@fnmoa/cli 0.4.1 → 0.4.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -1
- package/dist/assets/worker.js +130 -130
- package/dist/main.js +80 -76
- package/package.json +2 -2
package/dist/main.js
CHANGED
|
@@ -1,18 +1,18 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
2
|
import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
|
|
3
|
-
var
|
|
4
|
-
`,{mode:384})}async function ee(e,t=process.env){if(t.MOA_URL&&t.MOA_TOKEN)return{name:"env",url:t.MOA_URL,token:t.MOA_TOKEN};let n;try{n=await
|
|
5
|
-
${o.stderr}`;return/already exists|already own/i.test(r)?{ok:!0,made:!1}:o.ok?{ok:!0,made:!0}:{ok:!1,why:
|
|
6
|
-
`).filter(t=>t.trim()!=="").slice(-2).join(" \xB7 ").slice(0,240)});function
|
|
3
|
+
var uc=Object.defineProperty;var Te=(e,t)=>()=>(e&&(t=e(e=0)),t);var pc=(e,t)=>{for(var n in t)uc(e,n,{get:t[n],enumerable:!0})};function U(e,t=fetch){let n=e.url.replace(/\/+$/,""),o=async(s,a,c,i)=>{let l=async()=>t(`${n}${a}`,{method:s,headers:{authorization:`Bearer ${e.token}`,...c===void 0?{}:{"content-type":"application/json"},...i===void 0?{}:{"idempotency-key":i}},...c===void 0?{}:{body:JSON.stringify(c)}}),d;try{d=await l()}catch(u){if(i!==void 0)try{d=await l()}catch{throw hs(n,u)}else throw hs(n,u)}if(!d.ok){let u=await d.text(),f=u,p=d.headers.get("x-request-id")??void 0;try{let g=JSON.parse(u);f=g.error??u,p=g.requestId??p}catch{}throw new ae(d.status,f||`${s} ${a} failed`,p)}return d},r=async(s,a,c,i)=>{let l=await o(s,a,c,i);return l.status===204?void 0:await l.json()};return{url:n,get:s=>r("GET",s),post:(s,a,c)=>r("POST",s,a,c),patch:(s,a)=>r("PATCH",s,a),put:(s,a)=>r("PUT",s,a),del:async s=>{let a=await o("DELETE",s);if(a.status!==204)return await a.json().catch(()=>{})},stream:(s,a)=>t(`${n}${s}`,{headers:{authorization:`Bearer ${e.token}`,accept:"text/event-stream"},...a?{signal:a}:{}}),async rpc(s,a,c,i){let l=await t(s,{method:"POST",headers:{authorization:`Bearer ${a}`,"content-type":"application/json"},body:JSON.stringify({jsonrpc:"2.0",id:1,method:c,...i?{params:i}:{}})}),d=await l.json().catch(()=>({}));if(!l.ok||d.error)throw new ae(l.status,d.error?.message??`the server said ${l.status}`);return d.result}}}var ae,Pt,hs,De=Te(()=>{"use strict";ae=class extends Error{status;requestId;constructor(t,n,o){super(n),this.name="ApiError",this.status=t,o&&(this.requestId=o)}},Pt=class extends Error{constructor(t,n){super(`cannot reach ${t}: ${n instanceof Error?n.message:String(n)}`),this.name="Unreachable"}},hs=(e,t)=>new Pt(e,t)});import{mkdir as fc,readFile as mc,writeFile as gc}from"node:fs/promises";import{homedir as hc}from"node:os";import{dirname as wc,join as ws}from"node:path";async function ve(e){try{let t=JSON.parse(await mc(ys(e),"utf8"));return{current:t.current??"default",profiles:t.profiles??{}}}catch{return kc()}}async function gt(e,t){let n=ys(t);await fc(wc(n),{recursive:!0}),await gc(n,`${JSON.stringify(e,null,2)}
|
|
4
|
+
`,{mode:384})}async function ee(e,t=process.env){if(t.MOA_URL&&t.MOA_TOKEN)return{name:"env",url:t.MOA_URL,token:t.MOA_TOKEN};let n;try{n=await ve(t)}catch(s){throw t.MOA_URL||t.MOA_TOKEN?new Error(ks(t)):s}let o=e??n.current,r=n.profiles[o];if(!r)throw t.MOA_URL||t.MOA_TOKEN?new Error(ks(t)):new Error(o==="default"&&Object.keys(n.profiles).length===0?"no workspace yet \u2014 run `moa login <url> --token <token>`":`no profile named ${o}`);return{name:t.MOA_URL||t.MOA_TOKEN?`${o}+env`:o,url:t.MOA_URL??r.url,token:t.MOA_TOKEN??r.token}}var kc,ys,ks,Ze=Te(()=>{"use strict";kc=()=>({current:"default",profiles:{}}),ys=(e=process.env)=>e.MOA_CONFIG??ws(e.MOA_HOME??ws(hc(),".moa"),"config.json");ks=e=>e.MOA_URL?"MOA_URL is set but MOA_TOKEN is not, and there is no saved profile to take one from":"MOA_TOKEN is set but MOA_URL is not, and there is no saved profile to take one from"});async function Nt(e,t,n,o,r){let s=Date.now()+n*1e3,a=250,c="",i=t,l;for(;;){let d=await e.get(`/v1/jobs/${i}`).catch(async u=>{if(u instanceof Pt){if(l??=Date.now()+sr,Date.now()<l&&Date.now()<s)return;throw u}let p=u instanceof ae&&u.status===404&&r!==void 0?await r():void 0;if(!p)throw u;return i=p.id,p});if(d===void 0){await new Promise(u=>setTimeout(u,500));continue}if(l=void 0,o&&d.progress){let{at:u,...f}=d.progress,p=JSON.stringify(f);p!==c&&(c=p,o(d.progress))}if(d.state!=="running"&&d.state!=="queued")return d;if(Date.now()>s)throw new zn(t,n);await new Promise(u=>setTimeout(u,a)),a=Math.min(a*1.5,1e3)}}function kn(e,t,n,o=(s,a)=>{process.on(s,a)},r=(s,a)=>{process.off(s,a)}){let s=!1,a=()=>{s&&(n("moa: leaving it running \u2014 see `moa jobs`"),process.exit(2)),s=!0,n(`moa: stopping ${t} \u2014 Ctrl-C again to leave it running`),e.post(`/v1/jobs/${t}/cancel`,{}).catch(()=>{n("moa: could not reach the workspace to stop it")})};return o("SIGINT",a),{stop:()=>r("SIGINT",a),asked:()=>s}}var zn,sr,yn=Te(()=>{"use strict";De();zn=class extends Error{jobId;constructor(t,n){super(`timed out after ${n}s \u2014 it is still going: ${t}`),this.name="StoppedWaiting",this.jobId=t}},sr=2e4});import{join as vo}from"node:path";function Ge(e,t,n,o={}){let r={...e.env};return o.account&&(r.CLOUDFLARE_ACCOUNT_ID=o.account),r.WRANGLER_SEND_METRICS="false",r.NO_COLOR="1",e.exec(e.root?"pnpm":"wrangler",e.root?["exec","wrangler",...n]:n,{cwd:e.root?vo(t,"apps","workspace"):t,env:r,timeoutMs:o.timeoutMs??6e4})}function tn(e){let t=e.search(/[[{]/);if(t!==-1)try{return JSON.parse(e.slice(t))}catch{return}}async function sa(e,t){let n=await Ge(e,t,["whoami","--json"],{timeoutMs:3e4}),o=tn(n.stdout||n.stderr);if(!o)return{ok:!1,why:Qn(n.stderr||n.stdout)||"wrangler did not answer"};if(!o.loggedIn)return{ok:!1,why:"wrangler is not logged in",loggedOut:!0};let r=o.accounts??[],s=e.env.CLOUDFLARE_ACCOUNT_ID?.trim(),a=s?r.find(c=>c.id===s):r[0];return a?{ok:!0,account:a,others:r.length-1,...o.email?{email:o.email}:{}}:{ok:!1,why:s?`CLOUDFLARE_ACCOUNT_ID ${s} is not an account this login can use`:"this login has no account"}}async function aa(e,t){let n=t.split(".");for(let o=0;o<n.length-1;o++){let r=n.slice(o).join("."),s;try{s=await(await e.fetch(`${cl}?name=${encodeURIComponent(r)}&type=NS`,{headers:{accept:"application/dns-json"},signal:AbortSignal.timeout(1e4)})).json()}catch(c){return{onCloudflare:!1,why:`DNS did not answer: ${c instanceof Error?c.message:String(c)}`}}let a=(s.Answer??[]).filter(c=>c.type===2).map(c=>c.data);if(a.length!==0)return{zone:r,onCloudflare:a.every(c=>/\.ns\.cloudflare\.com\.?$/i.test(c))}}return{onCloudflare:!1,why:`no DNS zone holds ${t}`}}async function ia(e,t,n){let o=`https://api.cloudflare.com/client/v4/accounts/${encodeURIComponent(t)}`,r=s=>e.fetch(`${o}${s}`,{headers:{authorization:`Bearer ${n}`},signal:AbortSignal.timeout(15e3)});try{let s=await r("/d1/database?per_page=1");if(!s.ok){let i=(await s.json().catch(()=>({}))).errors?.[0]?.message??"";return{ok:!1,why:`${s.status} ${i}`.trim()}}return(await r("/workers/scripts")).ok?{ok:!1,why:"it can reach Workers too \u2014 the container gets this token, so it must be D1 only"}:{ok:!0}}catch(s){return{ok:!1,why:s instanceof Error?s.message:String(s)}}}async function ca(e,t,n){let o=async()=>{let c=await Ge(e,t,["d1","list","--json"],{account:n});return(tn(c.stdout)??[]).find(l=>l.name===ht)?.uuid},r=await o();if(r)return{ok:!0,id:r,made:!1};let s=await Ge(e,t,["d1","create",ht],{account:n});if(!s.ok)return{ok:!1,why:Qn(s.stderr||s.stdout)||"d1 create failed"};let a=await o();return a?{ok:!0,id:a,made:!0}:{ok:!1,why:`${ht} was made but is not listed`}}async function la(e,t,n){let o=await Ge(e,t,["r2","bucket","create",wt],{account:n}),r=`${o.stdout}
|
|
5
|
+
${o.stderr}`;return/already exists|already own/i.test(r)?{ok:!0,made:!1}:o.ok?{ok:!0,made:!0}:{ok:!1,why:Qn(r)||"r2 bucket create failed"}}async function fr(e,t,n){let o=await Ge(e,t,["containers","list","--json"],{account:n}),r=o.ok?tn(o.stdout):void 0;return Array.isArray(r)?{ok:!0,apps:r}:{ok:!1,why:Qn(o.stderr||o.stdout)||"wrangler did not answer"}}function mr(e){let t=e.filter(s=>s.name===je),n=t.length===1?t[0]:void 0;if(!n||typeof n.id!="string"||n.id==="")return;let o=typeof n.image=="string"?n.image.split("/").at(-1):void 0,r=o?.startsWith(`${je}:`)?o:void 0;return{id:n.id,...r?{image:r}:{}}}async function da(e,t,n){let o=await fr(e,t,n);return o.ok?mr(o.apps):void 0}async function Xn(e,t,n){let o=await Ge(e,t,["containers","images","list","--json"],{account:n}),r=o.ok?tn(o.stdout):void 0;if(!Array.isArray(r))return{ok:!1,why:Qn(o.stderr||o.stdout)||"wrangler did not answer"};let s=r.filter(a=>typeof a.name=="string"&&a.name.split("/").at(-1)===je).flatMap(a=>Array.isArray(a.tags)?a.tags:[]).filter(a=>typeof a=="string"&&a!=="").map(a=>`${je}:${a}`);return{ok:!0,images:[...new Set(s)]}}function ua(e){let t=vo(e.root,"apps","workspace"),n=en(e.domain);return{name:Je,account_id:e.account,main:e.worker??vo(t,"dist","worker.js"),compatibility_date:"2026-09-01",compatibility_flags:["nodejs_compat"],routes:[{pattern:n.workspace,custom_domain:!0},{pattern:n.console,custom_domain:!0}],d1_databases:[{binding:"DB",database_name:ht,database_id:e.databaseId}],r2_buckets:[{binding:"STATE",bucket_name:wt}],durable_objects:{bindings:[{name:"WORKSPACE",class_name:"WorkspaceBox"}]},migrations:[{tag:"v1",new_sqlite_classes:["WorkspaceBox"]}],containers:[{class_name:"WorkspaceBox",name:je,image:e.image??vo(t,"Dockerfile.cloudflare"),...e.image?{}:{image_build_context:e.root},instance_type:"standard-4",max_instances:1}],vars:e.vars}}var Je,ht,wt,je,_t,pr,en,Yn,cl,Qn,Zn=Te(()=>{"use strict";Je="fnmoa-workspace",ht="fnmoa-workspace",wt="fnmoa-state",je=`${Je}-workspacebox`,_t=6,pr=/^(?=.{4,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}$/,en=e=>({workspace:`workspace.${e}`,console:`console.${e}`}),Yn=e=>{let t=en(e);return{workspaceUrl:`https://${t.workspace}`,consoleUrl:`https://${t.console}`}};cl="https://cloudflare-dns.com/dns-query";Qn=e=>e.replace(/\u001B\[[0-9;]*m/g,"").trim().split(`
|
|
6
|
+
`).filter(t=>t.trim()!=="").slice(-2).join(" \xB7 ").slice(0,240)});function ul(e){let t="";for(let n of e)t+=String.fromCharCode(n);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function So(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n=atob(t+"=".repeat((4-t.length%4)%4)),o=new Uint8Array(n.length);for(let r=0;r<n.length;r++)o[r]=n.charCodeAt(r);return o}function pl(e){let t=e.replace(/-----BEGIN [^-]+-----/,"").replace(/-----END [^-]+-----/,"").replace(/\\n/g,"").replace(/\s+/g,"");return So(t.replace(/\+/g,"-").replace(/\//g,"_"))}async function fl(e){let t=e.trim();if(t.startsWith("{")){let n=JSON.parse(t),{kty:o,crv:r,x:s}=n;return crypto.subtle.importKey("jwk",{kty:o,crv:r,x:s},gr,!0,["verify"])}return crypto.subtle.importKey("spki",pl(t),gr,!0,["verify"])}async function ml(e){let t=await crypto.subtle.exportKey("raw",e),n=await crypto.subtle.digest("SHA-256",t);return ul(new Uint8Array(n).slice(0,8))}async function pa(e,t,n={}){let o=e.trim().split(".");if(o.length!==3)return{ok:!1,reason:"malformed"};let[r,s,a]=o,c,i,l;try{c=JSON.parse(new TextDecoder().decode(So(r))),i=JSON.parse(new TextDecoder().decode(So(s))),l=So(a)}catch{return{ok:!1,reason:"malformed"}}let d=c;if(d?.alg!=="EdDSA"||d?.typ!=="JWT")return{ok:!1,reason:"malformed"};if(d.kid!==void 0&&typeof d.kid!="string")return{ok:!1,reason:"malformed"};let u=await Promise.all((Array.isArray(t)?t:[t]).map(y=>typeof y=="string"?fl(y):y)),f;if(typeof d.kid=="string")for(let y of u)await ml(y)===d.kid&&(f=y);else u.length===1&&(f=u[0]);if(!f)return{ok:!1,reason:"unknown key"};if(!await crypto.subtle.verify(gr,f,l,new TextEncoder().encode(`${r}.${s}`)))return{ok:!1,reason:"bad signature"};if(!gl(i))return{ok:!1,reason:"malformed"};if(i.iss!==ll)return{ok:!1,reason:"wrong issuer"};if(n.install!==void 0&&i.install!==n.install)return{ok:!1,reason:"wrong install"};let g=Math.floor((n.now??new Date).getTime()/1e3);return i.iat>g+dl?{ok:!1,reason:"issued in the future"}:!n.allowExpired&&g>i.exp+(n.leewaySeconds??60)?{ok:!1,reason:"expired"}:{ok:!0,claims:i}}var ll,gr,dl,gl,hr=Te(()=>{"use strict";ll="fnmoa-licence",gr={name:"Ed25519"},dl=300;gl=e=>{if(!e||typeof e!="object")return!1;let t=e;return typeof t.iss=="string"&&typeof t.sub=="string"&&typeof t.key=="string"&&typeof t.install=="string"&&typeof t.plan=="string"&&(t.seats===null||typeof t.seats=="number")&&Array.isArray(t.targets)&&t.targets.every(n=>typeof n=="string")&&typeof t.iat=="number"&&typeof t.exp=="number"&&(t.lapsed===void 0||typeof t.lapsed=="boolean")&&(t.offline===void 0||typeof t.offline=="boolean")&&(t.grace_until===void 0||typeof t.grace_until=="number")}});function hl(e,t,n){switch(e){case"seats_full":return`All ${t??"available"} workspace seats are in use. Release a workspace on the account page or upgrade your plan.`;case"activation_released":return"This workspace was released. Run `moa setup licence` to activate it again.";case"unknown_activation":return"This install is not activated. Run `moa setup licence`.";case"key_replaced":return"Use the new key from your account page with `moa setup licence`.";case"lapsed":case"not_paid":return"Your subscription is unpaid. Renew it on your account page.";case"target_not_in_plan":return"This target is not included in your plan. Choose another target or upgrade.";case"licence_too_old":return"This licence expired over 30 days ago and can no longer renew. Run `moa setup licence` to activate again.";case"seat_lost":return"This workspace lost its seat. Run `moa setup licence` to take one again, or release another workspace on the account page.";case"bad_licence":return"The licence server did not accept this licence. Run `moa setup licence`.";case"unknown_key":return"The licence server does not know this key. Check it on your account page and run `moa setup licence`.";case"rate_limited":return"Too many licence requests. Wait a minute and try again.";case"not_set_up":return"The licence server is not set up yet. Try again later.";default:return n??`Licence request refused (${e}). Check your account page.`}}async function wr(e,t,n,o){let r=new URL(e);if(r.protocol!=="https:"&&!(r.protocol==="http:"&&["localhost","127.0.0.1","[::1]"].includes(r.hostname)))throw new Error("The licence server must use HTTPS.");let s=await o(new URL(`/v1/${t}`,r),{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(n),signal:AbortSignal.timeout(15e3),redirect:"error"}),a=await s.json();if(!s.ok){let c=typeof a.error=="string"?a.error:"request_failed";throw new xo(c,s.status,hl(c,typeof a.seats=="number"?a.seats:void 0,typeof a.message=="string"?a.message:void 0))}return a}async function ma(e,t,n,o=fetch){return fa(await wr(e,t,n,o))}async function ga(e,t,n=fetch){let o=await wr(e,"device",t,n),{device_code:r,user_code:s,verification_uri_complete:a,expires_in:c,interval:i}=o;if(typeof r!="string"||typeof s!="string"||typeof a!="string")throw new Error("The licence server did not start a sign-in.");return{deviceCode:r,userCode:s,url:a,expiresIn:typeof c=="number"?c:600,interval:typeof i=="number"?i:5}}async function ha(e,t,n=fetch){try{return fa(await wr(e,"device/token",{device_code:t},n))}catch(o){if(o instanceof xo&&o.code==="authorization_pending")return"pending";throw o}}async function eo(e,t,n,o){let r=await pa(e,t,{install:n});if(!r.ok)throw new Error(`Licence refused: ${r.reason}`);if(o&&!r.claims.targets.includes(o))throw new Error("Licence refused: target not in plan");return r.claims}var xo,fa,wa=Te(()=>{"use strict";hr();xo=class extends Error{constructor(n,o,r){super(r);this.code=n;this.status=o}};fa=e=>{if(typeof e.licence!="string")throw new Error("The licence server returned no signed licence.");return{licence:e.licence,pullToken:typeof e.pullToken=="string"?e.pullToken:null}}});var wl,vn,to,ka=Te(()=>{"use strict";wl=`-----BEGIN PUBLIC KEY-----
|
|
7
7
|
MCowBQYDK2VwAyEARMFG3IjOWjtjPhlxBemrNtNnN59FZNc3sDDipX1WKQA=
|
|
8
|
-
-----END PUBLIC KEY-----`,
|
|
9
|
-
`,s=`${o}.${process.pid}.tmp`;await
|
|
10
|
-
`,{mode:384}),await
|
|
11
|
-
${n.stderr}`;return n.ok?{loggedIn:!0,says:
|
|
12
|
-
`).slice(-2).join(" \xB7 ").slice(0,200);
|
|
13
|
-
`)[0]?.trim()??"",
|
|
14
|
-
`).pop()?.trim()||"you",team:u.teamSlug??u.teamId,teamId:u.teamId,projectId:u.projectId,plan:await
|
|
15
|
-
M="${
|
|
8
|
+
-----END PUBLIC KEY-----`,vn=[wl,""].filter(Boolean),to="https://fnmoa.locusgraph.com"});var ya=Te(()=>{wa();ka();hr()});import{access as kl,mkdir as yl,readFile as bl,rename as xa,writeFile as $l}from"node:fs/promises";import{homedir as vl}from"node:os";import{dirname as Aa,join as Sn}from"node:path";function Oa(e){if(typeof e!="object"||e===null)return Eo();let t=e,n=typeof t.answers=="object"&&t.answers!==null?t.answers:{},o={version:1,screen:ba(t.screen)?t.screen:"where",answers:kt({source:rt(n.source,["image","checkout"]),runner:rt(n.runner,yr),agentCli:rt(n.agentCli,ue),tenant:q(n.tenant,64),owner:q(n.owner,64),repo:q(n.repo,140),workspacePort:$a(n.workspacePort),consolePort:$a(n.consolePort),appOrg:q(n.appOrg,39),githubApp:Ca(n.githubApp),people:_a(n.people),removed:Al(n.removed),loginsFor:rt(n.loginsFor,yr),loggedIn:Array.isArray(n.loggedIn)?[...new Set(n.loggedIn.map(m=>rt(m,ue)).filter(m=>m!==void 0))]:void 0,domain:q(n.domain,253),cloudflareAccount:q(n.cloudflareAccount,64),locusgraphGraph:q(n.locusgraphGraph,100),vercelTeam:q(n.vercelTeam,100),vercelPlan:rt(n.vercelPlan,["hobby","pro","enterprise"]),vercelScope:xl(n.vercelScope),store:rt(n.store,["postgres","sqlite"]),sandbox:Pa(n.sandbox),githubToken:rt(n.githubToken,["own","pasted"])}),passed:Array.isArray(t.passed)?[...new Set(t.passed.filter(ba))]:[]},r=rt(t.target,Tt);r&&(o.target=r);let s=kt({deployed:Ta(t.deployed),sandbox:o.answers.sandbox,cloudflare:Sr(t.cloudflare),githubApp:o.answers.githubApp}),a=typeof t.deployments=="object"&&t.deployments!==null?t.deployments:{},c={};for(let m of Tt){let h=_l(a[m]);h&&(m===r?Co(s)||(s=h):c[m]=h)}let i=(m,h)=>{let A=s[m];if(A===void 0||r===void 0||h===void 0||h===r)return;let E=c[h]??{};if(E[m]!==void 0)return;c[h]={...E,[m]:A};let{[m]:I,...J}=s;s=J},l=s.deployed?.runner,d=l==="vercel"?"vercel":l==="cloudflare"?"cloudflare":l&&"local",u=s.githubApp?.consoleUrl,f=u===void 0||u.startsWith("http://localhost:")?"local":u===s.sandbox?.consoleUrl?"vercel":u===s.deployed?.consoleUrl?d:void 0;i("githubApp",f),i("deployed",d),i("sandbox","vercel"),i("cloudflare","cloudflare"),s.deployed&&(o.deployed=s.deployed),s.cloudflare&&(o.cloudflare=s.cloudflare),o.answers=kt({...o.answers,sandbox:s.sandbox,githubApp:s.githubApp}),Object.keys(c).length>0&&(o.deployments=c);let p=typeof t.down=="object"&&t.down!==null?t.down:void 0,g=rt(p?.target,Tt),y=m=>{if(!Array.isArray(m))return;let h=m.map(A=>q(A,300)).filter(A=>A!==void 0);return h.length>0?h:void 0};p&&g&&(o.down=kt({target:g,at:q(p.at)??new Date(0).toISOString(),removed:y(p.removed)??[],left:y(p.left)}));let $=q(t.updatedAt);return $&&(o.updatedAt=$),o}async function Tl(e,t){let n=Sn(Aa(pt(t)),"local"),o=i=>kl(Sn(n,i)).then(()=>!0,()=>!1);if(!await o($r))return;let r=new Map;for(let i of[e.answers.githubApp,...Tt.map(l=>e.deployments?.[l]?.githubApp)])i&&r.set(i.id,i);let s=[];for(let i of r.values())await o(Ao(i))||s.push(i);let[a,...c]=s;!a||c.length>0||await xa(Sn(n,$r),Sn(n,Ao(a)))}async function An(e){let t;try{t=Oa(JSON.parse(await bl(pt(e),"utf8")))}catch{return Eo()}return await Tl(t,e).catch(()=>{}),t}async function Ot(e,t,n=new Date){let o=pt(t);await yl(Aa(o),{recursive:!0});let r=`${JSON.stringify({...Oa(e),updatedAt:n.toISOString()},null,2)}
|
|
9
|
+
`,s=`${o}.${process.pid}.tmp`;await $l(s,r,{mode:384}),await xa(s,o)}function st(e,t){if(t===e.target)return e;let{deployed:n,cloudflare:o,deployments:r,...s}=e,{sandbox:a,githubApp:c,...i}=e.answers,l=Ia(e),d=t?e.deployments?.[t]:void 0,u={};for(let y of Tt){let $=y===e.target?l:y===t?void 0:e.deployments?.[y];$&&(u[y]=$)}let f=e.answers.runner!=="cloudflare"?e.answers.runner:void 0,p=d?.deployed?.runner;return{...s,...t?{target:t}:{},answers:kt({...i,runner:t==="cloudflare"?"cloudflare":f??(p==="node"||p==="compose"?p:void 0),sandbox:d?.sandbox,githubApp:d?.githubApp}),...d?.deployed?{deployed:d.deployed}:{},...d?.cloudflare?{cloudflare:d.cloudflare}:{},...Object.keys(u).length>0?{deployments:u}:{}}}function Po(e,t){if(!t)return"";let{deployed:n}=t;if(e==="vercel"){let o=t.sandbox?.name;return n?`deployed, ${o??n.consoleUrl}`:o?`sandbox ${o} made, not deployed yet`:""}if(e==="cloudflare"){let o=t.cloudflare??n?.cloudflare;if(n)return`deployed, ${o?.worker??n.consoleUrl}`;if(!o)return"";let r=o.worker?`Worker ${o.worker}`:[o.d1?"D1":void 0,o.r2?"R2":void 0].filter(Boolean).join(" and ");return r?`${r} made, not deployed yet`:`account ${o.account} used, not deployed yet`}return n?`deployed, ${n.runner==="compose"?"docker compose":"node"} \u2014 ${n.consoleUrl}`:""}var ut,oo,Tt,yr,Sl,ue,Se,vr,nn,xn,Eo,pt,ba,q,$a,br,rt,Ea,Ca,Pa,xl,_a,Al,kr,El,Cl,Pl,no,va,Sa,Sr,Ta,Co,_l,kt,Ao,$r,Ia,ro,xr,Ra,Ar,La,Da,Ua,D,We=Te(()=>{"use strict";ut=["where","checks","github","memory","logins","access","deploy"],oo={where:"Where should fnMoa run?",checks:"Checks & account",github:"GitHub",logins:"Agent logins (owner only)",memory:"Memory & database",access:"Console access",deploy:"Deploy & done"},Tt=["vercel","cloudflare","local"],yr=["node","compose","cloudflare"],Sl=[...yr,"vercel","image"],ue=["claude","codex","cursor"],Se={claude:"ANTHROPIC_API_KEY",codex:"OPENAI_API_KEY",cursor:"CURSOR_API_KEY"},vr=20,nn=50,xn=e=>e.answers.source??(e.deployed&&e.deployed.runner!=="image"?"checkout":"image"),Eo=()=>({version:1,screen:"where",answers:{},passed:[]}),pt=(e=process.env)=>Sn(e.MOA_HOME??Sn(vl(),".moa"),"setup.json"),ba=e=>typeof e=="string"&&ut.includes(e),q=(e,t=200)=>typeof e=="string"&&e.length>0&&e.length<=t?e:void 0,$a=e=>typeof e=="number"&&Number.isInteger(e)&&e>0&&e<65536?e:void 0,br=e=>typeof e=="number"&&Number.isInteger(e)&&e>0?e:void 0,rt=(e,t)=>typeof e=="string"&&t.includes(e)?e:void 0,Ea=/^[a-z\d](?:[a-z\d-]{0,38})$/i,Ca=e=>{if(typeof e!="object"||e===null)return;let t=e,n=br(t.id),o=q(t.slug,100),r=q(t.clientId,100),s=q(t.settingsUrl);if(!n||!o||!r||!s)return;let a=q(t.consoleUrl);return{id:n,slug:o,clientId:r,settingsUrl:s,...t.deviceFlow===!0?{deviceFlow:!0}:{},...a?{consoleUrl:a}:{}}},Pa=e=>{if(typeof e!="object"||e===null)return;let t=e,n=q(t.name,63),o=q(t.workspaceUrl),r=q(t.consoleUrl);if(!(!n||!o||!r))return kt({name:n,workspaceUrl:o,consoleUrl:r,snapshotId:q(t.snapshotId,100),teamId:q(t.teamId,100),projectId:q(t.projectId,100),revision:q(t.revision,64)})},xl=e=>{if(typeof e!="object"||e===null)return;let t=e,n=q(t.teamId,100),o=q(t.projectId,100);return n&&o?{teamId:n,projectId:o}:void 0},_a=e=>{if(!Array.isArray(e))return;let t=new Map;for(let n of e){if(typeof n!="object"||n===null)continue;let o=n,r=typeof o.login=="string"&&Ea.test(o.login)?o.login:void 0,s=rt(o.role,["member","viewer"]),a=o.dailyCapUsd;!r||!s||t.set(r.toLowerCase(),{login:r,role:s,dailyCapUsd:typeof a=="number"&&Number.isFinite(a)&&a>=0?a:vr})}return t.size>0?[...t.values()]:void 0},Al=e=>{if(!Array.isArray(e))return;let t=[...new Set(e.filter(n=>typeof n=="string"&&Ea.test(n)).map(n=>n.toLowerCase()))];return t.length>0?t:void 0},kr=/^[A-Za-z0-9][A-Za-z0-9-]{0,63}$/,El=/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/,Cl=/^[a-z0-9](?:[a-z0-9-]{1,61}[a-z0-9])$/,Pl=/^[a-z0-9]+(?:[._-][a-z0-9]+)*:[A-Za-z0-9_][A-Za-z0-9._-]{0,127}$/,no=(e,t)=>typeof e=="string"&&t.test(e)?e:void 0,va=(e,t,n)=>{if(typeof e!="object"||e===null)return;let o=e,r=no(o[t],n);if(!(!r||typeof o.made!="boolean"))return{[t]:r,made:o.made,...o.unsure===!0&&!o.made?{unsure:!0}:{}}},Sa=e=>Array.isArray(e)?[...new Set(e.map(t=>no(t,Pl)).filter(t=>t!==void 0))]:[],Sr=e=>{if(typeof e!="object"||e===null)return;let t=e,n=no(t.account,kr);if(!n)return;let o=Sa(t.images),r=Sa(t.unsureImages).filter(s=>!o.includes(s));return kt({account:n,worker:no(t.worker,El),containerId:no(t.containerId,kr),images:o.length>0?o:void 0,unsureImages:r.length>0?r:void 0,older:t.older===!0?!0:void 0,imagesUnlisted:t.imagesUnlisted===!0?!0:void 0,d1:va(t.d1,"id",kr),r2:va(t.r2,"name",Cl)})},Ta=e=>{if(typeof e!="object"||e===null)return;let t=e,n=rt(t.runner,Sl),o=q(t.workspaceUrl),r=q(t.consoleUrl);if(!(!n||!o||!r))return kt({runner:n,workspaceUrl:o,consoleUrl:r,workspacePid:br(t.workspacePid),consolePid:br(t.consolePid),workspaceStarted:q(t.workspaceStarted,64),consoleStarted:q(t.consoleStarted,64),consoleFor:q(t.consoleFor),workspaceFor:q(t.workspaceFor),image:q(t.image),proofRunId:q(t.proofRunId),memory:q(t.memory),people:_a(t.people),memoryKept:t.memoryKept===!0?!0:void 0,cloudflare:n==="cloudflare"?Sr(t.cloudflare):void 0,at:q(t.at)??new Date(0).toISOString()})},Co=e=>e!==void 0&&(e.deployed!==void 0||e.sandbox!==void 0||e.cloudflare!==void 0||e.githubApp!==void 0),_l=e=>{if(typeof e!="object"||e===null)return;let t=e,n=kt({deployed:Ta(t.deployed),sandbox:Pa(t.sandbox),cloudflare:Sr(t.cloudflare),githubApp:Ca(t.githubApp)});return Co(n)?n:void 0},kt=e=>Object.fromEntries(Object.entries(e).filter(([,t])=>t!==void 0));Ao=e=>`github-app.${e.id}.json`,$r="github-app.json";Ia=e=>{let t=kt({deployed:e.deployed,sandbox:e.answers.sandbox,cloudflare:e.cloudflare,githubApp:e.answers.githubApp});return Co(t)?t:void 0},ro=(e,t)=>t===e.target?Ia(e):e.deployments?.[t],xr=e=>Tt.filter(t=>Co(ro(e,t)));Ra=(e,t)=>{if(!t)return!1;if(e==="vercel")return t.sandbox!==void 0;if(e==="cloudflare"){let n=t.cloudflare??t.deployed?.cloudflare;return n!==void 0&&(n.worker!==void 0||n.containerId!==void 0||(n.images??[]).length>0||(n.unsureImages??[]).length>0||n.imagesUnlisted===!0||n.d1?.made===!0||n.d1?.unsure===!0||n.r2?.made===!0||n.r2?.unsure===!0)}return!1};Ar=e=>ut.indexOf(e),La=e=>ut[Math.min(Ar(e)+1,ut.length-1)],Da=e=>ut[Math.max(Ar(e)-1,0)],Ua=e=>e==="where"?"":`${Ar(e)}/${ut.length-1}`,D="\u2022\u2022\u2022"});import{randomUUID as Ma}from"node:crypto";import{chmod as Ol,mkdir as Il,readFile as Rl,rename as Ll,writeFile as Dl}from"node:fs/promises";import{hostname as Ul}from"node:os";import{dirname as Na,join as Ml}from"node:path";import{readFileSync as Nl}from"node:fs";async function so(e,t){try{let n=JSON.parse(await Rl(ja(e,t),"utf8"));if(!/^[A-Za-z0-9_-]{16,64}$/.test(n.install))throw new Error("Invalid install id");return n}catch(n){if(n.code==="ENOENT")return;throw n}}async function Er(e,t,n){let o=ja(e,t);await Il(Na(o),{recursive:!0,mode:448});let r=`${o}.${Ma()}.tmp`;await Dl(r,`${JSON.stringify(n)}
