@apralabs/apra-fleet 0.2.2

package/dist/services/update-check.js

@@ -0,0 +1,67 @@
+import { serverVersion } from '../version.js';
+let cachedUpdate = null;
+/** Parse "vX.Y.Z[.W]" or "vX.Y.Z_hash" into numeric parts. Returns null on parse failure. */
+export function parseVersion(v) {
+    const clean = v.replace(/^v/, '').split('_')[0];
+    const parts = clean.split('.').map(Number);
+    if (parts.length < 3 || parts.some(n => isNaN(n)))
+        return null;
+    return parts;
+}
+export function isNewer(candidate, current) {
+    const c = parseVersion(candidate);
+    const i = parseVersion(current);
+    if (!c || !i)
+        return false;
+    const len = Math.max(c.length, i.length);
+    for (let idx = 0; idx < len; idx++) {
+        const cv = c[idx] ?? 0;
+        const iv = i[idx] ?? 0;
+        if (cv !== iv)
+            return cv > iv;
+    }
+    return false;
+}
+/** Fire-and-forget: fetch latest release from GitHub and cache if newer. Never throws. */
+export async function checkForUpdate() {
+    try {
+        const controller = new AbortController();
+        const tid = setTimeout(() => controller.abort(), 5000);
+        let res;
+        try {
+            res = await fetch('https://api.github.com/repos/Apra-Labs/apra-fleet/releases/latest', {
+                signal: controller.signal,
+                headers: { 'User-Agent': `apra-fleet/${serverVersion}` },
+            });
+        }
+        finally {
+            clearTimeout(tid);
+        }
+        if (!res.ok)
+            return;
+        const data = await res.json();
+        const tagName = data.tag_name;
+        if (!tagName || /-(alpha|beta|rc)\b/i.test(tagName))
+            return;
+        const installed = serverVersion.split('_')[0];
+        if (isNewer(tagName, installed)) {
+            const latest = tagName.startsWith('v') ? tagName : `v${tagName}`;
+            cachedUpdate = { latest, installed };
+        }
+    }
+    catch {
+        // Network failure is silent
+    }
+}
+/** Returns a one-line update notice if a newer release is available, null otherwise. */
+export function getUpdateNotice() {
+    if (!cachedUpdate)
+        return null;
+    const { latest, installed } = cachedUpdate;
+    return `ℹ️ apra-fleet ${latest} is available (installed: ${installed}). Run \`apra-fleet update\` to update.`;
+}
+/** Inject a cached update directly (test helper). */
+export function _setUpdateCache(update) {
+    cachedUpdate = update;
+}
+//# sourceMappingURL=update-check.js.map

package/dist/services/update-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-check.js","sourceRoot":"","sources":["../../src/services/update-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAO9C,IAAI,YAAY,GAAsB,IAAI,CAAC;AAE3C,6FAA6F;AAC7F,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,SAAiB,EAAE,OAAe;IACxD,MAAM,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;QACnC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,mEAAmE,EAAE;gBACrF,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE,EAAE,YAAY,EAAE,cAAc,aAAa,EAAE,EAAE;aACzD,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO;QAEpB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA2B,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO;QAE5D,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;YACjE,YAAY,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,eAAe;IAC7B,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC;IAC3C,OAAO,iBAAiB,MAAM,6BAA6B,SAAS,yCAAyC,CAAC;AAChH,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,eAAe,CAAC,MAAyB;IACvD,YAAY,GAAG,MAAM,CAAC;AACxB,CAAC"}

package/dist/services/user-config.d.ts

@@ -0,0 +1,12 @@
+import type { LlmProvider } from '../types.js';
+export type ModelTier = 'cheap' | 'standard' | 'premium';
+export interface UserConfig {
+    providers?: Partial<Record<LlmProvider, {
+        modelMapping?: Partial<Record<ModelTier, string>>;
+    }>>;
+}
+export declare function loadUserConfig(): UserConfig;
+export declare function getModelOverride(provider: LlmProvider, tier: ModelTier): string | undefined;
+/** Reset the cached config -- for testing only. */
+export declare function _resetCache(): void;
+//# sourceMappingURL=user-config.d.ts.map

