@appforge-ci/admin-cli 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 AppForge CI contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,70 @@
+# @appforge-ci/admin-cli
+
+`appforge-admin` — the platform-operator CLI for fleet management (enroll,
+list, drain, resume, reboot, run maintenance scripts on Mac minis). This
+is a **separate** tool from `appforge` (`packages/cli`), which is for
+AppForge's customers and has no fleet commands at all — see
+`docs/self-hosting.md`'s "Fleet management" section for why they're kept
+apart. Config lives in `~/.appforge-admin/config.json`, independent of
+`~/.appforge/config.json`.
+
+For the full day-to-day runbook (reading fleet status, troubleshooting a
+`NotReady`/`offline` mini, rotating tokens, decommissioning) once this is
+installed, see **`docs/fleet-management.md`**.
+
+## Install
+
+**On a machine that already has this repo cloned** (the common case —
+your own laptop, or a Mac mini you `git clone`d onto): build it and put
+it on `PATH` with `npm link`:
+
+```bash
+pnpm install                              # once, from the repo root
+pnpm --filter @appforge-ci/admin-cli build
+cd packages/admin-cli && npm link         # symlinks `appforge-admin` onto PATH
+```
+
+`npm link` needs to be re-run only if the symlink itself ever gets
+removed (e.g. `npm uninstall -g @appforge-ci/admin-cli`) — a plain
+rebuild (`pnpm --filter @appforge-ci/admin-cli build`) is enough to pick
+up code changes afterwards, since the link points at `dist/` in place.
+
+**From npm, once published:** `.github/workflows/publish.yml` publishes
+this package (tag-triggered, `git tag vX.Y.Z && git push origin vX.Y.Z`),
+but that workflow needs an `NPM_TOKEN` repo secret that **isn't
+configured yet** — until it is and a version has actually been published,
+`npm install -g @appforge-ci/admin-cli` will 404. The `npm link` path
+above is what actually works today.
+
+## Usage
+
+```bash
+appforge-admin login --api-url <api-url> --admin-api-url <admin-api-url>   # once; add --web to approve in a browser instead of typing your password here
+appforge-admin agents list
+appforge-admin agents add-mac --name "my-mac-mini"    # run ON the mini you're enrolling — see docs/self-hosting.md
+appforge-admin agents add-mac --force                 # re-enroll THIS Mac (rotate token / rename) — same fleet row, never a duplicate
+appforge-admin agents decommission <agentId>          # permanently remove a mini (retired machine, or a stale duplicate row)
+appforge-admin agents drain <agentId>
+appforge-admin agents resume <agentId>
+appforge-admin agents reboot <agentId>
+appforge-admin agents restart <agentId>       # just the agent process (e.g. after a manual upgrade) — no reboot needed
+appforge-admin agents cancel-build <agentId> <buildId>  # kill one wedged build, other concurrent builds on the same mini untouched
+appforge-admin agents allow-remote-control <agentId> --on|--off  # authorize (or revoke) the VNC "Connect" button's mouse/keyboard control — off by default for every agent
+appforge-admin agents run-script <agentId> <scriptName>
+appforge-admin agents commands <agentId> [--limit 20]  # remote-command history + who issued each one — see docs/fleet-management.md
+appforge-admin agents update <agentId> [--to <version>]   # roll one mini onto a new agent build (OTA) — see docs/fleet-management.md
+appforge-admin agents update --all                        # every enrolled mini, one at a time
+appforge-admin agents bootstrap [--full]              # install missing toolchains on THIS Mac
+appforge-admin agents enroll                           # advanced: just a token, no local enrollment — see add-mac instead
+```
+
+`--api-url`/`--admin-api-url` only need passing on that first `login` —
+they're saved to `~/.appforge-admin/config.json` and reused after that.
+Only accounts listed in the admin-api Worker's `PLATFORM_ADMIN_EMAILS`
+secret can actually log in here; see `docs/self-hosting.md`.
+
+The password-based `login` (not `--web`) prompts interactively for a 2FA
+code if the account has it enabled and neither `--totp-code` nor
+`--recovery-code` was passed — see `docs/security.md`'s "2FA (TOTP)"
+note. `login --web`'s device-authorization flow has no password step at
+all, so it's unaffected either way.

package/dist/commands/agents.d.ts

@@ -0,0 +1,55 @@
+import { Command } from "commander";
+import { ApiClient, type AgentCommand } from "@appforge-ci/core";
+/**
+ * Polls `GET /agents/:agentId/commands` for one specific command (an
+ * UPDATE_AGENT the CLI just sent) until it leaves `pending`/`acked` for a
+ * terminal `done`/`failed`, or `timeoutMs` runs out. The agent only picks
+ * a command up on its next ~15s heartbeat and a real self-update (npm
+ * install / git checkout + pnpm build) can take real minutes, so this is
+ * a genuine wait, not a quick round-trip — see `--timeout`.
+ *
+ * Exported (and `pollIntervalMs` made overridable) purely for direct
+ * testing — every real call site still gets the production
+ * `UPDATE_POLL_INTERVAL_MS` default; a test injects a near-zero interval
+ * so exercising "it actually loops a few times before resolving" doesn't
+ * mean a real multi-second wait.
+ */
+/**
+ * Parses `agents update`'s `--timeout <seconds>` option — pulled out so
+ * it's directly testable, same "test seam via extraction" shape this
+ * monorepo already uses for CLI flag parsing (`packages/cli/src/lib/
+ * parse-rollout.ts`, `packages/agent/src/lib/parse-args.ts`).
