@cyanautomation/kaseki-agent 1.33.1 → 1.34.2

package/dist/__test-utils/api-client-assertions.d.ts

@@ -1,6 +1,6 @@
 /**
- * Consolidated OpenAPI and API client test assertion helpers
- * Extracted from openapi-assertions.ts + duplication patterns in test files
+ * Minimal OpenAPI test assertion helpers
+ * Extracted from patterns in openapi-spec-generator.test.ts
  * Reduces boilerplate and improves test maintainability
  */
 /**
@@ -8,42 +8,8 @@
  * Replaces nested Object.entries().forEach() patterns with a single helper call
  */
 export declare function forEachPathOperation(paths: Record<string, Record<string, unknown>>, callback: (pathName: string, method: string, operation: Record<string, unknown>) => void): void;
-/**
- * Assert that a specific endpoint has a given HTTP status code documented in responses
- */
-export declare function assertStatusCode(spec: Record<string, unknown>, endpoint: string, method: string, statusCode: string | number): void;
-/**
- * Assert that a schema property has the expected constraints and types
- */
-export declare function assertSchemaProperty(schema: Record<string, Record<string, unknown>>, propertyName: string, expectedType?: string, expectedFormat?: string): void;
-/**
- * Assert that an endpoint requires or doesn't require authentication
- */
-export declare function assertAuthRequired(spec: Record<string, unknown>, endpoint: string, shouldBeProtected: boolean): void;
-/**
- * Assert that all operations in a path item have required fields
- */
-export declare function assertPathItemOperationsComplete(pathItem: Record<string, Record<string, unknown>>, requiredFields: string[]): void;
-/**
- * Assert that a schema is properly structured with type and properties
- */
-export declare function assertSchemaStructure(schema: Record<string, unknown>, expectedType?: string): void;
-/**
- * Assert that a field is in the required array of a schema
- */
-export declare function assertFieldRequired(schema: Record<string, unknown>, fieldName: string): void;
 /**
  * Assert that all paths have at least one operation defined (GET, POST, etc.)
  */
 export declare function assertAllPathsHaveOperations(paths: Record<string, Record<string, unknown>>): void;
-/**
- * Assert that an HTTP response has expected status code and content type
- * Common pattern from kaseki-api-routes.test.ts
- */
-export declare function assertResponseStatus(response: Record<string, any>, expectedStatus: number, expectedContentType?: string): void;
-/**
- * Assert that a JSON response body contains expected keys
- * Reduces nested expect chains for object property checks
- */
-export declare function assertJsonResponse(response: Record<string, unknown>, expectedKeys: string[]): void;
 //# sourceMappingURL=api-client-assertions.d.ts.map

package/dist/__test-utils/api-client-assertions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-client-assertions.d.ts","sourceRoot":"","sources":["../../src/__test-utils/api-client-assertions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC9C,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GACvF,IAAI,CAMN;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GAAG,MAAM,GAC1B,IAAI,CAQN;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC/C,YAAY,EAAE,MAAM,EACpB,YAAY,CAAC,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,MAAM,GACtB,IAAI,CAWN;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,OAAO,GACzB,IAAI,CAoBN;AAED;;GAEG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACjD,cAAc,EAAE,MAAM,EAAE,GACvB,IAAI,CAMN;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,YAAY,SAAW,GACtB,IAAI,CAIN;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,EAAE,MAAM,GAChB,IAAI,CAKN;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAOjG;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC7B,cAAc,EAAE,MAAM,EACtB,mBAAmB,CAAC,EAAE,MAAM,GAC3B,IAAI,CAMN;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,YAAY,EAAE,MAAM,EAAE,GACrB,IAAI,CAKN"}
+{"version":3,"file":"api-client-assertions.d.ts","sourceRoot":"","sources":["../../src/__test-utils/api-client-assertions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC9C,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GACvF,IAAI,CAMN;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAOjG"}