package/dist/services/user-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-config.d.ts","sourceRoot":"","sources":["../../src/services/user-config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;AAEzD,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;QACtC,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;KACnD,CAAC,CAAC,CAAC;CACL;AAOD,wBAAgB,cAAc,IAAI,UAAU,CA+D3C;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAG3F;AAED,mDAAmD;AACnD,wBAAgB,WAAW,IAAI,IAAI,CAElC"}

package/dist/services/user-config.js

@@ -0,0 +1,73 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { FLEET_DIR } from '../paths.js';
+const VALID_PROVIDERS = new Set(['claude', 'gemini', 'codex', 'copilot', 'agy']);
+const VALID_TIERS = new Set(['cheap', 'standard', 'premium']);
+let cached;
+export function loadUserConfig() {
+    if (cached !== undefined)
+        return cached;
+    const configPath = path.join(FLEET_DIR, 'config.json');
+    let raw;
+    try {
+        raw = fs.readFileSync(configPath, 'utf-8');
+    }
+    catch {
+        cached = {};
+        return cached;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        console.error('[fleet] user config malformed, ignoring');
+        cached = {};
+        return cached;
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+        console.error('[fleet] user config malformed, ignoring');
+        cached = {};
+        return cached;
+    }
+    const obj = parsed;
+    const result = {};
+    if (obj.providers && typeof obj.providers === 'object' && !Array.isArray(obj.providers)) {
+        const providers = obj.providers;
+        result.providers = {};
+        for (const [provKey, provVal] of Object.entries(providers)) {
+            if (!VALID_PROVIDERS.has(provKey)) {
+                console.error(`[fleet] user config: unknown provider "${provKey}", skipping`);
+                continue;
+            }
+            if (typeof provVal !== 'object' || provVal === null || Array.isArray(provVal))
+                continue;
+            const provObj = provVal;
+            if (provObj.modelMapping && typeof provObj.modelMapping === 'object' && !Array.isArray(provObj.modelMapping)) {
+                const mapping = provObj.modelMapping;
+                const validMapping = {};
+                for (const [tierKey, tierVal] of Object.entries(mapping)) {
+                    if (!VALID_TIERS.has(tierKey)) {
+                        console.error(`[fleet] user config: unknown tier "${tierKey}" in provider "${provKey}", skipping`);
+                        continue;
+                    }
+                    if (typeof tierVal === 'string') {
+                        validMapping[tierKey] = tierVal;
+                    }
+                }
+                result.providers[provKey] = { modelMapping: validMapping };
+            }
+        }
+    }
+    cached = result;
+    return cached;
+}
+export function getModelOverride(provider, tier) {
+    const config = loadUserConfig();
+    return config.providers?.[provider]?.modelMapping?.[tier];
+}
+/** Reset the cached config -- for testing only. */
+export function _resetCache() {
+    cached = undefined;
+}
+//# sourceMappingURL=user-config.js.map

package/dist/services/user-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-config.js","sourceRoot":"","sources":["../../src/services/user-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAWxC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;AACzF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAEtE,IAAI,MAA8B,CAAC;AAEnC,MAAM,UAAU,cAAc;IAC5B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACvD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzD,MAAM,GAAG,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzD,MAAM,GAAG,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,MAAM,GAAe,EAAE,CAAC;IAE9B,IAAI,GAAG,CAAC,SAAS,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACxF,MAAM,SAAS,GAAG,GAAG,CAAC,SAAoC,CAAC;QAC3D,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC;QAEtB,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,OAAO,CAAC,KAAK,CAAC,0CAA0C,OAAO,aAAa,CAAC,CAAC;gBAC9E,SAAS;YACX,CAAC;YACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,SAAS;YAExF,MAAM,OAAO,GAAG,OAAkC,CAAC;YACnD,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7G,MAAM,OAAO,GAAG,OAAO,CAAC,YAAuC,CAAC;gBAChE,MAAM,YAAY,GAAuC,EAAE,CAAC;gBAE5D,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC9B,OAAO,CAAC,KAAK,CAAC,sCAAsC,OAAO,kBAAkB,OAAO,aAAa,CAAC,CAAC;wBACnG,SAAS;oBACX,CAAC;oBACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;wBAChC,YAAY,CAAC,OAAoB,CAAC,GAAG,OAAO,CAAC;oBAC/C,CAAC;gBACH,CAAC;gBAEA,MAAM,CAAC,SAAmF,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;YACxI,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,GAAG,MAAM,CAAC;IAChB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAqB,EAAE,IAAe;IACrE,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,WAAW;IACzB,MAAM,GAAG,SAAS,CAAC;AACrB,CAAC"}

