@agent-team-foundation/first-tree-hub 0.11.0 → 0.11.2

package/dist/{bootstrap-DUeYbwm-.mjs → bootstrap-B-FRMuvL.mjs}

@@ -1,4 +1,4 @@
-import { d as __exportAll } from "./esm-CYu4tXXn.mjs";
+import { r as __exportAll } from "./chunk-BSw8zbkd.mjs";
 import { o as logFormatSchema, s as logLevelSchema } from "./logger-core-BTmvdflj-DjW8FM4T.mjs";
 import { z } from "zod";
 import { dirname, join } from "node:path";
@@ -569,10 +569,11 @@ const serverConfigSchema = defineConfig({
 		connectTokenExpiry: field(z.string().default("10m"), { env: "FIRST_TREE_HUB_AUTH_CONNECT_TOKEN_EXPIRY" })
 	},
 	contextTree: optional({
-		repo: field(z.string(), {
+		repo: field(z.string().optional(), {
 			env: "FIRST_TREE_HUB_CONTEXT_TREE_REPO",
 			prompt: { message: "Context Tree repo URL (e.g. https://github.com/org/first-tree):" }
 		}),
+		localPath: field(z.string().optional(), { env: "FIRST_TREE_HUB_CONTEXT_TREE_PATH" }),
 		branch: field(z.string().default("main"))
 	}),
 	github: {
@@ -595,6 +596,7 @@ const serverConfigSchema = defineConfig({
 		max: field(z.number().default(100), { env: "FIRST_TREE_HUB_RATE_LIMIT_MAX" }),
 		loginMax: field(z.number().default(5), { env: "FIRST_TREE_HUB_RATE_LIMIT_LOGIN_MAX" }),
 		webhookMax: field(z.number().default(60), { env: "FIRST_TREE_HUB_RATE_LIMIT_WEBHOOK_MAX" }),
+		contextTreeSnapshotMax: field(z.number().default(6), { env: "FIRST_TREE_HUB_RATE_LIMIT_CONTEXT_TREE_SNAPSHOT_MAX" }),
 		agentMessageMax: field(z.number().default(30), { env: "FIRST_TREE_HUB_RATE_LIMIT_AGENT_MESSAGE_MAX" })
 	}),
 	ws: optional({ maxPayload: field(z.number().int().min(1024).default(262144), { env: "FIRST_TREE_HUB_WS_MAX_PAYLOAD" }) }),
@@ -642,8 +644,16 @@ const serverConfigSchema = defineConfig({
 			exporter: field(z.enum(["otlp-http", "otlp-grpc"]).default("otlp-http")),
 			serviceName: field(z.string().default("first-tree-hub")),
 			environment: field(z.string().default("development"), { env: "FIRST_TREE_HUB_OTEL_ENVIRONMENT" }),
-			sampleRate: field(z.number().min(0).max(1).default(1))
+			sampleRate: field(z.number().min(0).max(1).default(1)),
+			captureClientIp: field(z.boolean().default(false), { env: "FIRST_TREE_HUB_OTEL_CAPTURE_CLIENT_IP" })
 		})
+	},
+	runtime: {
+		inboxTimeoutSeconds: field(z.coerce.number().int().positive().default(300), { env: "FIRST_TREE_HUB_INBOX_TIMEOUT_SECONDS" }),
+		maxRetryCount: field(z.coerce.number().int().nonnegative().default(3), { env: "FIRST_TREE_HUB_MAX_RETRY_COUNT" }),
+		pollingIntervalSeconds: field(z.coerce.number().int().positive().default(5), { env: "FIRST_TREE_HUB_POLLING_INTERVAL_SECONDS" }),
+		presenceCleanupSeconds: field(z.coerce.number().int().positive().default(60), { env: "FIRST_TREE_HUB_PRESENCE_CLEANUP_SECONDS" }),
+		notificationWebhookUrl: field(z.string().url().optional(), { env: "FIRST_TREE_HUB_NOTIFICATION_WEBHOOK_URL" })
 	}
 });
 //#endregion

package/dist/chunk-BSw8zbkd.mjs

@@ -0,0 +1,37 @@
+import { createRequire } from "node:module";
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __esmMin = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __commonJSMin = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+var __toCommonJS = (mod) => __hasOwnProp.call(mod, "module.exports") ? mod["module.exports"] : __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+//#endregion
