@agentuity/cli 2.0.6 → 2.0.8

package/dist/keychain.js

@@ -6,6 +6,8 @@
  */
 const SERVICE_PREFIX = 'com.agentuity.cli';
 const KEY_ACCOUNT = 'aes-encryption-key';
+const AUTH_ACCOUNT = 'auth-token';
+const CODER_API_KEY_ACCOUNT = 'coder-hub-api-key';
 /**
  * Check if we're running on macOS
  */
@@ -65,20 +67,10 @@ async function decrypt(combined, keyBytes) {
     const plaintext = await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, key, ciphertext);
     return new TextDecoder().decode(plaintext);
 }
-/**
- * Store auth data in macOS Keychain
- */
-export async function saveAuthToKeychain(profileName, authData) {
-    const service = `${SERVICE_PREFIX}.${profileName}`;
-    const account = 'auth-token';
-    // Get or create encryption key
+async function saveEncryptedValueToKeychain(service, account, value) {
     const key = await ensureEncryptionKey(service);
-    // Encrypt the auth data
-    const json = JSON.stringify(authData);
-    const encrypted = await encrypt(json, key);
+    const encrypted = await encrypt(value, key);
     const b64 = Buffer.from(encrypted).toString('base64');
-    // Store encrypted auth in keychain
-    // First try to delete if exists, then add
     const del = Bun.spawn(['security', 'delete-generic-password', '-s', service, '-a', account], {
         stderr: 'ignore',
     });
@@ -96,25 +88,39 @@ export async function saveAuthToKeychain(profileName, authData) {
     ]);
     await add.exited;
 }
+async function getEncryptedValueFromKeychain(service, account) {
+    const find = Bun.spawn(['security', 'find-generic-password', '-s', service, '-a', account, '-w'], { stderr: 'ignore' });
+    const stdout = await new Response(find.stdout).text();
+    if (stdout.length === 0) {
+        return null;
+    }
+    const encrypted = Uint8Array.from(Buffer.from(stdout.trim(), 'base64'));
+    const key = await ensureEncryptionKey(service);
+    return decrypt(encrypted, key);
+}
+async function deleteValueFromKeychain(service, account) {
+    const del = Bun.spawn(['security', 'delete-generic-password', '-s', service, '-a', account], {
+        stderr: 'ignore',
+    });
+    await del.exited;
+}
+/**
+ * Store auth data in macOS Keychain
+ */
+export async function saveAuthToKeychain(profileName, authData) {
+    const service = `${SERVICE_PREFIX}.${profileName}`;
+    await saveEncryptedValueToKeychain(service, AUTH_ACCOUNT, JSON.stringify(authData));
+}
 /**
  * Retrieve auth data from macOS Keychain
  */
 export async function getAuthFromKeychain(profileName) {
     const service = `${SERVICE_PREFIX}.${profileName}`;
-    const account = 'auth-token';
     try {
-        // Get the encrypted auth data
-        const find = Bun.spawn(['security', 'find-generic-password', '-s', service, '-a', account, '-w'], { stderr: 'ignore' });
-        const stdout = await new Response(find.stdout).text();
-        if (stdout.length === 0) {
+        const json = await getEncryptedValueFromKeychain(service, AUTH_ACCOUNT);
+        if (!json) {
             return null;
         }
-        const b64 = stdout.trim();
-        const encrypted = Uint8Array.from(Buffer.from(b64, 'base64'));
-        // Get the encryption key
-        const key = await ensureEncryptionKey(service);
-        // Decrypt the auth data
-        const json = await decrypt(encrypted, key);
         return JSON.parse(json);
     }
     catch {
@@ -126,10 +132,23 @@ export async function getAuthFromKeychain(profileName) {
  */
 export async function deleteAuthFromKeychain(profileName) {
     const service = `${SERVICE_PREFIX}.${profileName}`;
-    const account = 'auth-token';
-    const del = Bun.spawn(['security', 'delete-generic-password', '-s', service, '-a', account], {
-        stderr: 'ignore',
-    });
-    await del.exited;
+    await deleteValueFromKeychain(service, AUTH_ACCOUNT);
+}
+export async function saveCoderApiKeyToKeychain(profileName, apiKey) {
+    const service = `${SERVICE_PREFIX}.${profileName}`;
+    await saveEncryptedValueToKeychain(service, CODER_API_KEY_ACCOUNT, apiKey);
+}
+export async function getCoderApiKeyFromKeychain(profileName) {
+    const service = `${SERVICE_PREFIX}.${profileName}`;
+    try {
+        return await getEncryptedValueFromKeychain(service, CODER_API_KEY_ACCOUNT);
+    }
+    catch {
+        return null;
+    }
+}
+export async function deleteCoderApiKeyFromKeychain(profileName) {
+    const service = `${SERVICE_PREFIX}.${profileName}`;
+    await deleteValueFromKeychain(service, CODER_API_KEY_ACCOUNT);
 }
 //# sourceMappingURL=keychain.js.map

