@botiverse/raft-daemon 0.63.4 → 0.63.5-play.20260622140740

package/dist/{chunk-RUGCYI7A.js → chunk-ZGGFS72W.js}

@@ -1039,11 +1039,36 @@ var integrationApproveAgentLoginOperationSchema = z.object({
   scopes: z.array(z.string().trim().min(1).max(120)).max(64),
   draftHint: draftHintSchema
 });
+var integrationAppDraftFieldsSchema = z.object({
+  name: z.string().trim().min(1).max(120).optional(),
+  description: z.string().trim().max(1e3).optional(),
+  homepageUrl: z.string().trim().max(2e3).optional(),
+  returnUrl: z.string().trim().max(2e3).optional(),
+  agentManifestUrl: z.string().trim().max(2e3).optional()
+});
+var integrationRegisterAppOperationSchema = integrationAppDraftFieldsSchema.extend({
+  type: z.literal("integration:register_app"),
+  name: z.string().trim().min(1).max(120),
+  clientKey: z.string().trim().min(1).max(120),
+  returnUrl: z.string().trim().min(1).max(2e3),
+  scopes: z.array(z.string().trim().min(1).max(120)).max(64).default([]),
+  unsafeDemoUrlOverride: z.boolean().optional(),
+  draftHint: draftHintSchema
+});
+var integrationUpdateAppRegistrationOperationSchema = integrationAppDraftFieldsSchema.extend({
+  type: z.literal("integration:update_app_registration"),
+  clientKey: z.string().trim().min(1).max(120),
+  scopes: z.array(z.string().trim().min(1).max(120)).max(64).optional(),
+  unsafeDemoUrlOverride: z.boolean().optional(),
+  draftHint: draftHintSchema
+});
 var actionCardActionSchema = z.discriminatedUnion("type", [
   channelCreateOperationSchema,
   agentCreateOperationSchema,
   channelAddMemberOperationSchema,
-  integrationApproveAgentLoginOperationSchema
+  integrationApproveAgentLoginOperationSchema,
+  integrationRegisterAppOperationSchema,
+  integrationUpdateAppRegistrationOperationSchema
 ]);
 
 // ../shared/src/agentInbox.ts
@@ -1540,8 +1565,8 @@ var PLAN_CONFIG = {
     displayFeatures: [
       "Channels",
       "Tasks",
-      "Unlimited agents on your own computers",
-      "Agent Reminders",
+      "Agents on your own computers",
+      "Agent reminders",
       "Basic observability",
       "30 days of message history",
       "100 MB file uploads/month"
@@ -1572,12 +1597,13 @@ var DISPLAY_PLAN_CONFIG = {
     priceCadence: "/ seat pack / month",
     extraAgentPrice: 0,
     displayFeatures: [
-      "1 human seat + 10 agent seats per Pro Seat Pack",
+      "Everything in Free",
       "Unlimited message history",
       "Higher file upload limits",
-      "Joint Channels",
+      "Joint channels",
       "More professional features coming soon"
     ],
+    displayDescription: "For builders and teams scaling agent collaboration.",
     displayNote: "$17.60 / seat pack / month when billed yearly"
   },
   enterprise: {
@@ -1589,14 +1615,18 @@ var DISPLAY_PLAN_CONFIG = {
     priceCadence: null,
     extraAgentPrice: 0,
     displayFeatures: [
-      "Custom commercial terms",
-      "Security and compliance review",
-      "Dedicated support and onboarding",
-      "Custom deployment planning"
-    ]
+      "Everything in Pro",
+      "Private deployment options",
+      "SSO and advanced access control",
+      "Dedicated onboarding and rollout support"
+    ],
+    displayDescription: "For advanced deployment and governance needs."
   }
 };
 var FREE_MONTHLY_FILE_UPLOAD_LIMIT_BYTES = 100 * 1024 * 1024;
+var TRIAL_START_DATE = /* @__PURE__ */ new Date("2026-04-18T00:00:00Z");
+var TRIAL_END_DATE = /* @__PURE__ */ new Date("2026-06-23T12:00:00Z");
+var TRIAL_DURATION_DAYS = (TRIAL_END_DATE.getTime() - TRIAL_START_DATE.getTime()) / (24 * 60 * 60 * 1e3);
 
 // src/agentProcessManager.ts
 import { existsSync as existsSync8, mkdirSync as mkdirSync4, readFileSync as readFileSync6, readdirSync as readdirSync4, statSync, writeFileSync as writeFileSync4 } from "fs";
@@ -2582,6 +2612,19 @@ function listLegacySlockStatePaths(slockHome = resolveSlockHome(), homeDir = os.
   return candidates.filter((candidate) => existsSync(candidate.path));
 }
 