package/dist/services/vcs/azure-devops.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Azure DevOps VCS provider — deploys PAT credentials via git credential helper.
+ * Auth pattern: empty username + PAT as password (matches Azure DevOps docs).
+ */
+import type { VcsProviderService } from './types.js';
+export declare const azureDevOpsProvider: VcsProviderService;
+//# sourceMappingURL=azure-devops.d.ts.map

package/dist/services/vcs/azure-devops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure-devops.d.ts","sourceRoot":"","sources":["../../../src/services/vcs/azure-devops.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAA2C,MAAM,YAAY,CAAC;AAU9F,eAAO,MAAM,mBAAmB,EAAE,kBA2BjC,CAAC"}

package/dist/services/vcs/azure-devops.js

@@ -0,0 +1,38 @@
+/**
+ * Azure DevOps VCS provider — deploys PAT credentials via git credential helper.
+ * Auth pattern: empty username + PAT as password (matches Azure DevOps docs).
+ */
+const HOST = 'dev.azure.com';
+function extractOrg(orgUrl) {
+    // org_url is e.g. "https://dev.azure.com/myorg" — extract "myorg"
+    const match = orgUrl.match(/dev\.azure\.com\/([^/]+)/);
+    return match?.[1] ?? orgUrl;
+}
+export const azureDevOpsProvider = {
+    async deploy(_agent, cmds, exec, credentials, label, scopeUrl) {
+        const creds = credentials;
+        await exec(cmds.gitCredentialHelperWrite(HOST, '', creds.pat, label, scopeUrl));
+        return {
+            success: true,
+            message: 'Azure DevOps credentials deployed',
+            metadata: { org: extractOrg(creds.org_url) },
+        };
+    },
+    async revoke(_agent, cmds, exec, label, scopeUrl) {
+        await exec(cmds.gitCredentialHelperRemove(HOST, label, scopeUrl));
+        return { success: true, message: 'Azure DevOps credentials revoked' };
+    },
+    async testConnectivity(_agent, exec) {
+        // Use the Projects API as a lightweight connectivity check.
+        // The credential helper provides auth automatically for git operations,
+        // but for curl we rely on the deployed git credential being available.
+        try {
+            await exec(`curl -sf https://${HOST}/ -o /dev/null`);
+            return { success: true, message: 'Azure DevOps connectivity verified' };
+        }
+        catch {
+            return { success: false, message: 'Azure DevOps connectivity check failed' };
+        }
+    },
+};
+//# sourceMappingURL=azure-devops.js.map

package/dist/services/vcs/azure-devops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure-devops.js","sourceRoot":"","sources":["../../../src/services/vcs/azure-devops.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,IAAI,GAAG,eAAe,CAAC;AAE7B,SAAS,UAAU,CAAC,MAAc;IAChC,kEAAkE;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACvD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAuB;IACrD,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,KAAM,EAAE,QAAS;QAC7D,MAAM,KAAK,GAAG,WAAqC,CAAC;QACpD,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,mCAAmC;YAC5C,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;SAC7C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAM,EAAE,QAAS;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI;QACjC,4DAA4D;QAC5D,wEAAwE;QACxE,uEAAuE;QACvE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,oBAAoB,IAAI,gBAAgB,CAAC,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/services/vcs/bitbucket.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Bitbucket VCS provider — deploys API token credentials via git credential helper.
+ */
+import type { VcsProviderService } from './types.js';
+export declare const bitbucketProvider: VcsProviderService;
+//# sourceMappingURL=bitbucket.d.ts.map

package/dist/services/vcs/bitbucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitbucket.d.ts","sourceRoot":"","sources":["../../../src/services/vcs/bitbucket.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAyC,MAAM,YAAY,CAAC;AAI5F,eAAO,MAAM,iBAAiB,EAAE,kBA0B/B,CAAC"}

