@flowriki/agent 0.1.0-beta.65 → 0.1.0-beta.66

package/dist/{chunk-FJVNOLHT.js → chunk-WUK3X43D.js}

@@ -28,6 +28,8 @@ import {
   adjacentLabelPattern,
   caseDebugPlan,
   checkMobileAssertion,
+  commandFor,
+  commandSystemOf,
   describeAssertion,
   describeLocators,
   expandForRun,
@@ -69,7 +71,7 @@ import {
   usageKindOf,
   validateActors,
   webCloudOf
-} from "./chunk-PDUMGI6V.js";
+} from "./chunk-YD7F7JMA.js";
 
 // src/engine/machine.ts
 import fs from "fs";
@@ -77,7 +79,7 @@ import os from "os";
 import path from "path";
 import { createRequire } from "module";
 import { spawnSync } from "child_process";
-var AGENT_VERSION = "0.1.0-beta.65";
+var AGENT_VERSION = "0.1.0-beta.66";
 async function prepareBrowsers() {
   if (browsersReady()) {
     return { ok: true, already: true, message: "chromium is already installed" };
@@ -137,7 +139,7 @@ async function checkMachine() {
     }
   } catch {
   }
-  const { mobileDoctor: mobileDoctor2 } = await import("./dist-3PMNCKSW.js");
+  const { mobileDoctor: mobileDoctor2 } = await import("./dist-CUDUSTFO.js");
   return {
     agentVersion: AGENT_VERSION,
     node: process.versions.node,
@@ -236,7 +238,7 @@ function forgetConnection(service, env = process.env) {
 }
 var fingerprint = (secret2) => crypto2.createHash("sha256").update(secret2).digest("hex").slice(0, 12);
 
-// ../contracts/dist/chunk-NTBXG5EZ.js
+// ../contracts/dist/chunk-VTO4SX4J.js
 import { z } from "zod";
 var PROTOCOL_VERSION = 1;
 var PAIRING_CODE_TTL_MS = 5 * 60 * 1e3;
@@ -289,7 +291,10 @@ var CommandNameSchema = z.enum([
   // a recording's — as a picture, for the live mirror. Reading.
   "mobile.peek",
   // What this computer has installed for web and phone testing. Reading.
-  "machine.check"
+  "machine.check",
+  // A helper run HERE — "Try it" on a command helper, which only the
+  // tester's computer can run. NOT baseline.
+  "helper.run"
 ]);
 var EFFECTFUL = /* @__PURE__ */ new Set([
   "record.start",
@@ -333,7 +338,9 @@ var EFFECTFUL = /* @__PURE__ */ new Set([
   "project.claim",
   "run.cancel",
   // A phone session taps and types on somebody's device.
-  "mobile.session"
+  "mobile.session",
+  // Runs a command on somebody's computer.
+  "helper.run"
 ]);
 var CommandSchema = z.object({
   /** Unique per command. The agent stores it, so a redelivery after a
@@ -484,7 +491,7 @@ function compareAgentVersions(a, b2) {
   }
   return 0;
 }
-var agentUpdateFor = (running, latest) => Boolean(running && latest && running !== "test" && compareAgentVersions(latest, running) > 0);
+var agentUpdateFor = (running2, latest) => Boolean(running2 && latest && running2 !== "test" && compareAgentVersions(latest, running2) > 0);
 
 // src/service.ts
 var BadServiceUrl = class extends Error {
@@ -1843,7 +1850,7 @@ function installDebugPanel() {
     pendingRender = false;
     const p = root.getElementById("p");
     p.className = "p" + (vertical ? " v" : "");
-    const running = state.status === "running";
+    const running2 = state.status === "running";
     const done = state.status === "finished";
     const stCls = state.failure ? "failed" : state.recording ? "running" : state.status;
     const stLabel = state.recording ? "recording" : state.failure ? "paused at a failure" : state.status === "idle" ? "not started" : state.status;
@@ -1936,7 +1943,7 @@ function installDebugPanel() {
       });
       return;
     }
-    p.innerHTML = '<div class="bar"><span class="grip" title="Drag to move"><i></i><i></i><i></i></span><span class="st ' + esc(stCls) + '"><span class="d"></span><span>' + esc(stLabel) + '</span><span class="prog">&#160;&#183;&#160;' + ran + "/" + state.steps.length + '</span></span><span class="dv"></span><button id="play" class="primary" title="' + (state.failure ? "Give up on this step and carry on" : "Run until the next breakpoint or failure") + '" ' + (running || done ? "disabled" : "") + ">" + (state.failure ? "Skip &amp; continue" : "Play") + "</button>" + (state.failure ? '<button id="retry" title="Run this step again">Retry</button>' : "") + '<button id="step" title="Run exactly one step" ' + (running || done ? "disabled" : "") + '>Step</button><button id="pause" title="Stop after the step in flight" ' + (running ? "" : "disabled") + '>Pause</button><button id="replay" title="Start over from the first step" ' + (running ? "disabled" : "") + '>Replay</button><span class="dv"></span>' + // While armed, this is the only way to stop it — so it says so, rather
+    p.innerHTML = '<div class="bar"><span class="grip" title="Drag to move"><i></i><i></i><i></i></span><span class="st ' + esc(stCls) + '"><span class="d"></span><span>' + esc(stLabel) + '</span><span class="prog">&#160;&#183;&#160;' + ran + "/" + state.steps.length + '</span></span><span class="dv"></span><button id="play" class="primary" title="' + (state.failure ? "Give up on this step and carry on" : "Run until the next breakpoint or failure") + '" ' + (running2 || done ? "disabled" : "") + ">" + (state.failure ? "Skip &amp; continue" : "Play") + "</button>" + (state.failure ? '<button id="retry" title="Run this step again">Retry</button>' : "") + '<button id="step" title="Run exactly one step" ' + (running2 || done ? "disabled" : "") + '>Step</button><button id="pause" title="Stop after the step in flight" ' + (running2 ? "" : "disabled") + '>Pause</button><button id="replay" title="Start over from the first step" ' + (running2 ? "disabled" : "") + '>Replay</button><span class="dv"></span>' + // While armed, this is the only way to stop it — so it says so, rather
     // than reading as a status label nobody realises is a button.
     (state.recording ? '<button id="rec" class="danger" title="Stop capturing"><span class="rec"><span class="dot"></span>Stop recording</span></button>' : '<button id="rec" title="Capture new steps at the cursor">Record</button>') + // AUTHORING A CHECK BELONGS HERE MOST OF ALL. Recording had it and
     // debugging did not, which is the wrong way round: the moment worth
@@ -2474,9 +2481,9 @@ var RunActors = class {
     const previous = this.sessions.get(id);
     const round = (this.resets.get(id) ?? 0) + 1;
     this.resets.set(id, round);
-    const home = `actor-${id}-${round}`;
-    const session = await openRunSession({ ...this.opts, browser: this.main.browser, ...this.evidenceIn(home) });
-    this.homes.set(session, home);
+    const home2 = `actor-${id}-${round}`;
+    const session = await openRunSession({ ...this.opts, browser: this.main.browser, ...this.evidenceIn(home2) });
+    this.homes.set(session, home2);
     this.sessions.set(id, session);
     this.current = session;
     this.currentId = id;
@@ -7025,7 +7032,7 @@ function ensureRootCommit(root) {
 }
 