package/dist/__test-utils/api-client-assertions.js

@@ -1,6 +1,6 @@
 /**
- * Consolidated OpenAPI and API client test assertion helpers
- * Extracted from openapi-assertions.ts + duplication patterns in test files
+ * Minimal OpenAPI test assertion helpers
+ * Extracted from patterns in openapi-spec-generator.test.ts
  * Reduces boilerplate and improves test maintainability
  */
 /**
@@ -14,80 +14,6 @@ export function forEachPathOperation(paths, callback) {
         });
     });
 }
-/**
- * Assert that a specific endpoint has a given HTTP status code documented in responses
- */
-export function assertStatusCode(spec, endpoint, method, statusCode) {
-    const paths = spec.paths;
-    const pathItem = paths?.[endpoint];
-    const operation = pathItem?.[method.toLowerCase()];
-    const responses = operation?.responses;
-    expect(responses).toBeDefined();
-    expect(responses?.[statusCode.toString()]).toBeDefined();
-}
-/**
- * Assert that a schema property has the expected constraints and types
- */
-export function assertSchemaProperty(schema, propertyName, expectedType, expectedFormat) {
-    const properties = schema.properties;
-    const property = properties?.[propertyName];
-    expect(property).toBeDefined();
-    if (expectedType) {
-        expect(property?.type).toBe(expectedType);
-    }
-    if (expectedFormat) {
-        expect(property?.format).toBe(expectedFormat);
-    }
-}
-/**
- * Assert that an endpoint requires or doesn't require authentication
- */
-export function assertAuthRequired(spec, endpoint, shouldBeProtected) {
-    const paths = spec.paths;
-    const pathItem = paths?.[endpoint];
-    expect(pathItem).toBeDefined();
-    Object.entries(pathItem).forEach(([, operation]) => {
-        const op = operation;
-        const security = op.security;
-        if (shouldBeProtected) {
-            expect(security).toBeDefined();
-            expect(Array.isArray(security)).toBe(true);
-            expect(security?.length).toBeGreaterThan(0);
-            expect(security?.[0]?.BearerAuth).toBeDefined();
-        }
-        else {
-            // Public endpoint: security should be empty array or undefined
-            expect(security === undefined || (Array.isArray(security) && security.length === 0)).toBe(true);
-        }
-    });
-}
-/**
- * Assert that all operations in a path item have required fields
- */
-export function assertPathItemOperationsComplete(pathItem, requiredFields) {
-    Object.entries(pathItem).forEach(([, operation]) => {
-        requiredFields.forEach((field) => {
-            expect(operation[field]).toBeDefined();
-        });
-    });
-}
-/**
- * Assert that a schema is properly structured with type and properties
- */
-export function assertSchemaStructure(schema, expectedType = 'object') {
-    expect(schema.type).toBe(expectedType);
-    expect(schema.properties).toBeDefined();
-    expect(typeof schema.properties).toBe('object');
-}
-/**
- * Assert that a field is in the required array of a schema
- */
-export function assertFieldRequired(schema, fieldName) {
-    const required = schema.required;
-    expect(required).toBeDefined();
-    expect(Array.isArray(required)).toBe(true);
-    expect(required).toContain(fieldName);
-}
 /**
  * Assert that all paths have at least one operation defined (GET, POST, etc.)
  */
@@ -98,25 +24,4 @@ export function assertAllPathsHaveOperations(paths) {
         expect(hasOperation).toBe(true);
     });
 }
-/**
- * Assert that an HTTP response has expected status code and content type
- * Common pattern from kaseki-api-routes.test.ts
- */
-export function assertResponseStatus(response, expectedStatus, expectedContentType) {
-    expect(response.status).toBe(expectedStatus);
-    if (expectedContentType) {
-        const contentType = response.headers?.['content-type'] || response.get?.('content-type') || '';
-        expect(contentType).toContain(expectedContentType);
-    }
-}
-/**
- * Assert that a JSON response body contains expected keys
- * Reduces nested expect chains for object property checks
- */
-export function assertJsonResponse(response, expectedKeys) {
-    const body = response.body ?? response.data ?? response;
-    expectedKeys.forEach((key) => {
-        expect(body).toHaveProperty(key);
-    });
-}
 //# sourceMappingURL=api-client-assertions.js.map