+ * `Number(opts.timeout)` alone isn't enough: a non-numeric value (a
+ * plausible typo like `"5m"`, meant as "5 minutes" — the option's own
+ * description just says "seconds") parses to `NaN`, and
+ * `waitForCommandResolution`'s deadline math (`Date.now() + timeoutMs`)
+ * then becomes `NaN` too — `Date.now() >= NaN` is always `false`, so the
+ * command polls forever instead of ever timing out (with `--all`, that
+ * hangs the whole fleet rollout). Returns `null` for anything that isn't
+ * a finite, positive number of seconds, so the caller can fail fast with
+ * a clear error instead of a silent infinite poll.
+ */
+export declare function parseTimeoutSeconds(raw: string): number | null;
+/**
+ * `agents commands <agentId>`'s per-row line, pulled out so it's
+ * directly testable — same "extract the one real piece of logic" shape
+ * `parseTimeoutSeconds` above already established. Every layer below
+ * this command already existed and was already tested
+ * (`ApiClient.listAgentCommands`, `GET /agents/:agentId/commands`,
+ * `packages/db/src/agents.ts`'s `listAgentCommands` LEFT JOIN on
+ * `User`) — only a CLI command to call it and print it was missing.
+ * `docs/fleet-management.md`'s own "Auditing who ran what" section used
+ * to tell a reader there was "still no CLI/dashboard view" for the full
+ * history or the issuing admin's email, and to fall back to a raw
+ * `curl` — this command is that view. `issuedByEmail` prints as
+ * "system/auto" rather than a blank/undefined for a command with none
+ * (issued before this was tracked, or a since-deleted account), so the
+ * output never looks like a formatting bug. `[AUTO-ROLLBACK]` prefixes
+ * an UPDATE_AGENT OTA/self-update Phase 4 auto-issued after detecting a
+ * stuck update (`AgentCommand.isAutoRollback`) — otherwise this and an
+ * ordinary UPDATE_AGENT look identical in the audit trail.
+ */
+export declare function formatAgentCommandLine(cmd: Pick<AgentCommand, "type" | "status" | "result" | "createdAt" | "issuedByEmail" | "isAutoRollback">): string;
+export declare function waitForCommandResolution(api: ApiClient, agentId: string, commandId: string, timeoutMs: number, pollIntervalMs?: number): Promise<AgentCommand | null>;
+export declare function registerAgentsCommands(program: Command): void;
+//# sourceMappingURL=agents.d.ts.map

package/dist/commands/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/commands/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EACL,SAAS,EAMT,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAqB3B;;;;;;;;;;;;;GAaG;AACH;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG9D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,eAAe,GAAG,gBAAgB,CAAC,GACvG,MAAM,CAIR;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,cAAc,GAAE,MAAgC,GAC/C,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAS9B;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,QAyZtD"}

package/dist/commands/agents.js

@@ -0,0 +1,436 @@
+import { createRequire } from "node:module";
+import { existsSync, readFileSync } from "node:fs";
+import { ApiClient, computeAgentReadiness, effectiveAgentStatus, isAgentVersionCurrent, parseActiveBuildIds, CURRENT_AGENT_VERSION, } from "@appforge-ci/core";
+import { collectSystemInfo } from "@appforge-ci/agent/dist/lib/system-info.js";
+import { saveConfig as saveAgentConfig, configPath as agentConfigPath } from "@appforge-ci/agent/dist/lib/config.js";
+import { loadAdminCliConfig } from "../lib/config.js";
+import { installAgentLaunchAgent, stableNodePath } from "@appforge-ci/agent/dist/lib/launchd.js";
+import { AGENT_VERSION } from "@appforge-ci/agent/dist/lib/version.js";
+import { AgentApi } from "@appforge-ci/agent/dist/lib/api.js";
+import { installDeviceStreamIfPresent, syncDeviceStreamFleetSecrets } from "@appforge-ci/agent/dist/lib/device-stream-install.js";
+import { bootstrapSafeToolchains, bootstrapPrivileged } from "../lib/bootstrap.js";
+const require = createRequire(import.meta.url);
+const UPDATE_POLL_INTERVAL_MS = 5000;
+function client() {
+    const cfg = loadAdminCliConfig();
+    return {
+        cfg,
+        api: new ApiClient({ baseUrl: cfg.apiUrl, token: cfg.token, adminApiUrl: cfg.adminApiUrl }),
+    };
+}
+/**
+ * Polls `GET /agents/:agentId/commands` for one specific command (an
+ * UPDATE_AGENT the CLI just sent) until it leaves `pending`/`acked` for a
+ * terminal `done`/`failed`, or `timeoutMs` runs out. The agent only picks
+ * a command up on its next ~15s heartbeat and a real self-update (npm
+ * install / git checkout + pnpm build) can take real minutes, so this is
+ * a genuine wait, not a quick round-trip — see `--timeout`.
+ *
+ * Exported (and `pollIntervalMs` made overridable) purely for direct
+ * testing — every real call site still gets the production
+ * `UPDATE_POLL_INTERVAL_MS` default; a test injects a near-zero interval
+ * so exercising "it actually loops a few times before resolving" doesn't
+ * mean a real multi-second wait.
+ */
+/**
+ * Parses `agents update`'s `--timeout <seconds>` option — pulled out so
+ * it's directly testable, same "test seam via extraction" shape this
+ * monorepo already uses for CLI flag parsing (`packages/cli/src/lib/
+ * parse-rollout.ts`, `packages/agent/src/lib/parse-args.ts`).
