xaq-cli 0.0.0 → 0.1.0-nightly.71

package/dist/commands-CdA6-WE7.js

@@ -0,0 +1,112 @@
+#!/usr/bin/env node
+import { t as LEGACY_PRODUCT } from "./brand--ZB8jTn1.js";
+import { s as resolveDataDir } from "./config-C9XmYZWO.js";
+import { t as NPX } from "./version-BxH7OuWD.js";
+//#region server/connections-cli/commands.ts
+const GROUP = "MCP connections (on xaq's machine):";
+const collect = (value, previous) => [...previous ?? [], value];
+const dataDirOf = (o) => resolveDataDir(o.data, { quiet: true });
+const dataOption = (cmd) => cmd.option("-d, --data <dir>", `xaq's data directory (default ~/.xaq, or an existing ~/.${LEGACY_PRODUCT}; env XAQ_DATA)`);
+async function withApi(o, run) {
+	const { CLEANUP_SIGNALS, openAdminChannel } = await import("./admin-CWofnT_Q.js");
+	const { ConnectionsApi } = await import("./api-BFpElwqK.js");
+	const { TerminalPrompter } = await import("./prompt-CKMQx_MJ.js");
+	const channel = openAdminChannel({ dataDir: dataDirOf(o) });
+	const handlers = CLEANUP_SIGNALS.map((sig) => {
+		const h = () => {
+			channel.close();
+			process.exit(sig === "SIGINT" ? 130 : 128 + (sig === "SIGTERM" ? 15 : 1));
+		};
+		process.once(sig, h);
+		return [sig, h];
+	});
+	try {
+		return await run({
+			api: new ConnectionsApi(channel),
+			prompter: new TerminalPrompter(!!o.yes)
+		});
+	} finally {
+		for (const [sig, h] of handlers) process.removeListener(sig, h);
+		channel.close();
+	}
+}
+/** This xaq's own MCP origins, so `import` never imports its own entry. */
+async function selfOrigins(dataDir) {
+	const { runningInstance } = await import("./instance-CwWbFbJ8.js");
+	const { daemonOrigin } = await import("./admin-CWofnT_Q.js");
+	const running = runningInstance(dataDir);
+	if (!running) return [];
+	return [
+		daemonOrigin(running),
+		`http://localhost:${running.port}`,
+		`http://127.0.0.1:${running.port}`,
+		`http://[::1]:${running.port}`
+	];
+}
+function registerConnectionsCommands(program) {
+	const connections = program.command("connections", { hidden: false }).description("the MCP servers xaq connects agents to (Notion, WHOOP, any MCP URL); run on xaq's machine").summary("add, list, reconnect or remove connected MCP servers").helpGroup(GROUP);
+	dataOption(connections.command("add").description("connect an integration (notion, whoop) or any MCP server URL, interactively").argument("<integration-or-url>", "notion, whoop, or an MCP server URL such as https://mcp.example.com/mcp")).option("--slug <name>", "its name: agents see its tools as <name>__<tool>").option("--access <level>", "full, ask (ask before risky actions; the default) or read").option("--agent <name>", "an agent that gets it (repeatable; default: all agents; \"all\")", collect).option("--header <name>", "header for a server that wants a static key (default Authorization)").option("--paste", "paste the address the browser lands on after signing in, instead of waiting for the redirect (automatic over SSH)").option("--allow-private <origin>", "allow this exact scheme://host:port on this machine or a private network without asking (--yes never does)").option("-y, --yes", "answer yes to confirmations and take the defaults (never to a private-network allow)").addHelpText("after", `
+Examples:
+  ${NPX} connections add notion
+  ${NPX} connections add https://mcp.example.com/mcp --access read
+  ${NPX} connections add http://127.0.0.1:8787/mcp      # asks before allowing a server on this machine`).action(async (target, o) => {
+		const { addConnection } = await import("./manage-DoXqvjnU.js");
+		process.exitCode = await withApi(o, (deps) => addConnection(target, o, deps));
+	});
+	dataOption(connections.command("list").description("list connections with their status and access")).action(async (o) => {
+		const { listConnections } = await import("./manage-DoXqvjnU.js");
+		process.exitCode = await withApi(o, (deps) => listConnections(deps));
+	});
+	dataOption(connections.command("reconnect").description("sign in again (OAuth) or replace the key (header)").argument("<name>", "the connection's name")).option("--paste", "paste the address the browser lands on (automatic over SSH)").option("--header <name>", "header connections: the header's name (default: asks, Authorization)").action(async (slug, o) => {
+		const { reconnectConnection } = await import("./manage-DoXqvjnU.js");
+		process.exitCode = await withApi(o, (deps) => reconnectConnection(slug, o, deps));
+	});
+	dataOption(connections.command("disable").description("turn a connection off at once (the kill switch); turn it back on in the console").argument("<name>", "the connection's name")).option("-y, --yes", "don't ask").action(async (slug, o) => {
+		const { disableConnection } = await import("./manage-DoXqvjnU.js");
+		process.exitCode = await withApi(o, (deps) => disableConnection(slug, deps));
+	});
+	dataOption(connections.command("remove").description("remove a connection and delete its credentials").argument("<name>", "the connection's name")).option("-y, --yes", "don't ask").action(async (slug, o) => {
+		const { removeConnection } = await import("./manage-DoXqvjnU.js");
+		process.exitCode = await withApi(o, (deps) => removeConnection(slug, deps));
+	});
+	dataOption(program.command("import", { hidden: false }).description("move an agent tool's MCP servers into xaq: one connection each, credentials moved into xaq").summary("import MCP servers from Hermes, Claude Code, Cursor or Codex").helpGroup(GROUP).requiredOption("--from <client>", "hermes, claude-code, cursor or codex")).option("--dry-run", "print exactly what would be created and changed, and change nothing").option("--access <level>", "for every imported connection: full, ask (the default) or read").option("--agent <name>", "an agent that gets them (repeatable; default: all agents; \"all\")", collect).option("--profile <name>", "the agent profile setup-mcp uses for the single xaq entry (default \"default\")").option("--allow-private <origin>", "allow this exact scheme://host:port on this machine or a private network without asking (repeatable; --yes never does)", collect).option("-y, --yes", "answer yes to the confirmations (scripts); never to a private-network allow or a project's .mcp.json servers").addHelpText("after", `
+Reads: hermes ~/.hermes/config.yaml mcp_servers (+ ~/.hermes/.env) · claude-code ~/.claude.json and ./.mcp.json ·
+cursor ~/.cursor/mcp.json · codex ~/.codex/config.toml. Static headers move into xaq (encrypted); OAuth
+servers are created needing Connect (their tokens stay in the client); local (stdio) servers aren't supported yet
+and stay where they are. Servers on this machine or a private network are created only after you confirm the exact
+host:port. Then it offers setup-mcp --tool <client>, which replaces the entries that now work through xaq
+with the single xaq entry, after a timestamped backup. The entry keeps the name the profile already uses ("xaq", or
+"${LEGACY_PRODUCT}" for a profile set up before the rename), so Hermes routes and cron jobs confined to it keep working.