|
|
10
|
+
`,{mode:384}),await Ol(r,384),await Ll(r,o)}async function Ga(e){if(!to||vn.length===0)throw new Error("This build has no licence-server URL or verification key. Ask the publisher for a configured release.");let t=e.state.target;if(!t)throw new Error("Choose a deployment target first.");let n=await so(e.sys.env,t),o=n??{install:Ma()};return n||await Er(e.sys.env,t,o),{target:t,saved:o}}async function Cr(e,t){let{target:n,saved:o}=await Ga(e),r=await ma(to,"activate",{key:t,install:o.install,version:Gt(),target:n},e.sys.fetch);if((await eo(r.licence,vn,o.install,n)).lapsed)throw new Error("The subscription is unpaid. Renew it before installing or updating.");let a={install:o.install,key:t,licence:r.licence};return await Er(e.sys.env,n,a),a}async function _o(e,t,n){let{target:o,saved:r}=await Ga(e),s=await ga(to,{install:r.install,version:Gt(),target:o,machine:Ul().slice(0,64)},e.sys.fetch);t({url:s.url,code:s.userCode}),e.sys.exec(process.platform==="darwin"?"open":"xdg-open",[s.url]);let a=Date.now()+s.expiresIn*1e3;for(;Date.now()<a;){if(await e.sys.sleep(s.interval*1e3),n.aborted)throw new Error("Stopped before it was approved.");let c=await ha(to,s.deviceCode,e.sys.fetch);if(c==="pending")continue;if((await eo(c.licence,vn,r.install,o)).lapsed)throw new Error("The subscription is unpaid. Renew it before installing or updating.");let l={install:r.install,licence:c.licence};return await Er(e.sys.env,o,l),l}throw new Error("The code ran out before it was approved. Press c to try again.")}function Gt(){return jl}async function yt(e){if(Ha(e)&&!e.secrets.licence)return[];try{let t=e.state.target;if(!t)throw new Error("Choose a target first.");let n=await so(e.sys.env,t);if(!e.secrets.licence&&n?.licence){let a=await eo(n.licence,vn,n.install,t).then(c=>c.lapsed?void 0:c).catch(()=>{});if(a)return[{label:"licence",mark:"ok",detail:`${a.plan} - install ${n.install}`}]}let o=e.secrets.licence??n?.key;if(!o)throw new Error("Not connected: press c to connect your fnMoa account in the browser, or l to paste a licence key.");let r=await Cr(e,o);return[{label:"licence",mark:"ok",detail:`${(await eo(r.licence,vn,r.install,t)).plan} - install ${r.install}`}]}catch(t){return[{label:"licence",mark:"fail",detail:t instanceof Error?t.message:String(t),fix:"Check your account or run `moa setup licence`."}]}}async function Ht(e){if(!e.state.target)return{};let t=await so(e.sys.env,e.state.target);if(!t?.licence){if(Ha(e))return{};throw new Error("Activate this install with `moa setup licence`.")}return{MOA_LICENCE:t.licence,MOA_INSTALL_ID:t.install}}var ja,jl,Ha,It=Te(()=>{"use strict";ya();We();ja=(e,t)=>Ml(Na(pt(e)),`licence-${t}.json`);jl=JSON.parse(Nl(new URL(import.meta.url.endsWith("/main.js")?"../package.json":"../../package.json",import.meta.url),"utf8")).version,Ha=e=>!!e.sys.root&&xn(e.state)==="checkout"});import{join as Gl}from"node:path";import{parseEnv as Hl}from"node:util";async function Ba(e,t){let n=await e.exec("docker",Rt(t,"build","workspace"),{cwd:t,env:on(e),timeoutMs:12e5});return n.ok?{ok:!0}:{ok:!1,why:To(n.stderr||n.stdout)||"no answer"}}function on(e,t){let n={...e.env,MOA_TOKENS:"setup-check:setup"};for(let o of[...Ja,"MOA_CLI_HOME","LOCUSGRAPH_AGENT_SECRET"])delete n[o];return t&&(n.CLAUDE_CODE_OAUTH_TOKEN=t),n}async function Pr(e,t,n){let o;if(n==="here"){let r={...e.env};for(let s of Ja)delete r[s];o=await e.exec("claude",["-p",En],{env:{...r,CLAUDE_CODE_OAUTH_TOKEN:t},timeoutMs:12e4})}else o=await e.exec("docker",Ka(n.container,"claude","-p",En),{cwd:n.container,env:on(e,t),timeoutMs:12e5});return o.ok&&/\bok\b/i.test(o.stdout)?{ok:!0}:{ok:!1,why:To(o.stdout||o.stderr)||"no answer"}}async function Wa(e,t){let n=await e.exec("docker",Ka(t,"codex","login","status"),{cwd:t,env:on(e),timeoutMs:12e5}),o=`${n.stdout}
|
|
11
|
+
${n.stderr}`;return n.ok?{loggedIn:!0,says:Fl(n.stdout)||"logged in"}:/not logged in/i.test(o)?{loggedIn:!1,says:"not logged in"}:{loggedIn:!1,says:"",broken:To(o)||"the container did not start"}}function rn(e){let t=e.replace(Kl,""),n=/https:\/\/\S*(device|auth)\S*/i.exec(t);if(!n)return{};let o=t.slice(n.index+n[0].length),r=/\b[A-Z0-9]{4,}-[A-Z0-9]{4,}\b/.exec(o)?.[0];return{url:n[0].replace(/[).,]+$/,""),...r?{code:r}:{}}}function qa(e,t,n){let o="",r=!1,s,a=on(e),c=()=>e.exec("docker",["rm","-f",Fa],{cwd:t,env:a,timeoutMs:3e4});return{done:c().then(()=>r?{ok:!1,stdout:"",stderr:"stopped"}:(s=e.run("docker",Rt(t,"run","--rm","--no-deps","-T","--name",Fa,"workspace","codex","login","--device-auth"),{cwd:t,env:a,timeoutMs:16*6e4},l=>{o+=l,n(rn(o))}),s.done)),cancel:()=>{r=!0,s?.cancel(),c()}}}async function Cn(e,t,n){let o={Authorization:`Bearer ${t.secret}`,"Content-Type":"application/json"},r=async(i,l,d=!1)=>{try{let u=await e.fetch(i,{...l,headers:o,signal:AbortSignal.timeout(15e3)});if(u.ok||d&&u.status===409)return{ok:!0};let f=(await u.text().catch(()=>"")).split(t.secret).join("\u2022\u2022\u2022");return{ok:!1,why:`${u.status} ${To(f)}`.trim()}}catch(u){return{ok:!1,why:u instanceof Error?u.message:String(u)}}},s=encodeURIComponent(t.graph),a=await r(`${t.server}/v1/contexts/${s}?type=workspace&page_size=1`,{method:"GET"});if(!a.ok)return{read:a,write:{ok:!1,why:"not tried"}};let c=await r(`${t.server}/v1/events`,{method:"POST",body:JSON.stringify({graph_id:t.graph,context_id:`workspace:${n}`,event_kind:"fact",source:"system",payload:{data:`The ${n} workspace`}})},!0);return{read:a,write:c}}function Va(e){let t={};for(let[n,o]of Object.entries(Hl(e??"")))o&&(t[n]=o);return t}var we,Rt,Ka,En,Ja,To,Fl,Kl,Fa,za,Ft=Te(()=>{"use strict";we="fnmoa-setup",Rt=(e,...t)=>["compose","--env-file","/dev/null","-f",Gl(e,"apps","workspace","compose.yaml"),"-p",we,...t],Ka=(e,...t)=>Rt(e,"run","--rm","--no-deps","-T","workspace",...t);En="Reply with the single word ok and nothing else.",Ja=["ANTHROPIC_API_KEY","ANTHROPIC_AUTH_TOKEN","CLAUDE_CODE_OAUTH_TOKEN"];To=e=>e.trim().split(`
|
|
12
|
+
`).slice(-2).join(" \xB7 ").slice(0,200);Fl=e=>e.trim().split(`
|
|
13
|
+
`)[0]?.trim()??"",Kl=new RegExp("\x1B\\[[0-9;?]*[A-Za-z]","g");Fa=`${we}-codex-login`;za="https://api.locusgraph.com"});import{randomBytes as Bl}from"node:crypto";import{mkdir as Jl,readFile as Wl,rm as _r,writeFile as ql}from"node:fs/promises";import{dirname as zl,join as Vl}from"node:path";async function Ya(e,t,n,o){let r=Oo(e,t);await Jl(zl(r),{recursive:!0}),await _r(r,{force:!0}),await ql(r,JSON.stringify({url:n,token:o}),{mode:384})}async function Xa(e,t,n){try{let o=JSON.parse(await Wl(Oo(e,t),"utf8"));return o.url===n&&typeof o.token=="string"&&Yl.test(o.token)?o.token:void 0}catch{return}}async function Kt(e,t,n){let o=await ve(e.env),r=o.profiles[t],s=o.current,a=!!o.profiles[s],c=await Xa(e,t,n),i=r?.url===n?r.token:void 0;if(c&&i)return s!==t&&await gt({...o,current:t},e.env),{token:c,pending:!0,before:s,had:a};let l=c??i??Tr();return(r?.token!==l||r?.url!==n||s!==t)&&await gt({current:t,profiles:{...o.profiles,[t]:{url:n,token:l}}},e.env),c&&await _r(Oo(e,t),{force:!0}),{token:l,pending:!1,before:s,had:a}}async function Bt(e,t,n,o){if(await Xa(e,t,n)!==o)return;let r=await ve(e.env);await gt({...r,profiles:{...r.profiles,[t]:{url:n,token:o}}},e.env),await _r(Oo(e,t),{force:!0})}var Yl,Tr,Oo,Pn=Te(()=>{"use strict";Ze();qe();Yl=/^moa_[A-Za-z0-9_-]{16,128}$/,Tr=()=>`moa_${Bl(24).toString("base64url")}`,Oo=(e,t)=>le(e,Vl("rotate",`${t}.json`))});import{Writable as Xl}from"node:stream";function $t(e){return e==="hobby"?{vcpus:4,memoryGb:8,sessionMs:45*6e4,maxRuns:1}:{vcpus:8,memoryGb:16,sessionMs:24*36e5,maxRuns:3}}function ti(e){let t=e.memoryGb*24*Io.memoryGbHour;return{idle:t,busy:t+e.vcpus*24*Io.cpuHour,perGb:Io.transferGb,storagePerGbMonth:Io.storageGbMonth}}async function ri(e,t,n){let o=Object.entries(t).filter(a=>a[1]!==void 0),r={MOA_KEYS:o.map(([a])=>a).join(" "),MOA_DROP:n.join(" "),START:Zl};o.forEach(([,a],c)=>{r[`V_${c}`]=a});let s=await Ue(e,ed,r);return s.ok?{ok:!0,changed:s.stdout.trim().endsWith("1")}:{ok:!1,changed:!1,why:vt(s.stderr||s.stdout)}}async function Ir(e,t){if(t){let n=await Ue(e,`exec sh "${bt}/start.sh" stop`,{},12e4);if(!n.ok)throw new Error(vt(n.stderr||n.stdout)||"the servers did not stop")}await e.spawn("sh",["-c",`exec sh "${bt}/start.sh"${t?" restart":""}`])}async function si(e){await Ue(e,`rm -f "${bt}/restart"`)}async function Do(e){let t=await Ue(e,`if [ -f "${bt}/start.sh" ]; then exec sh "${bt}/start.sh" stop; fi`,{},12e4);if(!t.ok)throw new Error(vt(t.stderr||t.stdout)||"the servers did not stop")}function Za(e){return{writeFiles:t=>e.writeFiles(t),name:e.name,status:e.status,...e.vcpus?{vcpus:e.vcpus}:{},domain:t=>e.domain(t),exec:async(t,n,o={})=>{try{let r=await e.runCommand({cmd:t,args:n,...o.env?{env:o.env}:{},...o.sudo?{sudo:!0}:{},signal:AbortSignal.timeout(o.timeoutMs??6e5)});return{ok:r.exitCode===0,stdout:await r.stdout(),stderr:await r.stderr()}}catch(r){return{ok:!1,stdout:"",stderr:Or(r)}}},spawn:async(t,n)=>{await e.runCommand({cmd:t,args:n,detached:!0})},stream:(t,n,o)=>{let r="",s="",a=new AbortController;return{done:e.runCommand({cmd:t,args:n,stdout:Qa(i=>{r+=i,o(i)}),stderr:Qa(i=>{s+=i,o(i)}),signal:a.signal}).then(i=>({ok:i.exitCode===0,stdout:r,stderr:s}),i=>({ok:!1,stdout:r,stderr:s||Or(i)})),cancel:()=>a.abort()}},snapshot:async()=>(await e.snapshot()).snapshotId,stop:async()=>{await e.stop()},delete:async()=>{await e.delete({deleteOrphanSnapshots:!0})}}}async function td(e,t,n){let o=await e(`https://api.vercel.com/v2/teams/${encodeURIComponent(n)}`,{headers:{Authorization:`Bearer ${t}`},signal:AbortSignal.timeout(15e3)});if(!o.ok)throw new Error(`Vercel answered ${o.status} for team ${n}`);let s=(await o.json()).billing?.plan;return s==="pro"||s==="enterprise"?s:"hobby"}function ii(e){let{env:t}=e,n=o=>({token:o.token,teamId:o.teamId,projectId:o.projectId});return{account:async(o,r)=>{let s=await e.exec("vercel",["whoami"]),a=t.VERCEL_TOKEN?.trim();if(!a){if(s.missing)throw new Error("the vercel CLI is not installed");if(!s.ok)throw new Error("not signed in to Vercel");let{getAuth:f}=await import("@vercel/sandbox/dist/auth/index.js");if(a=f()?.token,!a)throw new Error("no Vercel token found for the vercel CLI's login")}let{inferScope:c}=await import("@vercel/sandbox/dist/auth/index.js"),i=t.VERCEL_TEAM_ID?.trim(),l=t.VERCEL_PROJECT_ID?.trim(),d=o??i,u=r?{...r,teamSlug:o??r.teamId}:d&&l&&(!o||o===i)?{teamId:d,projectId:l,teamSlug:d}:await c({token:a,cwd:e.scratch,...d?{teamId:d}:{}});return{user:s.stdout.trim().split(`
|
|
14
|
+
`).pop()?.trim()||"you",team:u.teamSlug??u.teamId,teamId:u.teamId,projectId:u.projectId,plan:await td(e.fetch,a,u.teamId),token:a}},get:async(o,r,s=!1)=>{let{Sandbox:a}=await import("@vercel/sandbox");try{return Za(await a.get({name:r,resume:s,...n(o)}))}catch(c){if(ei(c))return;throw c}},create:async(o,r)=>{let{Sandbox:s}=await import("@vercel/sandbox"),a={name:r.name,persistent:!0,ports:[ft,sn],resources:{vcpus:r.size.vcpus},timeout:r.size.sessionMs,...r.env?{env:r.env}:{},...n(o)};return Za(await s.create(r.snapshotId?{...a,source:{type:"snapshot",snapshotId:r.snapshotId}}:r.image?{...a,image:r.image}:a))},deleteSnapshot:async(o,r)=>{let{Snapshot:s}=await import("@vercel/sandbox");try{await(await s.get({snapshotId:r,...n(o)})).delete()}catch(a){if(!ei(a))throw a}}}}var ft,sn,ao,Io,Ro,ni,Lo,oi,bt,Ql,Zl,ed,Ue,vt,_n,Uo,ai,Or,Qa,ei,an=Te(()=>{"use strict";ft=8787,sn=3100,ao=e=>`fnmoa-${e}`.slice(0,63);Io={cpuHour:.128,memoryGbHour:.0212,transferGb:.15,storageGbMonth:.08};Ro=e=>`$${e<10?e.toFixed(2):e.toFixed(0)}`,ni=(e,t)=>`${e==="hobby"?"Hobby":e==="pro"?"Pro":"Enterprise"} \u2014 ${t.vcpus} vCPU / ${t.memoryGb} GB, ${t.sessionMs>=36e5?`${t.sessionMs/36e5}h sessions`:`${t.sessionMs/6e4}-minute sessions`}, ${t.maxRuns===1?"one step at a time":`${t.maxRuns} steps side by side`}`,Lo=e=>{let t=ti(e);return`~${Ro(t.idle)} a day idle, ~${Ro(t.busy)} a day busy, + ${Ro(t.perGb)} per GB served from its URLs (downloads free) \u2014 list prices`},oi=e=>`+ ${Ro(ti(e).storagePerGbMonth)} per GB a month for its kept disk and its snapshot, stopped or not`,bt="$HOME/moa",Ql=`set -eu
|
|
15
|
+
M="${bt}"
|
|
16
16
|
mkdir -p "$M"
|
|
17
17
|
missing() { ! command -v "$1" > /dev/null 2>&1; }
|
|
18
18
|
UPDATED=""
|
|
@@ -31,6 +31,8 @@ if missing pg_ctl && ! ls /usr/lib/postgresql/*/bin/pg_ctl > /dev/null 2>&1; the
|
|
|
31
31
|
fi
|
|
32
32
|
if missing claude; then sudo npm install -g --no-audit --no-fund @anthropic-ai/claude-code; fi
|
|
33
33
|
if missing codex; then sudo npm install -g --no-audit --no-fund @openai/codex; fi
|
|
34
|
+
# cursor-agent is not on npm: Cursor's installer, linked onto the PATH.
|
|
35
|
+
if missing cursor-agent; then curl -fsSL https://cursor.com/install | bash && sudo ln -sf "$HOME/.local/bin/cursor-agent" /usr/local/bin/cursor-agent; fi
|
|
34
36
|
if missing pnpm; then sudo npm install -g --no-audit --no-fund pnpm@12; fi
|
|
35
37
|
# A private checkout needs GitHub credentials: the token this deploy passes, or the one an earlier deploy kept.
|
|
36
38
|
if [ -z "\${GH_TOKEN:-}" ] && [ -s "$M/env/workspace/GH_TOKEN" ]; then GH_TOKEN=$(cat "$M/env/workspace/GH_TOKEN"); fi
|
|
@@ -43,8 +45,8 @@ pnpm install --frozen-lockfile
|
|
|
43
45
|
pnpm --filter "@fnmoa/workspace..." run build
|
|
44
46
|
pnpm --filter @fnmoa/console run build
|
|
45
47
|
printf %s "$MOA_REVISION" > "$M/image"
|
|
46
|
-
`,
|
|
47
|
-
M="${
|
|
48
|
+
`,Zl=`#!/bin/sh
|
|
49
|
+
M="${bt}"
|
|
48
50
|
R="$M/run/$(cat /proc/sys/kernel/random/boot_id 2>/dev/null || echo boot)"
|
|
49
51
|
mkdir -p "$M/logs" "$R" "$M/data/worktrees"
|
|
50
52
|
load() { for f in "$M/env/$1"/*; do if [ -f "$f" ]; then export "$(basename "$f")=$(cat "$f")"; fi; done; }
|
|
@@ -102,13 +104,13 @@ fi
|
|
|
102
104
|
if ! running console; then
|
|
103
105
|
(
|
|
104
106
|
load console
|
|
105
|
-
cd "$M/fnmoa/apps/console" && exec node node_modules/next/dist/bin/next start --hostname 0.0.0.0 --port ${
|
|
107
|
+
cd "$M/fnmoa/apps/console" && exec node node_modules/next/dist/bin/next start --hostname 0.0.0.0 --port ${sn}
|
|
106
108
|
) >> "$M/logs/console.log" 2>&1 &
|
|
107
109
|
echo $! > "$R/console.pid"
|
|
108
110
|
fi
|
|
109
111
|
wait
|
|
110
|
-
`,
|
|
111
|
-
M="${
|
|
112
|
+
`,ed=`set -eu
|
|
113
|
+
M="${bt}"
|
|
112
114
|
umask 077
|
|
113
115
|
changed=0
|
|
114
116
|
i=0
|
|
@@ -131,35 +133,35 @@ if [ ! -f "$M/start.sh" ] || [ "$(cat "$M/start.sh")" != "$(printf %s "$START")"
|
|
|
131
133
|
fi
|
|
132
134
|
if [ "$changed" = 1 ]; then : > "$M/restart"; fi
|
|
133
135
|
if [ -f "$M/restart" ]; then echo 1; else echo 0; fi
|
|
134
|
-
`,
|
|
135
|
-
`).slice(-t).join(" \xB7 ").slice(0,300);
|
|
136
|
-
`)[0]?.slice(0,300)??"",
|
|
137
|
-
`)[0]??"");return r?.[1]&&r[2]!==void 0?{started:r[1],command:r[2]}:void 0}catch{return}},portsOf:n=>{try{let r=
|
|
138
|
-
`).map(s=>Hl.exec(s)?.[1]).filter(s=>s!==void 0).map(Number);return[...new Set(r)]}catch(o){return o.status===1?[]:void 0}},start:(n,o,r)=>{Ll(vr(r.log),{recursive:!0});let s=Ul(r.log,"a"),a=za(n,o,{cwd:r.cwd,env:r.env,detached:!0,stdio:["ignore",s,s]});if(a.unref(),a.pid===void 0)throw new Error(`could not start ${n}`);return a.pid},stop:(n,o)=>{for(let r of[-n,n])try{if(process.kill(r,o?"SIGKILL":"SIGTERM"),!o)return}catch{}},fetch:(...n)=>fetch(...n),sleep:n=>new Promise(o=>setTimeout(o,n))};return t.vercel=Wa({env:e,exec:(n,o)=>t.exec(n,o),fetch:t.fetch,scratch:Sr(ot(e),"..","local")}),t}var Gl,Hl,Fl,Vn=Se(()=>{"use strict";Ze();zt();Gl=/^\s*(\w{3} \w{3} [ \d]\d \d\d:\d\d:\d\d \d{4})\s+(.*)$/,Hl=/^n.*:(\d+)$/,Fl=e=>$r(Sr(e,"pnpm-workspace.yaml"))&&$r(Sr(e,"apps","workspace","compose.yaml"))});import{createHash as Kl}from"node:crypto";import{join as yn}from"node:path";async function Va(e,t,n){let o=Date.now()+n*1e3;for(;Date.now()<o;){if(await e.fetch(t,{signal:AbortSignal.timeout(2e3)}).then(()=>!0).catch(()=>!1))return!0;await e.sleep(500)}return!1}async function Jl(e,t,n){let o=Date.now()+n*1e3;for(;Date.now()<o;){if(!await e.listening(t))return!0;await e.sleep(500)}return!1}async function Wl(e,t,n){let o=Date.now()+n*1e3;for(;Date.now()<o;){if(!e.alive(t))return!0;await e.sleep(500)}return!1}async function So(e,t,n=()=>{}){let{sys:o,state:r}=e,s=[],a=ne=>{let Ce=s.findIndex(le=>le.label===ne.label);Ce===-1?s.push(ne):s[Ce]=ne,t([...s])},i,c=(ne,Ce,le)=>(a({label:ne,mark:"fail",detail:Ce,fix:le}),i?{ok:!1,deployed:i}:{ok:!1}),l=o.root;if(!l||De(e)||r.deployed?.runner==="image")return Ar(e,t,n);if(Zt(e))return c("memory","the last deploy kept memory in LocusGraph, and this run has no secret for it","Esc back to Memory & database and paste it again \u2014 or go on there without it");let d=r.answers.runner??"node",u=r.answers.agentCli??"claude",f=d==="compose"&&r.answers.loginsFor==="compose"?[...new Set([u,...r.answers.loggedIn??[]])]:[u],p=ze(e)?.token,m=ke(e),w=r.answers.tenant??xe(r.answers.owner),b=jt(r),g=Et(r),k=`http://127.0.0.1:${b}`,O=`http://localhost:${g}`,P=r.answers.owner,R=r.answers.githubApp,Y=R?Me(o,R):void 0;if(R&&!Y)return c("GitHub App",`the client secret for ${R.slug} is not on this machine`,"Esc back to Console access and press g to create a new app");let we=R&&Y?{AUTH_GITHUB_ID:R.clientId,AUTH_GITHUB_SECRET:Y.clientSecret,AUTH_SECRET:Y.authSecret,AUTH_URL:O}:{};if(d==="compose"&&f.includes("claude")&&!p)return c("claude token","none in this run \u2014 it is never saved","Esc back to Agent logins and press t (or choose codex there), then Enter");let I=yn(l,"apps","workspace","dist","node.js"),X=yn(l,"apps","console",".next"),U=o.exists(I),H=o.exists(yn(X,"BUILD_ID"));if(U&&H)a({label:"build",mark:"ok",detail:"workspace and console are built"});else{if(!H&&o.exists(X))return c("build","apps/console/.next holds no build \u2014 `next dev` may be using it, and a build would write over it",`stop the console's dev server, then run \`pnpm --filter @fnmoa/console build\` in ${l}, then Enter`);let ne=[...U?[]:[{what:"workspace",args:["--filter","@fnmoa/workspace...","run","build"]}],...H?[]:[{what:"console",args:["--filter","@fnmoa/console","run","build"]}]],Ce=ne.map(Je=>Je.what).join(" and ");a({label:"build",mark:"wait",detail:`building the ${Ce} \u2014 a few minutes`});let le=await o.exec("pnpm",["install"],{cwd:l,timeoutMs:6e5});if(!le.ok)return c("build",`pnpm install: ${$n(le.stderr||le.stdout)}`,`run \`pnpm install\` in ${l}, then Enter`);for(let Je of ne){let tt=await o.exec("pnpm",Je.args,{cwd:l,timeoutMs:9e5});if(!tt.ok)return c("build",`${Je.what}: ${$n(tt.stderr||tt.stdout)}`,`run \`pnpm ${Je.args.join(" ")}\` in ${l}, then Enter`)}a({label:"build",mark:"ok",detail:`${Ce} built`})}let{token:W,pending:de,before:_,had:Te}=await Mt(o,bn,k);a({label:"owner token",mark:"ok",detail:`${K} \u2014 profile ${bn} in ~/.moa/config.json${_===bn?"":Te?`; \`moa\` now talks to this workspace, not profile ${_} (\`moa use ${_}\` to go back)`:"; `moa` now talks to this workspace"}`});let pe=D({url:k,token:W},o.fetch),T=r.deployed?Sn(o,r.deployed):void 0,Ae=ql({runner:d,workspaceUrl:k,tenant:w,token:W,...r.answers.repo?{repo:r.answers.repo}:{},...P?{owner:P}:{},...R?{githubClientId:R.clientId}:{},...m?{locusgraph:m.secret,graph:m.graph,server:m.server}:{},...p?{claude:p}:{}}),M=T?.workspacePid!==void 0&&At(o,T.workspacePid,T.workspaceStarted,gt(T.workspaceUrl))?T.workspacePid:void 0,N=M?T?.workspaceStarted:void 0,se=T?.workspaceFor,fe=T?.consolePid!==void 0&&At(o,T.consolePid,T.consoleStarted,gt(T.consoleUrl))?T.consolePid:void 0,te=fe?T?.consoleStarted:void 0,me=T?.consoleFor,Fe=T?.memoryKept,ve=T?.workspaceUrl===k?T?.people:void 0,Oe=()=>{i={runner:d,workspaceUrl:k,consoleUrl:O,...M?{workspacePid:M,...N?{workspaceStarted:N}:{}}:{},...se?{workspaceFor:se}:{},...fe?{consolePid:fe,...te?{consoleStarted:te}:{},...me?{consoleFor:me}:{}}:{},...ve?{people:ve}:{},...Fe?{memoryKept:Fe}:{},at:new Date().toISOString()},n(i)};if((M||fe)&&Oe(),M!==void 0&&se!==Ae){if(a({label:"workspace",mark:"wait",detail:"restarting \u2014 it was started with other answers"}),o.stop(M),!await Wl(o,M,15))return c("workspace",`the old workspace (pid ${M}) is still running`,`stop it (\`kill ${M}\`), then Enter`);M=void 0,N=void 0,se=void 0,Oe()}let Ee=await pe.get("/v1/whoami").then(()=>"ours",ne=>ne instanceof re?"other":"down");if(Ee==="other")return c("workspace",`something else answers on :${b} and refuses this token`,"stop it, or run `moa setup --workspace-port <port>`");if(Ee==="ours"&&se!==Ae&&d==="node")return c("workspace",`the workspace on :${b} was not started with these answers`,T?.runner==="compose"?`run \`docker compose -p ${ue} down\`, then Enter`:"stop it, then Enter");if(Ee==="ours"&&se===Ae)a({label:"workspace",mark:"ok",detail:`${k} \u2014 already running`});else{a({label:"workspace",mark:"wait",detail:`starting on :${b}`});let ne={...o.env,...await Dt(e),MOA_TOKENS:`${W}:${w}`,PORT:String(b),MOA_PORT:String(b),MOA_CONSOLE_PORT:String(g),...r.answers.repo?{MOA_REPO:r.answers.repo}:{},...P?{MOA_OWNER_LOGIN:P}:{},...R?{MOA_GITHUB_CLIENT_ID:R.clientId}:{},...m?{LOCUSGRAPH_AGENT_SECRET:m.secret,LOCUSGRAPH_GRAPH_ID:m.graph,LOCUSGRAPH_SERVER_URL:m.server}:{}};for(let le of["MOA_DATABASE_URL","MOA_SQLITE_FILE","MOA_TOKEN_FILE","MOA_WORKSPACE_ROOT","MOA_SELF_URL",...P?[]:["MOA_OWNER_LOGIN"],...R?[]:["MOA_GITHUB_CLIENT_ID"]])delete ne[le];if(d==="compose"){for(let Je of["MOA_CLI_HOME","CLAUDE_CODE_OAUTH_TOKEN","ANTHROPIC_API_KEY"])delete ne[Je];p&&(ne.CLAUDE_CODE_OAUTH_TOKEN=p);let le=await o.exec("docker",xt(l,"up","-d","--build"),{cwd:l,env:ne,timeoutMs:12e5});if(!le.ok)return c("workspace",`docker compose: ${$n(le.stderr||le.stdout)}`,"fix that, then Enter");M=void 0,N=void 0,se=Ae,Fe=!!m,Oe()}else{let le=ie(o,"workspace.db");M=o.start(process.execPath,[I],{cwd:yn(l,"apps","workspace"),env:{...ne,...p?{CLAUDE_CODE_OAUTH_TOKEN:p}:{},MOA_DATABASE_URL:`sqlite:${le}`,MOA_D1_ACCOUNT_ID:"",MOA_D1_DATABASE_ID:"",MOA_D1_API_TOKEN:"",MOA_SQLITE_FILE:le,MOA_WORKSPACE_ROOT:ie(o,"worktrees"),MOA_SELF_URL:k,MOA_PID_FILE:Er(o)},log:ie(o,"workspace.log")}),N=o.processOf(M)?.started,se=Ae,Fe=!!m,Oe()}if(!await Va(o,`${k}/health`,d==="compose"?120:60))return c("workspace",`did not answer on :${b}`,d==="compose"?`look at \`docker compose -p ${ue} logs workspace\`, then Enter`:`look at ${ie(o,"workspace.log")}, then Enter`);if(!await pe.get("/v1/whoami").then(()=>!0,()=>!1))return c("workspace","it started but refuses the owner token","Enter to try again");a({label:"workspace",mark:"ok",detail:`${k}${M?` (pid ${M})`:""}`})}de&&await Nt(o,bn,k,W);let ge=await xr(o,k,a,d==="compose"?"postgres":"sqlite",d==="compose"?`look at \`docker compose -p ${ue} logs\`, then Enter`:`look at ${ie(o,"workspace.log")}, then Enter`);if(ge)return c(ge.label,ge.detail,ge.fix);let E=await Vt(pe,r,a,ve);if(E)return c(E.label,E.detail,E.fix);let V=ve;ve=r.answers.people??[],JSON.stringify(ve)!==JSON.stringify(V??[])&&Oe();let Be=zl(k,W,we),Ke=fe!==void 0&&await o.listening(g);if(Ke&&fe!==void 0&&me!