@ai-support-agent/cli 0.1.35-beta.0 → 0.1.35

package/dist/oneshot-runner.js

@@ -1,166 +0,0 @@
-"use strict";
-/**
- * Oneshot runner (ECS container mode).
- *
- * When the CLI starts with AGENT_MODE=oneshot (set via containerOverrides at
- * ECS RunTask time), it does NOT run the resident agent flow. Instead it:
- *   getCommand(COMMAND_ID) -> executeCommand -> submitResult -> exit
- *
- * There is no AppSync subscription, no heartbeat, and no register call.
- * Authentication uses the short-lived oneshot token (AGENT_ONESHOT_TOKEN)
- * scoped to the single COMMAND_ID. The token value is never logged.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.readOneshotEnv = readOneshotEnv;
-exports.runOneshot = runOneshot;
-exports.runOneshotFromEnv = runOneshotFromEnv;
-const api_client_1 = require("./api-client");
-const commands_1 = require("./commands");
-const constants_1 = require("./constants");
-const logger_1 = require("./logger");
-const types_1 = require("./types");
-const utils_1 = require("./utils");
-/**
- * Command types the ECS oneshot runner is allowed to execute (Phase 1).
- * The API only dispatches `execute_command` to ECS execution agents, but the
- * runner enforces the same allowlist defensively: a mis-dispatched `chat` /
- * `e2e_test` / `file_*` would otherwise run with a near-empty execution
- * context (no projectDir/mcpConfigPath/serverConfig/browser callbacks) and
- * silently misbehave. Anything outside this set is rejected up front.
- */
-const ONESHOT_SUPPORTED_COMMAND_TYPES = new Set([
-    'execute_command',
-]);
-/**
- * Working directory for `execute_command` in the container. The ECS image
- * sets WORKDIR /workspace; fall back to that when the shell executor would
- * otherwise default to an undefined cwd.
- */
-const ONESHOT_DEFAULT_CWD = '/workspace';
-const REQUIRED_ENV_KEYS = [
-    constants_1.ONESHOT_ENV_VARS.COMMAND_ID,
-    constants_1.ONESHOT_ENV_VARS.AGENT_ID,
-    constants_1.ONESHOT_ENV_VARS.TENANT_CODE,
-    constants_1.ONESHOT_ENV_VARS.PROJECT_CODE,
-    constants_1.ONESHOT_ENV_VARS.API_BASE_URL,
-    constants_1.ONESHOT_ENV_VARS.AGENT_ONESHOT_TOKEN,
-];
-/**
- * Read and validate the oneshot environment.
- * Missing variables are a clear fatal error (no fallback).
- */
-function readOneshotEnv(env = process.env) {
-    const missing = REQUIRED_ENV_KEYS.filter((key) => !env[key]);
-    if (missing.length > 0) {
-        throw new Error(`Oneshot mode requires environment variables: ${missing.join(', ')}`);
-    }
-    return {
-        commandId: env[constants_1.ONESHOT_ENV_VARS.COMMAND_ID],
-        agentId: env[constants_1.ONESHOT_ENV_VARS.AGENT_ID],
-        tenantCode: env[constants_1.ONESHOT_ENV_VARS.TENANT_CODE],
-        projectCode: env[constants_1.ONESHOT_ENV_VARS.PROJECT_CODE],
-        apiBaseUrl: env[constants_1.ONESHOT_ENV_VARS.API_BASE_URL],
-        token: env[constants_1.ONESHOT_ENV_VARS.AGENT_ONESHOT_TOKEN],
-    };
-}
-/**
- * Run exactly one command and return the process exit code
- * (0 = executed and submitted successfully, 1 = any failure).
- */
-async function runOneshot(env = process.env) {
-    let oneshotEnv;
-    try {
-        oneshotEnv = readOneshotEnv(env);
-    }
-    catch (error) {
-        logger_1.logger.error(`[oneshot] ${(0, utils_1.getErrorMessage)(error)}`);
-        return 1;
-    }
-    const { commandId, agentId, tenantCode, projectCode, apiBaseUrl } = oneshotEnv;
-    logger_1.logger.info(`[oneshot] Starting oneshot execution: commandId=${commandId} agentId=${agentId}`);
-    let client;
-    try {