package/dist/keychain.js.map

@@ -1 +1 @@
-{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAEzC;;GAEG;AACH,MAAM,UAAU,OAAO;IACtB,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAAC,OAAe;IACjD,2BAA2B;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CACrB,CAAC,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAC7E,EAAE,MAAM,EAAE,QAAQ,EAAE,CACpB,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,yCAAyC;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEhD,yDAAyD;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;QACrB,UAAU;QACV,sBAAsB;QACtB,IAAI;QACJ,OAAO;QACP,IAAI;QACJ,WAAW;QACX,IAAI;QACJ,GAAG;QACH,IAAI,EAAE,mCAAmC;KACzC,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,MAAM,CAAC;IAEjB,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,QAAoB;IACxD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAE1F,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,IAAI,UAAU,CAChC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CACpE,CAAC;IAEF,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/D,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpB,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAEpC,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,OAAO,CAAC,QAAoB,EAAE,QAAoB;IAChE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAE1F,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEtC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IAExF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,WAAmB,EACnB,QAA+D;IAE/D,MAAM,OAAO,GAAG,GAAG,cAAc,IAAI,WAAW,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,YAAY,CAAC;IAE7B,+BAA+B;IAC/B,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE/C,wBAAwB;IACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEtD,mCAAmC;IACnC,0CAA0C;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;QAC5F,MAAM,EAAE,QAAQ;KAChB,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,MAAM,CAAC;IAEjB,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;QACrB,UAAU;QACV,sBAAsB;QACtB,IAAI;QACJ,OAAO;QACP,IAAI;QACJ,OAAO;QACP,IAAI;QACJ,GAAG;QACH,IAAI;KACJ,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,MAAM,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,WAAmB;IAEnB,MAAM,OAAO,GAAG,GAAG,cAAc,IAAI,WAAW,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,YAAY,CAAC;IAE7B,IAAI,CAAC;QACJ,8BAA8B;QAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CACrB,CAAC,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EACzE,EAAE,MAAM,EAAE,QAAQ,EAAE,CACpB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE9D,yBAAyB;QACzB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAE/C,wBAAwB;QACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IAC/D,MAAM,OAAO,GAAG,GAAG,cAAc,IAAI,WAAW,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,YAAY,CAAC;IAE7B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;QAC5F,MAAM,EAAE,QAAQ;KAChB,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,MAAM,CAAC;AAClB,CAAC"}
+{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,WAAW,GAAG,oBAAoB,CAAC;AACzC,MAAM,YAAY,GAAG,YAAY,CAAC;AAClC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAElD;;GAEG;AACH,MAAM,UAAU,OAAO;IACtB,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAAC,OAAe;IACjD,2BAA2B;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CACrB,CAAC,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,EAC7E,EAAE,MAAM,EAAE,QAAQ,EAAE,CACpB,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,yCAAyC;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEhD,yDAAyD;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;QACrB,UAAU;QACV,sBAAsB;QACtB,IAAI;QACJ,OAAO;QACP,IAAI;QACJ,WAAW;QACX,IAAI;QACJ,GAAG;QACH,IAAI,EAAE,mCAAmC;KACzC,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,MAAM,CAAC;IAEjB,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,QAAoB;IACxD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAE1F,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,IAAI,UAAU,CAChC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CACpE,CAAC;IAEF,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/D,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpB,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IAEpC,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,OAAO,CAAC,QAAoB,EAAE,QAAoB;IAChE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAE1F,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEtC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IAExF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,4BAA4B,CAC1C,OAAe,EACf,OAAe,EACf,KAAa;IAEb,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEtD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;QAC5F,MAAM,EAAE,QAAQ;KAChB,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,MAAM,CAAC;IAEjB,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;QACrB,UAAU;QACV,sBAAsB;QACtB,IAAI;QACJ,OAAO;QACP,IAAI;QACJ,OAAO;QACP,IAAI;QACJ,GAAG;QACH,IAAI;KACJ,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,MAAM,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC3C,OAAe,EACf,OAAe;IAEf,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CACrB,CAAC,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EACzE,EAAE,MAAM,EAAE,QAAQ,EAAE,CACpB,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,OAAe,EAAE,OAAe;IACtE,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;QAC5F,MAAM,EAAE,QAAQ;KAChB,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,MAAM,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,WAAmB,EACnB,QAA+D;IAE/D,MAAM,OAAO,GAAG,GAAG,cAAc,IAAI,WAAW,EAAE,CAAC;IACnD,MAAM,4BAA4B,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,WAAmB;IAEnB,MAAM,OAAO,GAAG,GAAG,cAAc,IAAI,WAAW,EAAE,CAAC;IAEnD,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,6BAA6B,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IAC/D,MAAM,OAAO,GAAG,GAAG,cAAc,IAAI,WAAW,EAAE,CAAC;IACnD,MAAM,uBAAuB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,WAAmB,EACnB,MAAc;IAEd,MAAM,OAAO,GAAG,GAAG,cAAc,IAAI,WAAW,EAAE,CAAC;IACnD,MAAM,4BAA4B,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,WAAmB;IACnE,MAAM,OAAO,GAAG,GAAG,cAAc,IAAI,WAAW,EAAE,CAAC;IACnD,IAAI,CAAC;QACJ,OAAO,MAAM,6BAA6B,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,WAAmB;IACtE,MAAM,OAAO,GAAG,GAAG,cAAc,IAAI,WAAW,EAAE,CAAC;IACnD,MAAM,uBAAuB,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;AAC/D,CAAC"}

