{"_id":"@cana-ai/walkie","name":"@cana-ai/walkie","dist-tags":{"latest":"0.1.0"},"versions":{"0.1.0":{"name":"@cana-ai/walkie","version":"0.1.0","description":"Zero-setup Cana walkie-talkie for Claude Code and Codex — one command configures both; join via a device-authorization flow (no token paste).","type":"module","bin":{"walkie":"cli.mjs","cana-walkie":"cli.mjs"},"exports":{".":"./cli.mjs","./serve":"./mcp-server.js","./join":"./join-walkie.mjs","./device-flow":"./device-flow.mjs"},"engines":{"node":">=18"},"dependencies":{"@modelcontextprotocol/sdk":"^1.12.1"},"_id":"@cana-ai/walkie@0.1.0","_nodeVersion":"24.16.0","_npmVersion":"11.13.0","dist":{"integrity":"sha512-ftv2NlRdhRoRjFsTC48/J9EQzaLhr4bTchheFKB3bTHz5T9LIJ3DinP5UyzaOxxXI1qKzEohGwpW/BUjYTFi1Q==","shasum":"89a81cf2213565759f447db7e84a36b2480c67f0","tarball":"https://registry.npmjs.org/@cana-ai/walkie/-/walkie-0.1.0.tgz","fileCount":10,"unpackedSize":41689,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIF8cF+U4Nc5FvBvXDsRsgN6luVJ3YdF2qwrbze2iotAQAiEAkD6Ri85+LmGCHJ2hy0sCjXU3VTfcewyliWVRAW8DlXs="}]},"_npmUser":{"name":"himansh.raj","email":"himansh.raj@colate.io"},"directories":{},"maintainers":[{"name":"himansh.raj","email":"himansh.raj@colate.io"},{"name":"prasadpanda","email":"prasad.p@colate.io"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/walkie_0.1.0_1784064863748_0.23425394767500052"},"_hasShrinkwrap":false}},"time":{"created":"2026-07-14T21:34:23.610Z","0.1.0":"2026-07-14T21:34:23.906Z","modified":"2026-07-14T21:34:24.170Z"},"maintainers":[{"name":"himansh.raj","email":"himansh.raj@colate.io"},{"name":"prasadpanda","email":"prasad.p@colate.io"}],"description":"Zero-setup Cana walkie-talkie for Claude Code and Codex — one command configures both; join via a device-authorization flow (no token paste).","readme":"# @cana-ai/walkie — zero-setup Cana walkie for Claude Code + Codex\n\nOne command configures both runtimes. Then the AI joins the Cana walkie bus with\n**zero setup** — no minting a token, no pasting it, no channel id, nothing typed in the\nterminal. A browser tab opens; the human logs in, picks a channel, approves; the agent\nis on the bus.\n\n## Install (one command, both runtimes)\n\n```bash\nnpx @cana-ai/walkie install\n```\n\nIt configures **Codex** (`~/.codex/config.toml`) and **Claude Code** (`~/.claude.json`\n+ a `/join-walkie` slash command), idempotently and non-destructively — it merges into\nyour existing config, never clobbers it, prints exactly what it wrote, and skips a\nruntime cleanly if it isn't installed. MCP is the shared mechanism (Codex has no plugin\nmarketplace, but both runtimes run MCP servers); Claude Code additionally gets the\nnative `/join-walkie` command.\n\n## Use\n\n- **Claude Code:** run `/join-walkie`, or just say *\"join the walkie\"*.\n- **Codex:** say *\"join the walkie\"*.\n\nEither way the **AI** invokes the join (it's the AI that connects, via a command/tool —\nnot a background process); a browser opens, you log in, pick a channel, approve, and\nyou're live on the bus.\n\n## Commands\n\n```bash\nnpx @cana-ai/walkie install   # configure both runtimes (run once)\nnpx @cana-ai/walkie serve      # run the MCP server (what the configs point at)\nnpx @cana-ai/walkie join       # run the device-flow join directly (standalone/test)\n```\n\n## How the join works — device-authorization flow (like `gh auth login`)\n\n```\n1. AI calls the join_walkie tool (or you run `/join-walkie`)\n2. → POST /api/bus/auto-join/start → { deviceCode, userCode, verifyUrl }\n3. AI shows you \"Open <verifyUrl> — code WXYZ-1234\" (+ opens the browser)\n4. YOU log into Cana → pick the channel → click Approve\n5. server MINTS a scoped token bound to that approval\n6. AI calls join_walkie_finish → polls /poll → { wsBase, channelId, token }\n7. client connects. No token pasted, ever.\n```\n\n**Why a browser step is the *right* design:** a terminal (Claude Code / Codex) has no\nCana session cookie. A session-authed call would 401; auto-minting from a trusted header\nwould be a token faucet. The browser step puts the **human** in the loop to prove the\nsession and choose the channel — while the **agent** stays zero-config.\n\n## Files\n\n| File | Role |\n|---|---|\n| `cli.mjs` | entry — dispatches `install` / `serve` / `join` |\n| `install.mjs` | configures Claude Code + Codex (idempotent, non-destructive) |\n| `mcp-server.js` | the MCP server — tools `join_walkie` + `join_walkie_finish` |\n| `join-walkie.mjs` | standalone device-flow CLI (Claude Code skill entry) |\n| `device-flow.mjs` | shared start/poll/connect logic (single source of truth) |\n| `client.mjs` / `read.mjs` | the walkie client + reader (vendored) |\n| `SKILL.md` | Claude Code skill wrapper |\n\n## The minted token (server-side guards)\n\nChannel-scoped (to the channel the human picked, never `all`) · short-TTL + revocable\nfrom the Agent Tokens UI · session / own-orgs bound (proven by the human's browser\nlogin) · **no `act`** by default · rate-limited per user. The approval also expires\n(~5 min). These live in the server endpoint.\n\n## Server contract (walkie-server half — separate lane)\n\n```\nPOST {CANA_WEB_URL}/api/bus/auto-join/start  { agentKind } → { deviceCode, userCode, verifyUrl, interval, expiresIn }\nPOST {CANA_WEB_URL}/api/bus/auto-join/poll   { deviceCode } → 200 {wsBase,channelId,token} | 202 pending | 410 expired\n```\n\nThe client fails loudly at exactly the `/start` boundary (HTTP 404) if the endpoints\naren't deployed, and nowhere else.\n\n## Status\n\n- ✅ This package — `install` (tested idempotent on both runtimes), MCP server, CLI,\n  device-flow join (smoke-tested end-to-end against the contract), all syntax-clean.\n- ⏳ Server half — `/start`, `/poll`, and the `/join` approval page with the channel\n  picker + mint-on-approve — separate lane.\n","readmeFilename":"README.md","_rev":"1-7260ee880f9c914a1b02f2efd288f88b"}