+export { __toCommonJS as a, __require as i, __esmMin as n, __toESM as o, __exportAll as r, __commonJSMin as t };

package/dist/cli/index.mjs

@@ -1,11 +1,14 @@
 #!/usr/bin/env node
-import "../observability-DPyf745N-BSc8QNcR.mjs";
-import { $ as findStaleAliases, A as checkDatabase, B as installClientService, C as runHomeMigration, D as checkAgentConfigs, E as runMigrations, F as checkServerReachable, G as stopClientService, I as checkWebSocket, L as printResults, M as checkNodeVersion, N as checkServerConfig, O as checkBackgroundService, P as checkServerHealth, R as reconcileAgentConfigs, S as saveOnboardState, T as migrateLocalAgentDirs, U as restartClientService, V as isServiceSupported, W as startClientService, X as ClientRuntime, Y as stopPostgres, Z as handleClientOrgMismatch, _ as promptMissingFields, _t as probeCapabilities, a as declineUpdate, at as fail, b as onboardCheck, c as detectInstallMode, ct as print, d as startServer, dt as ClientOrgMismatchError, et as formatStaleReason, f as COMMAND_VERSION, ft as ClientUserMismatchError, g as promptAddAgent, gt as cleanWorkspaces, h as isInteractive, ht as SessionRegistry, i as createExecuteUpdate, it as resolveReplyToFromEnv, j as checkDocker, k as checkClientConfig, l as fetchLatestVersion, lt as setJsonMode, m as uploadClientCapabilities, mt as SdkError, nt as createOwner, o as promptUpdate, ot as success, p as reconcileLocalRuntimeProviders, pt as FirstTreeHubSDK, r as registerSaaSConnectCommand, s as PACKAGE_NAME, tt as removeLocalAgent, u as installGlobalLatest, v as formatCheckReport, vt as applyClientLoggerConfig, w as createApiNameResolver, x as onboardCreate, y as loadOnboardState, yt as configureClientLoggerForService, z as getClientServiceStatus } from "../saas-connect-DLSyrQcC.mjs";
+import "../observability-C3nY6Jcz-Bk7FX689.mjs";
+import { $ as findStaleAliases, A as checkDatabase, B as installClientService, C as runHomeMigration, D as checkAgentConfigs, E as runMigrations, F as checkServerReachable, G as stopClientService, I as checkWebSocket, L as printResults, M as checkNodeVersion, N as checkServerConfig, O as checkBackgroundService, P as checkServerHealth, R as reconcileAgentConfigs, S as saveOnboardState, T as migrateLocalAgentDirs, U as restartClientService, V as isServiceSupported, W as startClientService, X as ClientRuntime, Y as stopPostgres, Z as handleClientOrgMismatch, _ as promptMissingFields, _t as probeCapabilities, a as declineUpdate, at as fail, b as onboardCheck, c as detectInstallMode, ct as print, d as startServer, dt as ClientOrgMismatchError, et as formatStaleReason, f as COMMAND_VERSION, ft as ClientUserMismatchError, g as promptAddAgent, gt as cleanWorkspaces, h as isInteractive, ht as SessionRegistry, i as createExecuteUpdate, it as resolveReplyToFromEnv, j as checkDocker, k as checkClientConfig, l as fetchLatestVersion, lt as setJsonMode, m as uploadClientCapabilities, mt as SdkError, nt as createOwner, o as promptUpdate, ot as success, p as reconcileLocalRuntimeProviders, pt as FirstTreeHubSDK, r as registerSaaSConnectCommand, s as PACKAGE_NAME, tt as removeLocalAgent, u as installGlobalLatest, v as formatCheckReport, vt as applyClientLoggerConfig, w as createApiNameResolver, x as onboardCreate, y as loadOnboardState, yt as configureClientLoggerForService, z as getClientServiceStatus } from "../saas-connect-Df2CVAGp.mjs";
