@agentteams/cli 0.1.84 → 0.1.86

package/dist/mcp/guides.js

@@ -0,0 +1,141 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { findProjectConfig } from '../utils/config.js';
+import httpClient from '../utils/httpClient.js';
+/**
+ * Platform-guide loader for the MCP write path.
+ *
+ * Guides are read from the local `.agentteams/platform/` copy when this session
+ * actually sits in the bound project: the write contract only needs the body
+ * plus the hash the server will compare against, and both are written by
+ * `agentteams convention download`.
+ *
+ * That local copy cannot be assumed, though. `context.ts` resolves credentials
+ * and `projectId` from CLI options and `AGENTTEAMS_*` env vars precisely because
+ * an externally spawned MCP server's cwd may sit outside the project — or inside
+ * a *different* one. So the local path is used only when the caller hands over a
+ * verified project root, and the server is the fallback: `GET /api/platform/guides`
+ * returns body and hash together, which is always a consistent pair.
+ *
+ * This module must not import the MCP SDK (see `test/mcp-boundary.test.ts`).
+ */
+const CONVENTION_DIR = '.agentteams';
+const PLATFORM_DIR = 'platform';
+const MANIFEST_FILE = 'conventions.manifest.json';
+const RESYNC_HINT = "Run 'agentteams convention download' and retry.";
+/** Record kinds whose guide can be handed to an agent. Document is the only write-enabled kind so far. */
+export const GUIDE_RECORD_KINDS = ['document'];
+const GUIDE_FILE_NAMES = {
+    document: 'document-guide.md',
+};
+/** Project root = the directory containing `.agentteams/config.json`. */
+export function findGuideProjectRoot(cwd = process.cwd()) {
+    const configPath = findProjectConfig(cwd);
+    if (!configPath) {
+        return null;
+    }
+    return resolve(configPath, '..', '..');
+}
+function readManifestHashes(projectRoot) {
+    const manifestPath = join(projectRoot, CONVENTION_DIR, MANIFEST_FILE);
+    if (!existsSync(manifestPath)) {
+        return null;
+    }
+    try {
+        const parsed = JSON.parse(readFileSync(manifestPath, 'utf-8'));
+        return parsed?.platformGuideHashes ?? null;
+    }
+    catch {
+        // A corrupt manifest is indistinguishable from a missing one for this purpose:
+        // both mean "the local hash is unknown", and both are fixed by re-syncing.
+        return null;
+    }
+}
+function resolveGuideFileName(recordKind) {
+    const fileName = GUIDE_FILE_NAMES[recordKind];
+    if (!fileName) {
+        throw new Error(`Unknown guide record kind: ${recordKind}. Supported: ${GUIDE_RECORD_KINDS.join(', ')}`);
+    }
+    return fileName;
+}
+/**
+ * Load one platform guide from a local project copy.
+ *
+ * Returns `null` when this session has no usable local copy — the caller then
+ * falls back to the server rather than failing, so a session bound to a project
+ * it does not sit in can still follow the guide-first contract.
+ */
+export function loadLocalPlatformGuide(recordKind, projectRoot) {
+    const fileName = resolveGuideFileName(recordKind);
+    if (!projectRoot) {
+        return null;
+    }
+    const filePath = join(projectRoot, CONVENTION_DIR, PLATFORM_DIR, fileName);
+    if (!existsSync(filePath)) {
+        return null;
+    }
+    const hashes = readManifestHashes(projectRoot);
+    return {
+        recordKind,
+        fileName,
+        source: 'local',
+        filePath,
+        content: readFileSync(filePath, 'utf-8'),
+        guideHash: hashes?.[fileName] ?? null,
+    };
+}
+/** Read one guide straight from the server, where body and hash always match. */
+export async function fetchPlatformGuide(recordKind, apiUrl, headers) {
+    const fileName = resolveGuideFileName(recordKind);
+    const normalizedApiUrl = apiUrl.endsWith('/') ? apiUrl.slice(0, -1) : apiUrl;
+    const response = await httpClient.get(`${normalizedApiUrl}/api/platform/guides`, { headers });
+    const guides = (response.data?.data ?? []);
+    const guide = Array.isArray(guides) ? guides.find((item) => item?.fileName === fileName) : undefined;
+    if (!guide || typeof guide.content !== 'string') {
+        throw new Error(`Platform guide ${fileName} is not published by ${normalizedApiUrl}.`);
+    }
+    return {
+        recordKind,
+        fileName,
+        source: 'server',
+        content: guide.content,
+        guideHash: typeof guide.hash === 'string' && guide.hash.length > 0 ? guide.hash : null,
+    };
+}
+/**
+ * Resolve the guide an agent must follow before a write: local copy first,
+ * server otherwise.
+ *
+ * `projectRoot` is the root this MCP session is actually bound to. It is passed
+ * in (not discovered here) so a cwd that happens to sit in some *other* project
+ * cannot feed that project's stale hash into this project's write — which would
+ * produce a `GUIDE_OUTDATED` 409 whose documented fix (`convention download`)
+ * does not resolve it.
+ */
+export async function resolvePlatformGuide(recordKind, options) {
+    const local = loadLocalPlatformGuide(recordKind, options.projectRoot ?? null);
+    if (local) {
+        return local;
+    }
+    try {
+        return await fetchPlatformGuide(recordKind, options.apiUrl, options.headers);
+    }
+    catch (error) {
+        const reason = error instanceof Error ? error.message : String(error);
+        throw new Error(`Could not load the ${resolveGuideFileName(recordKind)} platform guide. ` +
+            `No local copy is available for this session, and reading it from the server failed: ${reason}. ` +
+            `Run 'agentteams convention download' in the project, or check the API connection.`);
+    }
+}
+/**
+ * Human-readable note explaining why `guideHash` is absent, so an agent reading
+ * the tool output knows the freshness check is not being enforced for this call.
+ */
+export function describeMissingGuideHash(guide) {
+    if (guide.guideHash) {
+        return null;
+    }
+    return (`No recorded hash for ${guide.fileName} — this project's manifest predates per-guide hashes. ` +
+        `Writes will skip the guide freshness check. ${RESYNC_HINT}`);
+}
+//# sourceMappingURL=guides.js.map