 // ../helpers/dist/index.js
-import { createHmac as createHmac2 } from "crypto";
+import { createHash, createHmac as createHmac2 } from "crypto";
 var HelperFailure = class extends Error {
   constructor(message) {
     super(message);
@@ -7279,6 +7286,82 @@ async function runHttp(config, ctx) {
     }
   }
 }
+function commandFingerprint(config, system) {
+  const line = commandFor(config, system);
+  const written = JSON.stringify({
+    program: line.program,
+    args: line.args,
+    folder: config.folder,
+    env: config.env,
+    secretEnv: Object.keys(config.secretEnv).sort(),
+    mode: config.mode,
+    readyPattern: config.readyPattern
+  });
+  return createHash("sha256").update(written).digest("hex").slice(0, 16);
+}
+var lastLine = (text) => text.trim().split(/\r?\n/).filter(Boolean).pop() ?? "";
+async function runCommand(config, ctx, name) {
+  if (!ctx.commands) {
+    throw new HelperFailure("this helper runs a command on a tester's computer \u2014 try it, and run tests that use it, from a computer running the Flowriki agent");
+  }
+  const system = ctx.system ?? commandSystemOf(process.platform);
+  const line = commandFor(config, system);
+  const env = {};
+  for (const [key, value] of Object.entries(config.env)) env[key] = fill(value, ctx.inputs);
+  const redact2 = [];
+  for (const [key, ref] of Object.entries(config.secretEnv)) {
+    const value = secret(ctx, ref, `${key} secret`);
+    env[key] = value;
+    redact2.push(value);
+  }
+  const outcome = await ctx.commands.run({
+    name,
+    fingerprint: commandFingerprint(config, system),
+    program: fill(line.program, ctx.inputs),
+    // EACH ARGUMENT FILLED ON ITS OWN: a value is never split into two, and
+    // never read by a shell.
+    args: line.args.map((arg) => fill(arg, ctx.inputs)),
+    folder: fill(config.folder, ctx.inputs),
+    env,
+    redact: redact2,
+    mode: config.mode,
+    readyPattern: config.readyPattern,
+    timeoutMs: config.timeoutSeconds * 1e3
+  });
+  const evidence = {
+    ...outcome.exitCode === null ? { state: config.mode === "background" ? "running until the test ends" : "stopped" } : { "exit code": String(outcome.exitCode) },
+    ...lastLine(outcome.stdout) ? { "last line": lastLine(outcome.stdout).slice(0, 200) } : {}
+  };
+  if (config.mode === "run" && outcome.exitCode !== config.expectExit) {
+    const why = lastLine(outcome.stderr) || lastLine(outcome.stdout);
+    throw new HelperFailure(`the command ended with exit code ${outcome.exitCode ?? "?"}${config.expectExit ? ` (expected ${config.expectExit})` : ""}${why ? `: ${why.slice(0, 300)}` : ""}`);
+  }
+  const text = outcome.stdout;
+  switch (config.extract.take) {
+    case "nothing":
+      return { value: "", detail: config.mode === "background" ? "started, and runs until the test ends" : "it ran", evidence };
+    case "output": {
+      const value = text.trim();
+      return { value: value.length > 2e3 ? lastLine(value) : value, detail: "what the command printed", evidence };
+    }
+    case "pattern": {
+      const value = takeCode(text, config.extract.pattern);
+      if (value === null) throw new HelperFailure(`the command printed nothing matching ${config.extract.pattern}`);
+      return { value, detail: "the match in what the command printed", evidence };
+    }
+    case "json": {
+      let parsed;
+      try {
+        parsed = JSON.parse(text);
+      } catch {
+        throw new HelperFailure("the command did not print JSON");
+      }
+      const value = atPath(parsed, config.extract.path);
+      if (value === void 0 || value === null) throw new HelperFailure(`what the command printed has no "${config.extract.path}"`);
+      return { value: typeof value === "string" ? value : JSON.stringify(value), detail: `"${config.extract.path}" from what the command printed`, evidence };
+    }
+  }
+}
 async function runHelper(helper, ctx) {
   const config = "config" in helper ? helper.config : helper;
   switch (config.kind) {
@@ -7292,11 +7375,17 @@ async function runHelper(helper, ctx) {
       return runSms(config, ctx);
     case "http":
       return runHttp(config, ctx);
+    case "command":
+      return runCommand(config, ctx, "name" in helper ? helper.name : "this command");
   }
 }
 
