relaymessenger 0.0.0 → 0.1.0-staging.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Companion Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,313 @@
+# Relay CLI
+
+`relaymessenger` is the official terminal client for the current Relay
+v1 Agent API. It delegates all Relay calls and response types to
+`@relaymessenger/sdk`.
+
+Source is maintained in
+[`RelayMessenger/Relay-SDK`](https://github.com/RelayMessenger/Relay-SDK/tree/staging/packages/cli)
+under `packages/cli`.
+
+## Install
+
+```sh
+npx relaymessenger@staging --version
+# Or install the staging CLI globally:
+npm install --global relaymessenger@staging
+```
+
+Node.js 22.22.3 or newer is required. `relaymessenger` is
+the canonical executable; `relay` is the shorter command alias.
+
+## Interactive use
+
+Run `relay` (or `npx relaymessenger@staging`) in a terminal for Create agent,
+Sign in with an existing token, List saved agents, Delete agent, Install Relay
+skill, and Exit. `relay agents` and `relay auth` offer focused menus. Menus and
+passwords use Clack; cancellation before a mutation leaves it unperformed.
+
+Explicit commands still work. `--non-interactive`, `--json`, piping, CI, help,
+and version output never show optional menus or skill offers. Interactive
+agent deletion asks for confirmation; scripted deletion does not gain a
+mandatory `--yes` flag.
+
+Before interactive creation or sign-in setup, the CLI may offer the Relay skill
+once if it is absent from the standard install locations. Declining skips skill
+installation; cancelling stops setup before any identity is created. Accepting runs the standard installer, which asks you to choose the
+agents and project/global scope:
+
+```sh
+npx --yes skills@1.5.24 add https://github.com/RelayMessenger/Relay-SDK/tree/staging/skills/relay --skill relay
+```
+
+The CLI does not silently download skills or change every agent's configuration.
+Optional installer errors are reported before setup proceeds and never repeat
+an agent creation. An explicit install-only failure exits nonzero. Selected `CODEX_HOME`,
+`CLAUDE_CONFIG_DIR`, and `HERMES_HOME` locations are preserved and checked; explicit
+`DISABLE_TELEMETRY` and `DO_NOT_TRACK` preferences are passed to the installer.
+The install menu remains available when you explicitly want to run the installer.
+
+### Persistent agent view
+
+Successful interactive creation and sign-in keep the public QR/link and event
+view open. Reopen an existing saved identity with
+`relay --profile <saved-profile> auth status`. Press `q`, Ctrl-C, or Ctrl-D to
+close the view; it does not delete the agent or stop a selected runtime.
+
+The view uses the SDK's explicit `observe: true` WebSocket mode and requires the
+server's `observational: true` ready confirmation. It sends no event ACK or
+FULL-sync completion and never falls back to a consuming listener. Events are
+best-effort and may have retention gaps; event-view connectivity is not model
+readiness. Unavailable observation is displayed without claiming a connected
+runtime. JSON, non-interactive, and non-TTY commands do not open this session.
+
+## Agent Token authentication
+
+Use `agents create` for a new agent, or import an existing Agent Token. Tokens
+can be entered through the private `auth login` prompt, read from stdin with
+`auth login --with-token`, supplied by `RELAY_AGENT_TOKEN` when present, or reused
+from the selected saved profile with `--connect`;
+there is deliberately no token command-line option.
+
+```sh
+# Private prompt when RELAY_AGENT_TOKEN is not set:
+relay auth login --api-url https://api.staging.relayapp.im
+# Headless stdin:
+printf '%s' "$RELAY_AGENT_TOKEN" | relay auth login --with-token --api-url https://api.staging.relayapp.im
+relay auth status
+relay doctor
+```
+
+Profiles live in `${XDG_CONFIG_HOME:-~/.config}/relay/config.json`. The
+directory is mode `0700` and the file is mode `0600` on POSIX systems.
+
+```sh
+relay profiles add staging --api-url https://api.staging.relayapp.im
+relay profiles use staging
+printf '%s' "$STAGING_RELAY_AGENT_TOKEN" |
+  relay auth login --profile staging --with-token
+relay profiles list
+```
+
+Resource-command token resolution order is:
+
+1. `RELAY_AGENT_TOKEN`, `RELAY_API_URL`, and `RELAY_PROFILE`;
+2. the selected local profile;
+3. `https://api.relayapp.im` as the API URL.
+
+Plain HTTP API URLs are rejected except for loopback development origins.
+
+## Resource commands
+
+Resource commands below print JSON; agent creation also offers a human-readable
+share link and QR unless `--json` is selected.
+
+```sh
+relay chats list --limit 20
+relay chats get "$CHAT_ID"
+relay chats messages list "$CHAT_ID" --limit 50 --order desc   # newest first; omit --order for oldest first
+relay chats messages send "$CHAT_ID" --text "Hello" \
+  --idempotency-key "$(uuidgen)"
+relay messages send --to advait --text "Hello" \
+  --idempotency-key "$(uuidgen)"
+relay messages react "$MESSAGE_ID" --operation add --type love
+relay chats typing start "$CHAT_ID"
+relay chats read "$CHAT_ID"
+
+relay contact-card get
