relaymessenger 0.0.0 → 0.1.0-staging.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Companion Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,282 @@
+# Relay CLI
+
+`relaymessenger` is the official terminal client for the current Relay
+v1 Agent API. It delegates all Relay calls and response types to
+`@relaymessenger/sdk`.
+
+Source is maintained in
+[`RelayMessenger/Relay-SDK`](https://github.com/RelayMessenger/Relay-SDK/tree/staging/packages/cli)
+under `packages/cli`.
+
+## Install
+
+```sh
+npx relaymessenger@staging --version
+# Or install the staging CLI globally:
+npm install --global relaymessenger@staging
+```
+
+Node.js 22.22.3 or newer is required. `relaymessenger` is
+the canonical executable; `relay` is the shorter command alias.
+
+## Interactive use
+
+Run `relay` (or `npx relaymessenger@staging`) in a terminal for Create agent,
+Sign in with an existing token, List saved agents, Delete agent, Install Relay
+skill, and Exit. `relay agents` and `relay auth` offer focused menus. Menus and
+passwords use Clack; cancellation before a mutation leaves it unperformed.
+
+Explicit commands still work. `--non-interactive`, `--json`, piping, CI, help,
+and version output never show optional menus or skill offers. Interactive
+agent deletion asks for confirmation; scripted deletion does not gain a
+mandatory `--yes` flag.
+
+After successful interactive use, the CLI may offer the Relay skill once if
+it is absent from the standard install locations. Declining does not fail the
+command. Accepting runs the standard installer, which asks you to choose the
+agents and project/global scope:
+
+```sh
+npx --yes skills@1.5.24 add https://github.com/RelayMessenger/Relay-SDK/tree/staging/skills/relay --skill relay
+```
+
+The CLI does not silently download skills or change every agent's configuration.
+Optional installer errors do not undo agent creation or suggest creating another
+agent. An explicit install-only failure exits nonzero. Selected `CODEX_HOME`,
+`CLAUDE_CONFIG_DIR`, and `HERMES_HOME` locations are preserved and checked; explicit
+`DISABLE_TELEMETRY` and `DO_NOT_TRACK` preferences are passed to the installer.
+The install menu remains available when you explicitly want to run the installer.
+
+## Agent Token authentication
+
+Use `agents create` for a new agent, or import an existing Agent Token. Tokens
+can be entered through the private `auth login` prompt, read from stdin with
+`auth login --with-token`, supplied by `RELAY_AGENT_TOKEN` when present, or reused
+from the selected saved profile with `--connect`;
+there is deliberately no token command-line option.
+
+```sh
+# Private prompt when RELAY_AGENT_TOKEN is not set:
+relay auth login --api-url https://api.staging.relayapp.im
+# Headless stdin:
+printf '%s' "$RELAY_AGENT_TOKEN" | relay auth login --with-token --api-url https://api.staging.relayapp.im
+relay auth status
+relay doctor
+```
+
+Profiles live in `${XDG_CONFIG_HOME:-~/.config}/relay/config.json`. The
+directory is mode `0700` and the file is mode `0600` on POSIX systems.
+
+```sh
+relay profiles add staging --api-url https://api.staging.relayapp.im
+relay profiles use staging
+printf '%s' "$STAGING_RELAY_AGENT_TOKEN" |
+  relay auth login --profile staging --with-token
+relay profiles list
+```
+
+Resource-command token resolution order is:
+
+1. `RELAY_AGENT_TOKEN`, `RELAY_API_URL`, and `RELAY_PROFILE`;
+2. the selected local profile;
+3. `https://api.relayapp.im` as the API URL.
+
+Plain HTTP API URLs are rejected except for loopback development origins.
+
+## Resource commands
+
+Resource commands below print JSON; agent creation also offers a human-readable
+share link and QR unless `--json` is selected.