-        client = new api_client_1.ApiClient(apiBaseUrl, oneshotEnv.token);
-    }
-    catch (error) {
-        logger_1.logger.error(`[oneshot] Failed to initialize API client: ${(0, utils_1.getErrorMessage)(error)}`);
-        return 1;
-    }
-    // The oneshot token uses the same "{tenantCode}:{tokenId}:{secret}" format
-    // as resident agent tokens, so the ApiClient constructor already derives a
-    // tenant code from it. TENANT_CODE from the environment is still applied
-    // explicitly as the authoritative value (dispatch injects both together).
-    client.setTenantCode(tenantCode);
-    client.setProjectCode(projectCode);
-    const submit = async (result) => {
-        try {
-            await client.submitResult(commandId, result, agentId);
-            return true;
-        }
-        catch (error) {
-            logger_1.logger.error(`[oneshot] Failed to submit result: ${(0, utils_1.getErrorMessage)(error)}`);
-            return false;
-        }
-    };
-    let command;
-    try {
-        command = await client.getCommand(commandId, agentId);
-    }
-    catch (error) {
-        const message = `Failed to fetch command ${commandId}: ${(0, utils_1.getErrorMessage)(error)}`;
-        logger_1.logger.error(`[oneshot] ${message}`);
-        // Best effort: let the API mark the work command as failed right away
-        // instead of waiting for the timeout sweep.
-        await submit((0, types_1.errorResult)(message));
-        return 1;
-    }
-    if (!ONESHOT_SUPPORTED_COMMAND_TYPES.has(command.type)) {
-        const supported = [...ONESHOT_SUPPORTED_COMMAND_TYPES].join(', ');
-        const message = `Command type "${command.type}" is not supported in ECS oneshot mode (supported: ${supported})`;
-        logger_1.logger.error(`[oneshot] ${message}`);
-        // Submit as a visible failure rather than running with an incomplete
-        // execution context and misbehaving silently.
-        await submit((0, types_1.errorResult)(message));
-        return 1;
-    }
-    // execute_command's shell executor falls back to os.homedir() when cwd is
-    // absent; pin it to the container's working dir for predictable behavior.
-    const payload = { ...command.payload };
-    if (payload.cwd === undefined || payload.cwd === null || payload.cwd === '') {
-        payload.cwd = ONESHOT_DEFAULT_CWD;
-    }
-    logger_1.logger.info(`[oneshot] Executing command: type=${command.type}`);
-    const result = await (0, commands_1.executeCommand)(command.type, payload, {
-        commandId,
-        client,
-        agentId,
-        tenantCode,
-    });
-    const submitted = await submit(result);
-    if (!submitted)
-        return 1;
-    if (!result.success) {
-        logger_1.logger.error('[oneshot] Command execution failed; result submitted');
-        return 1;
-    }
-    logger_1.logger.success('[oneshot] Command executed and result submitted');
-    return 0;
-}
-/**
- * Entry-point wrapper used by src/index.ts: runs the oneshot flow and exits
- * the process with the resulting code. Any unexpected rejection is converted
- * into exit code 1 — a container that never exits would only be reclaimed by
- * the slow timeout sweep. The runner is injectable for tests.
- */
-async function runOneshotFromEnv(runner = runOneshot) {
-    let exitCode = 1;
-    try {
-        exitCode = await runner();
-    }
-    catch (error) {
-        logger_1.logger.error(`[oneshot] Fatal error: ${(0, utils_1.getErrorMessage)(error)}`);
-        exitCode = 1;
-    }
-    process.exit(exitCode);
-}
-//# sourceMappingURL=oneshot-runner.js.map

