@apralabs/apra-fleet 0.2.2

package/dist/tools/update-agent-cli.js

@@ -0,0 +1,110 @@
+import { z } from 'zod';
+import { getAllAgents } from '../services/registry.js';
+import { getStrategy } from '../services/strategy.js';
+import { getOsCommands } from '../os/index.js';
+import { getProvider } from '../providers/index.js';
+import { getAgentOS } from '../utils/agent-helpers.js';
+import { memberIdentifier, resolveMember } from '../utils/resolve-member.js';
+export const updateAgentCliSchema = z.object({
+    ...memberIdentifier,
+    install_if_missing: z.boolean().default(false).describe('Install the LLM agent CLI on the member if not already installed (default: false)'),
+});
+async function updateSingleAgent(agent, installIfMissing) {
+    const cmds = getOsCommands(getAgentOS(agent));
+    const provider = getProvider(agent.llmProvider);
+    const strategy = getStrategy(agent);
+    const result = {
+        name: agent.friendlyName,
+        oldVersion: 'unknown',
+        newVersion: 'unknown',
+        success: false,
+    };
+    try {
+        // Get current version
+        const vBefore = await strategy.execCommand(cmds.agentVersion(provider), 15000);
+        const cliFound = vBefore.code === 0 && vBefore.stdout.trim().length > 0;
+        result.oldVersion = cliFound ? vBefore.stdout.trim() : 'not installed';
+        if (!cliFound && !installIfMissing) {
+            result.error = `${provider.name} CLI not found — use install_if_missing: true to install`;
+            return result;
+        }
+        if (!cliFound && installIfMissing) {
+            const installResult = await strategy.execCommand(cmds.installAgent(provider), 180000);
+            if (installResult.code !== 0) {
+                result.error = installResult.stderr || 'Install command failed';
+                return result;
+            }
+            result.installed = true;
+        }
+        else {
+            const updateResult = await strategy.execCommand(cmds.updateAgent(provider), 120000);
+            if (updateResult.code !== 0) {
+                result.error = updateResult.stderr || 'Update command failed';
+            }
+        }
+        // Get new version
+        const vAfter = await strategy.execCommand(cmds.agentVersion(provider), 15000);
+        result.newVersion = vAfter.stdout.trim() || 'unknown';
+        result.success = true;
+        if (!result.installed && result.oldVersion === result.newVersion) {
+            result.error = 'Already up to date';
+        }
+    }
+    catch (err) {
+        result.error = err.message;
+    }
+    return result;
+}
+export async function updateAgentCli(input) {
+    let agents;
+    if (input.member_id || input.member_name) {
+        const agentOrError = resolveMember(input.member_id, input.member_name);
+        if (typeof agentOrError === 'string')
+            return agentOrError;
+        agents = [agentOrError];
+    }
+    else {
+        // Update all online agents
+        const allAgents = getAllAgents();
+        if (allAgents.length === 0) {
+            return 'No members registered.';
+        }
+        // Filter to online members
+        const onlineChecks = await Promise.allSettled(allAgents.map(async (a) => {
+            const strategy = getStrategy(a);
+            const conn = await strategy.testConnection();
+            return { agent: a, online: conn.ok };
+        }));
+        agents = onlineChecks
+            .filter(r => r.status === 'fulfilled' && r.value.online)
+            .map(r => r.value.agent);
+        if (agents.length === 0) {
+            return 'No members are currently online.';
+        }
+    }
+    // Update all selected members in parallel
+    const results = await Promise.allSettled(agents.map(a => updateSingleAgent(a, input.install_if_missing)));
+    let report = `Agent CLI Update Report\n${'='.repeat(40)}\n\n`;
+    for (const r of results) {
+        if (r.status === 'fulfilled') {
+            const res = r.value;
+            const icon = res.success ? '✅' : '❌';
+            report += `${icon} ${res.name}\n`;
+            if (res.installed) {
+                report += `   Installed: ${res.newVersion}\n`;
+            }
+            else {
+                report += `   ${res.oldVersion} → ${res.newVersion}\n`;
+            }
+            if (res.error) {
+                report += `   Note: ${res.error}\n`;
+            }
+            report += '\n';
+        }
+        else {
+            report += `❌ Error: ${r.reason}\n\n`;
+        }
+    }
+    return report;
+}
+//# sourceMappingURL=update-agent-cli.js.map

