@appforge-ci/admin-cli 0.1.1

package/dist/lib/bootstrap.js

@@ -0,0 +1,242 @@
+import { execFileSync } from "node:child_process";
+import { appendFileSync, existsSync, readFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { installAgentLaunchAgent, stableNodePath } from "@appforge-ci/agent/dist/lib/launchd.js";
+import { loadConfig } from "@appforge-ci/agent/dist/lib/config.js";
+import { AgentApi } from "@appforge-ci/agent/dist/lib/api.js";
+import { installDeviceStreamIfPresent, syncDeviceStreamFleetSecrets } from "@appforge-ci/agent/dist/lib/device-stream-install.js";
+const require = createRequire(import.meta.url);
+/**
+ * Automates the toolchain-install half of infra/mac-mini-setup/bootstrap.sh
+ * from inside the CLI, split into the same two tiers we drew by hand while
+ * enrolling a personal laptop as a runner (see #17):
+ *
+ *  - `bootstrapSafeToolchains` (default, always run): Homebrew installs and
+ *    PATH wiring only. No `sudo`, no system-setting changes — safe on a
+ *    machine you actually use day to day, not just a dedicated Mac mini.
+ *  - `bootstrapPrivileged` (opt-in via `agents bootstrap --full`): the
+ *    parts of bootstrap.sh that touch system/security settings (a
+ *    passwordless-sudo sudoers rule for remote reboot, disabling sleep,
+ *    reinstalling Xcode). Appropriate for a dedicated always-on mini, not
+ *    a laptop — never runs unless explicitly asked for.
+ *
+ * Reuses bootstrap.sh's actual commands (brew formula/cask names, the
+ * sdkmanager package list, the sudoers line, the pmset flags) rather than
+ * re-deriving them, so the two don't drift apart — see that script for the
+ * canonical version if you're changing either.
+ */
+function run(cmd, args) {
+    console.log(`  $ ${cmd} ${args.join(" ")}`);
+    execFileSync(cmd, args, { stdio: "inherit" });
+}
+function tryRun(cmd, args) {
+    try {
+        execFileSync(cmd, args, { stdio: ["ignore", "pipe", "pipe"] });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function brewFormulaInstalled(name) {
+    return tryRun("brew", ["list", "--formula", name]);
+}
+function brewCaskInstalled(name) {
+    return tryRun("brew", ["list", "--cask", name]);
+}
+const PATH_BLOCK_START = "# >>> appforge-agent toolchains (added by `appforge-admin agents bootstrap`) >>>";
+const PATH_BLOCK_END = "# <<< appforge-agent toolchains <<<";
+/**
+ * Appends a PATH block once, idempotently — re-running `agents bootstrap`
+ * (e.g. after installing a toolchain that was missing the first time)
+ * shouldn't pile up duplicate exports on every run.
+ *
+ * Exported for bootstrap.test.ts — every other caller in this file only
+ * ever uses it as an internal helper, but its idempotency and
+ * existing-content-preservation are worth testing directly rather than
+ * only indirectly through bootstrapSafeToolchains(), which can't be
+ * exercised at all in a headless environment (it shells out to a real
+ * `brew`/`sdkmanager`/Homebrew toolchain install).
+ */
+export function ensurePathBlock(profilePath, lines) {
+    const existing = existsSync(profilePath) ? readFileSync(profilePath, "utf8") : "";
+    if (existing.includes(PATH_BLOCK_START)) {
+        console.log(`  ${profilePath} already has the toolchain PATH block, leaving it alone`);
+        return;
+    }
+    const block = `\n${PATH_BLOCK_START}\n${lines.join("\n")}\n${PATH_BLOCK_END}\n`;
+    appendFileSync(profilePath, block);
+    console.log(`  wrote toolchain PATH block to ${profilePath}`);
+}
+async function reloadAgentIfEnrolled() {
+    const plistPath = join(homedir(), "Library", "LaunchAgents", "com.appforge.agent.plist");
+    if (!existsSync(plistPath))
+        return; // not enrolled yet — add-mac will pick up fresh toolchains on first run
+    console.log("\n==> Reloading the already-enrolled agent so it re-detects toolchains immediately");
+    // Re-runs installAgentLaunchAgent (unload+rewrite+load), not a bare
+    // unload/load of the existing plist verbatim — a mini enrolled before
+    // #14 published the CLIs to npm has a plist written by the old,
+    // now-deleted install.sh pointing at a copied
+    // /usr/local/lib/appforge-agent/dist/index.js. A bare reload would just
+    // keep launching that stale copy forever; rewriting the plist points it
+    // at wherever @appforge-ci/agent actually resolves from *now* (this