package/dist/services/vcs/bitbucket.js

@@ -0,0 +1,31 @@
+/**
+ * Bitbucket VCS provider — deploys API token credentials via git credential helper.
+ */
+const HOST = 'bitbucket.org';
+export const bitbucketProvider = {
+    async deploy(_agent, cmds, exec, credentials, label, scopeUrl) {
+        const creds = credentials;
+        await exec(cmds.gitCredentialHelperWrite(HOST, creds.email, creds.api_token, label, scopeUrl));
+        return {
+            success: true,
+            message: 'Bitbucket credentials deployed',
+            metadata: { workspace: creds.workspace, email: creds.email },
+        };
+    },
+    async revoke(_agent, cmds, exec, label, scopeUrl) {
+        await exec(cmds.gitCredentialHelperRemove(HOST, label, scopeUrl));
+        return { success: true, message: 'Bitbucket credentials revoked' };
+    },
+    async testConnectivity(_agent, exec) {
+        // We need the workspace from the credentials, but testConnectivity only gets the agent.
+        // Use a generic Bitbucket API check — the user endpoint works with any valid token.
+        try {
+            await exec('curl -sf https://api.bitbucket.org/2.0/user');
+            return { success: true, message: 'Bitbucket API connectivity verified' };
+        }
+        catch {
+            return { success: false, message: 'Bitbucket API connectivity check failed' };
+        }
+    },
+};
+//# sourceMappingURL=bitbucket.js.map

package/dist/services/vcs/bitbucket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitbucket.js","sourceRoot":"","sources":["../../../src/services/vcs/bitbucket.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,IAAI,GAAG,eAAe,CAAC;AAE7B,MAAM,CAAC,MAAM,iBAAiB,GAAuB;IACnD,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,KAAM,EAAE,QAAS;QAC7D,MAAM,KAAK,GAAG,WAAmC,CAAC;QAClD,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC/F,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,gCAAgC;YACzC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;SAC7D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAM,EAAE,QAAS;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI;QACjC,wFAAwF;QACxF,oFAAoF;QACpF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAC1D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;QAChF,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/services/vcs/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const PROVIDER_HOSTS: Record<string, string>;
+//# sourceMappingURL=constants.d.ts.map

package/dist/services/vcs/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/services/vcs/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAIjD,CAAC"}

package/dist/services/vcs/constants.js

@@ -0,0 +1,6 @@
+export const PROVIDER_HOSTS = {
+    'github': 'github.com',
+    'bitbucket': 'bitbucket.org',
+    'azure-devops': 'dev.azure.com',
+};
+//# sourceMappingURL=constants.js.map

package/dist/services/vcs/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/services/vcs/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAA2B;IACpD,QAAQ,EAAE,YAAY;IACtB,WAAW,EAAE,eAAe;IAC5B,cAAc,EAAE,eAAe;CAChC,CAAC"}

package/dist/services/vcs/github.d.ts

@@ -0,0 +1,6 @@
+/**
+ * GitHub VCS provider — supports GitHub App (short-lived token minting) and PAT modes.
+ */
+import type { VcsProviderService } from './types.js';
+export declare const githubProvider: VcsProviderService;
+//# sourceMappingURL=github.d.ts.map

package/dist/services/vcs/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../src/services/vcs/github.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAA4D,MAAM,YAAY,CAAC;AAwE/G,eAAO,MAAM,cAAc,EAAE,kBAwB5B,CAAC"}