package/dist/tools/update-agent-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-agent-cli.js","sourceRoot":"","sources":["../../src/tools/update-agent-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,gBAAgB;IACnB,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,mFAAmF,CAAC;CAC7I,CAAC,CAAC;AAaH,KAAK,UAAU,iBAAiB,CAAC,KAAY,EAAE,gBAAyB;IACtE,MAAM,IAAI,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAiB;QAC3B,IAAI,EAAE,KAAK,CAAC,YAAY;QACxB,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,KAAK;KACf,CAAC;IAEF,IAAI,CAAC;QACH,sBAAsB;QACtB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/E,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QACxE,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;QAEvE,IAAI,CAAC,QAAQ,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACnC,MAAM,CAAC,KAAK,GAAG,GAAG,QAAQ,CAAC,IAAI,0DAA0D,CAAC;YAC1F,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YAClC,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;YACtF,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,CAAC,KAAK,GAAG,aAAa,CAAC,MAAM,IAAI,wBAAwB,CAAC;gBAChE,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;YACpF,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,CAAC,KAAK,GAAG,YAAY,CAAC,MAAM,IAAI,uBAAuB,CAAC;YAChE,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9E,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QACtD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QAEtB,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;YACjE,MAAM,CAAC,KAAK,GAAG,oBAAoB,CAAC;QACtC,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA0B;IAC7D,IAAI,MAAe,CAAC;IAEpB,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACvE,IAAI,OAAO,YAAY,KAAK,QAAQ;YAAE,OAAO,YAAY,CAAC;QAC1D,MAAM,GAAG,CAAC,YAAqB,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,2BAA2B;QAC3B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,wBAAwB,CAAC;QAClC,CAAC;QAED,2BAA2B;QAC3B,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,UAAU,CAC3C,SAAS,CAAC,GAAG,CAAC,KAAK,EAAC,CAAC,EAAC,EAAE;YACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACvC,CAAC,CAAC,CACH,CAAC;QAEF,MAAM,GAAG,YAAY;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;aACvD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAE,CAAiC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,kCAAkC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAE1G,IAAI,MAAM,GAAG,4BAA4B,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC;IAE9D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;YACpB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC;YAClC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,MAAM,IAAI,iBAAiB,GAAG,CAAC,UAAU,IAAI,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,MAAM,GAAG,CAAC,UAAU,MAAM,GAAG,CAAC,UAAU,IAAI,CAAC;YACzD,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,IAAI,YAAY,GAAG,CAAC,KAAK,IAAI,CAAC;YACtC,CAAC;YACD,MAAM,IAAI,IAAI,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,YAAY,CAAC,CAAC,MAAM,MAAM,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tools/update-member.d.ts