+    // package's own dependency, whether that's an in-repo checkout or a
+    // global npm install), the same as `add-mac` already does.
+    const agentDistIndexPath = require.resolve("@appforge-ci/agent/dist/index.js");
+    // Same fix as add-mac's own installAgentLaunchAgent call (see agents.ts)
+    // — resolve the stable unversioned node symlink before baking it into
+    // the plist, so a later `brew upgrade node` doesn't strand launchd
+    // pointed at a deleted version-pinned Cellar path.
+    const nodePath = stableNodePath(process.execPath);
+    installAgentLaunchAgent(nodePath, agentDistIndexPath);
+    // Same device-stream install-service fold `add-mac` gets (see
+    // agents.ts) — a mini bootstrapped, then reloaded, through this path
+    // should end up with Screen Sharing/"Test in browser" wired up too,
+    // not just through add-mac. Loads this machine's own already-enrolled
+    // agent config (the plist-exists check above already established this
+    // machine is enrolled) purely to get the agentId/agentToken this
+    // needs; any failure here (a corrupt/missing config despite the plist
+    // existing, a network hiccup) is swallowed — reloading the agent's own
+    // service above is what this function must always succeed at, never
+    // device-stream's setup on top of it.
+    try {
+        const config = loadConfig();
+        const api = new AgentApi(config);
+        let outcome;
+        try {
+            ({ outcome } = await syncDeviceStreamFleetSecrets({
+                api,
+                agentDistIndexPath,
+                nodePath,
+                apiUrl: config.apiUrl,
+                env: process.env,
+                agentId: config.agentId,
+            }));
+        }
+        catch (err) {
+            console.warn(`Couldn't fetch this org's fleet secrets (${err.message}) — ` +
+                `falling back to whatever is set in this shell's environment.`);
+            outcome = await installDeviceStreamIfPresent(agentDistIndexPath, nodePath, config.apiUrl, process.env, {}, undefined, undefined, config.agentId);
+        }
+        if (outcome.message)
+            console.log(outcome.message);
+    }
+    catch (err) {
+        console.warn(`Skipping apps/device-stream's install-service reload: ${err.message}`);
+    }
+}
+export async function bootstrapSafeToolchains() {
+    if (!tryRun("brew", ["--version"])) {
+        console.error("Homebrew isn't installed. Install it first (https://brew.sh), then re-run this command.");
+        process.exitCode = 1;
+        return;
+    }
+    console.log("==> iOS toolchain: CocoaPods");
+    if (brewFormulaInstalled("cocoapods")) {
+        console.log("  already installed");
+    }
+    else {
+        run("brew", ["install", "cocoapods"]);
+    }
+    console.log("\n==> Android toolchain: Java (openjdk)");
+    if (!brewFormulaInstalled("openjdk")) {
+        run("brew", ["install", "openjdk"]);
+    }
+    else {
+        console.log("  already installed");
+    }
+    console.log("\n==> Android toolchain: SDK command-line tools");
+    // Prefer an SDK that's already on disk (e.g. from Android Studio) over
+    // installing a second one via the Homebrew cask — either way, what
+    // actually matters for the agent is that ANDROID_HOME/PATH point at
+    // platform-tools (adb) somewhere real.
+    const existingSdk = join(homedir(), "Library", "Android", "sdk");
+    const brewPrefix = execFileSync("brew", ["--prefix"], { encoding: "utf8" }).trim(); // /opt/homebrew on Apple Silicon, /usr/local on Intel
+    let androidHome;
+    if (existsSync(join(existingSdk, "platform-tools", "adb"))) {
+        console.log(`  found an existing SDK at ${existingSdk}, using it`);
+        androidHome = existingSdk;
+    }
+    else if (brewCaskInstalled("android-commandlinetools")) {
+        androidHome = `${brewPrefix}/share/android-commandlinetools`;
+        console.log(`  already installed via Homebrew cask (${androidHome})`);
+    }
+    else {
+        run("brew", ["install", "--cask", "android-commandlinetools"]);
+        androidHome = `${brewPrefix}/share/android-commandlinetools`;
+        // sdkmanager is itself a Java program — needs `java` on PATH to run at
+        // all, which openjdk being keg-only means isn't there by default (the