package/dist/services/vcs/github.js

@@ -0,0 +1,81 @@
+/**
+ * GitHub VCS provider — supports GitHub App (short-lived token minting) and PAT modes.
+ */
+import { getGitHubApp } from '../git-config.js';
+import { loadPrivateKey, mapAccessLevel, mintGitToken } from '../github-app.js';
+const HOST = 'github.com';
+const USERNAME = 'x-access-token';
+async function deployAppToken(agent, cmds, exec, creds, label, scopeUrl) {
+    const ghApp = getGitHubApp();
+    if (!ghApp)
+        return { success: false, message: 'GitHub App not configured. Run setup_git_app first.' };
+    const accessLevel = creds.git_access ?? agent.gitAccess;
+    if (!accessLevel)
+        return { success: false, message: 'No git_access level specified and none on agent config.' };
+    const repos = creds.repos ?? agent.gitRepos;
+    if (!repos?.length)
+        return { success: false, message: 'No repos specified and none on agent config.' };
+    let privateKey;
+    try {
+        privateKey = loadPrivateKey(ghApp.privateKeyPath);
+    }
+    catch (err) {
+        return { success: false, message: `Failed to load GitHub App private key: ${err.message}` };
+    }
+    const permissions = mapAccessLevel(accessLevel);
+    let token, expiresAt;
+    try {
+        const result = await mintGitToken(ghApp.appId, privateKey, ghApp.installationId, repos, permissions);
+        token = result.token;
+        expiresAt = result.expiresAt;
+    }
+    catch (err) {
+        return { success: false, message: `Token mint failed: ${err.message}` };
+    }
+    await exec(cmds.gitCredentialHelperWrite(HOST, USERNAME, token, label, scopeUrl));
+    return {
+        success: true,
+        message: `GitHub App credentials deployed (expires ${expiresAt})`,
+        metadata: {
+            mode: 'github-app',
+            access: accessLevel,
+            repos: repos.join(', '),
+            token: token.substring(0, 4) + '****',
+            expiresAt,
+            permissions: JSON.stringify(permissions),
+        },
+    };
+}
+async function deployPat(cmds, exec, token, label, scopeUrl) {
+    await exec(cmds.gitCredentialHelperWrite(HOST, USERNAME, token, label, scopeUrl));
+    return {
+        success: true,
+        message: 'GitHub PAT credentials deployed',
+        metadata: { mode: 'pat', token: token.substring(0, 4) + '****' },
+    };
+}
+export const githubProvider = {
+    async deploy(agent, cmds, exec, credentials, label, scopeUrl) {
+        const creds = credentials;
+        return creds.type === 'github-app'
+            ? deployAppToken(agent, cmds, exec, creds, label, scopeUrl)
+            : deployPat(cmds, exec, creds.token, label, scopeUrl);
+    },
+    async revoke(_agent, cmds, exec, label, scopeUrl) {
+        await exec(cmds.gitCredentialHelperRemove(HOST, label, scopeUrl));
+        return { success: true, message: 'GitHub credentials revoked' };
+    },
+    async testConnectivity(agent, exec) {
+        const repo = agent.gitRepos?.find(r => r !== '*');
+        if (!repo)
+            return { success: true, message: 'Skipped (no specific repo to test)' };
+        try {
+            await exec(`git ls-remote https://github.com/${repo}.git HEAD`);
+            return { success: true, message: `git ls-remote ${repo} succeeded` };
+        }
+        catch {
+            return { success: false, message: `git ls-remote ${repo} failed` };
+        }
+    },
+};
+//# sourceMappingURL=github.js.map

package/dist/services/vcs/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../../src/services/vcs/github.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhF,MAAM,IAAI,GAAG,YAAY,CAAC;AAC1B,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAElC,KAAK,UAAU,cAAc,CAC3B,KAAY,EACZ,IAAgB,EAChB,IAAsC,EACtC,KAA2B,EAC3B,KAAc,EACd,QAAiB;IAEjB,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;IAEtG,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,CAAC;IACxD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;IAEhH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;IAEvG,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,0CAA0C,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IAC9F,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAChD,IAAI,KAAa,EAAE,SAAiB,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QACrG,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QACrB,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAElF,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,4CAA4C,SAAS,GAAG;QACjE,QAAQ,EAAE;YACR,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YACvB,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM;YACrC,SAAS;YACT,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SACzC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,IAAgB,EAChB,IAAsC,EACtC,KAAa,EACb,KAAc,EACd,QAAiB;IAEjB,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClF,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,EAAE;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAuB;IAChD,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,KAAM,EAAE,QAAS;QAC5D,MAAM,KAAK,GAAG,WAAgC,CAAC;QAC/C,OAAO,KAAK,CAAC,IAAI,KAAK,YAAY;YAChC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC;YAC3D,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAM,EAAE,QAAS;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;QAEnF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,oCAAoC,IAAI,WAAW,CAAC,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,IAAI,YAAY,EAAE,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,IAAI,SAAS,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/services/vcs/types.d.ts

