@apralabs/apra-fleet 0.2.2

package/dist/tools/compose-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-permissions.js","sourceRoot":"","sources":["../../src/tools/compose-permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,gBAAgB;IACnB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,2FAA2F,CAAC;IACxI,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qFAAqF,CAAC;IACrI,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uJAAuJ,CAAC;IACvM,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CACxF,CAAC,CAAC;AAIH,qCAAqC;AACrC,MAAM,SAAS,GAA2B;IACxC,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACpB,kBAAkB,EAAE,QAAQ;IAC5B,gBAAgB,EAAE,QAAQ;IAC1B,UAAU,EAAE,QAAQ;IACpB,QAAQ,EAAE,IAAI;IACd,cAAc,EAAE,KAAK;IACrB,SAAS,EAAE,KAAK;IAChB,UAAU,EAAE,KAAK;IACjB,gBAAgB,EAAE,KAAK;IACvB,eAAe,EAAE,KAAK;CACvB,CAAC;AAEF,qEAAqE;AACrE,MAAM,aAAa,GAA6B;IAC9C,gBAAgB,EAAE,CAAC,wBAAwB,EAAE,uBAAuB,CAAC;IACrE,iBAAiB,EAAE,CAAC,cAAc,CAAC;IACnC,mBAAmB,EAAE,CAAC,oBAAoB,CAAC;IAC3C,aAAa,EAAE,CAAC,cAAc,CAAC;IAC/B,gBAAgB,EAAE,CAAC,iBAAiB,CAAC;CACtC,CAAC;AAEF,6CAA6C;AAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,kBAAkB;IAC/D,YAAY,EAAE,cAAc,EAAE,mBAAmB;CAClD,CAAC,CAAC;AAOH,SAAS,eAAe;IACtB,+EAA+E;IAC/E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACzF,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,cAAc,CAAC;IACzD,oDAAoD;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACnF,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,WAAW,CAAC;IACnD,iEAAiE;IACjE,IAAI,GAAG,GAAG,SAAS,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,OAAO,cAAc,CAAC;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,WAAW,CAAC;QACnD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,WAAW,CAAC,WAAmB,EAAE,IAAY;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,aAAqB;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IAChE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CAAC,aAAqB,EAAE,MAAc;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IAChE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAAY,EAAE,aAAsB;IAC9D,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,qFAAqF;IACrF,kFAAkF;IAClF,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,aAAa;QAC5B,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,aAAa,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;QAC5D,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,QAAQ,uBAAuB,OAAO,sBAAsB,EAAE,KAAK,CAAC,CAAC;IACtH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,SAAS,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,4CAA4C;IAC5C,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,QAAQ,wDAAwD,EAAE,IAAI,CAAC,CAAC;IAC9H,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,OAAO,CAAC,WAAmB,EAAE,IAAY,EAAE,MAAgB,EAAE,MAAc;IAClF,MAAM,QAAQ,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC;IAChE,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,IAAI,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAE9D,MAAM,OAAO,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;oFACoF;AACpF,KAAK,UAAU,iBAAiB,CAC9B,QAAiD,EACjD,OAAe,EACf,QAAgB,EAChB,OAAyC;IAEzC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS;QACpC,CAAC,CAAC,wCAAwC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG;QACrE,CAAC,CAAC,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAE3C,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,QAAQ;QAC5C,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS;QACpC,CAAC,CAAC,mCAAmC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,mDAAmD;QAC1J,CAAC,CAAC,SAAS,QAAQ,0BAA0B,UAAU,mBAAmB,CAAC;IAC7E,MAAM,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAA8B;IACrE,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC;IAC1D,MAAM,KAAK,GAAG,YAAqB,CAAC;IAEpC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,eAAe,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAErG,sBAAsB;IACtB,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,8CAA8C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC;QAC/F,CAAC;QAED,wBAAwB;QACxB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5B,KAAK,MAAM,EAAE,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE;gBAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,KAAe,CAAC;QAEpB,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,6CAA6C;YAC7C,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,0DAA0D,EAAE,IAAI,CAAC,CAAC;YAChH,IAAI,OAAY,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC;YAC3C,CAAC;YACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,OAAO,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACzE,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/C,KAAK,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,iFAAiF;YACjF,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,gBAAgB;QAChB,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,IAAI,oBAAoB,CAAC;YAC1D,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;oBAClD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,aAAa,CAAC,GAAG,QAAQ,CAAC,CAAC,MAAM,oBAAoB,KAAK,CAAC,YAAY,MAAM,QAAQ,CAAC,IAAI,SAAS,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACzI,CAAC;IAED,yBAAyB;IACzB,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAExD,uBAAuB;IACvB,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,UAAU,CAAC,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,QAAQ,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;IAE/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,+BAA+B,KAAK,CAAC,YAAY,MAAM,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,eAAe,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;AAC9N,CAAC"}