+        // exact bug this function's whole PATH-wiring step exists to fix).
+        const openjdkBin = execFileSync("brew", ["--prefix", "openjdk"], { encoding: "utf8" }).trim() + "/bin";
+        const sdkEnv = { ...process.env, ANDROID_HOME: androidHome, PATH: `${openjdkBin}:${process.env.PATH ?? ""}` };
+        const sdkmanager = `${androidHome}/cmdline-tools/latest/bin/sdkmanager`;
+        try {
+            execFileSync("bash", ["-c", `yes | ${sdkmanager} --licenses`], { stdio: "ignore", env: sdkEnv });
+            console.log(`  $ ${sdkmanager} platform-tools platforms;android-34 build-tools;34.0.0`);
+            execFileSync(sdkmanager, ["platform-tools", "platforms;android-34", "build-tools;34.0.0"], { stdio: "inherit", env: sdkEnv });
+        }
+        catch {
+            console.warn("  sdkmanager package install failed — you may need to accept licenses manually (sdkmanager --licenses)");
+        }
+    }
+    console.log("\n==> Wiring Java + Android SDK onto the login-shell PATH the agent's toolchain checks use");
+    // openjdk is keg-only (Homebrew deliberately doesn't symlink it, to avoid
+    // fighting the system `java` wrapper) so it always needs an explicit
+    // PATH entry — see packages/agent/src/lib/system-info.ts's tryRunLogin
+    // for why this has to land in a *login* shell's profile specifically.
+    const pathLines = [
+        `export ANDROID_HOME="${androidHome}"`,
+        `export PATH="$(brew --prefix openjdk)/bin:$ANDROID_HOME/platform-tools:$ANDROID_HOME/cmdline-tools/latest/bin:$PATH"`,
+        // pod --version's first line is a "requires UTF-8 encoding" warning
+        // under the "C"/POSIX locale, which packages/agent/src/lib/system-info.ts's
+        // firstLine() would capture as the "version" instead of the real one.
+        `export LANG=en_US.UTF-8`,
+    ];
+    ensurePathBlock(join(homedir(), ".bash_profile"), pathLines); // read by the agent's `bash -lc` checks
+    ensurePathBlock(join(homedir(), ".zshrc"), pathLines); // read by your interactive shell
+    await reloadAgentIfEnrolled();
+    console.log("\nDone. Run 'appforge-admin agents add-mac' (or check the Fleet dashboard, or 'agents list') to confirm toolchains are now detected.");
+}
+/**
+ * The system/security-sensitive half of bootstrap.sh — never run unless
+ * explicitly requested via `--full`. Appropriate for a dedicated always-on
+ * Mac mini; not something to do to a machine you use day to day.
+ */
+export function bootstrapPrivileged() {
+    console.log("\n==> Passwordless sudo for the REBOOT_HOST remote command (scoped, not blanket sudo)");
+    const agentUser = execFileSync("whoami", [], { encoding: "utf8" }).trim();
+    const sudoersLine = `${agentUser} ALL=(root) NOPASSWD: /sbin/shutdown -r now`;
+    const sudoersFile = "/etc/sudoers.d/appforge-agent";
+    if (existsSync(sudoersFile)) {
+        console.log(`  ${sudoersFile} already exists, leaving it alone`);
+    }
+    else {
+        run("bash", ["-c", `echo '${sudoersLine}' | sudo tee ${sudoersFile} >/dev/null && sudo chmod 440 ${sudoersFile}`]);
+        console.log(`  wrote ${sudoersFile}`);
+    }
+    console.log("\n==> Disabling sleep so this machine keeps building overnight");
+    run("sudo", ["pmset", "-a", "sleep", "0", "disksleep", "0", "displaysleep", "10"]);
+    console.log("\n==> Full Xcode (Command Line Tools alone can't run xcodebuild)");
+    let hasFullXcode = false;
+    try {
+        hasFullXcode = execFileSync("xcode-select", ["-p"], { encoding: "utf8" }).includes("/Xcode.app");
+    }
+    catch {
+        /* xcode-select -p failing just means CLT/Xcode isn't selected yet */
+    }
+    if (hasFullXcode) {
+        console.log("  already installed");
+    }
+    else if (process.env.XCODES_USERNAME && process.env.XCODES_PASSWORD) {
+        if (!brewFormulaInstalled("xcodes"))
+            run("brew", ["install", "xcodes", "aria2"]);
+        run("xcodes", ["install", "--latest", "--experimental-unxip", "--select"]);
+        run("sudo", ["xcodebuild", "-license", "accept"]);
+    }
+    else {
+        console.log("  XCODES_USERNAME/XCODES_PASSWORD not set — skipping. Export those (an Apple ID with App Store access) and re-run with --full, or install by hand: 'xcodes install --latest --select'.");
+    }
+}
+//# sourceMappingURL=bootstrap.js.map

