@agentmeshhq/agent 0.4.6 → 0.4.11

package/dist/cli/watcher.js

@@ -0,0 +1,365 @@
+import { spawn } from "node:child_process";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+import pc from "picocolors";
+import { loadConfig, loadState } from "../config/loader.js";
+const WATCHER_STATE_PATH = path.join(process.env.HOME || ".", ".agentmesh", "watcher-state.json");
+function ensureConfigDir() {
+    const dir = path.dirname(WATCHER_STATE_PATH);
+    if (!fs.existsSync(dir))
+        fs.mkdirSync(dir, { recursive: true });
+}
+function loadWatcherState() {
+    try {
+        if (!fs.existsSync(WATCHER_STATE_PATH))
+            return { watchers: [] };
+        return JSON.parse(fs.readFileSync(WATCHER_STATE_PATH, "utf-8"));
+    }
+    catch {
+        return { watchers: [] };
+    }
+}
+function saveWatcherState(state) {
+    ensureConfigDir();
+    fs.writeFileSync(WATCHER_STATE_PATH, JSON.stringify(state, null, 2));
+}
+function upsertWatcherState(entry) {
+    const state = loadWatcherState();
+    state.watchers = state.watchers.filter((w) => w.teamId !== entry.teamId);
+    state.watchers.push(entry);
+    saveWatcherState(state);
+}
+function patchWatcherState(teamId, updates) {
+    const state = loadWatcherState();
+    const idx = state.watchers.findIndex((w) => w.teamId === teamId);
+    if (idx === -1)
+        return;
+    state.watchers[idx] = { ...state.watchers[idx], ...updates };
+    saveWatcherState(state);
+}
+function resolveAuthContext(agentName) {
+    const config = loadConfig();
+    if (!config)
+        throw new Error("No config found. Run 'agentmesh init' first.");
+    const envToken = process.env.AGENT_TOKEN;
+    const envAgentId = process.env.AGENTMESH_AGENT_ID;
+    if (envToken && !agentName) {
+        return {
+            hubUrl: config.hubUrl,
+            workspace: config.workspace,
+            token: envToken,
+            agentId: envAgentId,
+        };
+    }
+    const state = loadState();
+    let agent = agentName ? state.agents.find((a) => a.name === agentName) : undefined;
+    if (!agent && !agentName && envAgentId) {
+        agent = state.agents.find((a) => a.agentId === envAgentId);
+    }
+    if (!agent && !agentName) {
+        if (state.agents.length === 1) {
+            agent = state.agents[0];
+        }
+        else if (state.agents.length > 1) {
+            throw new Error("Multiple agents found. Pass --name to select which agent token to use.");
+        }
+    }
+    if (!agent) {
+        if (agentName)
+            throw new Error(`Agent "${agentName}" not found.`);
+        throw new Error("No agent token available. Start an agent or run inside an agent session.");
+    }
+    if (!agent.token) {
+        throw new Error(`No token found for agent "${agent.name}". Run 'agentmesh token refresh --name ${agent.name}'.`);
+    }
+    return {
+        hubUrl: config.hubUrl,
+        workspace: config.workspace,
+        token: agent.token,
+        agentName: agent.name,
+        agentId: agent.agentId,
+    };
+}
+async function meshRequest(context, pathName, init = {}) {
+    const response = await fetch(`${context.hubUrl}${pathName}`, {
+        ...init,
+        headers: {
+            Authorization: `Bearer ${context.token}`,
+            ...(init.headers ?? {}),
+        },
+    });
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Hub request failed (${response.status}): ${text}`);
+    }
+    if (response.status === 204)
+        return {};
+    return (await response.json());
+}
+function getWatcherState(teamId) {
+    return loadWatcherState().watchers.find((w) => w.teamId === teamId);
+}
+function validateIntervals(options) {
+    const intervalSeconds = options.intervalSeconds ?? 15;
+    const heartbeatSeconds = options.heartbeatSeconds ?? 10;
+    const ttlSeconds = options.ttlSeconds ?? 30;
+    if (!Number.isInteger(intervalSeconds) || intervalSeconds < 5 || intervalSeconds > 300) {
+        throw new Error("interval-seconds must be an integer between 5 and 300.");
+    }
+    if (!Number.isInteger(heartbeatSeconds) || heartbeatSeconds < 5 || heartbeatSeconds > 120) {
+        throw new Error("heartbeat-seconds must be an integer between 5 and 120.");
+    }
+    if (!Number.isInteger(ttlSeconds) || ttlSeconds < 10 || ttlSeconds > 300) {
+        throw new Error("ttl-seconds must be an integer between 10 and 300.");
+    }
+    return { intervalSeconds, heartbeatSeconds, ttlSeconds };
+}
+export async function startWatcher(options) {