@@ -0,0 +1,77 @@
+import { z } from 'zod';
+export declare const updateMemberSchema: z.ZodObject<{
+    friendly_name: z.ZodOptional<z.ZodString>;
+    host: z.ZodOptional<z.ZodString>;
+    port: z.ZodOptional<z.ZodNumber>;
+    username: z.ZodOptional<z.ZodString>;
+    auth_type: z.ZodOptional<z.ZodEnum<["password", "key"]>>;
+    password: z.ZodOptional<z.ZodString>;
+    rotate_password: z.ZodOptional<z.ZodBoolean>;
+    key_path: z.ZodOptional<z.ZodString>;
+    work_folder: z.ZodOptional<z.ZodString>;
+    git_access: z.ZodOptional<z.ZodEnum<["read", "push", "admin", "issues", "full"]>>;
+    git_repos: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    icon: z.ZodOptional<z.ZodString>;
+    cloud_region: z.ZodOptional<z.ZodString>;
+    cloud_profile: z.ZodOptional<z.ZodString>;
+    cloud_idle_timeout_min: z.ZodOptional<z.ZodNumber>;
+    cloud_activity_command: z.ZodOptional<z.ZodString>;
+    llm_provider: z.ZodOptional<z.ZodEnum<["claude", "gemini", "codex", "copilot", "agy"]>>;
+    model_cheap: z.ZodOptional<z.ZodEnum<["gpt-oss-120b", "gpt-120", "gemini-3.5-flash-lite", "gemini-3.1-flash-lite-preview", "claude-haiku-4-5", "gpt-5.4-mini"]>>;
+    model_standard: z.ZodOptional<z.ZodEnum<["gemini-3.5-flash", "gpt-oss-120b", "gpt-120", "claude-sonnet-4.6", "claude-sonnet-4-5", "gemini-3-flash-preview", "gpt-5.4"]>>;
+    model_premium: z.ZodOptional<z.ZodEnum<["claude-sonnet-4.6", "claude-opus-4.6", "claude-opus-4-6", "claude-opus-4-7", "gpt-oss-120b", "gemini-3.1-pro-preview"]>>;
+    unattended: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<false>, z.ZodLiteral<"auto">, z.ZodLiteral<"dangerous">]>>;
+    member_id: z.ZodOptional<z.ZodString>;
+    member_name: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    password?: string | undefined;
+    host?: string | undefined;
+    port?: number | undefined;
+    username?: string | undefined;
+    icon?: string | undefined;
+    unattended?: false | "auto" | "dangerous" | undefined;
+    friendly_name?: string | undefined;
+    auth_type?: "password" | "key" | undefined;
+    key_path?: string | undefined;
+    work_folder?: string | undefined;
+    git_access?: "read" | "push" | "admin" | "issues" | "full" | undefined;
+    git_repos?: string[] | undefined;
+    cloud_region?: string | undefined;
+    cloud_profile?: string | undefined;
+    cloud_idle_timeout_min?: number | undefined;
+    cloud_activity_command?: string | undefined;
+    llm_provider?: "claude" | "gemini" | "codex" | "copilot" | "agy" | undefined;
+    model_cheap?: "gpt-oss-120b" | "gpt-120" | "gemini-3.5-flash-lite" | "gemini-3.1-flash-lite-preview" | "claude-haiku-4-5" | "gpt-5.4-mini" | undefined;
+    model_standard?: "gpt-oss-120b" | "gpt-120" | "gemini-3.5-flash" | "claude-sonnet-4.6" | "claude-sonnet-4-5" | "gemini-3-flash-preview" | "gpt-5.4" | undefined;
+    model_premium?: "gpt-oss-120b" | "claude-sonnet-4.6" | "claude-opus-4.6" | "claude-opus-4-6" | "claude-opus-4-7" | "gemini-3.1-pro-preview" | undefined;
+    member_id?: string | undefined;
+    member_name?: string | undefined;
+    rotate_password?: boolean | undefined;
+}, {
+    password?: string | undefined;
+    host?: string | undefined;
+    port?: number | undefined;
+    username?: string | undefined;
+    icon?: string | undefined;
+    unattended?: false | "auto" | "dangerous" | undefined;
+    friendly_name?: string | undefined;
+    auth_type?: "password" | "key" | undefined;
+    key_path?: string | undefined;
+    work_folder?: string | undefined;
+    git_access?: "read" | "push" | "admin" | "issues" | "full" | undefined;
+    git_repos?: string[] | undefined;
+    cloud_region?: string | undefined;
+    cloud_profile?: string | undefined;
+    cloud_idle_timeout_min?: number | undefined;
+    cloud_activity_command?: string | undefined;
+    llm_provider?: "claude" | "gemini" | "codex" | "copilot" | "agy" | undefined;
+    model_cheap?: "gpt-oss-120b" | "gpt-120" | "gemini-3.5-flash-lite" | "gemini-3.1-flash-lite-preview" | "claude-haiku-4-5" | "gpt-5.4-mini" | undefined;
+    model_standard?: "gpt-oss-120b" | "gpt-120" | "gemini-3.5-flash" | "claude-sonnet-4.6" | "claude-sonnet-4-5" | "gemini-3-flash-preview" | "gpt-5.4" | undefined;
+    model_premium?: "gpt-oss-120b" | "claude-sonnet-4.6" | "claude-opus-4.6" | "claude-opus-4-6" | "claude-opus-4-7" | "gemini-3.1-pro-preview" | undefined;
+    member_id?: string | undefined;
+    member_name?: string | undefined;
+    rotate_password?: boolean | undefined;
+}>;
+export type UpdateMemberInput = z.infer<typeof updateMemberSchema>;
+export declare function updateMember(input: UpdateMemberInput): Promise<string>;
+//# sourceMappingURL=update-member.d.ts.map

package/dist/tools/update-member.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-member.d.ts","sourceRoot":"","sources":["../../src/tools/update-member.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqC7B,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEnE,wBAAsB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CA6I5E"}