package/dist/lib/bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../../src/lib/bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,oCAAoC,CAAC;AAC9D,OAAO,EAAE,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,sDAAsD,CAAC;AAElI,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C;;;;;;;;;;;;;;;;;;GAkBG;AAEH,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc;IACtC,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5C,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,MAAM,CAAC,GAAW,EAAE,IAAc;IACzC,IAAI,CAAC;QACH,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,gBAAgB,GAAG,kFAAkF,CAAC;AAC5G,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,KAAe;IAClE,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,yDAAyD,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,gBAAgB,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC;IAChF,cAAc,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,qBAAqB;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,0BAA0B,CAAC,CAAC;IACzF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,wEAAwE;IAC5G,OAAO,CAAC,GAAG,CAAC,oFAAoF,CAAC,CAAC;IAClG,oEAAoE;IACpE,sEAAsE;IACtE,gEAAgE;IAChE,8CAA8C;IAC9C,wEAAwE;IACxE,wEAAwE;IACxE,oEAAoE;IACpE,oEAAoE;IACpE,2DAA2D;IAC3D,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC/E,yEAAyE;IACzE,sEAAsE;IACtE,mEAAmE;IACnE,mDAAmD;IACnD,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClD,uBAAuB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAEtD,8DAA8D;IAC9D,qEAAqE;IACrE,oEAAoE;IACpE,sEAAsE;IACtE,sEAAsE;IACtE,iEAAiE;IACjE,sEAAsE;IACtE,uEAAuE;IACvE,oEAAoE;IACpE,sCAAsC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,4BAA4B,CAAC;gBAChD,GAAG;gBACH,kBAAkB;gBAClB,QAAQ;gBACR,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,4CAA6C,GAAa,CAAC,OAAO,MAAM;gBACtE,8DAA8D,CACjE,CAAC;YACF,OAAO,GAAG,MAAM,4BAA4B,CAAC,kBAAkB,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACnJ,CAAC;QACD,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,yDAA0D,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;QACzG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC5C,IAAI,oBAAoB,CAAC,WAAW,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACvD,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IAC/D,uEAAuE;IACvE,mEAAmE;IACnE,oEAAoE;IACpE,uCAAuC;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,sDAAsD;IAC1I,IAAI,WAAmB,CAAC;IACxB,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,8BAA8B,WAAW,YAAY,CAAC,CAAC;QACnE,WAAW,GAAG,WAAW,CAAC;IAC5B,CAAC;SAAM,IAAI,iBAAiB,CAAC,0BAA0B,CAAC,EAAE,CAAC;QACzD,WAAW,GAAG,GAAG,UAAU,iCAAiC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,0CAA0C,WAAW,GAAG,CAAC,CAAC;IACxE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,0BAA0B,CAAC,CAAC,CAAC;QAC/D,WAAW,GAAG,GAAG,UAAU,iCAAiC,CAAC;QAC7D,uEAAuE;QACvE,sEAAsE;QACtE,mEAAmE;QACnE,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC;QACvG,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC;QAC9G,MAAM,UAAU,GAAG,GAAG,WAAW,sCAAsC,CAAC;QACxE,IAAI,CAAC;YACH,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,UAAU,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACjG,OAAO,CAAC,GAAG,CAAC,OAAO,UAAU,yDAAyD,CAAC,CAAC;YACxF,YAAY,CAAC,UAAU,EAAE,CAAC,gBAAgB,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAChI,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,wGAAwG,CAAC,CAAC;QACzH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,4FAA4F,CAAC,CAAC;IAC1G,0EAA0E;IAC1E,qEAAqE;IACrE,uEAAuE;IACvE,sEAAsE;IACtE,MAAM,SAAS,GAAG;QAChB,wBAAwB,WAAW,GAAG;QACtC,sHAAsH;QACtH,oEAAoE;QACpE,4EAA4E;QAC5E,sEAAsE;QACtE,yBAAyB;KAC1B,CAAC;IACF,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,wCAAwC;IACtG,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,iCAAiC;IAExF,MAAM,qBAAqB,EAAE,CAAC;IAE9B,OAAO,CAAC,GAAG,CACT,sIAAsI,CACvI,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;IACrG,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAG,GAAG,SAAS,6CAA6C,CAAC;IAC9E,MAAM,WAAW,GAAG,+BAA+B,CAAC;IACpD,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,mCAAmC,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,WAAW,gBAAgB,WAAW,iCAAiC,WAAW,EAAE,CAAC,CAAC,CAAC;QACnH,OAAO,CAAC,GAAG,CAAC,WAAW,WAAW,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IAC9E,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;IAEnF,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;IAChF,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,YAAY,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnG,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;QACtE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,GAAG,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,sBAAsB,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,wLAAwL,CACzL,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/bootstrap.test.d.ts

