@apralabs/apra-fleet 0.2.2

package/dist/services/github-app.js

@@ -0,0 +1,96 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+const GITHUB_API = 'https://api.github.com';
+/**
+ * Read and validate a PEM private key file.
+ */
+export function loadPrivateKey(keyPath) {
+    if (!fs.existsSync(keyPath)) {
+        throw new Error(`Private key file not found: ${keyPath}`);
+    }
+    const key = fs.readFileSync(keyPath, 'utf-8').trim();
+    if (!key.startsWith('-----BEGIN')) {
+        throw new Error('Invalid private key: file does not start with -----BEGIN');
+    }
+    return key;
+}
+/**
+ * Create a JWT for GitHub App authentication (RS256).
+ * Valid for 10 minutes, backdated 60 seconds for clock skew.
+ */
+export function createAppJWT(appId, privateKey) {
+    const now = Math.floor(Date.now() / 1000);
+    const header = Buffer.from(JSON.stringify({ alg: 'RS256', typ: 'JWT' })).toString('base64url');
+    const payload = Buffer.from(JSON.stringify({ iat: now - 60, exp: now + 600, iss: appId })).toString('base64url');
+    const signature = crypto.sign('sha256', Buffer.from(`${header}.${payload}`), privateKey).toString('base64url');
+    return `${header}.${payload}.${signature}`;
+}
+async function githubGet(path, jwt) {
+    const res = await fetch(`${GITHUB_API}${path}`, {
+        headers: { Authorization: `Bearer ${jwt}`, Accept: 'application/vnd.github+json' },
+    });
+    const data = await res.json();
+    return { ok: res.ok, status: res.status, data };
+}
+/**
+ * Verify GitHub App connectivity: authenticate as the app, then check the installation exists.
+ */
+export async function verifyAppConnectivity(appId, privateKey, installationId) {
+    const jwt = createAppJWT(appId, privateKey);
+    const appRes = await githubGet('/app', jwt);
+    if (!appRes.ok) {
+        return { ok: false, error: `GET /app failed (${appRes.status}): ${appRes.data?.message ?? 'unknown error'}` };
+    }
+    const installRes = await githubGet(`/app/installations/${installationId}`, jwt);
+    if (!installRes.ok) {
+        return { ok: false, error: `Installation ${installationId} not found (${installRes.status}): ${installRes.data?.message ?? 'unknown error'}` };
+    }
+    return {
+        ok: true,
+        appName: appRes.data.name,
+        orgName: installRes.data.account?.login,
+    };
+}
+/**
+ * Map fleet access levels to GitHub App installation token permissions.
+ */
+export function mapAccessLevel(level) {
+    const levels = {
+        read: { contents: 'read', metadata: 'read' },
+        push: { contents: 'write', metadata: 'read' },
+        admin: { contents: 'write', administration: 'write', actions: 'write', metadata: 'read' },
+        issues: { issues: 'write', pull_requests: 'write', metadata: 'read' },
+        full: { contents: 'write', administration: 'write', issues: 'write', pull_requests: 'write', actions: 'write', metadata: 'read' },
+    };
+    return levels[level] ?? levels.read;
+}
+/**
+ * Mint a scoped, short-lived installation access token.
+ */
+export async function mintGitToken(appId, privateKey, installationId, repos, permissions) {
+    const jwt = createAppJWT(appId, privateKey);
+    if (repos.some(r => r !== '*' && !/^[\w.-]+\/[\w.-]+$/.test(r))) {
+        throw new Error('Invalid repo name format');
+    }
+    // repos are "owner/name" — GitHub API wants just the name part
+    const repoNames = repos.filter(r => r !== '*').map(r => r.split('/').pop());
+    const body = { permissions };
+    if (repoNames.length > 0) {
+        body.repositories = repoNames;
+    }
+    const res = await fetch(`${GITHUB_API}/app/installations/${installationId}/access_tokens`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${jwt}`,
+            Accept: 'application/vnd.github+json',
+            'Content-Type': 'application/json',
+        },
+        body: JSON.stringify(body),
+    });
+    const data = await res.json();
+    if (!res.ok) {
+        throw new Error(`Token mint failed (${res.status}): ${data?.message ?? 'unknown error'}`);
+    }
+    return { token: data.token, expiresAt: data.expires_at };
+}
+//# sourceMappingURL=github-app.js.map

