@4pm/cli 1.3.0 → 1.3.1

package/dist/index.js

@@ -28549,7 +28549,7 @@ ${INSECURE_URL_WARNING}
 }
 
 // src/commands/start.ts
-import { spawn as spawn8 } from "child_process";
+import { spawn as spawn9 } from "child_process";
 import { join as join30 } from "path";
 
 // src/core/update.ts
@@ -28780,6 +28780,21 @@ function isValidRoleSet(roles) {
   return true;
 }
 
+// vendor/@4pm/constants/worker-tools.ts
+var WORKER_TOOL_CATALOG = [
+  { id: "git", label: "Git", category: "vcs", versionArg: "--version", installPackage: null },
+  { id: "node", label: "Node.js", category: "runtime", versionArg: "--version", installPackage: null },
+  { id: "npm", label: "npm", category: "runtime", versionArg: "--version", installPackage: null },
+  { id: "pnpm", label: "pnpm", category: "runtime", versionArg: "--version", installPackage: "pnpm" },
+  { id: "claude", label: "Claude Code", category: "ai-cli", versionArg: "--version", installPackage: "@anthropic-ai/claude-code" },
+  { id: "codex", label: "Codex", category: "ai-cli", versionArg: "--version", installPackage: "@openai/codex" },
+  { id: "gh", label: "GitHub CLI", category: "vcs", versionArg: "--version", installPackage: null },
+  { id: "glab", label: "GitLab CLI", category: "vcs", versionArg: "--version", installPackage: null }
+];
+var WORKER_TOOL_PREREQUISITE_IDS = WORKER_TOOL_CATALOG.filter(
+  (t) => t.installPackage === null
+).map((t) => t.id);
+
 // vendor/@4pm/constants/ws.ts
 var WsChannel = {
   COMMAND_DISPATCH: "command.dispatch",
@@ -32962,6 +32977,12 @@ var listMachineLinksQuerySchema = baseRequestSchema.extend({
 var updateMachineLinkRequestSchema = external_exports.object({
   hashcode3ExpiresAt: external_exports.string().datetime().nullable()
 });
+var workerToolInstallSchema = external_exports.object({
+  /** Catalog id or npm package name (validated npm-name shape on the cli). */
+  name: external_exports.string().trim().min(1).max(214),
+  /** Package manager to run the global install with. */
+  manager: external_exports.enum(["npm", "pnpm"])
+});
 var configWriteRequestSchema = external_exports.object({
   config: external_exports.string().max(256 * 1024)
 });
@@ -33346,6 +33367,15 @@ var WsChannels = {
   // ADR-0141) — the machine-user Settings tab syncs the worker cli's config.
   CONFIG_READ: "config.read",
   CONFIG_WRITE: "config.write",
+  // worker tools management (ADR-0206) — the Tools tab. `tools.list` probes the default
+  // catalog + extra globals (reply); `tools.install`/`tools.uninstall` start a streamed op
+  // (reply = accepted/rejected), then the cli pushes `tools.progress` lines and one
+  // `tools.done` per opId back to the server (relayed to the browser over SSE).
+  TOOLS_LIST: "tools.list",
+  TOOLS_INSTALL: "tools.install",
+  TOOLS_UNINSTALL: "tools.uninstall",
+  TOOLS_PROGRESS: "tools.progress",
+  TOOLS_DONE: "tools.done",
   // autonomous mode control (ADR-0152): read settings+status+books+approvals, tail logs, and
   // write {settings|approvals|userTodo|cron} — the dashboard drives the worker's autonomous engine.
   AUTONOMOUS_READ: "autonomous.read",
@@ -36200,6 +36230,120 @@ function applyConfigText(profileDir2, text) {
   return { ok: true };
 }
 