@@ -0,0 +1,2 @@
+import "../test-support/home-sandbox.js";
+//# sourceMappingURL=bootstrap.test.d.ts.map

package/dist/lib/bootstrap.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.test.d.ts","sourceRoot":"","sources":["../../src/lib/bootstrap.test.ts"],"names":[],"mappings":"AACA,OAAO,iCAAiC,CAAC"}

package/dist/lib/bootstrap.test.js

@@ -0,0 +1,59 @@
+// Must stay the FIRST import — see the comment below the imports.
+import "../test-support/home-sandbox.js";
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { mkdtemp, rm, readFile, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { ensurePathBlock } from "./bootstrap.js";
+// The rest of bootstrap.ts (bootstrapSafeToolchains/bootstrapPrivileged)
+// shells out to a real brew/sdkmanager/Homebrew toolchain install and
+// can't be exercised at all in this headless environment — see
+// android-smoke-test.test.ts's own docblock for the same "no real
+// toolchain here" boundary. ensurePathBlock is the one piece of pure,
+// parameterized filesystem logic in this file, so it's the one thing
+// tested directly.
+test("ensurePathBlock creates the file with the marked block when none exists", async () => {
+    const dir = await mkdtemp(join(tmpdir(), "appforge-bootstrap-test-"));
+    try {
+        const profilePath = join(dir, ".bash_profile");
+        ensurePathBlock(profilePath, ['export ANDROID_HOME="/fake/sdk"']);
+        const content = await readFile(profilePath, "utf8");
+        assert.match(content, /appforge-agent toolchains \(added by `appforge-admin agents bootstrap`\)/);
+        assert.match(content, /export ANDROID_HOME="\/fake\/sdk"/);
+        assert.match(content, /<<< appforge-agent toolchains <<</);
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+});
+test("ensurePathBlock preserves whatever was already in the file, appending after it", async () => {
+    const dir = await mkdtemp(join(tmpdir(), "appforge-bootstrap-test-"));
+    try {
+        const profilePath = join(dir, ".zshrc");
+        await writeFile(profilePath, "# a real user's own existing config\nexport EDITOR=vim\n");
+        ensurePathBlock(profilePath, ['export PATH="/fake/bin:$PATH"']);
+        const content = await readFile(profilePath, "utf8");
+        assert.match(content, /^# a real user's own existing config\nexport EDITOR=vim\n/);
+        assert.match(content, /export PATH="\/fake\/bin:\$PATH"/);
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+});
+test("ensurePathBlock is idempotent — re-running it never duplicates the block", async () => {
+    const dir = await mkdtemp(join(tmpdir(), "appforge-bootstrap-test-"));
+    try {
+        const profilePath = join(dir, ".bash_profile");
+        ensurePathBlock(profilePath, ['export ANDROID_HOME="/fake/sdk"']);
+        ensurePathBlock(profilePath, ['export ANDROID_HOME="/fake/sdk"']);
+        ensurePathBlock(profilePath, ['export ANDROID_HOME="/fake/sdk"']);
+        const content = await readFile(profilePath, "utf8");
+        const occurrences = content.split("appforge-agent toolchains (added by").length - 1;
+        assert.equal(occurrences, 1, `expected exactly one PATH block, found ${occurrences}`);
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=bootstrap.test.js.map

package/dist/lib/bootstrap.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.test.js","sourceRoot":"","sources":["../../src/lib/bootstrap.test.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,iCAAiC,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,yEAAyE;AACzE,sEAAsE;AACtE,+DAA+D;AAC/D,kEAAkE;AAClE,sEAAsE;AACtE,qEAAqE;AACrE,mBAAmB;AAEnB,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC/C,eAAe,CAAC,WAAW,EAAE,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAElE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,0EAA0E,CAAC,CAAC;QAClG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;IAC7D,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,SAAS,CAAC,WAAW,EAAE,0DAA0D,CAAC,CAAC;QAEzF,eAAe,CAAC,WAAW,EAAE,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAEhE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,2DAA2D,CAAC,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,kCAAkC,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC/C,eAAe,CAAC,WAAW,EAAE,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAClE,eAAe,CAAC,WAAW,EAAE,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAClE,eAAe,CAAC,WAAW,EAAE,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAElE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,0CAA0C,WAAW,EAAE,CAAC,CAAC;IACxF,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/lib/config.d.ts

@@ -0,0 +1,27 @@
+export interface AdminCliConfig {
+    apiUrl: string;
+    adminApiUrl: string;
+    token: string;
+    orgId: string;
+}
+/**
+ * The "file missing" case already threw a clear message, but a
+ * present-but-malformed config.json (a hand-edit typo, disk-full/
+ * killed-mid-write, a cloud-synced homedir's conflicted copy) used to
+ * throw a raw JSON.parse SyntaxError instead — every CLI command loads
+ * this file, so a corrupted one made the CLI permanently unusable with
+ * only that unhelpful message to go on (index.ts's top-level .catch()
+ * just prints err.message and exits). Same "catch and re-throw with a
+ * clear message" shape packages/agent's own loadConfig() already
+ * established for the identical bug there.
+ */
+export declare function loadAdminCliConfig(): AdminCliConfig;
+/**
+ * Atomic write (temp file + rename) — same pattern packages/agent's own
+ * saveConfig() already establishes there for the identical config-file
+ * contract, since a process killed mid-write is the most plausible real
+ * cause of the corrupted state loadAdminCliConfig() now has to survive.
+ */
+export declare function saveAdminCliConfig(config: AdminCliConfig): void;
+export declare function adminCliConfigPath(): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,IAAI,cAAc,CAYnD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,QAkBxD;AAED,wBAAgB,kBAAkB,WAEjC"}