package/dist/__test-utils/api-client-assertions.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-client-assertions.js","sourceRoot":"","sources":["../../src/__test-utils/api-client-assertions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA8C,EAC9C,QAAwF;IAExF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE;QACrD,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE;YAClF,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAoC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAA6B,EAC7B,QAAgB,EAChB,MAAc,EACd,UAA2B;IAE3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAgE,CAAC;IACpF,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAA4B,CAAC;IAC9E,MAAM,SAAS,GAAG,SAAS,EAAE,SAAoC,CAAC;IAElE,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IAChC,MAAM,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA+C,EAC/C,YAAoB,EACpB,YAAqB,EACrB,cAAuB;IAEvB,MAAM,UAAU,GAAG,MAAM,CAAC,UAAqD,CAAC;IAChF,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC,YAAY,CAAC,CAAC;IAE5C,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/B,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAA6B,EAC7B,QAAgB,EAChB,iBAA0B;IAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAgE,CAAC;IACpF,MAAM,QAAQ,GAAG,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC;IAEnC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAE/B,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE;QAC5E,MAAM,EAAE,GAAG,SAAoC,CAAC;QAChD,MAAM,QAAQ,GAAG,EAAE,CAAC,QAA0C,CAAC;QAE/D,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,+DAA+D;YAC/D,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gCAAgC,CAC9C,QAAiD,EACjD,cAAwB;IAExB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE;QACjD,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YAC/B,MAAM,CAAE,SAAqC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA+B,EAC/B,YAAY,GAAG,QAAQ;IAEvB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,CAAC,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAA+B,EAC/B,SAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAoC,CAAC;IAC7D,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAA8C;IACzF,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAEjF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE;QAC7C,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC;QACtE,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAA6B,EAC7B,cAAsB,EACtB,mBAA4B;IAE5B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7C,IAAI,mBAAmB,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/F,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAiC,EACjC,YAAsB;IAEtB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC;IACxD,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"api-client-assertions.js","sourceRoot":"","sources":["../../src/__test-utils/api-client-assertions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA8C,EAC9C,QAAwF;IAExF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE;QACrD,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE;YAClF,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAoC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAA8C;IACzF,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAEjF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,EAAE;QAC7C,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC;QACtE,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/bootstrappers/AgentsBootstrapper.d.ts

@@ -0,0 +1,51 @@
+/**
+ * AgentsBootstrapper - Creates and initializes the /agents directory structure
+ * Handles sudo fallback and sets proper permissions for container access
+ */
+import { ConfigManager } from '../../config/ConfigManager';
+export interface BootstrapResult {
+    ok: boolean;
+    error?: string;
+    message?: string;
+}
+export declare class AgentsBootstrapper {
+    private configManager;
+    constructor(configManager: ConfigManager);
+    /**
+     * Ensure /agents directory structure exists with proper permissions
+     */
+    bootstrap(dryRun?: boolean): Promise<BootstrapResult>;
+    /**
+     * Write configuration file to ~/.kaseki/config.json
+     */
+    writeConfig(secrets: {
+        openrouterKeyFile?: {
+            filePath: string;
+        } | null;
+        githubAppIdFile?: {
+            filePath: string;
+        } | null;
+        githubAppClientIdFile?: {
+            filePath: string;
+        } | null;
+        githubAppPrivateKeyFile?: {
+            filePath: string;
+        } | null;
+        kasekiApiKeysFile?: {
+            filePath: string;
+        } | null;
+    }): Promise<void>;
+    /**
+     * Create directory, falling back to sudo if needed
+     */
+    private createDirectoryWithSudoFallback;
+    /**
+     * Set ownership to CONTAINER_UID, falling back to sudo if needed
+     */
+    private setOwnershipWithSudoFallback;
+    /**
+     * Set directory permissions, falling back to sudo if needed
+     */
+    private setPermissionsWithSudoFallback;
+}
+//# sourceMappingURL=AgentsBootstrapper.d.ts.map