+// src/core/worker-tools.ts
+import { spawn as spawn8 } from "child_process";
+var NPM_NAME = /^(?:@[a-z0-9-~][a-z0-9-._~]*\/)?[a-z0-9-~][a-z0-9-._~]*$/;
+function run10(cmd, args, onLine, timeoutMs = 18e4) {
+  return new Promise((resolve8) => {
+    let out = "";
+    let buf = "";
+    let child = null;
+    const done = (code) => {
+      clearTimeout(timer);
+      if (onLine && buf.trim()) onLine(buf.trim());
+      resolve8({ code, out });
+    };
+    const timer = setTimeout(() => {
+      child?.kill();
+      if (onLine) onLine(`timed out after ${Math.round(timeoutMs / 1e3)}s`);
+      done(124);
+    }, timeoutMs);
+    timer.unref?.();
+    const feed = (d) => {
+      const text = d.toString("utf8");
+      out += text;
+      if (!onLine) return;
+      buf += text;
+      let nl;
+      while ((nl = buf.indexOf("\n")) >= 0) {
+        const line = buf.slice(0, nl).replace(/\r$/, "");
+        buf = buf.slice(nl + 1);
+        onLine(line);
+      }
+    };
+    try {
+      child = spawn8(cmd, args, { stdio: ["ignore", "pipe", "pipe"] });
+      child.stdout?.on("data", feed);
+      child.stderr?.on("data", feed);
+      child.on("exit", (code) => done(code ?? 0));
+      child.on("error", () => done(127));
+    } catch {
+      done(127);
+    }
+  });
+}
+async function detectOne(cmd, versionArg) {
+  const { code, out } = await run10(cmd, [versionArg], void 0, 15e3);
+  if (code !== 0) return null;
+  const first = out.split("\n").map((l) => l.trim()).find(Boolean);
+  return first ?? "";
+}
+async function listExtras() {
+  const { out } = await run10("npm", ["ls", "-g", "--depth=0", "--json"], void 0, 2e4);
+  if (!out.trim()) return [];
+  let deps = {};
+  try {
+    deps = JSON.parse(out).dependencies ?? {};
+  } catch {
+    return [];
+  }
+  const catalogPkgs = new Set(
+    WORKER_TOOL_CATALOG.map((t) => t.installPackage).filter((p) => !!p)
+  );
+  return Object.entries(deps).filter(([name]) => !catalogPkgs.has(name)).map(([name, info]) => ({
+    id: name,
+    label: name,
+    category: "runtime",
+    installed: true,
+    version: info.version ?? null,
+    installable: true
+  }));
+}
+async function detectWorkerTools() {
+  const catalog = await Promise.all(
+    WORKER_TOOL_CATALOG.map(async (t) => {
+      const version = await detectOne(t.id, t.versionArg);
+      return {
+        id: t.id,
+        label: t.label,
+        category: t.category,
+        installed: version !== null,
+        version,
+        installable: t.installPackage !== null
+      };
+    })
+  );
+  const extras = await listExtras().catch(() => []);
+  return { catalog, extras };
+}
+function resolvePackage(name, op) {
+  const entry = WORKER_TOOL_CATALOG.find((t) => t.id === name);
+  if (entry) {
+    if (entry.installPackage === null) {
+      return { error: `"${name}" is a prerequisite and cannot be ${op}ed from here.` };
+    }
+    return { pkg: entry.installPackage };
+  }
+  if (WORKER_TOOL_PREREQUISITE_IDS.includes(name)) {
+    return { error: `"${name}" is a prerequisite and cannot be ${op}ed from here.` };
+  }
+  if (!NPM_NAME.test(name)) return { error: `Invalid package name: "${name}".` };
+  return { pkg: name };
+}
+function opArgs(op, manager, pkg) {
+  if (manager === "pnpm") return [op === "install" ? "add" : "remove", "-g", pkg];
+  return [op === "install" ? "install" : "uninstall", "-g", pkg];
+}
+async function runWorkerToolOp(op, name, manager, onLine) {
+  const resolved = resolvePackage(name, op);
+  if (resolved.error || !resolved.pkg) {
+    return { ok: false, exitCode: 1, error: resolved.error ?? "Invalid package." };
+  }
+  onLine(`$ ${manager} ${opArgs(op, manager, resolved.pkg).join(" ")}`);
+  const { code } = await run10(manager, opArgs(op, manager, resolved.pkg), onLine);
+  return { ok: code === 0, exitCode: code, error: code === 0 ? void 0 : `${manager} exited ${code}` };
+}
+
 // src/core/ws-client.ts
 var HEARTBEAT_MS = 3e4;
 var USAGE_POLL_MS = 5 * 6e4;
@@ -36929,6 +37073,31 @@ var WsClient = class {
         this.send(WsChannels.CONFIG_WRITE, res, message.id);
         break;
       }
+      case WsChannels.TOOLS_LIST:
+        void detectWorkerTools().then(
+          (reply) => this.send(WsChannels.TOOLS_LIST, reply, message.id)
+        );
+        break;
+      case WsChannels.TOOLS_INSTALL:
+      case WsChannels.TOOLS_UNINSTALL: {
+        const req = payload;
+        const op = message.channel === WsChannels.TOOLS_INSTALL ? "install" : "uninstall";
+        this.send(message.channel, { started: true }, message.id);
+        void runWorkerToolOp(
+          op,
+          req.name,
+          req.manager,
+          (line) => this.send(WsChannels.TOOLS_PROGRESS, { opId: req.opId, line })
+        ).then(
+          (res) => this.send(WsChannels.TOOLS_DONE, {
+            opId: req.opId,
+            ok: res.ok,
+            exitCode: res.exitCode,
+            error: res.error
+          })
+        );
+        break;
+      }
       case WsChannels.GIT_DIFF:
         void gitDiff(payload.path).then(
           (reply) => this.send(WsChannels.GIT_DIFF, reply, message.id)
@@ -40021,7 +40190,7 @@ var src_default = Yoga;
 