 // ../execution/dist/index.js
+import { spawn as spawn2 } from "child_process";
 import fs24 from "fs";
+import os5 from "os";
+import path24 from "path";
+import fs34 from "fs";
 import crypto3 from "crypto";
 async function cloudBrowserFor(config, secrets, name) {
   const settings = config ?? {};
@@ -7470,6 +7559,7 @@ async function executeFlow(opts) {
         writes.push(emit({ type: "run.step", runId: run?.id ?? "", flowId: flow.id, result }));
       }
     });
+    store.runHelper?.close?.();
     if (storage && taskId && run) {
       const reached = new Set(outcome.steps.map((r) => r.stepId));
       for (const step of flow.steps) {
@@ -7635,27 +7725,203 @@ function toStepRow(ordinal, result, step) {
     checks
   };
 }
+var home = () => process.env["FLOWRIKI_HOME"] || path24.join(os5.homedir(), ".flowriki");
+var approvalsFile = () => path24.join(home(), "allowed-commands.json");
+function readApprovals() {
+  try {
+    const parsed = JSON.parse(fs24.readFileSync(approvalsFile(), "utf8"));
+    return { allowed: parsed.allowed ?? {}, waiting: parsed.waiting ?? {} };
+  } catch {
+    return { allowed: {}, waiting: {} };
+  }
+}
+function writeApprovals(approvals) {
+  fs24.mkdirSync(home(), { recursive: true, mode: 448 });
+  const temporary = `${approvalsFile()}.${process.pid}.tmp`;
+  fs24.writeFileSync(temporary, JSON.stringify(approvals, null, 2), { mode: 384 });
+  fs24.renameSync(temporary, approvalsFile());
+}
+function allowCommands(which) {
+  const approvals = readApprovals();
+  const wanted = which.trim().toLowerCase();
+  const chosen = Object.values(approvals.waiting).filter((c) => wanted === "all" || c.fingerprint === wanted || c.name.toLowerCase() === wanted);
+  for (const command of chosen) {
+    approvals.allowed[command.fingerprint] = { ...command, at: (/* @__PURE__ */ new Date()).toISOString() };
+    delete approvals.waiting[command.fingerprint];
+  }
+  if (chosen.length) writeApprovals(approvals);
+  return chosen;
+}
+function revokeCommands(which) {
+  const approvals = readApprovals();
+  const wanted = which.trim().toLowerCase();
+  const chosen = Object.values(approvals.allowed).filter((c) => wanted === "all" || c.fingerprint === wanted || c.name.toLowerCase() === wanted);
+  for (const command of chosen) delete approvals.allowed[command.fingerprint];
+  if (chosen.length) writeApprovals(approvals);
+  return chosen;
+}
+var CommandNotAllowed = class extends HelperFailure {
+  constructor(command) {
+    super(`"${command.name}" has not been allowed on this computer yet. In a terminal here, run: flowriki-agent allow "${command.name}" \u2014 it shows the command before allowing it.`);
+    this.command = command;
+    this.name = "CommandNotAllowed";
+  }
+  command;
+  code = "command_not_allowed";
+};
+var KEEP_BYTES = 64 * 1024;
+var BACKGROUND_LIMIT_MS = 30 * 6e4;
+var SETTLE_MS = 2e3;
+var running = /* @__PURE__ */ new Set();
+process.once("exit", () => {
+  for (const child of running) {
+    try {
+      child.kill("SIGKILL");
+    } catch {
+    }
+  }
+});
+function stop(child) {
+  if (child.exitCode !== null || child.signalCode !== null) return;
+  try {
+    child.kill("SIGTERM");
+  } catch {
+  }
+  const hard = setTimeout(() => {
+    try {
+      child.kill("SIGKILL");
+    } catch {
+    }
+  }, 2e3);
+  hard.unref();
+}
+function launchLine(program, args) {
+  if (process.platform === "win32" && /\.(cmd|bat)$/i.test(program)) {
+    const unsafe = [program, ...args].find((part) => /[&|<>^%!"]/.test(part));
+    if (unsafe !== void 0) throw new HelperFailure(`on Windows a .cmd or .bat cannot take "${unsafe}" \u2014 those characters mean something to cmd.exe`);
+    return { file: process.env["ComSpec"] || "cmd.exe", args: ["/d", "/c", program, ...args] };
+  }
+  return { file: program, args };
+}
+function localCommandRunner(opts) {
+  const mine = /* @__PURE__ */ new Set();
+  const trustAll = opts.trustAll ?? process.env["FLOWRIKI_TRUST_COMMANDS"] === "1";
+  const run = async (request) => {
+    const record = {
+      fingerprint: request.fingerprint,
+      name: request.name,
+      program: request.program,
+      args: request.args,
+      folder: request.folder,
+      env: Object.keys(request.env),
+      mode: request.mode,
+      at: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    if (!trustAll) {
+      const approvals = readApprovals();
+      if (!approvals.allowed[request.fingerprint]) {
+        approvals.waiting[request.fingerprint] = record;
+        try {
+          writeApprovals(approvals);
+        } catch {
+        }
+        throw new CommandNotAllowed(record);
+      }
+    }
+    const cwd = request.folder ? path24.resolve(opts.root, request.folder) : opts.root;
+    if (!fs24.existsSync(cwd)) throw new HelperFailure(`the folder ${cwd} does not exist on this computer`);
+    const blank = (text) => request.redact.reduce((out, secret2) => secret2 ? out.split(secret2).join("\u2022\u2022\u2022") : out, text);
+    const line = launchLine(request.program, request.args);
+    return await new Promise((resolve2, reject) => {
+      let stdout = "", stderr = "", settled = false;
+      let child;
+      try {
+        child = spawn2(line.file, line.args, { cwd, env: { ...process.env, ...request.env }, shell: false, windowsHide: true, stdio: ["ignore", "pipe", "pipe"] });
+      } catch (error) {
+        reject(new HelperFailure(`${request.program} could not be started: ${error.message}`));
+        return;
+      }
+      running.add(child);
+      mine.add(child);
+      const forget = () => {
+        running.delete(child);
+        mine.delete(child);
+      };
+      const finish = (outcome) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        if (outcome instanceof Error) reject(outcome);
+        else resolve2(outcome);
+      };
+      const ready = request.readyPattern ? new RegExp(request.readyPattern) : null;
+      const take = (into) => (chunk) => {
+        const text = chunk.toString();
+        if (into === "out") stdout = (stdout + text).slice(-KEEP_BYTES);
+        else stderr = (stderr + text).slice(-KEEP_BYTES);
+        if (request.mode === "background" && ready && ready.test(into === "out" ? stdout : stderr)) {
+          finish({ exitCode: null, stdout: blank(stdout), stderr: blank(stderr) });
+        }
+      };
+      child.stdout?.on("data", take("out"));
+      child.stderr?.on("data", take("err"));
+      child.on("error", (error) => {
+        forget();
+        finish(new HelperFailure(error.code === "ENOENT" ? `${request.program} was not found on this computer \u2014 install it, or give its full path` : `${request.program} could not be started: ${error.message}`));
+      });
+      child.on("close", (code) => {
+        forget();
+        if (request.mode === "background" && !settled) {
+          const why = (stderr || stdout).trim().split(/\r?\n/).pop() ?? "";
+          finish(new HelperFailure(`the command stopped before it was ready (exit ${code ?? "?"})${why ? `: ${blank(why).slice(0, 300)}` : ""}`));
+          return;
+        }
+        finish({ exitCode: code, stdout: blank(stdout), stderr: blank(stderr) });
+      });
+      const timer = request.mode === "background" && !ready ? setTimeout(() => finish({ exitCode: null, stdout: blank(stdout), stderr: blank(stderr) }), Math.min(SETTLE_MS, request.timeoutMs)) : setTimeout(() => {
+        stop(child);
+        finish(new HelperFailure(request.mode === "background" ? `the command did not say it was ready within ${Math.round(request.timeoutMs / 1e3)}s` : `the command did not finish within ${Math.round(request.timeoutMs / 1e3)}s, so it was stopped`));
+      }, request.timeoutMs);
+      if (request.mode === "background") {
+        const limit = setTimeout(() => stop(child), BACKGROUND_LIMIT_MS);
+        limit.unref();
+      }
+    });
+  };
+  return {
+    run,
+    /** Stop every background command this runner started — the test is over. */
+    close: () => {
+      for (const child of mine) stop(child);
+      mine.clear();
+    }
+  };
+}
 var CLOCK_SLACK_MS = 1e4;
-function helperRunner(delivered, secrets, startedAt = /* @__PURE__ */ new Date()) {
+function helperRunner(delivered, secrets, startedAt = /* @__PURE__ */ new Date(), root = process.cwd()) {
   if (!Array.isArray(delivered) || delivered.length === 0) return void 0;
   const helpers = new Map(
     DeliveredHelperSchema.array().parse(delivered).map((helper) => [helper.id, helper])
   );
   const since = new Date(startedAt.getTime() - CLOCK_SLACK_MS);
-  return async (helperId, inputs) => {
+  const commands = [...helpers.values()].some((h) => h.config.kind === "command") ? localCommandRunner({ root }) : void 0;
+  const run = (async (helperId, inputs) => {
     const helper = helpers.get(helperId);
     if (!helper) throw new Error("that helper was deleted, or was not sent with this run \u2014 choose another");
     try {
-      const { value, detail } = await runHelper(helper.config, {
+      const { value, detail } = await runHelper(helper, {
         resolveSecret: (ref) => secrets?.[ref],
         inputs,
-        since
+        since,
+        ...commands ? { commands } : {}
       });
       return { value, detail: `${helper.name}: ${detail}` };
     } catch (error) {
       throw new Error(`${helper.name}: ${error.message}`);
     }
-  };
+  });
+  run.close = () => commands?.close();
+  return run;
 }
 var LOCAL_CHROMIUM2 = { id: "chromium", provider: "local", engine: "chromium" };
 async function summaryOf2(storage, runId) {
@@ -7829,6 +8095,7 @@ async function executeCase(opts) {
     };
   }
   await cloud?.close().catch(() => void 0);
+  helpers?.close();
   if (lane) outcome = { ...outcome, artifacts: [...outcome.artifacts ?? [], ...await lane.close(outcome.status === "passed")] };
   await Promise.all(writes);
   if (storage && run) {
@@ -7854,7 +8121,7 @@ async function executeCase(opts) {
     await storage.finishRun(run.id, {
       status: outcome.status === "passed" ? "passed" : outcome.error === "the run was cancelled" ? "cancelled" : outcome.status === "failed" ? "failed" : "errored",
       errorMessage: outcome.error,
-      artifactsDir: runDir && fs24.existsSync(runDir) ? runDir : null
+      artifactsDir: runDir && fs34.existsSync(runDir) ? runDir : null
     });
   }
   await emit({ type: "case.finished", runId: run?.id ?? "", caseId: testCase.id, outcome });
@@ -8539,10 +8806,10 @@ async function verifyFlowSteps(deps, opts) {
 }
 function deliveredRun(delivered) {
   const { flow, secrets, config } = delivered;
-  const runHelper2 = helperRunner(delivered.helpers, secrets);
+  const runHelper3 = helperRunner(delivered.helpers, secrets);
   return {
     resolveAuth: authenticationResolver(delivered.authentications),
-    ...runHelper2 ? { runHelper: runHelper2 } : {},
+    ...runHelper3 ? { runHelper: runHelper3 } : {},
     readConfig: () => config,
     // By id, and only the one that was sent. A machine serving no checkout has
     // no other flow to confuse it with.
@@ -9017,10 +9284,10 @@ var Agent = class {
     if (!allowed.ok) return this.refuse(command.id, allowed.reason);
     if (this.closed) return this.refuse(command.id, "storage_unavailable", "the agent is closed");
     const fingerprint2 = AgentState.fingerprint(command);
-    const running = this.inFlight.get(command.id);
-    if (running) {
-      if (running.fingerprint !== fingerprint2) return this.refuse(command.id, "command_conflict", "this command ID names different work");
-      return { ...await running.promise, status: "duplicate" };
+    const running2 = this.inFlight.get(command.id);
+    if (running2) {
+      if (running2.fingerprint !== fingerprint2) return this.refuse(command.id, "command_conflict", "this command ID names different work");
+      return { ...await running2.promise, status: "duplicate" };
     }
     const previous = this.previous(command.id, fingerprint2);
     if (previous) return previous;
@@ -9221,18 +9488,19 @@ var AgentLink = class {
 
