@agenthippo-ai/agenthippo 1.110.9 → 1.110.19

package/out/cli/commands/pack.js

@@ -1,399 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.packCommand = packCommand;
-/**
- * Pack Command - Agent pack management
- */
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const pack_loader_1 = require("../pack-loader");
-const branding_1 = require("../../branding");
-const warrant_1 = require("../../authority/warrant");
-const signature_1 = require("../../pack/signature");
-const store_1 = require("./store");
-const pack_install_ref_1 = require("../pack-install-ref");
-const BANNER_LINE = '-'.repeat(62);
-async function packCommand(options) {
-    const workspace = options.workspace;
-    switch (options.action) {
-        case 'list':
-            await listPacks(workspace);
-            break;
-        case 'validate':
-            if (!options.name) {
-                console.error('Error: Pack name required. Usage: agenthippo pack validate <name>');
-                process.exit(1);
-            }
-            await validatePack(options.name, workspace);
-            break;
-        case 'info':
-            if (!options.name) {
-                console.error('Error: Pack name required. Usage: agenthippo pack info <name>');
-                process.exit(1);
-            }
-            await showPackInfo(options.name, workspace);
-            break;
-        case 'sign':
-            await signPackCommand(options);
-            break;
-        case 'verify':
-            await verifyPackCommand(options);
-            break;
-        case 'digest':
-            await digestCommand(options);
-            break;
-        case 'keygen':
-            keygenCommand(options);
-            break;
-        case 'install':
-            await installPackCommand(options);
-            break;
-        case 'export':
-            console.log('Pack export is not yet implemented.');
-            break;
-        default:
-            console.error(`Error: Unknown action: ${options.action}`);
-            console.log('');
-            console.log('Available actions:');
-            console.log('  list      List installed packs');
-            console.log('  validate  Validate a pack');
-            console.log('  info      Show pack details');
-            console.log('  sign      Sign a pack so a fleet can verify it before running');
-            console.log('  verify    Verify a pack against trusted public keys');
-            console.log('  digest    Print the pack content digest (what a signature covers)');
-            console.log('  keygen    Generate an ES256 signing keypair');
-            console.log('  install   Install a pack from the store to a folder');
-            console.log('  export    Export a pack (coming soon)');
-            process.exit(1);
-    }
-}
-async function installPackCommand(options) {
-    if (!options.name?.trim()) {
-        console.error('Error: pack slug required.');
-        console.log('Usage: agenthippo pack install <slug>[@version] --to <dir>');
-        console.log('');
-        console.log('Examples:');
-        console.log('  agenthippo pack install joker1 --to ./packs/joker1');
-        console.log('  agenthippo pack install code-reviewer@1.0.0 --to ./packs/code-reviewer');
-        process.exit(1);
-    }
-    const dest = options.to?.trim();
-    if (!dest) {
-        console.error('Error: --to <dir> is required.');
-        console.log('Usage: agenthippo pack install <slug>[@version] --to <dir>');
-        console.log('');
-        console.log('Same download as `agenthippo store install pack/<slug>`, extracted flat for serve/deploy.');
-        process.exit(1);
-    }
-    const { slug, version } = (0, pack_install_ref_1.parsePackInstallRef)(options.name);
-    await (0, store_1.installFromStore)({
-        action: 'install',
-        query: `pack/${slug}${version ? `@${version}` : ''}`,
-        workspace: options.workspace,
-        version,
-        force: options.force,
-        installDir: path.resolve(dest),
-        verbose: options.verbose,
-    });
-}
-async function listPacks(workspace) {
-    const packs = (0, pack_loader_1.listAvailablePacks)(workspace);
-    if (packs.length === 0) {
-        console.log('No agent packs found.');
-        console.log('');
-        console.log('Agent packs are stored in:');
-        if (workspace) {
-            console.log(`  Workspace: ${workspace}/${branding_1.AGENTIDE_DIR_NAME}/agents/`);
-        }
-        console.log(`  User library: ~/${branding_1.AGENTIDE_DIR_NAME}/agents/`);
-        console.log('');
-        console.log('Create a pack with:');
-        console.log(`  mkdir -p ~/${branding_1.AGENTIDE_DIR_NAME}/agents/my-agent/1.0.0`);
-        console.log(`  echo "1.0.0" > ~/${branding_1.AGENTIDE_DIR_NAME}/agents/my-agent/current.txt`);