+// src/authEnv.ts
+var DAEMON_API_KEY_ENV = "SLOCK_MACHINE_API_KEY";
+var SLOCK_AGENT_TOKEN_ENV = "SLOCK_AGENT_TOKEN";
+function scrubDaemonAuthEnv(env) {
+  delete env[DAEMON_API_KEY_ENV];
+  return env;
+}
+function scrubDaemonChildEnv(env) {
+  delete env[DAEMON_API_KEY_ENV];
+  delete env[SLOCK_AGENT_TOKEN_ENV];
+  return env;
+}
+
 // src/agentCredentialProxy.ts
 import { randomBytes } from "crypto";
 import http from "http";
@@ -4148,7 +4191,9 @@ var LOOPBACK_NO_PROXY = "127.0.0.1,localhost";
 var CLI_TRANSPORT_TRACE_DIR_ENV = "SLOCK_CLI_TRANSPORT_TRACE_DIR";
 var safePathPart = (value) => value.replace(/[^a-zA-Z0-9_.-]/g, "_");
 var RAW_CREDENTIAL_ENV_DENYLIST = [
-  "SLOCK_AGENT_CREDENTIAL_KEY"
+  "SLOCK_AGENT_TOKEN",
+  "SLOCK_AGENT_CREDENTIAL_KEY",
+  "SLOCK_AGENT_CREDENTIAL_KEY_FILE"
 ];
 var WORKSPACE_CLI_TRANSPORT_FILENAMES = [
   "agent-token",
@@ -4500,7 +4545,7 @@ set "SLOCK_AGENT_ACTIVE_CAPABILITIES=${DEFAULT_ACTIVE_CAPABILITIES}"\r
     SLOCK_SERVER_URL: ctx.config.serverUrl,
     PATH: `${slockDir}${path2.delimiter}${process.env.PATH ?? ""}`
   };
-  delete spawnEnv.SLOCK_AGENT_TOKEN;
+  scrubDaemonChildEnv(spawnEnv);
   for (const key of RAW_CREDENTIAL_ENV_DENYLIST) {
     delete spawnEnv[key];
   }
@@ -5022,7 +5067,7 @@ function requiresWindowsShell(command, platform = process.platform) {
 }
 function resolveCommandOnPath(command, deps = {}) {
   const platform = deps.platform ?? process.platform;
-  const env = withWindowsUserEnvironment(deps.env ?? process.env, deps);
+  const env = scrubDaemonChildEnv({ ...withWindowsUserEnvironment(deps.env ?? process.env, deps) });
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync;
   const existsSyncFn = deps.existsSyncFn ?? existsSync3;
   if (platform === "win32") {
@@ -5048,7 +5093,7 @@ function firstExistingPath(candidates, deps = {}) {
   return null;
 }
 function readCommandVersion(command, args = [], deps = {}) {
-  const env = withWindowsUserEnvironment(deps.env ?? process.env, deps);
+  const env = scrubDaemonChildEnv({ ...withWindowsUserEnvironment(deps.env ?? process.env, deps) });
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync;
   try {
     const output = normalizeExecOutput(execFileSyncFn(command, [...args, "--version"], {
@@ -7128,11 +7173,11 @@ function detectCursorModels(runCommand = runCursorModelsCommand) {
   return parseCursorModelsOutput(String(result.stdout || ""));
 }
 function buildCursorModelProbeEnv(deps = {}) {
-  return withWindowsUserEnvironment({
+  return scrubDaemonChildEnv(withWindowsUserEnvironment({
     ...deps.env ?? process.env,
     FORCE_COLOR: "0",
     NO_COLOR: "1"
-  }, deps);
+  }, deps));
 }
 function runCursorModelsCommand() {
   return spawnSync("cursor-agent", ["models"], {
@@ -7188,7 +7233,7 @@ function resolveGeminiSpawn(commandArgs, deps = {}) {
   }
   const execFileSyncFn = deps.execFileSyncFn ?? execFileSync3;
   const existsSyncFn = deps.existsSyncFn ?? existsSync5;
-  const env = deps.env ?? process.env;
+  const env = scrubDaemonChildEnv({ ...deps.env ?? process.env });
   const winPath = path8.win32;
   let geminiEntry = null;
   try {
@@ -7325,12 +7370,15 @@ var GeminiDriver = class {
 // src/drivers/kimi.ts
 import { randomUUID as randomUUID2 } from "crypto";
 import { spawn as spawn7 } from "child_process";
-import { existsSync as existsSync6, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import { chmodSync, existsSync as existsSync6, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
 import os4 from "os";
 import path9 from "path";
 var KIMI_WIRE_PROTOCOL_VERSION = "1.3";
 var KIMI_SYSTEM_PROMPT_FILE = ".slock-kimi-system.md";
 var KIMI_AGENT_FILE = ".slock-kimi-agent.yaml";
+var KIMI_GENERATED_CONFIG_FILE = ".slock-kimi-config.toml";
+var SLOCK_KIMI_CONFIG_CONTENT_ENV = "SLOCK_KIMI_CONFIG_CONTENT";
+var SLOCK_KIMI_CONFIG_FILE_ENV = "SLOCK_KIMI_CONFIG_FILE";
 function parseToolArguments(raw) {
   if (typeof raw !== "string") return raw;
   try {
@@ -7339,6 +7387,73 @@ function parseToolArguments(raw) {
     return raw;
   }
 }
+function readKimiConfigSource(home = os4.homedir(), env = process.env) {
+  const inlineConfig = env[SLOCK_KIMI_CONFIG_CONTENT_ENV];
+  if (inlineConfig && inlineConfig.trim()) {
+    return {
+      raw: inlineConfig,
+      explicitPath: null,
+      sourcePath: SLOCK_KIMI_CONFIG_CONTENT_ENV
+    };
+  }
+  const explicitPath = env[SLOCK_KIMI_CONFIG_FILE_ENV];
+  const configPath = explicitPath && explicitPath.trim() ? explicitPath : path9.join(home, ".kimi", "config.toml");
+  try {
+    return {
+      raw: readFileSync3(configPath, "utf8"),
+      explicitPath: explicitPath && explicitPath.trim() ? explicitPath : null,
+      sourcePath: configPath
+    };
+  } catch {
+    return {
+      raw: null,
+      explicitPath: explicitPath && explicitPath.trim() ? explicitPath : null,
+      sourcePath: configPath
+    };
+  }
+}
+function buildKimiSpawnEnv(env = process.env) {
+  const spawnEnv = { ...env, FORCE_COLOR: "0", NO_COLOR: "1" };
+  delete spawnEnv[SLOCK_KIMI_CONFIG_CONTENT_ENV];
+  delete spawnEnv[SLOCK_KIMI_CONFIG_FILE_ENV];
+  return scrubDaemonChildEnv(spawnEnv);
+}
+function buildKimiEffectiveEnv(ctx, overrideEnv) {
+  return {
+    ...process.env,
+    ...ctx.config.envVars || {},
+    ...overrideEnv || {}
+  };
+}
+function buildKimiLaunchOptions(ctx, opts = {}) {
+  const env = buildKimiEffectiveEnv(ctx, opts.env);
+  const source = readKimiConfigSource(opts.home ?? os4.homedir(), env);
+  const args = [];
+  let configFilePath = null;
+  let configContent = null;