package/dist/mcp/guides.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guides.js","sourceRoot":"","sources":["../../src/mcp/guides.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,UAAU,MAAM,wBAAwB,CAAC;AAEhD;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,MAAM,YAAY,GAAG,UAAU,CAAC;AAChC,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAElD,MAAM,WAAW,GAAG,iDAAiD,CAAC;AAEtE,0GAA0G;AAC1G,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,UAAU,CAAU,CAAC;AAGxD,MAAM,gBAAgB,GAAoC;IACxD,QAAQ,EAAE,mBAAmB;CAC9B,CAAC;AA2BF,yEAAyE;AACzE,MAAM,UAAU,oBAAoB,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC9D,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;IACtE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAuB,CAAC;QACrF,OAAO,MAAM,EAAE,mBAAmB,IAAI,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,2EAA2E;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,UAA2B;IACvD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,8BAA8B,UAAU,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAA2B,EAAE,WAA0B;IAC5F,MAAM,QAAQ,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAE/C,OAAO;QACL,UAAU;QACV,QAAQ;QACR,MAAM,EAAE,OAAO;QACf,QAAQ;QACR,OAAO,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;QACxC,SAAS,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,IAAI;KACtC,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAA2B,EAC3B,MAAc,EACd,OAA+B;IAE/B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,GAAG,gBAAgB,sBAAsB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAE9F,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAA0B,CAAC;IACpE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrG,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,wBAAwB,gBAAgB,GAAG,CAAC,CAAC;IACzF,CAAC;IAED,OAAO;QACL,UAAU;QACV,QAAQ;QACR,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;KACvF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAA2B,EAC3B,OAAyF;IAEzF,MAAM,KAAK,GAAG,sBAAsB,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;IAC9E,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,kBAAkB,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,sBAAsB,oBAAoB,CAAC,UAAU,CAAC,mBAAmB;YACvE,uFAAuF,MAAM,IAAI;YACjG,mFAAmF,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAkB;IACzD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CACL,wBAAwB,KAAK,CAAC,QAAQ,wDAAwD;QAC9F,+CAA+C,WAAW,EAAE,CAC7D,CAAC;AACJ,CAAC"}

package/dist/mcp/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAoB,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAc,KAAK,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAExF,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAO1E,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAEjD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,GAAE,MAAoB,GAAG,SAAS,CAOjG;AAyED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAetG"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAoB,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAc,KAAK,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AAExF,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAQ1E,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAEjD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,GAAE,MAAoB,GAAG,SAAS,CAOjG;AAwFD;;;GAGG;AACH,wBAAsB,cAAc,CAAC,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAetG"}

package/dist/mcp/server.js

@@ -5,6 +5,7 @@ import { handleError } from '../utils/errors.js';
 import { resolveMcpToolContext } from './context.js';
 import { getResourceSpecs } from './resources.js';
 import { createCliContextToolsClient, getToolSpecs } from './tools.js';
+import { getWriteToolSpecs } from './writeTools.js';
 const require = createRequire(import.meta.url);
 const pkg = require('../../package.json');
 export const MCP_SERVER_NAME = '@agentteams/cli';
@@ -18,17 +19,31 @@ export const MCP_SERVER_NAME = '@agentteams/cli';
  * pinned beta only touches this adapter.
  */
 export function createMcpServer(context, version = pkg.version) {
-    // Read-only surface: tools plus single-entity resource templates. Prompts
-    // and Extensions stay out of scope for Phase 1.
+    // Tools (read + document writes) plus single-entity resource templates.
+    // Prompts and Extensions stay out of scope.
     const server = new McpServer({ name: MCP_SERVER_NAME, version }, { capabilities: { tools: {}, resources: {} } });
     registerTools(server, context);
     registerResources(server, context);
     return server;
 }
-/** The single `registerTool` loop — tool envelopes are assembled only here. */
+/**
+ * The single `registerTool` loop — tool envelopes are assembled only here.
+ *
+ * Read specs come from the shared `@agentteams/context-tools` package; write
+ * specs are CLI-local by design (see `writeTools.ts`). Both are flattened to the
+ * same `(args) => unknown` shape first so there is still exactly one loop.
+ */
 function registerTools(server, context) {
     const client = createCliContextToolsClient(context);
-    for (const spec of getToolSpecs()) {
+    const readTools = getToolSpecs().map((spec) => ({
+        ...spec,
+        invoke: (args) => spec.handler(args, client),
+    }));
+    const writeTools = getWriteToolSpecs().map((spec) => ({
+        ...spec,
+        invoke: (args) => spec.handler(args, context),
+    }));
+    for (const spec of [...readTools, ...writeTools]) {
         server.registerTool(spec.name, {
             title: spec.title,
             description: spec.description,
@@ -37,7 +52,7 @@ function registerTools(server, context) {
             try {
                 // The SDK has already validated `args` against `spec.inputSchema`
                 // before this callback runs, so the record cast is safe.
-                const result = await spec.handler(args, client);
+                const result = await spec.invoke(args);
                 return { content: [{ type: 'text', text: JSON.stringify(result) }] };
             }
             catch (error) {