package/dist/tools/credential-store-delete.d.ts

@@ -0,0 +1,11 @@
+import { z } from 'zod';
+export declare const credentialStoreDeleteSchema: z.ZodObject<{
+    name: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+}, {
+    name: string;
+}>;
+export type CredentialStoreDeleteInput = z.infer<typeof credentialStoreDeleteSchema>;
+export declare function credentialStoreDelete(input: CredentialStoreDeleteInput): Promise<string>;
+//# sourceMappingURL=credential-store-delete.d.ts.map

package/dist/tools/credential-store-delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store-delete.d.ts","sourceRoot":"","sources":["../../src/tools/credential-store-delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,2BAA2B;;;;;;EAEtC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAErF,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAO9F"}

package/dist/tools/credential-store-delete.js

@@ -0,0 +1,15 @@
+import { z } from 'zod';
+import { credentialDelete } from '../services/credential-store.js';
+import { logLine } from '../utils/log-helpers.js';
+export const credentialStoreDeleteSchema = z.object({
+    name: z.string().regex(/^[a-zA-Z0-9_-]{1,64}$/).describe('Name of the credential to delete'),
+});
+export async function credentialStoreDelete(input) {
+    const deleted = credentialDelete(input.name);
+    if (deleted) {
+        logLine('credential_store_delete', `name=${input.name}`);
+        return `✅ Credential "${input.name}" deleted.`;
+    }
+    return `❌ Credential "${input.name}" not found.`;
+}
+//# sourceMappingURL=credential-store-delete.js.map

package/dist/tools/credential-store-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store-delete.js","sourceRoot":"","sources":["../../src/tools/credential-store-delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;CAC7F,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAiC;IAC3E,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,yBAAyB,EAAE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,iBAAiB,KAAK,CAAC,IAAI,YAAY,CAAC;IACjD,CAAC;IACD,OAAO,iBAAiB,KAAK,CAAC,IAAI,cAAc,CAAC;AACnD,CAAC"}

package/dist/tools/credential-store-list.d.ts

@@ -0,0 +1,4 @@
+import { z } from 'zod';
+export declare const credentialStoreListSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+export declare function credentialStoreList(): Promise<string>;
+//# sourceMappingURL=credential-store-list.d.ts.map

package/dist/tools/credential-store-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store-list.d.ts","sourceRoot":"","sources":["../../src/tools/credential-store-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,yBAAyB,gDAAe,CAAC;AActD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,CAW3D"}

package/dist/tools/credential-store-list.js

@@ -0,0 +1,30 @@
+import { z } from 'zod';
+import { credentialList } from '../services/credential-store.js';
+export const credentialStoreListSchema = z.object({});
+function formatRemaining(expiresAt) {
+    const ms = new Date(expiresAt).getTime() - Date.now();
+    if (ms <= 0)
+        return 'expired';
+    const totalSec = Math.floor(ms / 1000);
+    const h = Math.floor(totalSec / 3600);
+    const m = Math.floor((totalSec % 3600) / 60);
+    const s = totalSec % 60;
+    if (h > 0)
+        return `${h}h ${m}m remaining`;
+    if (m > 0)
+        return `${m}m ${s}s remaining`;
+    return `${s}s remaining`;
+}
+export async function credentialStoreList() {
+    const entries = credentialList();
+    const display = entries.map(e => ({
+        name: e.name,
+        scope: e.scope,
+        network_policy: e.network_policy,
+        created_at: e.created_at,
+        members: e.allowedMembers === '*' ? '*' : e.allowedMembers.join(', '),
+        expiry: e.expiresAt ? formatRemaining(e.expiresAt) : 'none',
+    }));
+    return JSON.stringify(display, null, 2);
+}
+//# sourceMappingURL=credential-store-list.js.map

package/dist/tools/credential-store-list.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store-list.js","sourceRoot":"","sources":["../../src/tools/credential-store-list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEtD,SAAS,eAAe,CAAC,SAAiB;IACxC,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtD,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,QAAQ,GAAG,EAAE,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;IAC1C,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;IAC1C,OAAO,GAAG,CAAC,aAAa,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,OAAO,EAAE,CAAC,CAAC,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QACrE,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM;KAC5D,CAAC,CAAC,CAAC;IACJ,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/tools/credential-store-set.d.ts