==Be){if(a({label:"console",mark:"wait",detail:"restarting \u2014 it points at another workspace"}),o.stop(fe),fe=void 0,te=void 0,me=void 0,Oe(),!await Jl(o,g,15))return c("console",`the old console still holds :${g}`,"stop it, then Enter");Ke=!1}if(Ke)a({label:"console",mark:"ok",detail:`${O} \u2014 already running`});else{if(await o.listening(g))return c("console",`something else is on :${g}`,"stop it, or run `moa setup --console-port <port>`");if(a({label:"console",mark:"wait",detail:`starting on :${g}`}),fe=o.start(process.execPath,[yn(l,"apps","console","node_modules","next","dist","bin","next"),"start","--port",String(g),"--hostname","127.0.0.1"],{cwd:yn(l,"apps","console"),env:{...Vl(o.env),MOA_URL:k,MOA_TOKEN:W,...we},log:ie(o,"console.log")}),te=o.processOf(fe)?.started,me=Be,Oe(),!await Va(o,O,60))return c("console",`did not answer on :${g}`,`look at ${ie(o,"console.log")}, then Enter`);a({label:"console",mark:"ok",detail:`${O} (pid ${fe})${R?" \u2014 Sign in with GitHub":""}`})}let et=await Yt(pe,f,d==="compose"?"in the container":"on this machine",ne=>d==="compose"?"Esc back to Agent logins and log it in again, then Enter":`is ${ne} logged in on this machine? Run \`${ne}\` once and log in, then Enter`,a);if("label"in et)return c(et.label,et.detail,et.fix);let kt=et.runs[u],ce=await Xt(pe,a);if("label"in ce)return c(ce.label,ce.detail,ce.fix);let Ht=ce.memory;return ce.live!==void 0&&(Fe=ce.live),a({label:"Console",mark:"ok",detail:O}),a({label:"Workspace",mark:"ok",detail:k}),a({label:"Next",mark:"skip",detail:`moa whoami \xB7 moa agent list \xB7 moa run ${vn(u)} "\u2026"`}),{ok:!0,deployed:{runner:d,workspaceUrl:k,consoleUrl:O,...M?{workspacePid:M,...N?{workspaceStarted:N}:{}}:{},...se?{workspaceFor:se}:{},...fe?{consolePid:fe,...te?{consoleStarted:te}:{},...me?{consoleFor:me}:{}}:{},...kt?{proofRunId:kt}:{},memory:Ht,people:ve,...Fe?{memoryKept:Fe}:{},at:new Date().toISOString()}}}async function xr(e,t,n,o,r){let s=await e.fetch(`${t}/health`,{signal:AbortSignal.timeout(5e3)}).then(i=>i.json()).catch(i=>({ok:!1,error:String(i)})),a=s.database??o;if(s.ok!==!0)return{label:"database",detail:`${a} does not answer: ${$n(String(s.error??"no answer"),1)}`,fix:r};n({label:"database",mark:"ok",detail:`${a} \u2014 migrated, and it answers`})}async function Vt(e,t,n,o=[]){let r=t.answers.people??[],s=r.filter(c=>!o.some(l=>Yl(l,c)));for(let c of s){n({label:"people",mark:"wait",detail:`adding ${c.login}`});try{await e.put(`/v1/access/people/${encodeURIComponent(c.login)}`,{role:c.role,dailyCapUsd:c.dailyCapUsd})}catch(l){let d=l instanceof Error?l.message:String(l);return{label:"people",detail:`${c.login}: ${d}`,fix:l instanceof re&&l.status===404?"this workspace has no access list \u2014 `git pull`, then `pnpm run build`, then Enter":"Enter to try again"}}}let a=(t.answers.removed??[]).filter(c=>!r.some(l=>l.login.toLowerCase()===c));for(let c of a){n({label:"people",mark:"wait",detail:`removing ${c}`});try{await e.del(`/v1/access/people/${encodeURIComponent(c)}`)}catch(l){if(l instanceof re&&l.status===404)continue;let d=l instanceof Error?l.message:String(l);return{label:"people",detail:`removing ${c}: ${d}`,fix:"Enter to try again"}}}let i=r.length-s.length;(r.length>0||a.length>0)&&n({label:"people",mark:"ok",detail:[...s.map(c=>`${c.login} (${c.role})`),...a.map(c=>`${c} removed`),...i>0?[`${i} as before \u2014 left as the Access page has them`]:[]].join(", ")})}async function Yt(e,t,n,o,r){let s={};for(let a of t){let i=`proof: ${a} run`,c=vn(a);r({label:i,mark:"wait",detail:`${a} is answering ${n}`});try{if(!await e.post("/v1/agents",{name:c,cli:a,role:"Proves moa setup worked. Answers in one word."}).then(()=>!0,p=>{if(!(p instanceof re&&p.status===409))throw p;return!1})){let p=await e.get(`/v1/agents/${c}`);if(p.cli!==a)return{label:i,detail:`agent ${c} already exists and runs ${p.cli??"another CLI"}`,fix:`run \`moa agent rm ${c}\`, then Enter`}}let d=await e.post(`/v1/agents/${c}/runs`,{prompt:mn}),u=await Rt(e,d.id,300),f=u.result;if(u.state!=="done"||!f||!("runId"in f)||f.isError){let p=u.error??(f&&"result"in f?f.result:"no answer");return{label:i,detail:$n(String(p),2),fix:o(a)}}s[a]=f.runId,r({label:i,mark:"ok",detail:`${a} answered "${$n(f.result,1).slice(0,40)}" ${n} \u2014 moa logs ${f.runId}`})}catch(l){return{label:i,detail:l instanceof Error?l.message:String(l),fix:"Enter to try again"}}}return{runs:s}}async function Xt(e,t){try{let n=await e.get("/v1/memory"),o=(n.types??[]).reduce((i,c)=>i+(c.items?.length??0),0),r=typeof n.live=="boolean"?n.live:void 0,a=`${o} memor${o===1?"y":"ies"}, ${r===void 0?"kept where this older workspace build cannot say":r?"kept in LocusGraph":"in the workspace process"}`;return t({label:"proof: memory read",mark:"ok",detail:a}),r===void 0?{memory:a}:{memory:a,live:r}}catch(n){return{label:"proof: memory read",detail:n instanceof Error?n.message:String(n),fix:"Enter to try again"}}}var bn,vn,$n,Ya,ql,zl,Vl,Yl,Qt=Se(()=>{"use strict";Ie();cn();qe();ht();St();Wt();hn();Ze();Vn();bn="local",vn=e=>`setup-proof-${e}`,$n=(e,t=3)=>e.trim().split(`
|
|
139
|
-
`).slice(-t).join(" \xB7 ").slice(0,300);
|
|
140
|
-
`)[0]} \u2014 ${o}`},{label:"image",mark:n.ok?"ok":"fail",detail:be(),...n.ok?{}:{fix:"Sign in to ghcr.io with your account's package pull token, then check again."}}]}function ei(e){let t=`fnmoa-${e.install}`;return{services:{workspace:{image:e.image,restart:"unless-stopped",ports:[`127.0.0.1:${e.workspacePort}:8787`,`127.0.0.1:${e.consolePort}:3100`],volumes:[`${t}:/data`,`${t}-home:/home/moa`],environment:{...e.env,MOA_PORT:"8787",MOA_SELF_URL:"http://127.0.0.1:8787",MOA_WORKSPACE_ROOT:"/data/worktrees",MOA_LICENCE_FILE:"/data/licence.json",MOA_DATABASE_URL:e.postgres?"postgres://moa@postgres:5432/moa":"sqlite:/data/workspace.db",MOA_SQLITE_FILE:"/data/workspace.db",MOA_LOCAL_CONTAINER:"1"},...e.postgres?{depends_on:{postgres:{condition:"service_healthy"}}}:{}},...e.postgres?{postgres:{image:"postgres:17-alpine",restart:"unless-stopped",environment:{POSTGRES_USER:"moa",POSTGRES_DB:"moa",POSTGRES_HOST_AUTH_METHOD:"trust"},volumes:[`${t}-pg:/var/lib/postgresql/data`],healthcheck:{test:["CMD-SHELL","pg_isready -U moa"],interval:"5s",timeout:"5s",retries:20}}}:{}},volumes:{[t]:{name:t},[`${t}-home`]:{name:`${t}-home`},...e.postgres?{[`${t}-pg`]:{name:`${t}-pg`}}:{}}}}async function Ar(e,t,n){let o=[],r=_=>{o.push(_),t([...o])},s=_=>(r({label:"image",mark:"fail",detail:_}),{ok:!1}),a=await ut(e);for(let _ of a)r(_);if(a.some(_=>_.mark==="fail"))return{ok:!1};let i=await Wn(e.sys.env,"local");if(!i)return s("Activate the local install first.");for(let _ of await An(e))if(r(_),_.mark==="fail")return{ok:!1};let{sys:c,state:l}=e,d={};if(l.deployed?.runner==="image"){let _=JSON.parse(await Ql(xo(c),"utf8"));d=Object.fromEntries(Object.entries(_.services.workspace.environment).map(([Te,pe])=>[Te,pe.replaceAll("$$","$")]))}let u=`http://127.0.0.1:${jt(l)}`,f=`http://localhost:${Et(l)}`,{token:p}=await Mt(c,"local",u),m=l.answers.githubApp,w=m?Me(c,m):void 0;if(m&&!w)return s("The GitHub App client secret is missing.");let b=await c.exec("gh",["auth","token"]),g={...d,...await Dt(e),MOA_TOKENS:`${p}:${l.answers.tenant??xe(l.answers.owner)}`,...l.answers.owner?{MOA_OWNER_LOGIN:l.answers.owner}:{},...l.answers.repo?{MOA_REPO:l.answers.repo}:{},...b.ok?{GH_TOKEN:b.stdout.trim()}:{}},k=ze(e)?.token;k&&(g.CLAUDE_CODE_OAUTH_TOKEN=k);for(let _ of["ANTHROPIC_API_KEY","OPENAI_API_KEY"])c.env[_]&&(g[_]=c.env[_]);let O=ke(e);O&&Object.assign(g,{LOCUSGRAPH_AGENT_SECRET:O.secret,LOCUSGRAPH_GRAPH_ID:O.graph,LOCUSGRAPH_SERVER_URL:O.server}),m&&w&&Object.assign(g,{MOA_GITHUB_CLIENT_ID:m.clientId,AUTH_GITHUB_ID:m.clientId,AUTH_GITHUB_SECRET:w.clientSecret,AUTH_SECRET:w.authSecret,AUTH_URL:f});let P=xo(c),R=_=>typeof _=="string"?_.replaceAll("$","$$"):Array.isArray(_)?_.map(R):_&&typeof _=="object"?Object.fromEntries(Object.entries(_).map(([Te,pe])=>[Te,R(pe)])):_,Y=ei({image:be(),install:i.install,workspacePort:jt(l),consolePort:Et(l),postgres:l.answers.runner==="compose",env:g});if(await Xa(Qa(P),{recursive:!0,mode:448}),await Zl(P,JSON.stringify(R(Y)),{mode:384}),await Xl(P,384),!(await c.exec("docker",Yn(c,"up","-d","--wait"),{timeoutMs:6e5})).ok)return s("Docker Compose did not start the image. Run `moa setup logs` for details.");let I={runner:"image",workspaceUrl:u,consoleUrl:f,image:be(),at:new Date().toISOString()};n(I);let X=D({url:u,token:p},c.fetch),U=!1;for(let _=0;_<60;_++)try{await X.get("/v1/whoami"),U=!0;break}catch{await c.sleep(1e3)}if(!U)return{...s("The workspace did not become ready."),deployed:I};await Nt(c,"local",u,p);let H=await Vt(X,l,r,l.deployed?.people);if(H)return{...s(H.detail),deployed:I};let W=await Yt(X,[l.answers.agentCli??"claude"],"in the image",()=>"Set your own ANTHROPIC_API_KEY or OPENAI_API_KEY and run setup again.",r);if("label"in W)return{...s(W.detail),deployed:I};let de=await Xt(X,r);return"label"in de?{...s(de.detail),deployed:I}:(r({label:"console",mark:"ok",detail:f}),{ok:!0,deployed:{...I,people:l.answers.people,memory:de.memory,memoryKept:de.live}})}var be,xn,Cr,xo,Yn,ht=Se(()=>{"use strict";Ie();qe();Qt();St();hn();be=()=>`ghcr.io/fnlog0/fnmoa:${Ut()}`,xn=()=>ed(new URL(import.meta.url.endsWith("/main.js")?"../":"../../",import.meta.url)),Cr=()=>Za(xn(),"dist/assets/worker.js"),xo=e=>ie(e,"image/compose.json"),Yn=(e,...t)=>["compose","--project-name","fnmoa-image","--file",xo(e),...t]});import{join as Or}from"node:path";async function en(e,t,n,o=["--version"]){let r=await e.exec(t,o);return r.ok?v(t,Xn(r.stdout)):C(t,"not found",n)}function od(e=process){return e.platform==="darwin"&&e.env.MOA_KEEP_AWAKE!=="0"?v("Sleep","held off while a pipeline runs, as `caffeinate -i` does \u2014 a closed lid still sleeps, and work it cut short is run again"):v("Sleep",e.platform==="darwin"?"not held off, MOA_KEEP_AWAKE=0 \u2014 work a sleep cuts short is run again":"not held off on this system \u2014 work a sleep cuts short is run again")}function rd(e,t=process){switch(e.target){case"local":return{lines:[v("This machine","Docker or local, nothing in the cloud"),od(t)]};case"cloudflare":return{lines:[v("Cloudflare","a Worker and its container on D1, on your own domain \u2014 Workers Paid plan")]};case"vercel":return{lines:[v("Vercel Sandbox","one persistent VM, fnmoa-<tenant>, resumed by name \u2014 needs the vercel CLI, signed in")]};default:return{lines:[{label:"Pick one with \u2191 \u2193 and Enter",mark:"wait"}]}}}async function ti(e,t,n,o,r,s){return await e.sys.listening(n)?o!==void 0&&At(e.sys,o,r,n)?v(`port ${n}`,`the ${t} the last setup started`):C(`port ${n}`,"something else is listening there",`stop it, or run \`moa setup ${s} <port>\``):v(`port ${n}`,`free for the ${t}`)}async function ni(e){return[Number(process.versions.node.split(".")[0])>=22?v("node",process.versions.node):C("node",process.versions.node,"install node 22 or newer"),...await Promise.all([en(e,"pnpm","install pnpm: `corepack enable`"),en(e,"git","install git"),en(e,"gh","install the GitHub CLI: https://cli.github.com")])]}function Ir(e){if(e.secrets.cloudflare)return{token:e.secrets.cloudflare,from:"pasted in this run"};let t=e.sys.env.MOA_D1_API_TOKEN?.trim();return t?{token:t,from:"MOA_D1_API_TOKEN"}:void 0}function Lr(e){if(e.secrets.github)return{token:e.secrets.github,from:"pasted in this run"};let t=e.sys.env.GH_TOKEN?.trim();return t?{token:t,from:"GH_TOKEN"}:void 0}async function sd(e){let{sys:t,state:n}=e,o=await ni(t);if(De(e)){let{imageChecks:u}=await Promise.resolve().then(()=>(ht(),_r));o.push(...await u(e))}else{let u=await t.exec("docker",["info","--format","{{.ServerVersion}}"]);o.push(u.ok?v("docker",`${ye(u.stdout)} \u2014 builds the container image from this checkout`):C("docker",u.missing?"not installed":"not running","wrangler builds the container image with Docker: start it, then r"))}let s=t.root??xn();o.push(v(t.root?"checkout":"release",s));let a=await Ue(t,s,["--version"],{timeoutMs:3e4});if(!a.ok)return o.push(C("wrangler","not installed in this checkout",`run \`pnpm install\` in ${s}, then r`)),{lines:o};o.push(v("wrangler",Xn(a.stdout)));let i=await Ks(t,s),c;i.ok?(c=i.account.id,o.push(v("account",`${i.account.name} (${i.account.id})${i.email?` as ${i.email}`:""}${i.others>0?" \u2014 CLOUDFLARE_ACCOUNT_ID picks another":""}`))):o.push(C("account",i.why,i.loggedOut?`run \`pnpm --dir ${Or(s,"apps","workspace")} exec wrangler login\`, then r`:"fix that, then r"));let l=n.answers.domain;if(!l)o.push(C("domain","none yet \u2014 the console and workspace need a name of yours","press d and type a domain on this Cloudflare account, like example.com"));else{let u=await Js(t,l),f=Dn(l);o.push(u.zone&&u.onCloudflare?v("domain",`${f.consoleUrl} and ${f.workspaceUrl} \u2014 zone ${u.zone}`):C("domain",u.why??`${u.zone} is not served by Cloudflare's name servers`,"add the domain to this Cloudflare account (its name servers must be Cloudflare's), or d for another"))}let d=Ir(e);if(!d)o.push(Rr(n)?J("D1 token","kept \u2014 the deployed Worker has it (k to replace it)"):C("D1 token","none \u2014 the container reaches D1 over Cloudflare's API with it","make an API token with Account \xB7 D1 \xB7 Edit on this account, then press k and paste it"));else if(c){let u=await Ws(t,c,d.token);o.push(u.ok?v("D1 token",`${K} (${d.from}) \u2014 D1 answers to it`):C("D1 token",`${K} (${d.from}) \u2014 D1 refused it: ${u.why}`,"make one with only Account \xB7 D1 \xB7 Edit on this account, then press k to paste it"))}return o.push(J("cost",`Workers Paid, plus the container (standard-4) while it runs \u2014 up to ${$t}h after the last request`)),{lines:o,...c?{answers:{cloudflareAccount:c}}:{}}}async function ad(e){let{sys:t,state:n}=e;if(De(e)&&n.target==="local"){let{imageChecks:a}=await Promise.resolve().then(()=>(ht(),_r));return{lines:await a(e)}}if(n.target==="cloudflare")return sd(e);let o=await ni(t),r=n.deployed?Sn(t,n.deployed):void 0,s=await t.exec("docker",["--version"]);return o.push(s.ok?v("docker",Xn(s.stdout)):J("docker","not found \u2014 only needed for Postgres with docker compose")),o.push(t.root?v("checkout",t.root):C("checkout","not inside a fnMoa checkout","run moa setup from a clone of https://github.com/fnLog0/fnmoa")),o.push(await ti(e,"workspace",jt(n),r?.workspacePid,r?.workspaceStarted,"--workspace-port"),await ti(e,"console",Et(n),n.deployed?.consolePid,n.deployed?.consoleStarted,"--console-port"),J("account","this machine \u2014 no account needed")),{lines:o}}async function id(e){let{sys:t,state:n}=e,o=n.target==="cloudflare"?{...t.env}:void 0;if(o)for(let c of["GH_TOKEN","GITHUB_TOKEN"])delete o[c];let r=await t.exec("gh",["api","user","--jq",".login"],o?{env:o}:{}),s=ye(r.stdout);if(!r.ok||!s)return{lines:[C("gh login",r.missing?"gh is not installed":"gh has no login on this machine","run `gh auth login`, then press r to check again")]};if(n.target==="cloudflare")return ld(e,s);let a=[v("gh login",`${s} \u2014 on this machine the workspace uses your own login`)],i=n.answers.repo;if(!i)a.push(J("repo","none \u2014 a pipeline can name any repository later (e to set one)"));else{let c=await t.exec("gh",["repo","view",i,"--json","viewerPermission","--jq",".viewerPermission"]),l=ye(c.stdout);a.push(c.ok&&["ADMIN","MAINTAIN","WRITE"].includes(l)?v("repo",`${i} \u2014 ${l.toLowerCase()}`):C("repo",c.ok?`${s} cannot push to ${i}`:`${i} is not a repository ${s} can see`,"press e to change it, or clear it to skip"))}return{lines:a,answers:{owner:s}}}async function cd(e,t,n,o){let r=await e.exec("gh",["repo","view",t,"--json","viewerPermission","--jq",".viewerPermission"],o?{env:o}:{}),s=ye(r.stdout);return r.ok&&["ADMIN","MAINTAIN","WRITE"].includes(s)?v("repo",`${t} \u2014 ${s.toLowerCase()} for ${n}`):C("repo",r.ok?`${n} cannot push to ${t}`:`${t} is not a repository ${n} can see`,"press e to change it, or clear it to skip")}async function ld(e,t){let{sys:n,state:o}=e,r=[v("gh login",`${t} \u2014 you, the first owner`)],s=Lr(e),a;if(!s)r.push(Rr(o)?J("token","kept \u2014 the deployed Worker has it (k to replace it)"):C("token","none \u2014 the container works on GitHub with a token of its own","make a fine-grained token (contents, pull requests, issues: read/write; checks, actions: read) \u2014 a bot account's, preferably \u2014 then press k"));else{let i={...n.env,GH_TOKEN:s.token};for(let d of["GITHUB_TOKEN"])delete i[d];let c=await n.exec("gh",["api","user","--jq",".login"],{env:i});a=ye(c.stdout)||void 0,r.push(c.ok&&a?v("token",`${K} (${s.from}) \u2014 GitHub sees ${a}`):C("token",`${K} (${s.from}) \u2014 GitHub refused it`,"press k to paste another"));let l=o.answers.repo;l&&a&&r.push(await cd(n,l,a,i))}return o.answers.repo||r.push(J("repo","none \u2014 a pipeline can name any repository later (e to set one)")),{lines:r,answers:{owner:t}}}function ze(e){if(e.secrets.claude)return{token:e.secrets.claude,from:"pasted in this run"};let t=e.sys.env.CLAUDE_CODE_OAUTH_TOKEN?.trim();return t?{token:t,from:"your environment"}:void 0}async function ud(e){let{sys:t,state:n}=e;if(De(e)&&n.target==="local"){let m=n.answers.agentCli??"claude",w=m==="claude"?"ANTHROPIC_API_KEY":"OPENAI_API_KEY";return{lines:[!!(t.env[w]||m==="claude"&&ze(e)||n.deployed?.runner==="image")?v(m,"Credential will be verified by the proof run inside the image"):C(m,`${w} is not set`,`Set your own ${w} and run setup again`)]}}if(n.target==="cloudflare")return fd(e);let o=dd(n),[r,s]=await Promise.all([t.exec("claude",["--version"]),t.exec("codex",["--version"])]),a=ze(e),i={claude:r.ok,codex:s.ok},c=[o?v("agents run","in the container \u2014 only what is carried in here reaches it"):J("agents run","on this machine, on your logins \u2014 Postgres on Memory & database would move them into a container")],l,d=o&&t.root?await _a(t,t.root):void 0;if(d&&!d.ok)i.codex=!1,l=C("codex",`the image did not build: ${d.why}`,"start Docker, or fix the build, then press r");else if(o&&t.root){let m=await Oa(t,t.root);i.codex=m.loggedIn,l=m.loggedIn?v("codex",`${m.says} \u2014 its own session in the container (l to log in again)`):m.broken?C("codex",`the container did not run: ${m.broken}`,"start Docker, then press r"):J("codex","not logged in inside the container \u2014 l to log in with a code")}else{let m=s.ok?await t.exec("codex",["login","status"]):void 0;i.codex=s.ok&&m?.ok===!0,l=s.ok?m?.ok?v("codex",`${Xn(s.stdout)} \u2014 ${ye(m.stdout)||"logged in"}`):J("codex","not logged in \u2014 run `codex login`, then press r"):J("codex","not found")}let u;if(a){let m=await hr(t,a.token,o&&t.root?{container:t.root}:"here");i.claude=m.ok,u=m.ok?v("claude",`token ${K} (${a.from}) \u2014 "reply ok" ${o?"in the container":"on it alone"}`):C("claude",`the token did not answer: ${m.why}`,"press t to make a new one with `claude setup-token`, or e to paste it again")}else o?(i.claude=!1,u=J("claude",r.ok?"no token carried in \u2014 t to make one with `claude setup-token`":"no token \u2014 install claude here to make one: npm i -g @anthropic-ai/claude-code")):u=r.ok?v("claude",`${Xn(r.stdout)} \u2014 your existing login (t to carry a token instead)`):J("claude","not found");c.push(u,l);let f=e.state.answers.agentCli??(i.claude?"claude":i.codex?"codex":void 0);f?c.push(i[f]?v("proof run",`uses ${f} (\u2191 \u2193 to change)`):C("proof run",`${f} is not ready ${o?"in the container":"here"}`,f==="claude"?o?"press t to carry a token in \u2014 or \u2191 \u2193 to choose codex":"install claude and log in \u2014 or \u2191 \u2193 to choose codex":o?"press l to log codex in \u2014 or \u2191 \u2193 to choose claude":"install codex and run `codex login` \u2014 or \u2191 \u2193 to choose claude")):c.push(C("agent",o?"neither claude nor codex is logged in inside the container":"neither claude nor codex is ready",o?"press t to carry a claude token in, or l to log codex in":"install one and log in, then press r")),c.push(J("note","owner only: your subscriptions; teammates use them, never see them (moa setup login)"));let p=["claude","codex"].filter(m=>i[m]);return{lines:c,answers:{...f?{agentCli:f}:{},loggedIn:p,...Qn(c)?{loginsFor:o?"compose":"node"}:{}}}}async function pd(e){let t=e.state.deployed;if(t?.runner!=="cloudflare")return;let n=await Pe(e.sys.env),o=Object.values(n.profiles).find(r=>r.url===t.workspaceUrl);if(o)try{let r=await e.sys.fetch(`${t.workspaceUrl}/_moa/codex`,{headers:{authorization:`Bearer ${o.token}`},signal:AbortSignal.timeout(12e4)});return r.ok?(await r.json()).loggedIn===!0:void 0}catch{return}}async function fd(e){let{sys:t,state:n}=e,o=ze(e),r=[v("agents run","in the Cloudflare container \u2014 only what is carried in reaches it")],s={claude:!1,codex:!0};if(o){let l=await hr(t,o.token,"here");s.claude=l.ok,r.push(l.ok?v("claude",`token ${K} (${o.from}) \u2014 "reply ok" on it alone; a Worker secret`):C("claude",`the token did not answer: ${l.why}`,"press t to make a new one with `claude setup-token`, or e to paste it again"))}else Rr(n)&&n.answers.loggedIn?.includes("claude")?(s.claude=!0,r.push(J("claude","kept \u2014 the deployed Worker has the token (t to replace it)"))):r.push(J("claude","no token carried in \u2014 t to make one with `claude setup-token`"));let a=await pd(e);r.push(a===!0?v("codex","logged in inside the container \u2014 its login is kept in R2 across restarts"):J("codex",a===!1?"not logged in inside the container \u2014 Deploy shows a link and a code":"logged in inside the container at Deploy \u2014 a link and a code, approved in your browser"));let i=n.answers.agentCli??(s.claude?"claude":"codex");r.push(s[i]?v("proof run",`uses ${i} (\u2191 \u2193 to change)`):C("proof run",`${i} is not ready`,"press t to carry a claude token in \u2014 or \u2191 \u2193 to choose codex"),J("note","owner only: your subscriptions; teammates use them, never see them (moa setup login)"));let c=["claude","codex"].filter(l=>s[l]&&(l==="claude"||a===!0));return{lines:r,answers:{agentCli:i,loggedIn:c,...Qn(r)?{loginsFor:"cloudflare"}:{}}}}function ke(e){let{sys:t,state:n,secrets:o}=e,r=md(e),s=t.env.LOCUSGRAPH_AGENT_SECRET,a=s?.trim(),i=o.locusgraph||(s!==void 0?a:r.LOCUSGRAPH_AGENT_SECRET?.trim());if(!i)return;let c=o.locusgraph?"pasted in this run":a?"your environment":"apps/workspace/.env",l=n.answers.tenant??xe(n.answers.owner);return{secret:i,from:c,graph:t.env.LOCUSGRAPH_GRAPH_ID?.trim()||r.LOCUSGRAPH_GRAPH_ID||`fnmoa-${l}`,server:t.env.LOCUSGRAPH_SERVER_URL?.trim()||r.LOCUSGRAPH_SERVER_URL||Ia}}async function gd(e){let{sys:t,state:n}=e,o=ke(e),r=[];if(!o)r.push(Zt(e)?C("LocusGraph","the last deploy kept memory in LocusGraph, and this run has no secret for it","press e to paste it again \u2014 or e, then Enter on nothing, to let memory stay in the workspace process"):e.secrets.noLocusgraph&&n.deployed?.memoryKept?J("LocusGraph","no secret \u2014 memory will not be kept in LocusGraph; it stays in the workspace process"):J("LocusGraph","no secret \u2014 memory stays in the workspace process (e to paste one)"));else{let i=n.answers.tenant??xe(n.answers.owner),c=await gn(t,o,i),l=`secret ${K} (${o.from}), graph ${o.graph}`;r.push(c.read.ok&&c.write.ok?v("LocusGraph",`${l} \u2014 one graph read, one event written`):C("LocusGraph",`${l} \u2014 ${c.read.ok?`the write failed: ${c.write.why}`:`the read failed: ${c.read.why}`}`,"e to paste the secret again, or check LOCUSGRAPH_GRAPH_ID \u2014 then r"))}if(n.target==="cloudflare")return r.push(v("database",`D1 \u2014 ${ct} on your account, made at deploy; the container reaches it over HTTP`)),{lines:r,answers:{runner:"cloudflare"}};let s=n.answers.runner??"node";if(s==="node")return r.push(v("database",`SQLite, ${ie(t,"workspace.db")} \u2014 migrated at deploy (\u2191 \u2193 for Postgres)`)),{lines:r,answers:{runner:s}};let a=await t.exec("docker",["info","--format","{{.ServerVersion}}"]);return r.push(a.ok?v("database","Postgres, with docker compose \u2014 migrated at deploy (\u2191 \u2193 for SQLite)"):C("database",a.missing?"docker is not installed":"docker is not running","start Docker, or \u2191 \u2193 to choose SQLite")),r.push(J("agent logins","in the container \u2014 Agent logins, next, carries them in and proves them")),{lines:r,answers:{runner:s}}}function Me(e,t){try{let n=JSON.parse(e.read(Eo(e,t))??"");if(n.clientSecret&&n.authSecret)return{clientSecret:n.clientSecret,authSecret:n.authSecret}}catch{}}function Ur(e){let{state:t,sys:n}=e,o=t.answers.owner,r=t.answers.tenant??xe(o),s=t.answers.githubApp,a=[];s?t.target!=="vercel"&&(s.consoleUrl??Tr(t))!==Ao(t)?a.push(C("GitHub App",`${s.slug} signs people in at ${s.consoleUrl??Tr(t)}, not ${Ao(t)}`,"press g to create one for this console")):a.push(Me(n,s)?v("GitHub App",`${s.slug} (id ${s.id}) \u2014 client secret ${K} kept beside setup`):C("GitHub App",`the client secret for ${s.slug} is not on this machine`,"press g to create a new app \u2014 GitHub shows a secret only once"),s.deviceFlow?v("device flow","on \u2014 teammates run `moa login <url> --github`"):{label:"device flow",mark:"wait",detail:`GitHub cannot switch it on for us: tick "Enable Device Flow" on ${s.settingsUrl}, Save, then press d`}):a.push(t.target==="local"?J("GitHub App","none \u2014 the console stays on localhost, never exposed (g to create one anyway)"):C("GitHub App","none yet \u2014 teammates sign in with it","press g: GitHub opens with the app filled in, and you click Create")),a.push(o?v("owner",`${o} (you)`):C("owner","no GitHub login yet","Esc back to GitHub"),v("tenant",`${r} (e to change)`),v("owner token",`${K} \u2014 made at deploy, kept in ~/.moa/config.json`));let i=t.answers.people??[];i.length===0&&a.push(J("people","only you \u2014 a to add a teammate"));for(let c of i)a.push(v(c.login,`${hd(c.role)} \xB7 cap $${c.dailyCapUsd}/day \u2014 added at deploy`));return{lines:a,answers:{tenant:r}}}function Sn(e,t){if(t.runner!=="node")return t;let n=t.workspacePid;if(n!==void 0&&At(e,n,t.workspaceStarted,gt(t.workspaceUrl)))return t;let[o="",r=""]=(e.read(Er(e))??"").split(`