package/dist/lib/config.js

@@ -0,0 +1,61 @@
+import { readFileSync, writeFileSync, existsSync, mkdirSync, chmodSync, renameSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+// Deliberately a separate config directory from @appforge-ci/cli's
+// ~/.appforge/ — these are two different tools for two different
+// audiences (see this package's README), so being logged into one
+// never implies anything about the other.
+const CONFIG_DIR = join(homedir(), ".appforge-admin");
+const CONFIG_PATH = join(CONFIG_DIR, "config.json");
+/**
+ * The "file missing" case already threw a clear message, but a
+ * present-but-malformed config.json (a hand-edit typo, disk-full/
+ * killed-mid-write, a cloud-synced homedir's conflicted copy) used to
+ * throw a raw JSON.parse SyntaxError instead — every CLI command loads
+ * this file, so a corrupted one made the CLI permanently unusable with
+ * only that unhelpful message to go on (index.ts's top-level .catch()
+ * just prints err.message and exits). Same "catch and re-throw with a
+ * clear message" shape packages/agent's own loadConfig() already
+ * established for the identical bug there.
+ */
+export function loadAdminCliConfig() {
+    if (!existsSync(CONFIG_PATH)) {
+        throw new Error(`Not logged in. Run "appforge-admin login" first (looked for ${CONFIG_PATH}).`);
+    }
+    try {
+        return JSON.parse(readFileSync(CONFIG_PATH, "utf8"));
+    }
+    catch (err) {
+        throw new Error(`Config at ${CONFIG_PATH} is corrupted (${err.message}). ` +
+            `Re-run "appforge-admin login" to regenerate it.`);
+    }
+}
+/**
+ * Atomic write (temp file + rename) — same pattern packages/agent's own
+ * saveConfig() already establishes there for the identical config-file
+ * contract, since a process killed mid-write is the most plausible real
+ * cause of the corrupted state loadAdminCliConfig() now has to survive.
+ */
+export function saveAdminCliConfig(config) {
+    mkdirSync(CONFIG_DIR, { recursive: true });
+    const tmpPath = `${CONFIG_PATH}.${process.pid}.tmp`;
+    writeFileSync(tmpPath, JSON.stringify(config, null, 2), { mode: 0o600 });
+    renameSync(tmpPath, CONFIG_PATH);
+    // Belt-and-suspenders, not a fix for a live gap — same correction as
+    // @appforge-ci/cli's own config.ts: renameSync() replaces CONFIG_PATH's
+    // directory entry with tmpPath's inode wholesale, so the destination
+    // already ends up at tmpPath's own mode — 0o600, set by the
+    // writeFileSync above, which is *always* creating a brand-new file
+    // (tmpPath is unique per process) — regardless of whatever permissions
+    // CONFIG_PATH itself had before (verified directly: this repo's own
+    // config.test.ts still passes its "re-tightens" assertion with this
+    // chmodSync call deleted entirely). Kept anyway as cheap insurance
+    // against a *future* edit to saveAdminCliConfig that moves away from
+    // the atomic temp-file+rename pattern (e.g. writing in place to an
+    // existing CONFIG_PATH) without revisiting this line.
+    chmodSync(CONFIG_PATH, 0o600);
+}
+export function adminCliConfigPath() {
+    return CONFIG_PATH;
+}
+//# sourceMappingURL=config.js.map

package/dist/lib/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,mEAAmE;AACnE,iEAAiE;AACjE,kEAAkE;AAClE,0CAA0C;AAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,iBAAiB,CAAC,CAAC;AACtD,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AASpD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,+DAA+D,WAAW,IAAI,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,aAAa,WAAW,kBAAmB,GAAa,CAAC,OAAO,KAAK;YACnE,iDAAiD,CACpD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAsB;IACvD,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACpD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjC,qEAAqE;IACrE,wEAAwE;IACxE,qEAAqE;IACrE,4DAA4D;IAC5D,mEAAmE;IACnE,uEAAuE;IACvE,oEAAoE;IACpE,oEAAoE;IACpE,mEAAmE;IACnE,qEAAqE;IACrE,mEAAmE;IACnE,sDAAsD;IACtD,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/lib/config.test.d.ts

@@ -0,0 +1,2 @@
+import "../test-support/home-sandbox.js";
+//# sourceMappingURL=config.test.d.ts.map

package/dist/lib/config.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.test.d.ts","sourceRoot":"","sources":["../../src/lib/config.test.ts"],"names":[],"mappings":"AACA,OAAO,iCAAiC,CAAC"}