package/dist/mcp/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,UAAU,EAA0B,MAAM,oCAAoC,CAAC;AACxF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAuB,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEvE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAwB,CAAC;AAEjE,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,OAAuB,EAAE,UAAkB,GAAG,CAAC,OAAO;IACpF,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACjH,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,SAAS,aAAa,CAAC,MAAiB,EAAE,OAAuB;IAC/D,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,YAAY,CACjB,IAAI,CAAC,IAAI,EACT;YACE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,EACD,KAAK,EAAE,IAAa,EAAE,EAAE;YACtB,IAAI,CAAC;gBACH,kEAAkE;gBAClE,yDAAyD;gBACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAA+B,EAAE,MAAM,CAAC,CAAC;gBAC3E,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YAChF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,wEAAwE;gBACxE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;oBAC1F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,MAAiB,EAAE,OAAuB;IACnE,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,gBAAgB,CACrB,IAAI,CAAC,IAAI,EACT,IAAI,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAC3D;YACE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,kBAAkB;SAC7B,EACD,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC1E,OAAO;oBACL,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;iBAC1F,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gEAAgE;gBAChE,mEAAmE;gBACnE,8DAA8D;gBAC9D,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,SAAS,kBAAkB,CAAC,SAA4C;IACtE,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACpE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAmC,EAAE;IACxE,+EAA+E;IAC/E,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAErD,eAAe,CAAC,sBAAsB,GAAG,CAAC,OAAO,YAAY,OAAO,CAAC,MAAM,cAAc,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAE9G,OAAO,UAAU,CAAC,CAAC,GAAG,EAAE,EAAE;QACxB,4DAA4D;QAC5D,kEAAkE;QAClE,wCAAwC;QACxC,eAAe,CAAC,kBAAkB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7C,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,OAAO,IAAI,CAAC,CAAC;AACxD,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,UAAU,EAA0B,MAAM,oCAAoC,CAAC;AACxF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAuB,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAwB,CAAC;AAEjE,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,OAAuB,EAAE,UAAkB,GAAG,CAAC,OAAO;IACpF,wEAAwE;IACxE,4CAA4C;IAC5C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACjH,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,MAAiB,EAAE,OAAuB;IAC/D,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,GAAG,IAAI;QACP,MAAM,EAAE,CAAC,IAA6B,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;KACtE,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpD,GAAG,IAAI;QACP,MAAM,EAAE,CAAC,IAA6B,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;KACvE,CAAC,CAAC,CAAC;IAEJ,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,YAAY,CACjB,IAAI,CAAC,IAAI,EACT;YACE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,EACD,KAAK,EAAE,IAAa,EAAE,EAAE;YACtB,IAAI,CAAC;gBACH,kEAAkE;gBAClE,yDAAyD;gBACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAA+B,CAAC,CAAC;gBAClE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YAChF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,wEAAwE;gBACxE,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;oBAC1F,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,MAAiB,EAAE,OAAuB;IACnE,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,gBAAgB,CACrB,IAAI,CAAC,IAAI,EACT,IAAI,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAC3D;YACE,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,QAAQ,EAAE,kBAAkB;SAC7B,EACD,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC1E,OAAO;oBACL,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;iBAC1F,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gEAAgE;gBAChE,mEAAmE;gBACnE,8DAA8D;gBAC9D,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,SAAS,kBAAkB,CAAC,SAA4C;IACtE,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACpE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAmC,EAAE;IACxE,+EAA+E;IAC/E,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAErD,eAAe,CAAC,sBAAsB,GAAG,CAAC,OAAO,YAAY,OAAO,CAAC,MAAM,cAAc,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAE9G,OAAO,UAAU,CAAC,CAAC,GAAG,EAAE,EAAE;QACxB,4DAA4D;QAC5D,kEAAkE;QAClE,wCAAwC;QACxC,eAAe,CAAC,kBAAkB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7C,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,OAAO,IAAI,CAAC,CAAC;AACxD,CAAC"}

package/dist/mcp/writeTools.d.ts

@@ -0,0 +1,25 @@
+import { z } from 'zod';
+import type { McpToolContext } from './context.js';
+/**
+ * MCP **write** tools. CLI-only on purpose.
+ *
+ * These are deliberately *not* added to `@agentteams/context-tools`:
+ * `desktop/src/main/localAgent/directRunner.ts` advertises every context-tool
+ * definition to the model without filtering, so a write tool placed there would
+ * be handed to Direct BYOK conversations — the exact `DESKTOP_LIMITED` boundary
+ * that must not grant blanket project write access.
+ *
+ * The spec shape mirrors `ContextToolSpec`, but is declared locally so the shared
+ * read package stays read-only. No MCP SDK import belongs here — `server.ts` is
+ * the only adapter (see `test/mcp-boundary.test.ts`).
+ */
+export interface McpWriteToolSpec {
+    name: string;
+    title: string;
+    description: string;
+    inputSchema: z.ZodType<Record<string, unknown>>;
+    handler(args: Record<string, unknown>, context: McpToolContext): Promise<unknown>;
+}
+/** Every write tool the CLI MCP server exposes, in registration order. */
+export declare function getWriteToolSpecs(): McpWriteToolSpec[];
+//# sourceMappingURL=writeTools.d.ts.map