|
|
141
|
-
`),s=Number(o.trim()),a=r.trim();if(!Number.isSafeInteger(s)||s<=1||a===""||e.processOf(s)?.started!==a)return t;let
|
|
142
|
-
`)[0]?.trim()??"",
|
|
136
|
+
`,Ue=(e,t,n={},o)=>e.exec("sh",["-c",t],{env:n,...o?{timeoutMs:o}:{}});vt=(e,t=2)=>e.trim().split(`
|
|
137
|
+
`).slice(-t).join(" \xB7 ").slice(0,300);_n=async(e,t)=>{let n=await Ue(e,`tail -n 5 "${bt}/logs/${t}.log" 2> /dev/null`);return vt(n.stdout,3)},Uo=async e=>{let t=await Ue(e,`cat "${bt}/image" 2> /dev/null`);return t.ok&&t.stdout.trim()||void 0},ai=(e,t,n,o)=>Ue(e,Ql,{MOA_SOURCE:t,MOA_REVISION:n,...o?{GH_TOKEN:o}:{}},18e5),Or=e=>(e instanceof Error?e.message:String(e)).split(`
|
|
138
|
+
`)[0]?.slice(0,300)??"",Qa=e=>new Xl({write(t,n,o){e(String(t)),o()}});ei=e=>e.response?.status===404||/not.?found|404/i.test(Or(e))});import{execFile as nd,execFileSync as ci,spawn as li}from"node:child_process";import{existsSync as Rr,mkdirSync as od,openSync as rd,readFileSync as sd}from"node:fs";import{connect as ad}from"node:net";import{dirname as Lr,join as Dr,resolve as id}from"node:path";import{fileURLToPath as cd}from"node:url";function Lt(e,t,n,o){let r=e.processOf(t);return r?n!==void 0?r.started===n:e.root!==void 0&&r.command.includes(e.root)?!0:r.command.startsWith("next-server")&&o!==void 0&&e.portsOf(t)?.includes(o)===!0:!1}function St(e){try{let t=Number(new URL(e).port);return Number.isInteger(t)&&t>0?t:void 0}catch{return}}function pd(e=process.cwd()){let t=Lr(cd(import.meta.url));for(let n of[e,t]){let o=id(n);for(;;){if(ud(o))return o;let r=Lr(o);if(r===o)break;o=r}}}function cn(e=process.env){let t={env:e,root:pd(),exec:(n,o,r={})=>new Promise(s=>{nd(n,o,{cwd:r.cwd,env:r.env??e,timeout:r.timeoutMs??15e3,maxBuffer:16777216},(a,c,i)=>{let l=a?.code;s({ok:a===null,stdout:String(c),stderr:String(i),...l==="ENOENT"?{missing:!0}:{}})})}),run:(n,o,r,s)=>{let a="",c="",i=li(n,o,{cwd:r.cwd,env:r.env??e,stdio:["ignore","pipe","pipe"]}),l=setTimeout(()=>i.kill("SIGTERM"),r.timeoutMs??9e5);return i.stdout.on("data",u=>{a+=String(u),s(String(u))}),i.stderr.on("data",u=>{c+=String(u),s(String(u))}),{done:new Promise(u=>{i.once("error",f=>{clearTimeout(l),u({ok:!1,stdout:a,stderr:c||f.message,...f.code==="ENOENT"?{missing:!0}:{}})}),i.once("close",f=>{clearTimeout(l),u({ok:f===0,stdout:a,stderr:c})})}),cancel:()=>i.kill("SIGTERM")}},exists:Rr,read:n=>{try{return sd(n,"utf8")}catch{return}},listening:n=>new Promise(o=>{let r=ad({host:"127.0.0.1",port:n}),s=a=>{r.destroy(),o(a)};r.once("connect",()=>s(!0)),r.once("error",()=>s(!1)),r.setTimeout(1e3,()=>s(!1))}),alive:n=>{try{return process.kill(n,0),!0}catch(o){return o.code==="EPERM"}},processOf:n=>{try{let o=ci("ps",["-o","lstart=,command=","-p",String(n)],{env:{...e,LC_ALL:"C",TZ:"UTC"},encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","ignore"]}),r=ld.exec(o.trim().split(`
|
|
139
|
+
`)[0]??"");return r?.[1]&&r[2]!==void 0?{started:r[1],command:r[2]}:void 0}catch{return}},portsOf:n=>{try{let r=ci("lsof",["-nP","-a","-p",String(n),"-iTCP","-sTCP:LISTEN","-Fn"],{env:e,encoding:"utf8",timeout:5e3,stdio:["ignore","pipe","ignore"]}).split(`
|
|
140
|
+
`).map(s=>dd.exec(s)?.[1]).filter(s=>s!==void 0).map(Number);return[...new Set(r)]}catch(o){return o.status===1?[]:void 0}},start:(n,o,r)=>{od(Lr(r.log),{recursive:!0});let s=rd(r.log,"a"),a=li(n,o,{cwd:r.cwd,env:r.env,detached:!0,stdio:["ignore",s,s]});if(a.unref(),a.pid===void 0)throw new Error(`could not start ${n}`);return a.pid},stop:(n,o)=>{for(let r of[-n,n])try{if(process.kill(r,o?"SIGKILL":"SIGTERM"),!o)return}catch{}},fetch:(...n)=>fetch(...n),sleep:n=>new Promise(o=>setTimeout(o,n))};return t.vercel=ii({env:e,exec:(n,o)=>t.exec(n,o),fetch:t.fetch,scratch:Dr(pt(e),"..","local")}),t}var ld,dd,ud,io=Te(()=>{"use strict";We();an();ld=/^\s*(\w{3} \w{3} [ \d]\d \d\d:\d\d:\d\d \d{4})\s+(.*)$/,dd=/^n.*:(\d+)$/,ud=e=>Rr(Dr(e,"pnpm-workspace.yaml"))&&Rr(Dr(e,"apps","workspace","compose.yaml"))});import{createHash as fd}from"node:crypto";import{join as Tn}from"node:path";async function di(e,t,n){let o=Date.now()+n*1e3;for(;Date.now()<o;){if(await e.fetch(t,{signal:AbortSignal.timeout(2e3)}).then(()=>!0).catch(()=>!1))return!0;await e.sleep(500)}return!1}async function md(e,t,n){let o=Date.now()+n*1e3;for(;Date.now()<o;){if(!await e.listening(t))return!0;await e.sleep(500)}return!1}async function gd(e,t,n){let o=Date.now()+n*1e3;for(;Date.now()<o;){if(!e.alive(t))return!0;await e.sleep(500)}return!1}async function Mo(e,t,n=()=>{}){let{sys:o,state:r}=e,s=[],a=re=>{let _e=s.findIndex(de=>de.label===re.label);_e===-1?s.push(re):s[_e]=re,t([...s])},c,i=(re,_e,de)=>(a({label:re,mark:"fail",detail:_e,fix:de}),c?{ok:!1,deployed:c}:{ok:!1}),l=o.root;if(!l||Oe(e)||r.deployed?.runner==="image")return Mr(e,t,n);if(un(e))return i("memory","the last deploy kept memory in LocusGraph, and this run has no secret for it","Esc back to Memory & database and paste it again \u2014 or go on there without it");let d=r.answers.runner??"node",u=r.answers.agentCli??"claude",f=d==="compose"&&r.answers.loginsFor==="compose"?[...new Set([u,...r.answers.loggedIn??[]])]:[u],p=tt(e)?.token,g=xe(e),y=r.answers.tenant??Ie(r.answers.owner),$=Wt(r),m=Ut(r),h=`http://127.0.0.1:${$}`,A=`http://localhost:${m}`,E=r.answers.owner,I=r.answers.githubApp,J=I?He(o,I):void 0;if(I&&!J)return i("GitHub App",`the client secret for ${I.slug} is not on this machine`,"Esc back to Console access and press g to create a new app");let fe=I&&J?{AUTH_GITHUB_ID:I.clientId,AUTH_GITHUB_SECRET:J.clientSecret,AUTH_SECRET:J.authSecret,AUTH_URL:A}:{};if(d==="compose"&&f.includes("claude")&&!p)return i("claude token","none in this run \u2014 it is never saved","Esc back to Agent logins and press t (or choose codex there), then Enter");let M=Tn(l,"apps","workspace","dist","node.js"),z=Tn(l,"apps","console",".next"),R=o.exists(M),W=o.exists(Tn(z,"BUILD_ID"));if(R&&W)a({label:"build",mark:"ok",detail:"workspace and console are built"});else{if(!W&&o.exists(z))return i("build","apps/console/.next holds no build \u2014 `next dev` may be using it, and a build would write over it",`stop the console's dev server, then run \`pnpm --filter @fnmoa/console build\` in ${l}, then Enter`);let re=[...R?[]:[{what:"workspace",args:["--filter","@fnmoa/workspace...","run","build"]}],...W?[]:[{what:"console",args:["--filter","@fnmoa/console","run","build"]}]],_e=re.map(Qe=>Qe.what).join(" and ");a({label:"build",mark:"wait",detail:`building the ${_e} \u2014 a few minutes`});let de=await o.exec("pnpm",["install"],{cwd:l,timeoutMs:6e5});if(!de.ok)return i("build",`pnpm install: ${In(de.stderr||de.stdout)}`,`run \`pnpm install\` in ${l}, then Enter`);for(let Qe of re){let lt=await o.exec("pnpm",Qe.args,{cwd:l,timeoutMs:9e5});if(!lt.ok)return i("build",`${Qe.what}: ${In(lt.stderr||lt.stdout)}`,`run \`pnpm ${Qe.args.join(" ")}\` in ${l}, then Enter`)}a({label:"build",mark:"ok",detail:`${_e} built`})}let{token:V,pending:Ce,before:X,had:Fe}=await Kt(o,On,h);a({label:"owner token",mark:"ok",detail:`${D} \u2014 profile ${On} in ~/.moa/config.json${X===On?"":Fe?`; \`moa\` now talks to this workspace, not profile ${X} (\`moa use ${X}\` to go back)`:"; `moa` now talks to this workspace"}`});let me=U({url:h,token:V},o.fetch),b=r.deployed?Ln(o,r.deployed):void 0,te=hd({runner:d,workspaceUrl:h,tenant:y,token:V,...r.answers.repo?{repo:r.answers.repo}:{},...E?{owner:E}:{},...I?{githubClientId:I.clientId}:{},...g?{locusgraph:g.secret,graph:g.graph,server:g.server}:{},...p?{claude:p}:{}}),O=b?.workspacePid!==void 0&&Lt(o,b.workspacePid,b.workspaceStarted,St(b.workspaceUrl))?b.workspacePid:void 0,N=O?b?.workspaceStarted:void 0,ne=b?.workspaceFor,ge=b?.consolePid!==void 0&&Lt(o,b.consolePid,b.consoleStarted,St(b.consoleUrl))?b.consolePid:void 0,oe=ge?b?.consoleStarted:void 0,ke=b?.consoleFor,Ve=b?.memoryKept,Pe=b?.workspaceUrl===h?b?.people:void 0,Me=()=>{c={runner:d,workspaceUrl:h,consoleUrl:A,...O?{workspacePid:O,...N?{workspaceStarted:N}:{}}:{},...ne?{workspaceFor:ne}:{},...ge?{consolePid:ge,...oe?{consoleStarted:oe}:{},...ke?{consoleFor:ke}:{}}:{},...Pe?{people:Pe}:{},...Ve?{memoryKept:Ve}:{},at:new Date().toISOString()},n(c)};if((O||ge)&&Me(),O!==void 0&&ne!==te){if(a({label:"workspace",mark:"wait",detail:"restarting \u2014 it was started with other answers"}),o.stop(O),!await gd(o,O,15))return i("workspace",`the old workspace (pid ${O}) is still running`,`stop it (\`kill ${O}\`), then Enter`);O=void 0,N=void 0,ne=void 0,Me()}let Le=await me.get("/v1/whoami").then(()=>"ours",re=>re instanceof ae?"other":"down");if(Le==="other")return i("workspace",`something else answers on :${$} and refuses this token`,"stop it, or run `moa setup --workspace-port <port>`");if(Le==="ours"&&ne!==te&&d==="node")return i("workspace",`the workspace on :${$} was not started with these answers`,b?.runner==="compose"?`run \`docker compose -p ${we} down\`, then Enter`:"stop it, then Enter");if(Le==="ours"&&ne===te)a({label:"workspace",mark:"ok",detail:`${h} \u2014 already running`});else{a({label:"workspace",mark:"wait",detail:`starting on :${$}`});let re={...o.env,...await Ht(e),MOA_TOKENS:`${V}:${y}`,PORT:String($),MOA_PORT:String($),MOA_CONSOLE_PORT:String(m),...r.answers.repo?{MOA_REPO:r.answers.repo}:{},...E?{MOA_OWNER_LOGIN:E}:{},...I?{MOA_GITHUB_CLIENT_ID:I.clientId}:{},...g?{LOCUSGRAPH_AGENT_SECRET:g.secret,LOCUSGRAPH_GRAPH_ID:g.graph,LOCUSGRAPH_SERVER_URL:g.server}:{}};for(let de of["MOA_DATABASE_URL","MOA_SQLITE_FILE","MOA_TOKEN_FILE","MOA_WORKSPACE_ROOT","MOA_SELF_URL",...E?[]:["MOA_OWNER_LOGIN"],...I?[]:["MOA_GITHUB_CLIENT_ID"]])delete re[de];if(d==="compose"){for(let Qe of["MOA_CLI_HOME","CLAUDE_CODE_OAUTH_TOKEN","ANTHROPIC_API_KEY"])delete re[Qe];p&&(re.CLAUDE_CODE_OAUTH_TOKEN=p);let de=await o.exec("docker",Rt(l,"up","-d","--build"),{cwd:l,env:re,timeoutMs:12e5});if(!de.ok)return i("workspace",`docker compose: ${In(de.stderr||de.stdout)}`,"fix that, then Enter");O=void 0,N=void 0,ne=te,Ve=!!g,Me()}else{let de=le(o,"workspace.db");O=o.start(process.execPath,[M],{cwd:Tn(l,"apps","workspace"),env:{...re,...p?{CLAUDE_CODE_OAUTH_TOKEN:p}:{},MOA_DATABASE_URL:`sqlite:${de}`,MOA_D1_ACCOUNT_ID:"",MOA_D1_DATABASE_ID:"",MOA_D1_API_TOKEN:"",MOA_SQLITE_FILE:de,MOA_WORKSPACE_ROOT:le(o,"worktrees"),MOA_SELF_URL:h,MOA_PID_FILE:Nr(o)},log:le(o,"workspace.log")}),N=o.processOf(O)?.started,ne=te,Ve=!!g,Me()}if(!await di(o,`${h}/health`,d==="compose"?120:60))return i("workspace",`did not answer on :${$}`,d==="compose"?`look at \`docker compose -p ${we} logs workspace\`, then Enter`:`look at ${le(o,"workspace.log")}, then Enter`);if(!await me.get("/v1/whoami").then(()=>!0,()=>!1))return i("workspace","it started but refuses the owner token","Enter to try again");a({label:"workspace",mark:"ok",detail:`${h}${O?` (pid ${O})`:""}`})}Ce&&await Bt(o,On,h,V);let ye=await Ur(o,h,a,d==="compose"?"postgres":"sqlite",d==="compose"?`look at \`docker compose -p ${we} logs\`, then Enter`:`look at ${le(o,"workspace.log")}, then Enter`);if(ye)return i(ye.label,ye.detail,ye.fix);let T=await ln(me,r,a,Pe);if(T)return i(T.label,T.detail,T.fix);let F=Pe;Pe=r.answers.people??[],JSON.stringify(Pe)!==JSON.stringify(F??[])&&Me();let Ye=wd(h,V,fe),Xe=ge!==void 0&&await o.listening(m);if(Xe&&ge!==void 0&&ke!==Ye){if(a({label:"console",mark:"wait",detail:"restarting \u2014 it points at another workspace"}),o.stop(ge),ge=void 0,oe=void 0,ke=void 0,Me(),!await md(o,m,15))return i("console",`the old console still holds :${m}`,"stop it, then Enter");Xe=!1}if(Xe)a({label:"console",mark:"ok",detail:`${A} \u2014 already running`});else{if(await o.listening(m))return i("console",`something else is on :${m}`,"stop it, or run `moa setup --console-port <port>`");if(a({label:"console",mark:"wait",detail:`starting on :${m}`}),ge=o.start(process.execPath,[Tn(l,"apps","console","node_modules","next","dist","bin","next"),"start","--port",String(m),"--hostname","127.0.0.1"],{cwd:Tn(l,"apps","console"),env:{...kd(o.env),MOA_URL:h,MOA_TOKEN:V,...fe},log:le(o,"console.log")}),oe=o.processOf(ge)?.started,ke=Ye,Me(),!await di(o,A,60))return i("console",`did not answer on :${m}`,`look at ${le(o,"console.log")}, then Enter`);a({label:"console",mark:"ok",detail:`${A} (pid ${ge})${I?" \u2014 Sign in with GitHub":""}`})}let ct=await Dt(me,f,d==="compose"?"in the container":"on this machine",re=>d==="compose"?"Esc back to Agent logins and log it in again, then Enter":`is ${re} logged in on this machine? Run \`${re}\` once and log in, then Enter`,a);if("label"in ct)return i(ct.label,ct.detail,ct.fix);let Et=ct.runs[u],ie=await dn(me,a);if("label"in ie)return i(ie.label,ie.detail,ie.fix);let Yt=ie.memory;return ie.live!==void 0&&(Ve=ie.live),a({label:"Console",mark:"ok",detail:A}),a({label:"Workspace",mark:"ok",detail:h}),a({label:"Next",mark:"skip",detail:`moa whoami \xB7 moa agent list \xB7 moa run ${Rn(u)} "\u2026"`}),{ok:!0,deployed:{runner:d,workspaceUrl:h,consoleUrl:A,...O?{workspacePid:O,...N?{workspaceStarted:N}:{}}:{},...ne?{workspaceFor:ne}:{},...ge?{consolePid:ge,...oe?{consoleStarted:oe}:{},...ke?{consoleFor:ke}:{}}:{},...Et?{proofRunId:Et}:{},memory:Yt,people:Pe,...Ve?{memoryKept:Ve}:{},at:new Date().toISOString()}}}async function Ur(e,t,n,o,r){let s=await e.fetch(`${t}/health`,{signal:AbortSignal.timeout(5e3)}).then(c=>c.json()).catch(c=>({ok:!1,error:String(c)})),a=s.database??o;if(s.ok!==!0)return{label:"database",detail:`${a} does not answer: ${In(String(s.error??"no answer"),1)}`,fix:r};n({label:"database",mark:"ok",detail:`${a} \u2014 migrated, and it answers`})}async function ln(e,t,n,o=[]){let r=t.answers.people??[],s=r.filter(i=>!o.some(l=>yd(l,i)));for(let i of s){n({label:"people",mark:"wait",detail:`adding ${i.login}`});try{await e.put(`/v1/access/people/${encodeURIComponent(i.login)}`,{role:i.role,dailyCapUsd:i.dailyCapUsd})}catch(l){let d=l instanceof Error?l.message:String(l);return{label:"people",detail:`${i.login}: ${d}`,fix:l instanceof ae&&l.status===404?"this workspace has no access list \u2014 `git pull`, then `pnpm run build`, then Enter":"Enter to try again"}}}let a=(t.answers.removed??[]).filter(i=>!r.some(l=>l.login.toLowerCase()===i));for(let i of a){n({label:"people",mark:"wait",detail:`removing ${i}`});try{await e.del(`/v1/access/people/${encodeURIComponent(i)}`)}catch(l){if(l instanceof ae&&l.status===404)continue;let d=l instanceof Error?l.message:String(l);return{label:"people",detail:`removing ${i}: ${d}`,fix:"Enter to try again"}}}let c=r.length-s.length;(r.length>0||a.length>0)&&n({label:"people",mark:"ok",detail:[...s.map(i=>`${i.login} (${i.role})`),...a.map(i=>`${i} removed`),...c>0?[`${c} as before \u2014 left as the Access page has them`]:[]].join(", ")})}async function Dt(e,t,n,o,r){let s={};for(let a of t){let c=`proof: ${a} run`,i=Rn(a);r({label:c,mark:"wait",detail:`${a} is answering ${n}`});try{if(!await e.post("/v1/agents",{name:i,cli:a,role:"Proves moa setup worked. Answers in one word."}).then(()=>!0,p=>{if(!(p instanceof ae&&p.status===409))throw p;return!1})){let p=await e.get(`/v1/agents/${i}`);if(p.cli!==a)return{label:c,detail:`agent ${i} already exists and runs ${p.cli??"another CLI"}`,fix:`run \`moa agent rm ${i}\`, then Enter`}}let d=await e.post(`/v1/agents/${i}/runs`,{prompt:En}),u=await Nt(e,d.id,300),f=u.result;if(u.state!=="done"||!f||!("runId"in f)||f.isError){let p=u.error??(f&&"result"in f?f.result:"no answer");return{label:c,detail:In(String(p),2),fix:o(a)}}s[a]=f.runId,r({label:c,mark:"ok",detail:`${a} answered "${In(f.result,1).slice(0,40)}" ${n} \u2014 moa logs ${f.runId}`})}catch(l){return{label:c,detail:l instanceof Error?l.message:String(l),fix:"Enter to try again"}}}return{runs:s}}async function dn(e,t){try{let n=await e.get("/v1/memory"),o=(n.types??[]).reduce((c,i)=>c+(i.items?.length??0),0),r=typeof n.live=="boolean"?n.live:void 0,a=`${o} memor${o===1?"y":"ies"}, ${r===void 0?"kept where this older workspace build cannot say":r?"kept in LocusGraph":"in the workspace process"}`;return t({label:"proof: memory read",mark:"ok",detail:a}),r===void 0?{memory:a}:{memory:a,live:r}}catch(n){return{label:"proof: memory read",detail:n instanceof Error?n.message:String(n),fix:"Enter to try again"}}}var On,Rn,In,ui,hd,wd,kd,yd,Jt=Te(()=>{"use strict";De();yn();qe();at();It();Ft();Pn();We();io();On="local",Rn=e=>`setup-proof-${e}`,In=(e,t=3)=>e.trim().split(`
|
|
141
|
+
`).slice(-t).join(" \xB7 ").slice(0,300);ui=e=>fd("sha256").update(e).digest("hex").slice(0,12),hd=e=>ui(JSON.stringify([e.runner,e.workspaceUrl,e.tenant,e.repo??"",e.token,e.locusgraph??"",e.owner??"",e.githubClientId??"",e.graph??"",e.server??"",e.claude??""])),wd=(e,t,n)=>`${e} ${ui(JSON.stringify([t,n.AUTH_GITHUB_ID??"",n.AUTH_GITHUB_SECRET??"",n.AUTH_SECRET??""]))}`,kd=e=>Object.fromEntries(Object.entries(e).filter(([t])=>!t.startsWith("AUTH_")));yd=(e,t)=>e.login.toLowerCase()===t.login.toLowerCase()&&e.role===t.role&&e.dailyCapUsd===t.dailyCapUsd});var Fr={};pc(Fr,{artifactRoot:()=>Dn,bundledWorker:()=>jr,cursorPrompt:()=>No,deployImage:()=>Mr,imageChecks:()=>Un,imageCompose:()=>it,imageComposePath:()=>qt,imageConfig:()=>gi,loggedInImage:()=>zt,loginInImage:()=>Mn,logsInInContainer:()=>co,releaseImage:()=>Ae,waiting:()=>Nn,workerFromImage:()=>Gr});import{chmod as bd,mkdir as pi,readFile as $d,writeFile as vd}from"node:fs/promises";import{dirname as fi,join as mi}from"node:path";import{fileURLToPath as Sd}from"node:url";async function Gr(e){let t=await e.exec("docker",["create","--platform","linux/amd64",Ae()]);if(!t.ok)return{ok:!1,why:pe(t.stderr)||"docker create failed"};let n=pe(t.stdout),o=le(e,mi("cloudflare","worker.js"));await pi(fi(o),{recursive:!0});let r=await e.exec("docker",["cp",`${n}:/repo/apps/workspace/dist/worker.js`,o]);return await e.exec("docker",["rm",n]),r.ok?{ok:!0,path:o}:{ok:!1,why:pe(r.stderr)||"the image holds no worker.js"}}async function Un(e){let t=await e.sys.exec("docker",["info","--format","{{.ServerVersion}}"]);if(!t.ok)return[{label:"docker",mark:"fail",detail:`${t.missing?"not installed":"not running"} \u2014 it pulls the published image`,fix:"Start Docker, then check again."}];let n=await e.sys.exec("docker",["pull",...e.state.target==="local"?[]:["--platform","linux/amd64"],Ae()],{timeoutMs:6e5}),o=e.state.target==="cloudflare"?"pulls the published image, then pushes it to your Cloudflare registry":"pulls the published image; nothing is built here";return[{label:"docker",mark:"ok",detail:`${t.stdout.trim().split(`
|
|
142
|
+
`)[0]} \u2014 ${o}`},{label:"image",mark:n.ok?"ok":"fail",detail:Ae(),...n.ok?{}:{fix:"Sign in to ghcr.io with your account's package pull token, then check again."}}]}function gi(e){let t=`fnmoa-${e.install}`;return{services:{workspace:{image:e.image,restart:"unless-stopped",ports:[`127.0.0.1:${e.workspacePort}:8787`,`127.0.0.1:${e.consolePort}:3100`],volumes:[`${t}:/data`,`${t}-home:/home/moa`],environment:{...e.env,MOA_PORT:"8787",MOA_SELF_URL:"http://127.0.0.1:8787",MOA_WORKSPACE_ROOT:"/data/worktrees",MOA_LICENCE_FILE:"/data/licence.json",MOA_DATABASE_URL:e.postgres?"postgres://moa@postgres:5432/moa":"sqlite:/data/workspace.db",MOA_SQLITE_FILE:"/data/workspace.db",MOA_LOCAL_CONTAINER:"1"},...e.postgres?{depends_on:{postgres:{condition:"service_healthy"}}}:{}},...e.postgres?{postgres:{image:"postgres:17-alpine",restart:"unless-stopped",environment:{POSTGRES_USER:"moa",POSTGRES_DB:"moa",POSTGRES_HOST_AUTH_METHOD:"trust"},volumes:[`${t}-pg:/var/lib/postgresql/data`],healthcheck:{test:["CMD-SHELL","pg_isready -U moa"],interval:"5s",timeout:"5s",retries:20}}}:{}},volumes:{[t]:{name:t},[`${t}-home`]:{name:`${t}-home`},...e.postgres?{[`${t}-pg`]:{name:`${t}-pg`}}:{}}}}function No(e){let t=/https:\/\/cursor\.com\/\S+/.exec(e);return t?{url:t[0]}:{}}async function zt(e,t){if(!e.exists(qt(e)))return!1;let n=Hr[t],o=await e.exec("docker",it(e,"exec","-T","workspace",...n.status),{timeoutMs:6e4});return n.loggedIn(o)}function Mn(e,t,n){let o=Hr[t],r="";return e.run("docker",it(e,"exec","-T",...o.env,"workspace",...o.login),{timeoutMs:16*6e4},s=>{r+=s,n(o.prompt(r))})}async function Mr(e,t,n){let o=[],r=b=>{o.push(b),t([...o])},s=b=>(r({label:"image",mark:"fail",detail:b}),{ok:!1}),a=await yt(e);for(let b of a)r(b);if(a.some(b=>b.mark==="fail"))return{ok:!1};let c=await so(e.sys.env,"local");if(!c)return s("Activate the local install first.");for(let b of await Un(e))if(r(b),b.mark==="fail")return{ok:!1};let{sys:i,state:l}=e,d={};if(l.deployed?.runner==="image"){let b=JSON.parse(await $d(qt(i),"utf8"));d=Object.fromEntries(Object.entries(b.services.workspace.environment).map(([te,O])=>[te,O.replaceAll("$$","$")]))}let u=`http://127.0.0.1:${Wt(l)}`,f=`http://localhost:${Ut(l)}`,{token:p}=await Kt(i,"local",u),g=l.answers.githubApp,y=g?He(i,g):void 0;if(g&&!y)return s("The GitHub App client secret is missing.");let $=await i.exec("gh",["auth","token"]),m={...d,...await Ht(e),MOA_TOKENS:`${p}:${l.answers.tenant??Ie(l.answers.owner)}`,...l.answers.owner?{MOA_OWNER_LOGIN:l.answers.owner}:{},...l.answers.repo?{MOA_REPO:l.answers.repo}:{},...$.ok?{GH_TOKEN:$.stdout.trim()}:{}},h=tt(e)?.token;h&&(m.CLAUDE_CODE_OAUTH_TOKEN=h);for(let b of ue){let te=$e(e,b);te&&(m[Se[b]]=te)}let A=l.answers.loggedIn;if(A)for(let b of ue){if(A.includes(b)||$e(e,b))continue;let te=[Se[b],...b==="claude"&&!h?["CLAUDE_CODE_OAUTH_TOKEN"]:[]];for(let O of te)delete m[O]}let E=xe(e);E&&Object.assign(m,{LOCUSGRAPH_AGENT_SECRET:E.secret,LOCUSGRAPH_GRAPH_ID:E.graph,LOCUSGRAPH_SERVER_URL:E.server}),g&&y&&Object.assign(m,{MOA_GITHUB_CLIENT_ID:g.clientId,AUTH_GITHUB_ID:g.clientId,AUTH_GITHUB_SECRET:y.clientSecret,AUTH_SECRET:y.authSecret,AUTH_URL:f});let I=qt(i),J=b=>typeof b=="string"?b.replaceAll("$",()=>"$$"):Array.isArray(b)?b.map(J):b&&typeof b=="object"?Object.fromEntries(Object.entries(b).map(([te,O])=>[te,J(O)])):b,fe=gi({image:Ae(),install:c.install,workspacePort:Wt(l),consolePort:Ut(l),postgres:l.answers.runner==="compose",env:m});if(await pi(fi(I),{recursive:!0,mode:448}),await vd(I,JSON.stringify(J(fe)),{mode:384}),await bd(I,384),!(await i.exec("docker",it(i,"up","-d","--wait"),{timeoutMs:6e5})).ok)return s("Docker Compose did not start the image. Run `moa setup logs` for details.");let z={runner:"image",workspaceUrl:u,consoleUrl:f,image:Ae(),at:new Date().toISOString()};n(z);let R=U({url:u,token:p},i.fetch),W=!1;for(let b=0;b<60;b++)try{await R.get("/v1/whoami"),W=!0;break}catch{await i.sleep(1e3)}if(!W)return{...s("The workspace did not become ready."),deployed:z};await Bt(i,"local",u,p);let V=await ln(R,l,r,l.deployed?.people);if(V)return{...s(V.detail),deployed:z};let Ce=l.answers.agentCli??"claude",X=[...new Set([Ce,...l.answers.loggedIn??[]])];for(let b of X){if(!co(b)||$e(e,b)||await zt(i,b))continue;r({label:b,mark:"wait",detail:"starting its login inside the container\u2026"});let O=await Mn(i,b,N=>{let ne=Nn(N);ne&&r({label:b,mark:"wait",detail:ne})}).done;if(!O.ok||!await zt(i,b))return r({label:b,mark:"fail",detail:`the login did not finish: ${pe(O.stderr)||"no answer"}`,fix:"Enter to log in again \u2014 or Esc back to Agent logins and \u2191 \u2193 to choose another agent"}),{ok:!1,deployed:z};r({label:b,mark:"ok",detail:"logged in inside the container \u2014 kept on its home volume"})}let Fe=await Dt(R,X,"in the image",b=>b==="claude"?"Esc back to Agent logins: t to connect your Claude subscription, or export ANTHROPIC_API_KEY and run setup again.":`\`moa setup login ${b}\` to log it in again, or export ${Se[b]} and run setup again.`,r);if("label"in Fe)return{...s(Fe.detail),deployed:z};let me=await dn(R,r);return"label"in me?{...s(me.detail),deployed:z}:(r({label:"console",mark:"ok",detail:f}),{ok:!0,deployed:{...z,people:l.answers.people,memory:me.memory,memoryKept:me.live}})}var Ae,Dn,jr,qt,it,Hr,co,Nn,at=Te(()=>{"use strict";De();qe();Jt();It();Ft();Pn();We();Ae=()=>`ghcr.io/fnlog0/fnmoa:${Gt()}`,Dn=()=>Sd(new URL(import.meta.url.endsWith("/main.js")?"../":"../../",import.meta.url)),jr=()=>mi(Dn(),"dist/assets/worker.js"),qt=e=>le(e,"image/compose.json"),it=(e,...t)=>["compose","--project-name","fnmoa-image","--file",qt(e),...t];Hr={codex:{status:["codex","login","status"],login:["codex","login","--device-auth"],env:[],loggedIn:e=>e.ok,prompt:rn},cursor:{status:["cursor-agent","status"],login:["cursor-agent","login"],env:["-e","NO_OPEN_BROWSER=1"],loggedIn:e=>e.ok&&!/not logged in/i.test(`${e.stdout}${e.stderr}`),prompt:No}},co=e=>e in Hr;Nn=e=>e.url?e.code?`open ${e.url} and enter ${e.code} \u2014 waiting for you to approve it`:`open ${e.url} and sign in \u2014 waiting for you to approve it`:void 0});import{join as Br}from"node:path";async function pn(e,t,n,o=["--version"]){let r=await e.exec(t,o);return r.ok?v(t,uo(r.stdout)):_(t,"not found",n)}function Ed(e=process){return e.platform==="darwin"&&e.env.MOA_KEEP_AWAKE!