 import "../logger-core-BTmvdflj-DjW8FM4T.mjs";
-import { C as resetConfigMeta, E as setConfigValue, S as resetConfig, T as serverConfigSchema, _ as getConfigValue, a as ensureFreshAdminToken, c as resolveServerUrl, d as DEFAULT_CONFIG_DIR, f as DEFAULT_DATA_DIR, h as clientConfigSchema, i as ensureFreshAccessToken, l as saveAgentConfig, m as agentConfigSchema, o as loadCredentials, p as DEFAULT_HOME_DIR, u as saveCredentials, v as initConfig, w as resolveConfigReadonly, x as readConfigFile, y as loadAgents } from "../bootstrap-DUeYbwm-.mjs";
-import "../dist-BoHl9HwW.mjs";
-import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-Dxk6ArOK.mjs";
-import "../invitation-B1pjAyOz-BaCA9PII.mjs";
+import { C as resetConfigMeta, E as setConfigValue, S as resetConfig, T as serverConfigSchema, _ as getConfigValue, a as ensureFreshAdminToken, c as resolveServerUrl, d as DEFAULT_CONFIG_DIR, f as DEFAULT_DATA_DIR, h as clientConfigSchema, i as ensureFreshAccessToken, l as saveAgentConfig, m as agentConfigSchema, o as loadCredentials, p as DEFAULT_HOME_DIR, u as saveCredentials, v as initConfig, w as resolveConfigReadonly, x as readConfigFile, y as loadAgents } from "../bootstrap-B-FRMuvL.mjs";
+import "../dist-FuUBFTEB.mjs";
+import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-GvFABWW5.mjs";
+import "../errors-BmyRwN0Y-CIZZ_sDc.mjs";
+import "../client-CLdRbuml-B416INrm.mjs";
+import "../src-DNBS5Yjj.mjs";
+import "../invitation-Dnn5gGGX-Ce7zbZpn.mjs";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
 import * as semver from "semver";
@@ -13,12 +16,12 @@ import { Command } from "commander";
 import { confirm, input, password, select } from "@inquirer/prompts";
 //#region src/commands/agent-config.ts
 async function resolveAgentRecord(serverUrl, adminToken, agentName) {
-	const res = await fetch(`${serverUrl}/api/v1/admin/agents?limit=100`, {
+	const res = await fetch(`${serverUrl}/api/v1/me/managed-agents`, {
 		headers: { Authorization: `Bearer ${adminToken}` },
 		signal: AbortSignal.timeout(1e4)
 	});
 	if (!res.ok) fail("FETCH_ERROR", `Failed to list agents: ${res.status}`, 1);
-	const found = (await res.json()).items.find((a) => a.name === agentName || a.uuid === agentName);
+	const found = (await res.json()).find((a) => a.name === agentName || a.uuid === agentName);
 	if (!found) fail("NOT_FOUND", `Agent "${agentName}" not found`, 1);
 	return found;
 }
@@ -40,13 +43,13 @@ async function adminFetch(url, init) {
 	return await res.json();
 }
 async function getCurrent(serverUrl, adminToken, agentId) {
-	return adminFetch(`${serverUrl}/api/v1/admin/agents/${agentId}/config`, {
+	return adminFetch(`${serverUrl}/api/v1/agents/${agentId}/config`, {
 		method: "GET",
 		adminToken
 	});
 }
 async function patchConfig(serverUrl, adminToken, agentId, expectedVersion, patch) {
-	return adminFetch(`${serverUrl}/api/v1/admin/agents/${agentId}/config`, {
+	return adminFetch(`${serverUrl}/api/v1/agents/${agentId}/config`, {
 		method: "PATCH",
 		adminToken,
 		body: JSON.stringify({
@@ -184,7 +187,7 @@ function registerAgentConfigCommands(parent) {