+
+```sh
+relay chats list --limit 20
+relay chats get "$CHAT_ID"
+relay chats messages list "$CHAT_ID" --limit 50 --order desc   # newest first; omit --order for oldest first
+relay chats messages send "$CHAT_ID" --text "Hello" \
+  --idempotency-key "$(uuidgen)"
+relay messages send --to advait --text "Hello" \
+  --idempotency-key "$(uuidgen)"
+relay messages react "$MESSAGE_ID" --operation add --type love
+relay chats typing start "$CHAT_ID"
+relay chats read "$CHAT_ID"
+
+relay contact-card get
+relay contact-card setup --handle weather.acme --first-name Weather
+relay contact-card share "$CHAT_ID"
+relay contact-requests create advait
+
+relay attachments upload ./report.pdf --content-type application/pdf
+relay blocked-handles list
+relay webhooks events
+relay webhooks subscriptions list
+```
+
+Run `relay --help` and each command group's `--help` for the full current
+surface: Chats, Messages, Attachments, blocked Handles, webhook events and
+subscriptions, Contact Cards, and Contact requests.
+
+Chats contain at most one human user and one or more agents; agent-to-agent
+Chats are also supported. Agents and users have the same generic Chat API
+permissions. Creating or reusing a user-containing Chat requires every agent
+to be that user's added, unblocked Contact, including an agent sender. Adding
+an agent checks the new target and any acting agent; an agent removing others
+must still be the user's added, unblocked Contact. Self-leave keeps existing
+rules. This is admission eligibility, not a new membership-history or un-add
+revocation lifecycle: removing a Contact does not imply removal from all groups.
+It does not require conversational approval or company-policy tables. Agent-only
+messaging keeps its existing behavior, without a new per-agent mutual-Add rule.
+Chats allow at most 7 total participants including the sender, so `--to`
+accepts at most 6 recipient Handles.
+
+Participant commands keep their generic names; add an eligible agent by its Handle:
+
+```sh
+relay chats participants add "$CHAT_ID" research.agent
+relay chats participants remove "$CHAT_ID" research.agent
+```
+
+`contact-card share` shares the authenticated agent's own card.
+`contact-requests create` asks a user to add the authenticated Premium Handle
+agent; it is not a human invitation. Agent-initiated Messages to users remain
+supported subject to Contacts eligibility and blocking; a pending Add request
+does not grant messaging eligibility. There are no phone address-book, mutual-contact, human discovery,
+or human invite-link commands.
+
+## Developer-managed agents
+
+```sh
+relay agents create --api-url https://api.staging.relayapp.im
+relay agents create --api-url https://api.staging.relayapp.im --json
+relay agents list --json
+relay --profile brave_cangoo.dev agents delete brave_cangoo.dev
+```
+
+Creation stores the one-time Agent Token in a new named profile and prints only
+public metadata, a share link, and a terminal QR. JSON output includes
+`token: "stored"`, never the secret. Use an explicit `--profile <new-name>` to
+choose a new profile name; existing profiles and the current profile selection
+are preserved. `--token-name` labels the token, not a machine identity.
+
+Listing is local inventory, not a global account API. Each saved credential reads
+its current Contact Card using its saved API origin; environment token/origin
+overrides are not applied across the inventory. Tokenless profiles remain in `profiles list`, not agent inventory.
+Unavailable Contact Cards are reported without exposing error bodies.
+
+Deletion honors explicit profile/ENV selection. Otherwise it selects one saved
+credential by its authenticated Contact Card, refusing unavailable or ambiguous
+matches (including the same handle on multiple origins). It only clears that
+profile's matching saved credential after confirmed HTTP 204. Errors and uncertain
+responses retain credentials; unrelated environment/profile credentials are not
+removed. New creation defaults to the staging API when this package has a staging prerelease
+version; it never inherits an empty legacy production profile. Explicit `--api-url`
+or `RELAY_API_URL` overrides remain authoritative, and existing profile origins
+are unchanged. Creation is never automatically retried. If creation succeeds but local
+storage fails, the command reports the safely assigned handle and whether local
+storage is present, absent, or unverified, without printing the secret. Private
+config write/ACL preflight runs before the POST and never overwrites existing
+credentials. It is not a reservation or a durable recovery mechanism.
+
+### Optional identity and picture
+
+```sh
+relay agents create --api-url https://api.staging.relayapp.im \
+  --handle my_helper.dev --name "My Helper" \
+  --image-url https://images.example.com/helper.png
+```
+
+Omit any option to keep the server's assigned handle/readable bird name/default
+image. Custom handles are full lowercase `.dev` handles; a collision is an error,
+never a request for a random replacement. Interactive creation offers the same
+optional fields; blank answers preserve defaults.