 // ../provider-local/dist/index.js
 import fs10 from "fs";
-import os5 from "os";
+import os6 from "os";
 import path10 from "path";
 import fs25 from "fs";
-import path24 from "path";
+import path25 from "path";
 import { randomUUID } from "crypto";
 import { execFile } from "child_process";
-import fs34 from "fs";
+import fs35 from "fs";
 import path34 from "path";
 import { randomUUID as randomUUID2 } from "crypto";
+import os22 from "os";
 import { spawn as nodeSpawn } from "child_process";
 import fs43 from "fs";
-import os22 from "os";
+import os32 from "os";
 import path42 from "path";
 var NO_CHECKOUT = {
   ok: false,
@@ -9243,7 +9511,7 @@ var scratchRoots = /* @__PURE__ */ new Map();
 function scratchRoot(projectId) {
   let root = scratchRoots.get(projectId);
   if (!root) {
-    root = fs10.mkdtempSync(path10.join(os5.tmpdir(), `flowriki-record-${projectId.replace(/[^\w-]/g, "")}-`));
+    root = fs10.mkdtempSync(path10.join(os6.tmpdir(), `flowriki-record-${projectId.replace(/[^\w-]/g, "")}-`));
     scratchRoots.set(projectId, root);
   }
   return root;
@@ -9477,7 +9745,7 @@ function historyHandlers({ storage, artifactLimit }) {
       const artifact = run.artifacts.find((a) => a.id === artifactId);
       if (!artifact) return { ok: false, reason: "failed", detail: "no such artifact on that run" };
       const dir = run.artifactsDir ?? runArtifactsDir(runId, run.projectId);
-      const file2 = path24.join(dir, artifact.relPath);
+      const file2 = path25.join(dir, artifact.relPath);
       if (!isInside(dir, file2) || !fs25.existsSync(file2) || !isInside(fs25.realpathSync(dir), fs25.realpathSync(file2))) {
         return { ok: false, reason: "failed", detail: "the artifact file is not on this machine" };
       }
@@ -9908,7 +10176,7 @@ function debuggingHandlers(ctx) {
 var file = () => path34.join(flowrikiHome(), "assistant-folders.json");
 function readAll() {
   try {
-    const parsed = JSON.parse(fs34.readFileSync(file(), "utf8"));
+    const parsed = JSON.parse(fs35.readFileSync(file(), "utf8"));
     if (!parsed || typeof parsed !== "object") return {};
     const out = {};
     for (const [id, value] of Object.entries(parsed)) {
@@ -9921,18 +10189,18 @@ function readAll() {
   }
 }
 function writeAll(all) {
-  fs34.mkdirSync(path34.dirname(file()), { recursive: true, mode: 448 });
-  fs34.writeFileSync(file(), JSON.stringify(all, null, 2), { mode: 384 });
+  fs35.mkdirSync(path34.dirname(file()), { recursive: true, mode: 448 });
+  fs35.writeFileSync(file(), JSON.stringify(all, null, 2), { mode: 384 });
 }
 function gitHead(folder) {
   try {
-    const head = fs34.readFileSync(path34.join(folder, ".git", "HEAD"), "utf8").trim();
+    const head = fs35.readFileSync(path34.join(folder, ".git", "HEAD"), "utf8").trim();
     const ref = /^ref: (.+)$/.exec(head)?.[1];
     if (!ref) return { commit: /^[0-9a-f]{40}$/.test(head) ? head : null, branch: null };
     const branch = ref.replace(/^refs\/heads\//, "");
     const loose = path34.join(folder, ".git", ref);
-    if (fs34.existsSync(loose)) return { commit: fs34.readFileSync(loose, "utf8").trim(), branch };
-    const packed = fs34.readFileSync(path34.join(folder, ".git", "packed-refs"), "utf8");
+    if (fs35.existsSync(loose)) return { commit: fs35.readFileSync(loose, "utf8").trim(), branch };
+    const packed = fs35.readFileSync(path34.join(folder, ".git", "packed-refs"), "utf8");
     const line = packed.split("\n").find((l) => l.endsWith(` ${ref}`));
     return { commit: line?.split(" ")[0] ?? null, branch };
   } catch {
@@ -9942,7 +10210,7 @@ function gitHead(folder) {
 function describeFolder(folder, name = path34.basename(folder)) {
   const exists = (() => {
     try {
-      return fs34.statSync(folder).isDirectory();
+      return fs35.statSync(folder).isDirectory();
     } catch {
       return false;
     }
@@ -10363,6 +10631,32 @@ function finished(l) {
   };
   return { flow, secrets: Object.fromEntries(l.typed) };
 }
+function helperHandlers(_ctx) {
+  return {
+    "helper.run": async (command, project) => {
+      const parsed = DeliveredHelperSchema.safeParse(command.args["helper"]);
+      if (!parsed.success) return { ok: false, reason: "failed", detail: "that helper could not be read" };
+      const secrets = command.args["secrets"] ?? {};
+      const inputs = command.args["inputs"] ?? {};
+      const commands = localCommandRunner({ root: project.root || os22.homedir() });
+      const started = Date.now();
+      try {
+        const result = await runHelper(parsed.data, { resolveSecret: (ref) => secrets[ref], inputs, commands });
+        return { ok: true, result: { ...result, tookMs: Date.now() - started } };
+      } catch (error) {
+        const notAllowed = error instanceof CommandNotAllowed;
+        return {
+          ok: false,
+          reason: "failed",
+          detail: error instanceof HelperFailure ? error.message : `the helper failed: ${error.message}`,
+          ...notAllowed ? { code: "command_not_allowed" } : {}
+        };
+      } finally {
+        commands.close();
+      }
+    }
+  };
+}
 function buildHandlers(deps) {
   const context = {
     deps,
@@ -10391,6 +10685,7 @@ function buildHandlers(deps) {
     ...recordingHandlers(context),
     ...assistantHandlers(context),
     ...mobileHandlers(context),
+    ...helperHandlers(context),
     ...debug
   };
 }
@@ -10667,7 +10962,7 @@ function eventsFromLine(askId, line) {
   }
   return out;
 }
-function stop(child) {
+function stop2(child) {
   child.kill("SIGTERM");
   const force = setTimeout(() => {
     if (child.exitCode === null && child.signalCode === null) child.kill("SIGKILL");
@@ -10675,14 +10970,14 @@ function stop(child) {
   force.unref?.();
 }
 function createClaudeCli(options) {
-  const spawn2 = options.spawn ?? nodeSpawn;
+  const spawn3 = options.spawn ?? nodeSpawn;
   const binary = options.binary ?? process.env["FLOWRIKI_CLAUDE_BIN"] ?? "claude";
   const maxAskMs = options.maxAskMs ?? 60 * 6e4;
-  const scratchRoot2 = options.scratchRoot ?? path42.join(os22.tmpdir(), "flowriki-claude");
-  const running = /* @__PURE__ */ new Map();
+  const scratchRoot2 = options.scratchRoot ?? path42.join(os32.tmpdir(), "flowriki-claude");
+  const running2 = /* @__PURE__ */ new Map();
   const MAX_AT_ONCE = 3;
   process.once("exit", () => {
-    for (const child of running.values()) {
+    for (const child of running2.values()) {
       try {
         child.kill("SIGTERM");
       } catch {
@@ -10692,7 +10987,7 @@ function createClaudeCli(options) {
   const cancelled = /* @__PURE__ */ new Set();
   const retrying = /* @__PURE__ */ new Set();
   const sessionsInUse = /* @__PURE__ */ new Set();
-  const occupied = () => running.size + retrying.size;
+  const occupied = () => running2.size + retrying.size;
   function capture(args, timeoutMs = 15e3) {
     return new Promise((resolve2) => {
       let out = "", err = "", settled = false;
@@ -10704,7 +10999,7 @@ function createClaudeCli(options) {
       };
       let child;
       try {
-        child = spawn2(binary, args, { stdio: ["ignore", "pipe", "pipe"] });
+        child = spawn3(binary, args, { stdio: ["ignore", "pipe", "pipe"] });
       } catch {
         return resolve2({ code: null, out: "", err: "", failed: true });
       }
@@ -10764,10 +11059,10 @@ function createClaudeCli(options) {
       return { installed: true, version: version.out.trim().split(/\s+/)[0] ?? null, ...parsed };
     },
     connect(emit) {
-      if (running.size > 0) return { started: false, detail: "The assistant is busy answering a question." };
+      if (running2.size > 0) return { started: false, detail: "The assistant is busy answering a question." };
       let child;
       try {
-        child = spawn2(binary, ["auth", "login"], { stdio: ["ignore", "pipe", "pipe"] });
+        child = spawn3(binary, ["auth", "login"], { stdio: ["ignore", "pipe", "pipe"] });
       } catch {
         return { started: false, detail: "The assistant\u2019s command-line tool could not be started." };
       }
@@ -10826,10 +11121,10 @@ function createClaudeCli(options) {
         cancelled.add(askId);
         return true;
       }
-      const child = running.get(askId);
+      const child = running2.get(askId);
       if (!child) return false;
       cancelled.add(askId);
-      stop(child);
+      stop2(child);
       setTimeout(() => child.kill("SIGKILL"), 3e3).unref?.();
       return true;
     },
@@ -10842,7 +11137,7 @@ function createClaudeCli(options) {
   function launch(ask, dir, mcpConfigPath, sessionId, attempt = 1) {
     let child;
     try {
-      child = spawn2(
+      child = spawn3(
         binary,
         buildAskArgs({
           prompt: ask.prompt,
@@ -10864,7 +11159,7 @@ function createClaudeCli(options) {
     } catch {
       return { started: false, detail: "The assistant\u2019s command-line tool could not be started." };
     }
-    running.set(ask.askId, child);
+    running2.set(ask.askId, child);
     if (sessionId) sessionsInUse.add(sessionId);
     let buffer = "", stderr = "", sawDone = false, ended = false;
     let silentFailure = false;
@@ -10906,7 +11201,7 @@ function createClaudeCli(options) {
       ended = true;
       clearTimeout(timer);
       if (buffer.trim()) handleLine(buffer);
-      running.delete(ask.askId);
+      running2.delete(ask.askId);
       if (sessionId) sessionsInUse.delete(sessionId);
       const stopped = cancelled.has(ask.askId);
       if (toolsMissing && !stopped) {
@@ -10941,7 +11236,7 @@ function createClaudeCli(options) {
       cancelled.delete(ask.askId);
     };
     const timer = setTimeout(() => {
-      stop(child);
+      stop2(child);
       end(false, `Stopped after ${Math.max(1, Math.round(maxAskMs / 6e4))} minutes. Whatever it saved so far is on the Branches page \u2014 send \u201Ccontinue\u201D to carry on.`);
     }, maxAskMs);
     timer.unref?.();
@@ -11157,11 +11452,11 @@ function createAgentRuntime(options) {
 