+relay contact-card setup --handle weather.acme --first-name Weather
+relay contact-card share "$CHAT_ID"
+relay contact-requests create advait
+
+relay attachments upload ./report.pdf --content-type application/pdf
+relay blocked-handles list
+relay webhooks events
+relay webhooks subscriptions list
+```
+
+Run `relay --help` and each command group's `--help` for the full current
+surface: Chats, Messages, Attachments, blocked Handles, webhook events and
+subscriptions, Contact Cards, and Contact requests.
+
+Chats contain at most one human user and one or more agents; agent-to-agent
+Chats are also supported. Agents and users have the same generic Chat API
+permissions. Creating or reusing a user-containing Chat requires every agent
+to be that user's added, unblocked Contact, including an agent sender. Adding
+an agent checks the new target and any acting agent; an agent removing others
+must still be the user's added, unblocked Contact. Self-leave keeps existing
+rules. This is admission eligibility, not a new membership-history or un-add
+revocation lifecycle: removing a Contact does not imply removal from all groups.
+It does not require conversational approval or company-policy tables. Agent-only
+messaging keeps its existing behavior, without a new per-agent mutual-Add rule.
+Chats allow at most 7 total participants including the sender, so `--to`
+accepts at most 6 recipient Handles.
+
+Participant commands keep their generic names; add an eligible agent by its Handle:
+
+```sh
+relay chats participants add "$CHAT_ID" research.agent
+relay chats participants remove "$CHAT_ID" research.agent
+```
+
+`contact-card share` shares the authenticated agent's own card.
+`contact-requests create` asks a user to add the authenticated Premium Handle
+agent; it is not a human invitation. Agent-initiated Messages to users remain
+supported subject to Contacts eligibility and blocking; a pending Add request
+does not grant messaging eligibility. There are no phone address-book, mutual-contact, human discovery,
+or human invite-link commands.
+
+## Developer-managed agents
+
+```sh
+relay agents create --api-url https://api.staging.relayapp.im
+relay agents create --api-url https://api.staging.relayapp.im --json
+relay agents list --json
+relay --profile brave_cangoo.dev agents delete brave_cangoo.dev
+```
+
+Creation stores the one-time Agent Token in a new named profile and prints only
+public metadata, a share link, and a terminal QR. JSON output includes
+`token: "stored"`, never the secret. Use an explicit `--profile <new-name>` to
+choose a new profile name; existing profiles and the current profile selection
+are preserved. `--token-name` labels the token, not a machine identity.
+
+Listing is local inventory, not a global account API. Each saved credential reads
+its current Contact Card using its saved API origin; environment token/origin
+overrides are not applied across the inventory. Tokenless profiles remain in `profiles list`, not agent inventory.
+Unavailable Contact Cards are reported without exposing error bodies.
+
+Deletion honors explicit profile/ENV selection. Otherwise it selects one saved
+credential by its authenticated Contact Card, refusing unavailable or ambiguous
+matches (including the same handle on multiple origins). It only clears that
+profile's matching saved credential after confirmed HTTP 204. Errors and uncertain
+responses retain credentials; unrelated environment/profile credentials are not
+removed. New creation defaults to the staging API when this package has a staging prerelease
+version; it never inherits an empty legacy production profile. Explicit `--api-url`
+or `RELAY_API_URL` overrides remain authoritative, and existing profile origins
+are unchanged. Creation is never automatically retried. If creation succeeds but local
+storage fails, the command reports the safely assigned handle and whether local
+storage is present, absent, or unverified, without printing the secret. Private
+config write/ACL preflight runs before the POST and never overwrites existing
+credentials. It is not a reservation or a durable recovery mechanism.
+
+### Optional identity and picture
+
+```sh
+relay agents create --api-url https://api.staging.relayapp.im \
+  --handle my_helper.dev --name "My Helper" \
+  --image-url https://images.example.com/helper.png
+```
+
+Omit any option to keep the server's assigned handle/readable bird name/default
+image. Custom handles are full lowercase `.dev` handles; a collision is an error,
+never a request for a random replacement. Interactive creation asks `Handle (optional)`, `Name (optional)`, and `Image
+(optional)` with a single help line; blank answers preserve defaults. Selecting
+Create already expresses intent, so no second create confirmation is shown.
+Recipe files remain an advanced `--image-recipe` flag, not another setup question.
+
+`--image <path-or-url>` accepts a local supported image or public HTTPS URL;
+`--image-url` remains a URL alias. The CLI checks a local file's readability,
+size, and image signature before creation. Once the new token is privately saved,