+
+Examples:
+  ${NPX} import --from hermes --dry-run
+  ${NPX} import --from hermes`).action(async (o) => {
+		const { runImport } = await import("./import-DsN5NZT3.js");
+		const self = await selfOrigins(dataDirOf(o));
+		if (o.dryRun) {
+			const { TerminalPrompter } = await import("./prompt-CKMQx_MJ.js");
+			const { openAdminChannel } = await import("./admin-CWofnT_Q.js");
+			const { ConnectionsApi } = await import("./api-BFpElwqK.js");
+			let channel = null;
+			try {
+				process.exitCode = await runImport(o, {
+					prompter: new TerminalPrompter(!!o.yes),
+					openApi: () => new ConnectionsApi(channel = openAdminChannel({ dataDir: dataDirOf(o) })),
+					selfOrigins: self
+				});
+			} finally {
+				channel?.close();
+			}
+			return;
+		}
+		process.exitCode = await withApi(o, (deps) => runImport(o, {
+			prompter: deps.prompter,
+			openApi: () => deps.api,
+			selfOrigins: self
+		}));
+	});
+}
+//#endregion
+export { registerConnectionsCommands };
+
+//# sourceMappingURL=commands-CdA6-WE7.js.map

package/dist/commands-CdA6-WE7.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands-CdA6-WE7.js","names":[],"sources":["../server/connections-cli/commands.ts"],"sourcesContent":["import type { Command } from \"commander\";\nimport { NPX } from \"../listen/version.ts\";\nimport { LEGACY_PRODUCT } from \"../brand.ts\";\nimport { resolveDataDir } from \"../config.ts\";\n\n/**\n * `connections …` and `import --from …`: run on the daemon's machine, talking to its admin API through the\n * one-time local admin session (admin.ts). Listed in --help since the console (#65) shipped; while the daemon's\n * `brokerUpstreams` setting is off they say so (CONNECTIONS_VISIBLE).\n */\nexport const CONNECTIONS_VISIBLE = true;\nconst GROUP = \"MCP connections (on xaq's machine):\";\n\nconst collect = (value: string, previous: string[] | undefined) => [...(previous ?? []), value];\n// --data, else XAQ_DATA (AGENTINBOX_DATA), else ~/.xaq or an existing pre-rename ~/.agentinbox (config.ts; rename-xaq: keep).\nconst dataDirOf = (o: { data?: string }) => resolveDataDir(o.data, { quiet: true });\nconst dataOption = (cmd: Command) => cmd.option(\"-d, --data <dir>\", `xaq's data directory (default ~/.xaq, or an existing ~/.${LEGACY_PRODUCT}; env XAQ_DATA)`);\n\nasync function withApi<T>(o: { data?: string; yes?: boolean }, run: (deps: { api: import(\"./api.ts\").ConnectionsApi; prompter: import(\"./prompt.ts\").Prompter }) => Promise<T>): Promise<T> {\n  const { CLEANUP_SIGNALS, openAdminChannel } = await import(\"./admin.ts\");\n  const { ConnectionsApi } = await import(\"./api.ts\");\n  const { TerminalPrompter } = await import(\"./prompt.ts\");\n  const channel = openAdminChannel({ dataDir: dataDirOf(o) });\n  const handlers = CLEANUP_SIGNALS.map((sig) => {\n    const h = () => {\n      channel.close();\n      process.exit(sig === \"SIGINT\" ? 130 : 128 + (sig === \"SIGTERM\" ? 15 : 1));\n    };\n    process.once(sig, h);\n    return [sig, h] as const;\n  });\n  try {\n    return await run({ api: new ConnectionsApi(channel), prompter: new TerminalPrompter(!!o.yes) });\n  } finally {\n    for (const [sig, h] of handlers) process.removeListener(sig, h);\n    channel.close();\n  }\n}\n\n/** This xaq's own MCP origins, so `import` never imports its own entry. */\nasync function selfOrigins(dataDir: string): Promise<string[]> {\n  const { runningInstance } = await import(\"../instance.ts\");\n  const { daemonOrigin } = await import(\"./admin.ts\");\n  const running = runningInstance(dataDir);\n  if (!running) return [];\n  return [daemonOrigin(running), `http://localhost:${running.port}`, `http://127.0.0.1:${running.port}`, `http://[::1]:${running.port}`];\n}\n\nexport function registerConnectionsCommands(program: Command): void {\n  const connections = program\n    .command(\"connections\", { hidden: !CONNECTIONS_VISIBLE })\n    .description(\"the MCP servers xaq connects agents to (Notion, WHOOP, any MCP URL); run on xaq's machine\")\n    .summary(\"add, list, reconnect or remove connected MCP servers\")\n    .helpGroup(GROUP);\n\n  dataOption(\n    connections\n      .command(\"add\")\n      .description(\"connect an integration (notion, whoop) or any MCP server URL, interactively\")\n      .argument(\"<integration-or-url>\", \"notion, whoop, or an MCP server URL such as https://mcp.example.com/mcp\"),\n  )\n    .option(\"--slug <name>\", \"its name: agents see its tools as <name>__<tool>\")\n    .option(\"--access <level>\", \"full, ask (ask before risky actions; the default) or read\")\n    .option(\"--agent <name>\", 'an agent that gets it (repeatable; default: all agents; \"all\")', collect)\n    .option(\"--header <name>\", \"header for a server that wants a static key (default Authorization)\")\n    .option(\"--paste\", \"paste the address the browser lands on after signing in, instead of waiting for the redirect (automatic over SSH)\")\n    .option(\"--allow-private <origin>\", \"allow this exact scheme://host:port on this machine or a private network without asking (--yes never does)\")\n    .option(\"-y, --yes\", \"answer yes to confirmations and take the defaults (never to a private-network allow)\")\n    .addHelpText(\n      \"after\",\n      `\nExamples:\n  ${NPX} connections add notion\n  ${NPX} connections add https://mcp.example.com/mcp --access read\n  ${NPX} connections add http://127.0.0.1:8787/mcp      # asks before allowing a server on this machine`,\n    )\n    .action(async (target: string, o: import(\"./manage.ts\").AddFlags & { data?: string }) => {\n      const { addConnection } = await import(\"./manage.ts\");\n      process.exitCode = await withApi(o, (deps) => addConnection(target, o, deps));\n    });\n\n  dataOption(connections.command(\"list\").description(\"list connections with their status and access\")).action(async (o: { data?: string }) => {\n    const { listConnections } = await import(\"./manage.ts\");\n    process.exitCode = await