package/dist/services/github-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-app.js","sourceRoot":"","sources":["../../src/services/github-app.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAE5C;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,UAAkB;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/G,OAAO,GAAG,MAAM,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,GAAW;IAChD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,GAAG,IAAI,EAAE,EAAE;QAC9C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE;KACnF,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAa,EACb,UAAkB,EAClB,cAAsB;IAEtB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAE5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;IAChH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,sBAAsB,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAChF,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,cAAc,eAAe,UAAU,CAAC,MAAM,MAAM,UAAU,CAAC,IAAI,EAAE,OAAO,IAAI,eAAe,EAAE,EAAE,CAAC;IACjJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;QACzB,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK;KACxC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,MAAM,GAA2C;QACrD,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;QAC5C,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;QAC7C,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;QACzF,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;QACrE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE;KAClI,CAAC;IACF,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAa,EACb,UAAkB,EAClB,cAAsB,EACtB,KAAe,EACf,WAAmC;IAEnC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAE5C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,+DAA+D;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC,CAAC;IAE7E,MAAM,IAAI,GAA4B,EAAE,WAAW,EAAE,CAAC;IACtD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;IAChC,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,UAAU,sBAAsB,cAAc,gBAAgB,EAAE;QACzF,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,GAAG,EAAE;YAC9B,MAAM,EAAE,6BAA6B;YACrC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AAC3D,CAAC"}

package/dist/services/icons.d.ts

@@ -0,0 +1,16 @@
+export declare const DEFAULT_ICON = "\u26AA";
+/** Resolve a named icon to its emoji, or return the input if already emoji. */
+export declare function resolveIcon(input: string): string;
+/**
+ * Pick the first unused icon from the pool.
+ * If all are taken, append a number suffix (e.g., "🔵2").
+ */
+export declare function assignIcon(existingIcons: string[]): string;
+/**
+ * Check if an icon string is valid: must be in the pool, match the overflow
+ * pattern (emoji + digits), or contain at least one character in the emoji
+ * Unicode range (codepoint >= 0x1F000). Rejects ASCII-only strings and
+ * control characters.
+ */
+export declare function isValidIcon(icon: string): boolean;
+//# sourceMappingURL=icons.d.ts.map

package/dist/services/icons.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"icons.d.ts","sourceRoot":"","sources":["../../src/services/icons.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,YAAY,WAAM,CAAC;AAahC,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,CAe1D;AAKD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAUjD"}