package/dist/mcp/writeTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeTools.d.ts","sourceRoot":"","sources":["../../src/mcp/writeTools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGnD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnF;AAyLD,0EAA0E;AAC1E,wBAAgB,iBAAiB,IAAI,gBAAgB,EAAE,CAEtD"}

package/dist/mcp/writeTools.js

@@ -0,0 +1,161 @@
+import { stripContextEntityIdPrefix } from '@agentteams/context-tools';
+import { z } from 'zod';
+import { createDocument, deleteDocument, updateDocument } from '../api/document.js';
+import { GUIDE_RECORD_KINDS, describeMissingGuideHash, resolvePlatformGuide } from './guides.js';
+const GUIDE_FIRST = 'Call agentteams_guide_get("document") first and follow that guide.';
+const TAG_POLICY = 'You cannot set confirmed tags. Anything you pass in suggestedTags is a suggestion for a human to confirm.';
+const PROJECT_SCOPE = 'Scoped to the single project this MCP server is bound to. There is no projectId argument — a different project cannot be reached from here.';
+const guideHashField = z
+    .string()
+    .min(1)
+    .optional()
+    .describe('guideHash from agentteams_guide_get. If it is stale the server rejects the write with GUIDE_OUTDATED.');
+const idempotencyKeyField = z
+    .string()
+    .min(1)
+    .optional()
+    .describe('Retry-safe key. Repeating the same call with the same key replays the first result instead of redoing it.');
+const expectedUpdatedAtField = z
+    .string()
+    .min(1)
+    .optional()
+    .describe("The document's updatedAt as you last read it. The write is rejected if someone else changed the document since.");
+const suggestedTagsField = z
+    .array(z.string().min(1))
+    .optional()
+    .describe('Suggested tags (not confirmed). Reuse existing project tags where they fit.');
+const visibilityField = z
+    .enum(['PRIVATE', 'PROJECT'])
+    .optional()
+    .describe('PRIVATE (default) is author-only; PROJECT is visible to every project member.');
+/** Credentials can expire mid-session, so headers are resolved per call, never captured. */
+const auth = (context) => context.resolveHeaders?.() ?? Promise.resolve(context.headers);
+/** Drop keys the caller omitted so an absent optional never reaches the server as `undefined`. */
+const definedFields = (fields) => Object.fromEntries(Object.entries(fields).filter(([, value]) => value !== undefined));
+const guideGetSpec = {
+    name: 'agentteams_guide_get',
+    title: 'Get AgentTeams Record Guide',
+    description: [
+        'Fetch the platform guide that governs how a record type must be written.',
+        'Reads this project’s local copy when the session sits in it, and falls back to the server otherwise.',
+        'Returns the full guide body plus the guideHash to pass to the matching write tool.',
+        'Read this before any AgentTeams write tool call — the rules it states (visibility, tag policy, structure) are enforced server-side.',
+        'If it reports that the local guide hash is unknown, run `agentteams convention download` in the project.',
+    ].join(' '),
+    inputSchema: z.strictObject({
+        recordKind: z
+            .enum(GUIDE_RECORD_KINDS)
+            .describe('Record type whose guide you need. Only "document" is write-enabled so far.'),
+    }),
+    handler: async (args, context) => {
+        const guide = await resolvePlatformGuide(args.recordKind, {
+            projectRoot: context.projectRoot,
+            apiUrl: context.apiUrl,
+            headers: await auth(context),
+        });
+        const warning = describeMissingGuideHash(guide);
+        return {
+            recordKind: guide.recordKind,
+            fileName: guide.fileName,
+            source: guide.source,
+            ...(guide.filePath ? { filePath: guide.filePath } : {}),
+            guideHash: guide.guideHash,
+            content: guide.content,
+            ...(warning ? { warning } : {}),
+        };
+    },
+};
+const documentCreateSpec = {
+    name: 'agentteams_document_create',
+    title: 'Create AgentTeams Document',
+    description: [
+        'Create a document in this project’s document library.',
+        GUIDE_FIRST,
+        TAG_POLICY,
+        PROJECT_SCOPE,
+        'Returns the created document id and webUrl.',
+    ].join(' '),
+    inputSchema: z.strictObject({
+        title: z.string().min(1).max(255).describe('Document title.'),
+        body: z.string().min(1).describe('Document body in Markdown.'),
+        suggestedTags: suggestedTagsField,
+        visibility: visibilityField,
+        guideHash: guideHashField,
+        idempotencyKey: idempotencyKeyField,
+    }),
+    handler: async (args, context) => {
+        return createDocument(context.apiUrl, context.projectId, await auth(context), definedFields({
+            title: args.title,
+            body: args.body,
+            suggestedTags: args.suggestedTags,
+            visibility: args.visibility,
+            guideHash: args.guideHash,
+            idempotencyKey: args.idempotencyKey,
+        }));
+    },
+};
+const documentUpdateSpec = {
+    name: 'agentteams_document_update',
+    title: 'Update AgentTeams Document',
+    description: [
+        'Update an existing document in this project. Only the fields you pass are changed.',
+        GUIDE_FIRST,
+        TAG_POLICY,
+        'Pass expectedUpdatedAt (from agentteams_document_get) so a concurrent edit is rejected rather than silently overwritten.',
+        PROJECT_SCOPE,
+    ].join(' '),
+    inputSchema: z.strictObject({
+        id: z.string().min(1).describe('Document id (bare uuid or agentteams_doc_-prefixed).'),
+        title: z.string().min(1).max(255).optional().describe('New title.'),
+        body: z.string().min(1).optional().describe('New body in Markdown. Replaces the whole body.'),
+        suggestedTags: suggestedTagsField,
+        visibility: visibilityField,
+        expectedUpdatedAt: expectedUpdatedAtField,
+        guideHash: guideHashField,
+        idempotencyKey: idempotencyKeyField,
+    }),
+    handler: async (args, context) => {
+        return updateDocument(context.apiUrl, context.projectId, await auth(context), stripContextEntityIdPrefix(args.id), definedFields({
+            title: args.title,
+            body: args.body,
+            suggestedTags: args.suggestedTags,
+            visibility: args.visibility,
+            expectedUpdatedAt: args.expectedUpdatedAt,
+            guideHash: args.guideHash,
+            idempotencyKey: args.idempotencyKey,
+        }));
+    },
+};
+const documentDeleteSpec = {
+    name: 'agentteams_document_delete',
+    title: 'Delete AgentTeams Document',
+    description: [
+        'Delete a document from this project. This is destructive — the document disappears from the library for everyone.',
+        GUIDE_FIRST,
+        'Without expectedUpdatedAt this is an unconditional delete: it removes the document even if someone edited it after you last read it.',
+        'Pass expectedUpdatedAt (from agentteams_document_get) unless you intend that.',
+        'Confirm with the user before deleting anything you did not just create.',
+        PROJECT_SCOPE,
+    ].join(' '),
+    inputSchema: z.strictObject({
+        id: z.string().min(1).describe('Document id (bare uuid or agentteams_doc_-prefixed).'),
+        expectedUpdatedAt: expectedUpdatedAtField,
+        // 되돌리기 가장 어려운 작업에서만 최신성 게이트가 빠지면 표면이 비대칭해진다.
+        guideHash: guideHashField,
+        idempotencyKey: idempotencyKeyField,
+    }),
+    handler: async (args, context) => {
+        const documentId = stripContextEntityIdPrefix(args.id);
+        await deleteDocument(context.apiUrl, context.projectId, await auth(context), documentId, {
+            ...(args.expectedUpdatedAt ? { expectedUpdatedAt: args.expectedUpdatedAt } : {}),
+            ...(args.guideHash ? { guideHash: args.guideHash } : {}),
+            ...(args.idempotencyKey ? { idempotencyKey: args.idempotencyKey } : {}),
+        });
+        return { deleted: true, id: documentId };
+    },
+};
+/** Every write tool the CLI MCP server exposes, in registration order. */
+export function getWriteToolSpecs() {
+    return [guideGetSpec, documentCreateSpec, documentUpdateSpec, documentDeleteSpec];
+}
+//# sourceMappingURL=writeTools.js.map

