {
+        return pino({ name, level });
+    }
+    // Production: rotate log files via pino-roll
+    mkdirSync(LOG_DIR, { recursive: true });
+    const transport = pino.transport({
+        target: 'pino-roll',
+        options: {
+            file: join(LOG_DIR, `${name}.log`),
+            size: '5m',
+            limit: { count: 5 },
+        },
+    });
+    return pino({ name, level }, transport);
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAElD,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IAEpD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,6CAA6C;IAC7C,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE;YACP,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,MAAM,CAAC;YAClC,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;SACpB;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;AAC1C,CAAC"}

package/dist/pair.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Pairing command — generates a QR code for mobile app pairing.
+ *
+ * Requests a one-time pairing token from the head,
+ * then displays a QR code in the terminal containing:
+ * - relay URL
+ * - pairing token (expires in 5 min)
+ * - tentacle's public key (for E2E)
+ */
+export interface PairingInfo {
+    relay: string;
+    pairingToken: string;
+    publicKey?: string;
+    expiresIn: number;
+}
+/**
+ * Request a pairing token from the head and return pairing info.
+ */
+export declare function requestPairingToken(relayUrl: string, authToken?: string): Promise<PairingInfo>;
+/**
+ * Generate the pairing URL that will be encoded in the QR code.
+ * Phone camera scans → opens this URL → web app auto-pairs.
+ */
+export declare function buildPairingUrl(info: PairingInfo, appBaseUrl?: string): string;
+/**
+ * Legacy: build compact JSON payload (for manual transfer).
+ */
+export declare function buildPairingPayload(info: PairingInfo): string;
+/**
+ * Render a QR code to the terminal. Copy link to clipboard.
+ */
+export declare function renderQrToTerminal(url: string): Promise<string>;