+    if (!options.teamId?.trim())
+        throw new Error("team-id is required.");
+    const existing = getWatcherState(options.teamId);
+    if (existing && existing.pid > 0) {
+        try {
+            process.kill(existing.pid, 0);
+            throw new Error(`Watcher for team ${options.teamId} is already running (pid ${existing.pid}).`);
+        }
+        catch {
+            // stale pid, continue
+        }
+    }
+    const timings = validateIntervals(options);
+    if (!options.foreground) {
+        const cliPath = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../cli/index.js");
+        const args = [
+            "watcher",
+            "start",
+            "--team-id",
+            options.teamId,
+            "--foreground",
+            "--interval-seconds",
+            String(timings.intervalSeconds),
+            "--heartbeat-seconds",
+            String(timings.heartbeatSeconds),
+            "--ttl-seconds",
+            String(timings.ttlSeconds),
+        ];
+        if (options.name)
+            args.push("--name", options.name);
+        const child = spawn("node", [cliPath, ...args], {
+            detached: true,
+            stdio: "ignore",
+            env: process.env,
+        });
+        child.unref();
+        upsertWatcherState({
+            teamId: options.teamId,
+            pid: child.pid ?? 0,
+            startedAt: new Date().toISOString(),
+            status: "starting",
+            agentName: options.name,
+        });
+        console.log(pc.green(`Watcher starting for team ${options.teamId} (PID: ${child.pid}).`));
+        return;
+    }
+    const context = resolveAuthContext(options.name);
+    const holderName = context.agentName ?? "watcher";
+    const holderId = context.agentId ?? holderName;
+    const acquire = await meshRequest(context, `/api/v1/teams/${options.teamId}/watcher/acquire`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+            holder_id: holderId,
+            holder_name: holderName,
+            ttl_seconds: timings.ttlSeconds,
+        }),
+    });
+    if (!acquire.acquired || !acquire.lease_token) {
+        throw new Error(`Failed to acquire watcher lease for team ${options.teamId}${acquire.reason_code ? `: ${acquire.reason_code}` : ""}.`);
+    }
+    const leaseToken = acquire.lease_token;
+    const latest = await fetch(`${context.hubUrl}/api/v1/teams/${options.teamId}/watcher/snapshot/latest`, {
+        headers: { Authorization: `Bearer ${context.token}` },
+    });
+    let seq = 1;
+    if (latest.ok) {
+        const latestBody = (await latest.json());
+        if (typeof latestBody.seq === "number" && Number.isInteger(latestBody.seq)) {
+            seq = latestBody.seq + 1;
+        }
+    }
+    let stopping = false;
+    const shutdown = async () => {
+        if (stopping)
+            return;
+        stopping = true;
+        clearInterval(heartbeatTimer);
+        clearInterval(snapshotTimer);
+        try {
+            await meshRequest(context, `/api/v1/teams/${options.teamId}/watcher/snapshots`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    seq,
+                    status: "degraded",
+                    reason_code: "watcher_stopped",
+                    payload: {
+                        holder_id: holderId,
+                        stopped_at: new Date().toISOString(),
+                    },
+                }),
+            });
+            seq += 1;
+        }
+        catch {
+            // best effort only
+        }
+        try {
+            await meshRequest(context, `/api/v1/teams/${options.teamId}/watcher/release`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({ lease_token: leaseToken }),
+            });
+        }
+        catch {
+            // best effort only
+        }
+        patchWatcherState(options.teamId, { status: "stopped" });
+        process.exit(0);
+    };
+    process.on("SIGINT", shutdown);
+    process.on("SIGTERM", shutdown);
+    upsertWatcherState({
+        teamId: options.teamId,
+        pid: process.pid,
+        startedAt: new Date().toISOString(),
+        status: "starting",
+        leaseToken,
+        agentName: options.name,
+    });
+    const heartbeatTimer = setInterval(async () => {
+        if (stopping)
+            return;
+        try {
+            const renewed = await meshRequest(context, `/api/v1/teams/${options.teamId}/watcher/renew`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    lease_token: leaseToken,