+it allocates/uploads through the existing Attachments API, checks completion,
+and updates the Contact Card using the completed `attachment_id`.
+
+If image upload/promotion is not confirmed, the new identity and saved profile
+are retained, and the command reports the incomplete image phase. Retry the
+image on that existing identity—do not run `agents create` again:
+
+```sh
+relay --profile my_helper.dev contact-card update --handle my_helper.dev --image ./helper.png
+# If upload completed but promotion failed, reuse the returned attachment ID:
+relay --profile my_helper.dev contact-card update --handle my_helper.dev --attachment-id <completed-id>
+```
+
+`--image-recipe <json-file>` remains an advanced flag for existing Relay avatar
+metadata, paired with its rendered local image/URL/attachment. It is not a default
+interactive question. The CLI does not render recipes or generate images. The
+server's response supplies the permanent public image URL.
+
+### Optional native runtime handoff
+
+```sh
+relay agents create --api-url https://api.staging.relayapp.im --connect hermes \
+  --runtime-home /absolute/hermes-profile \
+  --runtime-state-dir /absolute/hermes-profile/relay \
+  --confirm-configure --runtime-stopped
+
+# Import into a staging profile via private stdin; no creation request.
+relay --profile staging auth login --with-token --api-url https://api.staging.relayapp.im --connect openclaw \
+  --runtime-config /absolute/openclaw.json \
+  --runtime-state-dir /absolute/openclaw-state --runtime-account my-agent \
+  --confirm-configure --runtime-stopped
+```
+
+Stop the selected runtime before passing `--runtime-stopped`. `--confirm-configure`
+authorizes only private configuration writes. `--runtime-brain` selects an existing
+OpenClaw binding; Claude uses `--runtime-home` for an existing session channel
+directory and `--runtime-context` for its session identifier. Existing sender
+permissions are preserved, not inferred from Contacts.
+
+Creation handoff reads the newly saved profile directly, ignoring unrelated ENV
+credentials. `auth login --connect` without token-input flags reuses the selected saved profile
+and its origin, ignoring unrelated ENV credentials. Add `--with-token` to select stdin explicitly. Plain `auth login` uses
+`RELAY_AGENT_TOKEN` in headless environments or a hidden terminal prompt. Handoff validates the credential before saving
+an import and never falls back to creation.
+Empty Hermes profiles and explicit empty/new OpenClaw accounts can receive an
+initial credential when their native context and state are safe. Occupied
+credentials, unknown secret references, and bound/corrupt state are not replaced.
+
+Handoff output reports configuration status and `connected: false`: this command
+does not install, launch, stop, or test-connect a runtime. Start it using its native
+workflow. If handoff fails after creation, the token remains stored; use `auth login --connect` with the existing token rather than creating another identity.
+
+## Local event forwarding
+
+`relay events listen` is a development convenience backed only by the SDK's
+source-backed Agent WebSocket. It refuses Relay's production API, requires an
+explicit profile, and requires confirmation that the profile belongs to a
+dedicated non-production Agent whose durable checkpoint may advance:
+
+```sh
+relay --profile staging events listen --acknowledge-events
+relay --profile staging events listen --acknowledge-events \
+  --forward-to http://127.0.0.1:3000/relay-events
+```
+
+Forward destinations must be loopback HTTP(S). Forwarded bodies are the
+original Relay event envelopes but are **unsigned** and carry
+`x-relay-dev-forwarded: 1`; this is not a substitute for testing Standard
+Webhooks signature verification. A non-2xx local response is not acknowledged,
+so Relay can redeliver it. Local receivers must deduplicate by `event_id`.
+
+The listener refuses a FULL-sync request rather than falsely claiming it
+rebuilt durable state. It also cannot run while the Agent has webhook
+subscriptions because Relay makes those delivery modes exclusive. Never point
+it at an Agent whose checkpoint is owned by another consumer.
+
+## Doctor
+
+`relay doctor` checks the Node runtime, API URL, token resolution, local file
+permissions, SDK contract availability, and a read-only API request.
+`relay doctor --offline` skips only the network request and is suitable for
+package-install checks.
+
+## Security
+
+- Keep Agent Tokens out of source, URLs, shell arguments, and logs.
+- Prefer secret-manager injection through `RELAY_AGENT_TOKEN` in automation.
+- Output and error paths redact every locally resolvable token.
+- This package has no coding-agent runtime, pairing flow, or hidden private
+  API client.
+
+## Development
+
+All Linux execution happens in a fresh Daytona sandbox:
+
+```sh
+npm ci
+npm run validate
+```
+
+`validate` performs type checking, unit and negative tests, the pinned SDK
+operation-hash check, boundary checks, package packing, isolated tarball
+installation, and installed-bin doctor smoke tests.