 		const adminToken = await ensureFreshAdminToken();
 		const { uuid } = await resolveAgentRecord(serverUrl, adminToken, agentName);
 		const patch = JSON.parse(readFileSync(opts.file, "utf-8"));
-		const result = await adminFetch(`${serverUrl}/api/v1/admin/agents/${uuid}/config/dry-run`, {
+		const result = await adminFetch(`${serverUrl}/api/v1/agents/${uuid}/config/dry-run`, {
 			method: "POST",
 			adminToken,
 			body: JSON.stringify({ payload: patch })
@@ -273,12 +276,12 @@ function readStdin() {
 	});
 }
 async function resolveAgent(serverUrl, adminToken, agentName) {
-	const res = await fetch(`${serverUrl}/api/v1/admin/agents?limit=100`, {
+	const res = await fetch(`${serverUrl}/api/v1/me/managed-agents`, {
 		headers: { Authorization: `Bearer ${adminToken}` },
 		signal: AbortSignal.timeout(1e4)
 	});
 	if (!res.ok) fail("FETCH_ERROR", `Failed to list agents: ${res.status}`, 1);
-	const found = (await res.json()).items.find((a) => a.name === agentName || a.uuid === agentName);
+	const found = (await res.json()).find((a) => a.name === agentName || a.uuid === agentName);
 	if (!found) fail("NOT_FOUND", `Agent "${agentName}" not found`, 1);
 	return found;
 }
@@ -422,13 +425,30 @@ function registerAgentCommands(program) {
 			fail("LIST_ERROR", error instanceof Error ? error.message : String(error));
 		}
 	});
-	agent.command("create <name>").description("Create an agent on Hub and bind it locally").requiredOption("--type <type>", "Agent type (human, personal_assistant, autonomous_agent)").requiredOption("--client-id <id>", "Client (machine) that will run this agent — must be owned by you. Run `first-tree-hub client connect` on that machine first.").option("--runtime <runtime>", "Runtime handler (default: claude-code)", "claude-code").option("--display-name <name>", "Display name").option("--server <url>", "Hub server URL").action(async (name, options) => {
+	agent.command("create <name>").description("Create an agent on Hub and bind it locally").requiredOption("--type <type>", "Agent type (human, personal_assistant, autonomous_agent)").requiredOption("--client-id <id>", "Client (machine) that will run this agent — must be owned by you. Run `first-tree-hub client connect` on that machine first.").option("--runtime <runtime>", "Runtime handler (default: claude-code)", "claude-code").option("--display-name <name>", "Display name").option("--org <id>", "Target organization id (required when you belong to multiple orgs)").option("--server <url>", "Hub server URL").action(async (name, options) => {
 		try {
 			const serverUrl = resolveServerUrl(options.server);
+			const adminToken = await ensureFreshAccessToken();
 			const headers = {
-				Authorization: `Bearer ${await ensureFreshAccessToken()}`,
+				Authorization: `Bearer ${adminToken}`,
 				"Content-Type": "application/json"
 			};
+			const meRes = await fetch(`${serverUrl}/api/v1/me`, {
+				headers: { Authorization: `Bearer ${adminToken}` },
+				signal: AbortSignal.timeout(1e4)
+			});
+			if (!meRes.ok) fail("FETCH_ERROR", `Failed to fetch /me: HTTP ${meRes.status}`, 1);
+			const me = await meRes.json();
+			let orgId;
+			if (options.org) {
+				if (!me.memberships.some((m) => m.organizationId === options.org)) fail("ORG_NOT_FOUND", `Not an active member of organization "${options.org}"`, 1);