=="0"?v("Sleep","held off while a pipeline runs, as `caffeinate -i` does \u2014 a closed lid still sleeps, and work it cut short is run again"):v("Sleep",e.platform==="darwin"?"not held off, MOA_KEEP_AWAKE=0 \u2014 work a sleep cuts short is run again":"not held off on this system \u2014 work a sleep cuts short is run again")}function Cd(e,t=process){switch(e.target){case"local":return{lines:[v("This machine","Docker or local, nothing in the cloud"),Ed(t)]};case"cloudflare":return{lines:[v("Cloudflare","a Worker and its container on D1, on your own domain \u2014 Workers Paid plan")]};case"vercel":return{lines:[v("Vercel Sandbox","one persistent VM, fnmoa-<tenant>, resumed by name \u2014 needs the vercel CLI, signed in")]};default:return{lines:[{label:"Pick one with \u2191 \u2193 and Enter",mark:"wait"}]}}}async function hi(e,t,n,o,r,s){return await e.sys.listening(n)?o!==void 0&&Lt(e.sys,o,r,n)?v(`port ${n}`,`the ${t} the last setup started`):_(`port ${n}`,"something else is listening there",`stop it, or run \`moa setup ${s} <port>\``):v(`port ${n}`,`free for the ${t}`)}async function wi(e){return[Number(process.versions.node.split(".")[0])>=22?v("node",process.versions.node):_("node",process.versions.node,"install node 22 or newer"),...await Promise.all([pn(e,"pnpm","install pnpm: `corepack enable`"),pn(e,"git","install git"),pn(e,"gh","install the GitHub CLI: https://cli.github.com")])]}function Wr(e){if(e.secrets.cloudflare)return{token:e.secrets.cloudflare,from:"pasted in this run"};let t=e.sys.env.MOA_D1_API_TOKEN?.trim();return t?{token:t,from:"MOA_D1_API_TOKEN"}:void 0}function qr(e){if(e.secrets.github)return{token:e.secrets.github,from:"pasted in this run"};let t=e.sys.env.GH_TOKEN?.trim();return t?{token:t,from:"GH_TOKEN"}:void 0}async function Pd(e){let{sys:t,state:n}=e,o=await wi(t);if(Oe(e)){let{imageChecks:u}=await Promise.resolve().then(()=>(at(),Fr));o.push(...await u(e))}else{let u=await t.exec("docker",["info","--format","{{.ServerVersion}}"]);o.push(u.ok?v("docker",`${pe(u.stdout)} \u2014 builds the container image from this checkout`):_("docker",u.missing?"not installed":"not running","wrangler builds the container image with Docker: start it, then r"))}let s=t.root??Dn();o.push(v(t.root?"checkout":"release",s));let a=await Ge(t,s,["--version"],{timeoutMs:3e4});if(!a.ok)return o.push(_("wrangler","not installed in this checkout",`run \`pnpm install\` in ${s}, then r`)),{lines:o};o.push(v("wrangler",uo(a.stdout)));let c=await sa(t,s),i;c.ok?(i=c.account.id,o.push(v("account",`${c.account.name} (${c.account.id})${c.email?` as ${c.email}`:""}${c.others>0?" \u2014 CLOUDFLARE_ACCOUNT_ID picks another":""}`))):o.push(_("account",c.why,c.loggedOut?`run \`pnpm --dir ${Br(s,"apps","workspace")} exec wrangler login\`, then r`:"fix that, then r"));let l=n.answers.domain;if(!l)o.push(_("domain","none yet \u2014 the console and workspace need a name of yours","press d and type a domain on this Cloudflare account, like example.com"));else{let u=await aa(t,l),f=Yn(l);o.push(u.zone&&u.onCloudflare?v("domain",`${f.consoleUrl} and ${f.workspaceUrl} \u2014 zone ${u.zone}`):_("domain",u.why??`${u.zone} is not served by Cloudflare's name servers`,"add the domain to this Cloudflare account (its name servers must be Cloudflare's), or d for another"))}let d=Wr(e);if(!d)o.push(Jr(n)?H("D1 token","kept \u2014 the deployed Worker has it (k to replace it)"):_("D1 token","none \u2014 the container reaches D1 over Cloudflare's API with it","make an API token with Account \xB7 D1 \xB7 Edit on this account, then press k and paste it"));else if(i){let u=await ia(t,i,d.token);o.push(u.ok?v("D1 token",`${D} (${d.from}) \u2014 D1 answers to it`):_("D1 token",`${D} (${d.from}) \u2014 D1 refused it: ${u.why}`,"make one with only Account \xB7 D1 \xB7 Edit on this account, then press k to paste it"))}return o.push(H("cost",`Workers Paid, plus the container (standard-4) while it runs \u2014 up to ${_t}h after the last request`)),{lines:o,...i?{answers:{cloudflareAccount:i}}:{}}}async function _d(e){let{sys:t,state:n}=e;if(Oe(e)&&n.target==="local"){let{imageChecks:a}=await Promise.resolve().then(()=>(at(),Fr));return{lines:await a(e)}}if(n.target==="cloudflare")return Pd(e);let o=await wi(t),r=n.deployed?Ln(t,n.deployed):void 0,s=await t.exec("docker",["--version"]);return o.push(s.ok?v("docker",uo(s.stdout)):H("docker","not found \u2014 only needed for Postgres with docker compose")),o.push(t.root?v("checkout",t.root):_("checkout","not inside a fnMoa checkout","run moa setup from a clone of https://github.com/fnLog0/fnmoa")),o.push(await hi(e,"workspace",Wt(n),r?.workspacePid,r?.workspaceStarted,"--workspace-port"),await hi(e,"console",Ut(n),n.deployed?.consolePid,n.deployed?.consoleStarted,"--console-port"),H("account","this machine \u2014 no account needed")),{lines:o}}async function Td(e){let{sys:t,state:n}=e,o=n.target==="cloudflare"?{...t.env}:void 0;if(o)for(let i of["GH_TOKEN","GITHUB_TOKEN"])delete o[i];let r=await t.exec("gh",["api","user","--jq",".login"],o?{env:o}:{}),s=pe(r.stdout);if(!r.ok||!s)return{lines:[_("gh login",r.missing?"gh is not installed":"gh has no login on this machine","run `gh auth login`, then press r to check again")]};if(n.target==="cloudflare")return Id(e,s);let a=[v("gh login",`${s} \u2014 on this machine the workspace uses your own login`)],c=n.answers.repo;if(!c)a.push(H("repo","none \u2014 a pipeline can name any repository later (e to set one)"));else{let i=await t.exec("gh",["repo","view",c,"--json","viewerPermission","--jq",".viewerPermission"]),l=pe(i.stdout);a.push(i.ok&&["ADMIN","MAINTAIN","WRITE"].includes(l)?v("repo",`${c} \u2014 ${l.toLowerCase()}`):_("repo",i.ok?`${s} cannot push to ${c}`:`${c} is not a repository ${s} can see`,"press e to change it, or clear it to skip"))}return{lines:a,answers:{owner:s}}}async function Od(e,t,n,o){let r=await e.exec("gh",["repo","view",t,"--json","viewerPermission","--jq",".viewerPermission"],o?{env:o}:{}),s=pe(r.stdout);return r.ok&&["ADMIN","MAINTAIN","WRITE"].includes(s)?v("repo",`${t} \u2014 ${s.toLowerCase()} for ${n}`):_("repo",r.ok?`${n} cannot push to ${t}`:`${t} is not a repository ${n} can see`,"press e to change it, or clear it to skip")}async function Id(e,t){let{sys:n,state:o}=e,r=[v("gh login",`${t} \u2014 you, the first owner`)],s=qr(e),a;if(!s)r.push(Jr(o)?H("token","kept \u2014 the deployed Worker has it (k to replace it)"):_("token","none \u2014 the container works on GitHub with a token of its own","make a fine-grained token (contents, pull requests, issues: read/write; checks, actions: read) \u2014 a bot account's, preferably \u2014 then press k"));else{let c={...n.env,GH_TOKEN:s.token};for(let d of["GITHUB_TOKEN"])delete c[d];let i=await n.exec("gh",["api","user","--jq",".login"],{env:c});a=pe(i.stdout)||void 0,r.push(i.ok&&a?v("token",`${D} (${s.from}) \u2014 GitHub sees ${a}`):_("token",`${D} (${s.from}) \u2014 GitHub refused it`,"press k to paste another"));let l=o.answers.repo;l&&a&&r.push(await Od(n,l,a,c))}return o.answers.repo||r.push(H("repo","none \u2014 a pipeline can name any repository later (e to set one)")),{lines:r,answers:{owner:t}}}function tt(e){if(e.secrets.claude)return{token:e.secrets.claude,from:"pasted in this run"};let t=e.sys.env.CLAUDE_CODE_OAUTH_TOKEN?.trim();return t?{token:t,from:"your environment"}:void 0}async function Ld(e){let{sys:t,state:n}=e;if(Oe(e)&&n.target==="local")return Dd(e);if(n.target==="cloudflare")return Md(e);let o=Rd(n),[r,s]=await Promise.all([t.exec("claude",["--version"]),t.exec("codex",["--version"])]),a=tt(e),c={claude:r.ok,codex:s.ok,cursor:!1},i=[o?v("agents run","in the container \u2014 only what is carried in here reaches it"):H("agents run","on this machine, on your logins \u2014 Postgres on Memory & database would move them into a container")],l,d=o&&t.root?await Ba(t,t.root):void 0;if(d&&!d.ok)c.codex=!1,l=_("codex",`the image did not build: ${d.why}`,"start Docker, or fix the build, then press r");else if(o&&t.root){let g=await Wa(t,t.root);c.codex=g.loggedIn,l=g.loggedIn?v("codex",`${g.says} \u2014 its own session in the container (l to log in again)`):g.broken?_("codex",`the container did not run: ${g.broken}`,"start Docker, then press r"):H("codex","not logged in inside the container \u2014 l to log in with a code")}else{let g=s.ok?await t.exec("codex",["login","status"]):void 0;c.codex=s.ok&&g?.ok===!0,l=s.ok?g?.ok?v("codex",`${uo(s.stdout)} \u2014 ${pe(g.stdout)||"logged in"}`):H("codex","not logged in \u2014 run `codex login`, then press r"):H("codex","not found")}let u;if(a){let g=await Pr(t,a.token,o&&t.root?{container:t.root}:"here");c.claude=g.ok,u=g.ok?v("claude",`token ${D} (${a.from}) \u2014 "reply ok" ${o?"in the container":"on it alone"}`):_("claude",`the token did not answer: ${g.why}`,"press t to make a new one with `claude setup-token`, or e to paste it again")}else o?(c.claude=!1,u=H("claude",r.ok?"no token carried in \u2014 t to make one with `claude setup-token`":"no token \u2014 install claude here to make one: npm i -g @anthropic-ai/claude-code")):u=r.ok?v("claude",`${uo(r.stdout)} \u2014 your existing login (t to carry a token instead)`):H("claude","not found");i.push(u,l);let f=e.state.answers.agentCli??(c.claude?"claude":c.codex?"codex":void 0);f?i.push(c[f]?v("proof run",`uses ${f} (\u2191 \u2193 to change)`):_("proof run",`${f} is not ready ${o?"in the container":"here"}`,f==="claude"?o?"press t to carry a token in \u2014 or \u2191 \u2193 to choose codex":"install claude and log in \u2014 or \u2191 \u2193 to choose codex":o?"press l to log codex in \u2014 or \u2191 \u2193 to choose claude":"install codex and run `codex login` \u2014 or \u2191 \u2193 to choose claude")):i.push(_("agent",o?"neither claude nor codex is logged in inside the container":"neither claude nor codex is ready",o?"press t to carry a claude token in, or l to log codex in":"install one and log in, then press r")),i.push(H("note","owner only: your subscriptions; teammates use them, never see them (moa setup login)"));let p=["claude","codex"].filter(g=>c[g]);return{lines:i,answers:{...f?{agentCli:f}:{},loggedIn:p,...po(i)?{loginsFor:o?"compose":"node"}:{}}}}async function Dd(e){let{sys:t,state:n}=e,o=n.deployed?.runner==="image",r=tt(e),s=new Set,a=[v("agents run","in the image's container \u2014 only what is carried in reaches it")];r?(s.add("claude"),a.push(v("claude",`token ${D} (${r.from}) \u2014 Deploy proves it in the image`))):$e(e,"claude")?(s.add("claude"),a.push(v("claude",`ANTHROPIC_API_KEY ${D} (${lo(e,"claude")})`))):o&&n.answers.loggedIn?.includes("claude")?(s.add("claude"),a.push(H("claude","kept \u2014 the running container has its login (t to replace it)"))):a.push(H("claude","not connected \u2014 t for your Claude subscription (`claude setup-token`), or export ANTHROPIC_API_KEY"));let c={codex:"ChatGPT",cursor:"Cursor"};for(let l of["codex","cursor"])$e(e,l)?(s.add(l),a.push(v(l,`${Se[l]} ${D} (${lo(e,l)})`))):o&&await zt(t,l)?(s.add(l),a.push(v(l,"logged in inside the container \u2014 kept on its home volume"))):a.push(H(l,`logs in at Deploy when chosen \u2014 or later, \`moa setup login ${l}\` with your ${c[l]} account`));let i=n.answers.agentCli??(s.has("claude")?"claude":s.values().next().value??"codex");return a.push(i!=="claude"||s.has("claude")?v("proof run",`uses ${i} (\u2191 \u2193 to change)`):_("proof run","claude has no login for the image","press t to connect your Claude subscription \u2014 or \u2191 \u2193 to choose codex or cursor")),{lines:a,answers:{agentCli:i,loggedIn:ue.filter(l=>s.has(l))}}}async function Ud(e){let t=e.state.deployed;if(t?.runner!=="cloudflare")return;let n=await ve(e.sys.env),o=Object.values(n.profiles).find(r=>r.url===t.workspaceUrl);if(o)try{let r=await e.sys.fetch(`${t.workspaceUrl}/_moa/codex`,{headers:{authorization:`Bearer ${o.token}`},signal:AbortSignal.timeout(12e4)});return r.ok?(await r.json()).loggedIn===!0:void 0}catch{return}}async function Md(e){let{sys:t,state:n}=e,o=tt(e),r=[v("agents run","in the Cloudflare container \u2014 only what is carried in reaches it")],s={claude:!1,codex:!0,cursor:!1};if(o){let d=await Pr(t,o.token,"here");s.claude=d.ok,r.push(d.ok?v("claude",`token ${D} (${o.from}) \u2014 "reply ok" on it alone; a Worker secret`):_("claude",`the token did not answer: ${d.why}`,"press c to make a new one with `claude setup-token`, or k for an API key"))}else $e(e,"claude")?(s.claude=!0,r.push(v("claude",`ANTHROPIC_API_KEY ${D} (${lo(e,"claude")}) \u2014 a Worker secret`))):Jr(n)&&n.answers.loggedIn?.includes("claude")?(s.claude=!0,r.push(H("claude","kept \u2014 the deployed Worker has the token (c to replace it)"))):r.push(H("claude","not connected \u2014 c for your Claude subscription, or k for an API key"));let a=$e(e,"codex"),c=a?void 0:await Ud(e);r.push(a?v("codex",`OPENAI_API_KEY ${D} (${lo(e,"codex")}) \u2014 a Worker secret`):c===!0?v("codex","logged in inside the container \u2014 its login is kept in R2 across restarts"):H("codex",c===!1?"not logged in inside the container \u2014 Deploy shows a link and a code (or k for an API key)":"logs in inside the container at Deploy \u2014 a link and a code (or k for an API key)")),s.cursor=$e(e,"cursor")!==void 0,r.push(s.cursor?v("cursor",`CURSOR_API_KEY ${D} (${lo(e,"cursor")}) \u2014 a Worker secret`):H("cursor","not connected \u2014 on Cloudflare cursor runs on an API key: k"));let i=n.answers.agentCli??(s.claude?"claude":"codex");r.push(s[i]?v("proof run",`uses ${i} (\u2191 \u2193 to change)`):_("proof run",`${i} is not connected`,"press c to connect it or k for its API key \u2014 or \u2191 \u2193 to another agent"),H("note","owner only: your subscriptions; teammates use them, never see them (moa setup login)"));let l=ue.filter(d=>s[d]&&(d!=="codex"||a!==void 0||c===!0));return{lines:r,answers:{agentCli:i,loggedIn:l,...po(r)?{loginsFor:"cloudflare"}:{}}}}function ki(e){let{sys:t,state:n,secrets:o}=e,r=Nd(e),s=t.env.LOCUSGRAPH_AGENT_SECRET,a=s?.trim(),c=o.locusgraph||(s!==void 0?a:r.LOCUSGRAPH_AGENT_SECRET?.trim()),i=o.locusgraph?"pasted in this run":a?"your environment":"apps/workspace/.env";return{...c?{secret:c,from:i}:{},graph:n.answers.locusgraphGraph||t.env.LOCUSGRAPH_GRAPH_ID?.trim()||r.LOCUSGRAPH_GRAPH_ID?.trim()||void 0,server:t.env.LOCUSGRAPH_SERVER_URL?.trim()||r.LOCUSGRAPH_SERVER_URL||za}}function xe(e){let{secret:t,from:n,graph:o,server:r}=ki(e);return t&&n&&o?{secret:t,from:n,graph:o,server:r}:void 0}function zr(e){let{secret:t,from:n,graph:o}=ki(e);if(t&&!o){let r=e.state.answers.tenant??Ie(e.state.answers.owner);return _("LocusGraph",`secret ${D} (${n}), but no graph ID`,e.state.deployed?.memoryKept?`press g to type the graph ID this secret belongs to \u2014 the last deploy used fnmoa-${r}`:"press g to type the graph ID this secret belongs to")}if(!t&&e.state.answers.locusgraphGraph)return _("LocusGraph",`graph ${e.state.answers.locusgraphGraph}, but no secret`,"press e to paste its agent secret \u2014 or g, then Enter on nothing, to go on without LocusGraph")}async function jd(e){let{sys:t,state:n}=e,o=xe(e),r=[],s=zr(e);if(s)r.push(s);else if(!o)r.push(un(e)?_("LocusGraph","the last deploy kept memory in LocusGraph, and this run has no secret for it","press e to paste it again \u2014 or e, then Enter on nothing, to let memory stay in the workspace process"):e.secrets.noLocusgraph&&n.deployed?.memoryKept?H("LocusGraph","no secret \u2014 memory will not be kept in LocusGraph; it stays in the workspace process"):H("LocusGraph","not connected \u2014 memory stays in the workspace process (g for the graph ID, e for its secret)"));else{let i=n.answers.tenant??Ie(n.answers.owner),l=await Cn(t,o,i),d=`secret ${D} (${o.from}), graph ${o.graph}`;r.push(l.read.ok&&l.write.ok?v("LocusGraph",`${d} \u2014 one graph read, one event written`):_("LocusGraph",`${d} \u2014 ${l.read.ok?`the write failed: ${l.write.why}`:`the read failed: ${l.read.why}`}`,"e to paste the secret again, or g to check the graph ID \u2014 then r"))}if(n.target==="cloudflare")return r.push(v("database",`D1 \u2014 ${ht} on your account, made at deploy; the container reaches it over HTTP`)),{lines:r,answers:{runner:"cloudflare"}};let a=n.answers.runner??"node";if(a==="node")return r.push(v("database",`SQLite, ${le(t,"workspace.db")} \u2014 migrated at deploy (\u2191 \u2193 for Postgres)`)),{lines:r,answers:{runner:a}};let c=await t.exec("docker",["info","--format","{{.ServerVersion}}"]);return r.push(c.ok?v("database","Postgres, with docker compose \u2014 migrated at deploy (\u2191 \u2193 for SQLite)"):_("database",c.missing?"docker is not installed":"docker is not running","start Docker, or \u2191 \u2193 to choose SQLite")),r.push(H("agent logins","in the container \u2014 Agent logins, next, carries them in and proves them")),{lines:r,answers:{runner:a}}}function He(e,t){try{let n=JSON.parse(e.read(Go(e,t))??"");if(n.clientSecret&&n.authSecret)return{clientSecret:n.clientSecret,authSecret:n.authSecret}}catch{}}function Vr(e){let{state:t,sys:n}=e,o=t.answers.owner,r=t.answers.tenant??Ie(o),s=t.answers.githubApp,a=[];s?t.target!=="vercel"&&(s.consoleUrl??Kr(t))!==jo(t)?a.push(_("GitHub App",`${s.slug} signs people in at ${s.consoleUrl??Kr(t)}, not ${jo(t)}`,"press g to create one for this console")):a.push(He(n,s)?v("GitHub App",`${s.slug} (id ${s.id}) \u2014 client secret ${D} kept beside setup`):_("GitHub App",`the client secret for ${s.slug} is not on this machine`,"press g to create a new app \u2014 GitHub shows a secret only once"),s.deviceFlow?v("device flow","on \u2014 teammates run `moa login <url> --github`"):{label:"device flow",mark:"wait",detail:`GitHub cannot switch it on for us: tick "Enable Device Flow" on ${s.settingsUrl}, Save, then press d`}):a.push(t.target==="local"?H("GitHub App","none \u2014 the console stays on localhost, never exposed (g to create one anyway)"):_("GitHub App","none yet \u2014 teammates sign in with it","press g: GitHub opens with the app filled in, and you click Create")),a.push(o?v("owner",`${o} (you)`):_("owner","no GitHub login yet","Esc back to GitHub"),v("tenant",`${r} (e to change)`),v("owner token",`${D} \u2014 made at deploy, kept in ~/.moa/config.json`));let c=t.answers.people??[];c.length===0&&a.push(H("people","only you \u2014 a to add a teammate"));for(let i of c)a.push(v(i.login,`${Gd(i.role)} \xB7 cap $${i.dailyCapUsd}/day \u2014 added at deploy`));return{lines:a,answers:{tenant:r}}}function Ln(e,t){if(t.runner!=="node")return t;let n=t.workspacePid;if(n!==void 0&&Lt(e,n,t.workspaceStarted,St(t.workspaceUrl)))return t;let[o="",r=""]=(e.read(Nr(e))??"").split(`
|
|
143
|
+
`),s=Number(o.trim()),a=r.trim();if(!Number.isSafeInteger(s)||s<=1||a===""||e.processOf(s)?.started!==a)return t;let c=St(t.workspaceUrl);if(c===void 0)return t;let i=e.portsOf(s);return i!==void 0&&!i.includes(c)?t:{...t,workspacePid:s,workspaceStarted:a}}var $e,lo,Oe,xd,Ad,Wt,Ut,Kr,jo,Ie,po,v,_,H,pe,uo,Jr,Rd,Nd,un,Go,Gd,le,Nr,Ho,qe=Te(()=>{"use strict";Ze();Zn();at();Ft();We();io();$e=(e,t)=>e.secrets.keys?.[t]?.trim()||e.sys.env[Se[t]]?.trim()||void 0,lo=(e,t)=>e.secrets.keys?.[t]?.trim()?"typed in this run":"your environment",Oe=({sys:e,state:t})=>!e.root||xn(t)==="image",xd=8787,Ad=3100,Wt=e=>e.answers.workspacePort??xd,Ut=e=>e.answers.consolePort??Ad,Kr=e=>`http://localhost:${Ut(e)}`,jo=e=>e.target==="vercel"&&e.answers.sandbox?e.answers.sandbox.consoleUrl:e.target==="cloudflare"&&e.answers.domain?Yn(e.answers.domain).consoleUrl:Kr(e),Ie=e=>(e??"").toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/^-+|-+$/g,"")||"local",po=e=>e.length>0&&e.every(t=>t.mark==="ok"||t.mark==="skip"),v=(e,t)=>({label:e,mark:"ok",...t?{detail:t}:{}}),_=(e,t,n)=>({label:e,mark:"fail",detail:t,fix:n}),H=(e,t)=>({label:e,mark:"skip",detail:t}),pe=e=>e.trim().split(`
|
|
144
|
+
`)[0]?.trim()??"",uo=e=>pe(e).match(/\d+(\.\d+)+/)?.[0]??pe(e);Jr=e=>e.deployed?.runner==="cloudflare";Rd=e=>e.answers.runner==="compose";Nd=e=>e.sys.root?Va(e.sys.read(Br(e.sys.root,"apps","workspace",".env"))):{};un=e=>e.state.deployed?.memoryKept===!0&&!e.secrets.noLocusgraph&&xe(e)===void 0;Go=(e,t)=>le(e,Ao(t));Gd=e=>`${e[0]?.toUpperCase()??""}${e.slice(1)}`;le=(e,t)=>Br(pt(e.env),"..","local",t),Nr=e=>le(e,"workspace.pid");Ho={where:e=>Cd(e.state,{platform:process.platform,env:e.sys.env}),checks:_d,github:Td,logins:Ld,memory:jd,access:Vr}});import{readFileSync as hp,realpathSync as wp}from"node:fs";import{fileURLToPath as kp}from"node:url";function gs(e){let t=[],n=new Map;for(let o=0;o<e.length;o++){let r=e[o];if(!r.startsWith("-")){t.push(r);continue}if(r==="--"){t.push(...e.slice(o+1));break}let s=r.indexOf("=");if(s!==-1){n.set(r.slice(0,s).replace(/^--?/,""),r.slice(s+1));continue}let a=r.replace(/^--?/,""),c=e[o+1];c!==void 0&&!c.startsWith("-")?(n.set(a,c),o+=1):n.set(a,!0)}return{positional:t,flags:n}}var P=(e,t)=>{let n=e.flags.get(t);return typeof n=="string"?n:void 0},C=(e,t)=>e.flags.has(t);function ce(e,t){let n=P(e,t);if(n===void 0)return;let o=Number(n);if(!Number.isFinite(o))throw new x(`--${t} must be a number`);return o}var x=class extends Error{constructor(t){super(t),this.name="Misuse"}};De();Ze();De();yn();var k={ok:0,failed:1,halted:2,misuse:3};function G(e,t=process.stdout,n=process.stderr){return{line(o){e||t.write(`${o}
|
|
143
145
|
`)},data(o){e&&t.write(`${JSON.stringify(o,null,2)}
|
|
144
146
|
`)},warn(o){n.write(`${o}
|
|
145
|
-
`)}}}function
|
|
146
|
-