-        console.log('  # Add agent.yaml and AGENTS.md');
-        return;
-    }
-    console.log('');
-    console.log('Installed Agent Packs:');
-    console.log('');
-    for (const pack of packs) {
-        const versionStr = pack.version ? ` (v${pack.version})` : '';
-        const sourceStr = pack.source === 'workspace' ? ' [workspace]' : '';
-        console.log(`  ${pack.name}${versionStr}${sourceStr}`);
-        console.log(`    ${pack.path}`);
-    }
-    console.log('');
-}
-async function validatePack(nameOrPath, workspace) {
-    console.log(`Validating pack: ${nameOrPath}`);
-    console.log('');
-    const packPath = (0, pack_loader_1.resolvePackPath)(nameOrPath, workspace);
-    if (!packPath) {
-        console.error(`Error: Pack not found: ${nameOrPath}`);
-        process.exit(1);
-    }
-    const errors = [];
-    const warnings = [];
-    // Check agent.yaml
-    const manifestPath = path.join(packPath, 'agent.yaml');
-    if (fs.existsSync(manifestPath)) {
-        console.log('  OK: agent.yaml exists');
-    }
-    else {
-        errors.push('Missing agent.yaml');
-    }
-    // Try to load and validate
-    try {
-        const pack = await (0, pack_loader_1.loadAgentPack)(nameOrPath, workspace);
-        console.log(`  OK: metadata.name: ${pack.manifest.metadata.name}`);
-        console.log(`  OK: metadata.version: ${pack.manifest.metadata.version}`);
-        console.log(`  OK: spec.engine: ${pack.manifest.spec.engine}`);
-        if (pack.manifest.spec.model) {
-            console.log(`  OK: spec.model: ${pack.manifest.spec.model}`);
-        }
-        else {
-            warnings.push('spec.model not specified, will use default');
-        }
-        if (pack.manifest.spec.cheapModel) {
-            console.log(`  OK: spec.cheapModel: ${pack.manifest.spec.cheapModel}`);
-        }
-        // Check AGENTS.md
-        const agentsMdPath = path.join(packPath, 'AGENTS.md');
-        if (fs.existsSync(agentsMdPath)) {
-            const stats = fs.statSync(agentsMdPath);
-            console.log(`  OK: AGENTS.md exists (${(stats.size / 1024).toFixed(1)} KB)`);
-        }
-        else {
-            warnings.push('No AGENTS.md found');
-        }
-    }
-    catch (err) {
-        errors.push(err instanceof Error ? err.message : String(err));
-    }
-    // Summary
-    console.log('');
-    if (warnings.length > 0) {
-        for (const warning of warnings) {
-            console.log(`  Warning: ${warning}`);
-        }
-    }
-    if (errors.length > 0) {
-        for (const error of errors) {
-            console.log(`  Error: ${error}`);
-        }
-        console.log('');
-        console.log('Pack is INVALID');
-        process.exit(1);
-    }
-    console.log('');
-    console.log('Pack is valid.');
-}
-async function showPackInfo(nameOrPath, workspace) {
-    try {
-        const pack = await (0, pack_loader_1.loadAgentPack)(nameOrPath, workspace);
-        console.log('');
-        console.log(BANNER_LINE);
-        console.log(`Agent: ${pack.manifest.metadata.name}`);
-        console.log(BANNER_LINE);
-        console.log(`Version:     ${pack.manifest.metadata.version}`);
-        if (pack.manifest.metadata.description) {
-            console.log(`Description: ${pack.manifest.metadata.description}`);
-        }
-        if (pack.manifest.metadata.author) {
-            console.log(`Author:      ${pack.manifest.metadata.author}`);
-        }
-        console.log(`Engine:      ${pack.manifest.spec.engine}`);
-        if (pack.manifest.spec.model) {
-            console.log(`Model:       ${pack.manifest.spec.model}`);
-        }
-        if (pack.manifest.spec.cheapModel) {
-            console.log(`Cheap Model: ${pack.manifest.spec.cheapModel}`);
-        }
-        console.log(`Path:        ${pack.packPath}`);
-        if (pack.manifest.spec.permissions) {
-            console.log('');
-            console.log('Permissions:');
-            console.log(`  File Access: ${pack.manifest.spec.permissions.fileAccess || 'default'}`);
-        }
-        if (pack.manifest.spec.mcpServers && pack.manifest.spec.mcpServers.length > 0) {
-            console.log('');
-            console.log('MCP Servers:');
-            for (const server of pack.manifest.spec.mcpServers) {
-                console.log(`  - ${server.name}`);
-            }
-        }
-        console.log(BANNER_LINE);
-        console.log('');
-    }
-    catch (err) {
-        console.error(`Error: ${err instanceof Error ? err.message : err}`);
-        process.exit(1);
-    }
-}
-// -----------------------------------------------------------------------------
-// Signing
-//
-// Publishing has to be a one-liner before `--require-signed-pack` can be turned
-// on in anger: a requirement nobody can satisfy just gets switched off again.
