mirror of https://github.com/getpaseo/paseo.git synced 2026-10-28 12:12:47 +00:00

Files

T

Mohamed Boudra 50cde73137 Extract relay endpoint security boundary from transport and admission

Move the daemon-side handshake, record framing, and handshake timeout out of
relay-transport.ts into websocket/secure-relay-ingress.ts, and give both
endpoints one secure-channel entrypoint in @getpaseo/relay/e2ee. Relay
transport now attaches plaintext sockets; bootstrap secures them before
admission. The client selects endpoint security from configuration instead
of inferring it from the relay URL. Behavior-preserving: the legacy
construction is unchanged and no new security guarantee is claimed.

2026-10-21 13:33:56 +02:00

examples

fix(client): let SDK callers choose what a send does to an active turn (#5605 )

2026-09-29 06:53:14 +02:00

src

Extract relay endpoint security boundary from transport and admission

2026-10-21 13:33:56 +02:00

package.json

Connect saved hosts and delegate agents across daemons (#7370 )

2026-10-21 16:10:47 +07:00

README.md

fix(client): keep daemon connections lean by default (#4470 )

2026-09-08 12:59:25 +02:00

tsconfig.examples.json

Extract client SDK package (#1052 )

2026-05-28 01:58:18 +08:00

tsconfig.json

Extract client SDK package (#1052 )

2026-05-28 01:58:18 +08:00

README.md

@getpaseo/client

TypeScript SDK for building integrations on top of a Paseo daemon.

npm install @getpaseo/client

import { createPaseoClient } from "@getpaseo/client";

const client = createPaseoClient({ url: "ws://127.0.0.1:6767/ws" });
await client.connect();

const agent = await client.agents.create({
  config: { provider: "codex/gpt-5.5" },
  cwd: "/Users/me/dev/storefront",
  prompt: "Review the current diff and name the riskiest change.",
});

const result = await agent.waitForFinish();
console.log(result.lastMessage);

await client.close();

The public API is the package root. Imports under @getpaseo/client/internal/* are unsupported implementation details used by Paseo's own packages.

Read the SDK documentation for agents, workspaces, terminals, provider discovery, events, recipes, and the API reference. Runnable TypeScript patterns also live in examples/.

Runtime

The client needs a WebSocket implementation. Modern browsers and Node.js 22 provide one globally.

Use a WebSocket URL ending in /ws, such as ws://127.0.0.1:6767/ws. Pass password when the daemon requires authentication.

The client advertises its supported protocol capabilities by default. Optional capabilities overrides extend or override that declaration; browser hosting must be supplied by the caller. Connecting alone does not subscribe to agent timelines or catalog events. See the event guide for subscription lifetimes and timeline replacements.

Stability

The high-level API exported from @getpaseo/client is the supported SDK surface. The SDK and daemon remain protocol-compatible across versions, but newly added capabilities can require a newer daemon.