@@ -0,0 +1,52 @@
+/**
+ * VCS provider types and service interface for multi-provider credential management.
+ *
+ * Supports GitHub (App + PAT), Bitbucket (API token), and Azure DevOps (PAT).
+ * Each agent supports a single VCS provider at a time.
+ */
+import type { Agent } from '../../types.js';
+import type { OsCommands } from '../../os/os-commands.js';
+export type VcsProvider = 'github' | 'bitbucket' | 'azure-devops';
+export interface GitHubAppCredentials {
+    type: 'github-app';
+    git_access?: Agent['gitAccess'];
+    repos?: string[];
+}
+export interface GitHubPatCredentials {
+    type: 'pat';
+    token: string;
+}
+export type GitHubCredentials = GitHubAppCredentials | GitHubPatCredentials;
+export interface BitbucketCredentials {
+    email: string;
+    api_token: string;
+    workspace: string;
+}
+export interface AzureDevOpsCredentials {
+    org_url: string;
+    pat: string;
+}
+export type VcsCredentials = {
+    provider: 'github';
+    credentials: GitHubCredentials;
+} | {
+    provider: 'bitbucket';
+    credentials: BitbucketCredentials;
+} | {
+    provider: 'azure-devops';
+    credentials: AzureDevOpsCredentials;
+};
+export interface VcsDeployResult {
+    success: boolean;
+    message: string;
+    metadata?: Record<string, string>;
+}
+export interface VcsProviderService {
+    /** Deploy credentials to the agent's filesystem and configure git credential helper. */
+    deploy(agent: Agent, cmds: OsCommands, exec: (cmd: string) => Promise<string>, credentials: unknown, label?: string, scopeUrl?: string): Promise<VcsDeployResult>;
+    /** Remove deployed credentials and git config from the agent. */
+    revoke(agent: Agent, cmds: OsCommands, exec: (cmd: string) => Promise<string>, label?: string, scopeUrl?: string): Promise<VcsDeployResult>;
+    /** Lightweight connectivity check (API call or git ls-remote). */
+    testConnectivity(agent: Agent, exec: (cmd: string) => Promise<string>): Promise<VcsDeployResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/services/vcs/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/services/vcs/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAM1D,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,cAAc,CAAC;AAMlE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,KAAK,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,iBAAiB,GAAG,oBAAoB,GAAG,oBAAoB,CAAC;AAE5E,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,WAAW,EAAE,iBAAiB,CAAA;CAAE,GACtD;IAAE,QAAQ,EAAE,WAAW,CAAC;IAAC,WAAW,EAAE,oBAAoB,CAAA;CAAE,GAC5D;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,WAAW,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAMtE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAMD,MAAM,WAAW,kBAAkB;IACjC,wFAAwF;IACxF,MAAM,CACJ,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EACtC,WAAW,EAAE,OAAO,EACpB,KAAK,CAAC,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,CAAC,CAAC;IAE5B,iEAAiE;IACjE,MAAM,CACJ,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EACtC,KAAK,CAAC,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,CAAC,CAAC;IAE5B,kEAAkE;IAClE,gBAAgB,CACd,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GACrC,OAAO,CAAC,eAAe,CAAC,CAAC;CAC7B"}

package/dist/services/vcs/types.js

@@ -0,0 +1,8 @@
+/**
+ * VCS provider types and service interface for multi-provider credential management.
+ *
+ * Supports GitHub (App + PAT), Bitbucket (API token), and Azure DevOps (PAT).
+ * Each agent supports a single VCS provider at a time.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/services/vcs/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/services/vcs/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/smoke-test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Smoke test for core services.
+ * Run: npm run smoke
+ *
+ * Tests:
+ * 1. Crypto: encrypt/decrypt round-trip
+ * 2. Registry: add agent, read back, verify JSON, remove agent
+ */
+export {};
+//# sourceMappingURL=smoke-test.d.ts.map

package/dist/smoke-test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke-test.d.ts","sourceRoot":"","sources":["../src/smoke-test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/smoke-test.js