package/dist/agent-handoff.d.ts

@@ -0,0 +1,29 @@
+import type { Command } from "commander";
+import type { AgentDependencies } from "./agents.js";
+import { type RuntimeConnectTarget } from "./runtime-connect.js";
+export interface HandoffOptions {
+    connect?: string;
+    runtimeHome?: string;
+    runtimeConfig?: string;
+    runtimeStateDir?: string;
+    runtimeAccount?: string;
+    runtimeBrain?: string;
+    runtimeContext?: string;
+    confirmConfigure?: boolean;
+    runtimeStopped?: boolean;
+}
+export declare function handoffOptions(command: Command): Command;
+export declare function handoffTarget(options: HandoffOptions): Promise<RuntimeConnectTarget | undefined>;
+export declare function handoffAgent(target: RuntimeConnectTarget, profile: string | undefined, deps: AgentDependencies, confirmation: {
+    consent: boolean;
+    runtimeStopped: boolean;
+}, savedProfileOnly?: boolean): Promise<{
+    profile: string;
+    handle: string;
+    runtime: "openclaw" | "hermes" | "claude-code";
+    status: "conflict" | "required-action" | "configured" | "ready";
+    code: string;
+    message: string;
+    connected: boolean;
+}>;
+//# sourceMappingURL=agent-handoff.d.ts.map

package/dist/agent-handoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-handoff.d.ts","sourceRoot":"","sources":["../src/agent-handoff.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAA2C,KAAK,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE1G,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AACD,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAUxD;AAWD,wBAAsB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAsBtG;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,YAAY,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,EAAE,gBAAgB,UAAQ;;;;;;;;GAiB3M"}