 // src/lock.ts
 import fs11 from "fs";
-import os6 from "os";
+import os7 from "os";
 function takeLock(env = process.env) {
   ensureDataDir(env);
   const file2 = lockPath(env);
-  const mine = { pid: process.pid, since: (/* @__PURE__ */ new Date()).toISOString(), host: os6.hostname() };
+  const mine = { pid: process.pid, since: (/* @__PURE__ */ new Date()).toISOString(), host: os7.hostname() };
   for (let attempt = 0; attempt < 2; attempt += 1) {
     try {
       fs11.writeFileSync(file2, JSON.stringify(mine), { flag: "wx", mode: 384 });
@@ -11317,7 +11612,7 @@ function status(serviceArg) {
   const service = resolveService(serviceArg);
   const connection = connectionFor(service);
   const lock = takeLock();
-  const running = lock.ok ? null : lock.held;
+  const running2 = lock.ok ? null : lock.held;
   if (lock.ok) lock.lock.release();
   const dirs = connection?.checkouts ?? [];
   const { projects, skipped } = resolveCheckouts(dirs);
@@ -11329,7 +11624,7 @@ function status(serviceArg) {
       ...projects.map((p) => ({ root: p.root, project: p.name })),
       ...skipped.map((s2) => ({ root: s2.root, project: null, why: s2.why }))
     ],
-    running
+    running: running2
   };
 }
 async function doctor(serviceArg) {
@@ -11409,6 +11704,9 @@ export {
   backupsFor,
   withBackups,
   flowrikiHome,
+  readApprovals,
+  allowCommands,
+  revokeCommands,
   helperRunner,
   resolveCheckouts,
   start,