+				orgId = options.org;
+			} else if (me.memberships.length === 1) orgId = me.memberships[0]?.organizationId ?? "";
+			else if (me.memberships.length === 0) fail("NO_ORG", "You don't belong to any organization", 1);
+			else {
+				fail("AMBIGUOUS_ORG", `You belong to multiple organizations — pass --org <id>:\n${me.memberships.map((m) => `  ${m.organizationId}  (${m.organizationName})`).join("\n")}`, 1);
+				return;
+			}
 			const createBody = {
 				name,
 				type: options.type,
@@ -436,7 +456,7 @@ function registerAgentCommands(program) {
 				runtimeProvider: options.runtime
 			};
 			if (options.displayName) createBody.displayName = options.displayName;
-			const createRes = await fetch(`${serverUrl}/api/v1/admin/agents`, {
+			const createRes = await fetch(`${serverUrl}/api/v1/orgs/${encodeURIComponent(orgId)}/agents`, {
 				method: "POST",
 				headers,
 				body: JSON.stringify(createBody),
@@ -463,7 +483,7 @@ function registerAgentCommands(program) {
 			if (!meRes.ok) fail("ME_ERROR", `Failed to fetch current member (HTTP ${meRes.status})`, 1);
 			const me = await meRes.json();
 			const target = await resolveAgent(serverUrl, accessToken, agentName);
-			const patchRes = await fetch(`${serverUrl}/api/v1/admin/agents/${target.uuid}`, {
+			const patchRes = await fetch(`${serverUrl}/api/v1/agents/${target.uuid}`, {
 				method: "PATCH",
 				headers: {
 					Authorization: `Bearer ${accessToken}`,
@@ -506,7 +526,7 @@ function registerAgentCommands(program) {
 			const serverUrl = resolveServerUrl(options.server);
 			const accessToken = await ensureFreshAccessToken();
 			const target = await resolveAgent(serverUrl, accessToken, agentName);
-			const patchRes = await fetch(`${serverUrl}/api/v1/admin/agents/${target.uuid}`, {
+			const patchRes = await fetch(`${serverUrl}/api/v1/agents/${target.uuid}`, {
 				method: "PATCH",
 				headers: {
 					Authorization: `Bearer ${accessToken}`,
@@ -615,12 +635,41 @@ function registerAgentCommands(program) {
 	agent.command("status [name]").description("Show agent runtime status from Hub server").option("--server <url>", "Hub server URL").action(async (name, options) => {
 		try {
 			const serverUrl = resolveServerUrl(options?.server);
-			const response = await fetch(`${serverUrl}/api/v1/admin/agents/activity`, {
-				headers: { Authorization: `Bearer ${await ensureFreshAccessToken()}` },
+			const accessToken = await ensureFreshAccessToken();
+			const meRes = await fetch(`${serverUrl}/api/v1/me`, {
+				headers: { Authorization: `Bearer ${accessToken}` },
 				signal: AbortSignal.timeout(1e4)
 			});
-			if (!response.ok) fail("FETCH_ERROR", `Server returned ${response.status}`, 1);
-			const data = await response.json();
+			if (!meRes.ok) fail("FETCH_ERROR", `/me HTTP ${meRes.status}`, 1);
+			const me = await meRes.json();
+			const data = {
+				total: 0,
+				running: 0,
+				byState: {
+					idle: 0,
+					working: 0,
+					blocked: 0,
+					error: 0
+				},
+				clients: 0,
+				agents: []
+			};
+			for (const m of me.memberships) {
+				const r = await fetch(`${serverUrl}/api/v1/orgs/${encodeURIComponent(m.organizationId)}/activity`, {
+					headers: { Authorization: `Bearer ${accessToken}` },
+					signal: AbortSignal.timeout(1e4)