package/dist/lib/config.test.js

@@ -0,0 +1,120 @@
+// Must stay the FIRST import — see the comment below the imports.
+import "../test-support/home-sandbox.js";
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { rmSync, writeFileSync, statSync, mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+import { loadAdminCliConfig, saveAdminCliConfig, adminCliConfigPath } from "./config.js";
+// adminCliConfigPath() is derived from os.homedir() when ./config.js is
+// first evaluated, and these tests write to and rmSync() it as their
+// fixture — so the sandbox-home guard above MUST stay the first import:
+// it points $HOME at a throwaway temp dir before that constant is
+// computed. (Until 2026-09-13 this file deliberately ran against the
+// real ~/.appforge-admin/config.json — every `pnpm test` here wiped the
+// platform admin's login, first noticed on 2026-09-09; see
+// ../test-support/home-sandbox.ts.) Every test still tears its own
+// fixture down in a finally.
+function permBits(path) {
+    return statSync(path).mode & 0o777;
+}
+function cleanup() {
+    rmSync(adminCliConfigPath(), { force: true });
+}
+test("loadAdminCliConfig throws a clear error when never logged in", () => {
+    cleanup();
+    try {
+        assert.throws(() => loadAdminCliConfig(), /Not logged in/);
+    }
+    finally {
+        cleanup();
+    }
+});
+// Regression test for the bug this cycle's fix closes: a present-but-
+// malformed config.json (a hand-edit typo, disk-full/killed-mid-write, a
+// cloud-synced homedir's conflicted copy) used to throw a raw JSON.parse
+// SyntaxError instead of a clear, actionable message — every CLI command
+// loads this file, so a corrupted one made the CLI permanently unusable
+// with nothing but that unhelpful message to go on. Same regression shape
+// packages/agent's own config.test.ts already established for the
+// identical bug there.
+test("loadAdminCliConfig throws a clear, actionable error (not a raw SyntaxError) for a malformed config file", () => {
+    cleanup();
+    mkdirSync(dirname(adminCliConfigPath()), { recursive: true });
+    writeFileSync(adminCliConfigPath(), "{ not valid json");
+    try {
+        assert.throws(() => loadAdminCliConfig(), (err) => {
+            assert.ok(err instanceof Error);
+            assert.ok(!(err instanceof SyntaxError), "expected a wrapped Error, not a raw JSON.parse SyntaxError");
+            assert.match(err.message, /corrupted/);
+            assert.match(err.message, /appforge-admin login/);
+            return true;
+        });
+    }
+    finally {
+        cleanup();
+    }
+});
+test("saveAdminCliConfig writes a file loadAdminCliConfig round-trips exactly", () => {
+    cleanup();
+    try {
+        const config = {
+            apiUrl: "https://api.example.test",
+            adminApiUrl: "https://admin-api.example.test",
+            token: "afk_test_token",
+            orgId: "org_1",
+        };
+        saveAdminCliConfig(config);
+        assert.deepEqual(loadAdminCliConfig(), config);
+    }
+    finally {
+        cleanup();
+    }
+});
+test("saveAdminCliConfig creates a fresh config file with 0600 permissions", () => {
+    cleanup();
+    try {
+        saveAdminCliConfig({
+            apiUrl: "https://api.example.test",
+            adminApiUrl: "https://admin-api.example.test",
+            token: "afk_test_token",
+            orgId: "org_1",
+        });
+        assert.equal(permBits(adminCliConfigPath()), 0o600);
+    }
+    finally {
+        cleanup();
+    }
+});
+test("saveAdminCliConfig produces a 0600 file even when overwriting a config that already existed with looser permissions", () => {
+    cleanup();
+    try {
+        // Simulates a file predating this protection (or loosened by hand, a
+        // backup restore, a cloud-synced homedir, ...). This assertion holds
+        // even with saveAdminCliConfig's own explicit chmodSync call deleted
+        // entirely — verified directly, see the comment on that call in
+        // config.ts — because renameSync() replaces the destination's
+        // directory entry with the freshly-created (and already-0600) temp
+        // file's inode wholesale, regardless of what permissions the
+        // destination had before. This test guards the actual end-state
+        // invariant (the file is 0600 after every save), not any one
+        // mechanism that happens to produce it, so it stays meaningful
+        // however that invariant ends up being achieved.
+        mkdirSync(dirname(adminCliConfigPath()), { recursive: true });
+        writeFileSync(adminCliConfigPath(), "{}", { mode: 0o644 });
+        assert.equal(permBits(adminCliConfigPath()), 0o644, "test fixture setup should start loose");
+        saveAdminCliConfig({
+            apiUrl: "https://api.example.test",
+            adminApiUrl: "https://admin-api.example.test",
+            token: "afk_test_token",
+            orgId: "org_1",
+        });
+        assert.equal(permBits(adminCliConfigPath()), 0o600);
+    }
+    finally {
+        cleanup();
+    }
+});
+test("adminCliConfigPath returns a real path under ~/.appforge-admin", () => {
+    assert.match(adminCliConfigPath(), /\.appforge-admin[/\\]config\.json$/);
+});
+//# sourceMappingURL=config.test.js.map