package/dist/mcp/writeTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeTools.js","sourceRoot":"","sources":["../../src/mcp/writeTools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpF,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,oBAAoB,EAAwB,MAAM,aAAa,CAAC;AAuBvH,MAAM,WAAW,GAAG,oEAAoE,CAAC;AACzF,MAAM,UAAU,GACd,2GAA2G,CAAC;AAC9G,MAAM,aAAa,GACjB,6IAA6I,CAAC;AAEhJ,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,QAAQ,EAAE;KACV,QAAQ,CAAC,uGAAuG,CAAC,CAAC;AAErH,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,QAAQ,EAAE;KACV,QAAQ,CACP,2GAA2G,CAC5G,CAAC;AAEJ,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,QAAQ,EAAE;KACV,QAAQ,CACP,iHAAiH,CAClH,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CAAC;KACzB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KACxB,QAAQ,EAAE;KACV,QAAQ,CAAC,6EAA6E,CAAC,CAAC;AAE3F,MAAM,eAAe,GAAG,CAAC;KACtB,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;KAC5B,QAAQ,EAAE;KACV,QAAQ,CAAC,+EAA+E,CAAC,CAAC;AAE7F,4FAA4F;AAC5F,MAAM,IAAI,GAAG,CAAC,OAAuB,EAAmC,EAAE,CACxE,OAAO,CAAC,cAAc,EAAE,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AAEjE,kGAAkG;AAClG,MAAM,aAAa,GAAG,CAAoC,MAAS,EAA2B,EAAE,CAC9F,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC;AAExF,MAAM,YAAY,GAAqB;IACrC,IAAI,EAAE,sBAAsB;IAC5B,KAAK,EAAE,6BAA6B;IACpC,WAAW,EAAE;QACX,0EAA0E;QAC1E,sGAAsG;QACtG,oFAAoF;QACpF,qIAAqI;QACrI,0GAA0G;KAC3G,CAAC,IAAI,CAAC,GAAG,CAAC;IACX,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC;QAC1B,UAAU,EAAE,CAAC;aACV,IAAI,CAAC,kBAAkB,CAAC;aACxB,QAAQ,CAAC,4EAA4E,CAAC;KAC1F,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,UAA6B,EAAE;YAC3E,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC;SAC7B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO;YACL,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAqB;IAC3C,IAAI,EAAE,4BAA4B;IAClC,KAAK,EAAE,4BAA4B;IACnC,WAAW,EAAE;QACX,uDAAuD;QACvD,WAAW;QACX,UAAU;QACV,aAAa;QACb,6CAA6C;KAC9C,CAAC,IAAI,CAAC,GAAG,CAAC;IACX,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC;QAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC7D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QAC9D,aAAa,EAAE,kBAAkB;QACjC,UAAU,EAAE,eAAe;QAC3B,SAAS,EAAE,cAAc;QACzB,cAAc,EAAE,mBAAmB;KACpC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC/B,OAAO,cAAc,CACnB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,SAAS,EACjB,MAAM,IAAI,CAAC,OAAO,CAAC,EACnB,aAAa,CAAC;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAqB;IAC3C,IAAI,EAAE,4BAA4B;IAClC,KAAK,EAAE,4BAA4B;IACnC,WAAW,EAAE;QACX,oFAAoF;QACpF,WAAW;QACX,UAAU;QACV,0HAA0H;QAC1H,aAAa;KACd,CAAC,IAAI,CAAC,GAAG,CAAC;IACX,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC;QAC1B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC;QACtF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;QACnE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;QAC7F,aAAa,EAAE,kBAAkB;QACjC,UAAU,EAAE,eAAe;QAC3B,iBAAiB,EAAE,sBAAsB;QACzC,SAAS,EAAE,cAAc;QACzB,cAAc,EAAE,mBAAmB;KACpC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC/B,OAAO,cAAc,CACnB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,SAAS,EACjB,MAAM,IAAI,CAAC,OAAO,CAAC,EACnB,0BAA0B,CAAC,IAAI,CAAC,EAAY,CAAC,EAC7C,aAAa,CAAC;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC,CACH,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAqB;IAC3C,IAAI,EAAE,4BAA4B;IAClC,KAAK,EAAE,4BAA4B;IACnC,WAAW,EAAE;QACX,mHAAmH;QACnH,WAAW;QACX,sIAAsI;QACtI,+EAA+E;QAC/E,yEAAyE;QACzE,aAAa;KACd,CAAC,IAAI,CAAC,GAAG,CAAC;IACX,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC;QAC1B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,sDAAsD,CAAC;QACtF,iBAAiB,EAAE,sBAAsB;QACzC,6CAA6C;QAC7C,SAAS,EAAE,cAAc;QACzB,cAAc,EAAE,mBAAmB;KACpC,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,UAAU,GAAG,0BAA0B,CAAC,IAAI,CAAC,EAAY,CAAC,CAAC;QACjE,MAAM,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE;YACvF,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAA2B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClF,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;IAC3C,CAAC;CACF,CAAC;AAEF,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB;IAC/B,OAAO,CAAC,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;AACpF,CAAC"}