package/dist/types.d.ts

@@ -716,10 +716,10 @@ export declare const BuildMetadataSchema: z.ZodObject<{
         type: z.ZodEnum<{
             email: "email";
             stream: "stream";
+            websocket: "websocket";
             api: "api";
             sms: "sms";
             cron: "cron";
-            websocket: "websocket";
             sse: "sse";
         }>;
         agentIds: z.ZodOptional<z.ZodArray<z.ZodString>>;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@agentuity/cli",
-	"version": "2.0.6",
+	"version": "2.0.8",
 	"license": "Apache-2.0",
 	"author": "Agentuity employees and contributors",
 	"type": "module",
@@ -41,10 +41,11 @@
 		"prepublishOnly": "bun run clean && bun run build"
 	},
 	"dependencies": {
-		"@agentuity/auth": "2.0.6",
-		"@agentuity/core": "2.0.6",
-		"@agentuity/frontend": "2.0.6",
-		"@agentuity/server": "2.0.6",
+		"@agentuity/auth": "2.0.8",
+		"@agentuity/coder-tui": "2.0.8",
+		"@agentuity/core": "2.0.8",
+		"@agentuity/frontend": "2.0.8",
+		"@agentuity/server": "2.0.8",
 		"@datasert/cronjs-parser": "^1.4.0",
 		"@vitejs/plugin-react": "^5.1.2",
 		"acorn-loose": "^8.5.2",
@@ -63,7 +64,7 @@
 		"zod": "^4.3.5"
 	},
 	"devDependencies": {
-		"@agentuity/test-utils": "2.0.6",
+		"@agentuity/test-utils": "2.0.8",
 		"@types/adm-zip": "^0.5.7",
 		"@types/archiver": "^7.0.0",
 		"@types/bun": "latest",