package/dist/tools/update-member.js

@@ -0,0 +1,202 @@
+import { z } from 'zod';
+import { updateAgent as updateInRegistry, hasDuplicateFolder } from '../services/registry.js';
+import { encryptPassword } from '../utils/crypto.js';
+import { memberIdentifier, resolveMember } from '../utils/resolve-member.js';
+import { collectOobPassword } from '../services/auth-socket.js';
+import { credentialResolve } from '../services/credential-store.js';
+import { isValidIcon, resolveIcon, DEFAULT_ICON } from '../services/icons.js';
+import { writeStatusline } from '../services/statusline.js';
+import { logLine } from '../utils/log-helpers.js';
+import { CURATED_CHEAP_MODELS, CURATED_STANDARD_MODELS, CURATED_PREMIUM_MODELS } from '../cli/config.js';
+export const updateMemberSchema = z.object({
+    ...memberIdentifier,
+    friendly_name: z.string()
+        .min(1).max(64)
+        .regex(/^[a-zA-Z0-9._-]+$/, 'Only letters, numbers, dots, dashes, and underscores')
+        .optional()
+        .describe('New friendly name'),
+    host: z.string()
+        .regex(/^[^<>\n\r]+$/, 'host must not contain angle brackets or newlines')
+        .optional()
+        .describe('New host (remote members only)'),
+    port: z.number().optional().describe('New SSH port (remote members only)'),
+    username: z.string().optional().describe('New SSH username (remote members only)'),
+    auth_type: z.enum(['password', 'key']).optional().describe('New auth method (remote members only)'),
+    password: z.string().optional().describe('New SSH password. Omit for secure out-of-band entry — a password prompt will open in a separate terminal window. Supports {{secure.NAME}} token — value is resolved from the credential store before use.'),
+    rotate_password: z.boolean().optional().describe('Trigger secure out-of-band password re-entry for a member already using password auth. '
+        + 'A password prompt will open in a separate terminal window. Ignored if auth_type is not password.'),
+    key_path: z.string().optional().describe('Path to SSH private key. Used for both regular SSH connections and cloud instance lifecycle.'),
+    work_folder: z.string()
+        .regex(/^[^<>\n\r]+$/, 'work_folder must not contain angle brackets or newlines')
+        .optional()
+        .describe('New working directory on target machine'),
+    git_access: z.enum(['read', 'push', 'admin', 'issues', 'full']).optional().describe('Git access level for this member'),
+    git_repos: z.array(z.string()).optional().describe('Git repositories this member can access (e.g. ["Apra-Labs/ApraPipes"])'),
+    icon: z.string().optional().describe('Override the auto-assigned emoji icon. Use named aliases: blue-circle, green-square, red-circle, etc. (8 colors × 2 shapes: circle, square). Or pass raw emoji.'),
+    // Cloud fields
+    cloud_region: z.string().optional().describe('AWS region for the cloud instance'),
+    cloud_profile: z.string().optional().describe('AWS CLI profile name'),
+    cloud_idle_timeout_min: z.number().optional().describe('Minutes of inactivity before auto-stop'),
+    cloud_activity_command: z.string().optional().describe('Custom shell command for workload detection. Must output "busy" or "idle". Pass empty string to clear.'),
+    llm_provider: z.enum(['claude', 'gemini', 'codex', 'copilot', 'agy']).optional().describe('Change the LLM provider for this member.'),
+    model_cheap: z.enum(CURATED_CHEAP_MODELS).optional().describe('Change custom cheap model'),
+    model_standard: z.enum(CURATED_STANDARD_MODELS).optional().describe('Change custom standard model'),
+    model_premium: z.enum(CURATED_PREMIUM_MODELS).optional().describe('Change custom premium model'),
+    unattended: z.union([z.literal(false), z.literal('auto'), z.literal('dangerous')]).optional().describe('Permission mode for unattended execution. false = interactive prompts; "auto" = auto-approve safe operations; "dangerous" = skip all permission checks.'),
+});
+export async function updateMember(input) {
+    const existingOrError = resolveMember(input.member_id, input.member_name);
+    if (typeof existingOrError === 'string')
+        return existingOrError;
+    const existing = existingOrError;
+    // Check for duplicate folder whenever identity fields (host, port, or work_folder) change.
+    // For remote members: fire on any identity-field change (host, port, or folder).
+    // For local members: fire only on folder change (host/port are not part of local identity).
+    const hostChanged = input.host !== undefined && input.host !== existing.host;
+    const portChanged = input.port !== undefined && input.port !== existing.port;
+    const folderChanged = input.work_folder !== undefined && input.work_folder !== existing.workFolder;
+    const needsUniquenessCheck = existing.agentType === 'remote'
+        ? (hostChanged || portChanged || folderChanged)
+        : folderChanged;
+    if (needsUniquenessCheck) {
+        const newHost = input.host ?? existing.host;
+        const newPort = input.port ?? existing.port;
+        const newFolder = input.work_folder ?? existing.workFolder;
+        if (hasDuplicateFolder(existing.agentType, newFolder, newHost, newPort, existing.id)) {
+            const scope = existing.agentType === 'local' ? 'this machine' : `host ${newHost}:${newPort}`;
+            return `❌ Another member already uses folder "${newFolder}" on ${scope}. Update rejected.`;
+        }
+    }
+    // Resolve named alias (e.g. "blue-circle" → "🔵") before validation
+    const resolvedIcon = input.icon !== undefined ? resolveIcon(input.icon) : undefined;
+    // Validate icon if provided
+    if (resolvedIcon !== undefined && !isValidIcon(resolvedIcon)) {
+        return `❌ Invalid icon "${input.icon}". Use a named alias (e.g., blue-circle, red-square, green-square) or a valid emoji.`;