withApi(o, (deps) => listConnections(deps));\n  });\n\n  dataOption(connections.command(\"reconnect\").description(\"sign in again (OAuth) or replace the key (header)\").argument(\"<name>\", \"the connection's name\"))\n    .option(\"--paste\", \"paste the address the browser lands on (automatic over SSH)\")\n    .option(\"--header <name>\", \"header connections: the header's name (default: asks, Authorization)\")\n    .action(async (slug: string, o: { data?: string; paste?: boolean; header?: string }) => {\n      const { reconnectConnection } = await import(\"./manage.ts\");\n      process.exitCode = await withApi(o, (deps) => reconnectConnection(slug, o, deps));\n    });\n\n  dataOption(connections.command(\"disable\").description(\"turn a connection off at once (the kill switch); turn it back on in the console\").argument(\"<name>\", \"the connection's name\"))\n    .option(\"-y, --yes\", \"don't ask\")\n    .action(async (slug: string, o: { data?: string; yes?: boolean }) => {\n      const { disableConnection } = await import(\"./manage.ts\");\n      process.exitCode = await withApi(o, (deps) => disableConnection(slug, deps));\n    });\n\n  dataOption(connections.command(\"remove\").description(\"remove a connection and delete its credentials\").argument(\"<name>\", \"the connection's name\"))\n    .option(\"-y, --yes\", \"don't ask\")\n    .action(async (slug: string, o: { data?: string; yes?: boolean }) => {\n      const { removeConnection } = await import(\"./manage.ts\");\n      process.exitCode = await withApi(o, (deps) => removeConnection(slug, deps));\n    });\n\n  dataOption(\n    program\n      .command(\"import\", { hidden: !CONNECTIONS_VISIBLE })\n      .description(\"move an agent tool's MCP servers into xaq: one connection each, credentials moved into xaq\")\n      .summary(\"import MCP servers from Hermes, Claude Code, Cursor or Codex\")\n      .helpGroup(GROUP)\n      .requiredOption(\"--from <client>\", \"hermes, claude-code, cursor or codex\"),\n  )\n    .option(\"--dry-run\", \"print exactly what would be created and changed, and change nothing\")\n    .option(\"--access <level>\", \"for every imported connection: full, ask (the default) or read\")\n    .option(\"--agent <name>\", 'an agent that gets them (repeatable; default: all agents; \"all\")', collect)\n    .option(\"--profile <name>\", \"the agent profile setup-mcp uses for the single xaq entry (default \\\"default\\\")\")\n    .option(\"--allow-private <origin>\", \"allow this exact scheme://host:port on this machine or a private network without asking (repeatable; --yes never does)\", collect)\n    .option(\"-y, --yes\", \"answer yes to the confirmations (scripts); never to a private-network allow or a project's .mcp.json servers\")\n    .addHelpText(\n      \"after\",\n      `\nReads: hermes ~/.hermes/config.yaml mcp_servers (+ ~/.hermes/.env) · claude-code ~/.claude.json and ./.mcp.json ·\ncursor ~/.cursor/mcp.json · codex ~/.codex/config.toml. Static headers move into xaq (encrypted); OAuth\nservers are created needing Connect (their tokens stay in the client); local (stdio) servers aren't supported yet\nand stay where they are. Servers on this machine or a private network are created only after you confirm the exact\nhost:port. Then it offers setup-mcp --tool <client>, which replaces the entries that now work through xaq\nwith the single xaq entry, after a timestamped backup. The entry keeps the name the profile already uses (\"xaq\", or\n\"${LEGACY_PRODUCT}\" for a profile set up before the rename), so Hermes routes and cron jobs confined to it keep working.\n\nExamples:\n  ${NPX} import --from hermes --dry-run\n  ${NPX} import --from hermes`,\n    )\n    .action(async (o: import(\"./import.ts\").ImportFlags & { data?: string }) => {\n      const { runImport } = await import(\"./import.ts\");\n      const self = await selfOrigins(dataDirOf(o));\n      if (o.dryRun) {\n        // Read-only: the admin channel (when the daemon runs) only lists existing connections.\n        const { TerminalPrompter } = await import(\"./prompt.ts\");\n        const { openAdminChannel } = await import(\"./admin.ts\");\n        const { ConnectionsApi } = await import(\"./api.ts\");\n        let channel: import(\"./admin.ts\").AdminChannel | null = null;\n        try {\n          process.exitCode = await runImport(o, {\n            prompter: new TerminalPrompter(!!o.yes),\n            openApi: () => new ConnectionsApi((channel = openAdminChannel({ dataDir: dataDirOf(o) }))),\n            selfOrigins: self,\n          });\n        } finally {\n          (channel as import(\"./admin.ts\").AdminChannel | null)?.close();\n        }\n        return;\n      }\n      process.exitCode = await withApi(o, (deps) => runImport(o, { prompter: deps.prompter, openApi: () => deps.api, selfOrigins: self }));\n    });\n}\n"],"mappings":";;;;;AAWA,MAAM,QAAQ;AAEd,MAAM,WAAW,OAAe,aAAmC,CAAC,GAAI,YAAY,CAAC,GAAI,KAAK;AAE9F,MAAM,aAAa,MAAyB,eAAe,EAAE,MAAM,EAAE,OAAO,KAAK,CAAC;AAClF,MAAM,cAAc,QAAiB,IAAI,OAAO,oBAAoB,2DAA2D,eAAe,gBAAgB;AAE9J,eAAe,QAAW,GAAqC,KAA6H;CAC1L,MAAM,EAAE,iBAAiB,qBAAqB,MAAM,OAAO;CAC3D,MAAM,EAAE,mBAAmB,MAAM,OAAO;CACxC,MAAM,EAAE,qBAAqB,MAAM,OAAO;CAC1C,MAAM,UAAU,iBAAiB,EAAE,SAAS,UAAU,CAAC,EAAE,CAAC;CAC1D,MAAM,WAAW,gBAAgB,KAAK,QAAQ;EAC5C,MAAM,UAAU;GACd,QAAQ,MAAM;GACd,QAAQ,KAAK,QAAQ,WAAW,MAAM,OAAO,QAAQ,YAAY,KAAK,EAAE;EAC1E;EACA,QAAQ,KAAK,KAAK,CAAC;EACnB,OAAO,CAAC,KAAK,CAAC;CAChB,CAAC;CACD,IAAI;EACF,OAAO,MAAM,IAAI;GAAE,KAAK,IAAI,eAAe,OAAO;GAAG,UAAU,IAAI,iBAAiB,CAAC,CAAC,EAAE,GAAG;EAAE,CAAC;CAChG,UAAU;EACR,KAAK,MAAM,CAAC,KAAK,MAAM,UAAU,QAAQ,eAAe,KAAK,CAAC;EAC9D,QAAQ,MAAM;CAChB;AACF;;AAGA,eAAe,YAAY,SAAoC;CAC7D,MAAM,EAAE,oBAAoB,MAAM,OAAO;CACzC,MAAM,EAAE,iBAAiB,MAAM,OAAO;CACtC,MAAM,UAAU,gBAAgB,OAAO;CACvC,IAAI,CAAC,SAAS,OAAO,CAAC;CACtB,OAAO;EAAC,aAAa,OAAO;EAAG,oBAAoB,QAAQ;EAAQ,oBAAoB,QAAQ;EAAQ,gBAAgB,QAAQ;CAAM;AACvI;AAEA,SAAgB,4BAA4B,SAAwB;CAClE,MAAM,cAAc,QACjB,QAAQ,eAAe,EAAE,QAAQ,MAAqB,CAAC,CAAC,CACxD,YAAY,2FAA2F,CAAC,CACxG,QAAQ,sDAAsD