+                    ttl_seconds: timings.ttlSeconds,
+                }),
+            });
+            if (!renewed.ok) {
+                throw new Error(renewed.reason_code ?? "lease_renew_failed");
+            }
+            patchWatcherState(options.teamId, {
+                status: "running",
+                lastHeartbeatAt: new Date().toISOString(),
+                leaseToken,
+            });
+        }
+        catch (error) {
+            patchWatcherState(options.teamId, { status: "failed" });
+            console.error(pc.red(`Watcher lease renewal failed: ${error.message}`));
+            await shutdown();
+        }
+    }, timings.heartbeatSeconds * 1000);
+    const snapshotTimer = setInterval(async () => {
+        if (stopping)
+            return;
+        try {
+            await meshRequest(context, `/api/v1/teams/${options.teamId}/watcher/snapshots`, {
+                method: "POST",
+                headers: { "Content-Type": "application/json" },
+                body: JSON.stringify({
+                    seq,
+                    status: "ok",
+                    payload: {
+                        holder_id: holderId,
+                        heartbeat_seconds: timings.heartbeatSeconds,
+                        interval_seconds: timings.intervalSeconds,
+                        uptime_seconds: Math.floor(process.uptime()),
+                    },
+                }),
+            });
+            seq += 1;
+        }
+        catch (error) {
+            console.error(pc.yellow(`Snapshot publish skipped: ${error.message}`));
+        }
+    }, timings.intervalSeconds * 1000);
+    await meshRequest(context, `/api/v1/teams/${options.teamId}/watcher/snapshots`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+            seq,
+            status: "ok",
+            payload: {
+                holder_id: holderId,
+                started_at: new Date().toISOString(),
+            },
+        }),
+    });
+    seq += 1;
+    patchWatcherState(options.teamId, { leaseToken, status: "running" });
+    console.log(pc.green(`Watcher loop running for team ${options.teamId}. Lease token: ${leaseToken}`));
+    await new Promise(() => { });
+}
+export async function stopWatcher(options) {
+    const watcher = getWatcherState(options.teamId);
+    if (!watcher || watcher.pid <= 0) {
+        console.log(pc.yellow(`No local watcher process found for team ${options.teamId}.`));
+        return;
+    }
+    try {
+        process.kill(watcher.pid, "SIGTERM");
+    }
+    catch {
+        // process already gone
+    }
+    patchWatcherState(options.teamId, { status: "stopped" });
+    console.log(pc.green(`Stop signal sent to watcher for team ${options.teamId} (PID: ${watcher.pid}).`));
+}
+export async function watcherStatus(options) {
+    const context = resolveAuthContext(options.name);
+    const stale = options.staleAfterSeconds && Number.isInteger(options.staleAfterSeconds)
+        ? `?stale_after_seconds=${options.staleAfterSeconds}`
+        : "";
+    const remote = await meshRequest(context, `/api/v1/teams/${options.teamId}/watcher/status${stale}`);
+    const local = getWatcherState(options.teamId) ?? null;
+    if (options.json) {
+        console.log(JSON.stringify({ local, remote }, null, 2));
+        return;
+    }
+    console.log(pc.bold(`Watcher status for team ${options.teamId}`));
+    console.log(`Remote status: ${String(remote.status)}`);
+    console.log(`Remote seq: ${String(remote.seq)}`);
+    const reasons = Array.isArray(remote.reason_codes) ? remote.reason_codes : [];
+    console.log(`Reason codes: ${reasons.length > 0 ? reasons.join(", ") : "-"}`);
+    if (local) {
+        console.log(`Local process: PID ${local.pid} (${local.status})`);
+        console.log(`Started at: ${local.startedAt}`);
+        if (local.lastHeartbeatAt)
+            console.log(`Last heartbeat: ${local.lastHeartbeatAt}`);
+    }
+    else {
+        console.log("Local process: not found");
+    }
+}
+export async function pullWatcher(options) {
+    const context = resolveAuthContext(options.name);
+    const snapshot = await meshRequest(context, `/api/v1/teams/${options.teamId}/watcher/snapshot/latest`);
+    if (options.json) {
+        console.log(JSON.stringify(snapshot, null, 2));
+        return;
+    }
+    console.log(pc.bold(`Latest watcher snapshot for team ${options.teamId}`));
+    console.log(`Seq: ${String(snapshot.seq)}`);