+ * `Number(opts.timeout)` alone isn't enough: a non-numeric value (a
+ * plausible typo like `"5m"`, meant as "5 minutes" — the option's own
+ * description just says "seconds") parses to `NaN`, and
+ * `waitForCommandResolution`'s deadline math (`Date.now() + timeoutMs`)
+ * then becomes `NaN` too — `Date.now() >= NaN` is always `false`, so the
+ * command polls forever instead of ever timing out (with `--all`, that
+ * hangs the whole fleet rollout). Returns `null` for anything that isn't
+ * a finite, positive number of seconds, so the caller can fail fast with
+ * a clear error instead of a silent infinite poll.
+ */
+export function parseTimeoutSeconds(raw) {
+    const seconds = Number(raw);
+    return Number.isFinite(seconds) && seconds > 0 ? seconds : null;
+}
+/**
+ * `agents commands <agentId>`'s per-row line, pulled out so it's
+ * directly testable — same "extract the one real piece of logic" shape
+ * `parseTimeoutSeconds` above already established. Every layer below
+ * this command already existed and was already tested
+ * (`ApiClient.listAgentCommands`, `GET /agents/:agentId/commands`,
+ * `packages/db/src/agents.ts`'s `listAgentCommands` LEFT JOIN on
+ * `User`) — only a CLI command to call it and print it was missing.
+ * `docs/fleet-management.md`'s own "Auditing who ran what" section used
+ * to tell a reader there was "still no CLI/dashboard view" for the full
+ * history or the issuing admin's email, and to fall back to a raw
+ * `curl` — this command is that view. `issuedByEmail` prints as
+ * "system/auto" rather than a blank/undefined for a command with none
+ * (issued before this was tracked, or a since-deleted account), so the
+ * output never looks like a formatting bug. `[AUTO-ROLLBACK]` prefixes
+ * an UPDATE_AGENT OTA/self-update Phase 4 auto-issued after detecting a
+ * stuck update (`AgentCommand.isAutoRollback`) — otherwise this and an
+ * ordinary UPDATE_AGENT look identical in the audit trail.
+ */
+export function formatAgentCommandLine(cmd) {
+    const resultTag = cmd.result ? `  result:${cmd.result}` : "";
+    const rollbackTag = cmd.isAutoRollback === 1 ? "[AUTO-ROLLBACK] " : "";
+    return `${cmd.createdAt}  ${rollbackTag}${cmd.type.padEnd(22)}  ${cmd.status.padEnd(8)}  by:${cmd.issuedByEmail ?? "system/auto"}${resultTag}`;
+}
+export async function waitForCommandResolution(api, agentId, commandId, timeoutMs, pollIntervalMs = UPDATE_POLL_INTERVAL_MS) {
+    const deadline = Date.now() + timeoutMs;
+    for (;;) {
+        const { commands } = await api.listAgentCommands(agentId, 20);
+        const command = commands.find((c) => c.id === commandId);
+        if (command && (command.status === "done" || command.status === "failed"))
+            return command;
+        if (Date.now() >= deadline)
+            return null;
+        await new Promise((r) => setTimeout(r, pollIntervalMs));
+    }
+}
+export function registerAgentsCommands(program) {
+    const agents = program.command("agents").description("Manage the Mac mini build fleet");
+    agents
+        .command("list")
+        .action(async () => {
+        const { cfg, api } = client();
+        const { agents } = await api.listAgents(cfg.orgId);
+        for (const a of agents) {
+            const { ready } = computeAgentReadiness(a);
+            // Not a.status directly — see effectiveAgentStatus's docblock in
+            // @appforge-ci/core: the raw column freezes at whatever the mini last
+            // heartbeated and never becomes "offline" on its own.
+            const status = effectiveAgentStatus(a);
+            // isAgentVersionCurrent is null for a row with no reported version
+            // yet (pre-migrations/0011, or hasn't (re-)enrolled/heartbeated
+            // since) — print nothing for that case rather than guessing.
+            const versionSuffix = a.agentVersion === null
+                ? ""
+                : isAgentVersionCurrent(a.agentVersion)
+                    ? `  agent v${a.agentVersion}`
+                    : `  agent v${a.agentVersion} (outdated — latest is v${CURRENT_AGENT_VERSION})`;
+            // See docs/fleet-management.md's "Concurrent builds" section —
+            // one Mac mini can run more than one build at once now.
+            const slots = `${parseActiveBuildIds(a.activeBuildIds).length}/${a.maxConcurrentBuilds}`;
+            console.log(`${a.id}  ${a.name.padEnd(20)}  ${status.padEnd(10)}  slots ${slots.padEnd(5)}  ${(ready ? "Ready" : "NotReady").padEnd(9)}  cpu ${a.cpuUsagePercent}%  mem ${a.memUsagePercent}%  disk free ${a.diskFreeGb}GB  last seen ${a.lastSeenAt}${versionSuffix}`);
+        }
+        if (agents.length === 0)
+            console.log("No Mac minis enrolled yet. Run 'appforge-admin agents add-mac' on the Mac mini you want to add.");
+    });
+    agents
+        .command("enroll")
+        .description("Generate a one-time enrollment token for a new Mac mini (advanced — see 'add-mac' for the one-command version)")
+        .action(async () => {
+        const { cfg, api } = client();
+        const { enrollmentToken, expiresAt } = await api.createEnrollmentToken(cfg.orgId);
+        console.log(`Enrollment token (expires ${expiresAt}):\n`);
+        console.log(`  ${enrollmentToken}\n`);
+        console.log("On the Mac mini, run:");
+        console.log(`  appforge-agent enroll --api-url ${cfg.adminApiUrl} --token ${enrollmentToken} --name <mac-mini-name>`);
+    });
+    agents
+        .command("bootstrap")
+        .description("Install missing build toolchains on THIS Mac (Homebrew + PATH wiring only, no sudo) — run before 'add-mac' if any toolchain shows 'not found'")
+        .option("--full", "Also apply infra/mac-mini-setup/bootstrap.sh's privileged, dedicated-mini-only setup: a sudoers rule for remote reboot, disables sleep, full Xcode reinstall. Appropriate for a dedicated always-on Mac mini, NOT a machine you use day to day.")