+  if (source.explicitPath) {
+    configFilePath = source.explicitPath;
+  } else if (source.raw !== null && source.sourcePath === SLOCK_KIMI_CONFIG_CONTENT_ENV) {
+    configFilePath = path9.join(ctx.workingDirectory, KIMI_GENERATED_CONFIG_FILE);
+    configContent = source.raw;
+    if (opts.writeGeneratedConfig !== false) {
+      writeFileSync3(configFilePath, source.raw, { encoding: "utf8", mode: 384 });
+      chmodSync(configFilePath, 384);
+    }
+  }
+  if (configFilePath) {
+    args.push("--config-file", configFilePath);
+  }
+  if (ctx.config.model && ctx.config.model !== "default") {
+    args.push("--model", ctx.config.model);
+  }
+  return {
+    args,
+    env: buildKimiSpawnEnv(env),
+    configFilePath,
+    configContent
+  };
+}
 function resolveKimiSpawn(commandArgs, deps = {}) {
   return {
     command: resolveCommandOnPath("kimi", deps) ?? "kimi",
@@ -7362,7 +7477,25 @@ var KimiDriver = class {
   };
   model = {
     detectedModelsVerifiedAs: "launchable",
-    toLaunchSpec: (modelId) => ({ args: ["--model", modelId] })
+    toLaunchSpec: (modelId, ctx, opts) => {
+      if (!ctx) return { args: ["--model", modelId] };
+      const launchCtx = {
+        ...ctx,
+        config: {
+          ...ctx.config,
+          model: modelId
+        }
+      };
+      const launch = buildKimiLaunchOptions(launchCtx, {
+        home: opts?.home,
+        writeGeneratedConfig: false
+      });
+      return {
+        args: launch.args,
+        env: launch.env,
+        configFiles: launch.configFilePath ? [launch.configFilePath] : void 0
+      };
+    }
   };
   supportsStdinNotification = true;
   busyDeliveryMode = "direct";
@@ -7386,21 +7519,23 @@ var KimiDriver = class {
       `  system_prompt_path: ./${KIMI_SYSTEM_PROMPT_FILE}`,
       ""
     ].join("\n"), "utf8");
+    const launch = buildKimiLaunchOptions(ctx);
     const args = [
       "--wire",
       "--yolo",
       "--agent-file",
       agentFilePath,
       "--session",
-      this.sessionId
+      this.sessionId,
+      ...launch.args
     ];
     const launchRuntimeFields = runtimeConfigToLaunchFields(ctx.config);
     if (launchRuntimeFields.model && launchRuntimeFields.model !== "default") {
       args.push("--model", launchRuntimeFields.model);
     }
     const spawnEnv = (await prepareCliTransport(ctx, { NO_COLOR: "1" })).spawnEnv;
-    const launch = resolveKimiSpawn(args);
-    const proc = spawn7(launch.command, launch.args, {
+    const spawnTarget = resolveKimiSpawn(args);
+    const proc = spawn7(spawnTarget.command, spawnTarget.args, {
       cwd: ctx.workingDirectory,
       stdio: ["pipe", "pipe", "pipe"],
       env: spawnEnv,
@@ -7408,7 +7543,7 @@ var KimiDriver = class {
       // and has an 8191-character command-line limit. Kimi's official
       // installer/uv entrypoint is an executable, so launch it directly and
       // keep prompts on stdin / files instead of routing through cmd.exe.
-      shell: launch.shell
+      shell: spawnTarget.shell
     });
     proc.stdin?.write(JSON.stringify({
       jsonrpc: "2.0",
@@ -7521,14 +7656,9 @@ var KimiDriver = class {
     return detectKimiModels();
   }
 };
-function detectKimiModels(home = os4.homedir()) {
-  const configPath = path9.join(home, ".kimi", "config.toml");
-  let raw;
-  try {
-    raw = readFileSync3(configPath, "utf8");
-  } catch {
-    return null;
-  }
+function detectKimiModels(home = os4.homedir(), opts = {}) {
+  const raw = readKimiConfigSource(home, opts.env).raw;
+  if (raw === null) return null;
   const models = [];
   const sectionRe = /^\s*\[models(?:\.([^\]]+)|"\.[^"]+"|\."[^"]+")\s*\]\s*$/gm;
   const lineRe = /^\s*\[models\.(.+?)\s*\]\s*$/gm;
@@ -8252,7 +8382,7 @@ function runOpenCodeModelsCommand(home, deps = {}) {
   const platform = deps.platform ?? process.platform;
   const spawnSyncFn = deps.spawnSyncFn ?? spawnSync2;
   const result = spawnSyncFn("opencode", ["models"], {
-    env: { ...process.env, HOME: home, FORCE_COLOR: "0", NO_COLOR: "1" },
+    env: scrubDaemonChildEnv({ ...process.env, HOME: home, FORCE_COLOR: "0", NO_COLOR: "1" }),
     encoding: "utf8",
     timeout: 5e3,
     shell: platform === "win32"
@@ -16934,7 +17064,7 @@ var DAEMON_CORE_TRACE_ATTR_CONTRACTS = {
     spanAttrs: ["agentId", "event_kind", "runtime"]
   }
 };
-var DAEMON_CLI_USAGE = "Usage: slock-daemon --server-url <url> --api-key <key>";
+var DAEMON_CLI_USAGE = `Usage: slock-daemon --server-url <url> (--api-key <key> or ${DAEMON_API_KEY_ENV}=<key>)`;
 var RunnerCredentialMintError2 = class extends Error {
   code;
   retryable;
@@ -16970,9 +17100,9 @@ function runnerCredentialErrorDetail2(error) {
 async function waitForRunnerCredentialRetry2() {
   await new Promise((resolve) => setTimeout(resolve, RUNNER_CREDENTIAL_MINT_RETRY_DELAY_MS2));
 }
-function parseDaemonCliArgs(args) {
+function parseDaemonCliArgs(args, env = {}) {
   let serverUrl = "";
-  let apiKey = "";
+  let apiKey = env[DAEMON_API_KEY_ENV] ?? "";
   for (let i = 0; i < args.length; i++) {
     if (args[i] === "--server-url" && args[i + 1]) serverUrl = args[++i];
     if (args[i] === "--api-key" && args[i + 1]) apiKey = args[++i];
@@ -17009,7 +17139,7 @@ function resolveSlockCliPathOrEmpty(moduleUrl = import.meta.url) {
 }
 async function runBundledSlockCli(argv) {
   process.argv = [process.execPath, "slock", ...argv];
-  await import("./dist-4KV4FRQE.js");
+  await import("./dist-LRTPHCPD.js");
 }
 function detectRuntimes(tracer = noopTracer) {
   const ids = [];
@@ -17897,6 +18027,8 @@ var DaemonCore = class {
 
