@consiliency/agent-board-cli 1.8.0 → 1.10.0

package/dist/cli.d.ts

@@ -1,5 +1,6 @@
 import { Command } from "commander";
-import { type EnrollKeystore, type EnrollmentIntent, type PendingEnrollmentStore, type OAuthFetchLike, type FetchLike, type AgentJoinDeployment, type AgentJoinInstructions } from "@consiliency/agent-board-client";
+import { type EnrollKeystore, type EnrollmentIntent, type FleetOnboardingIntent, type PendingEnrollmentStore, type OAuthFetchLike, type FetchLike, type AgentJoinDeployment, type AgentJoinInstructions, type DeviceAuthorizationPrompt } from "@consiliency/agent-board-client";
+import { DevicePendingEnrollmentStore } from "./enroll_runtime.js";
 type JsonObject = Record<string, unknown>;
 export interface CliIo {
     writeStdout(message: string): void;
@@ -38,6 +39,20 @@ interface ClientLike {
     grantBoardRole(input: JsonObject): Promise<unknown>;
     setBoardRoleGate(input: JsonObject): Promise<unknown>;
     createInviteLink(input: JsonObject): Promise<unknown>;
+    createFleetOnboardingInvite?(input: {
+        boardId: string;
+        machineId: string;
+        harnessKind: string;
+        harnessLabel: string;
+        repoSlug: string;
+        repoFingerprint: string;
+        repoScopeRole: "worker" | "reviewer";
+        agentRole: "phase_worker" | "reviewer";
+        expectedAgentHandle: string;
+        maxUses?: number;
+        expiresAt?: string;
+        createdByAgentId?: string;
+    }): Promise<unknown>;
     createInviteLinkWithInstructions(input: JsonObject, deployment: AgentJoinDeployment, board?: {
         boardSlug?: string;
         boardName?: string;
@@ -46,6 +61,7 @@ interface ClientLike {
         instructions: AgentJoinInstructions;
     }>;
     revokeInviteLink(input: JsonObject): Promise<unknown>;
+    redeemInviteLink(input: JsonObject): Promise<unknown>;
     listBoardPendingMemberships(input: JsonObject): Promise<unknown>;
     resolveAgentHandle(input: JsonObject): Promise<unknown>;
     updateInboxItemState(input: JsonObject): Promise<unknown>;
@@ -136,10 +152,45 @@ export interface EnrollmentCommandRunner {
         redirectResponse?: string;
         slug?: string;
     }): Promise<unknown>;
+    device?(input: {
+        slug: string;
+        intent: EnrollmentIntent;
+        agentKind?: string;
+        requestedScopes?: string[];
+        requestedBoardScopes?: string[];
+        onDeviceAuthorization: (prompt: DeviceAuthorizationPrompt) => void | Promise<void>;
+    }): Promise<unknown>;
+    deviceBegin?(input: {
+        /** Optional caller-generated ID used to bind a companion non-secret continuation first. */
+        enrollmentId?: string;
+        slug: string;
+        intent: EnrollmentIntent;
+        agentKind?: string;
+        requestedScopes?: string[];
+        requestedBoardScopes?: string[];
+    }): Promise<{
+        enrollmentId: string;
+        prompt: DeviceAuthorizationPrompt;
+    }>;
+    deviceComplete?(input: {
+        enrollmentId: string;
+        expectedFleet?: {
+            intent: Omit<FleetOnboardingIntent, "inviteCode">;
+            keyReference: string;
+            slug: string;
+        };
+        /** Keep the secret continuation for a caller that must finish local materialization first. */
+        deletePending?: boolean;
+    }): Promise<unknown>;
+    deviceDeletePending?(input: {
+        enrollmentId: string;
+    }): Promise<void>;
 }
 export interface DefaultEnrollmentRunnerDeps {
     /** Pending store bridging begin→complete. Default: FilePendingEnrollmentStore(env). */
     store?: PendingEnrollmentStore;
+    /** Device-code state bridging deviceBegin→deviceComplete across CLI processes. */
+    deviceStore?: DevicePendingEnrollmentStore;
     /** OAuth/enroll fetch. Default: nodeFetchAdapter over globalThis.fetch. */
     fetch?: OAuthFetchLike;
     /** Board-native fetch for the post-enroll SessionClient. Default: nodeFetchAdapter. */
@@ -156,6 +207,13 @@ export interface DefaultEnrollmentRunnerDeps {
     publishableKey?: string;
     /** Clock (tests). Default: wall clock. */
     now?: () => number;
+    /**
+     * Poll delay for the device-authorization grant (tests inject a no-op so the e2e
+     * does not incur a real RFC 8628 backoff sleep). Default: the real timer inside
+     * `acquireAccessTokenViaDeviceCode`. Only the `device` flow polls; run/begin/complete
+     * ignore it.
+     */
+    sleep?: (ms: number) => Promise<void>;
     /** Writer for the default browser opener's printed URL. Default: process std streams. */
     io?: {
         writeStdout(message: string): void;