+    console.log(`Status: ${String(snapshot.status)}`);
+    console.log(`Reason: ${snapshot.reason_code ? String(snapshot.reason_code) : "-"}`);
+    console.log(`Generated at: ${String(snapshot.generated_at)}`);
+    if (snapshot.payload && typeof snapshot.payload === "object") {
+        console.log(`Payload: ${JSON.stringify(snapshot.payload)}`);
+    }
+}
+//# sourceMappingURL=watcher.js.map

package/dist/cli/watcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watcher.js","sourceRoot":"","sources":["../../src/cli/watcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAkD5D,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC;AAElG,SAAS,eAAe;IACtB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAqB,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAuB;IAC/C,eAAe,EAAE,CAAC;IAClB,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAyB;IACnD,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC;IACzE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,OAAoC;IAC7E,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACjE,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO;IACvB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;IAC7D,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAkB;IAC5C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAE7E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAClD,IAAI,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,UAAU;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,UAAU,EAAE,CAAC;QACvC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,SAAS,cAAc,CAAC,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,CAAC,IAAI,0CAA0C,KAAK,CAAC,IAAI,IAAI,CAChG,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAAoB,EACpB,QAAgB,EAChB,OAAoB,EAAE;IAEtB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,EAAE,EAAE;QAC3D,GAAG,IAAI;QACP,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE;YACxC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;SACxB;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAO,CAAC;IAC5C,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,gBAAgB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA4B;IAKrD,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;IACtD,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,eAAe,GAAG,CAAC,IAAI,eAAe,GAAG,GAAG,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,GAAG,CAAC,IAAI,gBAAgB,GAAG,GAAG,EAAE,CAAC;QAC1F,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,EAAE,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B;IAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,CAAC,MAAM,4BAA4B,QAAQ,CAAC,GAAG,IAAI,CAC/E,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE3C,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG;YACX,SAAS;YACT,OAAO;YACP,WAAW;YACX,OAAO,CAAC,MAAM;YACd,cAAc;YACd,oBAAoB;YACpB,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;YAC/B,qBAAqB;YACrB,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAChC,eAAe;YACf,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;SAC3B,CAAC;QACF,IAAI,OAAO,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,EAAE;YAC9C,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,QAAQ;YACf,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,kBAAkB,CAAC;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;YACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,OAAO,CAAC,IAAI;SACxB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,6BAA6B,OAAO,CAAC,MAAM,UAAU,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAC1F,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,IAAI,UAAU,CAAC;IAE/C,MAAM,OAAO,GAAG,MAAM,WAAW,CAI9B,OAAO,EAAE,iBAAiB,OAAO,CAAC,MAAM,kBAAkB,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,OAAO,CAAC,UAAU;SAChC,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,4CAA4C,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CACtH,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IAEvC,MAAM,MAAM,GAAG,MAAM,KAAK,CACxB,GAAG,OAAO,CAAC,MAAM,iBAAiB,OAAO,CAAC,MAAM,0BAA0B,EAC1E;QACE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,EAAE;KACtD,CACF,CAAC;IACF,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,MAAM,UAAU,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAqB,CAAC;QAC7D,IAAI,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3E,GAAG,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,aAAa,CAAC,cAAc,CAAC,CAAC;QAC9B,aAAa,CAAC,aAAa,CAAC,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,OAAO,EAAE,iBAAiB,OAAO,CAAC,MAAM,oBAAoB,EAAE;gBAC9E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