package/dist/utils/authFormat.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Human-readable rendering of `agentteams auth` results.
+ *
+ * `auth` is read by a person deciding what to do next — "am I signed in, as whom,
+ * and against which server" — not by a script assembling a payload. The JSON view
+ * is still available behind an explicit `--format json` for the scripts that read
+ * the documented fields.
+ *
+ * Lines are `Label: value` so the output stays greppable, and every line answers a
+ * question a user actually asks. Anything the payload does not contain is omitted
+ * rather than printed as `null`.
+ */
+/**
+ * Render an `auth` result as text. Unknown actions fall back to JSON so a new
+ * subcommand is never silently reduced to nothing.
+ */
+export declare function formatAuthResultText(action: string, result: unknown): string;
+//# sourceMappingURL=authFormat.d.ts.map

package/dist/utils/authFormat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authFormat.d.ts","sourceRoot":"","sources":["../../src/utils/authFormat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAkHH;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,CAqB5E"}

package/dist/utils/authFormat.js

@@ -0,0 +1,130 @@
+/**
+ * Human-readable rendering of `agentteams auth` results.
+ *
+ * `auth` is read by a person deciding what to do next — "am I signed in, as whom,
+ * and against which server" — not by a script assembling a payload. The JSON view
+ * is still available behind an explicit `--format json` for the scripts that read
+ * the documented fields.
+ *
+ * Lines are `Label: value` so the output stays greppable, and every line answers a
+ * question a user actually asks. Anything the payload does not contain is omitted
+ * rather than printed as `null`.
+ */
+const asString = (value) => typeof value === 'string' && value.trim().length > 0 ? value : undefined;
+const asRecord = (value) => value && typeof value === 'object' ? value : {};
+/** `nickname <email>`, falling back to whichever half is present. */
+function describeIdentity(identity) {
+    const record = asRecord(identity);
+    const email = asString(record.email);
+    const nickname = asString(record.nickname);
+    if (email && nickname)
+        return `${nickname} <${email}>`;
+    return email ?? nickname ?? asString(record.memberId);
+}
+/** "macOS keychain (OK)" — the backend plus why it can or cannot persist. */
+function describeStore(backend, reason, persisted) {
+    const labels = {
+        'macos-keychain': 'macOS keychain',
+        'windows-credential-manager': 'Windows Credential Manager',
+        libsecret: 'libsecret (Secret Service)',
+        none: 'none',
+    };
+    const backendLabel = labels[String(backend)] ?? asString(backend);
+    if (!backendLabel)
+        return undefined;
+    const reasonLabel = asString(reason);
+    const suffix = persisted === false ? 'session only — nothing is written to disk' : reasonLabel;
+    return suffix ? `${backendLabel} (${suffix})` : backendLabel;
+}
+const CREDENTIAL_SOURCE_LABELS = {
+    'personal-token': 'personal login',
+    'config-api-key': 'project API key',
+    'explicit-api-key': 'API key passed to this command',
+};
+function formatLogin(result) {
+    const lines = [];
+    const identity = describeIdentity(result.identity);
+    lines.push(identity ? `Signed in as ${identity}` : 'Signed in');
+    const apiUrl = asString(result.apiUrl);
+    if (apiUrl)
+        lines.push(`Server: ${apiUrl}`);
+    const store = describeStore(result.storeBackend, result.storeReason, result.persisted);
+    if (store)
+        lines.push(`Stored in: ${store}`);
+    const configPath = asString(result.configPath);
+    // configPath is null when the project was not switched over, which the warning
+    // below explains — so only claim the switch when it actually happened.
+    if (configPath)
+        lines.push(`Project: ${configPath} (switched to personal login)`);
+    return lines;
+}
+function formatStatus(result) {
+    const lines = [];
+    const token = asRecord(result.personalToken);
+    const source = asString(result.credentialSource);
+    lines.push(`Credential: ${source ? (CREDENTIAL_SOURCE_LABELS[source] ?? source) : 'none usable'}`);
+    const identity = describeIdentity(token.identity);
+    if (identity)
+        lines.push(`Signed in as ${identity}`);
+    const apiUrl = asString(result.apiUrl);
+    if (apiUrl)
+        lines.push(`Server: ${apiUrl}`);
+    const configPath = asString(result.configPath);
+    if (configPath) {
+        const authMode = asString(result.authMode);
+        lines.push(`Project: ${configPath}${authMode === 'personal-token' ? ' (personal login)' : ''}`);
+    }
+    const store = describeStore(token.storeBackend, token.storeReason, token.persisted);
+    if (store)
+        lines.push(`Store: ${store}`);
+    const expiresAt = asString(token.expiresAt);
+    if (expiresAt)
+        lines.push(`Access token expires: ${expiresAt}`);