`)}var We=(e,t)=>`${e.padEnd(10)}${t}`,z=(e,t=60)=>e.length>t?`${e.slice(0,t-1)}\u2026`:e,zo=e=>{let t=e.split(/\n\s*\n/).filter(n=>n.trim().length>0);return(t[t.length-1]??e).trim()};import{hostname as Yi}from"node:os";Ie();Ye();var Xi="usage: moa login <url> --token <token> or moa login <url> --github";async function cs(e,t=process.env,n={}){let o=S(e,"json"),r=G(o),s=e.flags.get("github"),a=e.positional[1]??(typeof s=="string"?s:void 0);if(!a)throw new $(Xi);if(s!==void 0&&e.flags.has("token"))throw new $("--token and --github are two ways in \u2014 use one");let i=a.replace(/\/+$/,""),c=n.fetch??fetch;if(s!==void 0){let w=await Qi(i,k=>o?r.warn(k):r.line(k),{...n,fetch:c}),b=await as(t,x(e,"profile"),{url:i,token:w.token}),g=w.role==="viewer"?", read-only: you may look and nothing else":"";return r.line(`logged in to ${i} as ${w.login}, ${w.role} on ${w.tenant} (profile ${b}${g})`),r.data({url:i,tenant:w.tenant,profile:b,login:w.login,role:w.role}),y.ok}let l=x(e,"token")??t.MOA_TOKEN;if(!l)throw new $("--token is required (or set MOA_TOKEN), or sign in with --github");let d={url:i,token:l},u=await D(d,c).get("/v1/whoami"),f=await as(t,x(e,"profile"),d),p=u.scope==="read"?", read-only: it may look and nothing else":"";return r.line(`logged in to ${d.url} as ${u.tenant} (profile ${f}${p})`),r.data({url:d.url,tenant:u.tenant,profile:f,...u.scope===void 0?{}:{scope:u.scope}}),0}async function as(e,t,n){let o=t??"default",r=await Pe(e);return r.profiles[o]=n,r.current=o,await it(r,e),o}var is=async e=>{let t=await e.text().catch(()=>"");try{return JSON.parse(t).error??t}catch{return t}};async function Qi(e,t,n){let o=n.sleep??(d=>new Promise(u=>setTimeout(u,d))),r=async(d,u)=>{try{return await n.fetch(`${e}${d}`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(u??{})})}catch(f){throw new bt(e,f)}},s=await r("/v1/access/device");if(!s.ok){let d=await is(s);throw new Error(s.status===503||s.status===404?`${e} has no GitHub sign-in${d?` (${d})`:""} \u2014 ask its owner to create the GitHub App in \`moa setup\`, or log in with --token`:`${e} would not start a GitHub sign-in: ${d||s.status}`)}let a=await s.json();t(`open ${a.verificationUri} and enter ${a.userCode}`),t("waiting for GitHub\u2026");let i=`${(n.hostname??Yi)()} cli`,c=Math.max(a.interval??5,1),l=(a.expiresIn??900)+30;for(;;){await o(c*1e3),l-=c;let d=await r("/v1/access/device/token",{deviceCode:a.deviceCode,name:i});if(d.status===201)return await d.json();if(d.status===202){let f=await d.json().catch(()=>({}));if(c=Math.max(c,f.interval??c),l<=0)throw new Error("the code expired before it was entered \u2014 run moa login again");continue}if(d.status===429){if(c=Math.min(c*2,60),l<=0)throw new Error("the code expired before it was entered \u2014 run moa login again");continue}let u=await is(d)||`the workspace said ${d.status}`;throw d.status===403?new re(403,`${u} \u2014 ask an owner to add your GitHub login on Access`):d.status===410?new re(410,`${u} \u2014 run moa login again for a new code`):new re(d.status,u)}}function Xe(e,t=new Date){if(!e)return;let n=Date.parse(e);if(Number.isNaN(n))return;let o=Math.max(0,Math.round((t.getTime()-n)/1e3));if(o<60)return`${o}s`;let r=Math.floor(o/60);if(r<60)return`${r}m`;let s=Math.floor(r/60);return s<24?`${s}h ${r%60}m`:`${Math.floor(s/24)}d ${s%24}h`}function Vo(e,t=new Date){if(!e)return;let n=Date.parse(e);if(!(Number.isNaN(n)||n<=t.getTime()))return Xe(t.toISOString(),new Date(n))}async function ls(e,t=process.env){let n=G(S(e,"json")),o=await ee(x(e,"profile"),t),r=await D(o).get("/v1/whoami"),s=r.scope==="read"?", read-only":"";return n.line(`${r.tenant} at ${o.url} (profile ${o.name}${s})`),n.data({tenant:r.tenant,url:o.url,profile:o.name,...r.scope===void 0?{}:{scope:r.scope}}),0}async function ds(e,t=process.env){let n=G(S(e,"json")),o=e.positional[1]??x(e,"url"),r=o?{url:o,token:""}:await ee(x(e,"profile"),t);try{let s=await D(r).get("/health"),a=Xe(s.startedAt);return n.line(`${r.url} ${s.ok?"ok":"not ok"} (${s.database}, v${s.version}${a?`, up ${a}`:""})`),n.data(s),s.ok?y.ok:y.failed}catch(s){if(s instanceof re&&s.status===503)return n.warn(`moa: ${r.url} is up and cannot work \u2014 ${s.message}`),n.data({ok:!1,url:r.url,status:503,error:s.message}),y.failed;throw s}}function Zi(e,t,n){let o=e.missingTools??[],r=t.filter(s=>s.installed===!1).map(s=>s.cli);return[{name:"this token",ok:n!=="read",detail:n==="read"?"read-only: it may look, and every run, message and grant is refused":`${e.tenant}, and it may start work`},{name:"runs agents",ok:e.runsAgents,detail:e.runsAgents?`${e.database}, v${e.version}${Xe(e.startedAt)?`, up ${Xe(e.startedAt)}`:""}`:"a Worker: it serves the store, and the runs belong to the container beside it"},{name:"last restart",ok:!0,detail:(()=>{let s=Xe(e.restart?.at??e.startedAt),a=e.restart?.cutShort??0;return s?a===0?`${s} ago, and nothing was cut short by it`:`${s} ago; ${a} run${a===1?"":"s"} did not survive it`:"this workspace has not said when it started"})()},{name:"seat capacity",ok:!t.every(s=>s.full===!0),detail:(()=>{let s=t.filter(a=>a.full===!0).map(a=>a.cli);return s.length===0?"room on every seat":s.length===t.length?"every seat is spent \u2014 nothing runs until a window resets":`${s.join(", ")} spent; room on the rest`})()},{name:"whose login",ok:!0,detail:t.length===0?"no seats: this tenant cannot run anything":t.every(s=>s.hasCredential)?"your own credential on every CLI":t.some(s=>s.hasCredential)?`your own on ${t.filter(s=>s.hasCredential===!0).map(s=>s.cli).join(", ")}; the machine's login on the rest`:"the machine's login, shared with every tenant on this workspace"},{name:"run ceiling",ok:!0,detail:e.runTimeoutMinutes===void 0?"this workspace does not say":e.runTimeoutMinutes===0?"no cap: a run that hangs holds its agent until somebody stops it":`a run is stopped after ${e.runTimeoutMinutes} minute(s)`},{name:"agent CLIs",ok:r.length<t.length,detail:(()=>{let s=t.filter(a=>a.installed!==!1).map(a=>a.cli);return r.length===0?s.join(", "):s.length===0?`none: missing ${r.join(", ")}`:`${s.join(", ")} \u2014 missing ${r.join(", ")}`})()},...e.agentBudget?[{name:"agent budget",ok:e.agentBudget.ok,detail:e.agentBudget.ok?`$${e.agentBudget.spentUsd.toFixed(4)} of today's $${e.agentBudget.limitUsd.toFixed(2)} spent asking each other`:e.agentBudget.reason??"today's budget is spent"}]:[],...e.agentTools?[{name:"agent tools",ok:e.agentTools.reachable,detail:e.agentTools.reachable?`${e.agentTools.tools?.length??0} at ${e.agentTools.url}`+(e.agentTools.unwired.length>0?` \u2014 not on ${e.agentTools.unwired.join(", ")}`:""):`${e.agentTools.url}: ${e.agentTools.problem??"no answer"}`}]:[],{name:"repository",ok:!!e.repo,detail:e.repo??"none configured \u2014 pipelines need MOA_REPO"},{name:"checkout",ok:e.hasCheckout,detail:e.checkoutProblem??"a git checkout the pipeline can work in"},{name:"git and gh",ok:o.length===0,detail:o.length===0?"both on its PATH":`missing ${o.join(", ")}`},{name:"github login",ok:e.githubAuthenticated!==!1,detail:e.githubAuthenticated===!1?"gh has no token there \u2014 run `gh auth login` where the workspace runs":"gh has a token"}]}async function us(e,t=process.env){let n=G(S(e,"json")),o=D(await ee(x(e,"profile"),t)),[r,s,a]=await Promise.all([o.get("/v1/workspace"),o.get("/v1/seats"),o.get("/v1/whoami").catch(()=>({scope:void 0}))]),i=Zi(r,s.seats.map(l=>({...l,full:l.limit!==void 0&&(l.used??0)>=l.limit})),a.scope);for(let l of i)n.line(`${l.ok?"ok ":"NO "}${l.name.padEnd(14)}${l.detail}`);let c=i.filter(l=>!l.ok);return n.data({tenant:r.tenant,checks:i}),c.length===0?y.ok:y.halted}async function ps(e,t=process.env){let n=G(S(e,"json")),o=D(await ee(x(e,"profile"),t)),{seats:r}=await o.get("/v1/seats");if(r.length===0)return n.warn("no seats \u2014 this tenant cannot run anything"),n.data({seats:[]}),1;for(let s of r){let a=s.limit?`${s.used}/${s.limit}`:`${s.used}`,i=Vo(s.resetsAt),c=s.limit!==void 0&&s.used>=s.limit,l=s.resetsAt?`${c?" \xB7 full":""}, resets${i?` in ${i}`:" shortly"}`:"",d=s.installed===!1?" \xB7 not installed":"";n.line(`${s.cli.padEnd(8)} ${a.padEnd(8)} ${ec(s)}${l}${d}`)}return n.data({seats:r}),0}var ec=e=>e.hasCredential?"your own credential":"the machine's login, shared with every tenant here";async function fs(e,t=process.env){let n=G(S(e,"json")),o=await Pe(t),r=Object.keys(o.profiles);r.length===0&&n.line("no workspace yet \u2014 run `moa login <url> --token <token>`");for(let s of r)n.line(`${s===o.current?"*":" "} ${s} ${o.profiles[s]?.url}`);return n.data({current:o.current,profiles:r.map(s=>({name:s,url:o.profiles[s]?.url}))}),0}async function ms(e,t=process.env){let n=G(S(e,"json")),o=await Pe(t),r=e.positional[1]??o.current;if(!o.profiles[r]){let a=Object.keys(o.profiles);throw new $(a.length===0?"no workspace is saved":`no profile named ${r} \u2014 there is ${a.join(", ")}`)}delete o.profiles[r];let s=Object.keys(o.profiles);return o.current===r&&(o.current=s[0]??"default"),await it(o,t),n.data({forgot:r,current:o.current,profiles:s}),n.line(`forgot ${r} \u2014 its token is no longer on this machine`),s.length===0?n.line("no workspace left \u2014 `moa login <url> --token <token>`"):r!==o.current?n.line(`now using ${o.current}`):n.line(`now using ${o.current}`),y.ok}async function gs(e,t=process.env){let n=e.positional[1];if(!n)throw new $("usage: moa use <profile>");let o=G(S(e,"json")),r=await Pe(t),s=r.profiles[n];if(!s){let i=Object.keys(r.profiles);throw new $(i.length===0?`no profile named ${n} \u2014 run \`moa login <url> --token <token>\` first`:`no profile named ${n} \u2014 there is ${i.join(", ")}`)}r.current=n,await it(r,t);let a=await D(s).get("/v1/whoami").catch(()=>{});return o.line(`now using ${n} \u2014 ${s.url}${a?` as ${a.tenant}`:""}`),o.data({profile:n,url:s.url,...a?{tenant:a.tenant}:{}}),y.ok}function tc(e,t=new Date){let n=/^(\d+)([hd])$/.exec(e.trim());if(!n?.[1])return e;let o=Number(n[1])*(n[2]==="d"?24:1);return new Date(t.getTime()-o*36e5).toISOString()}async function hs(e,t=process.env){let n=G(S(e,"json")),o=D(await ee(x(e,"profile"),t)),r=x(e,"since"),s=r===void 0?void 0:tc(r),a=s===void 0?"/v1/spend":`/v1/spend?since=${encodeURIComponent(s)}`,[i,c]=await Promise.all([o.get(a),o.get("/v1/workspace").catch(()=>{})]);n.data({...i,...c?.agentBudget?{agentBudget:c.agentBudget}:{}});let l=d=>`$${d.toFixed(4)}`;if(n.line(`${l(i.costUsd)} over ${i.runs} ${i.runs===1?"run":"runs"}`+(s===void 0?"":`, since ${s}`)),n.line("notional \u2014 what the CLIs reported, not a bill"),c?.agentBudget){let d=c.agentBudget;n.line(d.ok?`today, agents have spent $${d.spentUsd.toFixed(4)} of $${d.limitUsd.toFixed(2)} asking each other`:`agents are at today's ceiling: $${d.spentUsd.toFixed(4)} of $${d.limitUsd.toFixed(2)} \u2014 calls are refused until UTC midnight`)}return i.runs===0?y.ok:(n.line(""),n.line(he([["AGENT","RUNS","COST"],...i.byAgent.map(d=>[d.agent,String(d.runs),l(d.costUsd)])])),n.line(""),n.line(he([["WHAT ASKED","RUNS","COST"],...i.byCause.map(d=>[d.cause,String(d.runs),l(d.costUsd)])])),y.ok)}async function ks(e,t=process.env){let n=e.positional[1],o=D(await ee(x(e,"profile"),t)),r=G(S(e,"json"));switch(n){case"create":return nc(o,e,r);case"list":case"ls":return oc(o,r);case"show":return rc(o,e,r);case"role":return sc(o,e,r);case"grant":return ws(o,e,r,"grant");case"revoke":return ws(o,e,r,"revoke");case"rm":case"remove":return ac(o,e,r);default:throw new $(`usage: moa agent <create|list|show|role|grant|revoke|rm> \u2026
|
|
147
|
-
moa agent create reviewer --cli codex --role "\u2026" --peers builder,planner`)}}async function
|
|
147
|
+
`)}}}function bs(e){if(e instanceof x)return{message:e.message,code:k.misuse};if(e instanceof zn)return{message:e.message,code:k.halted};if(e instanceof ae){let t=e.status>=500&&e.requestId?` (request ${e.requestId})`:"";if(e.status===503)return{message:`the workspace is up and cannot work \u2014 ${e.message}. Look at the database it was started with, not the process.${t}`,code:k.failed};if(e.status===429)return{message:e.message,code:k.halted};let n=e.status===401||e.status===403||e.status===400?k.misuse:k.failed;return{message:`${e.message}${t}`,code:n}}return{message:e instanceof Error?e.message:String(e),code:k.failed}}function be(e){if(e.length===0)return"";let t=[];for(let n of e)n.forEach((o,r)=>{t[r]=Math.max(t[r]??0,o.length)});return e.map(n=>n.map((o,r)=>r===n.length-1?o:o.padEnd(t[r]??0)).join(" ").trimEnd()).join(`
|
|
148
|
+
`)}var et=(e,t)=>`${e.padEnd(10)}${t}`,Y=(e,t=60)=>e.length>t?`${e.slice(0,t-1)}\u2026`:e,ar=e=>{let t=e.split(/\n\s*\n/).filter(n=>n.trim().length>0);return(t[t.length-1]??e).trim()};import{hostname as yc}from"node:os";De();Ze();var bc="usage: moa login <url> --token <token> or moa login <url> --github";async function Ss(e,t=process.env,n={}){let o=C(e,"json"),r=G(o),s=e.flags.get("github"),a=e.positional[1]??(typeof s=="string"?s:void 0);if(!a)throw new x(bc);if(s!==void 0&&e.flags.has("token"))throw new x("--token and --github are two ways in \u2014 use one");let c=a.replace(/\/+$/,""),i=n.fetch??fetch;if(s!==void 0){let y=await $c(c,h=>o?r.warn(h):r.line(h),{...n,fetch:i}),$=await $s(t,P(e,"profile"),{url:c,token:y.token}),m=y.role==="viewer"?", read-only: you may look and nothing else":"";return r.line(`logged in to ${c} as ${y.login}, ${y.role} on ${y.tenant} (profile ${$}${m})`),r.data({url:c,tenant:y.tenant,profile:$,login:y.login,role:y.role}),k.ok}let l=P(e,"token")??t.MOA_TOKEN;if(!l)throw new x("--token is required (or set MOA_TOKEN), or sign in with --github");let d={url:c,token:l},u=await U(d,i).get("/v1/whoami"),f=await $s(t,P(e,"profile"),d),p=u.scope==="read"?", read-only: it may look and nothing else":"";return r.line(`logged in to ${d.url} as ${u.tenant} (profile ${f}${p})`),r.data({url:d.url,tenant:u.tenant,profile:f,...u.scope===void 0?{}:{scope:u.scope}}),0}async function $s(e,t,n){let o=t??"default",r=await ve(e);return r.profiles[o]=n,r.current=o,await gt(r,e),o}var vs=async e=>{let t=await e.text().catch(()=>"");try{return JSON.parse(t).error??t}catch{return t}};async function $c(e,t,n){let o=n.sleep??(d=>new Promise(u=>setTimeout(u,d))),r=async(d,u)=>{try{return await n.fetch(`${e}${d}`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(u??{})})}catch(f){throw new Pt(e,f)}},s=await r("/v1/access/device");if(!s.ok){let d=await vs(s);throw new Error(s.status===503||s.status===404?`${e} has no GitHub sign-in${d?` (${d})`:""} \u2014 ask its owner to create the GitHub App in \`moa setup\`, or log in with --token`:`${e} would not start a GitHub sign-in: ${d||s.status}`)}let a=await s.json();t(`open ${a.verificationUri} and enter ${a.userCode}`),t("waiting for GitHub\u2026");let c=`${(n.hostname??yc)()} cli`,i=Math.max(a.interval??5,1),l=(a.expiresIn??900)+30;for(;;){await o(i*1e3),l-=i;let d=await r("/v1/access/device/token",{deviceCode:a.deviceCode,name:c});if(d.status===201)return await d.json();if(d.status===202){let f=await d.json().catch(()=>({}));if(i=Math.max(i,f.interval??i),l<=0)throw new Error("the code expired before it was entered \u2014 run moa login again");continue}if(d.status===429){if(i=Math.min(i*2,60),l<=0)throw new Error("the code expired before it was entered \u2014 run moa login again");continue}let u=await vs(d)||`the workspace said ${d.status}`;throw d.status===403?new ae(403,`${u} \u2014 ask an owner to add your GitHub login on Access`):d.status===410?new ae(410,`${u} \u2014 run moa login again for a new code`):new ae(d.status,u)}}function ot(e,t=new Date){if(!e)return;let n=Date.parse(e);if(Number.isNaN(n))return;let o=Math.max(0,Math.round((t.getTime()-n)/1e3));if(o<60)return`${o}s`;let r=Math.floor(o/60);if(r<60)return`${r}m`;let s=Math.floor(r/60);return s<24?`${s}h ${r%60}m`:`${Math.floor(s/24)}d ${s%24}h`}function ir(e,t=new Date){if(!e)return;let n=Date.parse(e);if(!(Number.isNaN(n)||n<=t.getTime()))return ot(t.toISOString(),new Date(n))}async function xs(e,t=process.env){let n=G(C(e,"json")),o=await ee(P(e,"profile"),t),r=await U(o).get("/v1/whoami"),s=r.scope==="read"?", read-only":"";return n.line(`${r.tenant} at ${o.url} (profile ${o.name}${s})`),n.data({tenant:r.tenant,url:o.url,profile:o.name,...r.scope===void 0?{}:{scope:r.scope}}),0}async function As(e,t=process.env){let n=G(C(e,"json")),o=e.positional[1]??P(e,"url"),r=o?{url:o,token:""}:await ee(P(e,"profile"),t);try{let s=await U(r).get("/health"),a=ot(s.startedAt);return n.line(`${r.url} ${s.ok?"ok":"not ok"} (${s.database}, v${s.version}${a?`, up ${a}`:""})`),n.data(s),s.ok?k.ok:k.failed}catch(s){if(s instanceof ae&&s.status===503)return n.warn(`moa: ${r.url} is up and cannot work \u2014 ${s.message}`),n.data({ok:!1,url:r.url,status:503,error:s.message}),k.failed;throw s}}function vc(e,t,n){let o=e.missingTools??[],r=t.filter(s=>s.installed===!1).map(s=>s.cli);return[{name:"this token",ok:n!=="read",detail:n==="read"?"read-only: it may look, and every run, message and grant is refused":`${e.tenant}, and it may start work`},{name:"runs agents",ok:e.runsAgents,detail:e.runsAgents?`${e.database}, v${e.version}${ot(e.startedAt)?`, up ${ot(e.startedAt)}`:""}`:"a Worker: it serves the store, and the runs belong to the container beside it"},{name:"last restart",ok:!0,detail:(()=>{let s=ot(e.restart?.at??e.startedAt),a=e.restart?.cutShort??0;return s?a===0?`${s} ago, and nothing was cut short by it`:`${s} ago; ${a} run${a===1?"":"s"} did not survive it`:"this workspace has not said when it started"})()},{name:"seat capacity",ok:!t.every(s=>s.full===!0),detail:(()=>{let s=t.filter(a=>a.full===!0).map(a=>a.cli);return s.length===0?"room on every seat":s.length===t.length?"every seat is spent \u2014 nothing runs until a window resets":`${s.join(", ")} spent; room on the rest`})()},{name:"whose login",ok:!0,detail:t.length===0?"no seats: this tenant cannot run anything":t.every(s=>s.hasCredential)?"your own credential on every CLI":t.some(s=>s.hasCredential)?`your own on ${t.filter(s=>s.hasCredential===!0).map(s=>s.cli).join(", ")}; the machine's login on the rest`:"the machine's login, shared with every tenant on this workspace"},{name:"run ceiling",ok:!0,detail:e.runTimeoutMinutes===void 0?"this workspace does not say":e.runTimeoutMinutes===0?"no cap: a run that hangs holds its agent until somebody stops it":`a run is stopped after ${e.runTimeoutMinutes} minute(s)`},{name:"agent CLIs",ok:r.length<t.length,detail:(()=>{let s=t.filter(a=>a.installed!==!1).map(a=>a.cli);return r.length===0?s.join(", "):s.length===0?`none: missing ${r.join(", ")}`:`${s.join(", ")} \u2014 missing ${r.join(", ")}`})()},...e.agentBudget?[{name:"agent budget",ok:e.agentBudget.ok,detail:e.agentBudget.ok?`$${e.agentBudget.spentUsd.toFixed(4)} of today's $${e.agentBudget.limitUsd.toFixed(2)} spent asking each other`:e.agentBudget.reason??"today's budget is spent"}]:[],...e.agentTools?[{name:"agent tools",ok:e.agentTools.reachable,detail:e.agentTools.reachable?`${e.agentTools.tools?.length??0} at ${e.agentTools.url}`+(e.agentTools.unwired.length>0?` \u2014 not on ${e.agentTools.unwired.join(", ")}`:""):`${e.agentTools.url}: ${e.agentTools.problem??"no answer"}`}]:[],{name:"repository",ok:!!e.repo,detail:e.repo??"none configured \u2014 pipelines need MOA_REPO"},{name:"checkout",ok:e.hasCheckout,detail:e.checkoutProblem??"a git checkout the pipeline can work in"},{name:"git and gh",ok:o.length===0,detail:o.length===0?"both on its PATH":`missing ${o.join(", ")}`},{name:"github login",ok:e.githubAuthenticated!==!1,detail:e.githubAuthenticated===!1?"gh has no token there \u2014 run `gh auth login` where the workspace runs":"gh has a token"}]}async function Es(e,t=process.env){let n=G(C(e,"json")),o=U(await ee(P(e,"profile"),t)),[r,s,a]=await Promise.all([o.get("/v1/workspace"),o.get("/v1/seats"),o.get("/v1/whoami").catch(()=>({scope:void 0}))]),c=vc(r,s.seats.map(l=>({...l,full:l.limit!==void 0&&(l.used??0)>=l.limit})),a.scope);for(let l of c)n.line(`${l.ok?"ok ":"NO "}${l.name.padEnd(14)}${l.detail}`);let i=c.filter(l=>!l.ok);return n.data({tenant:r.tenant,checks:c}),i.length===0?k.ok:k.halted}async function Cs(e,t=process.env){let n=G(C(e,"json")),o=U(await ee(P(e,"profile"),t)),{seats:r}=await o.get("/v1/seats");if(r.length===0)return n.warn("no seats \u2014 this tenant cannot run anything"),n.data({seats:[]}),1;for(let s of r){let a=s.limit?`${s.used}/${s.limit}`:`${s.used}`,c=ir(s.resetsAt),i=s.limit!==void 0&&s.used>=s.limit,l=s.resetsAt?`${i?" \xB7 full":""}, resets${c?` in ${c}`:" shortly"}`:"",d=s.installed===!1?" \xB7 not installed":"";n.line(`${s.cli.padEnd(8)} ${a.padEnd(8)} ${Sc(s)}${l}${d}`)}return n.data({seats:r}),0}var Sc=e=>e.hasCredential?"your own credential":"the machine's login, shared with every tenant here";async function Ps(e,t=process.env){let n=G(C(e,"json")),o=await ve(t),r=Object.keys(o.profiles);r.length===0&&n.line("no workspace yet \u2014 run `moa login <url> --token <token>`");for(let s of r)n.line(`${s===o.current?"*":" "} ${s} ${o.profiles[s]?.url}`);return n.data({current:o.current,profiles:r.map(s=>({name:s,url:o.profiles[s]?.url}))}),0}async function _s(e,t=process.env){let n=G(C(e,"json")),o=await ve(t),r=e.positional[1]??o.current;if(!o.profiles[r]){let a=Object.keys(o.profiles);throw new x(a.length===0?"no workspace is saved":`no profile named ${r} \u2014 there is ${a.join(", ")}`)}delete o.profiles[r];let s=Object.keys(o.profiles);return o.current===r&&(o.current=s[0]??"default"),await gt(o,t),n.data({forgot:r,current:o.current,profiles:s}),n.line(`forgot ${r} \u2014 its token is no longer on this machine`),s.length===0?n.line("no workspace left \u2014 `moa login <url> --token <token>`"):r!==o.current?n.line(`now using ${o.current}`):n.line(`now using ${o.current}`),k.ok}async function Ts(e,t=process.env){let n=e.positional[1];if(!n)throw new x("usage: moa use <profile>");let o=G(C(e,"json")),r=await ve(t),s=r.profiles[n];if(!s){let c=Object.keys(r.profiles);throw new x(c.length===0?`no profile named ${n} \u2014 run \`moa login <url> --token <token>\` first`:`no profile named ${n} \u2014 there is ${c.join(", ")}`)}r.current=n,await gt(r,t);let a=await U(s).get("/v1/whoami").catch(()=>{});return o.line(`now using ${n} \u2014 ${s.url}${a?` as ${a.tenant}`:""}`),o.data({profile:n,url:s.url,...a?{tenant:a.tenant}:{}}),k.ok}function xc(e,t=new Date){let n=/^(\d+)([hd])$/.exec(e.trim());if(!n?.[1])return e;let o=Number(n[1])*(n[2]==="d"?24:1);return new Date(t.getTime()-o*36e5).toISOString()}async function Os(e,t=process.env){let n=G(C(e,"json")),o=U(await ee(P(e,"profile"),t)),r=P(e,"since"),s=r===void 0?void 0:xc(r),a=s===void 0?"/v1/spend":`/v1/spend?since=${encodeURIComponent(s)}`,[c,i]=await Promise.all([o.get(a),o.get("/v1/workspace").catch(()=>{})]);n.data({...c,...i?.agentBudget?{agentBudget:i.agentBudget}:{}});let l=d=>`$${d.toFixed(4)}`;if(n.line(`${l(c.costUsd)} over ${c.runs} ${c.runs===1?"run":"runs"}`+(s===void 0?"":`, since ${s}`)),n.line("notional \u2014 what the CLIs reported, not a bill"),i?.agentBudget){let d=i.agentBudget;n.line(d.ok?`today, agents have spent $${d.spentUsd.toFixed(4)} of $${d.limitUsd.toFixed(2)} asking each other`:`agents are at today's ceiling: $${d.spentUsd.toFixed(4)} of $${d.limitUsd.toFixed(2)} \u2014 calls are refused until UTC midnight`)}return c.runs===0?k.ok:(n.line(""),n.line(be([["AGENT","RUNS","COST"],...c.byAgent.map(d=>[d.agent,String(d.runs),l(d.costUsd)])])),n.line(""),n.line(be([["WHAT ASKED","RUNS","COST"],...c.byCause.map(d=>[d.cause,String(d.runs),l(d.costUsd)])])),k.ok)}async function Rs(e,t=process.env){let n=e.positional[1],o=U(await ee(P(e,"profile"),t)),r=G(C(e,"json"));switch(n){case"create":return Ac(o,e,r);case"list":case"ls":return Ec(o,r);case"show":return Cc(o,e,r);case"role":return Pc(o,e,r);case"grant":return Is(o,e,r,"grant");case"revoke":return Is(o,e,r,"revoke");case"rm":case"remove":return _c(o,e,r);default:throw new x(`usage: moa agent <create|list|show|role|grant|revoke|rm> \u2026
|
|
149
|
+
moa agent create reviewer --cli codex --role "\u2026" --peers builder,planner`)}}async function Ac(e,t,n){let o=t.positional[2],r=P(t,"cli");if(!o)throw new x("usage: moa agent create <name> --cli <cli> [--role \u2026] [--peers a,b]");if(!r)throw new x("--cli is required (claude, codex, cursor, amp, gemini, crush)");let s=(P(t,"peers")??"").split(",").map(c=>c.trim()).filter(Boolean),a=await e.post("/v1/agents",{name:o,cli:r,...P(t,"role")===void 0?{}:{role:P(t,"role")},...s.length===0?{}:{peers:s}});return n.line(`created ${a.name} (${a.cli})`),s.length>0&&n.line(` may open a thread with: ${s.join(", ")}`),n.data(a),0}async function Ec(e,t){let[{agents:n},o]=await Promise.all([e.get("/v1/agents"),e.get("/v1/mail").catch(()=>{})]),r=new Map((o?.waiting??[]).map(s=>[s.to,s]));return n.length===0?t.line("no agents yet \u2014 moa agent create <name> --cli claude"):t.line(be([["NAME","CLI","STATUS","MAIL","ROLE"],...n.map(s=>{let a=r.get(s.name);return[s.name,s.cli,s.status,a?`${a.unread} \xB7${ot(a.oldest)??"?"}`:"\u2014",Y(s.role??"\u2014",40)]})])),t.data({agents:n,waiting:o?.waiting??[]}),0}async function Cc(e,t,n){let o=t.positional[2];if(!o)throw new x("usage: moa agent show <name>");let[r,s]=await Promise.all([e.get(`/v1/agents/${o}`),e.get(`/v1/agents/${o}/history`)]);n.line(et("name",r.name)),n.line(et("cli",r.cli)),n.line(et("status",r.status)),n.line(et("role",r.role??"\u2014"));let a=s.peers.filter(i=>!i.revokedAt).map(i=>i.to),c=s.peers.filter(i=>i.revokedAt).map(i=>`${i.to} (revoked)`);return n.line(et("peers",[...a,...c].join(", ")||"\u2014")),s.history.length>0&&(n.line(""),n.line(be(s.history.map(i=>[i.at.slice(0,19).replace("T"," "),i.kind,i.actor,Y(i.detail??"",40)])))),n.data({agent:r,...s}),0}async function Pc(e,t,n){let o=t.positional[2],r=t.positional[3]??P(t,"role");if(!o||!r)throw new x('usage: moa agent role <name> "what it is for"');let s=await e.patch(`/v1/agents/${o}`,{role:r});return n.line(`${s.name} is now: ${Y(s.role??"",60)}`),n.data(s),0}async function Is(e,t,n,o){let r=t.positional[2],s=t.positional[3];if(!r||!s)throw new x(`usage: moa agent ${o} <from> <to>`);return o==="grant"?(await e.post(`/v1/agents/${r}/peers`,{to:s}),n.line(`${r} may now open a thread with ${s}`)):(await e.del(`/v1/agents/${r}/peers/${s}`),n.line(`${r} may no longer open a thread with ${s}`)),n.data({from:r,to:s,granted:o==="grant"}),0}async function _c(e,t,n){let o=t.positional[2];if(!o)throw new x("usage: moa agent rm <name>");return await e.del(`/v1/agents/${o}`),n.line(`released ${o}'s workspace \u2014 its runs, mail and edges remain`),n.data({released:o}),0}async function Ls(e,t=process.env){let n=U(await ee(P(e,"profile"),t)),o=G(C(e,"json")),r=C(e,"all"),{peers:s}=await n.get("/v1/peers"),a=r?s:s.filter(i=>!i.revokedAt);if(o.data({peers:a}),a.length===0)return o.line(r?"no edges have ever been granted":"no edges \u2014 mail bounces, and only a team loop's own replies move"),k.ok;let c=new Set(s.filter(i=>!i.revokedAt).map(i=>`${i.from}\0${i.to}`));return o.line(be([["FROM","TO","GRANTED","BY","NOTE"],...a.map(i=>[i.from,i.to,i.grantedAt.slice(0,19).replace("T"," "),i.grantedBy,i.revokedAt?`revoked ${i.revokedAt.slice(0,19).replace("T"," ")}`:c.has(`${i.to}\0${i.from}`)?"":"one way"])])),k.ok}De();Ze();var jt=async(e,t)=>U(await ee(P(e,"profile"),t)),cr="mesh";function Ds(e){let t=/^(\S+) may not open a thread with (.+)$/.exec(e);return t?.[1]&&t[2]?{say:"Nobody granted that edge:",run:t[2].split(",").map(n=>`moa agent grant ${t[1]} ${n.trim()}`)}:/^fanout of \d+ exceeds/.test(e)?{say:"Too many recipients at once. Send to fewer, or send twice.",run:[]}:/^body of \d+ exceeds/.test(e)?{say:"The message is too long for the bus. Say less, or link to it.",run:[]}:/hit maxHops/.test(e)?{say:"This conversation is over its budget. Start a new thread.",run:[]}:/exceeds maxDepth/.test(e)?{say:"Delegations are nested too deep. Hand this one back up.",run:[]}:/cannot address itself/.test(e)?{say:"An agent cannot send itself mail. Give it work instead.",run:[]}:e==="no recipient"?{say:"Nobody was named.",run:[]}:{say:"The bus refused it. Nothing was delivered.",run:[]}}function yo(e){if(e.from===cr)return/^undelivered:\s*(.+)$/s.exec(e.body)?.[1]?.trim()}async function Us(e,t=process.env){let[,n,o,r]=e.positional;if(!n||!o||!r)throw new x('usage: moa send <from> <a,b,c> "<body>"');let s=o.split(",").map(i=>i.trim()).filter(Boolean);if(s.length===0)throw new x("name at least one recipient");let a=G(C(e,"json")),c=await(await jt(e,t)).post("/v1/messages",{from:n,to:s.length===1?s[0]:s,body:r,...P(e,"thread")===void 0?