package/dist/services/icons.js

@@ -0,0 +1,67 @@
+// 8 colors × 2 shapes (circle + square) = 16 icons
+// Circles assigned first (primary), squares second (for pairing)
+const ICON_POOL = [
+    '🔵', '🟢', '🔴', '🟡', '🟣', '🟠', '🟤', '⚫', // circles
+    '🟦', '🟩', '🟥', '🟨', '🟪', '🟧', '🟫', '⬛', // squares
+];
+export const DEFAULT_ICON = '⚪';
+// Named aliases so callers don't need to type emoji
+// Pattern: {color}-{shape} — consistent 8 colors × 2 shapes
+const ICON_NAMES = {
+    'blue-circle': '🔵', 'green-circle': '🟢', 'red-circle': '🔴',
+    'yellow-circle': '🟡', 'purple-circle': '🟣', 'orange-circle': '🟠',
+    'brown-circle': '🟤', 'black-circle': '⚫',
+    'blue-square': '🟦', 'green-square': '🟩', 'red-square': '🟥',
+    'yellow-square': '🟨', 'purple-square': '🟪', 'orange-square': '🟧',
+    'brown-square': '🟫', 'black-square': '⬛',
+};
+/** Resolve a named icon to its emoji, or return the input if already emoji. */
+export function resolveIcon(input) {
+    return ICON_NAMES[input.toLowerCase()] ?? input;
+}
+/**
+ * Pick the first unused icon from the pool.
+ * If all are taken, append a number suffix (e.g., "🔵2").
+ */
+export function assignIcon(existingIcons) {
+    const used = new Set(existingIcons);
+    for (const icon of ICON_POOL) {
+        if (!used.has(icon))
+            return icon;
+    }
+    // All base icons taken — append a number suffix
+    // Safety cap at 99 to avoid unbounded loop
+    for (let n = 2; n <= 99; n++) {
+        for (const icon of ICON_POOL) {
+            const candidate = `${icon}${n}`;
+            if (!used.has(candidate))
+                return candidate;
+        }
+    }
+    // Extremely unlikely: all 16 * 98 suffixed slots taken, just return last candidate
+    return `${ICON_POOL[0]}100`;
+}
+// Pattern for overflow icons: emoji + digits (e.g., "🔵2", "🔵100")
+const OVERFLOW_PATTERN = /^.{1,2}\d+$/u;
+/**
+ * Check if an icon string is valid: must be in the pool, match the overflow
+ * pattern (emoji + digits), or contain at least one character in the emoji
+ * Unicode range (codepoint >= 0x1F000). Rejects ASCII-only strings and
+ * control characters.
+ */
+export function isValidIcon(icon) {
+    if (!icon || icon.length > 8)
+        return false;
+    if (ICON_POOL.includes(icon))
+        return true;
+    if (OVERFLOW_PATTERN.test(icon))
+        return true;
+    // Must contain at least one emoji-range character (U+1F000+)
+    for (const ch of icon) {
+        const cp = ch.codePointAt(0);
+        if (cp >= 0x1F000)
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=icons.js.map

package/dist/services/icons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"icons.js","sourceRoot":"","sources":["../../src/services/icons.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,iEAAiE;AACjE,MAAM,SAAS,GAAG;IAChB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAG,UAAU;IAC1D,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAG,UAAU;CAC3D,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAEhC,oDAAoD;AACpD,4DAA4D;AAC5D,MAAM,UAAU,GAA2B;IACzC,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;IAC7D,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI;IACnE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG;IACzC,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;IAC7D,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI;IACnE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG;CAC1C,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,aAAuB;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACnC,CAAC;IACD,gDAAgD;IAChD,2CAA2C;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,mFAAmF;IACnF,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9B,CAAC;AAED,oEAAoE;AACpE,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAExC;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,6DAA6D;IAC7D,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QAC9B,IAAI,EAAE,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/services/known-hosts.d.ts

@@ -0,0 +1,23 @@
+export declare class HostKeyMismatchError extends Error {
+    readonly host: string;
+    readonly port: number;
+    readonly oldFingerprint: string;
+    readonly newFingerprint: string;
+    constructor(host: string, port: number, oldFingerprint: string, newFingerprint: string);
+}
+/**
+ * Verify a host key using Trust-On-First-Use (TOFU).
+ * - First connection: stores the fingerprint and returns true
+ * - Matching fingerprint: returns true
+ * - Mismatched fingerprint: throws HostKeyMismatchError
+ */
+export declare function verifyHostKey(host: string, port: number, key: Buffer): boolean;
+/**
+ * Replace a known host fingerprint (used after user accepts a new key).
+ */
+export declare function replaceKnownHost(host: string, port: number, newFp: string): void;
+/**
+ * Remove a known host entry.
+ */
+export declare function removeKnownHost(host: string, port: number): void;
+//# sourceMappingURL=known-hosts.d.ts.map

package/dist/services/known-hosts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"known-hosts.d.ts","sourceRoot":"","sources":["../../src/services/known-hosts.ts"],"names":[],"mappings":"AAOA,qBAAa,oBAAqB,SAAQ,KAAK;aAE3B,IAAI,EAAE,MAAM;aACZ,IAAI,EAAE,MAAM;aACZ,cAAc,EAAE,MAAM;aACtB,cAAc,EAAE,MAAM;gBAHtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,MAAM;CAUzC;AA+BD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAkB9E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAIhF;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAIhE"}