+        .action(async (opts) => {
+        await bootstrapSafeToolchains();
+        if (opts.full) {
+            console.log("\n==> --full requested: applying privileged/system changes (sudoers, sleep, Xcode)...");
+            bootstrapPrivileged();
+        }
+    });
+    agents
+        .command("add-mac")
+        .description("Enroll THIS Mac as a build agent and start it running in the background, in one step — run this ON the Mac mini you want to add (must already be 'appforge-admin login'd)")
+        .option("--name <name>", "Name for this Mac in the fleet (default: its hostname)")
+        .option("--force", "Re-enroll even though this Mac already has an agent config. The control plane dedupes on hardware UUID, so this updates the existing fleet record rather than adding a second one — use it to rotate the agent token or change the name.")
+        .action(async (opts) => {
+        const { cfg, api } = client();
+        // Guard against the classic double-enrollment: someone runs add-mac
+        // again on a Mac that's already in the fleet. Server-side dedup (on
+        // hardware UUID) means a re-enroll now updates the existing row
+        // rather than creating a duplicate, but it still mints a new agent
+        // token and restarts the daemon, which is rarely what you want by
+        // accident — so require --force to say you meant it.
+        if (existsSync(agentConfigPath()) && !opts.force) {
+            let existing = {};
+            try {
+                existing = JSON.parse(readFileSync(agentConfigPath(), "utf8"));
+            }
+            catch {
+                /* unreadable/corrupt — fall through with blanks */
+            }
+            console.error(`This Mac is already enrolled as "${existing.name ?? "?"}" (${existing.agentId ?? "?"}).\n` +
+                `Config: ${agentConfigPath()}\n\n` +
+                `  • Just (re)install the background service:  appforge-agent install-service\n` +
+                `  • Repair a broken/rotated token or rename:   appforge-admin agents add-mac --force\n` +
+                `  • Retire this machine from the fleet:        appforge-admin agents decommission ${existing.agentId ?? "<agentId>"}\n`);
+            process.exit(1);
+        }
+        console.log("Reading this Mac's info and build toolchains (this can take a moment — flutter --version isn't instant)...");
+        const info = await collectSystemInfo();
+        console.log(`  Xcode:      ${info.xcodeVersion ?? "not found"}`);
+        console.log(`  Flutter:    ${info.flutterVersion ?? "not found"}`);
+        console.log(`  Java:       ${info.javaVersion ?? "not found"}`);
+        console.log(`  Android SDK: ${info.androidSdkVersion ?? "not found"}`);
+        console.log(`  CocoaPods:  ${info.cocoapodsVersion ?? "not found"}`);
+        // Same computeAgentReadiness the fleet dashboard uses — see its
+        // docblock in @appforge-ci/core. Printed here too so add-mac's own
+        // output doesn't silently disagree with what the dashboard says
+        // once this Mac shows up in it. Assumes "online" with a fresh
+        // lastSeenAt since that's the state this enrollment is about to set.
+        const { androidReady, iosReady, flutterReady, ready } = computeAgentReadiness({
+            ...info,
+            status: "online",
+            lastSeenAt: new Date().toISOString(),
+        });
+        console.log(`\n  Fleet readiness: ${ready ? "Ready" : "NotReady"}` +
+            ` (Android build ${androidReady ? "✓" : "✗"}, iOS build ${iosReady ? "✓" : "✗"}, Flutter build ${flutterReady ? "✓" : info.flutterVersion === null ? "✗ Flutter SDK missing" : "✗ needs Android or iOS toolchain too"})`);
+        if (!ready) {
+            console.log("  Neither platform toolchain is complete — run 'appforge-admin agents bootstrap' first (or, for a dedicated always-on mini, ./infra/mac-mini-setup/bootstrap.sh).");
+        }
+        console.log("\nRequesting a one-time enrollment token...");
+        const { enrollmentToken } = await api.createEnrollmentToken(cfg.orgId);
+        const name = opts.name ?? info.hostname;
+        console.log(`Enrolling as "${name}"...`);
+        const enrollRes = await fetch(`${cfg.adminApiUrl}/agents/enroll`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({
+                enrollmentToken,
+                name,
+                machineId: info.machineId,
+                hostname: info.hostname,
+                macOsVersion: info.macOsVersion,
+                xcodeVersion: info.xcodeVersion,
+                flutterVersion: info.flutterVersion,
+                javaVersion: info.javaVersion,
+                androidSdkVersion: info.androidSdkVersion,
+                cocoapodsVersion: info.cocoapodsVersion,
+                cpuModel: info.cpuModel,
+                agentVersion: AGENT_VERSION,
+            }),
+        });
+        if (!enrollRes.ok) {
+            console.error(`Enrollment failed: ${enrollRes.status} ${await enrollRes.text()}`);
+            process.exit(1);
+        }
+        const { agentId, agentToken } = (await enrollRes.json());
+        saveAgentConfig({ apiUrl: cfg.adminApiUrl, agentId, agentToken, name });
+        console.log(`Enrolled as agent ${agentId}. Config saved to ${agentConfigPath()}.`);
+        console.log("\nInstalling as a background service (survives reboot/logout, no sudo needed)...");
+        const agentDistIndexPath = require.resolve("@appforge-ci/agent/dist/index.js");
+        // Same version-pinned-Cellar-node footgun packages/agent's own
+        // install-service already dodges (see stableNodePath's docblock) —
+        // process.execPath here is whatever ran `appforge-admin` itself, and
+        // baking that straight into the plist means the next `brew upgrade
+        // node` deletes it out from under launchd. add-mac is the documented
+        // one-command onboarding path, so it needs the same fix, not just
+        // packages/agent/src/index.ts's installService().