{}:{thread:P(e,"thread")}});return lr(c,a,`${n} \u2192 ${s.join(", ")}`)}async function Ms(e,t=process.env){let n=e.positional[1];if(!n)return Tc(e,t);let o=G(C(e,"json")),{messages:r}=await(await jt(e,t)).get(`/v1/agents/${n}/inbox`);if(r.length===0)o.line(`${n} has no unread mail`);else{o.line(be([["FROM","KIND","BODY"],...r.map(s=>{let a=yo(s);return[s.from,a?"undelivered":s.kind??"status",Y(bn(a??s.body),60)]})]));for(let s of r){let a=yo(s);if(!a)continue;let c=Ds(a);o.line(""),o.line(c.say);for(let i of c.run)o.line(` ${i}`)}}return o.data({messages:r}),0}async function Tc(e,t){let n=G(C(e,"json")),{waiting:o}=await(await jt(e,t)).get("/v1/mail");return n.data({waiting:o}),o.length===0?(n.line("nobody has unread mail"),k.ok):(n.line(be([["AGENT","UNREAD","WAITING","FROM"],...o.map(r=>[r.to,String(r.unread),ot(r.oldest)??"\u2014",r.from])])),o.some(r=>r.from===cr)&&(n.line(""),n.line(`${cr} is the bus: that mail never arrived. moa inbox <name> says why.`)),k.ok)}async function Ns(e,t=process.env){let n=e.positional[1];if(!n)throw new x("usage: moa mail <name> [--limit n]");let o=G(C(e,"json")),r=ce(e,"limit")??20,{messages:s}=await(await jt(e,t)).get(`/v1/agents/${n}/messages?limit=${r}`);return o.data({messages:s}),s.length===0?(o.line(`nothing has been said to ${n} yet`),k.ok):(o.line(be([["WHEN","WITH","KIND","BODY"],...s.map(a=>[a.createdAt.slice(0,19).replace("T"," "),a.from===n?`\u2192 ${a.to}`:`\u2190 ${a.from}`,(yo(a)?"undelivered":a.kind??"status")+(a.deliveredAt?"":" \xB7unread"),Y(bn(yo(a)??a.body),56)])])),k.ok)}async function js(e,t=process.env){let[,n,o,r]=e.positional;if(!n||!o||!r)throw new x('usage: moa delegate <from> <to> "<task>"');let s=G(C(e,"json")),a=await(await jt(e,t)).post("/v1/delegations",{from:n,to:o,task:r,...P(e,"parent")===void 0?{}:{parent:P(e,"parent")}});return a.delivered?(s.line(`${n} handed "${Y(r,50)}" to ${o}`),s.line(` thread ${a.thread}`),s.line(` ${n} answers for it until ${o} says done`),s.data(a),k.ok):lr(a,s,`${n} \u2192 ${o}`)}async function Gs(e,t=process.env){let n=G(C(e,"json")),o=await(await jt(e,t)).get("/v1/delegations"),r=C(e,"blocked")?o.delegations.filter(s=>s.blockedBy):o.delegations;if(r.length===0)n.line(C(e,"blocked")?"nothing is blocked":"nothing is open");else{n.line(be([["FROM","TO","STATE","TASK"],...r.map(s=>[s.from,s.to,s.blockedBy?"BLOCKED":"open",Y(bn(s.task),44)])]));for(let s of r.filter(a=>a.blockedBy))n.line(""),n.line(`${s.to} is waiting on an answer:`),n.line(` "${Y(bn(s.blockedBy?.body??""),70)}"`),n.line(` moa reply ${s.thread} ${s.from} --kind answer "\u2026"`)}return n.data(o),0}async function Hs(e,t=process.env){let n=e.positional[1];if(!n)throw new x("usage: moa thread <thread>");let o=G(C(e,"json")),r=await(await jt(e,t)).get(`/v1/delegations/${n}`),{delegation:s}=r;if(o.line(et("task",Y(bn(s.task),60))),o.line(et("from",s.from)),o.line(et("to",s.to)),o.line(et("state",s.closedAt?"closed":s.blockedBy?"BLOCKED":"open")),s.hops!==void 0&&s.maxHops!==void 0){let a=s.hops>=s.maxHops;o.line(et("hops",a?`${s.hops}/${s.maxHops} \u2014 spent, nothing more can be said in it`:`${s.hops}/${s.maxHops}`))}if(s.depth!==void 0&&s.maxDepth!==void 0){let a=s.depth>=s.maxDepth;o.line(et("depth",a?`${s.depth}/${s.maxDepth} \u2014 it cannot be handed on again`:`${s.depth}/${s.maxDepth}`))}o.line("");for(let a of r.messages)o.line(`${a.from} \xB7 ${a.kind??"status"}`),o.line(` ${bn(a.body)}`);return o.data(r),0}async function Fs(e,t=process.env){let[,n,o,r]=e.positional,s=P(e,"kind");if(!n||!o||!r||!s)throw new x('usage: moa reply <thread> <from> --kind <question|answer|finding|done> "<body>"');let a=G(C(e,"json")),c=await(await jt(e,t)).post(`/v1/delegations/${n}/messages`,{from:o,kind:s,body:r});if(!c.delivered)return lr(c,a,`${o} \u2192 thread`);let i=c.delegation?.closedAt?"closed":c.delegation?.blockedBy?"BLOCKED":"open",l=s==="done"?"finished":`sent ${/^[aeiou]/.test(s)?"an":"a"} ${s}`;return a.line(`${o} ${l} \u2014 the delegation is ${i}`),a.data(c),k.ok}function lr(e,t,n){if(e.delivered)return t.line(`${n}: delivered`),t.data(e),k.ok;let o=e.reason??"the bus refused it";t.warn(`moa: not delivered \u2014 ${o}`);let r=Ds(o);t.warn(` ${r.say}`);for(let s of r.run)t.warn(` ${s}`);return t.data(e),k.halted}var bn=e=>e.replace(/\s+/g," ").trim();De();Ze();yn();var Oc=`usage: moa manager say "<text>" [--timeout s]
|
|
148
150
|
moa manager proposals
|
|
149
151
|
moa manager approve <id>
|
|
150
152
|
moa manager dismiss <id>
|
|
151
|
-
moa manager watch`;async function
|
|
152
|
-
`,{mode:384}),await
|
|
153
|
+
moa manager watch`;async function Bs(e,t=process.env){let n=e.positional[1],o={say:Ic,proposals:Uc,approve:(a,c,i)=>Ks(a,c,i,"approve"),dismiss:(a,c,i)=>Ks(a,c,i,"dismiss"),watch:Gc},r=n!==void 0&&Object.hasOwn(o,n)?o[n]:void 0;if(!r)throw new x(Oc);if(n!=="say"&&e.flags.has("timeout"))throw new x(`moa manager ${n} has no --timeout`);let s=U(await ee(P(e,"profile"),t));return r(s,G(C(e,"json")),e)}async function Ic(e,t,n){let o=n.positional.slice(2).join(" ").trim();if(!o)throw new x('usage: moa manager say "<text>" [--timeout s]');let r=ce(n,"timeout");if(n.flags.has("timeout")&&(r===void 0||r<0))throw new x("--timeout takes a number of seconds, zero or more");let s=r??600,a=new Set((await e.get("/v1/manager/messages")).messages.map(u=>u.id)),{id:c}=await e.post("/v1/manager/messages",{body:o}),i=Date.now()+s*1e3,l=250,d;for(;;){let u=await e.get("/v1/manager/messages").then(p=>p.messages).catch(p=>{if(!(p instanceof Pt))throw p;if(d??=Date.now()+sr,!(Date.now()<d&&Date.now()<i))throw p});u!==void 0&&(d=void 0);let f=u===void 0?void 0:typeof c=="string"?Rc(u,c):Lc(u,a,o);if(f)return Dc(e,t,f);if(u!==void 0&&Date.now()>i)return t.warn(`moa: the Manager has not answered after ${s}s \u2014 it is still thinking, and its answer will be in the console's chat`),k.halted;await new Promise(p=>setTimeout(p,l)),l=Math.min(l*1.5,2e3)}}function Rc(e,t){return e.find(n=>n.from==="manager"&&n.answers===t)}function Lc(e,t,n){let o=e.filter(s=>!t.has(s.id)),r=o.findIndex(s=>s.from==="you"&&s.body.trim()===n);if(r!==-1)return o.slice(r+1).find(s=>s.from==="manager")}async function Dc(e,t,n){let o=n.proposals??[],r=o.length===0?[]:await e.get("/v1/manager/proposals").then(l=>l.proposals).catch(()=>[]),s=o.map(l=>r.find(d=>d.id===l)??{id:l}),a=s.filter(l=>l.state==="waiting"),c=s.filter(l=>l.state===void 0||l.state==="open"),i=l=>l.title??l.kind??"a proposal";if(n.failed?t.warn(`moa: ${n.body}`):t.line(n.body),c.length>0){n.failed||t.line(""),t.line(n.failed?"Before it failed, it proposed:":"It proposes:");for(let l of c)t.line(` ${i(l)}`),t.line(` moa manager approve ${l.id}`)}if(a.length>0){t.line(""),t.line("Set up for later:");for(let l of a)t.line(` ${i(l)}`),t.line(` moa manager dismiss ${l.id}`)}return t.data({message:n,proposals:s}),n.failed?k.failed:k.ok}async function Uc(e,t){let n=await e.get("/v1/manager/proposals?state=open");return t.data(n),n.proposals.length===0?(t.line("nothing is waiting for you"),k.ok):(t.line(be([["KIND","WHERE","WHAT","WHY","ID"],...n.proposals.map(o=>[o.kind,Mc(o),Y(o.title,50),Y(o.why.replace(/\s+/g," "),50),o.id])])),k.ok)}var Mc=e=>e.repo?`${e.repo}${e.issue?`#${e.issue}`:""}`:"";async function Ks(e,t,n,o){let r=n.positional[2];if(!r)throw new x(`usage: moa manager ${o} <id>`);let s=await jc(e,r,o);if(o==="dismiss"){let c=await e.post(`/v1/manager/proposals/${encodeURIComponent(s)}/dismiss`,{});return t.line(`dismissed: ${c.title}`),t.data(c),k.ok}let a;try{a=await e.post(`/v1/manager/proposals/${encodeURIComponent(s)}/approve`,{})}catch(c){let i=c instanceof ae&&c.status===502?Nc(c):void 0;if(!i)throw c;return t.warn(`moa: ${i.title} failed${i.result?` \u2014 ${i.result}`:""}`),t.data(i),k.failed}return t.line(`${a.state==="waiting"?"approved, for later":"approved"}: ${a.title}`),a.result&&t.line(` ${a.result}`),t.data(a),k.ok}function Nc(e){try{let t=JSON.parse(e.message);return typeof t.id=="string"&&typeof t.title=="string"?t:void 0}catch{return}}async function jc(e,t,n){let o=n==="dismiss"?["open","waiting"]:["open"],s=(await Promise.all(o.map(c=>e.get(`/v1/manager/proposals?state=${c}`)))).flatMap(c=>c.proposals.map(i=>i.id));if(s.includes(t))return t;let a=s.filter(c=>c.startsWith(t));if(a.length>1)throw new x(`${t} could be ${a.length} proposals \u2014 type more of the id`);if(a[0])return a[0];if(!/^[A-Za-z0-9_-]+$/.test(t))throw new x(`${t} is not a proposal's id`);return t}async function Gc(e,t){let n=await e.get("/v1/manager/watch");if(t.data(n),n.watching.length===0)return t.line("nothing is running"),k.ok;t.line(be([["HEALTH","KIND","WHAT","WHO","DOING","COST","JOB"],...n.watching.map(o=>[o.held?`${o.health} (held)`:o.health,o.kind,o.ref||Y(o.title,30),o.worker??"",Y(o.doing,40),`$${o.costUsd.toFixed(3)}`,o.job])]));for(let o of n.watching.filter(r=>r.health!=="ok"))t.line(""),t.line(`${o.ref||o.job}: ${o.note}`),o.suggest&&t.line(` it would say: ${o.suggest}`);return k.ok}import{chmod as Hc,writeFile as Fc}from"node:fs/promises";import{resolve as Kc}from"node:path";De();Ze();async function Js(e,t=process.env){let n=e.positional[1];if(!n)throw new x("usage: moa mcp <agent> [--file <path>]");let o=U(await ee(P(e,"profile"),t)),r=G(C(e,"json"));if(C(e,"revoke")){let{revoked:f}=await o.del(`/v1/agents/${n}/mcp-token`);return r.data({revoked:f}),r.line(f===0?`${n} had no tokens out`:`took back ${f} token(s) \u2014 any config file holding one is now dead`),k.ok}let s=await o.get(`/v1/agents/${n}/mcp-token`),a=await o.post(`/v1/agents/${n}/mcp-token`,{}),i=(await o.rpc(a.url,a.token,"tools/list")).tools??[];r.data({url:a.url,expiresAt:a.expiresAt,tools:i.map(f=>f.name),outstanding:s.tokens.length}),r.line(`${n} reaches ${a.url}`);for(let f of i)r.line(` ${f.name.padEnd(12)}${f.description??""}`);i.length===0&&r.warn("moa: it answered, and offered no tools");let l=P(e,"file");if(!l)return await o.del(`/v1/agents/${n}/mcp-token/${a.id}`).catch(()=>{}),r.line(""),s.tokens.length>0&&r.line(`${s.tokens.length} token(s) already out, the last until ${s.tokens[s.tokens.length-1]?.expiresAt} \u2014 moa mcp ${n} --revoke takes them back`),r.line("--file <path> writes the config a CLI can load, with a token for this agent"),k.ok;let d={mcpServers:{fnmoa:{type:"http",url:a.url,headers:{Authorization:`Bearer ${a.token}`}}}},u=Kc(l);return await Fc(u,`${JSON.stringify(d,null,2)}
|
|
154
|
+
`,{mode:384}),await Hc(u,384),r.line(""),r.line(`wrote ${u} \u2014 mode 0600, and it expires ${a.expiresAt}`),r.line(` claude --mcp-config ${u} --strict-mcp-config --allowedTools mcp__fnmoa`),k.ok}De();Ze();yn();async function*Vn(e,t){let n=e.body;if(!n)return;let o=n.getReader(),r=new TextDecoder,s="";try{for(;!t?.aborted;){let{value:a,done:c}=await o.read();if(c)break;s+=r.decode(a,{stream:!0});let i=s.indexOf(`
|
|
153
155
|
|
|
154
|
-
`);for(;
|
|
156
|
+
`);for(;i!==-1;){let l=s.slice(0,i);s=s.slice(i+2);let d=Bc(l);d&&(yield d),i=s.indexOf(`
|
|
155
157
|
|
|
156
|
-
`)}}}finally{await o.cancel().catch(()=>{})}}function
|
|
157
|
-
`)){if(r.startsWith(":")||r.trim()==="")continue;let s=r.indexOf(":"),a=s===-1?r:r.slice(0,s),
|
|
158
|
-
`),...n===void 0?{}:{id:n}}}
|
|
159
|
-
`)[0]??"",80)}`),l.length<d){let p=d-l.length;r.line(` \u2026 ${p} earlier ${p===1?"line":"lines"}, moa logs ${n} for all`)}for(let p of l)r.line(` ${p.tool?`${p.tool} `:""}${
|
|
160
|
-
`)[0]??"",44),
|
|
158
|
+
`)}}}finally{await o.cancel().catch(()=>{})}}function Bc(e){let t="message",n,o=[];for(let r of e.split(`
|
|
159
|
+
`)){if(r.startsWith(":")||r.trim()==="")continue;let s=r.indexOf(":"),a=s===-1?r:r.slice(0,s),c=s===-1?"":r.slice(s+1).replace(/^ /,"");a==="event"?t=c:a==="data"?o.push(c):a==="id"&&(n=c)}if(!(o.length===0&&t==="message"))return{event:t,data:o.join(`
|
|
160
|
+
`),...n===void 0?{}:{id:n}}}De();Ze();yn();async function Ws(e,t=process.env){if(e.positional[1]!=="work")throw new x('usage: moa team work <a,b,c> [--watch] [--max-turns n] [--nudge "\u2026"]');let n=(e.positional[2]??"").split(",").map(u=>u.trim()).filter(Boolean);if(n.length===0)throw new x("usage: moa team work <a,b,c>");let o=U(await ee(P(e,"profile"),t)),r=G(C(e,"json")),s=new AbortController,a=C(e,"watch")?n.map(async u=>{let f=await o.stream(`/v1/agents/${u}/events`,s.signal);await qc(f,s,r,u)}):[],c;try{c=await o.post("/v1/team/work",{agents:n,...ce(e,"max-turns")===void 0?{}:{maxTurns:ce(e,"max-turns")},...ce(e,"max-cost")===void 0?{}:{maxCostUsd:ce(e,"max-cost")},...P(e,"nudge")===void 0?{}:{nudge:P(e,"nudge")},...C(e,"route-replies")?{routeReplies:!0}:{}},$n(e))}catch(u){throw s.abort(),u}let i=kn(o,c.id,u=>r.warn(u)),l;try{l=await Nt(o,c.id,ce(e,"timeout")??3600,C(e,"watch")?u=>r.line(`\xB7 ${dr(u)}`):void 0)}finally{i.stop()}if(s.abort(),await Promise.allSettled(a),l.state==="failed")return r.warn(`moa: ${l.error??"the team loop failed"}`),r.data(l),k.failed;let d=l.result;r.line(`${d.outcome}: ${d.reason}`),r.line(` ${d.turns} turn(s), $${d.costUsd.toFixed(3)} notional`);for(let u of d.open)r.line(` still open: ${u.from} \u2192 ${u.to} ${Y(u.task,40)}`+(u.blockedBy?` BLOCKED: "${Y(u.blockedBy.body,40)}"`:""));return r.data(l),d.outcome==="settled"?k.ok:k.halted}async function qs(e,t=process.env){let n=Number(e.positional[1]);if(!Number.isInteger(n)||n<1)throw new x("usage: moa ship <issue>");let o=U(await ee(P(e,"profile"),t)),r=G(C(e,"json")),s=C(e,"watch"),a=await o.post("/v1/pipelines",{issue:n,...P(e,"repo")===void 0?{}:{repo:P(e,"repo")},...ce(e,"max-steps")===void 0?{}:{maxSteps:ce(e,"max-steps")},...ce(e,"max-cost")===void 0?{}:{maxCostUsd:ce(e,"max-cost")}},$n(e));r.line(`shipping #${n} \u2014 ${a.id}`);let c=kn(o,a.id,d=>r.warn(d)),i;try{i=await Nt(o,a.id,ce(e,"timeout")??7200,s?d=>r.line(` ${dr(d)}`):void 0)}finally{c.stop()}if(i.state==="failed")return r.warn(`moa: ${i.error??"the pipeline failed"}`),r.data(i),k.failed;let l=i.result;return r.line(`${l.outcome}: ${l.reason}`),r.line(` ${l.steps} step(s), $${l.costUsd.toFixed(3)} notional`),r.data(i),l.outcome==="merged"?k.ok:k.halted}function dr(e){let t=[];return e.step&&t.push(e.step),e.steps!==void 0&&t.push(`${e.steps} step(s)`),e.costUsd!==void 0&&t.push(`$${e.costUsd.toFixed(3)}`),e.note&&t.push(e.note),t.join(" \xB7 ")}async function zs(e,t=process.env){let n=U(await ee(P(e,"profile"),t)),o=G(C(e,"json")),[r,s]=await Promise.all([n.get("/v1/jobs"),n.get("/v1/workspace").catch(()=>({runSlots:void 0}))]);o.data({...r,...s.runSlots?{runSlots:s.runSlots}:{}});let a=bo(s.runSlots);if(r.jobs.length===0)return o.line("nothing has run yet"),a&&o.line(a),k.ok;let c=r.jobs.some(i=>(i.issue?.pipelines??0)>1);return o.line(be([["STATE","KIND","WHAT","WHERE",...c?["ISSUE IN ALL"]:[],"JOB"],...r.jobs.map(i=>[i.state,i.kind,i.subject??i.agent??"",Y(Wc(i),44),...c?[Jc(i)]:[],i.id])])),a&&(o.line(""),o.line(a)),k.ok}function Jc(e){let t=e.issue;if(!t)return"";let n=`${t.pipelines} pipeline${t.pipelines===1?"":"s"}`;return`$${t.costUsd.toFixed(2)} \xB7 ${t.steps} step${t.steps===1?"":"s"} \xB7 ${n}`}function bo(e){if(!e||e.ceiling===0||e.waiting===0&&e.running<e.ceiling)return;let t=e.waiting===0?"":`, ${e.waiting} ${e.waiting===1?"agent is":"agents are"} waiting for a slot`;return`${e.running} of ${e.ceiling} run slots in use${t}`}function Wc(e){if(e.error)return e.error;if(e.state==="running")return e.progress?dr(e.progress):"";let t=e.result;return t?t.outcome?t.reason?`${t.outcome}: ${t.reason}`:t.outcome:t.reason?t.reason:t.answered?"answered":t.isError?"the agent reported an error":"":""}async function Vs(e,t=process.env){let n=e.positional[1];if(!n)throw new x("usage: moa stop <jobId>");let o=U(await ee(P(e,"profile"),t)),r=G(C(e,"json")),s=await o.post(`/v1/jobs/${n}/cancel`,{});return r.line(s.cancelled?`stopping ${n} \u2014 after whatever it is doing now`:`${n} had already ${s.job.state==="running"?"gone":s.job.state}`),r.data(s),k.ok}async function qc(e,t,n,o){try{for await(let r of Vn(e,t.signal)){if(r.event!=="activity")continue;let s=JSON.parse(r.data);n.line(` ${o}: ${s.tool?`${s.tool} `:""}${Y(String(s.text??""),80)}`)}}catch{}}var $n=e=>P(e,"key")??crypto.randomUUID();function $o(e){if(!e)return;let t=/^`(\S+)` exceeded its (\d+)ms timeout$/.exec(e.trim());if(!t?.[1]||!t[2])return;let n=Number(t[2])/6e4,o=n>=1?`${Number(n.toFixed(1))} minute(s)`:`${Number(t[2])/1e3} second(s)`;return`${t[1]} ran for ${o} without finishing, and the workspace stopped it`}async function zc(e,t,n,o,r){let s=await e.post(`/v1/agents/${t}/runs`,{prompt:n},o).catch(()=>{});if(s)return r(s.state==="done"||s.state==="failed"?"the workspace restarted; this is what became of the run it had already started":"the workspace restarted, and nothing had been recorded \u2014 asking again"),s}async function Xs(e,t=process.env){let n=e.positional[1],o=e.positional[2];if(!n||!o)throw new x('usage: moa run <name> "<prompt>" [--watch]');let r=U(await ee(P(e,"profile"),t)),s=G(C(e,"json")),a=C(e,"watch"),c=new AbortController,i=a?await r.stream(`/v1/agents/${n}/events?from=next`,c.signal):void 0,l;try{l=await r.post(`/v1/agents/${n}/runs`,{prompt:o},$n(e))}catch(g){throw c.abort(),g}if(C(e,"detach"))return c.abort(),s.line(`started ${l.id}`),s.data(l),k.ok;let d=i?Zs(i,c,s,r):void 0,u=tl(r,c.signal,g=>s.line(g)),f=kn(r,l.id,g=>s.warn(g)),p;try{p=await Nt(r,l.id,ce(e,"timeout")??3600,void 0,()=>zc(r,n,o,$n(e),g=>s.warn(g)))}finally{f.stop()}return c.abort(),await d,await u,f.asked()?(s.data(p),k.halted):nl(p,s)}var Qs="the workspace stopped while this run was going",Vc=e=>e===Qs||$o(e)!==void 0;async function Yc(e,t,n=new Date,o){if(!t)return"nothing yet \u2014 it has not said anything";if(Vc(o))return;let r=await e.get("/v1/workspace").then(c=>c.keepActivityDays??0).catch(()=>0),s=Date.parse(t),a=Number.isNaN(s)?0:(n.getTime()-s)/864e5;return r>0&&a>r?`no lines \u2014 this workspace keeps them for ${r} day(s), and this run ended ${Math.floor(a)} day(s) ago`:"no lines \u2014 the CLI backing this agent does not stream, or it said nothing"}async function Xc(e,t){let n=U(await ee(P(e,"profile"),t)),o=G(C(e,"json")),r=(ce(e,"every")??2)*1e3,s=new AbortController,a=()=>s.abort();process.on("SIGINT",a);try{await Qc(n,o,r,s.signal)}finally{process.off("SIGINT",a)}return k.ok}async function Qc(e,t,n,o){let r=new Map,s,a=!0;for(;!o.aborted;){let[c,i]=await Promise.all([e.get("/v1/jobs").catch(()=>({jobs:[]})),e.get("/v1/workspace").catch(()=>({runSlots:void 0}))]);for(let d of[...c.jobs].reverse()){let u=r.get(d.id);if(u===d.state)continue;r.set(d.id,d.state);let f=u===void 0?a?"":"new":`was ${u}`,p=d.subject??d.agent??d.kind;t.line(`${d.state.padEnd(8)} ${p.padEnd(16)} ${f.padEnd(12)} ${Zc(d)}`.trimEnd()),t.data({job:d.id,kind:d.kind,state:d.state,was:u})}a=!1;let l=bo(i.runSlots);if(l!==s&&(l&&t.line(` ${l}`),s=l),o.aborted)return;await new Promise(d=>{let u=setTimeout(d,n);o.addEventListener("abort",()=>{clearTimeout(u),d()},{once:!0})})}}var Zc=e=>{if(e.error)return Y(e.error,60);let t=e.result;if(!t)return"";let n=t.outcome??t.result??"",o=t.costUsd?` $${t.costUsd.toFixed(4)}`:"";return`${Y(String(n).replace(/\s+/g," "),52)}${o}`.trim()};async function el(e){let t="waiting for a rate-limit window";if(!e)return t;let o=(await e.get("/v1/seats").catch(()=>({seats:[]}))).seats.find(s=>s.limit!==void 0&&s.used>=s.limit);if(!o)return t;let r=ir(o.resetsAt);return`waiting for a window \u2014 ${o.cli} ${o.used}/${o.limit}${r?`, resets in ${r}`:""}`}async function tl(e,t,n,o=2500){if(await new Promise(a=>{let c=setTimeout(a,o);t.addEventListener("abort",()=>{clearTimeout(c),a()},{once:!0})}),t.aborted)return;let r=await e.get("/v1/workspace").catch(()=>({runSlots:void 0}));if(t.aborted)return;let s=bo(r.runSlots);s&&n(` \xB7 ${s}`)}async function Zs(e,t,n,o){let r=!1;try{for await(let s of Vn(e,t.signal)){let a=JSON.parse(s.data);if(s.event==="activity"){let c=typeof a.tool=="string"?a.tool:"";n.line(` ${c?`${c} `:""}${Y(String(a.text??""),100)}`)}else s.event==="status"&&a.status==="rate-limited"&&!r&&(r=!0,n.line(` \xB7 ${await el(o)}`))}}catch{}}function nl(e,t){if(e.state==="failed"){let o=e.result&&"result"in e.result?e.result.result:void 0;return t.warn(`moa: ${e.error??(o?$o(o)??o:"the run failed")}`),t.data(e),k.failed}let n=e.result;return t.data(e),n&&"stopped"in n?(t.warn(`moa: ${n.reason}`),k.halted):(n?.result&&t.line($o(n.result)??n.result),n?.isError?k.failed:k.ok)}async function ea(e,t=process.env){let n=e.positional[1];if(!n)throw new x("usage: moa logs <runId> [--tail n] [--since seq]");let o=U(await ee(P(e,"profile"),t)),r=G(C(e,"json")),s=ce(e,"tail"),a=ce(e,"since");if(s!==void 0&&a!==void 0)throw new x("moa logs takes --tail or --since, not both");let[c,i]=await Promise.all([o.get(`/v1/runs/${n}`),o.get(s!==void 0?`/v1/runs/${n}/activity?tail=${s}`:a===void 0?`/v1/runs/${n}/activity`:`/v1/runs/${n}/activity?since=${a}`)]),l=i.activity,d=i.total??l.length;if(r.line(`${c.agent}: ${Y(ar(c.prompt).split(`
|
|
161
|
+
`)[0]??"",80)}`),l.length<d){let p=d-l.length;r.line(` \u2026 ${p} earlier ${p===1?"line":"lines"}, moa logs ${n} for all`)}for(let p of l)r.line(` ${p.tool?`${p.tool} `:""}${Y(p.text,100)}`);let u=C(e,"watch")&&!c.endedAt;if(d===0&&!u){let p=await Yc(o,c.endedAt,new Date,c.result);p&&r.line(` ${p}`)}let f=u?await ol(o,n,l[l.length-1]?.seq??-1,r,e):c;return f.result&&(r.line(""),r.line($o(f.result)??f.result)),r.data({run:f,activity:l}),f.isError?k.failed:k.ok}async function ol(e,t,n,o,r){let s=(ce(r,"every")??1)*1e3,a=new AbortController,c=()=>a.abort();process.on("SIGINT",c);let i=n;try{for(;;){let l=await e.get(i<0?`/v1/runs/${t}/activity`:`/v1/runs/${t}/activity?since=${i}`);for(let d of l.activity)i=d.seq,o.line(` ${d.tool?`${d.tool} `:""}${Y(d.text,100)}`);if(l.endedAt||a.signal.aborted)return l;if(await new Promise(d=>{let u=setTimeout(d,s);a.signal.addEventListener("abort",()=>{clearTimeout(u),d()},{once:!0})}),a.signal.aborted)return{}}}finally{process.off("SIGINT",c)}}async function ta(e,t=process.env){let n=e.positional[1],o=e.positional[2],r=e.positional[3];if(!n||!o||!r)throw new x('usage: moa ask <from> <to> "<question>" [--watch]');let s=U(await ee(P(e,"profile"),t)),a=G(C(e,"json")),c=ce(e,"timeout"),i=new AbortController,l=C(e,"watch")?await s.stream(`/v1/agents/${o}/events?from=next`,i.signal):void 0,d;try{d=await s.post("/v1/calls",{from:n,to:o,question:r,...c===void 0?{}:{timeoutMs:c*1e3}},$n(e))}catch(y){throw i.abort(),y}if(C(e,"detach"))return i.abort(),a.line(`started ${d.id}`),a.data(d),k.ok;let u=l?Zs(l,i,a,s):void 0,f=kn(s,d.id,y=>a.warn(y)),p;try{p=await Nt(s,d.id,c??3600)}finally{f.stop()}if(i.abort(),await u,a.data(p),p.state==="failed")return a.warn(`moa: ${p.error??"the call failed"}`),k.failed;let g=p.result;return g?.answered?(a.line(g.answer),k.ok):(a.warn(`moa: ${g?.reason??"no answer"}`),k.halted)}var ur=e=>e.endedAt===void 0?"running":e.isError?e.result===Qs?"cut short":"failed":"done";async function rl(e){let t=await e.get("/v1/workspace").catch(()=>{}),n=ot(t?.restart?.at),o=t?.restart?.cutShort??0;if(!(!n||o===0))return`the last restart was ${n} ago, and cut short ${o} ${o===1?"run":"runs"}`}var Ys=["running","done","failed","interrupted"];function sl(e){let t=P(e,"state");if(t!==void 0){if(!Ys.includes(t))throw new x(`--state must be one of ${Ys.join(", ")}`);return t}return C(e,"failed")?"failed":void 0}var al=(e,t,n,o)=>["moa runs",e,t===void 0?void 0:`--state ${t}`,n===10?void 0:`--limit ${n}`,`--before ${o}`].filter(r=>r!==void 0).join(" ");async function na(e,t=process.env){let n=e.positional[1],o=sl(e),r=U(await ee(P(e,"profile"),t)),s=G(C(e,"json")),a=ce(e,"limit")??10,c=P(e,"before"),i=`limit=${a}${o===void 0?"":`&state=${o}`}${c===void 0?"":`&before=${encodeURIComponent(c)}`}`,l=n?(await r.get(`/v1/agents/${n}/runs?${i}`)).runs:(await r.get(`/v1/runs?${i}`)).runs;if(s.data({runs:l}),l.length===0){if(c!==void 0)return s.line(n?`nothing ${n} ran before that one`:"nothing ran before that one"),k.ok;if(o!==void 0){let g=o==="failed"?"ended with an error":o==="interrupted"?"was cut short by a restart":o==="running"?"is running":"has";return s.line(n?`nothing ${n} ran ${g}`:`nothing ${g}`),k.ok}return s.line(n?`${n} has not run yet`:"nothing has run yet"),k.ok}s.line(be([["AGE","STATE",...n?[]:["AGENT"],"CAUSE","COST","TASK","RUN"],...l.map(g=>[ot(g.startedAt)??"\u2014",ur(g),...n?[]:[g.agent??""],g.cause??"\u2014",g.costUsd===void 0?"\u2014":`$${g.costUsd.toFixed(4)}`,Y(ar(g.prompt).split(`
|
|
162
|
+
`)[0]??"",44),g.id])]));let d=l.filter(g=>ur(g)==="failed").length,u=l.filter(g=>ur(g)==="cut short").length,f=u>0?await rl(r):void 0;o===void 0&&d+u>0&&(s.line(`
|
|
161
163
|
${[d>0?`${d} of them ended with an error`:"",u>0?`${u} ${u===1?"was":"were"} cut short by a restart`:""].filter(Boolean).join(", ")}`),f&&s.line(f));let p=l[l.length-1]?.id;return l.length===a&&p!==void 0&&s.line(`
|
|
162
|
-
older: ${
|
|
164
|
+