package/src/cli.ts

@@ -1195,8 +1195,10 @@ async function registerSubcommand(
 				// Add -y short alias for --confirm
 				flagSpec = `-y, --${flag}`;
 			} else if (optAliases.length > 0) {
-				const shortFlags = optAliases.map((a) => `-${a}`).join(', ');
-				flagSpec = `${shortFlags}, --${flag}`;
+				const aliasFlags = optAliases
+					.map((a) => (a.length === 1 ? `-${a}` : `--${a}`))
+					.join(', ');
+				flagSpec = `${aliasFlags}, --${flag}`;
 			}
 			if (opt.type === 'boolean') {
 				if (opt.hasDefault) {

package/src/cmd/ai/prompt/agent.md

@@ -151,11 +151,11 @@ The handler receives a context object with:
 
 ```typescript
 handler: async (ctx, input) => {
-	await ctx.kv.set('user:123', { name: 'Alice', age: 30 });
-	const user = await ctx.kv.get('user:123');
-	await ctx.kv.delete('user:123');
-	const keys = await ctx.kv.list('user:*');
-	return user;
+	await ctx.kv.set('users', 'user:123', { name: 'Alice', age: 30 });
+	const result = await ctx.kv.get('users', 'user:123');
+	await ctx.kv.delete('users', 'user:123');
+	const keys = await ctx.kv.getKeys('users');
+	return result.exists ? result.data : null;
 };
 ```
 
@@ -188,7 +188,7 @@ handler: async (ctx, input) => {
 handler: async (ctx, input) => {
 	// Schedule background work that continues after response
 	ctx.waitUntil(async () => {
-		await ctx.kv.set('processed', Date.now());
+		await ctx.kv.set('state', 'processed', Date.now());
 		ctx.logger.info('Background task complete');
 	});
 

package/src/cmd/build/vite/route-discovery.ts

@@ -180,6 +180,13 @@ export async function discoverRoutes(
 					version
 				);
 
+				// Extract type-specific config from route metadata
+				const meta =
+					typeof route.handler === 'function'
+						? (route.handler as any)[Symbol.for('agentuity:route-meta')]
+						: undefined;
+				const config = meta?.schedule ? { expression: meta.schedule } : undefined;
+
 				routes.push({
 					id,
 					filename: toForwardSlash(relative(rootDir, mount.routerFile)),
@@ -187,6 +194,7 @@ export async function discoverRoutes(
 					method,
 					version,
 					type: routeType,
+					config,
 				});
 			}
 

package/src/cmd/cloud/sandbox/fs/rm.ts

@@ -8,6 +8,7 @@ import { sandboxRmFile, sandboxResolve } from '@agentuity/server';
 const RmFileResponseSchema = z.object({
 	success: z.boolean(),
 	path: z.string(),
+	found: z.boolean(),
 });
 
 export const rmSubcommand = createCommand({
@@ -40,17 +41,21 @@ export const rmSubcommand = createCommand({
 
 		const client = createSandboxClient(logger, auth, region);
 
-		await sandboxRmFile(client, {
+		const result = await sandboxRmFile(client, {
 			sandboxId: args.sandboxId,
 			path: args.path,
 			orgId,
 		});
 
 		if (!options.json) {
-			tui.success(`Removed file: ${args.path}`);
+			if (result.found) {
+				tui.success(`Removed file: ${args.path}`);
+			} else {
+				tui.warning(`File not found: ${args.path} (already removed)`);
+			}
 		}
 