,CAAC,CAC/D,UAAU,KAAK;CAElB,WACE,YACG,QAAQ,KAAK,CAAC,CACd,YAAY,6EAA6E,CAAC,CAC1F,SAAS,wBAAwB,yEAAyE,CAC/G,CAAC,CACE,OAAO,iBAAiB,kDAAkD,CAAC,CAC3E,OAAO,oBAAoB,2DAA2D,CAAC,CACvF,OAAO,kBAAkB,oEAAkE,OAAO,CAAC,CACnG,OAAO,mBAAmB,qEAAqE,CAAC,CAChG,OAAO,WAAW,mHAAmH,CAAC,CACtI,OAAO,4BAA4B,4GAA4G,CAAC,CAChJ,OAAO,aAAa,sFAAsF,CAAC,CAC3G,YACC,SACA;;IAEF,IAAI;IACJ,IAAI;IACJ,IAAI,gGACJ,CAAC,CACA,OAAO,OAAO,QAAgB,MAA0D;EACvF,MAAM,EAAE,kBAAkB,MAAM,OAAO;EACvC,QAAQ,WAAW,MAAM,QAAQ,IAAI,SAAS,cAAc,QAAQ,GAAG,IAAI,CAAC;CAC9E,CAAC;CAEH,WAAW,YAAY,QAAQ,MAAM,CAAC,CAAC,YAAY,+CAA+C,CAAC,CAAC,CAAC,OAAO,OAAO,MAAyB;EAC1I,MAAM,EAAE,oBAAoB,MAAM,OAAO;EACzC,QAAQ,WAAW,MAAM,QAAQ,IAAI,SAAS,gBAAgB,IAAI,CAAC;CACrE,CAAC;CAED,WAAW,YAAY,QAAQ,WAAW,CAAC,CAAC,YAAY,mDAAmD,CAAC,CAAC,SAAS,UAAU,uBAAuB,CAAC,CAAC,CACtJ,OAAO,WAAW,6DAA6D,CAAC,CAChF,OAAO,mBAAmB,sEAAsE,CAAC,CACjG,OAAO,OAAO,MAAc,MAA2D;EACtF,MAAM,EAAE,wBAAwB,MAAM,OAAO;EAC7C,QAAQ,WAAW,MAAM,QAAQ,IAAI,SAAS,oBAAoB,MAAM,GAAG,IAAI,CAAC;CAClF,CAAC;CAEH,WAAW,YAAY,QAAQ,SAAS,CAAC,CAAC,YAAY,iFAAiF,CAAC,CAAC,SAAS,UAAU,uBAAuB,CAAC,CAAC,CAClL,OAAO,aAAa,WAAW,CAAC,CAChC,OAAO,OAAO,MAAc,MAAwC;EACnE,MAAM,EAAE,sBAAsB,MAAM,OAAO;EAC3C,QAAQ,WAAW,MAAM,QAAQ,IAAI,SAAS,kBAAkB,MAAM,IAAI,CAAC;CAC7E,CAAC;CAEH,WAAW,YAAY,QAAQ,QAAQ,CAAC,CAAC,YAAY,gDAAgD,CAAC,CAAC,SAAS,UAAU,uBAAuB,CAAC,CAAC,CAChJ,OAAO,aAAa,WAAW,CAAC,CAChC,OAAO,OAAO,MAAc,MAAwC;EACnE,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAC1C,QAAQ,WAAW,MAAM,QAAQ,IAAI,SAAS,iBAAiB,MAAM,IAAI,CAAC;CAC5E,CAAC;CAEH,WACE,QACG,QAAQ,UAAU,EAAE,QAAQ,MAAqB,CAAC,CAAC,CACnD,YAAY,4FAA4F,CAAC,CACzG,QAAQ,8DAA8D,CAAC,CACvE,UAAU,KAAK,CAAC,CAChB,eAAe,mBAAmB,sCAAsC,CAC7E,CAAC,CACE,OAAO,aAAa,qEAAqE,CAAC,CAC1F,OAAO,oBAAoB,gEAAgE,CAAC,CAC5F,OAAO,kBAAkB,sEAAoE,OAAO,CAAC,CACrG,OAAO,oBAAoB,iFAAiF,CAAC,CAC7G,OAAO,4BAA4B,0HAA0H,OAAO,CAAC,CACrK,OAAO,aAAa,8GAA8G,CAAC,CACnI,YACC,SACA;;;;;;;GAOH,eAAe;;;IAGd,IAAI;IACJ,IAAI,sBACJ,CAAC,CACA,OAAO,OAAO,MAA6D;EAC1E,MAAM,EAAE,cAAc,MAAM,OAAO;EACnC,MAAM,OAAO,MAAM,YAAY,UAAU,CAAC,CAAC;EAC3C,IAAI,EAAE,QAAQ;GAEZ,MAAM,EAAE,qBAAqB,MAAM,OAAO;GAC1C,MAAM,EAAE,qBAAqB,MAAM,OAAO;GAC1C,MAAM,EAAE,mBAAmB,MAAM,OAAO;GACxC,IAAI,UAAoD;GACxD,IAAI;IACF,QAAQ,WAAW,MAAM,UAAU,GAAG;KACpC,UAAU,IAAI,iBAAiB,CAAC,CAAC,EAAE,GAAG;KACtC,eAAe,IAAI,eAAgB,UAAU,iBAAiB,EAAE,SAAS,UAAU,CAAC,EAAE,CAAC,CAAE;KACzF,aAAa;IACf,CAAC;GACH,UAAU;IACR,SAAuD,MAAM;GAC/D;GACA;EACF;EACA,QAAQ,WAAW,MAAM,QAAQ,IAAI,SAAS,UAAU,GAAG;GAAE,UAAU,KAAK;GAAU,eAAe,KAAK;GAAK,aAAa;EAAK,CAAC,CAAC;CACrI,CAAC;AACL"}

package/dist/config-C9XmYZWO.js

@@ -0,0 +1,94 @@
+#!/usr/bin/env node
+import { i as underService, n as envVar, r as pickDir, t as LEGACY_PRODUCT } from "./brand--ZB8jTn1.js";
+import { chmodSync, existsSync, mkdirSync, readdirSync, statSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { homedir } from "node:os";
+//#region server/config.ts
+const DEFAULT_PORT = 8425;
+/** New installs keep their data here. */
+const newDataDir = () => join(homedir(), `.xaq`);
+/** Where installs from before the rename keep theirs; still used while `~/.xaq` doesn't exist. */
+const legacyDataDir = () => join(homedir(), `.${LEGACY_PRODUCT}`);
+/**
+* The data directory when neither --data nor XAQ_DATA / AGENTINBOX_DATA says: `~/.xaq`, or `~/.agentinbox`
+* when only that one exists (an install from before the rename). Nothing is moved: master.key stays put.
+*/
+const defaultDataDir = () => resolve(pickDir(newDataDir(), legacyDataDir()).dir);
+let toldLegacy = false;
+/**
+* The data directory: --data, else XAQ_DATA (AGENTINBOX_DATA), else the default. Says once per process
+* when the default is the pre-rename `~/.agentinbox` (unless `quiet`).
+*/
+function resolveDataDir(flag, opts = {}) {
+	const given = flag ?? (envVar("DATA") || void 0);
+	if (given !== void 0) return resolve(given);
+	const { dir, legacy } = pickDir(newDataDir(), legacyDataDir());
+	if (legacy && !opts.quiet && !toldLegacy) {
+		toldLegacy = true;
+		process.stderr.write(`xaq: using the existing data directory ${dir} (from before agentinbox was renamed to xaq; new installs use ${newDataDir()}).\n`);
+	}
+	return resolve(dir);
+}
+/**
+* The database, lock and log files in a data directory: `xaq.*`, or in a data directory from before the
+* rename (it has agentinbox.db and no xaq.db) `agentinbox.*`. The lock keeps the name an older
+* agentinbox (from before the rename) still running on that directory uses, so the two never run at once.
+*/
+function dataFiles(dataDir) {
+	const base = !existsSync(join(dataDir, `xaq.db`)) && existsSync(join(dataDir, `agentinbox.db`)) ? LEGACY_PRODUCT : "xaq";
+	return {
+		db: join(dataDir, `${base}.db`),
+		lock: join(dataDir, `${base}.lock`),
+		log: join(dataDir, `${base}.log`)
+	};
+}
+function loadConfig(input = {}, version = "0.0.0") {
+	const dataDir = resolveDataDir(input.dataDir);
+	const existed = hasFiles(dataDir);
+	mkdirSync(dataDir, {
+		recursive: true,
+		mode: 448
+	});
+	restrictDir(dataDir, existed);
+	return {
+		dataDir,
+		dbPath: dataFiles(dataDir).db,
+		masterKeyPath: join(dataDir, "master.key"),
+		host: input.host ?? process.env.HOST ?? "0.0.0.0",
+		port: input.port ?? (process.env.PORT ? Number(process.env.PORT) : 8425),
+		dev: input.dev ?? false,
+		trustProxy: process.env.TRUST_PROXY === "1",
+		service: underService(),
+		version,
+		google: {
+			oauthBase: envVar("GOOGLE_OAUTH_BASE") ?? "https://oauth2.googleapis.com",
+			authBase: envVar("GOOGLE_AUTH_BASE") ?? "https://accounts.google.com",
+			gmailBase: envVar("GOOGLE_GMAIL_BASE") ?? "https://gmail.googleapis.com",
+			pubsubBase: envVar("GOOGLE_PUBSUB_BASE") ?? "https://pubsub.googleapis.com",
+			calendarBase: envVar("GOOGLE_CALENDAR_BASE") ?? "https://www.googleapis.com"
+		}
+	};
+}
+const hasFiles = (dir) => {
+	try {
+		return readdirSync(dir).length > 0;
+	} catch {
+		return false;
+	}
+};
+/**
+* An existing data dir may be group/world accessible (umask, manual mkdir): tighten it to owner-only.
+* Only a directory that already held files gets a notice; a new (or empty) one is tightened silently.