+        const nodePath = stableNodePath(process.execPath);
+        const { plistPath, logPath } = installAgentLaunchAgent(nodePath, agentDistIndexPath);
+        console.log(`  Service:  ${plistPath}`);
+        console.log(`  Logs:     tail -f ${logPath}`);
+        // Folds apps/device-stream's own persistent-service setup into this
+        // one-command onboarding path too — same shape
+        // packages/agent/src/index.ts's installService() already
+        // establishes for the plain `appforge-agent install-service` path
+        // (see that file's own docblock for exactly when this does/doesn't
+        // fire). A no-op (or an explained skip) never fails add-mac itself:
+        // the build agent's own service above is what this command must
+        // always succeed at installing.
+        const deviceStreamApi = new AgentApi({ apiUrl: cfg.adminApiUrl, agentToken });
+        let deviceStream;
+        try {
+            ({ outcome: deviceStream } = await syncDeviceStreamFleetSecrets({
+                api: deviceStreamApi,
+                agentDistIndexPath,
+                nodePath,
+                apiUrl: cfg.adminApiUrl,
+                env: process.env,
+                agentId,
+            }));
+        }
+        catch (err) {
+            console.warn(`Couldn't fetch this org's fleet secrets (${err.message}) — ` +
+                `falling back to whatever is set in this shell's environment.`);
+            deviceStream = await installDeviceStreamIfPresent(agentDistIndexPath, nodePath, cfg.adminApiUrl, process.env, {}, undefined, undefined, agentId);
+        }
+        if (deviceStream.message)
+            console.log(deviceStream.message);
+        console.log(`\nDone — "${name}" is enrolled and already polling for builds.`);
+        console.log(`Manage it with: launchctl {start|stop|unload} com.appforge.agent`);
+        console.log(`Un-enroll later with the same fleet commands you'd use for any Mac mini (see 'appforge-admin agents --help').`);
+    });
+    agents
+        .command("drain <agentId>")
+        .description("Stop an agent from leasing new builds once its current build finishes")
+        .action(async (agentId) => {
+        const { api } = client();
+        await api.sendAgentCommand(agentId, "DRAIN");
+        console.log("Drain command sent.");
+    });
+    agents
+        .command("resume <agentId>")
+        .action(async (agentId) => {
+        const { api } = client();
+        await api.sendAgentCommand(agentId, "RESUME");
+        console.log("Resume command sent.");
+    });
+    agents
+        .command("reboot <agentId>")
+        .description("Reboot the Mac mini (agent must have the sudoers entry from infra/mac-mini-setup)")
+        .action(async (agentId) => {
+        const { api } = client();
+        await api.sendAgentCommand(agentId, "REBOOT_HOST");
+        console.log("Reboot command sent.");
+    });
+    agents
+        .command("restart <agentId>")
+        .description("Restart just the agent process on a Mac mini (e.g. after upgrading the agent version by hand) " +
+        "— it acks done, then re-execs; launchd brings it back up immediately, no reboot needed")
+        .action(async (agentId) => {
+        const { api } = client();
+        await api.sendAgentCommand(agentId, "RESTART_AGENT");
+        console.log("Restart command sent.");
+    });
+    agents
+        .command("cancel-build <agentId> <buildId>")
+        .description("Kill one specific build running on this Mac mini, leaving any other concurrent build on it untouched " +
+        "(unlike restart/reboot, which abandon everything on the machine) — see docs/fleet-management.md")
+        .action(async (agentId, buildId) => {
+        const { api } = client();
+        await api.sendAgentCommand(agentId, "CANCEL_BUILD", undefined, undefined, buildId);
+        console.log(`Cancel command sent for build ${buildId}.`);
+    });
+    agents
+        .command("run-script <agentId> <scriptName>")
+        .description("Run a named maintenance script from the agent's local allowlist")
+        .action(async (agentId, scriptName) => {
+        const { api } = client();
+        await api.sendAgentCommand(agentId, "RUN_MAINTENANCE_SCRIPT", scriptName);
+        console.log(`Maintenance script "${scriptName}" queued.`);
+    });
+    agents
+        .command("commands <agentId>")
+        .description("Show recent remote-management commands sent to a Mac mini (drain/resume/reboot/update/...), their status, and who issued them")
+        .option("--limit <n>", "How many to show (server caps at 50)", "20")
+        .action(async (agentId, opts) => {
+        const { api } = client();
+        const { commands } = await api.listAgentCommands(agentId, Number(opts.limit));
+        if (commands.length === 0) {
+            console.log("No commands sent to this agent yet.");
+            return;
+        }
+        for (const cmd of commands) {
+            console.log(formatAgentCommandLine(cmd));
+        }
+    });
+    agents
+        .command("update [agentId]")
+        .description("Roll a Mac mini onto a new @appforge-ci/agent build via the UPDATE_AGENT remote command (drains, waits out any in-flight build, self-updates, then re-execs)")
+        .option("--to <version>", "npm version (or, for a repo-checkout install, a git ref) to update to — omit for latest")
+        .option("--all", "Update every enrolled Mac mini, one at a time — a bad agent build only ever takes down the one mini currently updating, never the whole fleet at once")
+        .option("--timeout <seconds>", "How long to wait for each mini to ack done/failed before giving up", "600")
+        .action(async (agentId, opts) => {
+        const { cfg, api } = client();
+        if (!opts.all && !agentId) {
+            console.error("Specify an agentId, or pass --all to update every enrolled Mac mini one at a time.");
+            process.exit(1);
+        }
+        const { agents: fleet } = await api.listAgents(cfg.orgId);
+        const targets = opts.all ? fleet : fleet.filter((a) => a.id === agentId);
+        if (targets.length === 0) {
+            console.error(opts.all
+                ? "No Mac minis enrolled yet."