package/dist/{chunk-PDUMGI6V.js → chunk-YD7F7JMA.js}

@@ -1454,11 +1454,52 @@ var HttpHelperSchema = z5.object({
     pattern: z5.string().max(500).default("")
   }).strict().default({})
 }).strict();
+var CommandLineSchema = z5.object({
+  program: z5.string().trim().min(1).max(500),
+  args: z5.array(z5.string().max(2e3)).max(50).default([])
+}).strict();
+var EnvName = z5.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/, "an environment variable name is letters, digits and _");
+var CommandHelperSchema = z5.object({
+  kind: z5.literal("command"),
+  /** What runs everywhere, unless a system has its own below. */
+  run: CommandLineSchema,
+  /** The same job on another system — a different program, or a .cmd on
+   *  Windows. A tester's computer uses its own when there is one. */
+  perSystem: z5.object({
+    macos: CommandLineSchema.optional(),
+    windows: CommandLineSchema.optional(),
+    linux: CommandLineSchema.optional()
+  }).strict().default({}),
+  /** Where it runs: a folder inside the project's checkout, or empty for the
+   *  project's folder (the agent's own folder when there is no checkout). */
+  folder: z5.string().max(500).default(""),
+  /** Plain environment variables, in the repository. */
+  env: z5.record(EnvName, z5.string().max(2e3)).default({}),
+  /** Environment variable → vault reference: how a token reaches the command
+   *  without ever being on its command line. */
+  secretEnv: z5.record(EnvName, SecretRef).default({}),
+  /** `run` waits for it to finish; `background` starts it, waits until it is
+   *  ready, and stops it when the test ends — a mock server, a simulator. */
+  mode: z5.enum(["run", "background"]).default("run"),
+  /** Background: the output line that says it is ready. Empty waits a
+   *  couple of seconds instead. */
+  readyPattern: z5.string().max(500).default(""),
+  timeoutSeconds: z5.number().int().min(1).max(600).default(60),
+  /** Refused unless it ends with this exit code. */
+  expectExit: z5.number().int().min(0).max(255).default(0),
+  extract: z5.object({
+    take: z5.enum(["output", "pattern", "json", "nothing"]).default("output"),
+    pattern: z5.string().max(500).default(""),
+    /** For json: a dot path — `device.id`. */
+    path: z5.string().max(300).default("")
+  }).strict().default({})
+}).strict();
 var HelperConfigSchema = z5.discriminatedUnion("kind", [
   MailboxHelperSchema,
   TotpHelperSchema,
   SmsHelperSchema,
-  HttpHelperSchema
+  HttpHelperSchema,
+  CommandHelperSchema
 ]);
 var HelperSchema = z5.object({
   schemaVersion: z5.literal(HELPER_SCHEMA_VERSION),
@@ -1475,7 +1516,9 @@ var HelperSchema = z5.object({
   const patterns = [
     helper.config.kind === "mailbox" && helper.config.extract.take === "code" ? helper.config.extract.pattern : "",
     helper.config.kind === "sms" ? helper.config.extract.pattern : "",
-    helper.config.kind === "http" && helper.config.extract.take === "pattern" ? helper.config.extract.pattern : ""
+    helper.config.kind === "http" && helper.config.extract.take === "pattern" ? helper.config.extract.pattern : "",
+    helper.config.kind === "command" && helper.config.extract.take === "pattern" ? helper.config.extract.pattern : "",
+    helper.config.kind === "command" ? helper.config.readyPattern : ""
   ];
   for (const pattern of patterns) {
     if (pattern && !PatternSchema.safeParse(pattern).success) {
@@ -1483,6 +1526,12 @@ var HelperSchema = z5.object({
     }
   }
 });
+function commandFor(config, system) {
+  return config.perSystem[system] ?? config.run;
+}
+function commandSystemOf(platform) {
+  return platform === "win32" ? "windows" : platform === "darwin" ? "macos" : "linux";
+}
 var DeliveredHelperSchema = z5.object({
   id: z5.string().min(1),
   name: z5.string(),
@@ -4452,6 +4501,8 @@ export {
   sameIdentity,
   PrerequisiteProblem,
   expandForRun,
+  commandFor,
+  commandSystemOf,
   DeliveredHelperSchema,
   exploreSummary,
   CODEBASE_TAG_NAME,