,GAAG;oBACH,MAAM,EAAE,UAAU;oBAClB,WAAW,EAAE,iBAAiB;oBAC9B,OAAO,EAAE;wBACP,SAAS,EAAE,QAAQ;wBACnB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACrC;iBACF,CAAC;aACH,CAAC,CAAC;YACH,GAAG,IAAI,CAAC,CAAC;QACX,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,OAAO,EAAE,iBAAiB,OAAO,CAAC,MAAM,kBAAkB,EAAE;gBAC5E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;QAED,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEhC,kBAAkB,CAAC;QACjB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,UAAU;QAClB,UAAU;QACV,SAAS,EAAE,OAAO,CAAC,IAAI;KACxB,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC5C,IAAI,QAAQ;YAAE,OAAO;QACrB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,OAAO,EACP,iBAAiB,OAAO,CAAC,MAAM,gBAAgB,EAC/C;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,WAAW,EAAE,UAAU;oBACvB,WAAW,EAAE,OAAO,CAAC,UAAU;iBAChC,CAAC;aACH,CACF,CAAC;YAEF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;YAC/D,CAAC;YACD,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE;gBAChC,MAAM,EAAE,SAAS;gBACjB,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACzC,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,iCAAkC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACnF,MAAM,QAAQ,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAEpC,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC3C,IAAI,QAAQ;YAAE,OAAO;QACrB,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,OAAO,EAAE,iBAAiB,OAAO,CAAC,MAAM,oBAAoB,EAAE;gBAC9E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,GAAG;oBACH,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE;wBACP,SAAS,EAAE,QAAQ;wBACnB,iBAAiB,EAAE,OAAO,CAAC,gBAAgB;wBAC3C,gBAAgB,EAAE,OAAO,CAAC,eAAe;wBACzC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;qBAC7C;iBACF,CAAC;aACH,CAAC,CAAC;YACH,GAAG,IAAI,CAAC,CAAC;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,6BAA8B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEnC,MAAM,WAAW,CAAC,OAAO,EAAE,iBAAiB,OAAO,CAAC,MAAM,oBAAoB,EAAE;QAC9E,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,GAAG;YACH,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE;gBACP,SAAS,EAAE,QAAQ;gBACnB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC;SACF,CAAC;KACH,CAAC,CAAC;IACH,GAAG,IAAI,CAAC,CAAC;IACT,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,KAAK,CAAC,iCAAiC,OAAO,CAAC,MAAM,kBAAkB,UAAU,EAAE,CAAC,CACxF,CAAC;IACF,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAA2B;IAC3D,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,2CAA2C,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;IACD,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,KAAK,CAAC,wCAAwC,OAAO,CAAC,MAAM,UAAU,OAAO,CAAC,GAAG,IAAI,CAAC,CAC1F,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAC/D,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,KAAK,GACT,OAAO,CAAC,iBAAiB,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACtE,CAAC,CAAC,wBAAwB,OAAO,CAAC,iBAAiB,EAAE;QACrD,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,OAAO,EACP,iBAAiB,OAAO,CAAC,MAAM,kBAAkB,KAAK,EAAE,CACzD,CAAC;IACF,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IAEtD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,2BAA2B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,YAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9E,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,eAAe;YAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;IACrF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAA2B;IAC3D,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAChC,OAAO,EACP,iBAAiB,OAAO,CAAC,MAAM,0BAA0B,CAC1D,CAAC;IAEF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,oCAAoC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,QAAQ,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,WAAW,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC"}

package/dist/config/schema.d.ts

@@ -5,6 +5,10 @@ export interface AgentConfig {
     workdir?: string;
     model?: string;
     teams?: string[];
+    /** Team ID to assign this worker agent to on registration. Required for worker agents. */
+    teamId?: string;
+    /** agent_type sent to hub on registration. Defaults to "worker". */
+    agentType?: "worker" | "system" | "autonomous";
 }
 export interface Config {
     apiKey: string;
@@ -62,6 +66,15 @@ export interface AgentState {
     pendingHandoffOldestAgeMinutes?: number;
     /** Most recent SLA alert timestamp */
     pendingHandoffAlertAt?: string;
+    /**
+     * Last restart decision from the done-state guard (Epic #497).