package/dist/services/known-hosts.js

@@ -0,0 +1,86 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { enforceOwnerOnly } from '../utils/file-permissions.js';
+import { FLEET_DIR } from '../paths.js';
+const KNOWN_HOSTS_PATH = path.join(FLEET_DIR, 'known_hosts');
+export class HostKeyMismatchError extends Error {
+    host;
+    port;
+    oldFingerprint;
+    newFingerprint;
+    constructor(host, port, oldFingerprint, newFingerprint) {
+        super(`SSH HOST KEY MISMATCH for ${host}:${port}! ` +
+            `Expected ${oldFingerprint}, got ${newFingerprint}. ` +
+            `This could indicate a server reinstall or a man-in-the-middle attack. ` +
+            `Delete the entry from ~/.apra-fleet/data/known_hosts to accept the new key.`);
+        this.host = host;
+        this.port = port;
+        this.oldFingerprint = oldFingerprint;
+        this.newFingerprint = newFingerprint;
+        this.name = 'HostKeyMismatchError';
+    }
+}
+function hostKey(host, port) {
+    return `${host}:${port}`;
+}
+function fingerprint(key) {
+    return 'sha256:' + crypto.createHash('sha256').update(key).digest('base64');
+}
+function loadKnownHosts() {
+    try {
+        if (fs.existsSync(KNOWN_HOSTS_PATH)) {
+            return JSON.parse(fs.readFileSync(KNOWN_HOSTS_PATH, 'utf-8'));
+        }
+    }
+    catch {
+        // Corrupted file — start fresh
+    }
+    return {};
+}
+function saveKnownHosts(store) {
+    if (!fs.existsSync(FLEET_DIR)) {
+        fs.mkdirSync(FLEET_DIR, { recursive: true, mode: 0o700 });
+    }
+    fs.writeFileSync(KNOWN_HOSTS_PATH, JSON.stringify(store, null, 2), { mode: 0o600 });
+    enforceOwnerOnly(KNOWN_HOSTS_PATH);
+}
+/**
+ * Verify a host key using Trust-On-First-Use (TOFU).
+ * - First connection: stores the fingerprint and returns true
+ * - Matching fingerprint: returns true
+ * - Mismatched fingerprint: throws HostKeyMismatchError
+ */
+export function verifyHostKey(host, port, key) {
+    const store = loadKnownHosts();
+    const hk = hostKey(host, port);
+    const fp = fingerprint(key);
+    const stored = store[hk];
+    if (!stored) {
+        // TOFU: first connection — trust and save
+        store[hk] = fp;
+        saveKnownHosts(store);
+        return true;
+    }
+    if (stored === fp) {
+        return true;
+    }
+    throw new HostKeyMismatchError(host, port, stored, fp);
+}
+/**
+ * Replace a known host fingerprint (used after user accepts a new key).
+ */
+export function replaceKnownHost(host, port, newFp) {
+    const store = loadKnownHosts();
+    store[hostKey(host, port)] = newFp;
+    saveKnownHosts(store);
+}
+/**
+ * Remove a known host entry.
+ */
+export function removeKnownHost(host, port) {
+    const store = loadKnownHosts();
+    delete store[hostKey(host, port)];
+    saveKnownHosts(store);
+}
+//# sourceMappingURL=known-hosts.js.map

package/dist/services/known-hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"known-hosts.js","sourceRoot":"","sources":["../../src/services/known-hosts.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;AAE7D,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAE3B;IACA;IACA;IACA;IAJlB,YACkB,IAAY,EACZ,IAAY,EACZ,cAAsB,EACtB,cAAsB;QAEtC,KAAK,CACH,6BAA6B,IAAI,IAAI,IAAI,IAAI;YAC7C,YAAY,cAAc,SAAS,cAAc,IAAI;YACrD,wEAAwE;YACxE,6EAA6E,CAC9E,CAAC;QAVc,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;QACZ,mBAAc,GAAd,cAAc,CAAQ;QACtB,mBAAc,GAAd,cAAc,CAAQ;QAQtC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAID,SAAS,OAAO,CAAC,IAAY,EAAE,IAAY;IACzC,OAAO,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+BAA+B;IACjC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,KAAsB;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,EAAE,CAAC,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW;IACnE,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAE5B,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,0CAA0C;QAC1C,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY,EAAE,KAAa;IACxE,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;IACnC,cAAc,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAClC,cAAc,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC"}