 export {
   subscribeDaemonLogs,
+  DAEMON_API_KEY_ENV,
+  scrubDaemonAuthEnv,
   resolveWorkspaceDirectoryPath,
   scanWorkspaceDirectories,
   deleteWorkspaceDirectory,

package/dist/cli/index.js

@@ -15443,11 +15443,36 @@ var integrationApproveAgentLoginOperationSchema = external_exports.object({
   scopes: external_exports.array(external_exports.string().trim().min(1).max(120)).max(64),
   draftHint: draftHintSchema
 });
+var integrationAppDraftFieldsSchema = external_exports.object({
+  name: external_exports.string().trim().min(1).max(120).optional(),
+  description: external_exports.string().trim().max(1e3).optional(),
+  homepageUrl: external_exports.string().trim().max(2e3).optional(),
+  returnUrl: external_exports.string().trim().max(2e3).optional(),
+  agentManifestUrl: external_exports.string().trim().max(2e3).optional()
+});
+var integrationRegisterAppOperationSchema = integrationAppDraftFieldsSchema.extend({
+  type: external_exports.literal("integration:register_app"),
+  name: external_exports.string().trim().min(1).max(120),
+  clientKey: external_exports.string().trim().min(1).max(120),
+  returnUrl: external_exports.string().trim().min(1).max(2e3),
+  scopes: external_exports.array(external_exports.string().trim().min(1).max(120)).max(64).default([]),
+  unsafeDemoUrlOverride: external_exports.boolean().optional(),
+  draftHint: draftHintSchema
+});
+var integrationUpdateAppRegistrationOperationSchema = integrationAppDraftFieldsSchema.extend({
+  type: external_exports.literal("integration:update_app_registration"),
+  clientKey: external_exports.string().trim().min(1).max(120),
+  scopes: external_exports.array(external_exports.string().trim().min(1).max(120)).max(64).optional(),
+  unsafeDemoUrlOverride: external_exports.boolean().optional(),
+  draftHint: draftHintSchema
+});
 var actionCardActionSchema = external_exports.discriminatedUnion("type", [
   channelCreateOperationSchema,
   agentCreateOperationSchema,
   channelAddMemberOperationSchema,
-  integrationApproveAgentLoginOperationSchema
+  integrationApproveAgentLoginOperationSchema,
+  integrationRegisterAppOperationSchema,
+  integrationUpdateAppRegistrationOperationSchema
 ]);
 function validateActionCardAction(action) {
   if (action.type === "agent:create") {
@@ -15461,6 +15486,12 @@ function validateActionCardAction(action) {
       return "channel:add_member must include at least one human or agent";
     }
   }
+  if (action.type === "integration:update_app_registration") {
+    const hasMetadataPatch = action.name !== void 0 || action.description !== void 0 || action.homepageUrl !== void 0 || action.returnUrl !== void 0 || action.agentManifestUrl !== void 0 || action.scopes !== void 0;
+    if (!hasMetadataPatch) {
+      return "integration:update_app_registration must include at least one field to update";
+    }
+  }
   return null;
 }
 
@@ -15864,8 +15895,8 @@ var PLAN_CONFIG = {
     displayFeatures: [
       "Channels",
       "Tasks",
-      "Unlimited agents on your own computers",
-      "Agent Reminders",
+      "Agents on your own computers",
+      "Agent reminders",
       "Basic observability",
       "30 days of message history",
       "100 MB file uploads/month"
@@ -15896,12 +15927,13 @@ var DISPLAY_PLAN_CONFIG = {
     priceCadence: "/ seat pack / month",
     extraAgentPrice: 0,
     displayFeatures: [
-      "1 human seat + 10 agent seats per Pro Seat Pack",
+      "Everything in Free",
       "Unlimited message history",
       "Higher file upload limits",
-      "Joint Channels",
+      "Joint channels",
       "More professional features coming soon"
     ],
+    displayDescription: "For builders and teams scaling agent collaboration.",
     displayNote: "$17.60 / seat pack / month when billed yearly"
   },
   enterprise: {
@@ -15913,14 +15945,18 @@ var DISPLAY_PLAN_CONFIG = {
     priceCadence: null,
     extraAgentPrice: 0,
     displayFeatures: [
-      "Custom commercial terms",
-      "Security and compliance review",
-      "Dedicated support and onboarding",
-      "Custom deployment planning"
-    ]
+      "Everything in Pro",
+      "Private deployment options",
+      "SSO and advanced access control",
+      "Dedicated onboarding and rollout support"
+    ],
+    displayDescription: "For advanced deployment and governance needs."
   }
 };
 var FREE_MONTHLY_FILE_UPLOAD_LIMIT_BYTES = 100 * 1024 * 1024;
+var TRIAL_START_DATE = /* @__PURE__ */ new Date("2026-04-18T00:00:00Z");
+var TRIAL_END_DATE = /* @__PURE__ */ new Date("2026-06-23T12:00:00Z");
+var TRIAL_DURATION_DAYS = (TRIAL_END_DATE.getTime() - TRIAL_START_DATE.getTime()) / (24 * 60 * 60 * 1e3);
 