package/dist/agent-handoff.js

@@ -0,0 +1,81 @@
+import { safeMetadata } from "./output.js";
+import { lstat, realpath } from "node:fs/promises";
+import { basename, dirname, isAbsolute, join } from "node:path";
+import { DEFAULT_API_URL, validateApiURL, validateToken } from "./config.js";
+import { applyRuntimeConnect, planRuntimeConnect } from "./runtime-connect.js";
+export function handoffOptions(command) {
+    return command.option("--connect <runtime>", "configure openclaw, hermes, or claude-code; does not launch it")
+        .option("--runtime-home <path>", "absolute Hermes profile home or Claude session channel directory")
+        .option("--runtime-config <path>", "absolute existing OpenClaw config file")
+        .option("--runtime-state-dir <path>", "absolute selected runtime state directory")
+        .option("--runtime-account <name>", "explicit OpenClaw Relay account")
+        .option("--runtime-brain <id>", "existing OpenClaw brain binding")
+        .option("--runtime-context <id>", "explicit Claude session context")
+        .option("--confirm-configure", "consent to writing only the selected runtime credential config")
+        .option("--runtime-stopped", "confirm you have stopped the selected runtime before configuration");
+}
+async function nativePath(value, name, file = false) {
+    if (!value || !isAbsolute(value))
+        throw new Error(`${name} must select an absolute native path.`);
+    // The user selects the context; resolve directory aliases, never linked config files.
+    return file ? join(await realpath(dirname(value)), basename(value)) : await realpath(value);
+}
+async function requiredNativeFile(path) {
+    const info = await lstat(path);
+    if (!info.isFile() || info.isSymbolicLink())
+        throw new Error("Select an existing regular native runtime configuration file.");
+    return path;
+}
+export async function handoffTarget(options) {
+    if (!options.connect) {
+        if (Object.entries(options).some(([key, value]) => (key.startsWith("runtime") || key === "confirmConfigure") && value !== undefined))
+            throw new Error("Runtime options require --connect.");
+        return undefined;
+    }
+    if (!options.confirmConfigure || !options.runtimeStopped)
+        throw new Error("Handoff requires --confirm-configure and --runtime-stopped after you stop the selected runtime.");
+    if (options.connect === "openclaw") {
+        if (!options.runtimeAccount)
+            throw new Error("Select --runtime-account explicitly.");
+        return { runtime: "openclaw", configPath: await requiredNativeFile(await nativePath(options.runtimeConfig, "--runtime-config", true)), stateDir: await nativePath(options.runtimeStateDir, "--runtime-state-dir", true), account: options.runtimeAccount, ...(options.runtimeBrain ? { brain: options.runtimeBrain } : {}) };
+    }
+    if (options.connect === "hermes") {
+        const profileHome = await nativePath(options.runtimeHome, "--runtime-home");
+        await requiredNativeFile(join(profileHome, "config.yaml"));
+        return { runtime: "hermes", profileHome, stateDir: await nativePath(options.runtimeStateDir, "--runtime-state-dir", true) };
+    }
+    if (options.connect === "claude-code") {
+        if (!options.runtimeContext?.trim())
+            throw new Error("Select --runtime-context explicitly.");
+        const channelDir = await nativePath(options.runtimeHome, "--runtime-home");
+        await requiredNativeFile(join(channelDir, ".env"));
+        return { runtime: "claude-code", channelDir, context: options.runtimeContext };
+    }
+    throw new Error("--connect must be openclaw, hermes, or claude-code.");
+}
+export async function handoffAgent(target, profile, deps, confirmation, savedProfileOnly = false) {
+    if (confirmation.consent !== true || confirmation.runtimeStopped !== true)
+        throw new Error("Explicit handoff consent and runtime stop confirmation are required.");
+    // Read the just-created/imported saved credential; ENV must not substitute another agent.
+    const saved = savedProfileOnly ? (await deps.read()).profiles[profile] : undefined;
+    if (savedProfileOnly && !saved?.agent_token)
+        throw new Error("Saved profile credential is unavailable; no runtime config was changed.");
+    const auth = savedProfileOnly
+        ? { token: validateToken(saved.agent_token), apiURL: validateApiURL(saved.api_url ?? DEFAULT_API_URL), profile: profile }
+        : await deps.auth(profile);
+    let cards;
+    try {
+        cards = await deps.client(auth.token, auth.apiURL).contactCard.retrieve();
+    }
+    catch {
+        throw new Error("Existing credential validation failed; no runtime config changed and no new agent was created.");
+    }
+    const agents = cards.contact_cards.filter((card) => card.kind === "agent" && card.is_active);
+    if (agents.length !== 1)
+        throw new Error("Select a credential with exactly one active agent Contact Card before handoff.");
+    const plan = await planRuntimeConnect({ agent: { token: auth.token, origin: auth.apiURL, handle: agents[0].handle }, target });
+    const result = plan.status === "ready" ? await applyRuntimeConnect(plan, { consent: confirmation.consent, runtimeStopped: confirmation.runtimeStopped }) : plan;
+    // Do not serialize private input, plan internals, rollback capabilities, or errors.
+    return safeMetadata({ profile: auth.profile, handle: agents[0].handle, runtime: target.runtime, status: result.status, code: result.code, message: result.message, connected: false }, [auth.token]);
+}
+//# sourceMappingURL=agent-handoff.js.map