+*/
+function restrictDir(dir, existed) {
+	try {
+		if (process.platform !== "win32" && statSync(dir).mode & 63) {
+			chmodSync(dir, 448);
+			if (existed) process.stderr.write(`xaq: made ${dir} private to your user (it was readable by other users).\n`);
+		}
+	} catch {}
+}
+//#endregion
+export { loadConfig as a, legacyDataDir as i, dataFiles as n, newDataDir as o, defaultDataDir as r, resolveDataDir as s, DEFAULT_PORT as t };
+
+//# sourceMappingURL=config-C9XmYZWO.js.map

package/dist/config-C9XmYZWO.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-C9XmYZWO.js","names":[],"sources":["../server/config.ts"],"sourcesContent":["import { chmodSync, existsSync, mkdirSync, readdirSync, statSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { join, resolve } from \"node:path\";\nimport { envVar, LEGACY_PRODUCT, pickDir, PRODUCT, underService } from \"./brand.ts\";\n\nexport interface Config {\n  dataDir: string;\n  dbPath: string;\n  masterKeyPath: string;\n  host: string;\n  port: number;\n  /** Dev mode: console served by Vite on :5173, server only serves /api, /mcp, /oauth. */\n  dev: boolean;\n  /** Honor X-Forwarded-For / X-Forwarded-Proto (behind a reverse proxy). */\n  trustProxy: boolean;\n  /** Running under `xaq service install` (XAQ_SERVICE=1 in the unit/plist; AGENTINBOX_SERVICE=1 in units from before the rename). */\n  service: boolean;\n  version: string;\n  /**\n   * Base URLs for Google APIs. Overridable so tests can point at test/fake-google.ts.\n   * Defaults: https://oauth2.googleapis.com, https://accounts.google.com, https://gmail.googleapis.com, https://pubsub.googleapis.com,\n   * https://www.googleapis.com (Calendar: paths start with /calendar/v3).\n   */\n  google: { oauthBase: string; authBase: string; gmailBase: string; pubsubBase: string; calendarBase: string };\n}\n\nexport interface ConfigInput {\n  dataDir?: string;\n  host?: string;\n  port?: number;\n  dev?: boolean;\n}\n\nexport const DEFAULT_PORT = 8425;\n\n/** New installs keep their data here. */\nexport const newDataDir = () => join(homedir(), `.${PRODUCT}`);\n/** Where installs from before the rename keep theirs; still used while `~/.xaq` doesn't exist. */\nexport const legacyDataDir = () => join(homedir(), `.${LEGACY_PRODUCT}`);\n\n/**\n * The data directory when neither --data nor XAQ_DATA / AGENTINBOX_DATA says: `~/.xaq`, or `~/.agentinbox`\n * when only that one exists (an install from before the rename). Nothing is moved: master.key stays put.\n */\nexport const defaultDataDir = () => resolve(pickDir(newDataDir(), legacyDataDir()).dir);\n\nlet toldLegacy = false;\n\n/**\n * The data directory: --data, else XAQ_DATA (AGENTINBOX_DATA), else the default. Says once per process\n * when the default is the pre-rename `~/.agentinbox` (unless `quiet`).\n */\nexport function resolveDataDir(flag?: string, opts: { quiet?: boolean } = {}): string {\n  const given = flag ?? (envVar(\"DATA\") || undefined);\n  if (given !== undefined) return resolve(given);\n  const { dir, legacy } = pickDir(newDataDir(), legacyDataDir());\n  if (legacy && !opts.quiet && !toldLegacy) {\n    toldLegacy = true;\n    process.stderr.write(`${PRODUCT}: using the existing data directory ${dir} (from before agentinbox was renamed to ${PRODUCT}; new installs use ${newDataDir()}).\\n`);\n  }\n  return resolve(dir);\n}\n\n/**\n * The database, lock and log files in a data directory: `xaq.*`, or in a data directory from before the\n * rename (it has agentinbox.db and no xaq.db) `agentinbox.*`. The lock keeps the name an older\n * agentinbox (from before the rename) still running on that directory uses, so the two never run at once.\n */\nexport function dataFiles(dataDir: string): { db: string; lock: string; log: string } {\n  const legacy = !existsSync(join(dataDir, `${PRODUCT}.db`)) && existsSync(join(dataDir, `${LEGACY_PRODUCT}.db`));\n  const base = legacy ? LEGACY_PRODUCT : PRODUCT;\n  return { db: join(dataDir, `${base}.db`), lock: join(dataDir, `${base}.lock`), log: join(dataDir, `${base}.log`) };\n}\n\nexport function loadConfig(input: ConfigInput = {}, version = \"0.0.0\"): Config {\n  const dataDir = resolveDataDir(input.dataDir);\n  // Only a directory that already had files in it can have exposed anything.\n  const existed = hasFiles(dataDir);\n  mkdirSync(dataDir, { recursive: true, mode: 0o700 });\n  restrictDir(dataDir, existed);\n  return {\n    dataDir,\n    dbPath: dataFiles(dataDir).db,\n    masterKeyPath: join(dataDir, \"master.key\"),\n    host: input.host ?? process.env.HOST ?? \"0.0.0.0\",\n    port: input.port ?? (process.env.PORT ? Number(process.env.PORT) : DEFAULT_PORT),\n    dev: input.dev ?? false,\n    trustProxy: process.env.TRUST_PROXY === \"1\",\n    service: underService(),\n    version,\n    google: {\n      oauthBase: envVar(\"GOOGLE_OAUTH_BASE\") ?? \"https://oauth2.googleapis.com\",\n      authBase: envVar(\"GOOGLE_AUTH_BASE\") ?? \"https://accounts.google.com\",\n      gmailBase: envVar(\"GOOGLE_GMAIL_BASE\") ?? \"https://gmail.googleapis.com\",\n      pubsubBase: envVar(\"GOOGLE_PUBSUB_BASE\") ?? \"https://pubsub.googleapis.com\",\n      calendarBase: envVar(\"GOOGLE_CALENDAR_BASE\") ?? \"https://www.googleapis.com\",\n    },\n  };\n}\n\nconst hasFiles = (dir: string) => {\n  try {\n    return readdirSync(dir).length > 0;\n  } catch {\n    return false;\n  }\n};\n\n/**\n * An existing data dir may be group/world accessible (umask, manual mkdir): tighten it to owner-only.