 // src/agentCommsCore/bridge.ts
 var AGENT_COMMS_PROTOCOL_VERSION = "agent-comms-core.v1";
@@ -17232,7 +17268,7 @@ var actionPrepareCommand = defineCommand(
     options: [
       {
         flags: "--target <target>",
-        description: "Channel/DM/thread target to post the card. Same format as raft message send: '#channel', 'dm:@peer', '#channel:shortid'"
+        description: "Channel/DM/thread target to post the card. Same format as raft message send: '#channel', 'dm:@peer', '#channel:shortid', 'dm:@peer:shortid'"
       }
     ]
   },
@@ -19098,8 +19134,10 @@ var attachmentUploadCommand = defineCommand(
       form
     );
     if (!res.ok) {
-      const code = res.status >= 500 ? "SERVER_5XX" : "UPLOAD_FAILED";
-      throw cliError(code, res.error ?? `HTTP ${res.status}`);
+      const code = res.errorCode ?? (res.status >= 500 ? "SERVER_5XX" : "UPLOAD_FAILED");
+      throw cliError(code, res.error ?? `HTTP ${res.status}`, {
+        suggestedNextAction: res.suggestedNextAction ?? void 0
+      });
     }
     const d = res.data;
     writeText(ctx.io, `File uploaded: ${d.filename} (${(d.sizeBytes / 1024).toFixed(1)}KB)
@@ -20520,6 +20558,131 @@ function registerIntegrationEnvCommand(parent, runtimeOptions = {}) {
   registerCliCommand(parent, integrationEnvCommand, runtimeOptions);
 }
 
+// src/commands/integration/app.ts
+function normalizeScopes2(raw) {
+  if (!raw || raw.length === 0) return void 0;
+  const scopes = Array.from(new Set(
+    raw.flatMap((value) => value.split(",")).map((value) => value.trim()).filter(Boolean)
+  )).sort();
+  if (scopes.length === 0) {
+    throw cliError("INVALID_ARG", "--scope must include at least one non-empty scope");
+  }
+  return scopes;
+}
+function requiredTrimmed(value, flag) {
+  const trimmed = value?.trim() ?? "";
+  if (!trimmed) throw cliError("INVALID_ARG", `${flag} is required`);
+  return trimmed;
+}
+function optionalTrimmed(value) {
+  return value?.trim() || void 0;
+}
+function formatAppPrepare(data) {
+  const lines = [
+    `Integration app ${data.mode} card prepared`,
+    `client key: ${data.action.clientKey}`,
+    `card: ${data.actionCardMessageId}`,
+    `target: ${data.target}`
+  ];
+  if (data.action.name) lines.push(`name: ${data.action.name}`);
+  if (data.action.homepageUrl) lines.push(`app URL: ${data.action.homepageUrl}`);
+  if (data.action.returnUrl) lines.push(`redirect URL: ${data.action.returnUrl}`);
+  if (data.action.agentManifestUrl) lines.push(`agent manifest: ${data.action.agentManifestUrl}`);
+  if (data.action.scopes) lines.push(`scopes: ${data.action.scopes.length > 0 ? data.action.scopes.join(", ") : "-"}`);
+  if (data.action.unsafeDemoUrlOverride) lines.push("unsafe demo URL override: requested");
+  lines.push("next: ask a server owner/admin to review and execute the action card");
+  lines.push("secret: not stored in the card; after owner/admin execution, the requester agent receives a private one-time handoff");
+  return lines.join("\n");
+}
+async function prepareApp(mode, ctx, opts) {
+  const target = requiredTrimmed(opts.target, "--target");
+  const clientKey = requiredTrimmed(opts.clientKey, "--client-key");
+  const scopes = normalizeScopes2([...opts.scope ?? [], ...opts.scopes ?? []]);
+  const agentContext = ctx.loadAgentContext();
+  const client = ctx.createApiClient(agentContext);
+  const body = {
+    mode,
+    target,
+    clientKey,
+    name: optionalTrimmed(opts.name),
+    description: optionalTrimmed(opts.description),
+    homepageUrl: optionalTrimmed(opts.homepageUrl) ?? optionalTrimmed(opts.appUrl),
+    returnUrl: optionalTrimmed(opts.redirectUrl),
+    agentManifestUrl: optionalTrimmed(opts.agentManifestUrl),
+    scopes,
+    unsafeDemoUrlOverride: opts.unsafeDemoUrlOverride === true
+  };
+  if (mode === "register") {
+    requiredTrimmed(body.name, "--name");
+    requiredTrimmed(body.returnUrl, "--redirect-url");
+  }
+  const res = await client.request(
+    "POST",
+    `/internal/agent/${encodeURIComponent(agentContext.agentId)}/integrations/app/prepare`,
+    body
+  );
+  if (!res.ok || !res.data) {
+    const code = res.status >= 500 ? "SERVER_5XX" : "INTEGRATION_APP_PREPARE_FAILED";
+    throw cliError(code, res.error ?? `HTTP ${res.status}`);
+  }
+  if (opts.json) {
+    writeJson(ctx.io, { ok: true, data: res.data });
+    return;
+  }
+  writeText(ctx.io, `${formatAppPrepare(res.data)}
+`);
+}
+var sharedOptions = [
+  { flags: "--client-key <key>", description: "Stable app client key / OAuth client_id to reserve or update" },
+  { flags: "--name <name>", description: "App display name" },
+  { flags: "--redirect-url <url>", description: "OAuth redirect/callback URL" },
+  { flags: "--app-url <url>", description: "App homepage URL" },
+  { flags: "--homepage-url <url>", description: "App homepage URL (alias-friendly explicit name)" },
+  { flags: "--description <text>", description: "App description" },
+  { flags: "--agent-manifest-url <url>", description: "Optional agent behavior manifest URL" },
+  {
+    flags: "--scope <scope>",
+    description: "Requested/displayed scope; can be repeated or comma-separated",
+    parse: (value, previous = []) => {
+      previous.push(value);
+      return previous;
+    }
+  },
+  {
+    flags: "--scopes <scopes>",
+    description: "Requested/displayed scopes; alias for --scope, comma-separated",
+    parse: (value, previous = []) => {
+      previous.push(value);
+      return previous;
+    }
+  },
+  { flags: "--unsafe-demo-url-override", description: "Explicitly mark localhost/private URL use as an unsafe demo override" },
+  { flags: "--target <target>", description: "Channel/DM/thread target to post the human action card" },
+  { flags: "--json", description: "Emit machine-readable JSON" }
+];
+var integrationAppPrepareRegisterCommand = defineCommand(
+  {
+    name: "register",
+    description: "Prepare a third-party app registration action card for a human owner/admin to commit",
+    options: sharedOptions
+  },
+  async (ctx, opts) => prepareApp("register", ctx, opts)
+);
+var integrationAppPrepareUpdateCommand = defineCommand(
+  {
+    name: "update",
+    description: "Prepare a third-party app registration update action card for a human owner/admin to commit",
+    options: sharedOptions
+  },
+  async (ctx, opts) => prepareApp("update", ctx, opts)
+);
+function registerIntegrationAppCommands(parent, runtimeOptions = {}) {
+  const appCmd = parent.command("app").description("Third-party app registration preparation");
+  const prepareCmd = appCmd.command("prepare").description("Prepare app registration/update action cards");
+  registerCliCommand(prepareCmd, integrationAppPrepareRegisterCommand, runtimeOptions);
+  registerCliCommand(prepareCmd, integrationAppPrepareUpdateCommand, runtimeOptions);
+}
+
 // src/commands/reminder/_format.ts
 var MODIFY_HINT = "(to modify: snooze/update/cancel; raft reminder --help)";
 function formatReminder(r) {
@@ -20976,6 +21139,7 @@ var integrationCmd = program.command("integration").description("Third-party ser
 registerIntegrationListCommand(integrationCmd);
 registerIntegrationLoginCommand(integrationCmd);
 registerIntegrationEnvCommand(integrationCmd);
+registerIntegrationAppCommands(integrationCmd);
 var reminderCmd = program.command("reminder").description("Reminder operations");
 registerReminderScheduleCommand(reminderCmd);
 registerReminderListCommand(reminderCmd);