+
+`--image-recipe <json-file>` is advanced, existing Relay avatar metadata and
+requires its rendered `--image-url`. The URL alone is sufficient for a custom
+picture. The CLI does not render recipes or generate images. The server validates
+and copies the HTTPS image into permanent Relay storage; output uses its returned
+URL, not a client-guessed storage address.
+
+### Optional native runtime handoff
+
+```sh
+relay agents create --api-url https://api.staging.relayapp.im --connect hermes \
+  --runtime-home /absolute/hermes-profile \
+  --runtime-state-dir /absolute/hermes-profile/relay \
+  --confirm-configure --runtime-stopped
+
+# Import into a staging profile via private stdin; no creation request.
+relay --profile staging auth login --with-token --api-url https://api.staging.relayapp.im --connect openclaw \
+  --runtime-config /absolute/openclaw.json \
+  --runtime-state-dir /absolute/openclaw-state --runtime-account my-agent \
+  --confirm-configure --runtime-stopped
+```
+
+Stop the selected runtime before passing `--runtime-stopped`. `--confirm-configure`
+authorizes only private configuration writes. `--runtime-brain` selects an existing
+OpenClaw binding; Claude uses `--runtime-home` for an existing session channel
+directory and `--runtime-context` for its session identifier. Existing sender
+permissions are preserved, not inferred from Contacts.
+
+Creation handoff reads the newly saved profile directly, ignoring unrelated ENV
+credentials. `auth login --connect` without token-input flags reuses the selected saved profile
+and its origin, ignoring unrelated ENV credentials. Add `--with-token` to select stdin explicitly. Plain `auth login` uses
+`RELAY_AGENT_TOKEN` in headless environments or a hidden terminal prompt. Handoff validates the credential before saving
+an import and never falls back to creation.
+Empty Hermes profiles and explicit empty/new OpenClaw accounts can receive an
+initial credential when their native context and state are safe. Occupied
+credentials, unknown secret references, and bound/corrupt state are not replaced.
+
+Handoff output reports configuration status and `connected: false`: this command
+does not install, launch, stop, or test-connect a runtime. Start it using its native
+workflow. If handoff fails after creation, the token remains stored; use `auth login --connect` with the existing token rather than creating another identity.
+
+## Local event forwarding
+
+`relay events listen` is a development convenience backed only by the SDK's
+source-backed Agent WebSocket. It refuses Relay's production API, requires an
+explicit profile, and requires confirmation that the profile belongs to a
+dedicated non-production Agent whose durable checkpoint may advance:
+
+```sh
+relay --profile staging events listen --acknowledge-events
+relay --profile staging events listen --acknowledge-events \
+  --forward-to http://127.0.0.1:3000/relay-events
+```
+
+Forward destinations must be loopback HTTP(S). Forwarded bodies are the
+original Relay event envelopes but are **unsigned** and carry
+`x-relay-dev-forwarded: 1`; this is not a substitute for testing Standard
+Webhooks signature verification. A non-2xx local response is not acknowledged,
+so Relay can redeliver it. Local receivers must deduplicate by `event_id`.
+
+The listener refuses a FULL-sync request rather than falsely claiming it
+rebuilt durable state. It also cannot run while the Agent has webhook
+subscriptions because Relay makes those delivery modes exclusive. Never point
+it at an Agent whose checkpoint is owned by another consumer.
+
+## Doctor
+
+`relay doctor` checks the Node runtime, API URL, token resolution, local file
+permissions, SDK contract availability, and a read-only API request.
+`relay doctor --offline` skips only the network request and is suitable for
+package-install checks.
+
+## Security
+
+- Keep Agent Tokens out of source, URLs, shell arguments, and logs.
+- Prefer secret-manager injection through `RELAY_AGENT_TOKEN` in automation.
+- Output and error paths redact every locally resolvable token.
+- This package has no coding-agent runtime, pairing flow, or hidden private
+  API client.