package/dist/oneshot-runner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oneshot-runner.js","sourceRoot":"","sources":["../src/oneshot-runner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAkDH,wCAaC;AAMD,gCAkFC;AAQD,8CASC;AAtKD,6CAAwC;AACxC,yCAA2C;AAC3C,2CAA8C;AAC9C,qCAAiC;AACjC,mCAAmG;AACnG,mCAAyC;AAEzC;;;;;;;GAOG;AACH,MAAM,+BAA+B,GAAkC,IAAI,GAAG,CAAmB;IAC/F,iBAAiB;CAClB,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,YAAY,CAAA;AAExC,MAAM,iBAAiB,GAAG;IACxB,4BAAgB,CAAC,UAAU;IAC3B,4BAAgB,CAAC,QAAQ;IACzB,4BAAgB,CAAC,WAAW;IAC5B,4BAAgB,CAAC,YAAY;IAC7B,4BAAgB,CAAC,YAAY;IAC7B,4BAAgB,CAAC,mBAAmB;CAC5B,CAAA;AAWV;;;GAGG;AACH,SAAgB,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,gDAAgD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACvF,CAAC;IACD,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,4BAAgB,CAAC,UAAU,CAAW;QACrD,OAAO,EAAE,GAAG,CAAC,4BAAgB,CAAC,QAAQ,CAAW;QACjD,UAAU,EAAE,GAAG,CAAC,4BAAgB,CAAC,WAAW,CAAW;QACvD,WAAW,EAAE,GAAG,CAAC,4BAAgB,CAAC,YAAY,CAAW;QACzD,UAAU,EAAE,GAAG,CAAC,4BAAgB,CAAC,YAAY,CAAW;QACxD,KAAK,EAAE,GAAG,CAAC,4BAAgB,CAAC,mBAAmB,CAAW;KAC3D,CAAA;AACH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,IAAI,UAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,aAAa,IAAA,uBAAe,EAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACnD,OAAO,CAAC,CAAA;IACV,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,UAAU,CAAA;IAC9E,eAAM,CAAC,IAAI,CAAC,mDAAmD,SAAS,YAAY,OAAO,EAAE,CAAC,CAAA;IAE9F,IAAI,MAAiB,CAAA;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,sBAAS,CAAC,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAA;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,8CAA8C,IAAA,uBAAe,EAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACpF,OAAO,CAAC,CAAA;IACV,CAAC;IACD,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAA;IAChC,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;IAElC,MAAM,MAAM,GAAG,KAAK,EAAE,MAAqB,EAAoB,EAAE;QAC/D,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;YACrD,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CAAC,sCAAsC,IAAA,uBAAe,EAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC5E,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC,CAAA;IAED,IAAI,OAAqB,CAAA;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,2BAA2B,SAAS,KAAK,IAAA,uBAAe,EAAC,KAAK,CAAC,EAAE,CAAA;QACjF,eAAM,CAAC,KAAK,CAAC,aAAa,OAAO,EAAE,CAAC,CAAA;QACpC,sEAAsE;QACtE,4CAA4C;QAC5C,MAAM,MAAM,CAAC,IAAA,mBAAW,EAAC,OAAO,CAAC,CAAC,CAAA;QAClC,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,CAAC,GAAG,+BAA+B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjE,MAAM,OAAO,GAAG,iBAAiB,OAAO,CAAC,IAAI,sDAAsD,SAAS,GAAG,CAAA;QAC/G,eAAM,CAAC,KAAK,CAAC,aAAa,OAAO,EAAE,CAAC,CAAA;QACpC,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,MAAM,CAAC,IAAA,mBAAW,EAAC,OAAO,CAAC,CAAC,CAAA;QAClC,OAAO,CAAC,CAAA;IACV,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAA;IACtC,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC;QAC5E,OAAO,CAAC,GAAG,GAAG,mBAAmB,CAAA;IACnC,CAAC;IAED,eAAM,CAAC,IAAI,CAAC,qCAAqC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IAChE,MAAM,MAAM,GAAG,MAAM,IAAA,yBAAc,EAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE;QACzD,SAAS;QACT,MAAM;QACN,OAAO;QACP,UAAU;KACX,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,CAAA;IAExB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,eAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACpE,OAAO,CAAC,CAAA;IACV,CAAC;IACD,eAAM,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAA;IACjE,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,iBAAiB,CAAC,SAAgC,UAAU;IAChF,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAA;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAM,CAAC,KAAK,CAAC,0BAA0B,IAAA,uBAAe,EAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAChE,QAAQ,GAAG,CAAC,CAAA;IACd,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AACxB,CAAC"}