package/dist/agent-handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-handoff.js","sourceRoot":"","sources":["../src/agent-handoff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGhE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAA6B,MAAM,sBAAsB,CAAC;AAa1G,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,OAAO,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,gEAAgE,CAAC;SAC3G,MAAM,CAAC,uBAAuB,EAAE,kEAAkE,CAAC;SACnG,MAAM,CAAC,yBAAyB,EAAE,wCAAwC,CAAC;SAC3E,MAAM,CAAC,4BAA4B,EAAE,2CAA2C,CAAC;SACjF,MAAM,CAAC,0BAA0B,EAAE,iCAAiC,CAAC;SACrE,MAAM,CAAC,sBAAsB,EAAE,iCAAiC,CAAC;SACjE,MAAM,CAAC,wBAAwB,EAAE,iCAAiC,CAAC;SACnE,MAAM,CAAC,qBAAqB,EAAE,gEAAgE,CAAC;SAC/F,MAAM,CAAC,mBAAmB,EAAE,oEAAoE,CAAC,CAAC;AACvG,CAAC;AACD,KAAK,UAAU,UAAU,CAAC,KAAyB,EAAE,IAAY,EAAE,IAAI,GAAG,KAAK;IAC7E,IAAI,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;IAClG,sFAAsF;IACtF,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9F,CAAC;AACD,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC5C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC9H,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAuB;IACzD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,KAAK,kBAAkB,CAAC,IAAI,KAAK,KAAK,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5L,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;IAC7K,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACrF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/T,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC5E,MAAM,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;QAC3D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,CAAC;IAC9H,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC7F,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC3E,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAA4B,EAAE,OAA2B,EAAE,IAAuB,EAAE,YAA2D,EAAE,gBAAgB,GAAG,KAAK;IAC1M,IAAI,YAAY,CAAC,OAAO,KAAK,IAAI,IAAI,YAAY,CAAC,cAAc,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IACnK,0FAA0F;IAC1F,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,IAAI,gBAAgB,IAAI,CAAC,KAAK,EAAE,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IACxI,MAAM,IAAI,GAAG,gBAAgB;QAC3B,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAM,CAAC,WAAY,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,KAAM,CAAC,OAAO,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,OAAQ,EAAE;QAC7H,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QAAC,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;IAAC,CAAC;IAClF,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;IAAC,CAAC;IAC5H,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IAC3H,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAChI,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChK,oFAAoF;IACpF,OAAO,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACxM,CAAC"}

package/dist/agent-image-upload.d.ts

@@ -0,0 +1,23 @@
+import type Relay from "@relaymessenger/sdk";
+import type { ContactCardItem } from "@relaymessenger/sdk";
+import type { LocalAgentImage } from "./local-image.js";
+export type AgentImageUploadPhase = "identity" | "allocation" | "upload" | "completion" | "promotion";
+export type AgentImageUploadResult = {
+    status: "updated";
+    attachment_id: string;
+    agent: ContactCardItem;
+} | {
+    status: "incomplete";
+    phase: AgentImageUploadPhase;
+    attachment_id?: string;
+    message: string;
+};
+/** Existing authenticated attachment lifecycle only. The caller supplies the
+ * agreed SDK contact-card promotion operation; no route or HTTP implementation
+ * is duplicated here. An uncertain operation is never automatically repeated. */
+export declare function uploadAgentImage(input: {
+    handle: string;
+    image?: LocalAgentImage;
+    attachmentID?: string;
+}, client: Pick<Relay, "attachments" | "contactCard">, promote: (attachmentID: string) => Promise<ContactCardItem>): Promise<AgentImageUploadResult>;
+//# sourceMappingURL=agent-image-upload.d.ts.map

package/dist/agent-image-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-image-upload.d.ts","sourceRoot":"","sources":["../src/agent-image-upload.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,qBAAqB,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,YAAY,GAAG,QAAQ,GAAG,YAAY,GAAG,WAAW,CAAC;AACtG,MAAM,MAAM,sBAAsB,GAC9B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GACpE;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,qBAAqB,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpG;;iFAEiF;AACjF,wBAAsB,gBAAgB,CACpC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,EACzE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAAC,EAClD,OAAO,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,GAC1D,OAAO,CAAC,sBAAsB,CAAC,CAmCjC"}