@@ -0,0 +1,102 @@
+/**
+ * Smoke test for core services.
+ * Run: npm run smoke
+ *
+ * Tests:
+ * 1. Crypto: encrypt/decrypt round-trip
+ * 2. Registry: add agent, read back, verify JSON, remove agent
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { encryptPassword, decryptPassword } from './utils/crypto.js';
+import { addAgent, getAgent, getAllAgents, removeAgent } from './services/registry.js';
+import { FLEET_DIR } from './paths.js';
+const REGISTRY_PATH = path.join(FLEET_DIR, 'registry.json');
+let passed = 0;
+let failed = 0;
+function assert(condition, message) {
+    if (condition) {
+        console.log(`  ✅ ${message}`);
+        passed++;
+    }
+    else {
+        console.log(`  ❌ ${message}`);
+        failed++;
+    }
+}
+console.log('=== Smoke Test: Apra Fleet ===\n');
+// --- Test 1: Crypto ---
+console.log('1. Crypto (AES-256-GCM encrypt/decrypt)');
+try {
+    const original = 'my-ssh-password-123!@#';
+    const encrypted = encryptPassword(original);
+    const decrypted = decryptPassword(encrypted);
+    console.log(`   Plaintext:  ${original}`);
+    console.log(`   Encrypted:  ${encrypted}`);
+    console.log(`   Decrypted:  ${decrypted}`);
+    assert(decrypted === original, 'Decrypt matches original');
+    assert(encrypted !== original, 'Encrypted is not plaintext');
+    assert(encrypted.split(':').length === 3, 'Encrypted has 3 parts (iv:tag:data)');
+}
+catch (err) {
+    console.log(`  ❌ Crypto test threw: ${err.message}`);
+    failed++;
+}
+console.log();
+// --- Test 2: Registry CRUD ---
+console.log('2. Registry CRUD');
+try {
+    const testAgent = {
+        id: 'smoke-test-agent-001',
+        friendlyName: 'smoke-test-server',
+        agentType: 'remote',
+        host: '10.0.0.99',
+        port: 22,
+        username: 'smokeuser',
+        authType: 'password',
+        encryptedPassword: encryptPassword('smokepass'),
+        workFolder: '/home/smokeuser/project',
+        os: 'linux',
+        createdAt: new Date().toISOString(),
+    };
+    // Add
+    addAgent(testAgent);
+    const retrieved = getAgent('smoke-test-agent-001');
+    assert(retrieved !== undefined, 'Agent was added and retrieved');
+    assert(retrieved.friendlyName === 'smoke-test-server', 'Agent has correct name');
+    assert(retrieved.host === '10.0.0.99', 'Agent has correct host');
+    // Verify JSON file
+    const raw = fs.readFileSync(REGISTRY_PATH, 'utf-8');
+    const parsed = JSON.parse(raw);
+    assert(parsed.version === '1.0', 'Registry JSON has version field');
+    assert(Array.isArray(parsed.agents), 'Registry JSON has agents array');
+    const agentInFile = parsed.agents.find((a) => a.id === 'smoke-test-agent-001');
+    assert(agentInFile !== undefined, 'Agent found in JSON file');
+    assert(agentInFile.encryptedPassword !== 'smokepass', 'Password is NOT stored in plaintext');
+    assert(agentInFile.encryptedPassword.includes(':'), 'Password field looks encrypted (contains colons)');
+    console.log(`\n   Registry JSON preview:`);
+    console.log(`   ${JSON.stringify(agentInFile, null, 2).split('\n').join('\n   ')}`);
+    // Remove
+    const removed = removeAgent('smoke-test-agent-001');
+    assert(removed === true, 'Agent removed successfully');
+    assert(getAllAgents().filter(a => a.id === 'smoke-test-agent-001').length === 0, 'Registry is clean after removal');
+}
+catch (err) {
+    console.log(`  ❌ Registry test threw: ${err.message}`);
+    failed++;
+}
+console.log();
+// --- Summary ---
+console.log('=== Results ===');
+console.log(`  Passed: ${passed}`);
+console.log(`  Failed: ${failed}`);
+console.log();
+if (failed > 0) {
+    console.log('❌ SMOKE TEST FAILED');
+    process.exit(1);
+}
+else {
+    console.log('✅ ALL SMOKE TESTS PASSED');
+    process.exit(0);
+}
+//# sourceMappingURL=smoke-test.js.map