-// -----------------------------------------------------------------------------
-/** Resolve a pack path and its declared identity — a signature binds both, not just bytes. */
-async function loadForSigning(nameOrPath, workspace) {
-    if (!nameOrPath) {
-        console.error('Error: pack name or path required');
-        process.exit(1);
-    }
-    const packPath = (0, pack_loader_1.resolvePackPath)(nameOrPath, workspace);
-    if (!packPath) {
-        console.error(`Error: pack not found: ${nameOrPath}`);
-        process.exit(1);
-    }
-    const loaded = await (0, pack_loader_1.loadAgentPack)(packPath, workspace);
-    return {
-        packPath: loaded.packPath,
-        name: loaded.manifest.metadata.name,
-        version: loaded.manifest.metadata.version ?? '0.0.0',
-    };
-}
-function keygenCommand(options) {
-    const kid = options.kid || `sign-${new Date().toISOString().slice(0, 10)}`;
-    const key = (0, warrant_1.generateWarrantKeypair)(kid);
-    const out = options.output;
-    if (out) {
-        fs.writeFileSync(out, key.privateKeyPem, { mode: 0o600 });
-        console.log(`Private key written to ${out} (mode 0600) — keep it off shared disks.`);
-    }
-    else {
-        console.log(key.privateKeyPem);
-    }
-    console.log('');
-    console.log(`kid: ${kid}`);
-    console.log('Public half — publish this to the control plane so instances can verify:');
-    console.log(key.publicKeyPem.trim());
-    console.log('');
-    console.log(`  curl -X POST "$CONTROL/api/keys" -H 'content-type: application/json' \\`);
-    console.log(`    -d '{"kid":"${kid}","publicPem":"…"}'`);
-}
-async function signPackCommand(options) {
-    const { packPath, name, version } = await loadForSigning(options.name, options.workspace);
-    if (!options.key) {
-        console.error('Error: --key <private-key.pem> required. Generate one with: agenthippo pack keygen -o key.pem');
-        process.exit(1);
-    }
-    let privateKeyPem;
-    try {
-        privateKeyPem = fs.readFileSync(options.key, 'utf8');
-    }
-    catch (err) {
-        console.error(`Error: cannot read key ${options.key}: ${err instanceof Error ? err.message : err}`);
-        process.exit(1);
-        return;
-    }
-    const kid = options.kid;
-    if (!kid) {
-        console.error('Error: --kid <id> required — it is how a verifier finds the public half in JWKS.');
-        process.exit(1);
-    }
-    const { digest } = (0, signature_1.signPack)({ packDir: packPath, pack: name, packVersion: version, privateKeyPem, kid: kid });
-    console.log(`Signed ${name}@${version}`);
-    console.log(`  digest    ${digest}`);
-    console.log(`  key       ${kid}`);
-    console.log(`  written   ${path.join(packPath, signature_1.PACK_SIGNATURE_FILE)}`);
-    console.log('');
-    console.log('Commit pack.sig with the pack: it travels WITH the artifact, and a fleet that');
-    console.log('requires signatures refuses anything whose contents no longer match it.');
-}
-async function verifyPackCommand(options) {
-    const { packPath, name, version } = await loadForSigning(options.name, options.workspace);
-    const token = (0, signature_1.readPackSignature)(packPath);
-    if (!token) {
-        console.error(`UNSIGNED: no ${signature_1.PACK_SIGNATURE_FILE} at ${packPath}`);
-        console.error((0, signature_1.describePackRefusal)({ kind: 'unsigned', detail: `no ${signature_1.PACK_SIGNATURE_FILE}`, pack: name, packVersion: version, packDir: packPath }));
-        process.exit(1);
-    }
-    let keys = {};
-    if (options.keys) {
-        try {
-            keys = JSON.parse(fs.readFileSync(options.keys, 'utf8'));
-        }
-        catch (err) {
-            console.error(`Error: cannot read keys ${options.keys}: ${err instanceof Error ? err.message : err}`);
-            process.exit(1);
-        }
-    }
-    else {
-        const trust = await (0, signature_1.loadPackTrustRoot)({
-            env: options.jwks ? { ...process.env, [signature_1.PACK_JWKS_URL_ENV]: options.jwks } : process.env,
-            leaseUrl: process.env.AGENTHIPPO_LEASE_URL,
-        });
-        for (const w of trust.warnings) {
-            console.error(`Warning: ${w}`);
-        }
-        if (trust.status === 'unavailable') {
-            // Distinct from "no keys configured", and with a different fix. Collapsing the two into
-            // an empty keyring is finding A4 — a 503 read exactly like an unmanaged install.