 // ../../node_modules/.pnpm/ink@5.2.1_@types+react@18.3.31_react@18.3.1/node_modules/ink/build/reconciler.js
 var import_react_reconciler = __toESM(require_react_reconciler(), 1);
-var import_constants5 = __toESM(require_constants2(), 1);
+var import_constants6 = __toESM(require_constants2(), 1);
 import process3 from "process";
 
 // ../../node_modules/.pnpm/ansi-regex@6.2.2/node_modules/ansi-regex/index.js
@@ -41263,7 +41432,7 @@ var reconciler_default = (0, import_react_reconciler.default)({
   scheduleTimeout: setTimeout,
   cancelTimeout: clearTimeout,
   noTimeout: -1,
-  getCurrentEventPriority: () => import_constants5.DefaultEventPriority,
+  getCurrentEventPriority: () => import_constants6.DefaultEventPriority,
   beforeActiveInstanceBlur() {
   },
   afterActiveInstanceBlur() {
@@ -44664,7 +44833,7 @@ async function runStart(profileDir2, profileName) {
   if (result.action === "updated") {
     logger.info("update.updated", { version: result.version });
     console.log("Restarting with the new version\u2026");
-    const child = spawn8(process.execPath, process.argv.slice(1), {
+    const child = spawn9(process.execPath, process.argv.slice(1), {
       stdio: "inherit",
       env: { ...process.env, FOURPM_NO_UPDATE: "1" }
     });
@@ -44881,12 +45050,12 @@ async function runAttach(profileDir2, profileName) {
 }
 
 // src/commands/ai-login.ts
-import { spawn as spawn9 } from "child_process";
+import { spawn as spawn10 } from "child_process";
 import { mkdirSync as mkdirSync6 } from "fs";
 import { basename as basename5 } from "path";
 function runProviderLogin(cmd, envVar, dir2) {
   return new Promise((resolve8) => {
-    const child = spawn9(cmd, [], {
+    const child = spawn10(cmd, [], {
       stdio: "inherit",
       env: { ...process.env, [envVar]: dir2 }
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@4pm/cli",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "private": false,
   "description": "4PM CLI — drives Claude/Codex CLIs on AI worker machines (Node + TypeScript)",
   "license": "LicenseRef-4PM-Source-Available",