\n * Only a directory that already held files gets a notice; a new (or empty) one is tightened silently.\n */\nfunction restrictDir(dir: string, existed: boolean): void {\n  try {\n    if (process.platform !== \"win32\" && statSync(dir).mode & 0o077) {\n      chmodSync(dir, 0o700);\n      if (existed) process.stderr.write(`xaq: made ${dir} private to your user (it was readable by other users).\\n`);\n    }\n  } catch {\n    // Not ours to change; the files inside are still created owner-only.\n  }\n}\n"],"mappings":";;;;;;AAiCA,MAAa,eAAe;;AAG5B,MAAa,mBAAmB,KAAK,QAAQ,GAAG,MAAa;;AAE7D,MAAa,sBAAsB,KAAK,QAAQ,GAAG,IAAI,gBAAgB;;;;;AAMvE,MAAa,uBAAuB,QAAQ,QAAQ,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG;AAEtF,IAAI,aAAa;;;;;AAMjB,SAAgB,eAAe,MAAe,OAA4B,CAAC,GAAW;CACpF,MAAM,QAAQ,SAAS,OAAO,MAAM,KAAK,KAAA;CACzC,IAAI,UAAU,KAAA,GAAW,OAAO,QAAQ,KAAK;CAC7C,MAAM,EAAE,KAAK,WAAW,QAAQ,WAAW,GAAG,cAAc,CAAC;CAC7D,IAAI,UAAU,CAAC,KAAK,SAAS,CAAC,YAAY;EACxC,aAAa;EACb,QAAQ,OAAO,MAAM,0CAAiD,IAAI,gEAAuE,WAAW,EAAE,KAAK;CACrK;CACA,OAAO,QAAQ,GAAG;AACpB;;;;;;AAOA,SAAgB,UAAU,SAA4D;CAEpF,MAAM,OADS,CAAC,WAAW,KAAK,SAAS,QAAe,CAAC,KAAK,WAAW,KAAK,SAAS,eAAsB,CAAC,IACxF,iBAAA;CACtB,OAAO;EAAE,IAAI,KAAK,SAAS,GAAG,KAAK,IAAI;EAAG,MAAM,KAAK,SAAS,GAAG,KAAK,MAAM;EAAG,KAAK,KAAK,SAAS,GAAG,KAAK,KAAK;CAAE;AACnH;AAEA,SAAgB,WAAW,QAAqB,CAAC,GAAG,UAAU,SAAiB;CAC7E,MAAM,UAAU,eAAe,MAAM,OAAO;CAE5C,MAAM,UAAU,SAAS,OAAO;CAChC,UAAU,SAAS;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACnD,YAAY,SAAS,OAAO;CAC5B,OAAO;EACL;EACA,QAAQ,UAAU,OAAO,CAAC,CAAC;EAC3B,eAAe,KAAK,SAAS,YAAY;EACzC,MAAM,MAAM,QAAQ,QAAQ,IAAI,QAAQ;EACxC,MAAM,MAAM,SAAS,QAAQ,IAAI,OAAO,OAAO,QAAQ,IAAI,IAAI,IAAA;EAC/D,KAAK,MAAM,OAAO;EAClB,YAAY,QAAQ,IAAI,gBAAgB;EACxC,SAAS,aAAa;EACtB;EACA,QAAQ;GACN,WAAW,OAAO,mBAAmB,KAAK;GAC1C,UAAU,OAAO,kBAAkB,KAAK;GACxC,WAAW,OAAO,mBAAmB,KAAK;GAC1C,YAAY,OAAO,oBAAoB,KAAK;GAC5C,cAAc,OAAO,sBAAsB,KAAK;EAClD;CACF;AACF;AAEA,MAAM,YAAY,QAAgB;CAChC,IAAI;EACF,OAAO,YAAY,GAAG,CAAC,CAAC,SAAS;CACnC,QAAQ;EACN,OAAO;CACT;AACF;;;;;AAMA,SAAS,YAAY,KAAa,SAAwB;CACxD,IAAI;EACF,IAAI,QAAQ,aAAa,WAAW,SAAS,GAAG,CAAC,CAAC,OAAO,IAAO;GAC9D,UAAU,KAAK,GAAK;GACpB,IAAI,SAAS,QAAQ,OAAO,MAAM,aAAa,IAAI,0DAA0D;EAC/G;CACF,QAAQ,CAER;AACF"}

package/dist/config-CNVi0v5t.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export { n as dataFiles, a as loadConfig, s as resolveDataDir } from "./config-C9XmYZWO.js";

package/dist/connect-TtJ9n0Rw.js

@@ -0,0 +1,362 @@
+#!/usr/bin/env node
+import { i as CAPABILITIES } from "./types-BhJDbSzE.js";
+import { t as NPX } from "./version-BxH7OuWD.js";
+import { i as saveProfile, n as loadProfile, r as profileExists, t as listProfiles } from "./profile-NmMKAczz.js";
+import { c as profilePath, p as validProfileName } from "./paths-yzOKD6ow.js";
+import { m as writeClaudeMcpConfig } from "./mcpheader-C9H4vudu.js";
+import { S as insecureBanner, a as TOOL_LABELS, i as TOOLS, m as recipe, v as shellQuote, w as normalizeDaemonUrl, x as checkTransport } from "./recipes-DG_-doGq.js";
+import { i as safeText, n as box, r as formatDuration, t as StatusLine } from "./ui-B8Sd4Y7Y.js";
+import { c as mcpTarget, u as setupMcp } from "./mcpsetup-DXXo2qjf.js";
+import { D as ApiError, F as startPairing, N as getSelf, P as pollPairing, j as clientInfo, p as defaultConsumer, y as validConsumer } from "./hermes-DHnDTYJp.js";
+import { m as hasAccess, p as describeGrants } from "./listen-B9iO7HgQ.js";
+import { i as isServiceInstalled } from "./service-C7jfo-Ex.js";
+import { closeSync, constants, fchmodSync, lstatSync, openSync, writeSync } from "node:fs";
+import { hostname } from "node:os";
+import pc from "picocolors";
+//#region server/listen/connect.ts
+/** Exit codes, so scripts (and agents setting themselves up) can tell outcomes apart. */
+const CONNECT_EXIT = {
+	approved: 0,
+	error: 1,
+	denied: 2,
+	expired: 3,
+	consumed: 4,
+	cancelled: 130
+};
+function parseTool(value) {
+	if (value === void 0) return "other";
+	const v = value.trim().toLowerCase().replace(/^claude$/, "claude-code");
+	if (!TOOLS.includes(v)) throw new Error(`Unknown --tool "${value}". Choose one of: ${TOOLS.join(", ")}.`);
+	return v;
+}
+function parseCapabilities(value) {
+	if (value === void 0) return void 0;
+	const list = value.split(",").map((s) => s.trim().toLowerCase()).filter(Boolean);
+	const bad = list.filter((c) => !CAPABILITIES.includes(c));
+	if (bad.length) throw new Error(`Unknown capabilit${bad.length > 1 ? "ies" : "y"} ${bad.join(", ")}. Choose from: ${CAPABILITIES.join(", ")}.`);
+	return [...new Set(list)];
+}
+const shortHost = () => hostname().replace(/\.(local|lan|home)$/i, "");
+const sleep = (ms, signal) => new Promise((resolve) => {
+	const t = setTimeout(resolve, ms);
+	signal?.addEventListener("abort", () => {
+		clearTimeout(t);
+		resolve();
+	}, { once: true });
+});
+const stripAnsi = (s) => s.replace(/\x1b\[[0-9;]*m/g, "");
+/** --log target (fd), written in parallel with the console. */
+let logFd = null;
+const toLog = (s) => {
+	if (logFd !== null) writeSync(logFd, stripAnsi(s) + "\n");
+};
+const out = (s = "") => {
+	process.stdout.write(`${s}\n`);
+	toLog(s);
+};
+const err = (s = "") => {
+	process.stderr.write(`${s}\n`);
+	toLog(s);
+};
+/**
+* Opens --log safely: a new file is created 0600 with O_EXCL; an existing one (e.g. from `mktemp`) is
+* only reused if it is a regular file owned by us, opened without following symlinks. This is what
+* keeps another local user from pre-creating the log and reading the pairing as it happens.