package/dist/cli.js

@@ -3,6 +3,7 @@ import {
   AGENT_LATEST_URL,
   AGENT_VERSION,
   agentUpdateFor,
+  allowCommands,
   authenticationResolver,
   backupsFor,
   checkAssertion,
@@ -18,15 +19,17 @@ import {
   helperRunner,
   openRunSession,
   prepareBrowsers,
+  readApprovals,
   replayCase,
   replayFlow,
   resolveCheckouts,
   resolveService,
+  revokeCommands,
   runtimeValue,
   start,
   status,
   withBackups
-} from "./chunk-FJVNOLHT.js";
+} from "./chunk-WUK3X43D.js";
 import {
   CLOUD_PROVIDERS,
   CLOUD_PROVIDER_NAME,
@@ -54,7 +57,7 @@ import {
   slugify,
   stepRefusedOn,
   targetFor
-} from "./chunk-PDUMGI6V.js";
+} from "./chunk-YD7F7JMA.js";
 
 // src/cli.ts
 import { parseArgs } from "util";
@@ -631,6 +634,8 @@ var AuthoringSession = class _AuthoringSession {
   mobile = null;
   values = /* @__PURE__ */ new Map();
   resolvers = null;
+  /** Every helper runner made in this session, so background commands stop with it. */
+  helperRunners = [];
   lastTree = null;
   /** The navigation as last shown, so a step repeats it only when it changed. */
   lastNavigation = null;
@@ -677,6 +682,7 @@ var AuthoringSession = class _AuthoringSession {
       draft.device?.kind === "cloud" ? { cloud: draft.device.provider } : {}
     );
     const runHelper = helperRunner(prepared.helpers, prepared.secrets);
+    if (runHelper) this.helperRunners.push(runHelper);
     this.resolvers = {
       resolveAuth: authenticationResolver(prepared.authentications),
       resolveSecret: (ref) => this.typed.get(ref) ?? prepared.secrets[ref],
@@ -1296,6 +1302,7 @@ ${describeRows(built.rows, built.testCase)}`;
     const steps = testCase.occurrences.flatMap((o) => o.steps);
     const prepared = await this.service.prepare(projectId, steps, null);
     const runHelper = helperRunner(prepared.helpers, prepared.secrets);
+    if (runHelper) this.helperRunners.push(runHelper);
     const base = catalog.baseUrl;
     const phoneRows = testCase.occurrences.filter((o) => isMobile(o.platform));
     if (!base && phoneRows.length < testCase.occurrences.length) throw new Error("this project has no base URL \u2014 set one in the project's settings first");
@@ -1344,6 +1351,7 @@ ${lines.join("\n")}
 Review and publish it here: ${review}`;
   }
   async close() {
+    for (const runner of this.helperRunners.splice(0)) runner.close();
     if (this.reportTimer) await this.sendReport();
     const run = this.run;
     const mobile = this.mobile;
@@ -2638,7 +2646,7 @@ Use it with start_flow signIn {"profileId": "\u2026", "accountId": "${made.accou
     {
       name: "create_helper",
       title: "Make a helper",
-      description: `A helper for things outside the page, as the Helpers screen makes one. config by kind \u2014 mailbox: {kind, host, port?, secure?, username, folder?, match?: {to, from, subject}, extract?: {take: code|link|subject|body, pattern}, waitSeconds?} with secretValues {passwordRef: the mailbox password}. totp: {kind, digits?, period?, algorithm?} with secretValues {secretRef: the base32 secret}. sms: {kind, accountSid, to, match?, extract?} with secretValues {authTokenRef: the Twilio token}. http: {kind, method, url, headers?, secretHeaders?: {name: ""}, body?, expectStatus?, extract?: {take: json|pattern|status|nothing, path, pattern}} with secretValues {"header:<name>": value}. Use {{name}} in fields for inputs a step supplies. Secrets are sealed in the vault and never shown again. Making the same name again updates Claude's earlier one.`,
+      description: `A helper for things outside the page, as the Helpers screen makes one. config by kind \u2014 mailbox: {kind, host, port?, secure?, username, folder?, match?: {to, from, subject}, extract?: {take: code|link|subject|body, pattern}, waitSeconds?} with secretValues {passwordRef: the mailbox password}. totp: {kind, digits?, period?, algorithm?} with secretValues {secretRef: the base32 secret}. sms: {kind, accountSid, to, match?, extract?} with secretValues {authTokenRef: the Twilio token}. http: {kind, method, url, headers?, secretHeaders?: {name: ""}, body?, expectStatus?, extract?: {take: json|pattern|status|nothing, path, pattern}} with secretValues {"header:<name>": value}. command (runs on the tester's computer): {kind, run: {program, args: [..]}, perSystem?: {macos|windows|linux: {program, args}}, folder?, env?, secretEnv?: {NAME: ""}, mode?: run|background, readyPattern?, timeoutSeconds?, expectExit?, extract?: {take: output|pattern|json|nothing, pattern, path}} with secretValues {"env:<NAME>": value}; no shell \u2014 one program, its arguments a list. A command runs only after the person allows it on their computer (flowriki-agent allow "<name>"): when use_helper says it is not allowed, stop and tell them that exact command \u2014 never work around it. Use {{name}} in fields for inputs a step supplies. Secrets are sealed in the vault and never shown again. Making the same name again updates Claude's earlier one.`,
       inputSchema: {
         type: "object",
         properties: {
@@ -3044,6 +3052,7 @@ async function runMcp(opts) {
 }
 