+    }
+    // Resolve {{secure.NAME}} tokens in password field
+    let resolvedPassword = input.password;
+    if (resolvedPassword) {
+        const TOKEN_RE = /\{\{secure\.([a-zA-Z0-9_-]{1,64})\}\}/g;
+        let match;
+        let resolved = resolvedPassword;
+        const tokenNames = new Set();
+        while ((match = TOKEN_RE.exec(resolvedPassword)) !== null) {
+            tokenNames.add(match[1]);
+        }
+        for (const name of tokenNames) {
+            const entry = credentialResolve(name, existing.friendlyName);
+            if (!entry)
+                return `❌ Credential "${name}" not found. Run credential_store_set first. Member was NOT updated.`;
+            if ('denied' in entry)
+                return `❌ ${entry.denied} Member was NOT updated.`;
+            if ('expired' in entry)
+                return `❌ ${entry.expired} Member was NOT updated.`;
+            resolved = resolved.replaceAll(`{{secure.${name}}}`, entry.plaintext);
+        }
+        resolvedPassword = resolved;
+    }
+    // Out-of-band password collection:
+    // - switchingToPassword: changing from key → password auth without inline password
+    // - rotatingPassword: explicit secure rotation on a member already using password auth
+    let preEncryptedPassword;
+    const switchingToPassword = input.auth_type === 'password' && existing.authType !== 'password';
+    const rotatingPassword = !!input.rotate_password && existing.authType === 'password';
+    if ((switchingToPassword || rotatingPassword) && !resolvedPassword && existing.agentType === 'remote') {
+        const oob = await collectOobPassword(existing.friendlyName, 'update_member');
+        if ('fallback' in oob)
+            return oob.fallback ?? 'Error: OOB operation cancelled.';
+        preEncryptedPassword = oob.password;
+    }
+    const updates = {};
+    const warnings = [];
+    if (resolvedIcon)
+        updates.icon = resolvedIcon;
+    if (input.friendly_name)
+        updates.friendlyName = input.friendly_name;
+    if (input.llm_provider !== undefined)
+        updates.llmProvider = input.llm_provider;
+    if (input.model_cheap !== undefined)
+        updates.modelCheap = input.model_cheap;
+    if (input.model_standard !== undefined)
+        updates.modelStandard = input.model_standard;
+    if (input.model_premium !== undefined)
+        updates.modelPremium = input.model_premium;
+    if (input.unattended !== undefined)
+        updates.unattended = input.unattended;
+    if (input.host)
+        updates.host = input.host;
+    if (input.port)
+        updates.port = input.port;
+    if (input.username)
+        updates.username = input.username;
+    if (input.auth_type)
+        updates.authType = input.auth_type;
+    if (preEncryptedPassword) {
+        updates.encryptedPassword = preEncryptedPassword;
+    }
+    else if (resolvedPassword) {
+        updates.encryptedPassword = encryptPassword(resolvedPassword);
+    }
+    if (input.key_path)
+        updates.keyPath = input.key_path;
+    if (input.work_folder)
+        updates.workFolder = input.work_folder;
+    if (input.git_access)
+        updates.gitAccess = input.git_access;
+    if (input.git_repos)
+        updates.gitRepos = input.git_repos;
+    // Cloud field updates: merge into existing cloud config
+    const cloudFields = ['cloud_region', 'cloud_profile', 'cloud_idle_timeout_min', 'cloud_activity_command'];
+    const passedCloudFields = cloudFields.filter(f => input[f] !== undefined);
+    if (passedCloudFields.length > 0) {
+        if (existing.cloud) {
+            const updatedCloud = { ...existing.cloud };
+            if (input.cloud_region)
+                updatedCloud.region = input.cloud_region;
+            if (input.cloud_profile !== undefined)
+                updatedCloud.profile = input.cloud_profile || undefined;
+            if (input.cloud_idle_timeout_min)
+                updatedCloud.idleTimeoutMin = input.cloud_idle_timeout_min;
+            if (input.cloud_activity_command !== undefined) {
+                updatedCloud.activityCommand = input.cloud_activity_command || undefined;
+            }
+            updates.cloud = updatedCloud;
+        }
+        else {
+            warnings.push(`Warning: cloud fields (${passedCloudFields.join(', ')}) are ignored for non-cloud members.`);
+        }
+    }
+    const updated = updateInRegistry(existing.id, updates);
+    if (!updated) {
+        return `Failed to update member "${existing.id}".`;
+    }
+    logLine('update_member', `id=${updated.id} name=${updated.friendlyName}`, updated);
+    writeStatusline();
+    let result = `✅ Member "${updated.friendlyName}" updated.\n\n`;
+    result += `  Icon:    ${updated.icon ?? DEFAULT_ICON}\n`;
+    result += `  ID:      ${updated.id}\n`;
+    result += `  Name:    ${updated.friendlyName}\n`;
+    result += `  Type:    ${updated.agentType}\n`;
+    if (updated.agentType === 'remote') {
+        result += `  Host:    ${updated.host}:${updated.port}\n`;
+    }
+    result += `  Folder:  ${updated.workFolder}\n`;
+    if (updated.authType) {
+        result += `  Auth:    ${updated.authType}\n`;
+    }
+    result += `  Provider: ${updated.llmProvider ?? 'claude'}\n`;
+    if (updated.modelCheap)
+        result += `  Model Cheap: ${updated.modelCheap}\n`;
+    if (updated.modelStandard)
+        result += `  Model Standard: ${updated.modelStandard}\n`;
+    if (updated.modelPremium)
+        result += `  Model Premium: ${updated.modelPremium}\n`;
+    if (warnings.length > 0) {
+        result += '\n';
+        for (const w of warnings) {
+            result += `⚠️ ${w}\n`;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=update-member.js.map