+    // A stored-but-rejected token is the case where "connected" alone misleads.
+    if (token.reconnectRequired === true) {
+        lines.push("Sign-in required: the stored login was rejected. Run 'agentteams auth login'.");
+    }
+    return lines;
+}
+function formatLogout(result) {
+    const lines = ['Signed out'];
+    const apiUrl = asString(result.apiUrl);
+    if (apiUrl)
+        lines.push(`Server: ${apiUrl}`);
+    lines.push(result.revokedOnServer === true
+        ? 'Server-side token: revoked'
+        : 'Server-side token: still valid — revoke it in the AgentTeams web app');
+    const configPath = asString(result.configPath);
+    if (configPath)
+        lines.push(`Project: ${configPath} (personal login setting removed)`);
+    if (result.fellBackToApiKey === true) {
+        lines.push('This project fell back to the API key still in its config.');
+    }
+    return lines;
+}
+/**
+ * Render an `auth` result as text. Unknown actions fall back to JSON so a new
+ * subcommand is never silently reduced to nothing.
+ */
+export function formatAuthResultText(action, result) {
+    const record = asRecord(result);
+    const lines = action === 'login'
+        ? formatLogin(record)
+        : action === 'status'
+            ? formatStatus(record)
+            : action === 'logout'
+                ? formatLogout(record)
+                : null;
+    if (!lines)
+        return JSON.stringify(result, null, 2);
+    // `problem` and `warning` are the reason a user ran the command at all, so they
+    // go last where the eye lands.
+    const problem = asString(record.problem);
+    if (problem)
+        lines.push(`Problem: ${problem}`);
+    const warning = asString(record.warning);
+    if (warning)
+        lines.push(`Warning: ${warning}`);
+    return lines.join('\n');
+}
+//# sourceMappingURL=authFormat.js.map

package/dist/utils/authFormat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authFormat.js","sourceRoot":"","sources":["../../src/utils/authFormat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAsB,EAAE,CACtD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAE3E,MAAM,QAAQ,GAAG,CAAC,KAAc,EAA2B,EAAE,CAC3D,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;AAE/E,qEAAqE;AACrE,SAAS,gBAAgB,CAAC,QAAsB;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,KAAK,IAAI,QAAQ;QAAE,OAAO,GAAG,QAAQ,KAAK,KAAK,GAAG,CAAC;IACvD,OAAO,KAAK,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CAAC,OAAgB,EAAE,MAAe,EAAE,SAAkB;IAC1E,MAAM,MAAM,GAA2B;QACrC,gBAAgB,EAAE,gBAAgB;QAClC,4BAA4B,EAAE,4BAA4B;QAC1D,SAAS,EAAE,4BAA4B;QACvC,IAAI,EAAE,MAAM;KACb,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAEpC,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,WAAW,CAAC;IAC/F,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,YAAY,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/D,CAAC;AAED,MAAM,wBAAwB,GAA2B;IACvD,gBAAgB,EAAE,gBAAgB;IAClC,gBAAgB,EAAE,iBAAiB;IACnC,kBAAkB,EAAE,gCAAgC;CACrD,CAAC;AAEF,SAAS,WAAW,CAAC,MAA+B;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAwB,CAAC,CAAC;IACnE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAEhE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACvF,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC;IAE7C,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/C,+EAA+E;IAC/E,uEAAuE;IACvE,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,UAAU,+BAA+B,CAAC,CAAC;IAElF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,MAA+B;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IAEnG,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAwB,CAAC,CAAC;IAClE,IAAI,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAC;IAErD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IAE5C,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,YAAY,UAAU,GAAG,QAAQ,KAAK,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACpF,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;IAEzC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;IAEhE,4EAA4E;IAC5E,IAAI,KAAK,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IAC9F,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,MAA+B;IACnD,MAAM,KAAK,GAAa,CAAC,YAAY,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IAE5C,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,eAAe,KAAK,IAAI;QAC7B,CAAC,CAAC,4BAA4B;QAC9B,CAAC,CAAC,sEAAsE,CAC3E,CAAC;IAEF,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,UAAU,mCAAmC,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,MAAe;IAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,KAAK,GACT,MAAM,KAAK,OAAO;QAChB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC;QACrB,CAAC,CAAC,MAAM,KAAK,QAAQ;YACnB,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;YACtB,CAAC,CAAC,MAAM,KAAK,QAAQ;gBACnB,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;gBACtB,CAAC,CAAC,IAAI,CAAC;IAEf,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEnD,gFAAgF;IAChF,+BAA+B;IAC/B,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;IAE/C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/utils/config.d.ts