package/dist/agent-image-upload.js

@@ -0,0 +1,45 @@
+/** Existing authenticated attachment lifecycle only. The caller supplies the
+ * agreed SDK contact-card promotion operation; no route or HTTP implementation
+ * is duplicated here. An uncertain operation is never automatically repeated. */
+export async function uploadAgentImage(input, client, promote) {
+    let phase = "identity";
+    let attachmentID = input.attachmentID;
+    try {
+        const cards = await client.contactCard.retrieve({}, { maxRetries: 0 });
+        if (cards.contact_cards.length !== 1 || cards.contact_cards[0]?.handle !== input.handle || cards.contact_cards[0].kind !== "agent" || !cards.contact_cards[0].is_active) {
+            throw new Error("Selected token does not match the intended agent.");
+        }
+        if (input.image && input.attachmentID)
+            throw new Error("Choose a new image or existing attachment.");
+        if (!attachmentID) {
+            if (!input.image)
+                throw new Error("Image file required.");
+            phase = "allocation";
+            const allocation = await client.attachments.create({
+                filename: input.image.filename, content_type: input.image.contentType, size_bytes: input.image.size,
+            }, { maxRetries: 0 });
+            attachmentID = allocation.attachment_id;
+            phase = "upload";
+            await client.attachments.upload(allocation, new Blob([Uint8Array.from(input.image.data)], { type: input.image.contentType }), { maxRetries: 0, timeout: 120_000, signal: AbortSignal.timeout(120_000) });
+        }
+        phase = "completion";
+        const attachment = await client.attachments.retrieve(attachmentID, { maxRetries: 0 });
+        if (attachment.status !== "complete")
+            throw new Error("Attachment not complete.");
+        phase = "promotion";
+        const agent = await promote(attachmentID);
+        if (agent.handle !== input.handle || agent.kind !== "agent")
+            throw new Error("Promotion response does not match the intended agent.");
+        return { status: "updated", attachment_id: attachmentID, agent };
+    }
+    catch {
+        // Never return server/upload response text or exception details: either may
+        // reflect the private token or temporary upload capability.
+        return {
+            status: "incomplete", phase,
+            ...(attachmentID ? { attachment_id: attachmentID } : {}),
+            message: "Agent identity and saved token are retained. Image update was not confirmed; retry the image on this existing identity, not agent creation.",
+        };
+    }
+}
+//# sourceMappingURL=agent-image-upload.js.map

package/dist/agent-image-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-image-upload.js","sourceRoot":"","sources":["../src/agent-image-upload.ts"],"names":[],"mappings":"AASA;;iFAEiF;AACjF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAyE,EACzE,MAAkD,EAClD,OAA2D;IAE3D,IAAI,KAAK,GAA0B,UAAU,CAAC;IAC9C,IAAI,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACxK,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACrG,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC1D,KAAK,GAAG,YAAY,CAAC;YACrB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;gBACjD,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;aACpG,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;YACtB,YAAY,GAAG,UAAU,CAAC,aAAa,CAAC;YACxC,KAAK,GAAG,QAAQ,CAAC;YACjB,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3M,CAAC;QACD,KAAK,GAAG,YAAY,CAAC;QACrB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QACtF,IAAI,UAAU,CAAC,MAAM,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAClF,KAAK,GAAG,WAAW,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACtI,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,4DAA4D;QAC5D,OAAO;YACL,MAAM,EAAE,YAAY,EAAE,KAAK;YAC3B,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,6IAA6I;SACvJ,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/agent-session.d.ts

@@ -0,0 +1,23 @@
+import Relay from "@relaymessenger/sdk";
+import type { AgentDependencies } from "./agents.js";
+import { type TerminalSessionIO, type TerminalSessionOptions, type TerminalSessionResult, type TerminalRuntimeState } from "./terminal-session.js";
+export interface AgentSessionInput {
+    profile: string;
+    handle?: string;
+    apiURL?: string;
+    shareURL?: string;
+    runtime?: TerminalRuntimeState;
+}
+export interface AgentSessionDependencies {
+    agents: Pick<AgentDependencies, "read">;
+    fetch?: typeof globalThis.fetch;
+    session?: (options: TerminalSessionOptions, io?: TerminalSessionIO) => Promise<TerminalSessionResult>;
+    io?: TerminalSessionIO;
+    client?: (token: string, origin: string) => Pick<Relay, "contactCard" | "websocket">;
+}
+/** New identities use the exact server share URL. For older imported profiles,
+ * only known Relay environments have a source-backed public-link mapping. */
+export declare function savedAgentShareURL(origin: string, handle: string): string;
+/** Uses the actual saved profile, never an unrelated ENV token or origin. */
+export declare function openSavedAgentSession(input: AgentSessionInput, dependencies: AgentSessionDependencies): Promise<TerminalSessionResult>;
+//# sourceMappingURL=agent-session.d.ts.map