package/dist/core.js

@@ -1,4 +1,5 @@
 import {
+  DAEMON_API_KEY_ENV,
   DAEMON_CLI_USAGE,
   DaemonCore,
   deleteWorkspaceDirectory,
@@ -10,9 +11,11 @@ import {
   resolveWorkspaceDirectoryPath,
   runBundledSlockCli,
   scanWorkspaceDirectories,
+  scrubDaemonAuthEnv,
   subscribeDaemonLogs
-} from "./chunk-RUGCYI7A.js";
+} from "./chunk-ZGGFS72W.js";
 export {
+  DAEMON_API_KEY_ENV,
   DAEMON_CLI_USAGE,
   DaemonCore,
   deleteWorkspaceDirectory,
@@ -24,5 +27,6 @@ export {
   resolveWorkspaceDirectoryPath,
   runBundledSlockCli,
   scanWorkspaceDirectories,
+  scrubDaemonAuthEnv,
   subscribeDaemonLogs
 };

package/dist/{dist-4KV4FRQE.js → dist-LRTPHCPD.js}

@@ -15259,11 +15259,36 @@ var integrationApproveAgentLoginOperationSchema = external_exports.object({
   scopes: external_exports.array(external_exports.string().trim().min(1).max(120)).max(64),
   draftHint: draftHintSchema
 });
+var integrationAppDraftFieldsSchema = external_exports.object({
+  name: external_exports.string().trim().min(1).max(120).optional(),
+  description: external_exports.string().trim().max(1e3).optional(),
+  homepageUrl: external_exports.string().trim().max(2e3).optional(),
+  returnUrl: external_exports.string().trim().max(2e3).optional(),
+  agentManifestUrl: external_exports.string().trim().max(2e3).optional()
+});
+var integrationRegisterAppOperationSchema = integrationAppDraftFieldsSchema.extend({
+  type: external_exports.literal("integration:register_app"),
+  name: external_exports.string().trim().min(1).max(120),
+  clientKey: external_exports.string().trim().min(1).max(120),
+  returnUrl: external_exports.string().trim().min(1).max(2e3),
+  scopes: external_exports.array(external_exports.string().trim().min(1).max(120)).max(64).default([]),
+  unsafeDemoUrlOverride: external_exports.boolean().optional(),
+  draftHint: draftHintSchema
+});
+var integrationUpdateAppRegistrationOperationSchema = integrationAppDraftFieldsSchema.extend({
+  type: external_exports.literal("integration:update_app_registration"),
+  clientKey: external_exports.string().trim().min(1).max(120),
+  scopes: external_exports.array(external_exports.string().trim().min(1).max(120)).max(64).optional(),
+  unsafeDemoUrlOverride: external_exports.boolean().optional(),
+  draftHint: draftHintSchema
+});
 var actionCardActionSchema = external_exports.discriminatedUnion("type", [
   channelCreateOperationSchema,
   agentCreateOperationSchema,
   channelAddMemberOperationSchema,
-  integrationApproveAgentLoginOperationSchema
+  integrationApproveAgentLoginOperationSchema,
+  integrationRegisterAppOperationSchema,
+  integrationUpdateAppRegistrationOperationSchema
 ]);
 function validateActionCardAction(action) {
   if (action.type === "agent:create") {
@@ -15277,6 +15302,12 @@ function validateActionCardAction(action) {
       return "channel:add_member must include at least one human or agent";
     }
   }
+  if (action.type === "integration:update_app_registration") {
+    const hasMetadataPatch = action.name !== void 0 || action.description !== void 0 || action.homepageUrl !== void 0 || action.returnUrl !== void 0 || action.agentManifestUrl !== void 0 || action.scopes !== void 0;
+    if (!hasMetadataPatch) {
+      return "integration:update_app_registration must include at least one field to update";
+    }
+  }
   return null;
 }
 function formatAgentInboxSnapshot(rows) {
@@ -15668,8 +15699,8 @@ var PLAN_CONFIG = {
     displayFeatures: [
       "Channels",
       "Tasks",
-      "Unlimited agents on your own computers",
-      "Agent Reminders",
+      "Agents on your own computers",
+      "Agent reminders",
       "Basic observability",
       "30 days of message history",
       "100 MB file uploads/month"
@@ -15700,12 +15731,13 @@ var DISPLAY_PLAN_CONFIG = {
     priceCadence: "/ seat pack / month",
     extraAgentPrice: 0,
     displayFeatures: [
-      "1 human seat + 10 agent seats per Pro Seat Pack",
+      "Everything in Free",
       "Unlimited message history",
       "Higher file upload limits",
-      "Joint Channels",
+      "Joint channels",
       "More professional features coming soon"
     ],
+    displayDescription: "For builders and teams scaling agent collaboration.",
     displayNote: "$17.60 / seat pack / month when billed yearly"
   },
   enterprise: {
@@ -15717,14 +15749,18 @@ var DISPLAY_PLAN_CONFIG = {
     priceCadence: null,
     extraAgentPrice: 0,
     displayFeatures: [
-      "Custom commercial terms",