-		return { success: true, path: args.path };
+		return { success: true, path: args.path, found: result.found };
 	},
 });
 

package/src/cmd/cloud/sandbox/fs/rmdir.ts

@@ -8,6 +8,7 @@ import { sandboxRmDir, sandboxResolve } from '@agentuity/server';
 const RmDirResponseSchema = z.object({
 	success: z.boolean(),
 	path: z.string(),
+	found: z.boolean(),
 });
 
 export const rmdirSubcommand = createCommand({
@@ -52,7 +53,7 @@ export const rmdirSubcommand = createCommand({
 
 		const client = createSandboxClient(logger, auth, region);
 
-		await sandboxRmDir(client, {
+		const result = await sandboxRmDir(client, {
 			sandboxId: args.sandboxId,
 			path: args.path,
 			recursive: opts.recursive,
@@ -60,10 +61,14 @@ export const rmdirSubcommand = createCommand({
 		});
 
 		if (!options.json) {
-			tui.success(`Removed directory: ${args.path}`);
+			if (result.found) {
+				tui.success(`Removed directory: ${args.path}`);
+			} else {
+				tui.warning(`Directory not found: ${args.path} (already removed)`);
+			}
 		}
 
-		return { success: true, path: args.path };
+		return { success: true, path: args.path, found: result.found };
 	},
 });
 