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+export declare const credentialStoreSetSchema: z.ZodObject<{
+    name: z.ZodString;
+    prompt: z.ZodString;
+    persist: z.ZodDefault<z.ZodBoolean>;
+    network_policy: z.ZodDefault<z.ZodEnum<["allow", "confirm", "deny"]>>;
+    members: z.ZodDefault<z.ZodString>;
+    ttl_seconds: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    prompt: string;
+    persist: boolean;
+    network_policy: "confirm" | "allow" | "deny";
+    members: string;
+    ttl_seconds?: number | undefined;
+}, {
+    name: string;
+    prompt: string;
+    persist?: boolean | undefined;
+    network_policy?: "confirm" | "allow" | "deny" | undefined;
+    members?: string | undefined;
+    ttl_seconds?: number | undefined;
+}>;
+export type CredentialStoreSetInput = z.infer<typeof credentialStoreSetSchema>;
+export declare function credentialStoreSet(input: CredentialStoreSetInput): Promise<string>;
+//# sourceMappingURL=credential-store-set.d.ts.map

package/dist/tools/credential-store-set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store-set.d.ts","sourceRoot":"","sources":["../../src/tools/credential-store-set.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;EAanC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE/E,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,CAaxF"}

package/dist/tools/credential-store-set.js

@@ -0,0 +1,28 @@
+import { z } from 'zod';
+import { collectOobApiKey } from '../services/auth-socket.js';
+import { decryptPassword } from '../utils/crypto.js';
+import { credentialSet } from '../services/credential-store.js';
+import { logLine } from '../utils/log-helpers.js';
+export const credentialStoreSetSchema = z.object({
+    name: z.string().regex(/^[a-zA-Z0-9_-]{1,64}$/).describe('Credential name (alphanumeric, underscores, hyphens, max 64 chars)'),
+    prompt: z.string().describe('Prompt to display to the user when collecting the secret'),
+    persist: z.boolean().default(false).describe('If true, encrypt and persist the credential across server restarts'),
+    network_policy: z.enum(['allow', 'confirm', 'deny']).default('confirm').describe('Network egress policy: "allow" = always proceed, "confirm" = prompt before network commands, "deny" = block network commands'),
+    members: z.string().default('*').describe('Comma-separated list of member friendly names allowed to use this credential, or "*" for all members (default: "*")'),
+    ttl_seconds: z.number().positive().optional().describe('Time-to-live in seconds. If set, the credential expires after this many seconds and is automatically purged.'),
+});
+export async function credentialStoreSet(input) {
+    const result = await collectOobApiKey(input.name, 'credential_store_set', { prompt: input.prompt });
+    if (result.fallback)
+        return result.fallback;
+    if (!result.password)
+        return `❌ No secret received for ${input.name}. Please try again.`;
+    const plaintext = decryptPassword(result.password);
+    const allowedMembers = input.members === '*'
+        ? '*'
+        : input.members.split(',').map(s => s.trim()).filter(Boolean);
+    const meta = credentialSet(input.name, plaintext, input.persist, input.network_policy, allowedMembers, input.ttl_seconds);
+    logLine('credential_store_set', `name=${input.name} persist=${input.persist}`);
+    return `✓ ${meta.name} stored [${meta.scope}]. Use {{secure.${meta.name}}} in commands.`;
+}
+//# sourceMappingURL=credential-store-set.js.map

package/dist/tools/credential-store-set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store-set.js","sourceRoot":"","sources":["../../src/tools/credential-store-set.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAC9H,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACvF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAClH,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAC9E,8HAA8H,CAC/H;IACD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CACvC,qHAAqH,CACtH;IACD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACpD,8GAA8G,CAC/G;CACF,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAA8B;IACrE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,sBAAsB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAEpG,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO,4BAA4B,KAAK,CAAC,IAAI,qBAAqB,CAAC;IAEzF,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,cAAc,GAAmB,KAAK,CAAC,OAAO,KAAK,GAAG;QAC1D,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1H,OAAO,CAAC,sBAAsB,EAAE,QAAQ,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/E,OAAO,KAAK,IAAI,CAAC,IAAI,YAAY,IAAI,CAAC,KAAK,mBAAmB,IAAI,CAAC,IAAI,iBAAiB,CAAC;AAC3F,CAAC"}

package/dist/tools/credential-store-update.d.ts

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+export declare const credentialStoreUpdateSchema: z.ZodObject<{
+    name: z.ZodString;
+    members: z.ZodOptional<z.ZodString>;
+    ttl_seconds: z.ZodOptional<z.ZodNumber>;
+    network_policy: z.ZodOptional<z.ZodEnum<["allow", "deny", "confirm"]>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    network_policy?: "confirm" | "allow" | "deny" | undefined;
+    members?: string | undefined;
+    ttl_seconds?: number | undefined;
+}, {
+    name: string;
+    network_policy?: "confirm" | "allow" | "deny" | undefined;
+    members?: string | undefined;
+    ttl_seconds?: number | undefined;
+}>;
+export type CredentialStoreUpdateInput = z.infer<typeof credentialStoreUpdateSchema>;
+export declare function credentialStoreUpdate(input: CredentialStoreUpdateInput): Promise<string>;
+//# sourceMappingURL=credential-store-update.d.ts.map

package/dist/tools/credential-store-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store-update.d.ts","sourceRoot":"","sources":["../../src/tools/credential-store-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;EAKtC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAErF,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CA6B9F"}