-      "Security and compliance review",
-      "Dedicated support and onboarding",
-      "Custom deployment planning"
-    ]
+      "Everything in Pro",
+      "Private deployment options",
+      "SSO and advanced access control",
+      "Dedicated onboarding and rollout support"
+    ],
+    displayDescription: "For advanced deployment and governance needs."
   }
 };
 var FREE_MONTHLY_FILE_UPLOAD_LIMIT_BYTES = 100 * 1024 * 1024;
+var TRIAL_START_DATE = /* @__PURE__ */ new Date("2026-04-18T00:00:00Z");
+var TRIAL_END_DATE = /* @__PURE__ */ new Date("2026-06-23T12:00:00Z");
+var TRIAL_DURATION_DAYS = (TRIAL_END_DATE.getTime() - TRIAL_START_DATE.getTime()) / (24 * 60 * 60 * 1e3);
 var AGENT_COMMS_PROTOCOL_VERSION = "agent-comms-core.v1";
 var AGENT_PROOF_SCHEMA_VERSION = "agent-proof.v1";
 var AgentCommsBridgeLockError = class extends Error {
@@ -17028,7 +17064,7 @@ var actionPrepareCommand = defineCommand(
     options: [
       {
         flags: "--target <target>",
-        description: "Channel/DM/thread target to post the card. Same format as raft message send: '#channel', 'dm:@peer', '#channel:shortid'"
+        description: "Channel/DM/thread target to post the card. Same format as raft message send: '#channel', 'dm:@peer', '#channel:shortid', 'dm:@peer:shortid'"
       }
     ]
   },
@@ -18844,8 +18880,10 @@ var attachmentUploadCommand = defineCommand(
       form
     );
     if (!res.ok) {
-      const code = res.status >= 500 ? "SERVER_5XX" : "UPLOAD_FAILED";
-      throw cliError(code, res.error ?? `HTTP ${res.status}`);
+      const code = res.errorCode ?? (res.status >= 500 ? "SERVER_5XX" : "UPLOAD_FAILED");
+      throw cliError(code, res.error ?? `HTTP ${res.status}`, {
+        suggestedNextAction: res.suggestedNextAction ?? void 0
+      });
     }
     const d = res.data;
     writeText(ctx.io, `File uploaded: ${d.filename} (${(d.sizeBytes / 1024).toFixed(1)}KB)
@@ -20221,6 +20259,129 @@ var integrationEnvCommand = defineCommand(
 function registerIntegrationEnvCommand(parent, runtimeOptions = {}) {
   registerCliCommand(parent, integrationEnvCommand, runtimeOptions);
 }
+function normalizeScopes2(raw) {
+  if (!raw || raw.length === 0) return void 0;
+  const scopes = Array.from(new Set(
+    raw.flatMap((value) => value.split(",")).map((value) => value.trim()).filter(Boolean)
+  )).sort();
+  if (scopes.length === 0) {
+    throw cliError("INVALID_ARG", "--scope must include at least one non-empty scope");
+  }
+  return scopes;
+}
+function requiredTrimmed(value, flag) {
+  const trimmed = value?.trim() ?? "";
+  if (!trimmed) throw cliError("INVALID_ARG", `${flag} is required`);
+  return trimmed;
+}
+function optionalTrimmed(value) {
+  return value?.trim() || void 0;
+}
+function formatAppPrepare(data) {
+  const lines = [
+    `Integration app ${data.mode} card prepared`,
+    `client key: ${data.action.clientKey}`,
+    `card: ${data.actionCardMessageId}`,
+    `target: ${data.target}`
+  ];
+  if (data.action.name) lines.push(`name: ${data.action.name}`);
+  if (data.action.homepageUrl) lines.push(`app URL: ${data.action.homepageUrl}`);
+  if (data.action.returnUrl) lines.push(`redirect URL: ${data.action.returnUrl}`);
+  if (data.action.agentManifestUrl) lines.push(`agent manifest: ${data.action.agentManifestUrl}`);
+  if (data.action.scopes) lines.push(`scopes: ${data.action.scopes.length > 0 ? data.action.scopes.join(", ") : "-"}`);
+  if (data.action.unsafeDemoUrlOverride) lines.push("unsafe demo URL override: requested");
+  lines.push("next: ask a server owner/admin to review and execute the action card");
+  lines.push("secret: not stored in the card; after owner/admin execution, the requester agent receives a private one-time handoff");
+  return lines.join("\n");
+}
+async function prepareApp(mode, ctx, opts) {
+  const target = requiredTrimmed(opts.target, "--target");
+  const clientKey = requiredTrimmed(opts.clientKey, "--client-key");
+  const scopes = normalizeScopes2([...opts.scope ?? [], ...opts.scopes ?? []]);
+  const agentContext = ctx.loadAgentContext();
+  const client = ctx.createApiClient(agentContext);
+  const body = {
+    mode,
+    target,
+    clientKey,
+    name: optionalTrimmed(opts.name),
+    description: optionalTrimmed(opts.description),
+    homepageUrl: optionalTrimmed(opts.homepageUrl) ?? optionalTrimmed(opts.appUrl),
+    returnUrl: optionalTrimmed(opts.redirectUrl),
+    agentManifestUrl: optionalTrimmed(opts.agentManifestUrl),