+                : `No agent ${agentId} in this org. 'appforge-admin agents list' shows the current fleet.`);
+            process.exit(1);
+        }
+        const timeoutSeconds = parseTimeoutSeconds(opts.timeout);
+        if (timeoutSeconds === null) {
+            console.error(`--timeout must be a positive number of seconds, got "${opts.timeout}".`);
+            process.exit(1);
+        }
+        const timeoutMs = timeoutSeconds * 1000;
+        let failures = 0;
+        for (const target of targets) {
+            console.log(`Updating "${target.name}" (${target.id})${opts.to ? ` to ${opts.to}` : ""}...`);
+            const { command } = await api.sendAgentCommand(target.id, "UPDATE_AGENT", undefined, opts.to);
+            const resolved = await waitForCommandResolution(api, target.id, command.id, timeoutMs);
+            if (!resolved) {
+                console.error(`  timed out after ${opts.timeout}s waiting for "${target.name}" to ack — check it manually.`);
+                failures++;
+                continue;
+            }
+            if (resolved.status === "done") {
+                console.log(`  done: ${resolved.result ?? "updated"}`);
+            }
+            else {
+                console.error(`  failed: ${resolved.result ?? "no reason given"}`);
+                failures++;
+            }
+        }
+        // --all is a sequential, drain-aware rollout by design (issue #87):
+        // stop nagging with an overall summary only when something actually
+        // went wrong, so a clean run just shows the per-mini lines above.
+        if (failures > 0) {
+            console.error(`\n${failures} of ${targets.length} update(s) did not finish cleanly.`);
+            process.exit(1);
+        }
+    });
+    agents
+        .command("allow-remote-control <agentId>")
+        .description("Grant or revoke authorization for the VNC \"Connect\" button to forward mouse/keyboard input to this Mac, not just watch its screen — off by default for every agent (see docs/fleet-management.md)")
+        .option("--on", "Grant remote control")
+        .option("--off", "Revoke remote control")
+        .action(async (agentId, opts) => {
+        if (opts.on === opts.off) {
+            // Both flags given, or neither — either way there's no single
+            // unambiguous intent to act on. Same "require exactly one" shape
+            // `agents update`'s own `--all`/`agentId` check above uses.
+            console.error("Specify exactly one of --on or --off.");
+            process.exit(1);
+        }
+        const { cfg, api } = client();
+        const { agents: fleet } = await api.listAgents(cfg.orgId);
+        const target = fleet.find((a) => a.id === agentId);
+        if (!target) {
+            console.error(`No agent ${agentId} in this org. 'appforge-admin agents list' shows the current fleet.`);
+            process.exit(1);
+        }
+        const enabled = !!opts.on;
+        await api.setAgentRemoteControl(cfg.orgId, agentId, enabled);
+        console.log(enabled
+            ? `Remote control is now ENABLED for "${target.name}" (${agentId}) — the VNC "Connect" button can now request a control session for it.`
+            : `Remote control is now disabled for "${target.name}" (${agentId}).`);
+    });
+    agents
+        .command("decommission <agentId>")
+        .description("Permanently remove a Mac mini from the fleet (for a retired machine or a stale duplicate row) — does NOT stop the daemon on the machine itself")
+        .action(async (agentId) => {
+        const { cfg, api } = client();
+        const { agents: fleet } = await api.listAgents(cfg.orgId);
+        const target = fleet.find((a) => a.id === agentId);
+        if (!target) {
+            console.error(`No agent ${agentId} in this org. 'appforge-admin agents list' shows the current fleet.`);
+            process.exit(1);
+        }
+        await api.deleteAgent(cfg.orgId, agentId);
+        console.log(`Removed "${target.name}" (${agentId}) from the fleet.`);
+        // A still-running daemon does NOT re-enroll itself once its row is
+        // gone — its next heartbeat 401s (the agent token no longer
+        // matches any row), which it treats as a fatal auth failure: it
+        // stops leasing builds and idles, logging that it needs
+        // `add-mac --force` to come back. It won't silently reappear, but
+        // it also won't cleanly stop on its own — only nag about this
+        // when the agent looks alive, since that's the case where leaving
+        // the daemon running just means a Mac mini quietly erroring
+        // forever instead of actually retiring.