+*/
+function openConnectLog(path) {
+	try {
+		return openSync(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 384);
+	} catch (e) {
+		if (e.code !== "EEXIST") throw e;
+	}
+	const st = lstatSync(path);
+	const uid = process.getuid?.();
+	if (!st.isFile() || uid !== void 0 && st.uid !== uid) throw new Error(`Refusing --log ${path}: it exists and is not a regular file owned by you.`);
+	const fd = openSync(path, constants.O_WRONLY | constants.O_TRUNC | constants.O_NOFOLLOW);
+	fchmodSync(fd, 384);
+	return fd;
+}
+async function runConnect(rawUrl, flags, opts = {}) {
+	if (flags.log) logFd = openConnectLog(flags.log);
+	try {
+		return await connect(rawUrl, flags, opts);
+	} finally {
+		if (logFd !== null) closeSync(logFd);
+		logFd = null;
+	}
+}
+async function connect(rawUrl, flags, opts) {
+	const url = normalizeDaemonUrl(rawUrl);
+	const verdict = await checkTransport(url, { insecure: flags.insecure });
+	if (verdict.warning) err(insecureBanner(verdict.warning));
+	const profileName = validProfileName(flags.profile ?? "default");
+	let replacing = null;
+	if (profileExists(profileName) && flags.force) try {
+		replacing = loadProfile(profileName);
+	} catch {}
+	if (profileExists(profileName) && !flags.force) {
+		let who = "";
+		try {
+			const p = loadProfile(profileName);
+			who = ` (agent "${safeText(p.agentName)}" on ${p.url})`;
+		} catch {}
+		const others = listProfiles();
+		throw new Error(`Profile "${profileName}" already exists${who}.\n  Pair a second agent with --profile <name>${others.length > 1 ? ` (existing: ${others.join(", ")})` : ""}, or replace this one with --force.`);
+	}
+	const tool = parseTool(flags.tool);
+	const capabilities = parseCapabilities(flags.capabilities);
+	const consumer = validConsumer(flags.consumer ?? replacing?.consumer ?? defaultConsumer(profileName));
+	const name = (flags.name?.trim() || `${tool === "other" ? "Agent" : TOOL_LABELS[tool]} on ${shortHost()}`).slice(0, 80);
+	const input = {
+		name,
+		requested: {
+			...flags.account?.length ? { accounts: flags.account } : {},
+			...capabilities ? { capabilities } : {},
+			...flags.reason ? { reason: flags.reason } : {}
+		},
+		client: {
+			...clientInfo(),
+			tool
+		}
+	};
+	let start;
+	try {
+		start = await startPairing(url, input);
+	} catch (e) {
+		if (e instanceof ApiError && e.status === 404) throw new Error(`${url} doesn't support pairing (no /agent/v1/pairings). Is this a xaq daemon, and is it up to date?`);
+		if (e instanceof ApiError) throw new Error(`${e.message}${e.hint ? `\n  ${e.hint}` : ""}`);
+		throw e;
+	}
+	const links = approveLinks(url, start);
+	out();
+	out(box([
+		pc.bold("Approve this agent in the xaq console"),
+		"",
+		`Code:   ${pc.bold(pc.yellow(safeText(start.userCode, 40)))}`,
+		`Open:   ${pc.cyan(safeText(links.primary, 300))}`,
+		...links.publicUrl ? [`  or:   ${pc.cyan(safeText(links.publicUrl, 300))}`, pc.gray(`        (first: the address this CLI used; second: the console's public URL setting)`)] : [],
+		`Agent:  ${safeText(name)}`,
+		"",
+		pc.gray("Only approve if the console shows this exact code.")
+	]));
+	out();
+	const ac = new AbortController();
+	const onAbort = () => ac.abort();
+	opts.signal?.addEventListener("abort", onAbort, { once: true });
+	const onSigint = () => ac.abort();
+	if (opts.handleSignals) process.on("SIGINT", onSigint);
+	const started = Date.now();
+	const expiresAt = Date.parse(start.expiresAt) || started + 6e5;
+	let interval = Math.max(1, start.interval || 5) * 1e3;
+	let note = "";
+	const status = new StatusLine(process.stderr);
+	status.start(() => `Waiting for approval · ${formatDuration(Date.now() - started)} elapsed · code expires in ${formatDuration(expiresAt - Date.now())}${note ? pc.yellow(` · ${note}`) : ""}`);
+	let result = null;
+	try {
+		while (!ac.signal.aborted) {
+			await sleep(opts.pollIntervalMs ?? interval, ac.signal);
+			if (ac.signal.aborted) break;
+			try {
+				const r = await pollPairing(url, start.deviceCode);
+				note = "";
+				if (r.status === "pending") continue;
+				if (r.status === "slow_down") {
+					interval = Math.max(interval + 1e3, (r.interval || 0) * 1e3);
+					continue;
+				}
+				result = r;
+				break;
+			} catch (e) {
+				if (e instanceof ApiError && e.status === 429) {
+					interval += 5e3;
+					note = "rate limited, slowing down";
+					continue;
+				}
+				if (e instanceof ApiError && e.status >= 400 && e.status < 500 && e.status !== 408) throw new Error(`${e.message}${e.hint ? `\n  ${e.hint}` : ""}`);
+				note = "can't reach the daemon, retrying";
+				if (Date.now() > expiresAt + 3e4) {
+					result = { status: "expired" };
+					break;
+				}
+			}
+		}
+	} finally {
+		status.stop();
+		if (opts.handleSignals) process.off("SIGINT", onSigint);
+		opts.signal?.removeEventListener("abort", onAbort);
+	}
+	if (!result) {
+		err(pc.yellow("Cancelled. Nothing was approved; the code expires on its own."));
+		return CONNECT_EXIT.cancelled;
+	}
+	switch (result.status) {
+		case "denied":
+			err(pc.red(`✖ The request was denied in the console${result.note ? `: ${safeText(result.note, 300)}` : "."}`));
+			return CONNECT_EXIT.denied;
+		case "expired":
+			err(pc.red("✖ The code expired before it was approved."));
+			err(`  Run the same command again for a fresh code, and approve it within ${formatDuration(Date.parse(start.expiresAt) - started)}.`);
+			return CONNECT_EXIT.expired;
+		case "consumed":
+			err(pc.red("✖ This pairing was already completed and its key handed out once (perhaps by an earlier run of this command)."));
+			err(`  For safety the key is never delivered twice. Start over with \`${NPX} connect\`, or rotate the agent's key in the console.`);
+			return CONNECT_EXIT.consumed;
+		case "approved": break;
+		default: throw new Error(`Unexpected pairing status ${JSON.stringify(result.status)}`);
+	}
+	const profile = {
+		...replacing ? {
+			types: replacing.types,
+			filter: replacing.filter,
+			includeBody: replacing.includeBody,
+			exec: replacing.exec,
+			forward: replacing.forward,
+			forwardSecret: replacing.forwardSecret,
+			concurrency: replacing.concurrency,
+			timeoutSeconds: replacing.timeoutSeconds,
+			maxAttempts: replacing.maxAttempts,
+			cwd: replacing.cwd
+		} : {},
+		url,
+		apiKey: result.apiKey,
+		agentId: result.agent.id,
+		agentName: result.agent.name,
+		consumer,
+		...verdict.kind === "insecure" ? { insecure: true } : {},
+		tool,
+		mcpUrl: `${url}/mcp`,
+		skillUrl: `${url}/skill.md`,
+		createdAt: (/* @__PURE__ */ new Date()).toISOString()
+	};
+	const path = saveProfile(profileName, profile);
+	writeClaudeMcpConfig(profileName, profile.mcpUrl);
+	if (typeof result.mcpUrl === "string" && result.mcpUrl !== profile.mcpUrl) err(pc.yellow(`! The daemon advertises its MCP endpoint as ${safeText(result.mcpUrl, 200)} (its "public URL" setting); using ${profile.mcpUrl}, the address you connected to. Set the public URL in the console if agents should use another address.`));
+	out(`${pc.green("✔")} Approved. Agent ${pc.bold(safeText(result.agent.name))} ${pc.gray(`(${result.agent.id})`)} is connected.`);
+	out(`  Key saved to ${pc.cyan(path)} ${pc.gray("(mode 0600; never displayed. Rotate it in the console if it leaks.)")}`);
+	if (replacing && (replacing.exec || replacing.forward)) out(`  Kept this profile's listener settings. Restart the listener to use the new key${isServiceInstalled(profileName) ? `: ${NPX} listen service install${profileName === "default" ? "" : ` --profile ${profileName}`}` : "."}`);
+	if (replacing && replacing.agentId !== profile.agentId) err(pc.yellow(`! Replaced profile "${profileName}" (agent "${safeText(replacing.agentName)}", ${replacing.agentId}). Its key still works until you rotate it or delete that agent in the console; config backups made by setup-mcp (*.xaq-backup-*, or *.agentinbox-backup-* from before the rename) may contain it.`));
+	const access = await printGrants(url, profile.apiKey, profileName);
+	let mcp = null;
+	if (flags.setupMcp) {
+		mcp = setupMcp(tool, mcpTarget(profileName, profile), path);
+		printMcpResult(mcp);
+	}
+	printNextSteps(profileName, profile, tool, mcp, { mail: access ? access.grants.length > 0 : true });
+	return CONNECT_EXIT.approved;
+}
+/**
+* The approve link. The daemon builds it from its public URL setting (default http://localhost:<port>),
+* which may not be the address this CLI reached it at (127.0.0.1, a LAN IP, an SSH tunnel's port): then
+* the link on the address we used comes first, and the public-URL one is shown as well.