+				});
+				if (!r.ok) continue;
+				const part = await r.json();
+				data.total += part.total;
+				data.running += part.running;
+				data.byState.idle += part.byState.idle;
+				data.byState.working += part.byState.working;
+				data.byState.blocked += part.byState.blocked;
+				data.byState.error += part.byState.error;
+				data.clients += part.clients;
+				data.agents.push(...part.agents);
+			}
 			if (name) {
 				const ag = data.agents.find((a) => a.agentId === name);
 				if (!ag) {
@@ -656,7 +705,7 @@ function registerAgentCommands(program) {
 	agent.command("reset <name>").description("Reset agent error state to idle").option("--server <url>", "Hub server URL").action(async (name, options) => {
 		try {
 			const serverUrl = resolveServerUrl(options.server);
-			const response = await fetch(`${serverUrl}/api/v1/admin/agents/activity/${name}/reset-activity`, {
+			const response = await fetch(`${serverUrl}/api/v1/agents/${name}/reset-activity`, {
 				method: "POST",
 				headers: { Authorization: `Bearer ${await ensureFreshAccessToken()}` },
 				signal: AbortSignal.timeout(1e4)
@@ -673,7 +722,7 @@ function registerAgentCommands(program) {
 			const adminToken = await ensureFreshAccessToken();
 			const agentId = (await resolveAgent(serverUrl, adminToken, agentName)).uuid;
 			const qs = options.state ? `?state=${options.state}` : "";
-			const response = await fetch(`${serverUrl}/api/v1/admin/sessions/agents/${agentId}${qs}`, {
+			const response = await fetch(`${serverUrl}/api/v1/agents/${agentId}/sessions${qs}`, {
 				headers: { Authorization: `Bearer ${adminToken}` },
 				signal: AbortSignal.timeout(1e4)
 			});
@@ -702,7 +751,7 @@ function registerAgentCommands(program) {
 			const serverUrl = resolveServerUrl(options.server);
 			const adminToken = await ensureFreshAccessToken();
 			const agentId = (await resolveAgent(serverUrl, adminToken, agentName)).uuid;
-			const response = await fetch(`${serverUrl}/api/v1/admin/sessions/agents/${agentId}/${chatId}/${cmd}`, {
+			const response = await fetch(`${serverUrl}/api/v1/agents/${agentId}/sessions/${chatId}/${cmd}`, {
 				method: "POST",
 				headers: { Authorization: `Bearer ${adminToken}` },
 				signal: AbortSignal.timeout(1e4)
@@ -725,7 +774,7 @@ function registerAgentCommands(program) {
 				"Content-Type": "application/json"
 			};
 			const targetAgent = await resolveAgent(serverUrl, adminToken, agentName);
-			const dmRes = await fetch(`${serverUrl}/api/v1/admin/agents/${targetAgent.uuid}/chats`, {
+			const dmRes = await fetch(`${serverUrl}/api/v1/agents/${targetAgent.uuid}/chats`, {
 				method: "POST",
 				headers,
 				signal: AbortSignal.timeout(1e4)
@@ -747,7 +796,7 @@ function registerAgentCommands(program) {
 			const pollMessages = async () => {
 				try {
 					const qs = lastSeenAt ? `?limit=50` : `?limit=10`;
-					const msgRes = await fetch(`${serverUrl}/api/v1/admin/chats/${dm.id}/messages${qs}`, {
+					const msgRes = await fetch(`${serverUrl}/api/v1/chats/${dm.id}/messages${qs}`, {
 						headers,
 						signal: AbortSignal.timeout(1e4)
 					});
@@ -778,7 +827,7 @@ function registerAgentCommands(program) {
 					return;
 				}
 				try {
-					const sendRes = await fetch(`${serverUrl}/api/v1/admin/chats/${dm.id}/messages`, {