+     * One of: "resumed" | "idle" | "blocked"
+     */
+    lastRestartState?: string;
+    /** Human-readable reason for the last restart decision */
+    lastRestartReason?: string;
+    /** ISO timestamp of when the last restart decision was made */
+    lastRestartDecisionAt?: string;
 }
 export interface State {
     agents: AgentState[];

package/dist/config/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAoBA,MAAM,CAAC,MAAM,cAAc,GAAoB;IAC7C,MAAM,EAAE,yBAAyB;IACjC,QAAQ,EAAE;QACR,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,iBAAiB;KACzB;IACD,MAAM,EAAE,EAAE;CACX,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,yBAAyB,CAAC;AACxE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,wBAAwB,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAwBA,MAAM,CAAC,MAAM,cAAc,GAAoB;IAC7C,MAAM,EAAE,yBAAyB;IACjC,QAAQ,EAAE;QACR,OAAO,EAAE,UAAU;QACnB,KAAK,EAAE,iBAAiB;KACzB;IACD,MAAM,EAAE,EAAE;CACX,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,yBAAyB,CAAC;AACxE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,wBAAwB,CAAC"}

package/dist/core/auth-guard.d.ts

@@ -0,0 +1,155 @@
+/**
+ * OpenCode Auth Guard — Epics #470 + #490
+ *
+ * Implements symlink-first auth linking, startup preflight, schema validation,
+ * temp-path rejection, and periodic healthcheck to eliminate per-agent auth
+ * drift permanently and guard against runtime auth.type errors.
+ *
+ * Strategy:
+ *  1. Canonical store: ~/.local/share/opencode/auth.json
+ *  2. Per-agent auth: ~/.agentmesh/opencode-data/<agent>/opencode/auth.json
+ *     -> Always a symlink pointing to canonical store (never a temp-path).
+ *     -> If a stale regular file or temp-path symlink exists, replace safely.
+ *     -> If canonical missing: write a validated real-file copy as fallback.
+ *  3. Schema validation: auth.json must contain a valid `type` field.
+ *  4. Startup preflight: validate before runner boot; one auto-repair attempt.
+ *  5. Periodic healthcheck: re-validate on interval + exponential backoff.
+ */
+export declare const CANONICAL_AUTH_PATH: string;
+export declare const AGENTMESH_OPENCODE_DATA_ROOT: string;
+export type AuthLinkStatus = "ok" | "repaired" | "degraded" | "no-canonical";
+/** Structured result of auth schema validation (#490) */
+export interface AuthSchemaValidation {
+    valid: boolean;
+    /** The raw parsed object, if parsing succeeded */
+    parsed?: Record<string, unknown>;
+    error?: string;
+}
+export interface AuthGuardResult {
+    status: AuthLinkStatus;
+    agentAuthPath: string;
+    canonicalAuthPath: string;
+    message: string;
+}
+export interface HealthCheckEvent {
+    type: "auth-health-ok" | "auth-health-degraded" | "auth-health-repaired";
+    agentName: string;
+    agentAuthPath: string;
+    message: string;
+    timestamp: string;
+}
+/**
+ * Returns the per-agent auth.json path.
+ */
+export declare function agentAuthPath(agentName: string): string;
+/**
+ * Returns the per-agent opencode dir.
+ */
+export declare function agentOpencodeDir(agentName: string): string;
+/**
+ * Validates that canonical auth.json exists and can be parsed as JSON.