package/dist/tools/update-member.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-member.js","sourceRoot":"","sources":["../../src/tools/update-member.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,IAAI,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAElD,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAEzG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,gBAAgB;IACnB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;SACtB,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;SACd,KAAK,CAAC,mBAAmB,EAAE,sDAAsD,CAAC;SAClF,QAAQ,EAAE;SACV,QAAQ,CAAC,mBAAmB,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;SACb,KAAK,CAAC,cAAc,EAAE,kDAAkD,CAAC;SACzE,QAAQ,EAAE;SACV,QAAQ,CAAC,gCAAgC,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAClF,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACnG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2MAA2M,CAAC;IACrP,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAC9C,yFAAyF;UACvF,kGAAkG,CACrG;IACD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8FAA8F,CAAC;IACxI,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;SACpB,KAAK,CAAC,cAAc,EAAE,yDAAyD,CAAC;SAChF,QAAQ,EAAE;SACV,QAAQ,CAAC,yCAAyC,CAAC;IACtD,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACvH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wEAAwE,CAAC;IAC5H,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iKAAiK,CAAC;IACvM,eAAe;IACf,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACjF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACrE,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAChG,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wGAAwG,CAAC;IAChK,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrI,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC1F,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACnG,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAChG,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yJAAyJ,CAAC;CAClQ,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAwB;IACzD,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC1E,IAAI,OAAO,eAAe,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC;IAChE,MAAM,QAAQ,GAAG,eAAwB,CAAC;IAE1C,2FAA2F;IAC3F,iFAAiF;IACjF,4FAA4F;IAC5F,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;IAC7E,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;IAC7E,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,UAAU,CAAC;IAEnG,MAAM,oBAAoB,GAAG,QAAQ,CAAC,SAAS,KAAK,QAAQ;QAC1D,CAAC,CAAC,CAAC,WAAW,IAAI,WAAW,IAAI,aAAa,CAAC;QAC/C,CAAC,CAAC,aAAa,CAAC;IAElB,IAAI,oBAAoB,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC;QAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC;QAC3D,IAAI,kBAAkB,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACrF,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,OAAO,IAAI,OAAO,EAAE,CAAC;YAC7F,OAAO,yCAAyC,SAAS,QAAQ,KAAK,oBAAoB,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpF,4BAA4B;IAC5B,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7D,OAAO,mBAAmB,KAAK,CAAC,IAAI,sFAAsF,CAAC;IAC7H,CAAC;IAED,mDAAmD;IACnD,IAAI,gBAAgB,GAAG,KAAK,CAAC,QAAQ,CAAC;IACtC,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,wCAAwC,CAAC;QAC1D,IAAI,KAA6B,CAAC;QAClC,IAAI,QAAQ,GAAG,gBAAgB,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1D,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC7D,IAAI,CAAC,KAAK;gBAAE,OAAO,iBAAiB,IAAI,sEAAsE,CAAC;YAC/G,IAAI,QAAQ,IAAI,KAAK;gBAAE,OAAO,KAAK,KAAK,CAAC,MAAM,0BAA0B,CAAC;YAC1E,IAAI,SAAS,IAAI,KAAK;gBAAE,OAAO,KAAK,KAAK,CAAC,OAAO,0BAA0B,CAAC;YAC5E,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,YAAY,IAAI,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACxE,CAAC;QACD,gBAAgB,GAAG,QAAQ,CAAC;IAC9B,CAAC;IAED,mCAAmC;IACnC,mFAAmF;IACnF,uFAAuF;IACvF,IAAI,oBAAwC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,KAAK,CAAC,SAAS,KAAK,UAAU,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,CAAC;IAC/F,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,eAAe,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,CAAC;IACrF,IAAI,CAAC,mBAAmB,IAAI,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtG,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QAC7E,IAAI,UAAU,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC,QAAQ,IAAI,iCAAiC,CAAC;QAChF,oBAAoB,GAAG,GAAG,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,YAAY;QAAE,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC;IAC9C,IAAI,KAAK,CAAC,aAAa;QAAE,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC;IACpE,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC;IAC/E,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC;IAC5E,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC;IACrF,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC;IAClF,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IAC1E,IAAI,KAAK,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI;QAAE,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IAC1C,IAAI,KAAK,CAAC,QAAQ;QAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACtD,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;IACxD,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,CAAC,iBAAiB,GAAG,oBAAoB,CAAC;IACnD,CAAC;SAAM,IAAI,gBAAgB,EAAE,CAAC;QAC5B,OAAO,CAAC,iBAAiB,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ;QAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC;IACrD,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC;IAC9D,IAAI,KAAK,CAAC,UAAU;QAAE,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;IAC3D,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;IAExD,wDAAwD;IACxD,MAAM,WAAW,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,wBAAwB,EAAE,wBAAwB,CAAU,CAAC;IACnH,MAAM,iBAAiB,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAE1E,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,YAAY;gBAAE,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC;YACjE,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;gBAAE,YAAY,CAAC,OAAO,GAAG,KAAK,CAAC,aAAa,IAAI,SAAS,CAAC;YAC/F,IAAI,KAAK,CAAC,sBAAsB;gBAAE,YAAY,CAAC,cAAc,GAAG,KAAK,CAAC,sBAAsB,CAAC;YAC7F,IAAI,KAAK,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;gBAC/C,YAAY,CAAC,eAAe,GAAG,KAAK,CAAC,sBAAsB,IAAI,SAAS,CAAC;YAC3E,CAAC;YACD,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,0BAA0B,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,4BAA4B,QAAQ,CAAC,EAAE,IAAI,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,eAAe,EAAE,MAAM,OAAO,CAAC,EAAE,SAAS,OAAO,CAAC,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC;IACnF,eAAe,EAAE,CAAC;IAElB,IAAI,MAAM,GAAG,aAAa,OAAO,CAAC,YAAY,gBAAgB,CAAC;IAC/D,MAAM,IAAI,cAAc,OAAO,CAAC,IAAI,IAAI,YAAY,IAAI,CAAC;IACzD,MAAM,IAAI,cAAc,OAAO,CAAC,EAAE,IAAI,CAAC;IACvC,MAAM,IAAI,cAAc,OAAO,CAAC,YAAY,IAAI,CAAC;IACjD,MAAM,IAAI,cAAc,OAAO,CAAC,SAAS,IAAI,CAAC;IAC9C,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,cAAc,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,cAAc,OAAO,CAAC,UAAU,IAAI,CAAC;IAC/C,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,cAAc,OAAO,CAAC,QAAQ,IAAI,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,eAAe,OAAO,CAAC,WAAW,IAAI,QAAQ,IAAI,CAAC;IAC7D,IAAI,OAAO,CAAC,UAAU;QAAE,MAAM,IAAI,kBAAkB,OAAO,CAAC,UAAU,IAAI,CAAC;IAC3E,IAAI,OAAO,CAAC,aAAa;QAAE,MAAM,IAAI,qBAAqB,OAAO,CAAC,aAAa,IAAI,CAAC;IACpF,IAAI,OAAO,CAAC,YAAY;QAAE,MAAM,IAAI,oBAAoB,OAAO,CAAC,YAAY,IAAI,CAAC;IAEjF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,IAAI,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tools/version.d.ts