package/dist/cli/bootstrappers/AgentsBootstrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentsBootstrapper.d.ts","sourceRoot":"","sources":["../../../src/cli/bootstrappers/AgentsBootstrapper.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAQ3D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,kBAAkB;IAEjB,OAAO,CAAC,aAAa;gBAAb,aAAa,EAAE,aAAa;IAEhD;;OAEG;IACG,SAAS,CAAC,MAAM,GAAE,OAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IA2ClE;;OAEG;IACG,WAAW,CACf,OAAO,EAAE;QACP,iBAAiB,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QAChD,eAAe,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QAC9C,qBAAqB,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACpD,uBAAuB,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACtD,iBAAiB,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;KACjD,GACA,OAAO,CAAC,IAAI,CAAC;IAuBhB;;OAEG;IACH,OAAO,CAAC,+BAA+B;IAevC;;OAEG;IACH,OAAO,CAAC,4BAA4B;IAepC;;OAEG;IACH,OAAO,CAAC,8BAA8B;CAcvC"}

package/dist/cli/bootstrappers/AgentsBootstrapper.js

@@ -0,0 +1,130 @@
+/**
+ * AgentsBootstrapper - Creates and initializes the /agents directory structure
+ * Handles sudo fallback and sets proper permissions for container access
+ */
+import { existsSync } from 'fs';
+import fs from 'fs/promises';
+import os from 'os';
+import path from 'path';
+import { spawnSync } from 'child_process';
+import { createLogger } from '../../logger.js';
+const logger = createLogger('agents-bootstrapper');
+const AGENTS_SUBDIRS = ['kaseki-results', 'kaseki-runs', 'kaseki-cache'];
+const CONTAINER_UID = 10000;
+export class AgentsBootstrapper {
+    configManager;
+    // @ts-expect-error - configManager may be used in future extensions
+    constructor(configManager) {
+        this.configManager = configManager;
+    }
+    /**
+     * Ensure /agents directory structure exists with proper permissions
+     */
+    async bootstrap(dryRun = false) {
+        // Check if already set up
+        const allReady = ['/agents', ...AGENTS_SUBDIRS.map((d) => `/agents/${d}`)].every((p) => existsSync(p));
+        if (allReady) {
+            logger.debug('/agents already initialized');
+            return { ok: true, message: '✓ /agents already set up' };
+        }
+        if (dryRun) {
+            logger.debug('[dry-run] would create /agents');
+            return { ok: true, message: '[dry-run] would create /agents with UID 10000 ownership' };
+        }
+        // Create directory structure
+        const dirsToCreate = ['/agents', ...AGENTS_SUBDIRS.map((d) => `/agents/${d}`)];
+        for (const dir of dirsToCreate) {
+            const result = this.createDirectoryWithSudoFallback(dir);
+            if (!result.ok) {
+                logger.error(`Failed to create ${dir}: ${result.error}`);
+                return result;
+            }
+        }
+        // Set ownership to CONTAINER_UID
+        const ownershipResult = this.setOwnershipWithSudoFallback('/agents');
+        if (!ownershipResult.ok) {
+            logger.error(`Failed to set ownership: ${ownershipResult.error}`);
+            return ownershipResult;
+        }
+        // Set permissions
+        const permissionResult = this.setPermissionsWithSudoFallback('/agents');
+        if (!permissionResult.ok) {
+            logger.error(`Failed to set permissions: ${permissionResult.error}`);
+            return permissionResult;
+        }
+        logger.info('/agents bootstrap completed successfully');
+        return { ok: true, message: '✓ /agents created with UID 10000 ownership' };
+    }
+    /**
+     * Write configuration file to ~/.kaseki/config.json
+     */
+    async writeConfig(secrets) {
+        const kasekiDir = path.join(os.homedir(), '.kaseki');
+        await fs.mkdir(kasekiDir, { recursive: true, mode: 0o700 });
+        const auth = {};
+        if (secrets.openrouterKeyFile)
+            auth.openrouter_api_key_file = secrets.openrouterKeyFile.filePath;
+        if (secrets.githubAppIdFile)
+            auth.github_app_id_file = secrets.githubAppIdFile.filePath;
+        if (secrets.githubAppClientIdFile)
+            auth.github_app_client_id_file = secrets.githubAppClientIdFile.filePath;
+        if (secrets.githubAppPrivateKeyFile)
+            auth.github_app_private_key_file = secrets.githubAppPrivateKeyFile.filePath;
+        const config = {
+            auth,
+            api: {
+                url: 'http://localhost:8080/api',
+                ...(secrets.kasekiApiKeysFile ? { key_file: secrets.kasekiApiKeysFile.filePath } : {}),
+            },
+        };
+        const configPath = path.join(kasekiDir, 'config.json');
+        await fs.writeFile(configPath, JSON.stringify(config, null, 2), { mode: 0o600 });
+        logger.info(`Config written to ${configPath}`);
+    }
+    /**
+     * Create directory, falling back to sudo if needed
+     */
+    createDirectoryWithSudoFallback(dir) {
+        const mkdirResult = spawnSync('mkdir', ['-p', dir], { stdio: 'pipe' });
+        if (mkdirResult.status === 0) {
+            return { ok: true };
+        }
+        // Try with sudo
+        const sudoResult = spawnSync('sudo', ['mkdir', '-p', dir], { stdio: 'inherit' });
+        if (sudoResult.status === 0) {
+            return { ok: true };
+        }
+        return { ok: false, error: `Failed to create directory: ${dir}` };
+    }
+    /**
+     * Set ownership to CONTAINER_UID, falling back to sudo if needed
+     */
+    setOwnershipWithSudoFallback(dir) {
+        const chownResult = spawnSync('chown', ['-R', `${CONTAINER_UID}:${CONTAINER_UID}`, dir], { stdio: 'pipe' });
+        if (chownResult.status === 0) {
+            return { ok: true };
+        }
+        // Try with sudo
+        const sudoResult = spawnSync('sudo', ['chown', '-R', `${CONTAINER_UID}:${CONTAINER_UID}`, dir], { stdio: 'inherit' });
+        if (sudoResult.status === 0) {
+            return { ok: true };
+        }
+        return { ok: false, error: 'Failed to set ownership on /agents' };
+    }
+    /**
+     * Set directory permissions, falling back to sudo if needed
+     */
+    setPermissionsWithSudoFallback(dir) {
+        const chmodResult = spawnSync('chmod', ['755', dir], { stdio: 'pipe' });
+        if (chmodResult.status === 0) {
+            return { ok: true };
+        }
+        // Try with sudo
+        const sudoResult = spawnSync('sudo', ['chmod', '755', dir], { stdio: 'inherit' });
+        if (sudoResult.status === 0) {
+            return { ok: true };
+        }
+        return { ok: false, error: 'Failed to set permissions on /agents' };
+    }
+}
+//# sourceMappingURL=AgentsBootstrapper.js.map