package/dist/agent-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-session.d.ts","sourceRoot":"","sources":["../src/agent-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,qBAAqB,CAAC;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EAAsB,KAAK,iBAAiB,EAAE,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,KAAK,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAGvK,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,oBAAoB,CAAC;CAChC;AACD,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IACxC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,CAAC,EAAE,iBAAiB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACtG,EAAE,CAAC,EAAE,iBAAiB,CAAC;IACvB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,WAAW,CAAC,CAAC;CACtF;AACD;6EAC6E;AAC7E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAIzE;AAED,6EAA6E;AAC7E,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,wBAAwB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAmB5I"}

package/dist/agent-session.js

@@ -0,0 +1,37 @@
+import Relay from "@relaymessenger/sdk";
+import { DEFAULT_API_URL, STAGING_API_URL, validateApiURL, validateToken } from "./config.js";
+import { runTerminalSession } from "./terminal-session.js";
+import { sdkTerminalObserver } from "./terminal-watch.js";
+/** New identities use the exact server share URL. For older imported profiles,
+ * only known Relay environments have a source-backed public-link mapping. */
+export function savedAgentShareURL(origin, handle) {
+    const publicOrigin = origin === STAGING_API_URL ? "https://staging.relayapp.im"
+        : origin === DEFAULT_API_URL ? "https://go.relayapp.im" : undefined;
+    return publicOrigin ? new URL(`/@${encodeURIComponent(handle)}`, publicOrigin).href : "";
+}
+/** Uses the actual saved profile, never an unrelated ENV token or origin. */
+export async function openSavedAgentSession(input, dependencies) {
+    const config = await dependencies.agents.read();
+    const selected = config.profiles[input.profile];
+    if (!selected?.agent_token)
+        throw new Error("Selected profile has no saved credential for viewing.");
+    const origin = validateApiURL(selected.api_url ?? DEFAULT_API_URL);
+    if (input.apiURL && input.apiURL !== origin)
+        throw new Error("Selected profile origin changed; no observer opened.");
+    const token = validateToken(selected.agent_token);
+    const client = dependencies.client?.(token, origin) ?? new Relay({ apiKey: token, baseURL: origin, ...(dependencies.fetch ? { fetch: dependencies.fetch } : {}) });
+    const cards = await client.contactCard.retrieve({}, { maxRetries: 0 });
+    if (cards.contact_cards.length !== 1 || cards.contact_cards[0]?.kind !== "agent" || !cards.contact_cards[0].is_active)
+        throw new Error("An active saved agent is required for the terminal view.");
+    const card = cards.contact_cards[0];
+    if (input.handle && input.handle !== card.handle)
+        throw new Error("Selected profile identity changed; no observer opened.");
+    return (dependencies.session ?? runTerminalSession)({
+        interactive: true,
+        agent: { handle: card.handle, name: card.first_name, profile: input.profile, shareUrl: input.shareURL ?? savedAgentShareURL(origin, card.handle) },
+        runtime: input.runtime ?? { ownership: "unknown", connection: "unknown" },
+        observer: sdkTerminalObserver(client),
+        secrets: [token],
+    }, dependencies.io);
+}
+//# sourceMappingURL=agent-session.js.map

package/dist/agent-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-session.js","sourceRoot":"","sources":["../src/agent-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,qBAAqB,CAAC;AAExC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAE,kBAAkB,EAA8G,MAAM,uBAAuB,CAAC;AACvK,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAgB1D;6EAC6E;AAC7E,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,MAAc;IAC/D,MAAM,YAAY,GAAG,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,6BAA6B;QAC7E,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAwB,EAAE,YAAsC;IAC1G,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACrG,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,OAAO,IAAI,eAAe,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACrH,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACnK,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACnM,MAAM,IAAI,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5H,OAAO,CAAC,YAAY,CAAC,OAAO,IAAI,kBAAkB,CAAC,CAAC;QAClD,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;QAClJ,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE;QACzE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC;QACrC,OAAO,EAAE,CAAC,KAAK,CAAC;KACjB,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC"}