@@ -1,5 +1,5 @@
 import type { Config } from '../types/index.js';
-import { type PersonalTokenClient } from '../auth/personalTokenClient.js';
+import { type PersonalTokenClient, type PersonalTokenState } from '../auth/personalTokenClient.js';
 export declare const DEFAULT_API_URL = "https://api.agentteams.run";
 /** Local config may contain a legacy API key, so it must not be group- or world-readable. */
 export declare const CONFIG_FILE_MODE = 384;
@@ -107,6 +107,15 @@ export type CredentialPlan = {
  *   3. The `key_` in `.agentteams/config.json` — the original path, unchanged.
  */
 export declare function planCredential(options?: Partial<Config>): CredentialPlan;
+/**
+ * Explain a stored credential that could not be turned into an access token.
+ *
+ * The distinction is worth carrying: telling someone to check a network that is
+ * fine, or to re-login with a credential that is valid, costs them the time it
+ * takes to rule those out. Lock contention and an unusable lock both clear on a
+ * retry, so neither should read as "your login is broken".
+ */
+export declare function describeUnusableCredential(state: PersonalTokenState): string;
 /** Decide which credential to authenticate with, and produce the value to send. */
 export declare function resolveCredential(options?: Partial<Config>, deps?: ResolveCredentialDeps): Promise<ResolvedCredential | null>;
 /**

package/dist/utils/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAA0B,KAAK,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAMlG,eAAO,MAAM,eAAe,+BAA+B,CAAC;AAE5D,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,MAAQ,CAAC;AACtC,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC;AAClH,MAAM,MAAM,2BAA2B,GAAG,eAAe,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAenF,yFAAyF;AACzF,wBAAgB,iBAAiB,CAAC,QAAQ,GAAE,MAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAG1F;AAuBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA+BjE;AAED,wBAAgB,+BAA+B,CAC7C,QAAQ,GAAE,MAAsB,EAChC,WAAW,GAAE,MAAkB,GAC9B,MAAM,CAmBR;AAoCD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,CAUnE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;CAC/B;AAED,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,cAAc,GAAG,IAAI,CAUnF;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAExF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG;IAAE,gBAAgB,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAE7E,MAAM,WAAW,qBAAqB;IACpC,kFAAkF;IAClF,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,mBAAmB,CAAC;CACrD;AAYD,yEAAyE;AACzE,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AASD;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAChE;;;GAGG;GACD;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GACvF;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,cAAc,CAmBxE;AAED,mFAAmF;AACnF,wBAAsB,iBAAiB,CACrC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EACzB,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAyDpC;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EACzB,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAQhC;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,OAAO,CAanG;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI,CAE5E;AAED,uFAAuF;AACvF,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,GAAG,IAAI,CAEpG"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAC;AAMxC,eAAO,MAAM,eAAe,+BAA+B,CAAC;AAE5D,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,MAAQ,CAAC;AACtC,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC;AAClH,MAAM,MAAM,2BAA2B,GAAG,eAAe,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAenF,yFAAyF;AACzF,wBAAgB,iBAAiB,CAAC,QAAQ,GAAE,MAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAG1F;AAuBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA+BjE;AAED,wBAAgB,+BAA+B,CAC7C,QAAQ,GAAE,MAAsB,EAChC,WAAW,GAAE,MAAkB,GAC9B,MAAM,CAmBR;AAoCD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,CAUnE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;CAC/B;AAED,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,cAAc,GAAG,IAAI,CAUnF;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAExF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,gBAAgB,CAAC;IACzB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG;IAAE,gBAAgB,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAE7E,MAAM,WAAW,qBAAqB;IACpC,kFAAkF;IAClF,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,mBAAmB,CAAC;CACrD;AAYD,yEAAyE;AACzE,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AASD;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,MAAM,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAChE;;;GAGG;GACD;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GACvF;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,cAAc,CAmBxE;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAa5E;AAED,mFAAmF;AACnF,wBAAsB,iBAAiB,CACrC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EACzB,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAqDpC;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EACzB,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAQhC;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,OAAO,CAanG;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI,CAE5E;AAED,uFAAuF;AACvF,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,GAAG,IAAI,CAEpG"}