package/src/cmd/cloud/task/close.ts

@@ -0,0 +1,319 @@
+import { z } from 'zod';
+import { createCommand } from '../../../types';
+import * as tui from '../../../tui';
+import { createStorageAdapter, resolveMeId, parseDuration, truncate } from './util';
+import { getCommand } from '../../../command-prefix';
+import { isDryRunMode, outputDryRun } from '../../../explain';
+import type { TaskPriority, TaskStatus, TaskType, BatchClosedTask } from '@agentuity/core';
+
+const TaskCloseResponseSchema = z.object({
+	success: z.boolean().describe('Whether the operation succeeded'),
+	closed: z
+		.array(
+			z.object({
+				id: z.string().describe('Closed task ID'),
+				title: z.string().describe('Closed task title'),
+				status: z.string().describe('Task status'),
+				closed_date: z.string().optional().describe('ISO 8601 closed date'),
+			})
+		)
+		.describe('List of closed tasks'),
+	count: z.number().describe('Number of tasks closed'),
+	durationMs: z.number().describe('Operation duration in milliseconds'),
+	dryRun: z.boolean().optional().describe('Whether this was a dry run'),
+	message: z.string().optional().describe('Status message'),
+});
+
+export const closeSubcommand = createCommand({
+	name: 'close',
+	aliases: ['done', 'complete'],
+	description: 'Close a task by ID or batch-close tasks by filter',
+	tags: ['mutating', 'slow', 'requires-auth'],
+	requires: { auth: true },
+	examples: [
+		{
+			command: getCommand('cloud task close task_abc123'),
+			description: 'Close a single task by ID',
+		},
+		{
+			command: getCommand('cloud task close --status in_progress --older-than 7d'),
+			description: 'Close in-progress tasks older than 7 days',
+		},
+		{
+			command: getCommand('cloud task close --status open --limit 10 --dry-run'),
+			description: 'Preview which open tasks would be closed (dry run)',
+		},
+		{
+			command: getCommand('cloud task close --created-id me --confirm'),
+			description: 'Close all tasks created by me without confirmation prompt',
+		},
+	],
+	schema: {
+		args: z.object({
+			id: z.string().optional().describe('Task ID to close (for single close)'),
+		}),
+		options: z.object({
+			status: z
+				.enum(['open', 'in_progress', 'started', 'done', 'completed', 'closed', 'cancelled'])
+				.optional()
+				.describe('filter batch close by status'),
+			type: z
+				.enum(['epic', 'feature', 'enhancement', 'bug', 'task'])
+				.optional()
+				.describe('filter batch close by type'),
+			priority: z
+				.enum(['high', 'medium', 'low', 'none'])
+				.optional()
+				.describe('filter batch close by priority'),
+			olderThan: z
+				.string()
+				.optional()
+				.describe('filter batch close by age (e.g. 30s, 7d, 24h, 2w)'),
+			parentId: z.string().optional().describe('filter batch close by parent task ID'),
+			createdId: z
+				.string()
+				.optional()
+				.describe('filter batch close by creator ID (use "me" for current user)'),
+			assignedId: z.string().optional().describe('filter batch close by assigned user ID'),
+			projectId: z.string().optional().describe('filter batch close by project ID'),
+			tagId: z.string().optional().describe('filter batch close by tag ID'),
+			idsFile: z.string().optional().describe('path to JSON file containing task IDs to close'),
+			orgId: z.string().optional().describe('organization ID (uses default if not specified)'),
+			dryRun: z
+				.boolean()
+				.optional()
+				.default(false)
+				.describe('preview changes without executing'),
+			limit: z.coerce
+				.number()
+				.int()
+				.min(1)
+				.max(200)
+				.default(50)
+				.describe('max tasks to close in batch mode (default: 50, max: 200)'),
+			confirm: z.boolean().optional().default(false).describe('skip confirmation prompt'),
+		}),
+		response: TaskCloseResponseSchema,
+	},
+
+	async handler(ctx) {
+		const { args, opts, options } = ctx;
+		const started = Date.now();
+		const storage = await createStorageAdapter(ctx);
+
+		const isSingleClose = !!args.id;
+		const hasFilters =
+			opts.status ||
+			opts.type ||
+			opts.priority ||
+			opts.olderThan ||
+			opts.parentId ||
+			opts.createdId ||
+			opts.assignedId ||
+			opts.projectId ||
+			opts.tagId ||
+			opts.idsFile;
+
+		if (!isSingleClose && !hasFilters) {
+			tui.fatal(
+				'Provide a task ID for single close, or use --status, --type, --priority, --older-than, --parent-id, --created-id, --assigned-id, --project-id, --tag-id, or --ids-file for batch close.'
+			);
+		}
+
+		if (isSingleClose && hasFilters) {
+			tui.fatal(
+				'Cannot combine task ID with filter options. Use either single close (by ID) or batch close (by filters).'
+			);
+		}
+
+		if (isSingleClose) {
+			if (isDryRunMode(options)) {
+				outputDryRun(`Would close task: ${args.id}`, options);
+				return {
+					success: true,
+					closed: [{ id: args.id!, title: '(dry run)', status: 'done' }],