@@ -0,0 +1,4 @@
+import { z } from 'zod';
+export declare const versionSchema: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+export declare function version(): Promise<string>;
+//# sourceMappingURL=version.d.ts.map

package/dist/tools/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/tools/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,aAAa,gDAAe,CAAC;AAE1C,wBAAsB,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAE/C"}

package/dist/tools/version.js

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+import { serverVersion } from '../version.js';
+export const versionSchema = z.object({});
+export async function version() {
+    return `apra-fleet ${serverVersion}`;
+}
+//# sourceMappingURL=version.js.map

package/dist/tools/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/tools/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE1C,MAAM,CAAC,KAAK,UAAU,OAAO;IAC3B,OAAO,cAAc,aAAa,EAAE,CAAC;AACvC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,70 @@
+export type { CloudConfig } from './services/cloud/types.js';
+import type { CloudConfig } from './services/cloud/types.js';
+export type LlmProvider = 'claude' | 'gemini' | 'codex' | 'copilot' | 'agy';
+export interface Agent {
+    id: string;
+    friendlyName: string;
+    agentType: 'local' | 'remote';
+    cloud?: CloudConfig;
+    host?: string;
+    port?: number;
+    username?: string;
+    authType?: 'password' | 'key';
+    encryptedPassword?: string;
+    keyPath?: string;
+    workFolder: string;
+    sessionId?: string;
+    os?: 'windows' | 'macos' | 'linux';
+    createdAt: string;
+    lastUsed?: string;
+    icon?: string;
+    gitAccess?: 'read' | 'push' | 'admin' | 'issues' | 'full';
+    gitRepos?: string[];
+    vcsProvider?: 'github' | 'bitbucket' | 'azure-devops';
+    vcsTokenExpiresAt?: string;
+    llmProvider?: LlmProvider;
+    modelCheap?: string;
+    modelStandard?: string;
+    modelPremium?: string;
+    encryptedEnvVars?: Record<string, string>;
+    lastBranch?: string;
+    tokenUsage?: {
+        input: number;
+        output: number;
+    };
+    unattended?: false | 'auto' | 'dangerous';
+    lastLlmActivityAt?: string;
+}
+export interface GitHubAppConfig {
+    appId: string;
+    privateKeyPath: string;
+    installationId: number;
+    createdAt: string;
+}
+export interface FleetGitConfig {
+    version: string;
+    github?: GitHubAppConfig;
+}
+export interface TransferResult {
+    success: string[];
+    failed: {
+        path: string;
+        error: string;
+    }[];
+}
+export interface FleetRegistry {
+    version: string;
+    agents: Agent[];
+}
+export interface SSHExecResult {
+    stdout: string;
+    stderr: string;
+    code: number;
+}
+export interface OnboardingState {
+    bannerShown: boolean;
+    firstMemberRegistered: boolean;
+    firstPromptExecuted: boolean;
+    multiMemberNudgeShown: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,KAAK,CAAC;AAE5E,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC9B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC1D,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,cAAc,CAAC;IACtD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,UAAU,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,WAAW,CAAC;IAC1C,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,OAAO,CAAC;IACrB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,qBAAqB,EAAE,OAAO,CAAC;CAChC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/utils/agent-helpers.d.ts

@@ -0,0 +1,41 @@
+/**
+ * DRY helpers for common agent operations used across tool files.
+ */
+import type { Agent } from '../types.js';
+import type { RemoteOS } from './platform.js';
+/**
+ * Look up an agent by ID or return a formatted error string.
+ * Eliminates the repeated pattern of getAgent() + "not found" check in every tool.
+ */
+export declare function getAgentOrFail(id: string): Agent | string;
+/**
+ * Get the OS for an agent, defaulting to 'linux'.
+ * Eliminates repeated `agent.os ?? 'linux'` casts.
+ */
+export declare function getAgentOS(agent: Agent): RemoteOS;
+/**
+ * Format a host label for display.
+ * Local agents show "(local)", remote agents show "host:port".
+ */
+export declare function formatAgentHost(agent: Agent): string;
+/**
+ * Register a callback invoked on every touchAgent call.
+ * Called by IdleManager.start() to wire timer resets into tool calls.
+ */
+export declare function setIdleTouchHook(fn: (agentId: string) => void): void;
+/**
+ * Check if an agent's VCS token is expired or expiring soon.
+ * Returns a warning string if action is needed, or null if OK / no expiry tracked.
+ */
+export declare function checkVcsTokenExpiry(agent: Agent, now?: Date): string | null;
+/** Return the stored PID for an agent, or undefined if none is recorded. */
+export declare function getStoredPid(agentId: string): number | undefined;
+/** Record the active PID for an agent (called after the process is spawned). */
+export declare function setStoredPid(agentId: string, pid: number): void;
+/** Remove the stored PID for an agent (called after kill or successful completion). */
+export declare function clearStoredPid(agentId: string): void;
+/**
+ * Touch an agent's lastUsed timestamp and optionally update its sessionId.
+ */
+export declare function touchAgent(agentId: string, sessionId?: string): void;
+//# sourceMappingURL=agent-helpers.d.ts.map

package/dist/utils/agent-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-helpers.d.ts","sourceRoot":"","sources":["../../src/utils/agent-helpers.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAG9C;;;GAGG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAMzD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,QAAQ,CAEjD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAEpD;AAOD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAEpE;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,GAAE,IAAiB,GAAG,MAAM,GAAG,IAAI,CAYvF;AAOD,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEhE;AAED,gFAAgF;AAChF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAE/D;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAEpD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAOpE"}