+					const sendRes = await fetch(`${serverUrl}/api/v1/chats/${dm.id}/messages`, {
 						method: "POST",
 						headers,
 						body: JSON.stringify({
@@ -1347,12 +1396,22 @@ function registerClientCommands(program) {
 		try {
 			const serverUrl = resolveServerUrl(options.server);
 			const token = await ensureFreshAccessToken();
-			const response = await fetch(`${serverUrl}/api/v1/clients`, {
+			const meRes = await fetch(`${serverUrl}/api/v1/me`, {
 				headers: { Authorization: `Bearer ${token}` },
 				signal: AbortSignal.timeout(1e4)
 			});
-			if (!response.ok) fail("FETCH_ERROR", `Server returned ${response.status}`, 1);
-			const clients = await response.json();
+			if (!meRes.ok) fail("FETCH_ERROR", `/me HTTP ${meRes.status}`, 1);
+			const adminOrgs = (await meRes.json()).memberships.filter((m) => m.role === "admin");
+			const clients = [];
+			for (const m of adminOrgs) {
+				const r = await fetch(`${serverUrl}/api/v1/orgs/${encodeURIComponent(m.organizationId)}/clients`, {
+					headers: { Authorization: `Bearer ${token}` },
+					signal: AbortSignal.timeout(1e4)
+				});
+				if (!r.ok) continue;
+				const part = await r.json();
+				clients.push(...part);
+			}
 			if (clients.length === 0) {
 				print.line("  No clients.\n");
 				return;
@@ -1394,7 +1453,7 @@ function registerClientCommands(program) {
 				}
 			}
 			const token = await ensureFreshAccessToken();
-			const response = await fetch(`${serverUrl}/api/v1/me/clients/${clientId}/claim`, {
+			const response = await fetch(`${serverUrl}/api/v1/clients/${encodeURIComponent(clientId)}/claim`, {
 				method: "POST",
 				headers: {
 					Authorization: `Bearer ${token}`,
@@ -1461,7 +1520,7 @@ function registerClientCommands(program) {
 		try {
 			const serverUrl = resolveServerUrl(options.server);
 			const token = await ensureFreshAccessToken();
-			const response = await fetch(`${serverUrl}/api/v1/clients/${clientId}/disconnect`, {
+			const response = await fetch(`${serverUrl}/api/v1/clients/${encodeURIComponent(clientId)}/disconnect`, {
 				method: "POST",
 				headers: { Authorization: `Bearer ${token}` },
 				signal: AbortSignal.timeout(1e4)
@@ -1608,13 +1667,13 @@ function isSecretField(schema, dotPath) {
 //#region src/commands/onboard.ts
 async function promptMissing(args) {
 	if (!args.server) try {
-		const { resolveServerUrl } = await import("../bootstrap-DUeYbwm-.mjs").then((n) => n.r);
+		const { resolveServerUrl } = await import("../bootstrap-B-FRMuvL.mjs").then((n) => n.r);
 		resolveServerUrl();
 	} catch {
 		args.server = await input({ message: "Hub server URL:" });
 		saveOnboardState(args);
 	}
-	const { loadCredentials } = await import("../bootstrap-DUeYbwm-.mjs").then((n) => n.r);
+	const { loadCredentials } = await import("../bootstrap-B-FRMuvL.mjs").then((n) => n.r);
 	if (!loadCredentials()) throw new Error("No saved credentials. Run `first-tree-hub client connect <server-url>` before onboarding.");
 	if (!args.id) {
 		args.id = await input({ message: "Agent ID:" });

package/dist/client-By1K4VVT-nVOhsXBy.mjs

@@ -0,0 +1,4 @@
+import "./dist-FuUBFTEB.mjs";
+import "./errors-BmyRwN0Y-CIZZ_sDc.mjs";
+import { y as listMyPinnedAgents } from "./client-CLdRbuml-B416INrm.mjs";
+export { listMyPinnedAgents };