+*/
+function approveLinks(url, start) {
+	let advertised;
+	try {
+		advertised = new URL(start.verificationUrl);
+	} catch {
+		return {
+			primary: start.verificationUrl,
+			publicUrl: null
+		};
+	}
+	const ours = new URL(url);
+	if (advertised.origin === ours.origin) return {
+		primary: start.verificationUrl,
+		publicUrl: null
+	};
+	const rest = `${advertised.search}${advertised.hash}`;
+	return {
+		primary: advertised.pathname.endsWith("/approvals") ? `${url}/approvals${rest}` : `${ours.origin}${advertised.pathname}${rest}`,
+		publicUrl: start.verificationUrl
+	};
+}
+/** What the approver actually granted, in plain words (the console's choice decides, not the request). Null when unreadable. */
+async function printGrants(url, key, profileName) {
+	const p = profileName === "default" ? "" : ` --profile ${profileName}`;
+	try {
+		const self = await getSelf(url, key, 8e3);
+		out(`  ${pc.bold("Access granted")} ${pc.gray("(chosen by whoever approved it; change it in the console under Agents):")}`);
+		for (const line of describeGrants(self.grants, self.connections)) out(`    ${hasAccess(self) ? line : pc.yellow(line)}`);
+		return self;
+	} catch (e) {
+		err(pc.yellow(`! Couldn't read this agent's access yet (${e instanceof Error ? e.message.split("\n")[0] : String(e)}). Check it with: ${NPX} listen status${p}`));
+		return null;
+	}
+}
+function printMcpResult(r) {
+	if (r.ok) out(`${r.dryRun ? pc.cyan("○") : pc.green("✔")} ${r.message}`);
+	else err(`${pc.yellow("!")} ${r.message}`);
+	if (r.ok && r.changes?.length) for (const l of r.changes) out(l.startsWith(" ") ? pc.gray(`  ${l}`) : `  - ${l}`);
+	if (r.backup) out(pc.gray(`  Backup: ${r.backup}`));
+	if (!r.ok && r.manual?.length) {
+		out("  Do it by hand:");
+		for (const l of r.manual) out(`    ${l}`);
+	}
+	if (r.ok && r.verify?.length) out(`  ${r.dryRun ? "Afterwards, check it with" : "Check it with"}: ${r.verify.map((v) => pc.cyan(v)).join("; ")}`);
+	if (r.ok) for (const n of r.notes ?? []) out(`  ${n}`);
+}
+function skillCommand(tool, url) {
+	switch (tool) {
+		case "claude-code": return `${NPX} skill install --target claude --url ${url}`;
+		case "codex": return `${NPX} skill install --target codex --url ${url}`;
+		case "hermes": return `${NPX} skill install --target ~/.hermes/skills/email --url ${url}`;
+		case "cursor": return `${NPX} skill install --target agents --url ${url}`;
+		default: return `${NPX} skill install --target ./skills --url ${url}`;
+	}
+}
+/** `listen hermes … --run`: creates the Hermes route (the console shows the same command). */
+const hermesRouteCommand = (profileName) => `${NPX} listen hermes${profileName === "default" ? "" : ` --profile ${profileName}`} --deliver telegram --run`;
+function printNextSteps(profileName, profile, tool, mcp, o = {}) {
+	const mail = o.mail !== false;
+	const p = profileName === "default" ? "" : ` --profile ${profileName}`;
+	const label = tool === "other" ? "your agent" : TOOL_LABELS[tool];
+	const r = recipe(tool, profileName);
+	const target = tool === "other" ? `--exec ${shellQuote(r.exec)}` : `--recipe ${tool}`;
+	out();
+	out(pc.bold("Next steps"));
+	let n = 1;
+	if (mcp?.ok) out(`  ${n++}. ${label} has the xaq MCP tools ${pc.gray(`(restart it if it's running)`)}.`);
+	else if (tool === "other") {
+		out(`  ${n++}. Point your agent's MCP client at ${pc.cyan(profile.mcpUrl ?? `${profile.url}/mcp`)} with header Authorization: Bearer <key>`);
+		out(pc.gray(`     The key is the "apiKey" field in ${profilePath(profileName)}.`));
+	} else {
+		out(`  ${n++}. Give ${label} the xaq MCP tools without ever seeing the key:`);
+		out(`       ${pc.cyan(`${NPX} setup-mcp --tool ${tool}${p}`)}  ${pc.gray("(add --dry-run to see exactly what it changes first)")}`);
+	}
+	out(`  ${n++}. Install the xaq skill so ${label} knows the rules:`);
+	out(`       ${pc.cyan(skillCommand(tool, profile.url))}`);
+	if (tool === "hermes") {
+		out(`  ${n++}. Create the Hermes gateway route the listener forwards to, saying where Hermes should tell you (once; needs the gateway's webhook platform on):`);
+		out(`       ${pc.cyan(hermesRouteCommand(profileName))}`);
+		out(pc.gray(`     Or --deliver discord|slack|…, or --deliver-chat-id <id>. It sets the listener's secret without showing it and limits the route to the xaq tools.`));
+	}
+	if (mail) {
+		out(`  ${n++}. Wake ${label} when mail arrives. First try it in the foreground (Ctrl-C stops it; --save keeps the command in the profile):`);
+		out(`       ${pc.cyan(`${NPX} listen${p} --save ${target}`)}`);
+		out(pc.gray(`     Only new mail wakes it (message.received), not mail you send. Change it with --types, e.g. --types thread.reply_received (only replies to threads you sent) or --types all.`));
+		out(pc.gray(`     Gmail's Promotions, Social and Forums tabs are skipped (--all-categories to include them); skip more with --not-from '*@github.com'. --batch 60s runs a burst of mail once.`));
+	} else {
+		out(`  ${n++}. Wake ${label} when one of its connections needs it. First try it in the foreground (Ctrl-C stops it; --save keeps the command in the profile):`);
+		out(`       ${pc.cyan(`${NPX} listen${p} --save ${target} --types approval.requested,connection.auth_failed,connection.expiring`)}`);
+		out(pc.gray(`     Add an integration's own events too, e.g. whoop.recovery_updated.`));
+	}
+	out(pc.gray(`     What the woken agent can use: ${r.confinement}.`));
+	out(pc.gray(`     Where its output goes: ${r.output}`));
+	for (const note of r.notes.filter((x) => tool !== "hermes" || !x.startsWith("Create the Hermes route"))) out(pc.gray(`     ${note}`));
+	if (tool !== "other") {
+		out(pc.gray(`     It runs: ${r.runs}`));
+		if (r.exec) out(pc.gray(`     To change it: ${NPX} listen${p} --print-recipe ${tool} prints it; pass your edit with --exec '…' instead of --recipe.`));
+	}
+	if (mail) {
+		out(`  ${n++}. Check that it works: in the console's setup, the "Check that it works" step sends a test email.`);
+		out(`     Watch it arrive in the foreground listener as ${pc.cyan("→ #… message.received")} followed by one ${pc.green("✓")} line once ${tool === "hermes" ? "Hermes accepted it (Hermes then triages it and tells you if it matters)" : `${label} handled it`}.`);
+	}
+	out(`  ${n++}. Then keep it running in the background (systemd / launchd, starts at login; stop the foreground one first):`);
+	out(`       ${pc.cyan(`${NPX} listen service install${p}`)}`);
+	out(`       ${pc.cyan(`${NPX} listen status${p}`)}  ${pc.gray("(connection, cursor, recent events and the access granted)")}`);
+	out();
+}
+//#endregion
+export { parseTool, printMcpResult, runConnect };
+
+//# sourceMappingURL=connect-TtJ9n0Rw.js.map