package/dist/tools/credential-store-update.js

@@ -0,0 +1,38 @@
+import { z } from 'zod';
+import { credentialResolve, credentialUpdate } from '../services/credential-store.js';
+import { logLine } from '../utils/log-helpers.js';
+export const credentialStoreUpdateSchema = z.object({
+    name: z.string().min(1).describe('Name of the credential to update'),
+    members: z.string().optional().describe('New member scope ("*" or comma-separated friendly names)'),
+    ttl_seconds: z.number().min(0).optional().describe('New TTL in seconds from now. Pass 0 to remove expiry.'),
+    network_policy: z.enum(['allow', 'deny', 'confirm']).optional().describe('New network egress policy'),
+});
+export async function credentialStoreUpdate(input) {
+    if (input.members === undefined && input.ttl_seconds === undefined && input.network_policy === undefined) {
+        return '❌ No fields to update — specify at least one of: members, ttl_seconds, network_policy.';
+    }
+    const existing = credentialResolve(input.name);
+    if (!existing) {
+        return `❌ Credential "${input.name}" not found.`;
+    }
+    const updates = {};
+    if (input.members !== undefined)
+        updates.members = input.members;
+    if (input.ttl_seconds !== undefined) {
+        updates.expiresAt = input.ttl_seconds === 0 ? null : Date.now() + input.ttl_seconds * 1000;
+    }
+    if (input.network_policy !== undefined)
+        updates.network_policy = input.network_policy;
+    const updated = credentialUpdate(input.name, updates);
+    if (!updated) {
+        return `❌ Credential "${input.name}" not found.`;
+    }
+    logLine('credential_store_update', `name=${input.name}`);
+    const output = {
+        members: updated.members,
+        expiresAt: input.ttl_seconds === 0 ? null : updated.expiresAt,
+        network_policy: updated.network_policy,
+    };
+    return `✅ Credential "${input.name}" updated. ${JSON.stringify(output)}`;
+}
+//# sourceMappingURL=credential-store-update.js.map

package/dist/tools/credential-store-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store-update.js","sourceRoot":"","sources":["../../src/tools/credential-store-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACpE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACnG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC3G,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;CACtG,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAiC;IAC3E,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzG,OAAO,wFAAwF,CAAC;IAClG,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,iBAAiB,KAAK,CAAC,IAAI,cAAc,CAAC;IACnD,CAAC;IAED,MAAM,OAAO,GAAmG,EAAE,CAAC;IACnH,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IACjE,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;IAEtF,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,iBAAiB,KAAK,CAAC,IAAI,cAAc,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,yBAAyB,EAAE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAEzD,MAAM,MAAM,GAA4B;QACtC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS;QAC7D,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC;IACF,OAAO,iBAAiB,KAAK,CAAC,IAAI,cAAc,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;AAC3E,CAAC"}

package/dist/tools/execute-command.d.ts

@@ -0,0 +1,33 @@
+import { z } from 'zod';
+export declare function resolveTilde(p: string): string;
+export declare const executeCommandSchema: z.ZodObject<{
+    command: z.ZodString;
+    timeout_s: z.ZodDefault<z.ZodNumber>;
+    run_from: z.ZodOptional<z.ZodString>;
+    long_running: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    max_retries: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    restart_command: z.ZodOptional<z.ZodString>;
+    member_id: z.ZodOptional<z.ZodString>;
+    member_name: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    command: string;
+    timeout_s: number;
+    long_running: boolean;
+    max_retries: number;
+    member_id?: string | undefined;
+    member_name?: string | undefined;
+    run_from?: string | undefined;
+    restart_command?: string | undefined;
+}, {
+    command: string;
+    member_id?: string | undefined;
+    member_name?: string | undefined;
+    timeout_s?: number | undefined;
+    run_from?: string | undefined;
+    long_running?: boolean | undefined;
+    max_retries?: number | undefined;
+    restart_command?: string | undefined;
+}>;
+export type ExecuteCommandInput = z.infer<typeof executeCommandSchema>;
+export declare function executeCommand(input: ExecuteCommandInput, extra?: any): Promise<string>;
+//# sourceMappingURL=execute-command.d.ts.map

package/dist/tools/execute-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute-command.d.ts","sourceRoot":"","sources":["../../src/tools/execute-command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgBxB,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAK9C;AAED,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ/B,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AA+EvE,wBAAsB,cAAc,CAAC,KAAK,EAAE,mBAAmB,EAAE,KAAK,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAuJ7F"}