package/dist/services/onboarding.d.ts

@@ -0,0 +1,68 @@
+import type { OnboardingState } from '../types.js';
+export declare let welcomeBackShownThisSession: boolean;
+/**
+ * Load onboarding state from disk into the in-memory singleton.
+ * Call once at server startup. Missing file = fresh install (all false).
+ * If the registry already has members but no onboarding file, this is an
+ * upgrade: pre-set bannerShown=true so existing users don't see the banner.
+ */
+export declare function loadOnboardingState(existingMemberCount?: number): OnboardingState;
+/**
+ * Persist the current in-memory state to disk atomically (temp write + rename).
+ */
+export declare function saveOnboardingState(): void;
+/**
+ * Get the current in-memory state. Loads from disk if not yet loaded (fallback for tests).
+ */
+export declare function getOnboardingState(): OnboardingState;
+/**
+ * Returns true if the milestone has NOT yet been shown (i.e., it should be shown now).
+ */
+export declare function shouldShow(key: keyof OnboardingState): boolean;
+/**
+ * Mark a milestone as reached. Updates in-memory state and persists to disk immediately.
+ */
+export declare function advanceMilestone(key: keyof OnboardingState): void;
+/**
+ * Reset session-level runtime flags. Call at server startup after loadOnboardingState().
+ */
+export declare function resetSessionFlags(): void;
+/**
+ * Mark welcome-back as shown for this server session.
+ */
+export declare function markWelcomeBackShown(): void;
+/**
+ * Returns true if this tool should be able to consume onboarding preambles.
+ * Passive tools (version, shutdown_server) should never consume the banner.
+ */
+export declare function isActiveTool(toolName: string): boolean;
+/**
+ * Returns true if the tool response is JSON-formatted (starts with `{` or `[`).
+ * Used by wrapTool to skip prepending onboarding text to structured data responses.
+ * Covers: fleet_status, list_members, member_detail, monitor_task.
+ */
+export declare function isJsonResponse(result: string): boolean;
+/**
+ * Returns the first-run banner + getting started guide if this is the first tool
+ * call after a fresh install. Marks bannerShown and persists immediately so a
+ * server crash won't re-show the banner.
+ * Returns null if the banner has already been shown.
+ */
+export declare function getFirstRunPreamble(): string | null;
+/**
+ * Post-tool contextual nudge. Called by wrapTool after every tool invocation.
+ * Uses input.member_type directly — no response string parsing for type.
+ * Each nudge fires at most once (milestone flag prevents repeat).
+ */
+export declare function getOnboardingNudge(toolName: string, input: any, result: string): string | null;
+/**
+ * Welcome-back preamble for non-first-run server starts.
+ * Shown once per server lifecycle (session flag prevents repeat).
+ * Returns null if this is the first run (banner not yet shown) or already shown this session.
+ */
+export declare function getWelcomeBackPreamble(): string | null;
+/**
+ * Reset module state — used in tests only.
+ */
+export declare function _resetForTest(): void;
+//# sourceMappingURL=onboarding.d.ts.map

package/dist/services/onboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../src/services/onboarding.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA2BnD,eAAO,IAAI,2BAA2B,SAAQ,CAAC;AAQ/C;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,mBAAmB,SAAI,GAAG,eAAe,CAyB5E;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAQ1C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,eAAe,CAGpD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,eAAe,GAAG,OAAO,CAE9D;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,eAAe,GAAG,IAAI,CAKjE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAExC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,IAAI,CAKnD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqB9F;AAkBD;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,IAAI,CAQtD;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,IAAI,CAGpC"}