package/dist/cli/bootstrappers/AgentsBootstrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentsBootstrapper.js","sourceRoot":"","sources":["../../../src/cli/bootstrappers/AgentsBootstrapper.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,MAAM,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;AAEnD,MAAM,cAAc,GAAG,CAAC,gBAAgB,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;AACzE,MAAM,aAAa,GAAG,KAAK,CAAC;AAQ5B,MAAM,OAAO,kBAAkB;IAET;IADpB,oEAAoE;IACpE,YAAoB,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAEpD;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,SAAkB,KAAK;QACrC,0BAA0B;QAC1B,MAAM,QAAQ,GAAG,CAAC,SAAS,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvG,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;QAC1F,CAAC;QAED,6BAA6B;QAC7B,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/E,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzD,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,eAAe,GAAG,IAAI,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;YACxB,MAAM,CAAC,KAAK,CAAC,4BAA4B,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC;YAClE,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,kBAAkB;QAClB,MAAM,gBAAgB,GAAG,IAAI,CAAC,8BAA8B,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;YACzB,MAAM,CAAC,KAAK,CAAC,8BAA8B,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;YACrE,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,OAMC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAE5D,MAAM,IAAI,GAA2B,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,iBAAiB;YAAE,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC;QACjG,IAAI,OAAO,CAAC,eAAe;YAAE,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC;QACxF,IAAI,OAAO,CAAC,qBAAqB;YAAE,IAAI,CAAC,yBAAyB,GAAG,OAAO,CAAC,qBAAqB,CAAC,QAAQ,CAAC;QAC3G,IAAI,OAAO,CAAC,uBAAuB;YAAE,IAAI,CAAC,2BAA2B,GAAG,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC;QAEjH,MAAM,MAAM,GAAG;YACb,IAAI;YACJ,GAAG,EAAE;gBACH,GAAG,EAAE,2BAA2B;gBAChC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvF;SACF,CAAC;QAEF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,IAAI,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACK,+BAA+B,CAAC,GAAW;QACjD,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,gBAAgB;QAChB,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACjF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,GAAG,EAAE,EAAE,CAAC;IACpE,CAAC;IAED;;OAEG;IACK,4BAA4B,CAAC,GAAW;QAC9C,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,aAAa,IAAI,aAAa,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5G,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,gBAAgB;QAChB,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,aAAa,IAAI,aAAa,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACtH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;IACpE,CAAC;IAED;;OAEG;IACK,8BAA8B,CAAC,GAAW;QAChD,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,gBAAgB;QAChB,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAClF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;IACtE,CAAC;CACF"}