package/dist/smoke-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke-test.js","sourceRoot":"","sources":["../src/smoke-test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAEvF,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AAE5D,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,IAAI,MAAM,GAAG,CAAC,CAAC;AAEf,SAAS,MAAM,CAAC,SAAkB,EAAE,OAAe;IACjD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC;QAC9B,MAAM,EAAE,CAAC;IACX,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC;QAC9B,MAAM,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;AAEhD,yBAAyB;AACzB,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;AACvD,IAAI,CAAC;IACH,MAAM,QAAQ,GAAG,wBAAwB,CAAC;IAC1C,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAE7C,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB,SAAS,EAAE,CAAC,CAAC;IAE3C,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IAC3D,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,4BAA4B,CAAC,CAAC;IAC7D,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,qCAAqC,CAAC,CAAC;AACnF,CAAC;AAAC,OAAO,GAAQ,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC;AACX,CAAC;AAED,OAAO,CAAC,GAAG,EAAE,CAAC;AAEd,gCAAgC;AAChC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAChC,IAAI,CAAC;IACH,MAAM,SAAS,GAAU;QACvB,EAAE,EAAE,sBAAsB;QAC1B,YAAY,EAAE,mBAAmB;QACjC,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,UAAU;QACpB,iBAAiB,EAAE,eAAe,CAAC,WAAW,CAAC;QAC/C,UAAU,EAAE,yBAAyB;QACrC,EAAE,EAAE,OAAO;QACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,MAAM;IACN,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpB,MAAM,SAAS,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IACnD,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,+BAA+B,CAAC,CAAC;IACjE,MAAM,CAAC,SAAU,CAAC,YAAY,KAAK,mBAAmB,EAAE,wBAAwB,CAAC,CAAC;IAClF,MAAM,CAAC,SAAU,CAAC,IAAI,KAAK,WAAW,EAAE,wBAAwB,CAAC,CAAC;IAElE,mBAAmB;IACnB,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,iCAAiC,CAAC,CAAC;IACpE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,gCAAgC,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,sBAAsB,CAAC,CAAC;IACpF,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,0BAA0B,CAAC,CAAC;IAC9D,MAAM,CAAC,WAAW,CAAC,iBAAiB,KAAK,WAAW,EAAE,qCAAqC,CAAC,CAAC;IAC7F,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,kDAAkD,CAAC,CAAC;IAExG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAEpF,SAAS;IACT,MAAM,OAAO,GAAG,WAAW,CAAC,sBAAsB,CAAC,CAAC;IACpD,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,4BAA4B,CAAC,CAAC;IACvD,MAAM,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,sBAAsB,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,iCAAiC,CAAC,CAAC;AACtH,CAAC;AAAC,OAAO,GAAQ,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,EAAE,CAAC;AACX,CAAC;AAED,OAAO,CAAC,GAAG,EAAE,CAAC;AAEd,kBAAkB;AAClB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAC/B,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;AACnC,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;AACnC,OAAO,CAAC,GAAG,EAAE,CAAC;AAEd,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;IACf,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/tools/check-status.d.ts

@@ -0,0 +1,11 @@
+import { z } from 'zod';
+export declare const fleetStatusSchema: z.ZodObject<{
+    format: z.ZodDefault<z.ZodEnum<["compact", "json"]>>;
+}, "strip", z.ZodTypeAny, {
+    format: "compact" | "json";
+}, {
+    format?: "compact" | "json" | undefined;
+}>;
+export type FleetStatusInput = z.infer<typeof fleetStatusSchema>;
+export declare function fleetStatus(input?: FleetStatusInput): Promise<string>;
+//# sourceMappingURL=check-status.d.ts.map

package/dist/tools/check-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-status.d.ts","sourceRoot":"","sources":["../../src/tools/check-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiBxB,eAAO,MAAM,iBAAiB;;;;;;EAE5B,CAAC;AA4KH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAEjE,wBAAsB,WAAW,CAAC,KAAK,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CA4F3E"}