package/dist/services/onboarding.js

@@ -0,0 +1,205 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { FLEET_DIR } from '../paths.js';
+import { enforceOwnerOnly } from '../utils/file-permissions.js';
+import { BANNER, GETTING_STARTED_GUIDE, WELCOME_BACK, NUDGE_AFTER_FIRST_REGISTER, NUDGE_AFTER_FIRST_PROMPT, NUDGE_AFTER_MULTI_MEMBER } from '../onboarding/text.js';
+import { getAllAgents } from './registry.js';
+const ONBOARDING_PATH = path.join(FLEET_DIR, 'onboarding.json');
+/**
+ * Tools that should NOT consume the onboarding banner or welcome-back preamble.
+ * These are diagnostic/administrative tools that may be called automatically
+ * by the client before the user's first meaningful interaction.
+ */
+const PASSIVE_TOOLS = new Set(['version', 'shutdown_server']);
+const DEFAULT_STATE = {
+    bannerShown: false,
+    firstMemberRegistered: false,
+    firstPromptExecuted: false,
+    multiMemberNudgeShown: false,
+};
+// In-memory singleton — loaded once at server start.
+// All reads use this copy; JS event loop serializes access (no concurrent-read races).
+let _state = null;
+// Runtime-only flag — not persisted to disk.
+export let welcomeBackShownThisSession = false;
+function ensureFleetDir() {
+    if (!fs.existsSync(FLEET_DIR)) {
+        fs.mkdirSync(FLEET_DIR, { recursive: true, mode: 0o700 });
+    }
+}
+/**
+ * Load onboarding state from disk into the in-memory singleton.
+ * Call once at server startup. Missing file = fresh install (all false).
+ * If the registry already has members but no onboarding file, this is an
+ * upgrade: pre-set bannerShown=true so existing users don't see the banner.
+ */
+export function loadOnboardingState(existingMemberCount = 0) {
+    ensureFleetDir();
+    if (!fs.existsSync(ONBOARDING_PATH)) {
+        const state = { ...DEFAULT_STATE };
+        if (existingMemberCount > 0) {
+            // Upgrade path: existing registry, no onboarding file → skip banner
+            state.bannerShown = true;
+        }
+        _state = state;
+        return _state;
+    }
+    try {
+        const raw = fs.readFileSync(ONBOARDING_PATH, 'utf-8');
+        const parsed = JSON.parse(raw);
+        // Merge with defaults so new fields added in future upgrades get falsy defaults
+        _state = { ...DEFAULT_STATE, ...parsed };
+    }
+    catch {
+        // Corrupted file → treat as fresh install, log warning
+        process.stderr.write('[apra-fleet] Warning: onboarding.json is corrupted; resetting to defaults.\n');
+        _state = { ...DEFAULT_STATE };
+    }
+    return _state;
+}
+/**
+ * Persist the current in-memory state to disk atomically (temp write + rename).
+ */
+export function saveOnboardingState() {
+    if (_state === null)
+        return;
+    ensureFleetDir();
+    const tmp = ONBOARDING_PATH + '.tmp';
+    fs.writeFileSync(tmp, JSON.stringify(_state, null, 2), { mode: 0o600 });
+    fs.renameSync(tmp, ONBOARDING_PATH);
+    enforceOwnerOnly(ONBOARDING_PATH);
+}
+/**
+ * Get the current in-memory state. Loads from disk if not yet loaded (fallback for tests).
+ */
+export function getOnboardingState() {
+    if (_state === null)
+        loadOnboardingState();
+    return _state;
+}
+/**
+ * Returns true if the milestone has NOT yet been shown (i.e., it should be shown now).
+ */
+export function shouldShow(key) {
+    return !getOnboardingState()[key];
+}
+/**
+ * Mark a milestone as reached. Updates in-memory state and persists to disk immediately.
+ */
+export function advanceMilestone(key) {
+    const state = getOnboardingState();
+    if (state[key])
+        return; // Already advanced — no-op
+    state[key] = true;
+    saveOnboardingState();
+}
+/**
+ * Reset session-level runtime flags. Call at server startup after loadOnboardingState().
+ */
+export function resetSessionFlags() {
+    welcomeBackShownThisSession = false;
+}
+/**
+ * Mark welcome-back as shown for this server session.
+ */
+export function markWelcomeBackShown() {
+    welcomeBackShownThisSession = true;
+}
+/**
+ * Returns true if this tool should be able to consume onboarding preambles.
+ * Passive tools (version, shutdown_server) should never consume the banner.
+ */
+export function isActiveTool(toolName) {
+    return !PASSIVE_TOOLS.has(toolName);
+}
+/**
+ * Returns true if the tool response is JSON-formatted (starts with `{` or `[`).
+ * Used by wrapTool to skip prepending onboarding text to structured data responses.
+ * Covers: fleet_status, list_members, member_detail, monitor_task.
+ */
+export function isJsonResponse(result) {
+    return result.startsWith('{') || result.startsWith('[');
+}
+/**
+ * Returns the first-run banner + getting started guide if this is the first tool
+ * call after a fresh install. Marks bannerShown and persists immediately so a
+ * server crash won't re-show the banner.
+ * Returns null if the banner has already been shown.
+ */
+export function getFirstRunPreamble() {
+    const state = getOnboardingState();
+    if (state.bannerShown)
+        return null;
+    advanceMilestone('bannerShown');
+    return BANNER + '\n' + GETTING_STARTED_GUIDE;
+}
+/**
+ * Post-tool contextual nudge. Called by wrapTool after every tool invocation.
+ * Uses input.member_type directly — no response string parsing for type.
+ * Each nudge fires at most once (milestone flag prevents repeat).
+ */
+export function getOnboardingNudge(toolName, input, result) {
+    if (toolName === 'register_member' && result.startsWith('✅')) {
+        if (shouldShow('firstMemberRegistered')) {
+            advanceMilestone('firstMemberRegistered');
+            return NUDGE_AFTER_FIRST_REGISTER(input.member_type, input.friendly_name);
+        }
+        if (shouldShow('multiMemberNudgeShown')) {
+            const agents = getAllAgents();
+            if (agents.length >= 2) {
+                advanceMilestone('multiMemberNudgeShown');
+                return NUDGE_AFTER_MULTI_MEMBER();
+            }
+        }
+    }
+    if (toolName === 'execute_prompt' && result.startsWith('📋')) {
+        if (shouldShow('firstPromptExecuted')) {
+            advanceMilestone('firstPromptExecuted');
+            return NUDGE_AFTER_FIRST_PROMPT();
+        }
+    }
+    return null;
+}
+function formatLastActive(agents) {
+    const times = agents
+        .map(a => a.lastUsed)
+        .filter((t) => Boolean(t))
+        .map(t => new Date(t).getTime())
+        .filter(t => !isNaN(t)); // guard against malformed date strings
+    if (times.length === 0)
+        return 'unknown';
+    const diff = Date.now() - Math.max(...times);
+    const minutes = Math.floor(diff / 60000);
+    if (minutes < 1)
+        return 'just now';
+    if (minutes < 60)
+        return `${minutes}m ago`;
+    const hours = Math.floor(minutes / 60);
+    if (hours < 24)
+        return `${hours}h ago`;
+    return `${Math.floor(hours / 24)}d ago`;
+}
+/**
+ * Welcome-back preamble for non-first-run server starts.
+ * Shown once per server lifecycle (session flag prevents repeat).
+ * Returns null if this is the first run (banner not yet shown) or already shown this session.
+ */
+export function getWelcomeBackPreamble() {
+    const state = getOnboardingState();
+    if (!state.bannerShown)
+        return null; // first run — banner will handle it
+    if (welcomeBackShownThisSession)
+        return null;
+    markWelcomeBackShown();
+    const agents = getAllAgents();
+    const lastActive = formatLastActive(agents);
+    return WELCOME_BACK(agents.length, lastActive);
+}
+/**
+ * Reset module state — used in tests only.
+ */
+export function _resetForTest() {
+    _state = null;
+    welcomeBackShownThisSession = false;
+}
+//# sourceMappingURL=onboarding.js.map