package/dist/tools/execute-command.js

@@ -0,0 +1,231 @@
+import os from 'node:os';
+import { z } from 'zod';
+import { getStrategy } from '../services/strategy.js';
+import { getOsCommands } from '../os/index.js';
+import { getAgentOS, touchAgent } from '../utils/agent-helpers.js';
+import { memberIdentifier, resolveMember } from '../utils/resolve-member.js';
+import { buildAuthEnvPrefix } from '../utils/auth-env.js';
+import { writeStatusline } from '../services/statusline.js';
+import { ensureCloudReady } from '../services/cloud/lifecycle.js';
+import { generateTaskWrapper } from '../services/cloud/task-wrapper.js';
+import { escapeShellArg, escapePowerShellArg } from '../utils/shell-escape.js';
+import { credentialResolve, registerTaskCredentials } from '../services/credential-store.js';
+import { collectOobConfirm } from '../services/auth-socket.js';
+import { LogScope, maskSecrets, truncateForLog } from '../utils/log-helpers.js';
+import { tryKillPid } from '../utils/pid-helpers.js';
+export function resolveTilde(p) {
+    if (p === '~' || p.startsWith('~/')) {
+        return p.replace('~', os.homedir());
+    }
+    return p;
+}
+export const executeCommandSchema = z.object({
+    ...memberIdentifier,
+    command: z.string().describe('The shell command to execute'),
+    timeout_s: z.number().default(120).describe('Timeout in seconds (default: 120s / 2 minutes)'),
+    run_from: z.string().optional().describe("Override directory to run from. Defaults to member's registered work folder — rarely needed."),
+    long_running: z.boolean().optional().default(false).describe('Run as background task; returns task_id for use with monitor_task'),
+    max_retries: z.number().int().min(0).max(10).optional().default(3).describe('Max crash retries (long_running only)'),
+    restart_command: z.string().optional().describe('Command for retry runs, e.g. checkpoint resume (long_running only)'),
+});
+// Best-effort heuristic — not a security boundary
+const NETWORK_TOOL_RE = /\b(curl|wget|ssh|sftp|scp|rsync|nc|netcat|http|fetch|Invoke-WebRequest|Invoke-RestMethod)\b/i;
+// Matches raw sec:// credential handles that must never reach shell or LLM
+const SEC_RE = /sec:\/\/[a-zA-Z0-9_]+/;
+/**
+ * Scan a command string for {{secure.NAME}} tokens, resolve each from the
+ * credential store, and return the substituted command plus metadata for
+ * output redaction and egress checks.
+ *
+ * Returns an error string if any token cannot be resolved or is blocked.
+ */
+async function resolveSecureTokens(command, agentOs, callingMember) {
+    // Refuse if raw sec:// handles appear (these should not be passed to commands)
+    if (/sec:\/\/[a-zA-Z0-9_]+/.test(command)) {
+        return { error: 'Credentials cannot be passed to LLM sessions — use {{secure.NAME}} tokens instead of sec:// handles.' };
+    }
+    const TOKEN_RE = /\{\{secure\.([a-zA-Z0-9_-]{1,64})\}\}/g;
+    const credentials = [];
+    let resolved = command;
+    let match;
+    // Collect all unique token names first
+    const tokenNames = new Set();
+    while ((match = TOKEN_RE.exec(command)) !== null) {
+        tokenNames.add(match[1]);
+    }
+    for (const name of tokenNames) {
+        const entry = credentialResolve(name, callingMember);
+        if (!entry) {
+            return { error: `Credential "${name}" not found. Run credential_store_set first.` };
+        }
+        if ('denied' in entry)
+            return { error: entry.denied };
+        if ('expired' in entry)
+            return { error: entry.expired };
+        credentials.push({ name, plaintext: entry.plaintext, network_policy: entry.meta.network_policy });
+    }
+    // Substitute tokens with shell-escaped values.
+    // Windows members run under PowerShell (confirmed by WindowsCommands.cleanExec),
+    // so use single-quote escaping — internal single quotes are doubled ('').
+    // This is safer than cmd.exe double-quote + ^ escaping which is unreliable in PS.
+    for (const cred of credentials) {
+        const escaped = agentOs === 'windows'
+            ? escapePowerShellArg(cred.plaintext)
+            : escapeShellArg(cred.plaintext);
+        resolved = resolved.replaceAll(`{{secure.${cred.name}}}`, escaped);
+    }
+    return { resolved, credentials };
+}
+/**
+ * Replace occurrences of credential plaintext values in output with [REDACTED:NAME].
+ */
+function redactOutput(output, credentials) {
+    let redacted = output;
+    for (const cred of credentials) {
+        if (cred.plaintext.length > 0) {
+            redacted = redacted.replaceAll(cred.plaintext, `[REDACTED:${cred.name}]`);
+        }
+    }
+    return redacted;
+}
+export async function executeCommand(input, extra) {
+    const agentOrError = resolveMember(input.member_id, input.member_name);
+    if (typeof agentOrError === 'string')
+        return agentOrError;
+    let agent;
+    try {
+        agent = await ensureCloudReady(agentOrError); // auto-start if stopped
+    }
+    catch (err) {
+        return `Failed to execute command on "${agentOrError.friendlyName}": ${err.message}`;
+    }
+    const strategy = getStrategy(agent);
+    const scope = new LogScope('execute_command', `${truncateForLog(maskSecrets(input.command))}`, agent);
+    const onPidCaptured = (pid) => scope.info(`pid=${pid}`);
+    const cmds = getOsCommands(getAgentOS(agent));
+    const agentOs = getAgentOS(agent);
+    const abortHandler = () => {
+        scope.abort('cancelled by MCP client');
+        tryKillPid(agent, strategy, cmds).catch(() => { });
+    };
+    extra?.signal?.addEventListener('abort', abortHandler);
+    try {
+        // -- Block sec:// handles in run_from and restart_command --
+        if (input.run_from && SEC_RE.test(input.run_from)) {
+            return '❌ Credentials cannot be passed to LLM sessions — use {{secure.NAME}} tokens instead of sec:// handles.';
+        }
+        if (input.restart_command && SEC_RE.test(input.restart_command)) {
+            return '❌ Credentials cannot be passed to LLM sessions — use {{secure.NAME}} tokens instead of sec:// handles.';
+        }
+        // -- Resolve {{secure.NAME}} tokens --