+        if (effectiveAgentStatus(target) !== "offline") {
+            console.log(`\nThis agent was last seen ${target.lastSeenAt} — if its daemon is still running, it will\n` +
+                `start failing heartbeats (401) and go idle rather than actually stopping. Stop it ON\n` +
+                `that machine to retire it cleanly:\n` +
+                `  launchctl unload ~/Library/LaunchAgents/com.appforge.agent.plist && rm ~/.appforge-agent/config.json`);
+        }
+    });
+}
+//# sourceMappingURL=agents.js.map

package/dist/commands/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/commands/agents.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EACL,SAAS,EACT,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,GAEtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAC/E,OAAO,EAAE,UAAU,IAAI,eAAe,EAAE,UAAU,IAAI,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACrH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACjG,OAAO,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAC9D,OAAO,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,sDAAsD,CAAC;AAClI,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEnF,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,SAAS,MAAM;IACb,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,OAAO;QACL,GAAG;QACH,GAAG,EAAE,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;KAC5F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAwG;IAExG,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,OAAO,GAAG,GAAG,CAAC,SAAS,KAAK,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,aAAa,IAAI,aAAa,GAAG,SAAS,EAAE,CAAC;AACjJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAc,EACd,OAAe,EACf,SAAiB,EACjB,SAAiB,EACjB,iBAAyB,uBAAuB;IAEhD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC;QACR,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACzD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC;YAAE,OAAO,OAAO,CAAC;QAC1F,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,iCAAiC,CAAC,CAAC;IAExF,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC9B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,EAAE,KAAK,EAAE,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAC3C,iEAAiE;YACjE,sEAAsE;YACtE,sDAAsD;YACtD,MAAM,MAAM,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;YACvC,mEAAmE;YACnE,gEAAgE;YAChE,6DAA6D;YAC7D,MAAM,aAAa,GACjB,CAAC,CAAC,YAAY,KAAK,IAAI;gBACrB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,YAAY,CAAC;oBACrC,CAAC,CAAC,YAAY,CAAC,CAAC,YAAY,EAAE;oBAC9B,CAAC,CAAC,YAAY,CAAC,CAAC,YAAY,2BAA2B,qBAAqB,GAAG,CAAC;YACtF,+DAA+D;YAC/D,wDAAwD;YACxD,MAAM,KAAK,GAAG,GAAG,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,mBAAmB,EAAE,CAAC;YACzF,OAAO,CAAC,GAAG,CACT,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,eAAe,UAAU,CAAC,CAAC,eAAe,gBAAgB,CAAC,CAAC,UAAU,iBAAiB,CAAC,CAAC,UAAU,GAAG,aAAa,EAAE,CAC3P,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,iGAAiG,CAAC,CAAC;IAC1I,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,gHAAgH,CAAC;SAC7H,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC9B,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,6BAA6B,SAAS,MAAM,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,eAAe,IAAI,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CACT,qCAAqC,GAAG,CAAC,WAAW,YAAY,eAAe,yBAAyB,CACzG,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CACV,+IAA+I,CAChJ;SACA,MAAM,CACL,QAAQ,EACR,iPAAiP,CAClP;SACA,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,uBAAuB,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;YACrG,mBAAmB,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CACV,2KAA2K,CAC5K;SACA,MAAM,CAAC,eAAe,EAAE,wDAAwD,CAAC;SACjF,MAAM,CACL,SAAS,EACT,0OAA0O,CAC3O;SACA,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAE9B,oEAAoE;QACpE,oEAAoE;QACpE,gEAAgE;QAChE,mEAAmE;QACnE,kEAAkE;QAClE,qDAAqD;QACrD,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACjD,IAAI,QAAQ,GAAwC,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;YACD,OAAO,CAAC,KAAK,CACX,oCAAoC,QAAQ,CAAC,IAAI,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,IAAI,GAAG,MAAM;gBACzF,WAAW,eAAe,EAAE,MAAM;gBAClC,gFAAgF;gBAChF,wFAAwF;gBACxF,qFAAqF,QAAQ,CAAC,OAAO,IAAI,WAAW,IAAI,CAC3H,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,4GAA4G,CAAC,CAAC;QAC1H,MAAM,IAAI,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAEvC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,cAAc,IAAI,WAAW,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,WAAW,IAAI,WAAW,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,iBAAiB,IAAI,WAAW,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC;QAErE,gEAAgE;QAChE,mEAAmE;QACnE,gEAAgE;QAChE,8DAA8D;QAC9D,qEAAqE;QACrE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,qBAAqB,CAAC;YAC5E,GAAG,IAAI;YACP,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE;YAChE,mBAAmB,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,eAAe,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,mBAAmB,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,sCAAsC,GAAG,CAAC,CAAC;QAC5N,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CACT,mKAAmK,CACpK,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QAC3D,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC;QAExC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,WAAW,gBAAgB,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,eAAe;gBACf,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;gBACzC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY,EAAE,aAAa;aAC5B,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,sBAAsB,SAAS,CAAC,MAAM,IAAI,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAA4C,CAAC;QAEpG,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,qBAAqB,eAAe,EAAE,GAAG,CAAC,CAAC;QAEnF,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;QAChG,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QAC/E,+DAA+D;QAC/D,mEAAmE;QACnE,qEAAqE;QACrE,mEAAmE;QACnE,qEAAqE;QACrE,kEAAkE;QAClE,kDAAkD;QAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,uBAAuB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACrF,OAAO,CAAC,GAAG,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,uBAAuB,OAAO,EAAE,CAAC,CAAC;QAE9C,oEAAoE;QACpE,+CAA+C;QAC/C,yDAAyD;QACzD,kEAAkE;QAClE,mEAAmE;QACnE,oEAAoE;QACpE,gEAAgE;QAChE,gCAAgC;QAChC,MAAM,eAAe,GAAG,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;QAC9E,IAAI,YAAY,CAAC;QACjB,IAAI,CAAC;YACH,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,4BAA4B,CAAC;gBAC9D,GAAG,EAAE,eAAe;gBACpB,kBAAkB;gBAClB,QAAQ;gBACR,MAAM,EAAE,GAAG,CAAC,WAAW;gBACvB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO;aACR,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,4CAA6C,GAAa,CAAC,OAAO,MAAM;gBACtE,8DAA8D,CACjE,CAAC;YACF,YAAY,GAAG,MAAM,4BAA4B,CAAC,kBAAkB,EAAE,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACnJ,CAAC;QACD,IAAI,YAAY,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAE5D,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,+CAA+C,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,+GAA+G,CAAC,CAAC;IAC/H,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CAAC,uEAAuE,CAAC;SACpF,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACzB,MAAM,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,kBAAkB,CAAC;SAC3B,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACzB,MAAM,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,mFAAmF,CAAC;SAChG,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACzB,MAAM,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CACV,gGAAgG;QAC9F,wFAAwF,CAC3F;SACA,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACzB,MAAM,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,kCAAkC,CAAC;SAC3C,WAAW,CACV,uGAAuG;QACrG,iGAAiG,CACpG;SACA,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QACjC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACzB,MAAM,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,iCAAiC,OAAO,GAAG,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,mCAAmC,CAAC;SAC5C,WAAW,CAAC,iEAAiE,CAAC;SAC9E,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE;QACpC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACzB,MAAM,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,wBAAwB,EAAE,UAAU,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,uBAAuB,UAAU,WAAW,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,oBAAoB,CAAC;SAC7B,WAAW,CAAC,+HAA+H,CAAC;SAC5I,MAAM,CAAC,aAAa,EAAE,sCAAsC,EAAE,IAAI,CAAC;SACnE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC9B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CACV,8JAA8J,CAC/J;SACA,MAAM,CAAC,gBAAgB,EAAE,yFAAyF,CAAC;SACnH,MAAM,CACL,OAAO,EACP,uJAAuJ,CACxJ;SACA,MAAM,CAAC,qBAAqB,EAAE,oEAAoE,EAAE,KAAK,CAAC;SAC1G,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,IAAqD,EAAE,EAAE;QACnG,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,oFAAoF,CAAC,CAAC;YACpG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,CACX,IAAI,CAAC,GAAG;gBACN,CAAC,CAAC,4BAA4B;gBAC9B,CAAC,CAAC,YAAY,OAAO,qEAAqE,CAC7F,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,wDAAwD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;YACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,SAAS,GAAG,cAAc,GAAG,IAAI,CAAC;QACxC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7F,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC9F,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACvF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,qBAAqB,IAAI,CAAC,OAAO,kBAAkB,MAAM,CAAC,IAAI,+BAA+B,CAAC,CAAC;gBAC7G,QAAQ,EAAE,CAAC;gBACX,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,WAAW,QAAQ,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,aAAa,QAAQ,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC,CAAC;gBACnE,QAAQ,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,KAAK,QAAQ,OAAO,OAAO,CAAC,MAAM,oCAAoC,CAAC,CAAC;YACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,gCAAgC,CAAC;SACzC,WAAW,CACV,qMAAqM,CACtM;SACA,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC;SACtC,MAAM,CAAC,OAAO,EAAE,uBAAuB,CAAC;SACxC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAqC,EAAE,EAAE;QAC/D,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,8DAA8D;YAC9D,iEAAiE;YACjE,4DAA4D;YAC5D,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC9B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,YAAY,OAAO,qEAAqE,CAAC,CAAC;YACxG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CACT,OAAO;YACL,CAAC,CAAC,sCAAsC,MAAM,CAAC,IAAI,MAAM,OAAO,wEAAwE;YACxI,CAAC,CAAC,uCAAuC,MAAM,CAAC,IAAI,MAAM,OAAO,IAAI,CACxE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,wBAAwB,CAAC;SACjC,WAAW,CAAC,gJAAgJ,CAAC;SAC7J,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC9B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,YAAY,OAAO,qEAAqE,CAAC,CAAC;YACxG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,IAAI,MAAM,OAAO,mBAAmB,CAAC,CAAC;QAErE,mEAAmE;QACnE,4DAA4D;QAC5D,gEAAgE;QAChE,wDAAwD;QACxD,kEAAkE;QAClE,8DAA8D;QAC9D,kEAAkE;QAClE,4DAA4D;QAC5D,wCAAwC;QACxC,IAAI,oBAAoB,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CACT,8BAA8B,MAAM,CAAC,UAAU,8CAA8C;gBAC3F,wFAAwF;gBACxF,sCAAsC;gBACtC,wGAAwG,CAC3G,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/agents.test.d.ts

@@ -0,0 +1,2 @@
+import "../test-support/home-sandbox.js";
+//# sourceMappingURL=agents.test.d.ts.map

package/dist/commands/agents.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.test.d.ts","sourceRoot":"","sources":["../../src/commands/agents.test.ts"],"names":[],"mappings":"AACA,OAAO,iCAAiC,CAAC"}