-            console.error(`REFUSED: a trust root is configured but could not be loaded — ${trust.reason}`);
-            console.error((0, signature_1.describePackRefusal)({
-                kind: 'trust-root-unavailable', detail: trust.reason ?? 'unavailable', pack: name, packVersion: version,
-                packDir: packPath, trustRootHint: trust.url ? `Trust root: ${trust.url}` : undefined,
-            }));
-            process.exit(1);
-        }
-        keys = trust.keys;
-    }
-    if (Object.keys(keys).length === 0) {
-        // "No keys" is a refusal, never a pass: verifying against an empty keyring would report
-        // success for any signature at all.
-        console.error('REFUSED: no trusted public keys. Pass --keys <file>, --jwks <url>, or set AGENTHIPPO_PACK_SIGNING_KEYS.');
-        process.exit(1);
-    }
-    const res = (0, signature_1.verifyPack)(token, keys, { packDir: packPath, pack: name, packVersion: version });
-    if (!res.ok) {
-        console.error(`INVALID: ${res.reason}`);
-        console.error((0, signature_1.describePackRefusal)({ kind: res.kind, detail: res.reason, pack: name, packVersion: version, packDir: packPath }));
-        process.exit(1);
-    }
-    console.log(`OK: ${name}@${version} verified`);
-    console.log(`  digest ${res.claims.digest}`);
-    console.log(`  NOTE: .claude/, .codex/ and .agent-hippo/ ARE covered by this digest — they carry hooks`);
-    console.log('        and other executable content, and were previously outside the signature.');
-}
-async function digestCommand(options) {
-    const { packPath, name, version } = await loadForSigning(options.name, options.workspace);
-    console.log(`${(0, signature_1.computePackDigest)(packPath)}  ${name}@${version}`);
-}

package/out/cli/commands/probe-custom-engine.js

@@ -1,82 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.probeCustomEngineCommand = probeCustomEngineCommand;
-const path = __importStar(require("node:path"));
-const custom_1 = require("../../engines/custom");
-const customRegistry_1 = require("../../engines/customRegistry");
-const STRATEGIES = ['in-process', 'node-subprocess'];
-function parseStrategyArg(raw) {
-    if (!raw?.trim() || raw === 'all') {
-        return 'all';
-    }
-    const normalized = raw.trim().toLowerCase();
-    if (normalized === 'a' || normalized === 'in-process' || normalized === 'inprocess') {
-        return 'in-process';
-    }
-    if (normalized === 'b' || normalized === 'c' || normalized === 'bun-subprocess' || normalized === 'bun' || normalized === 'node-subprocess' || normalized === 'node') {
-        return 'node-subprocess';
-    }
-    throw new Error(`Unknown strategy "${raw}". Use in-process, node-subprocess, or all.`);
-}
-async function probeCustomEngineCommand(options) {
-    const engineId = options.engine.trim();
-    const workspaceRoot = path.resolve(options.workspace);
-    const manifest = (0, customRegistry_1.resolveCustomEngineManifest)(workspaceRoot, engineId);
-    const strategyArg = parseStrategyArg(options.strategy);
-    const toRun = strategyArg === 'all' ? STRATEGIES : [strategyArg];
-    console.log(`Probing custom engine "${manifest.id}" import (${manifest.entryPath})`);
-    console.log(`Workspace: ${workspaceRoot}`);
-    console.log('');
-    let anyOk = false;
-    for (const strategy of toRun) {
-        const result = await (0, custom_1.probeCustomEngineImport)(manifest, strategy);
-        if (result.ok) {
-            anyOk = true;
-            console.log(`  [PASS] ${strategy}`);
-        }
-        else {
-            console.log(`  [FAIL] ${strategy}`);
-            console.log(`         ${result.error ?? 'unknown error'}`);
-        }
-    }
-    console.log('');
-    if (!anyOk) {
-        process.exit(1);
-    }
-}