package/dist/cli/commands/QuickstartCommand.d.ts

@@ -6,23 +6,26 @@
  *   2. Discover secrets at well-known locations
  *   3. Write ~/.kaseki/config.json
  *   4. Bootstrap /agents (with sudo if needed)
- *   5. Start kaseki-api via docker-compose (or docker run fallback)
+ *   5. Start kaseki-api via docker (or docker run fallback)
  *   6. Wait for /ready body to confirm the API is truly ready
  *   7. Smoke-test the authenticated /api/runs endpoint
  */
 import { BaseCommand } from '../BaseCommand';
+import { ConfigManager } from '../../config/ConfigManager';
 export declare class QuickstartCommand extends BaseCommand {
+    private environmentValidator;
+    private secretResolver;
+    private agentsBootstrapper;
+    private containerLauncher;
+    constructor(configManager: ConfigManager);
     execute(args: string[]): Promise<number>;
-    private detectEnvironment;
-    private printEnvSummary;
-    private discoverSecrets;
-    private printSecretsSummary;
+    private validateEnvironment;
+    private resolveSecrets;
     private writeConfig;
     private bootstrapAgentsDir;
-    private startContainer;
-    private readApiKey;
+    private launchContainer;
     private waitForReady;
-    private smokeTest;
+    private runSmokeTest;
     private printSuccess;
     private printHelp;
 }

package/dist/cli/commands/QuickstartCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"QuickstartCommand.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/QuickstartCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAuB7C,qBAAa,iBAAkB,SAAQ,WAAW;IAC1C,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAyH9C,OAAO,CAAC,iBAAiB;IA4BzB,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,eAAe;IA2BvB,OAAO,CAAC,mBAAmB;YAiBb,WAAW;IA2BzB,OAAO,CAAC,kBAAkB;IAiD1B,OAAO,CAAC,cAAc;IA2DtB,OAAO,CAAC,UAAU;YAeJ,YAAY;YAyBZ,SAAS;IAiBvB,OAAO,CAAC,YAAY;IA2BpB,OAAO,CAAC,SAAS;CA4BlB"}
+{"version":3,"file":"QuickstartCommand.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/QuickstartCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAS3D,qBAAa,iBAAkB,SAAQ,WAAW;IAChD,OAAO,CAAC,oBAAoB,CAAuB;IACnD,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,iBAAiB,CAAoB;gBAEjC,aAAa,EAAE,aAAa;IAQlC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YAkChC,mBAAmB;YAYnB,cAAc;YA+Bd,WAAW;YAWX,kBAAkB;YAkBlB,eAAe;YAgBf,YAAY;YAiBZ,YAAY;IAoB1B,OAAO,CAAC,YAAY;IA2BpB,OAAO,CAAC,SAAS;CA4BlB"}