package/dist/services/onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../src/services/onboarding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,YAAY,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACpK,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAE9D,MAAM,aAAa,GAAoB;IACrC,WAAW,EAAE,KAAK;IAClB,qBAAqB,EAAE,KAAK;IAC5B,mBAAmB,EAAE,KAAK;IAC1B,qBAAqB,EAAE,KAAK;CAC7B,CAAC;AAEF,qDAAqD;AACrD,uFAAuF;AACvF,IAAI,MAAM,GAA2B,IAAI,CAAC;AAE1C,6CAA6C;AAC7C,MAAM,CAAC,IAAI,2BAA2B,GAAG,KAAK,CAAC;AAE/C,SAAS,cAAc;IACrB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,mBAAmB,GAAG,CAAC;IACzD,cAAc,EAAE,CAAC;IAEjB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAoB,EAAE,GAAG,aAAa,EAAE,CAAC;QACpD,IAAI,mBAAmB,GAAG,CAAC,EAAE,CAAC;YAC5B,oEAAoE;YACpE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,MAAM,GAAG,KAAK,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC;QAC3D,gFAAgF;QAChF,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,MAAM,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;QACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;QACrG,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;IAChC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO;IAC5B,cAAc,EAAE,CAAC;IAEjB,MAAM,GAAG,GAAG,eAAe,GAAG,MAAM,CAAC;IACrC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACpC,gBAAgB,CAAC,eAAe,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,MAAM,KAAK,IAAI;QAAE,mBAAmB,EAAE,CAAC;IAC3C,OAAO,MAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAA0B;IACnD,OAAO,CAAC,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAA0B;IACzD,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,2BAA2B;IACnD,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAClB,mBAAmB,EAAE,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,2BAA2B,GAAG,KAAK,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,2BAA2B,GAAG,IAAI,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACnC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAChC,OAAO,MAAM,GAAG,IAAI,GAAG,qBAAqB,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,KAAU,EAAE,MAAc;IAC7E,IAAI,QAAQ,KAAK,iBAAiB,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,IAAI,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACxC,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;YAC1C,OAAO,0BAA0B,CAAC,KAAK,CAAC,WAAqB,EAAE,KAAK,CAAC,aAAuB,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACvB,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;gBAC1C,OAAO,wBAAwB,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,KAAK,gBAAgB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,IAAI,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACtC,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;YACxC,OAAO,wBAAwB,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA+B;IACvD,MAAM,KAAK,GAAG,MAAM;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uCAAuC;IAClE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IACnC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,GAAG,OAAO,OAAO,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,GAAG,KAAK,OAAO,CAAC;IACvC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,CAAC,oCAAoC;IACzE,IAAI,2BAA2B;QAAE,OAAO,IAAI,CAAC;IAC7C,oBAAoB,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,IAAI,CAAC;IACd,2BAA2B,GAAG,KAAK,CAAC;AACtC,CAAC"}