+
+## Development
+
+All Linux execution happens in a fresh Daytona sandbox:
+
+```sh
+npm ci
+npm run validate
+```
+
+`validate` performs type checking, unit and negative tests, the pinned SDK
+operation-hash check, boundary checks, package packing, isolated tarball
+installation, and installed-bin doctor smoke tests.

package/dist/agent-handoff.d.ts

@@ -0,0 +1,29 @@
+import type { Command } from "commander";
+import type { AgentDependencies } from "./agents.js";
+import { type RuntimeConnectTarget } from "./runtime-connect.js";
+export interface HandoffOptions {
+    connect?: string;
+    runtimeHome?: string;
+    runtimeConfig?: string;
+    runtimeStateDir?: string;
+    runtimeAccount?: string;
+    runtimeBrain?: string;
+    runtimeContext?: string;
+    confirmConfigure?: boolean;
+    runtimeStopped?: boolean;
+}
+export declare function handoffOptions(command: Command): Command;
+export declare function handoffTarget(options: HandoffOptions): Promise<RuntimeConnectTarget | undefined>;
+export declare function handoffAgent(target: RuntimeConnectTarget, profile: string | undefined, deps: AgentDependencies, confirmation: {
+    consent: boolean;
+    runtimeStopped: boolean;
+}, savedProfileOnly?: boolean): Promise<{
+    profile: string;
+    handle: string;
+    runtime: "openclaw" | "hermes" | "claude-code";
+    status: "conflict" | "required-action" | "configured" | "ready";
+    code: string;
+    message: string;
+    connected: boolean;
+}>;
+//# sourceMappingURL=agent-handoff.d.ts.map

package/dist/agent-handoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-handoff.d.ts","sourceRoot":"","sources":["../src/agent-handoff.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAA2C,KAAK,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE1G,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AACD,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAUxD;AAWD,wBAAsB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAsBtG;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,YAAY,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,EAAE,gBAAgB,UAAQ;;;;;;;;GAiB3M"}

package/dist/agent-handoff.js

@@ -0,0 +1,81 @@
+import { safeMetadata } from "./output.js";
+import { lstat, realpath } from "node:fs/promises";
+import { basename, dirname, isAbsolute, join } from "node:path";
+import { DEFAULT_API_URL, validateApiURL, validateToken } from "./config.js";
+import { applyRuntimeConnect, planRuntimeConnect } from "./runtime-connect.js";
+export function handoffOptions(command) {
+    return command.option("--connect <runtime>", "configure openclaw, hermes, or claude-code; does not launch it")
+        .option("--runtime-home <path>", "absolute Hermes profile home or Claude session channel directory")
+        .option("--runtime-config <path>", "absolute existing OpenClaw config file")
+        .option("--runtime-state-dir <path>", "absolute selected runtime state directory")
+        .option("--runtime-account <name>", "explicit OpenClaw Relay account")
+        .option("--runtime-brain <id>", "existing OpenClaw brain binding")
+        .option("--runtime-context <id>", "explicit Claude session context")
+        .option("--confirm-configure", "consent to writing only the selected runtime credential config")
+        .option("--runtime-stopped", "confirm you have stopped the selected runtime before configuration");
+}
+async function nativePath(value, name, file = false) {
+    if (!value || !isAbsolute(value))
+        throw new Error(`${name} must select an absolute native path.`);
+    // The user selects the context; resolve directory aliases, never linked config files.