+        const tokenResult = await resolveSecureTokens(input.command, agentOs, agent.friendlyName);
+        if ('error' in tokenResult)
+            return `❌ ${tokenResult.error}`;
+        const { resolved: resolvedCommand, credentials } = tokenResult;
+        // Also resolve tokens in restart_command (H1)
+        let resolvedRestartCommand;
+        if (input.restart_command) {
+            const restartTokenResult = await resolveSecureTokens(input.restart_command, agentOs, agent.friendlyName);
+            if ('error' in restartTokenResult)
+                return `❌ ${restartTokenResult.error}`;
+            resolvedRestartCommand = restartTokenResult.resolved;
+            // Merge any additional credentials from restart_command (de-dup by name)
+            for (const cred of restartTokenResult.credentials) {
+                if (!credentials.find(c => c.name === cred.name)) {
+                    credentials.push(cred);
+                }
+            }
+        }
+        // -- Network egress check for credentials with confirm/deny policy --
+        if (credentials.length > 0 && NETWORK_TOOL_RE.test(resolvedCommand)) {
+            for (const cred of credentials) {
+                if (cred.network_policy === 'deny') {
+                    return `❌ Blocked: credential "${cred.name}" has network_policy=deny and the command contains a network tool.`;
+                }
+                if (cred.network_policy === 'confirm') {
+                    const { confirmed, terminalUnavailable } = await collectOobConfirm(cred.name, { command: input.command, memberName: agent.friendlyName });
+                    if (!confirmed) {
+                        const reason = terminalUnavailable
+                            ? 'could not be confirmed (terminal unavailable)'
+                            : 'was not confirmed';
+                        return `❌ Network egress for credential "${cred.name}" ${reason}. Command not executed.`;
+                    }
+                }
+            }
+        }
+        const rawFolder = input.run_from ?? agent.workFolder;
+        const folder = agent.agentType === 'local' ? resolveTilde(rawFolder) : rawFolder;
+        // -- Long-running background task path --
+        if (input.long_running) {
+            const agentOsVal = getAgentOS(agent);
+            const longRunningOsWarning = agentOsVal !== 'linux'
+                ? `Note: Long-running tasks use a bash wrapper script designed for Linux. The member's OS is ${agentOsVal}, which may not support this feature.\n`
+                : '';
+            const taskId = 'task-' + Date.now().toString(36);
+            registerTaskCredentials(taskId, credentials);
+            const wrapperScript = generateTaskWrapper({
+                taskId,
+                command: resolvedCommand,
+                restartCommand: resolvedRestartCommand,
+                maxRetries: input.max_retries ?? 3,
+                activityIntervalSec: 300,
+            });
+            const scriptB64 = Buffer.from(wrapperScript).toString('base64');
+            // Create task dir, decode + write wrapper script, chmod, launch with nohup
+            const launchCmd = cmds.wrapInWorkFolder(folder, `mkdir -p ~/.fleet-tasks/${taskId} && ` +
+                `printf '%s' '${scriptB64}' | base64 -d > ~/.fleet-tasks/${taskId}/run.sh && ` +
+                `chmod +x ~/.fleet-tasks/${taskId}/run.sh && ` +
+                `nohup bash ~/.fleet-tasks/${taskId}/run.sh > /dev/null 2>&1 & echo $!`);
+            writeStatusline(new Map([[agent.id, 'busy']]));
+            try {
+                const launchResult = await strategy.execCommand(launchCmd, input.timeout_s * 1000, undefined, onPidCaptured);
+                touchAgent(agent.id);
+                writeStatusline();
+                // Redact credential values from any output returned by the launch command (H2)
+                const launchOutput = credentials.length > 0
+                    ? redactOutput(launchResult.stdout + launchResult.stderr, credentials)
+                    : '';
+                void launchOutput; // output not surfaced to caller; redaction is a safety measure
+                return `${longRunningOsWarning}Task launched: task_id=${taskId}\nUse monitor_task to track progress.`;
+            }
+            catch (err) {
+                writeStatusline(new Map([[agent.id, 'offline']]));
+                return `Failed to launch task on "${agent.friendlyName}": ${err.message}`;
+            }
+        }
+        // -- Regular (synchronous) command path --
+        const authPrefix = buildAuthEnvPrefix(agent, getAgentOS(agent));
+        const wrapped = authPrefix + cmds.wrapInWorkFolder(folder, resolvedCommand);
+        // Mark agent as busy in statusline
+        writeStatusline(new Map([[agent.id, 'busy']]));
+        try {
+            const result = await strategy.execCommand(wrapped, input.timeout_s * 1000, undefined, onPidCaptured);
+            touchAgent(agent.id); // T7: idle manager resets its timer via touchAgent
+            const parts = [];
+            if (result.stdout)
+                parts.push(result.stdout);
+            if (result.stderr)
+                parts.push(`[stderr]\n${result.stderr}`);
+            const rawOutput = parts.join('\n') || '(no output)';
+            // Redact credential values from output
+            const output = credentials.length > 0 ? redactOutput(rawOutput, credentials) : rawOutput;
+            writeStatusline();
+            if (result.code !== 0)
+                scope.fail(`exit=${result.code}`);
+            else
+                scope.ok(`exit=0`);
+            return result.code === 0
+                ? `Exit code: 0\n${output}`
+                : `Exit code: ${result.code}\n${output}`;
+        }
+        catch (err) {
+            writeStatusline(new Map([[agent.id, 'offline']]));
+            scope.abort(err.message);
+            return `Failed to execute command on "${agent.friendlyName}": ${err.message}`;
+        }
+    }
+    finally {
+        extra?.signal?.removeEventListener('abort', abortHandler);
+    }
+}
+//# sourceMappingURL=execute-command.js.map