package/dist/lib/config.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../../src/lib/config.test.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,iCAAiC,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEzF,wEAAwE;AACxE,qEAAqE;AACrE,wEAAwE;AACxE,kEAAkE;AAClE,qEAAqE;AACrE,wEAAwE;AACxE,2DAA2D;AAC3D,mEAAmE;AACnE,6BAA6B;AAC7B,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;AACrC,CAAC;AAED,SAAS,OAAO;IACd,MAAM,CAAC,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,OAAO,EAAE,CAAC;IACV,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,EAAE,EAAE,eAAe,CAAC,CAAC;IAC7D,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,sEAAsE;AACtE,yEAAyE;AACzE,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,0EAA0E;AAC1E,kEAAkE;AAClE,uBAAuB;AACvB,IAAI,CAAC,yGAAyG,EAAE,GAAG,EAAE;IACnH,OAAO,EAAE,CAAC;IACV,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,aAAa,CAAC,kBAAkB,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,kBAAkB,EAAE,EAC1B,CAAC,GAAY,EAAE,EAAE;YACf,MAAM,CAAC,EAAE,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC;YAChC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,YAAY,WAAW,CAAC,EAAE,4DAA4D,CAAC,CAAC;YACvG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACnF,OAAO,EAAE,CAAC;IACV,IAAI,CAAC;QACH,MAAM,MAAM,GAAG;YACb,MAAM,EAAE,0BAA0B;YAClC,WAAW,EAAE,gCAAgC;YAC7C,KAAK,EAAE,gBAAgB;YACvB,KAAK,EAAE,OAAO;SACf,CAAC;QACF,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,SAAS,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,OAAO,EAAE,CAAC;IACV,IAAI,CAAC;QACH,kBAAkB,CAAC;YACjB,MAAM,EAAE,0BAA0B;YAClC,WAAW,EAAE,gCAAgC;YAC7C,KAAK,EAAE,gBAAgB;YACvB,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CACF,qHAAqH,EACrH,GAAG,EAAE;IACH,OAAO,EAAE,CAAC;IACV,IAAI,CAAC;QACH,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,gEAAgE;QAChE,8DAA8D;QAC9D,mEAAmE;QACnE,6DAA6D;QAC7D,gEAAgE;QAChE,6DAA6D;QAC7D,+DAA+D;QAC/D,iDAAiD;QACjD,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,aAAa,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,EAAE,KAAK,EAAE,uCAAuC,CAAC,CAAC;QAE7F,kBAAkB,CAAC;YACjB,MAAM,EAAE,0BAA0B;YAClC,WAAW,EAAE,gCAAgC;YAC7C,KAAK,EAAE,gBAAgB;YACvB,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;YAAS,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CACF,CAAC;AAEF,IAAI,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC1E,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,oCAAoC,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC"}

package/dist/lib/prompt.d.ts

@@ -0,0 +1,11 @@
+export declare function prompt(question: string): Promise<string>;
+/**
+ * Reads a line from stdin without echoing it back to the terminal.
+ * Handles both raw-mode-TTY (one keystroke per `data` event) and piped
+ * input (the whole line arrives as one chunk) — see @appforge-ci/cli's copy
+ * of this file for the regression story; kept in sync manually since
+ * these two CLIs are deliberately independent packages, not a shared
+ * dependency (see this package's own module docblock in index.ts).
+ */
+export declare function promptHidden(question: string): Promise<string>;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/lib/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/lib/prompt.ts"],"names":[],"mappings":"AAEA,wBAAsB,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO9D;AAKD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA+BpE"}

package/dist/lib/prompt.js

@@ -0,0 +1,54 @@
+import { createInterface } from "node:readline/promises";
+export async function prompt(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        return await rl.question(question);
+    }
+    finally {
+        rl.close();
+    }
+}
+const CTRL_C = "\x03";
+const BACKSPACE = ["\x08", "\x7f"];
+/**
+ * Reads a line from stdin without echoing it back to the terminal.
+ * Handles both raw-mode-TTY (one keystroke per `data` event) and piped
+ * input (the whole line arrives as one chunk) — see @appforge-ci/cli's copy
+ * of this file for the regression story; kept in sync manually since
+ * these two CLIs are deliberately independent packages, not a shared
+ * dependency (see this package's own module docblock in index.ts).
+ */
+export async function promptHidden(question) {
+    return new Promise((resolve) => {
+        process.stdout.write(question);
+        const stdin = process.stdin;
+        stdin.resume();
+        stdin.setRawMode?.(true);
+        let value = "";
+        const finish = () => {
+            stdin.setRawMode?.(false);
+            stdin.pause();
+            stdin.removeListener("data", onData);
+            process.stdout.write("\n");
+            resolve(value);
+        };
+        const onData = (buf) => {
+            const chunk = buf.toString("utf8");
+            if (chunk.includes(CTRL_C))
+                process.exit(1);
+            const newlineIndex = chunk.search(/[\n\r]/);
+            if (newlineIndex !== -1) {
+                value += chunk.slice(0, newlineIndex);
+                finish();
+                return;
+            }
+            if (BACKSPACE.includes(chunk)) {
+                value = value.slice(0, -1);
+                return;
+            }
+            value += chunk;
+        };
+        stdin.on("data", onData);
+    });
+}
+//# sourceMappingURL=prompt.js.map