 // src/cli.ts
+var quoteArg = (arg) => /^[\w@%+=:,./-]+$/.test(arg) ? arg : JSON.stringify(arg);
 var paint = (code) => (s) => `\x1B[${code}m${s}\x1B[0m`;
 var bold = paint("1");
 var dim = paint("2");
@@ -3066,6 +3075,11 @@ ${bold("USAGE")}
                                     needs (Appium and its drivers)
   flowriki-agent mobile doctor      is this computer ready to test phones
   flowriki-agent mobile devices     the phones, emulators and simulators here
+  flowriki-agent commands           command helpers waiting to be allowed here,
+                                    and the ones already allowed
+  flowriki-agent allow <name>       allow a command helper to run on this
+                                    computer \u2014 it is shown to you first
+  flowriki-agent revoke <name>      stop allowing one
   flowriki-agent mcp                Flowriki as tools for Claude \u2014 started by
                                     Claude Code or Claude Desktop, not by you:
                                     claude mcp add flowriki -- flowriki-agent mcp
@@ -3097,6 +3111,7 @@ async function main(argv) {
         service: { type: "string" },
         json: { type: "boolean" },
         "no-open": { type: "boolean" },
+        yes: { type: "boolean", short: "y" },
         help: { type: "boolean", short: "h" },
         version: { type: "boolean", short: "v" }
       }
@@ -3315,6 +3330,69 @@ Run \`flowriki-agent --help\`.`);
       console.error(`unknown: mobile ${sub} \u2014 use setup, doctor or devices`);
       return 2;
     }
+    // COMMAND HELPERS: written by anybody with the project, run on THIS
+    // computer only once somebody sitting here has seen and allowed them.
+    case "commands": {
+      const { allowed, waiting } = readApprovals();
+      const show = (c) => `${[c.program, ...c.args].map(quoteArg).join(" ")}${c.folder ? dim(`   in ${c.folder}`) : ""}${c.mode === "background" ? dim("   (keeps running during the test)") : ""}`;
+      if (values.json) {
+        console.log(JSON.stringify({ allowed: Object.values(allowed), waiting: Object.values(waiting) }, null, 2));
+        return 0;
+      }
+      console.log(bold("Waiting to be allowed"));
+      if (!Object.keys(waiting).length) console.log(dim("  none"));
+      for (const c of Object.values(waiting)) console.log(`  ${yellow("\u2022")} ${c.name}
+    ${show(c)}`);
+      console.log(bold("\nAllowed on this computer"));
+      if (!Object.keys(allowed).length) console.log(dim("  none"));
+      for (const c of Object.values(allowed)) console.log(`  ${green("\u2713")} ${c.name}
+    ${show(c)}`);
+      return 0;
+    }
+    case "allow":
+    case "revoke": {
+      const which = positionals.slice(1).join(" ").trim();
+      if (!which) {
+        console.error(`say which: flowriki-agent ${command} "<helper name>" (or all)`);
+        return 2;
+      }
+      if (command === "revoke") {
+        const gone = revokeCommands(which);
+        console.log(gone.length ? `${green("no longer allowed:")} ${gone.map((c) => c.name).join(", ")}` : yellow(`nothing allowed matches "${which}"`));
+        return gone.length ? 0 : 1;
+      }
+      const { waiting } = readApprovals();
+      const wanted = which.toLowerCase();
+      const matching = Object.values(waiting).filter((c) => wanted === "all" || c.fingerprint === wanted || c.name.toLowerCase() === wanted);
+      if (!matching.length) {
+        console.log(yellow(`nothing is waiting that matches "${which}". A command is listed here after a test or Try it asks to run it \u2014 see flowriki-agent commands.`));
+        return 1;
+      }
+      for (const c of matching) {
+        console.log(`${bold(c.name)}
+  runs   ${[c.program, ...c.args].map(quoteArg).join(" ")}
+  in     ${c.folder || "the project's folder"}${c.env.length ? `
+  env    ${c.env.join(", ")}` : ""}${c.mode === "background" ? "\n  keeps running until the test ends" : ""}`);
+      }
+      if (!values.yes) {
+        if (!process.stdin.isTTY) {
+          console.error("add --yes to allow without being asked");
+          return 2;
+        }
+        const { createInterface } = await import("readline/promises");
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        const answer = (await rl.question(`
+Allow ${matching.length === 1 ? "this command" : `these ${matching.length} commands`} to run on this computer? [y/N] `)).trim().toLowerCase();
+        rl.close();
+        if (answer !== "y" && answer !== "yes") {
+          console.log("Not allowed.");
+          return 1;
+        }
+      }
+      const done = allowCommands(which);
+      console.log(`${green("allowed:")} ${done.map((c) => c.name).join(", ")}. Tests and Try it can run ${done.length === 1 ? "it" : "them"} here now.`);
+      return 0;
+    }
     case "projects": {
       const { projects: found, skipped } = resolveCheckouts(projects.length ? projects : [process.cwd()]);
       for (const p of found) console.log(`  ${p.name}  ${dim(p.root)}`);

package/dist/{dist-3PMNCKSW.js → dist-CUDUSTFO.js}

@@ -48,7 +48,7 @@ import {
   textOf,
   toolEnv,
   typesSecrets
-} from "./chunk-PDUMGI6V.js";
+} from "./chunk-YD7F7JMA.js";
 export {
   AGENT_HOME,
   APPIUM_DIR,

package/dist/engine.js

@@ -9,8 +9,8 @@ import {
   resolveCheckouts,
   start,
   status
-} from "./chunk-FJVNOLHT.js";
-import "./chunk-PDUMGI6V.js";
+} from "./chunk-WUK3X43D.js";
+import "./chunk-YD7F7JMA.js";
 export {
   AGENT_VERSION,
   browsersReady,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowriki/agent",
-  "version": "0.1.0-beta.65",
+  "version": "0.1.0-beta.66",
   "description": "Run Flowriki UI tests on your own computer. Connects this machine to your Flowriki account.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",