+    scopes,
+    unsafeDemoUrlOverride: opts.unsafeDemoUrlOverride === true
+  };
+  if (mode === "register") {
+    requiredTrimmed(body.name, "--name");
+    requiredTrimmed(body.returnUrl, "--redirect-url");
+  }
+  const res = await client.request(
+    "POST",
+    `/internal/agent/${encodeURIComponent(agentContext.agentId)}/integrations/app/prepare`,
+    body
+  );
+  if (!res.ok || !res.data) {
+    const code = res.status >= 500 ? "SERVER_5XX" : "INTEGRATION_APP_PREPARE_FAILED";
+    throw cliError(code, res.error ?? `HTTP ${res.status}`);
+  }
+  if (opts.json) {
+    writeJson(ctx.io, { ok: true, data: res.data });
+    return;
+  }
+  writeText(ctx.io, `${formatAppPrepare(res.data)}
+`);
+}
+var sharedOptions = [
+  { flags: "--client-key <key>", description: "Stable app client key / OAuth client_id to reserve or update" },
+  { flags: "--name <name>", description: "App display name" },
+  { flags: "--redirect-url <url>", description: "OAuth redirect/callback URL" },
+  { flags: "--app-url <url>", description: "App homepage URL" },
+  { flags: "--homepage-url <url>", description: "App homepage URL (alias-friendly explicit name)" },
+  { flags: "--description <text>", description: "App description" },
+  { flags: "--agent-manifest-url <url>", description: "Optional agent behavior manifest URL" },
+  {
+    flags: "--scope <scope>",
+    description: "Requested/displayed scope; can be repeated or comma-separated",
+    parse: (value, previous = []) => {
+      previous.push(value);
+      return previous;
+    }
+  },
+  {
+    flags: "--scopes <scopes>",
+    description: "Requested/displayed scopes; alias for --scope, comma-separated",
+    parse: (value, previous = []) => {
+      previous.push(value);
+      return previous;
+    }
+  },
+  { flags: "--unsafe-demo-url-override", description: "Explicitly mark localhost/private URL use as an unsafe demo override" },
+  { flags: "--target <target>", description: "Channel/DM/thread target to post the human action card" },
+  { flags: "--json", description: "Emit machine-readable JSON" }
+];
+var integrationAppPrepareRegisterCommand = defineCommand(
+  {
+    name: "register",
+    description: "Prepare a third-party app registration action card for a human owner/admin to commit",
+    options: sharedOptions
+  },
+  async (ctx, opts) => prepareApp("register", ctx, opts)
+);
+var integrationAppPrepareUpdateCommand = defineCommand(
+  {
+    name: "update",
+    description: "Prepare a third-party app registration update action card for a human owner/admin to commit",
+    options: sharedOptions
+  },
+  async (ctx, opts) => prepareApp("update", ctx, opts)
+);
+function registerIntegrationAppCommands(parent, runtimeOptions = {}) {
+  const appCmd = parent.command("app").description("Third-party app registration preparation");
+  const prepareCmd = appCmd.command("prepare").description("Prepare app registration/update action cards");
+  registerCliCommand(prepareCmd, integrationAppPrepareRegisterCommand, runtimeOptions);
+  registerCliCommand(prepareCmd, integrationAppPrepareUpdateCommand, runtimeOptions);
+}
 var MODIFY_HINT = "(to modify: snooze/update/cancel; raft reminder --help)";
 function formatReminder(r) {
   const ref = r.msgRef ? ` ref=${r.msgRef}` : "";
@@ -20658,6 +20819,7 @@ var integrationCmd = program.command("integration").description("Third-party ser
 registerIntegrationListCommand(integrationCmd);
 registerIntegrationLoginCommand(integrationCmd);
 registerIntegrationEnvCommand(integrationCmd);
+registerIntegrationAppCommands(integrationCmd);
 var reminderCmd = program.command("reminder").description("Reminder operations");
 registerReminderScheduleCommand(reminderCmd);
 registerReminderListCommand(reminderCmd);

package/dist/index.js

@@ -2,11 +2,13 @@
 import {
   DAEMON_CLI_USAGE,
   DaemonCore,
-  parseDaemonCliArgs
-} from "./chunk-RUGCYI7A.js";
+  parseDaemonCliArgs,
+  scrubDaemonAuthEnv
+} from "./chunk-ZGGFS72W.js";
 
 // src/index.ts
-var parsedArgs = parseDaemonCliArgs(process.argv.slice(2));
+var parsedArgs = parseDaemonCliArgs(process.argv.slice(2), process.env);
+scrubDaemonAuthEnv(process.env);
 if (!parsedArgs) {
   console.error(DAEMON_CLI_USAGE);
   process.exit(1);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botiverse/raft-daemon",
-  "version": "0.63.4",
+  "version": "0.63.5-play.20260622140740",
   "type": "module",
   "bin": {
     "raft-daemon": "dist/raft-daemon.js",