package/dist/tools/execute-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute-command.js","sourceRoot":"","sources":["../../src/tools/execute-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAGrD,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,gBAAgB;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IAC7F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8FAA8F,CAAC;IACxI,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,mEAAmE,CAAC;IACjI,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACpH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;CACtH,CAAC,CAAC;AAIH,kDAAkD;AAClD,MAAM,eAAe,GAAG,8FAA8F,CAAC;AAEvH,2EAA2E;AAC3E,MAAM,MAAM,GAAG,uBAAuB,CAAC;AAQvC;;;;;;GAMG;AACH,KAAK,UAAU,mBAAmB,CAChC,OAAe,EACf,OAAsC,EACtC,aAAqB;IAErB,+EAA+E;IAC/E,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,sGAAsG,EAAE,CAAC;IAC3H,CAAC;IAED,MAAM,QAAQ,GAAG,wCAAwC,CAAC;IAC1D,MAAM,WAAW,GAAyB,EAAE,CAAC;IAC7C,IAAI,QAAQ,GAAG,OAAO,CAAC;IACvB,IAAI,KAA6B,CAAC;IAElC,uCAAuC;IACvC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACjD,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,eAAe,IAAI,8CAA8C,EAAE,CAAC;QACtF,CAAC;QACD,IAAI,QAAQ,IAAI,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QACtD,IAAI,SAAS,IAAI,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACxD,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,+CAA+C;IAC/C,iFAAiF;IACjF,0EAA0E;IAC1E,kFAAkF;IAClF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,OAAO,KAAK,SAAS;YACnC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC;YACrC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,YAAY,IAAI,CAAC,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,MAAc,EAAE,WAAiC;IACrE,IAAI,QAAQ,GAAG,MAAM,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA0B,EAAE,KAAW;IAC1E,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC;IAC1D,IAAI,KAAY,CAAC;IACjB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,gBAAgB,CAAC,YAAqB,CAAC,CAAC,CAAC,wBAAwB;IACjF,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,iCAAkC,YAAsB,CAAC,YAAY,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;IAClG,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,iBAAiB,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACtG,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IAElE,MAAM,IAAI,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACvC,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC;IACF,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC;QAGL,6DAA6D;QAC7D,IAAI,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,OAAO,wGAAwG,CAAC;QAClH,CAAC;QACD,IAAI,KAAK,CAAC,eAAe,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YAChE,OAAO,wGAAwG,CAAC;QAClH,CAAC;QAED,uCAAuC;QACvC,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1F,IAAI,OAAO,IAAI,WAAW;YAAE,OAAO,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;QAE5D,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC;QAE/D,8CAA8C;QAC9C,IAAI,sBAA0C,CAAC;QAC/C,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YAC1B,MAAM,kBAAkB,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,eAAe,EAAE,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YACzG,IAAI,OAAO,IAAI,kBAAkB;gBAAE,OAAO,KAAK,kBAAkB,CAAC,KAAK,EAAE,CAAC;YAC1E,sBAAsB,GAAG,kBAAkB,CAAC,QAAQ,CAAC;YACrD,yEAAyE;YACzE,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,WAAW,EAAE,CAAC;gBAClD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACpE,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,IAAI,IAAI,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;oBACnC,OAAO,0BAA0B,IAAI,CAAC,IAAI,oEAAoE,CAAC;gBACjH,CAAC;gBACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACtC,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;oBAC1I,IAAI,CAAC,SAAS,EAAE,CAAC;wBACf,MAAM,MAAM,GAAG,mBAAmB;4BAChC,CAAC,CAAC,+CAA+C;4BACjD,CAAC,CAAC,mBAAmB,CAAC;wBACxB,OAAO,oCAAoC,IAAI,CAAC,IAAI,KAAK,MAAM,yBAAyB,CAAC;oBAC3F,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC;QACrD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAGjF,0CAA0C;QAC1C,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,oBAAoB,GAAG,UAAU,KAAK,OAAO;gBACjD,CAAC,CAAC,6FAA6F,UAAU,yCAAyC;gBAClJ,CAAC,CAAC,EAAE,CAAC;YAEP,MAAM,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACjD,uBAAuB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAC7C,MAAM,aAAa,GAAG,mBAAmB,CAAC;gBACxC,MAAM;gBACN,OAAO,EAAE,eAAe;gBACxB,cAAc,EAAE,sBAAsB;gBACtC,UAAU,EAAE,KAAK,CAAC,WAAW,IAAI,CAAC;gBAClC,mBAAmB,EAAE,GAAG;aACzB,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAEhE,2EAA2E;YAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CACrC,MAAM,EACN,2BAA2B,MAAM,MAAM;gBACvC,gBAAgB,SAAS,kCAAkC,MAAM,aAAa;gBAC9E,2BAA2B,MAAM,aAAa;gBAC9C,6BAA6B,MAAM,oCAAoC,CACxE,CAAC;YAEF,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,GAAG,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;gBAC7G,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrB,eAAe,EAAE,CAAC;gBAClB,+EAA+E;gBAC/E,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC;oBACzC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC;oBACtE,CAAC,CAAC,EAAE,CAAC;gBACP,KAAK,YAAY,CAAC,CAAC,+DAA+D;gBAClF,OAAO,GAAG,oBAAoB,0BAA0B,MAAM,uCAAuC,CAAC;YACxG,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAClD,OAAO,6BAA6B,KAAK,CAAC,YAAY,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAE5E,mCAAmC;QACnC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,GAAG,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;YACrG,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,mDAAmD;YAEzE,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC;YAEpD,uCAAuC;YACvC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAEzF,eAAe,EAAE,CAAC;YAElB,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;;gBACpD,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;YAExB,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC;gBACtB,CAAC,CAAC,iBAAiB,MAAM,EAAE;gBAC3B,CAAC,CAAC,cAAc,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,iCAAiC,KAAK,CAAC,YAAY,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;QAChF,CAAC;IACH,CAAC;YAAS,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAAC,CAAC;AACxE,CAAC"}