package/dist/services/registry.d.ts

@@ -0,0 +1,16 @@
+import type { Agent } from '../types.js';
+export declare function getAllAgents(): Agent[];
+export declare function getAgent(id: string): Agent | undefined;
+export declare function findAgentByName(name: string): Agent | undefined;
+export declare function addAgent(agent: Agent): void;
+export declare function updateAgent(id: string, updates: Partial<Agent>): Agent | undefined;
+export declare function removeAgent(id: string): boolean;
+export declare function getKeysDir(): string;
+/**
+ * Check if another agent already uses the same folder on the same device.
+ * - Local agents: match any existing local agent with the same normalized folder.
+ * - Remote agents: match any existing remote agent with the same host + port + normalized folder.
+ * Returns true if a duplicate exists.
+ */
+export declare function hasDuplicateFolder(agentType: 'local' | 'remote', folder: string, host?: string, port?: number, excludeId?: string): boolean;
+//# sourceMappingURL=registry.d.ts.map

package/dist/services/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/services/registry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAiB,MAAM,aAAa,CAAC;AAuFxD,wBAAgB,YAAY,IAAI,KAAK,EAAE,CAEtC;AAED,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAEtD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAI/D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAI3C;AAED,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,SAAS,CAOlF;AAED,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAO/C;AAED,wBAAgB,UAAU,IAAI,MAAM,CAGnC;AAiBD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,OAAO,GAAG,QAAQ,EAC7B,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAmBT"}