package/dist/types/ecs.d.ts

@@ -1,71 +0,0 @@
-/**
- * ECS execution agent types (launcher-agent architecture).
- *
- * An ECS execution agent is an on-demand execution target: a container is
- * started via ECS RunTask, executes exactly one command (oneshot), submits
- * the result, and exits. The RunTask/StopTask calls are performed by a
- * resident agent (the "launcher agent") using its local AWS credentials;
- * the API never calls AWS directly.
- */
-/** ecsConfig registered with the API for an ECS execution agent */
-export interface EcsAgentConfig {
-    /** Image URI pinned by digest (`<repo>@sha256:...`) */
-    imageUri: string;
-    /** Tag used at publish time (display purposes) */
-    imageTag: string;
-    /** Image digest (`sha256:...`) */
-    imageDigest: string;
-    /** ECS task size */
-    cpu: number;
-    memory: number;
-    /** Task definition registered by the publisher (launcher-side RegisterTaskDefinition) */
-    taskDefinitionArn: string;
-    taskDefinitionFamily: string;
-    /** Target cluster and awsvpc network settings */
-    clusterArn: string;
-    subnetIds: string[];
-    securityGroupIds: string[];
-    assignPublicIp?: boolean;
-    /** awslogs log group the container writes to */
-    logGroupName: string;
-    /** Resident agent in charge of RunTask (auto-selected by capability when omitted) */
-    launcherAgentId?: string;
-    /** Publisher agent id and timestamp */
-    registeredBy: string;
-    registeredAt: string;
-}
-/** Request body for POST /api/:tenantCode/agent/ecs-agents */
-export interface EcsAgentRegistration {
-    agentId: string;
-    displayName: string;
-    capabilities: string[];
-    ecsConfig: EcsAgentConfig;
-}
-/**
- * Environment variables injected into the oneshot container at RunTask time
- * via containerOverrides (never stored in the task definition).
- */
-export interface OneshotContainerEnv {
-    AGENT_MODE: string;
-    COMMAND_ID: string;
-    AGENT_ID: string;
-    TENANT_CODE: string;
-    PROJECT_CODE: string;
-    API_BASE_URL: string;
-    AGENT_ONESHOT_TOKEN: string;
-}
-/** Payload of the `ecs_launch` launcher command */
-export interface EcsLaunchPayload {
-    taskDefinitionArn?: unknown;
-    clusterArn?: unknown;
-    subnetIds?: unknown;
-    securityGroupIds?: unknown;
-    assignPublicIp?: unknown;
-    containerEnv?: unknown;
-}
-/** Payload of the `ecs_stop` launcher command */
-export interface EcsStopPayload {
-    clusterArn?: unknown;
-    taskArn?: unknown;
-}
-//# sourceMappingURL=ecs.d.ts.map

package/dist/types/ecs.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ecs.d.ts","sourceRoot":"","sources":["../../src/types/ecs.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAA;IAChB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAA;IAChB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,oBAAoB;IACpB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,yFAAyF;IACzF,iBAAiB,EAAE,MAAM,CAAA;IACzB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,gDAAgD;IAChD,YAAY,EAAE,MAAM,CAAA;IACpB,qFAAqF;IACrF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,uCAAuC;IACvC,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,8DAA8D;AAC9D,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,SAAS,EAAE,cAAc,CAAA;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,mBAAmB,EAAE,MAAM,CAAA;CAC5B;AAED,mDAAmD;AACnD,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED,iDAAiD;AACjD,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB"}

package/dist/types/ecs.js

@@ -1,12 +0,0 @@
-"use strict";
-/**
- * ECS execution agent types (launcher-agent architecture).
- *
- * An ECS execution agent is an on-demand execution target: a container is
- * started via ECS RunTask, executes exactly one command (oneshot), submits
- * the result, and exits. The RunTask/StopTask calls are performed by a
- * resident agent (the "launcher agent") using its local AWS credentials;
- * the API never calls AWS directly.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=ecs.js.map

package/dist/types/ecs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ecs.js","sourceRoot":"","sources":["../../src/types/ecs.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG"}