package/dist/tools/execute-prompt.d.ts

@@ -0,0 +1,36 @@
+import { z } from 'zod';
+export declare const executePromptSchema: z.ZodObject<{
+    prompt: z.ZodString;
+    resume: z.ZodDefault<z.ZodBoolean>;
+    timeout_s: z.ZodDefault<z.ZodNumber>;
+    max_total_s: z.ZodOptional<z.ZodNumber>;
+    max_turns: z.ZodOptional<z.ZodNumber>;
+    dangerously_skip_permissions: z.ZodDefault<z.ZodBoolean>;
+    model: z.ZodOptional<z.ZodString>;
+    member_id: z.ZodOptional<z.ZodString>;
+    member_name: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    resume: boolean;
+    prompt: string;
+    timeout_s: number;
+    dangerously_skip_permissions: boolean;
+    model?: string | undefined;
+    member_id?: string | undefined;
+    member_name?: string | undefined;
+    max_total_s?: number | undefined;
+    max_turns?: number | undefined;
+}, {
+    prompt: string;
+    resume?: boolean | undefined;
+    model?: string | undefined;
+    member_id?: string | undefined;
+    member_name?: string | undefined;
+    timeout_s?: number | undefined;
+    max_total_s?: number | undefined;
+    max_turns?: number | undefined;
+    dangerously_skip_permissions?: boolean | undefined;
+}>;
+export type ExecutePromptInput = z.infer<typeof executePromptSchema>;
+export declare const inFlightAgents: Set<string>;
+export declare function executePrompt(input: ExecutePromptInput, extra?: any): Promise<string>;
+//# sourceMappingURL=execute-prompt.d.ts.map

package/dist/tools/execute-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute-prompt.d.ts","sourceRoot":"","sources":["../../src/tools/execute-prompt.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsBxB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS9B,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAwDrE,eAAO,MAAM,cAAc,aAAoB,CAAC;AAWhD,wBAAsB,aAAa,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CA+N3F"}