+ */
+export declare function validateCanonicalAuth(canonicalPath?: string): boolean;
+/**
+ * Checks whether agentAuthPath is already a valid symlink to a readable target.
+ */
+export declare function isValidAuthSymlink(authPath: string): boolean;
+/**
+ * Returns true if the given path is a temp/ephemeral path that must not be
+ * used as an auth symlink target. (#490)
+ */
+export declare function isTempPath(p: string): boolean;
+/**
+ * Validates that an auth.json file has the minimum required schema:
+ * - Parseable JSON
+ * - Contains a `type` field (string) — prevents `auth.type undefined` crash (#490)
+ *
+ * Reads from `authPath` (follows symlinks via readFileSync).
+ */
+export declare function validateAuthSchema(authPath: string): AuthSchemaValidation;
+/**
+ * Checks if the symlink at authPath points to a temp path.
+ * Returns the target path if it's a temp path, null otherwise. (#490)
+ */
+export declare function getSymlinkTempTarget(authPath: string): string | null;
+/**
+ * Writes a real validated auth file copy from canonical source. (#490)
+ *
+ * Used as fallback when canonical auth is present but symlinking fails,
+ * or as a recovery path when no persistent canonical exists yet.
+ * Strips non-Anthropic provider keys (e.g., xai) to keep agent minimal.
+ * Sets file permissions to 0o600.
+ *
+ * Returns true if written successfully.
+ */
+export declare function writeRealAuthFile(authPath: string, canonicalPath?: string): {
+    written: boolean;
+    backedUp?: string;
+    error?: string;
+};
+/**
+ * Safely replaces agentAuthPath with a symlink to canonicalPath.
+ * If a regular file already exists it is backed up first.
+ */
+export declare function linkAgentAuth(authPath: string, canonicalPath?: string): {
+    linked: boolean;
+    backedUp?: string;
+    error?: string;
+};
+/**
+ * Ensures the per-agent auth file is a valid symlink to canonical auth.
+ *
+ * Epics #470 + #490 hardening:
+ * - Rejects temp-path symlink targets (e.g., /tmp/...) and replaces them.
+ * - Validates auth schema (auth.type must be present) after linking.
+ * - Falls back to writeRealAuthFile() if symlinking fails but canonical is valid.
+ *
+ * Called from prepareOpenCodeRuntime() on every startup.
+ */
+export declare function ensureAgentAuthLink(agentName: string): AuthGuardResult;
+/**
+ * Startup preflight: ensure auth link and validate once more.
+ *
+ * Returns true if auth is ready, false if agent should be marked degraded.
+ * Performs one auto-repair attempt on failure.
+ */
+export declare function preflightAgentAuth(agentName: string): {
+    ok: boolean;
+    result: AuthGuardResult;
+};
+export interface AuthHealthWatcher {
+    stop: () => void;
+}
+/**
+ * Starts a periodic auth healthcheck for an agent.
+ *
+ * On failure: emits a structured event and attempts repair.
+ * Uses exponential backoff up to MAX_BACKOFF_INTERVAL_MS on repeated failures.
+ *
+ * @param agentName  Agent name
+ * @param onEvent    Callback for health events (for structured logging/alerting)
+ */
+export declare function startAuthHealthWatcher(agentName: string, onEvent: (event: HealthCheckEvent) => void): AuthHealthWatcher;
+export interface DoctorAgentReport {
+    agentName: string;
+    authPath: string;
+    isSymlink: boolean;
+    symlinkTarget: string | null;
+    isValid: boolean;
+    status: AuthLinkStatus;
+    message: string;
+}
+export interface DoctorReport {
+    canonicalAuthPath: string;
+    canonicalValid: boolean;
+    agents: DoctorAgentReport[];
+    overallOk: boolean;
+}
+/**
+ * Generates a diagnostic report for all agents (or a specific one).
+ * If `repair` is true, attempts to fix any broken links.
+ */
+export declare function runAuthDoctor(options: {
+    agentNames?: string[];
+    repair?: boolean;
+}): DoctorReport;