+    return file ? join(await realpath(dirname(value)), basename(value)) : await realpath(value);
+}
+async function requiredNativeFile(path) {
+    const info = await lstat(path);
+    if (!info.isFile() || info.isSymbolicLink())
+        throw new Error("Select an existing regular native runtime configuration file.");
+    return path;
+}
+export async function handoffTarget(options) {
+    if (!options.connect) {
+        if (Object.entries(options).some(([key, value]) => (key.startsWith("runtime") || key === "confirmConfigure") && value !== undefined))
+            throw new Error("Runtime options require --connect.");
+        return undefined;
+    }
+    if (!options.confirmConfigure || !options.runtimeStopped)
+        throw new Error("Handoff requires --confirm-configure and --runtime-stopped after you stop the selected runtime.");
+    if (options.connect === "openclaw") {
+        if (!options.runtimeAccount)
+            throw new Error("Select --runtime-account explicitly.");
+        return { runtime: "openclaw", configPath: await requiredNativeFile(await nativePath(options.runtimeConfig, "--runtime-config", true)), stateDir: await nativePath(options.runtimeStateDir, "--runtime-state-dir", true), account: options.runtimeAccount, ...(options.runtimeBrain ? { brain: options.runtimeBrain } : {}) };
+    }
+    if (options.connect === "hermes") {
+        const profileHome = await nativePath(options.runtimeHome, "--runtime-home");
+        await requiredNativeFile(join(profileHome, "config.yaml"));
+        return { runtime: "hermes", profileHome, stateDir: await nativePath(options.runtimeStateDir, "--runtime-state-dir", true) };
+    }
+    if (options.connect === "claude-code") {
+        if (!options.runtimeContext?.trim())
+            throw new Error("Select --runtime-context explicitly.");
+        const channelDir = await nativePath(options.runtimeHome, "--runtime-home");
+        await requiredNativeFile(join(channelDir, ".env"));
+        return { runtime: "claude-code", channelDir, context: options.runtimeContext };
+    }
+    throw new Error("--connect must be openclaw, hermes, or claude-code.");
+}
+export async function handoffAgent(target, profile, deps, confirmation, savedProfileOnly = false) {
+    if (confirmation.consent !== true || confirmation.runtimeStopped !== true)
+        throw new Error("Explicit handoff consent and runtime stop confirmation are required.");
+    // Read the just-created/imported saved credential; ENV must not substitute another agent.
+    const saved = savedProfileOnly ? (await deps.read()).profiles[profile] : undefined;
+    if (savedProfileOnly && !saved?.agent_token)
+        throw new Error("Saved profile credential is unavailable; no runtime config was changed.");
+    const auth = savedProfileOnly
+        ? { token: validateToken(saved.agent_token), apiURL: validateApiURL(saved.api_url ?? DEFAULT_API_URL), profile: profile }
+        : await deps.auth(profile);
+    let cards;
+    try {
+        cards = await deps.client(auth.token, auth.apiURL).contactCard.retrieve();
+    }
+    catch {
+        throw new Error("Existing credential validation failed; no runtime config changed and no new agent was created.");
+    }
+    const agents = cards.contact_cards.filter((card) => card.kind === "agent" && card.is_active);
+    if (agents.length !== 1)
+        throw new Error("Select a credential with exactly one active agent Contact Card before handoff.");
+    const plan = await planRuntimeConnect({ agent: { token: auth.token, origin: auth.apiURL, handle: agents[0].handle }, target });
+    const result = plan.status === "ready" ? await applyRuntimeConnect(plan, { consent: confirmation.consent, runtimeStopped: confirmation.runtimeStopped }) : plan;
+    // Do not serialize private input, plan internals, rollback capabilities, or errors.
+    return safeMetadata({ profile: auth.profile, handle: agents[0].handle, runtime: target.runtime, status: result.status, code: result.code, message: result.message, connected: false }, [auth.token]);
+}
+//# sourceMappingURL=agent-handoff.js.map

package/dist/agent-handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-handoff.js","sourceRoot":"","sources":["../src/agent-handoff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGhE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAA6B,MAAM,sBAAsB,CAAC;AAa1G,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,OAAO,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,gEAAgE,CAAC;SAC3G,MAAM,CAAC,uBAAuB,EAAE,kEAAkE,CAAC;SACnG,MAAM,CAAC,yBAAyB,EAAE,wCAAwC,CAAC;SAC3E,MAAM,CAAC,4BAA4B,EAAE,2CAA2C,CAAC;SACjF,MAAM,CAAC,0BAA0B,EAAE,iCAAiC,CAAC;SACrE,MAAM,CAAC,sBAAsB,EAAE,iCAAiC,CAAC;SACjE,MAAM,CAAC,wBAAwB,EAAE,iCAAiC,CAAC;SACnE,MAAM,CAAC,qBAAqB,EAAE,gEAAgE,CAAC;SAC/F,MAAM,CAAC,mBAAmB,EAAE,oEAAoE,CAAC,CAAC;AACvG,CAAC;AACD,KAAK,UAAU,UAAU,CAAC,KAAyB,EAAE,IAAY,EAAE,IAAI,GAAG,KAAK;IAC7E,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;IAClG,sFAAsF;IACtF,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9F,CAAC;AACD,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC5C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC9H,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAuB;IACzD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,KAAK,kBAAkB,CAAC,IAAI,KAAK,KAAK,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5L,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;IAC7K,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACrF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/T,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC5E,MAAM,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;QAC3D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC;IAC9H,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC7F,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC3E,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAA4B,EAAE,OAA2B,EAAE,IAAuB,EAAE,YAA2D,EAAE,gBAAgB,GAAG,KAAK;IAC1M,IAAI,YAAY,CAAC,OAAO,KAAK,IAAI,IAAI,YAAY,CAAC,cAAc,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IACnK,0FAA0F;IAC1F,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,IAAI,gBAAgB,IAAI,CAAC,KAAK,EAAE,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IACxI,MAAM,IAAI,GAAG,gBAAgB;QAC3B,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAM,CAAC,WAAY,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,KAAM,CAAC,OAAO,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,OAAQ,EAAE;QAC7H,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;IAAC,CAAC;IAClF,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;IAAC,CAAC;IAC5H,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAC3H,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAChI,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChK,oFAAoF;IACpF,OAAO,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACxM,CAAC"}

package/dist/agents.d.ts

@@ -0,0 +1,52 @@
+import Relay, { type AgentImageRecipe, type ContactCardItem } from "@relaymessenger/sdk";
+import type { ConfigContext, RelayConfig, ResolvedAuth } from "./config.js";
+/** Injected SDK and persistence boundaries keep command logic independently testable. */
+export interface AgentDependencies {
+    read: () => Promise<RelayConfig>;
+    preflight: () => Promise<void>;
+    update: <T>(change: (config: RelayConfig) => T) => Promise<T>;
+    bootstrap: typeof Relay.createAgent;
+    client: (token: string, apiURL: string) => Pick<Relay, "contactCard" | "agents">;
+    auth: (profile?: string) => Promise<ResolvedAuth>;
+    env: NodeJS.ProcessEnv;
+}
+export declare const agentDependencies: (context?: ConfigContext, fetch?: typeof globalThis.fetch) => AgentDependencies;
+export interface CreateAgentInput {
+    profile?: string;
+    apiURL?: string;
+    tokenName?: string;
+    handle?: string;
+    firstName?: string;
+    imageURL?: string;
+    imageRecipe?: AgentImageRecipe;
+}
+export declare function createAgent(input: CreateAgentInput, deps: AgentDependencies): Promise<{
+    profile: string;
+    api_url: string;
+    agent: ContactCardItem;
+    share_url: string;
+    token: "stored";
+}>;
+export declare function listAgents(deps: AgentDependencies): Promise<{
+    agents: ({
+        profile: string;
+        api_url: string;
+        token: string;
+        contact_cards: ContactCardItem[];
+        error?: never;
+    } | {
+        profile: string;
+        api_url: string;
+        token: string;
+        error: string;
+        contact_cards?: never;
+    })[];
+}>;
+export declare function selectAgentAuth(handle: string, profile: string | undefined, deps: AgentDependencies): Promise<ResolvedAuth>;
+export declare function deleteAgent(handle: string, profile: string | undefined, deps: AgentDependencies): Promise<{
+    ok: boolean;
+    handle: string;
+    profile: string;
+    token: string;
+}>;
+//# sourceMappingURL=agents.d.ts.map

package/dist/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../src/agents.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAyC,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAChI,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG5E,yFAAyF;AACzF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;IACjC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9D,SAAS,EAAE,OAAO,KAAK,CAAC,WAAW,CAAC;IACpC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,QAAQ,CAAC,CAAC;IACjF,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAClD,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED,eAAO,MAAM,iBAAiB,GAAI,UAAS,aAAkB,EAAE,QAAQ,OAAO,UAAU,CAAC,KAAK,KAAG,iBAQ/F,CAAC;AAQH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,gBAAgB,CAAC;CAChC;AAYD,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB;;;;;;GAuEjF;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,iBAAiB;;;;;;;;;;;;;;GAevD;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CA0BjI;AAED,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,iBAAiB;;;;;GAsBrG"}