+					count: 1,
+					durationMs: Date.now() - started,
+					dryRun: true,
+					message: 'Dry run — no tasks were closed',
+				};
+			}
+
+			if (!opts.confirm) {
+				const confirmed = await tui.confirm(`Close task "${args.id}"?`, false);
+				if (!confirmed) {
+					if (!options.json) tui.info('Cancelled');
+					return {
+						success: false,
+						closed: [],
+						count: 0,
+						durationMs: Date.now() - started,
+						message: 'Cancelled',
+					};
+				}
+			}
+
+			const task = await storage.close(args.id!);
+			const durationMs = Date.now() - started;
+
+			if (!options.json) {
+				tui.success(`Closed task ${tui.bold(task.id)} (${task.title}) in ${durationMs}ms`);
+			}
+
+			return {
+				success: true,
+				closed: [
+					{
+						id: task.id,
+						title: task.title,
+						status: task.status,
+						closed_date: task.closed_date,
+					},
+				],
+				count: 1,
+				durationMs,
+			};
+		}
+
+		// Batch close mode
+		if (opts.olderThan) {
+			parseDuration(opts.olderThan);
+		}
+
+		const createdId = resolveMeId(opts.createdId, ctx);
+		const assignedId = resolveMeId(opts.assignedId, ctx);
+
+		// Handle IDs file
+		let explicitIds: string[] | undefined;
+		if (opts.idsFile) {
+			const file = Bun.file(opts.idsFile);
+			if (!(await file.exists())) {
+				tui.fatal(`IDs file not found: ${opts.idsFile}`);
+			}
+			try {
+				const content = await file.json();
+				if (Array.isArray(content)) {
+					explicitIds = content.map((id) => String(id));
+				} else if (content && Array.isArray((content as { ids?: string[] }).ids)) {
+					explicitIds = (content as { ids: string[] }).ids;
+				} else {
+					tui.fatal(`Invalid IDs file format. Expected array of IDs or { ids: [...] }`);
+				}
+			} catch (err) {
+				tui.fatal(`Failed to parse IDs file: ${err}`);
+			}
+		}
+
+		const batchParams = {
+			status: opts.status as TaskStatus | undefined,
+			type: opts.type as TaskType | undefined,
+			priority: opts.priority as TaskPriority | undefined,
+			parent_id: opts.parentId,
+			created_id: createdId,
+			assigned_id: assignedId,
+			project_id: opts.projectId,
+			tag_id: opts.tagId,
+			older_than: opts.olderThan,
+			ids: explicitIds,
+			limit: opts.limit,
+			closed_id: ctx.auth.userId,
+			dry_run: isDryRunMode(options),
+		};
+
+		// For confirmation, run a dry-run first to preview
+		if (!isDryRunMode(options) && !opts.confirm) {
+			const preview = await storage.batchClose({ ...batchParams, dry_run: true });
+
+			if (preview.count === 0) {
+				if (!options.json) tui.info('No tasks match the given filters');
+				return {
+					success: true,
+					closed: [],
+					count: 0,
+					durationMs: Date.now() - started,
+					message: 'No matching tasks found',
+				};
+			}
+
+			if (!options.json) {
+				tui.warning(
+					`Found ${preview.count} ${tui.plural(preview.count, 'task', 'tasks')} to close:`
+				);
+				tui.newline();
+
+				const tableData = preview.closed.map((task: BatchClosedTask) => ({
+					ID: tui.muted(truncate(task.id, 28)),
+					Title: truncate(task.title, 40),
+					Status: task.status,
+				}));
+
+				tui.table(tableData, [
+					{ name: 'ID', alignment: 'left' },
+					{ name: 'Title', alignment: 'left' },
+					{ name: 'Status', alignment: 'left' },
+				]);
+				tui.newline();
+			}
+
+			const confirmed = await tui.confirm(
+				`Close ${preview.count} ${tui.plural(preview.count, 'task', 'tasks')}?`,
+				false
+			);
+			if (!confirmed) {
+				if (!options.json) tui.info('Cancelled');
+				return {
+					success: false,
+					closed: [],
+					count: 0,
+					durationMs: Date.now() - started,
+					message: 'Cancelled',
+				};
+			}
+		}
+
+		// Execute batch close
+		const result = await storage.batchClose(batchParams);
+		const durationMs = Date.now() - started;
+
+		if (!options.json) {
+			if (result.dry_run) {
+				if (result.count > 0) {
+					tui.info(
+						`Dry run: would close ${result.count} ${tui.plural(result.count, 'task', 'tasks')}`
+					);
+				} else {
+					tui.info('No tasks match the given filters');
+				}
+			} else if (result.count > 0) {
+				tui.success(
+					`Closed ${result.count} ${tui.plural(result.count, 'task', 'tasks')} in ${durationMs}ms`
+				);
+
+				// Show which tasks were closed
+				if (result.closed.length > 0) {
+					tui.newline();
+					const closedTable = result.closed.map((task) => ({
+						ID: tui.muted(truncate(task.id, 28)),
+						Title: truncate(task.title, 40),
+					}));
+					tui.table(closedTable, [
+						{ name: 'ID', alignment: 'left' },
+						{ name: 'Title', alignment: 'left' },
+					]);
+				}
+			} else {
+				tui.info('No tasks matched the given filters');
+			}
+		}
+
+		return {
+			success: true,
+			closed: result.closed,
+			count: result.count,
+			durationMs,
+			dryRun: result.dry_run,
+		};
+	},
+});
+
+export default closeSubcommand;