older: ${al(n,o,a,p)}`),k.ok}async function oa(e,t=process.env){let n=e.positional[1];if(!n)return Xc(e,t);let o=U(await ee(P(e,"profile"),t)),r=G(C(e,"json")),s=new AbortController,a=()=>s.abort();process.on("SIGINT",a);let c=await o.stream(`/v1/agents/${n}/events`,s.signal);try{for await(let i of Vn(c,s.signal)){let l=JSON.parse(i.data);if(i.event==="run")r.line(`\u2014 ${String(l.runId??"")} started ${String(l.startedAt??"")}`);else if(i.event==="activity"){let d=typeof l.tool=="string"?l.tool:"";r.line(` ${d?`${d} `:""}${Y(String(l.text??""),100)}`)}else i.event==="status"?r.line(` \xB7 ${String(l.status??"")}`):i.event==="end"?r.line(` = ${Y(String(l.result??""),100)}`):i.event==="closing"&&r.warn("moa: the workspace is shutting down");r.data({event:i.event,data:l})}}catch{}finally{process.off("SIGINT",a)}return k.ok}var il=["--json","--watch","--detach","--all","--limit","--since","--timeout","--nudge","--route-replies","--profile","--file","--revoke","--token","--github","--help"];function ra(e,t){let n=[...t].sort().join(" "),o=il.join(" ");if(e==="bash")return`# moa completion for bash \u2014 eval "$(moa completion bash)"
|
|
163
165
|
_moa() {
|
|
164
166
|
local commands="${n}"
|
|
165
167
|
local flags="${o}"
|
|
@@ -182,62 +184,64 @@ _moa() {
|
|
|
182
184
|
fi
|
|
183
185
|
}
|
|
184
186
|
compdef _moa moa
|
|
185
|
-
`;throw new
|
|
186
|
-
`).filter(n=>n.trim()!=="").slice(-t).join(" \xB7 ").slice(0,300),
|
|
187
|
-
`),
|
|
188
|
-
${
|
|
189
|
-
`,{mode:384}),
|
|
187
|
+
`;throw new x(`moa completion takes bash or zsh, not ${JSON.stringify(e)}`)}import{spawnSync as cp}from"node:child_process";import{createInterface as fs}from"node:readline/promises";import{Writable as lp}from"node:stream";import{render as dp}from"ink";import{createElement as up}from"react";De();Ze();qe();Jt();at();We();import{readFile as Hd,writeFile as Fd}from"node:fs/promises";var yi=e=>ue.includes(e);async function bi(e,t){let n=qt(e.sys),o=JSON.parse(await Hd(n,"utf8")),r=o.services.workspace.environment;for(let[a,c]of Object.entries(t))c===void 0?delete r[a]:r[a]=c.replaceAll("$",()=>"$$");await Fd(n,JSON.stringify(o),{mode:384});let s=await e.sys.exec("docker",it(e.sys,"up","-d","--wait"),{timeoutMs:6e5});return s.ok?{ok:!0}:{ok:!1,why:pe(s.stderr)||"compose up failed"}}async function Kd(e,t,n){let o=e.state.deployed?.workspaceUrl,r=await ve(e.sys.env),s=Object.values(r.profiles).find(i=>i.url===o);if(!o||!s)return n({label:"proof",mark:"fail",detail:"no profile on this machine for the workspace",fix:"run `moa setup` and Deploy"}),!1;let a=U({url:o,token:s.token},e.sys.fetch);for(let i=0;i<60;i++)try{await a.get("/v1/whoami");break}catch{await e.sys.sleep(1e3)}return!("label"in await Dt(a,[t],"in the image",()=>`run \`moa setup login ${t}\` again`,n))}var $i=(e,t,n)=>{let o=new Set(e.answers.loggedIn??[]);return n?o.add(t):o.delete(t),{...e,answers:{...e.answers,loggedIn:ue.filter(r=>o.has(r))}}};function vi(e,t){return e.state.deployed?.runner==="image"&&e.sys.exists(qt(e.sys))?!0:(t({label:"agent login",mark:"fail",detail:e.state.deployed===void 0?"nothing is deployed yet":"one agent at a time works on the published image on this machine for now",fix:"run `moa setup login` and use Agent logins, then Deploy"}),!1)}async function Si(e,t,n,o){let{print:r}=o;if(!vi(e,r))return{ok:!1};if(n||!co(t)){n||await o.setupToken();let a=n?Se[t]:"CLAUDE_CODE_OAUTH_TOKEN",c=(await o.secret(n?`${a}: `:"Paste the token `claude setup-token` printed: ")).trim();if(!c||/\s/.test(c))return r({label:t,mark:"fail",detail:"nothing pasted \u2014 nothing was changed",fix:`run \`moa setup login ${t}${n?" --key":""}\` again`}),{ok:!1};r({label:t,mark:"wait",detail:"restarting the workspace on it \u2014 data kept"});let i=t==="claude"?n?"CLAUDE_CODE_OAUTH_TOKEN":Se.claude:void 0,l=await bi(e,{[a]:c,...i?{[i]:void 0}:{}});if(!l.ok)return r({label:t,mark:"fail",detail:l.why,fix:"`moa setup logs` says why"}),{ok:!1}}else if(await zt(e.sys,t))r({label:t,mark:"ok",detail:"already logged in inside the container"});else{r({label:t,mark:"wait",detail:"starting its login inside the container\u2026"});let a=!1,i=await Mn(e.sys,t,l=>{let d=Nn(l);d&&!a&&(a=!0,r({label:t,mark:"wait",detail:d}))}).done;if(!i.ok||!await zt(e.sys,t))return r({label:t,mark:"fail",detail:`the login did not finish: ${pe(i.stderr)||"no answer"}`,fix:`run \`moa setup login ${t}\` again`}),{ok:!1};r({label:t,mark:"ok",detail:"logged in inside the container \u2014 kept on its home volume"})}let s=await Kd(e,t,r);return{ok:s,state:$i(e.state,t,s)}}var Yr={codex:["codex","logout"],cursor:["cursor-agent","logout"]};async function xi(e,t,n){if(!vi(e,n))return{ok:!1};co(t)&&await e.sys.exec("docker",it(e.sys,"exec","-T","workspace",...Yr[t]),{timeoutMs:6e4});let o=await bi(e,t==="claude"?{CLAUDE_CODE_OAUTH_TOKEN:void 0,ANTHROPIC_API_KEY:void 0}:{[Se[t]]:void 0});if(!o.ok)return n({label:t,mark:"fail",detail:o.why,fix:"`moa setup logs` says why"}),{ok:!1};n({label:t,mark:"ok",detail:`disconnected \u2014 \`moa setup login ${t}\` connects it again`});let r=$i(e.state,t,!1);return r.answers.agentCli===t&&(r.answers={...r.answers,agentCli:r.answers.loggedIn?.[0]}),{ok:!0,state:r}}import{Box as ze,Text as se,useApp as vu,useInput as Su,usePaste as xu}from"ink";import{useEffect as Gi,useMemo as Au,useRef as xt,useState as mt}from"react";qe();Jt();De();qe();Zn();Jt();at();It();Ft();Pn();We();import{createHash as Bd}from"node:crypto";import{mkdir as Jd,readFile as Wd,rm as qd,writeFile as Xr}from"node:fs/promises";import{dirname as zd,join as Fo}from"node:path";var jn="cloudflare",fo=(e,t=2)=>e.replace(/\u001B\[[0-9;]*m/g,"").trim().split(`
|
|
188
|
+
`).filter(n=>n.trim()!=="").slice(-t).join(" \xB7 ").slice(0,300),Ai=e=>Bd("sha256").update(e).digest("hex").slice(0,12);async function Qr(e,t,n){let o=Date.now()+t*1e3;for(;Date.now()<o;){if(await n().catch(()=>!1))return!0;await e.sleep(2e3)}return!1}async function Vd(e,t,n,o){o({label:"codex",mark:"wait",detail:"asking codex for a code inside the container\u2026"});let r=await e.fetch(`${t}/_moa/codex/login`,{method:"POST",headers:{authorization:`Bearer ${n}`},signal:AbortSignal.timeout(16*6e4)});if(!r.ok||!r.body)return{ok:!1,why:`${r.status} ${fo(await r.text().catch(()=>""))}`};let s="",a=r.body.getReader(),c=new TextDecoder;for(;;){let{done:l,value:d}=await a.read();if(l)break;s+=c.decode(d,{stream:!0});let u=rn(s);u.url&&u.code&&o({label:"codex",mark:"wait",detail:`open ${u.url} and enter ${u.code} \u2014 waiting for you to approve it`})}return/\[moa\] codex login exited (\d+)/.exec(s)?.[1]==="0"?{ok:!0}:{ok:!1,why:fo(s.replace(/\[moa\].*$/m,""))||"codex login did not finish"}}async function Ko(e,t,n=()=>{},o=()=>{}){let{sys:r,state:s}=e,a=[],c=K=>{let Q=a.findIndex(Be=>Be.label===K.label);Q===-1?a.push(K):a[Q]=K,t([...a])},i,l=(K,Q,Be)=>(c({label:K,mark:"fail",detail:Q,fix:Be}),i?{ok:!1,deployed:i}:{ok:!1}),d=r.root??Dn(),u=s.answers.domain,f=s.answers.cloudflareAccount;if(!u||!f)return l("account","no Cloudflare account or domain yet","Esc back to Checks & account, then Enter");if(un(e))return l("memory","the last deploy kept memory in LocusGraph, and this run has no secret for it","Esc back to Memory & database and paste it again \u2014 or go on there without it");let p=s.deployed?.runner==="cloudflare"?s.deployed:void 0,g=Wr(e)?.token,y=qr(e)?.token,$=tt(e)?.token,m=s.answers.agentCli??"claude";if(!g&&!p)return l("D1 token","none in this run \u2014 it is never saved","Esc back to Checks & account and press k");if(!y&&!p)return l("GitHub token","none in this run \u2014 it is never saved","Esc back to GitHub and press k");if(m==="claude"&&!$&&!$e(e,"claude")&&!p)return l("claude token","none in this run \u2014 it is never saved","Esc back to Agent logins and press c (or k for an API key, or choose another agent), then Enter");let h=s.answers.githubApp,A=h?He(r,h):void 0;if(!h||!A)return l("GitHub App",h?`the client secret for ${h.slug} is not on this machine`:"none yet","Esc back to Console access and press g \u2014 on a domain, people sign in with it");let{workspaceUrl:E,consoleUrl:I}=Yn(u),J=s.answers.tenant??Ie(s.answers.owner),fe=s.answers.owner,M=xe(e),z=Fo(d,"apps","workspace"),R,W;if(Oe(e)){for(let he of await yt(e))if(c(he),he.mark==="fail")return{ok:!1};for(let he of await Un(e))if(c(he),he.mark==="fail")return{ok:!1};let K=`fnmoa:${Gt()}`;if(!(await r.exec("docker",["tag",Ae(),K])).ok)return l("image","Could not tag the release image","Check Docker and retry");if(!(await Ge(r,d,["containers","push",K],{account:f,timeoutMs:9e5})).ok)return l("image","Could not push to the Cloudflare registry","Check your Cloudflare login and retry");if(R=`registry.cloudflare.com/${f}/${K}`,r.root){let he=await Gr(r);if(!he.ok)return l("worker",`Could not copy the Worker out of ${Ae()}: ${he.why}`,"Check Docker and retry");W=he.path}else W=jr();c({label:"image",mark:"ok",detail:`${Ae()} \u2014 the Worker and the container`})}else{c({label:"build",mark:"wait",detail:"building the Worker"});let K=await r.exec("pnpm",["install"],{cwd:d,timeoutMs:6e5}),Q=K.ok?await r.exec("pnpm",["--filter","@fnmoa/workspace...","run","build"],{cwd:d,timeoutMs:9e5}):K;if(!Q.ok)return l("build",fo(Q.stderr||Q.stdout),`run \`pnpm install && pnpm --filter @fnmoa/workspace... run build\` in ${d}, then Enter`);c({label:"build",mark:"ok",detail:"the Worker is built from this checkout"})}let{token:V,pending:Ce,before:X,had:Fe}=await Kt(r,jn,E);c({label:"owner token",mark:"ok",detail:`${D} \u2014 profile ${jn} in ~/.moa/config.json${X===jn||!Fe?"":`; \`moa\` now talks to this workspace, not profile ${X} (\`moa use ${X}\` to go back)`}`});let me=s.cloudflare??p?.cloudflare,b=me?.account===f?me:void 0,te=b!==void 0&&b.older!==!0&&(b.d1?.unsure===!0||b.r2?.unsure===!0),O=p!==void 0&&me===void 0||b?.older===!0||te,N={...b,account:f,...O?{older:!0}:{}},ne=K=>{N={...N,...K},o(N)},ge=async K=>{let Q=await da(r,d,f),Be=Q?.image&&!(N.unsureImages??[]).includes(Q.image)?[Q.image]:[],he=[...new Set([...N.images??[],...Be])];ne({...K?{worker:Je}:{},...Q?{containerId:Q.id}:{},...he.length>0?{images:he}:{}})};if(O&&(b===void 0||te||b.imagesUnlisted)){let K=await Xn(r,d,f);if(!K.ok)ne({imagesUnlisted:!0}),c({label:"images",mark:"skip",detail:`could not list Cloudflare's registry \u2014 ${K.why}; the next deploy, or \`down\`, lists it again for the tags an older moa pushed`});else{let{imagesUnlisted:Q,...Be}=N,he=[...new Set([...N.unsureImages??[],...K.images.filter(or=>!(N.images??[]).includes(or))])];N={...Be,...he.length>0?{unsureImages:he}:{}},o(N),he.length>0&&c({label:"images",mark:"ok",detail:`${he.length} tag${he.length===1?"":"s"} of ${je} already in Cloudflare's registry \u2014 an older moa pushed them, so \`down\` asks before deleting them`})}}c({label:"D1",mark:"wait",detail:"finding the database, or making it"});let oe=await ca(r,d,f);if(!oe.ok)return l("D1",oe.why,"fix that, then Enter");let ke=oe.made||b?.d1?.id===oe.id&&b.d1.made,Ve=!ke&&(O||b?.d1?.id===oe.id&&b.d1.unsure===!0);ne({d1:{id:oe.id,made:ke,...Ve?{unsure:!0}:{}}}),c({label:"D1",mark:"ok",detail:`${oe.made?"made":"found"} fnmoa-workspace (${oe.id})`});let Pe=await la(r,d,f);if(!Pe.ok)return l("R2",Pe.why,"R2 must be enabled on the account (dashboard \u2192 R2), then Enter");let Me=Pe.made||b?.r2?.name===wt&&b.r2.made,Le=!Me&&(O||b?.r2?.name===wt&&b.r2.unsure===!0);ne({r2:{name:wt,made:Me,...Le?{unsure:!0}:{}}}),c({label:"R2",mark:"ok",detail:"fnmoa-state \u2014 codex's login, kept across restarts"});let ye=en(u),T={MOA_D1_ACCOUNT_ID:f,MOA_D1_DATABASE_ID:oe.id,MOA_CONSOLE_HOST:ye.console,MOA_PUBLIC_URL:E,MOA_IDLE_HOURS:String(_t),AUTH_GITHUB_ID:h.clientId,AUTH_URL:I,MOA_GITHUB_CLIENT_ID:h.clientId,...fe?{MOA_OWNER_LOGIN:fe}:{},...s.answers.repo?{MOA_REPO:s.answers.repo}:{},...M?{LOCUSGRAPH_GRAPH_ID:M.graph,LOCUSGRAPH_SERVER_URL:M.server}:{}},F={...await Ht(e),MOA_TOKENS:`${V}:${J}`,AUTH_GITHUB_SECRET:A.clientSecret,AUTH_SECRET:A.authSecret,...g?{MOA_D1_API_TOKEN:g}:{},...y?{GH_TOKEN:y}:{},...$?{CLAUDE_CODE_OAUTH_TOKEN:$}:{},...Object.fromEntries(ue.map(K=>[Se[K],$e(e,K)??""])),LOCUSGRAPH_AGENT_SECRET:M?M.secret:""},Ye=await r.exec("git",["rev-parse","HEAD"],{cwd:d}),Xe=Ai(JSON.stringify([T,Ye.stdout.trim()])),ct=Ai(JSON.stringify(F)),Et=le(r,Fo("cloudflare","wrangler.json")),ie=le(r,Fo("cloudflare","secrets.json")),Yt=le(r,Fo("cloudflare","secrets.fingerprint")),re=(await Wd(Yt,"utf8").catch(()=>"")).trim();await Jd(zd(Et),{recursive:!0}),await Xr(Et,`${JSON.stringify(ua({root:d,account:f,databaseId:oe.id,domain:u,vars:T,...R?{image:R,worker:W}:{}}),null,2)}
|
|
189
|
+
`),c({label:"deploy",mark:"wait",detail:"the Worker, the container image and your two names \u2014 the first build takes several minutes"});let _e;try{await Xr(ie,JSON.stringify(F),{mode:384}),_e=await Ge(r,d,["deploy","--config",Et,"--secrets-file",ie],{account:f,timeoutMs:24e5})}finally{await qd(ie,{force:!0})}if(!_e.ok){let K=N.worker!==void 0||(await Ge(r,d,["deployments","list","--name",Je,"--json"],{account:f})).ok;await ge(K);let Q=`${_e.stdout}
|
|
190
|
+
${_e.stderr}`;return l("deploy",fo(Q.split(ie).join("secrets.json")),/containers?.*(plan|paid|not enabled|entitle)/i.test(Q)?"containers need the Workers Paid plan: upgrade the account, then Enter":/docker/i.test(Q)?"start Docker, then Enter":"fix that, then Enter")}await ge(!0);let de=!!M,Qe=s.deployed?.workspaceUrl===E?s.deployed.people:void 0;i={runner:"cloudflare",workspaceUrl:E,consoleUrl:I,...Qe?{people:Qe}:{},...p?.workspaceFor?{workspaceFor:p.workspaceFor}:{},...de?{memoryKept:de}:{},cloudflare:N,at:new Date().toISOString()},n(i),c({label:"deploy",mark:"ok",detail:`Worker ${Je} \u2014 ${ye.workspace}, ${ye.console}`});let lt=U({url:E,token:V},r.fetch),Wn=(K,Q={})=>r.fetch(`${E}${K}`,{...Q,headers:{authorization:`Bearer ${V}`},signal:AbortSignal.timeout(3e4)});if(c({label:"container",mark:"wait",detail:`waiting for ${ye.workspace} to answer`}),!await Qr(r,600,async()=>(await Wn("/_moa/box")).ok))return l("container",`${E} did not answer the owner token in 10 minutes`,"a new name can take a while for its certificate: Enter to try again");(p?.workspaceFor!==Xe||re!==ct)&&await Wn("/_moa/restart",{method:"POST"}).catch(()=>{}),c({label:"container",mark:"wait",detail:"starting the workspace and console in it"});let hn={};if(!await Qr(r,600,async()=>(hn=await(await r.fetch(`${E}/health`,{signal:AbortSignal.timeout(13e4)})).json().catch(()=>({})),hn.ok===!0)))return l("container",`the workspace did not come up: ${fo(String(hn.error??"no answer"),1)}`,`look at \`pnpm --dir ${z} exec wrangler tail ${Je}\`, then Enter`);if(await Xr(Yt,`${ct}
|
|
191
|
+
`,{mode:384}),i={...i,workspaceFor:Xe},n(i),c({label:"container",mark:"ok",detail:`${E} \u2014 kept up ${_t}h after the last request`}),c({label:"database",mark:"ok",detail:`${hn.database??"d1"} \u2014 migrated, and it answers`}),!await lt.get("/v1/whoami").then(()=>!0,()=>!1))return l("workspace","it answers but refuses the owner token","Enter to try again");Ce&&await Bt(r,jn,E,V);let Xt=await ln(lt,s,c,Qe);if(Xt)return l(Xt.label,Xt.detail,Xt.fix);i={...i,people:s.answers.people??[]},n(i);let ho=[...new Set([m,...s.answers.loggedIn??[]])];if(ho.includes("codex")&&!$e(e,"codex"))if((await Wn("/_moa/codex").then(Q=>Q.json()).catch(()=>({}))).loggedIn)c({label:"codex",mark:"ok",detail:"logged in inside the container \u2014 kept in R2"});else{let Q=await Vd(r,E,V,c).catch(Be=>({ok:!1,why:Be instanceof Error?Be.message:String(Be)}));if(!Q.ok)return l("codex",Q.why,"Enter to log in again");c({label:"codex",mark:"ok",detail:"logged in inside the container \u2014 saved to R2"})}let Qt=await Dt(lt,ho,"in the Cloudflare container",K=>K==="claude"?"Esc back to Agent logins and press t for a new token, then Enter":"Enter to log codex in again",c);if("label"in Qt)return l(Qt.label,Qt.detail,Qt.fix);let Ke=await dn(lt,c);if("label"in Ke)return l(Ke.label,Ke.detail,Ke.fix);let ko=Ke.live??de;if(!await Qr(r,180,async()=>(await r.fetch(I,{redirect:"manual",signal:AbortSignal.timeout(13e4)})).status<500))return l("console",`${I} did not answer`,`look at \`pnpm --dir ${z} exec wrangler tail ${Je}\`, then Enter`);c({label:"Console",mark:"ok",detail:`${I} \u2014 Sign in with GitHub`}),c({label:"Workspace",mark:"ok",detail:E}),c({label:"Next",mark:"skip",detail:`moa whoami \xB7 moa agent list \xB7 moa run ${Rn(m)} "\u2026"`});let Zt=Qt.runs[m];return{ok:!0,deployed:{runner:"cloudflare",workspaceUrl:E,consoleUrl:I,workspaceFor:Xe,...Zt?{proofRunId:Zt}:{},memory:Ke.memory,people:s.answers.people??[],...ko?{memoryKept:!0}:{},cloudflare:N,at:new Date().toISOString()}}}qe();import{randomBytes as Ei}from"node:crypto";import{chmod as Yd,mkdir as Xd,rm as Qd,writeFile as Zd}from"node:fs/promises";import{createServer as eu}from"node:http";import{dirname as tu}from"node:path";function nu(e,t,n){let o=e.replace(/\/+$/,"");return{name:t,url:o,redirect_url:n,callback_urls:[`${o}/api/auth/callback/github`],request_oauth_on_install:!1,public:!1,hook_attributes:{active:!1}}}var ou=(e,t)=>`https://github.com${e?`/organizations/${encodeURIComponent(e)}`:""}/settings/apps/new?state=${encodeURIComponent(t)}`,ru=(e,t)=>t?`https://github.com/organizations/${encodeURIComponent(t)}/settings/apps/${e}`:`https://github.com/settings/apps/${e}`,Zr=e=>e.replace(/[&<>"']/g,t=>({"&":"&","<":"<",">":">",'"':""","'":"'"})[t]),su=(e,t)=>`<!doctype html>
|
|
190
192
|
<meta charset="utf-8"><title>moa setup \u2014 GitHub App</title>
|
|
191
|
-
<form id="f" method="post" action="${
|
|
192
|
-
<input type="hidden" name="manifest" value="${
|
|
193
|
+
<form id="f" method="post" action="${Zr(e)}">
|
|
194
|
+
<input type="hidden" name="manifest" value="${Zr(JSON.stringify(t))}">
|
|
193
195
|
<p>Taking you to GitHub to create the app\u2026 <button type="submit">Go</button></p>
|
|
194
196
|
</form>
|
|
195
197
|
<script>document.getElementById("f").submit()</script>
|
|
196
|
-
`,
|
|
197
|
-
`,{mode:384}),await
|
|
198
|
+
`,Bo=e=>`<!doctype html><meta charset="utf-8"><title>moa setup</title><p>${Zr(e)}</p>`;async function au(e){let t=Ei(16).toString("hex"),n,o=new Promise((i,l)=>{n={ok:i,no:l}}),r=eu((i,l)=>{let d=new URL(i.url??"/","http://127.0.0.1"),u=(p,g,y)=>{l.writeHead(p,{"content-type":"text/html; charset=utf-8"}),l.end(g,y)};if(d.pathname==="/"){let p=r.address().port,g=nu(e.consoleUrl,e.name,`http://127.0.0.1:${p}/created`);return u(200,su(ou(e.org,t),g))}if(d.pathname!=="/created")return u(404,Bo("Nothing here."));let f=d.searchParams.get("code");if(!f||d.searchParams.get("state")!==t)return u(400,Bo("That is not the app moa setup asked for. Try again from setup."));iu(e.fetch,f).then(p=>u(200,Bo(`Created ${p.slug}. Back to the terminal.`),()=>n?.ok(p)),p=>u(502,Bo(`GitHub would not hand the app over: ${p.message}`),()=>n?.no(p)))});await new Promise((i,l)=>{r.once("error",l),r.listen(0,"127.0.0.1",()=>i())});let s=`http://127.0.0.1:${r.address().port}/`,a=setTimeout(()=>n?.no(new Error("no app came back from GitHub \u2014 press g to try again")),e.timeoutMs??15*6e4),c=()=>n?.no(new Error("stopped"));e.signal?.addEventListener("abort",c,{once:!0});try{return e.onPage?.(s),await e.open(s),await o}finally{clearTimeout(a),e.signal?.removeEventListener("abort",c),r.closeAllConnections(),r.close()}}async function iu(e,t){let n=await e(`https://api.github.com/app-manifests/${encodeURIComponent(t)}/conversions`,{method:"POST",headers:{accept:"application/vnd.github+json","x-github-api-version":"2022-11-28"}}),o=await n.json().catch(()=>({}));if(!n.ok)throw new Error(String(o.message??`GitHub said ${n.status}`));let{id:r,slug:s,client_id:a,client_secret:c,html_url:i,owner:l}=o;if(typeof r!="number"||!s||!a||!c)throw new Error("GitHub's answer had no app in it");return{id:r,slug:s,clientId:a,clientSecret:c,htmlUrl:i??`https://github.com/apps/${s}`,...l?{owner:l}:{}}}async function cu(e,t){let[n,o]=process.platform==="darwin"?["open",[t]]:process.platform==="win32"?["cmd",["/c","start","",t]]:["xdg-open",[t]];await e.exec(n,o)}async function es(e,t,n){let o=Go(e,t);await Xd(tu(o),{recursive:!0}),await Zd(o,`${JSON.stringify(n,null,2)}
|
|
199
|
+
`,{mode:384}),await Yd(o,384)}async function ts(e,t){await Qd(Go(e,t),{force:!0})}async function Ci(e,t,n,o=r=>cu(e.sys,r)){let{state:r,sys:s}=e,a=r.answers.appOrg,c=r.answers.tenant??Ie(r.answers.owner);if(r.target==="vercel"&&!r.answers.sandbox?.consoleUrl)throw new Error("no sandbox yet \u2014 Esc back to Agent logins, where it is made");if(r.target==="cloudflare"&&!r.answers.domain)throw new Error("no domain yet \u2014 Esc back to Checks & account and press d");let i=jo(r),l=await au({consoleUrl:i,name:`fnmoa-${c}`.slice(0,34),...a?{org:a}:{},fetch:s.fetch,open:o,onPage:p=>t([{label:"GitHub App",mark:"wait",detail:`click Create on GitHub \u2014 if no browser opened: ${p}`}]),...n?{signal:n}:{}}),d=r.answers.githubApp,u=(d?He(s,d)?.authSecret:void 0)??Ei(32).toString("base64url");await es(s,l,{clientSecret:l.clientSecret,authSecret:u}),d&&d.id!==l.id&&await ts(s,d);let f=l.owner?.type==="Organization"?l.owner.login:a;return{githubApp:{id:l.id,slug:l.slug,clientId:l.clientId,settingsUrl:ru(l.slug,f),consoleUrl:i}}}at();It();Ft();qe();Zn();at();We();an();var lu={local:"This machine",vercel:"Vercel Sandbox",cloudflare:"Cloudflare"};function Pi(e){let{state:t,sys:n}=e,{answers:o}=t,r=t.target??"local",s=[{label:"Target",value:lu[r]}];s.push({label:"fnMoa",value:Oe(e)?Ae():`built from this checkout (${n.root})`}),o.repo&&s.push({label:"Repository",value:o.repo}),o.owner&&s.push({label:"GitHub",value:o.owner}),s.push({label:"Database",value:r==="cloudflare"?"D1":r==="vercel"?o.store==="sqlite"?"SQLite on the sandbox's kept disk":"Postgres on the sandbox's kept disk":o.runner==="compose"?"Postgres, with docker compose":"SQLite"}),s.push({label:"Agent",value:o.agentCli??"claude"}),s.push({label:"Memory",value:xe(e)?"LocusGraph":"in the workspace process"}),r==="cloudflare"&&o.domain?s.push({label:"Domain",value:o.domain}):r==="vercel"&&o.vercelTeam?s.push({label:"Vercel team",value:o.vercelTeam}):r==="local"&&s.push({label:"Ports",value:`workspace ${Wt(t)} \xB7 console ${Ut(t)}`});let a=ut.filter(i=>i!=="deploy"),c=a.filter(i=>t.passed.includes(i)).length;return s.push({label:"Checks",value:`${c} of ${a.length} screens passed`}),s.push({label:"Cost",value:r==="cloudflare"?`Workers Paid, plus the container (standard-4) while it runs \u2014 up to ${_t}h after the last request`:r==="vercel"?Lo($t(o.vercelPlan??"hobby")):"nothing billed \u2014 it runs on this machine"}),s}We();De();Ze();qe();Jt();It();Pn();We();an();qe();at();Ft();We();an();qe();at();It();an();import{randomUUID as du}from"node:crypto";import{mkdtemp as _i,readFile as uu,rm as Ti,writeFile as pu}from"node:fs/promises";import{tmpdir as Oi}from"node:os";import{join as Gn}from"node:path";async function fu(e,t){if(!t.writeFiles)throw new Error("This sandbox SDK cannot upload the release archive.");let n=await _i(Gn(Oi(),"fnmoa-image-")),o=`fnmoa-export-${du()}`,r=!1;try{if(!(await e.sys.exec("docker",["create","--platform","linux/amd64","--name",o,Ae()])).ok)throw new Error("Could not open the release image.");if(r=!0,!(await e.sys.exec("docker",["cp",`${o}:/repo`,Gn(n,"repo")],{timeoutMs:6e5})).ok)throw new Error("Could not export the built release.");if(!(await e.sys.exec("tar",["-czf",Gn(n,"release.tgz"),"-C",n,"repo"],{timeoutMs:6e5})).ok)throw new Error("Could not archive the built release.");if(await t.writeFiles([{path:"/tmp/fnmoa-release.tgz",content:await uu(Gn(n,"release.tgz"))}]),await Do(t),!(await Ue(t,`set -eu
|
|
198
200
|
mkdir -p "$HOME/moa/release-next"
|
|
199
201
|
tar -xzf /tmp/fnmoa-release.tgz -C "$HOME/moa/release-next"
|
|
200
202
|
rm -f "$HOME/moa/fnmoa"
|
|
201
203
|
ln -s "$HOME/moa/release-next/repo" "$HOME/moa/fnmoa"
|
|
202
|
-
rm -f /tmp/fnmoa-release.tgz`)).ok)throw new Error("Could not install the release; the existing data is kept.")}finally{r&&await e.sys.exec("docker",["rm",o]),await
|
|
204
|
+
rm -f /tmp/fnmoa-release.tgz`)).ok)throw new Error("Could not install the release; the existing data is kept.")}finally{r&&await e.sys.exec("docker",["rm",o]),await Ti(n,{recursive:!0,force:!0})}}async function Ii(e,t,n){let o=e.sys.vercel;if(!o)return _("sandbox","Vercel SDK unavailable","Update the CLI");try{for(let i of await yt(e))if(i.mark==="fail")return i;let r=ao(e.state.answers.tenant??e.state.answers.owner??"workspace"),s=await o.get(t,r,!0),a=Gt();if(s&&await Uo(s)===a)return{box:s,built:!1,info:{name:r,workspaceUrl:s.domain(8787),consoleUrl:s.domain(3100),revision:a}};for(let i of await Un(e))if(i.mark==="fail")return i;if(s)n("Updating the application files; keeping the sandbox's data disk"),await fu(e,s);else{let i=await e.sys.fetch(`https://api.vercel.com/v9/projects/${encodeURIComponent(t.projectId)}?teamId=${encodeURIComponent(t.teamId)}`,{headers:{authorization:`Bearer ${t.token}`},signal:AbortSignal.timeout(15e3)});if(!i.ok)throw new Error("Could not resolve the Vercel project's registry name.");let{name:l}=await i.json();if(!/^[a-z0-9-]+$/i.test(l)||!/^[a-z0-9-]+$/i.test(t.team))throw new Error("Invalid Vercel registry namespace.");let d=`vcr.vercel.com/${t.team}/${l}/fnmoa:${a}`,u=await _i(Gn(Oi(),"fnmoa-vcr-"));try{if(await pu(Gn(u,"config.json"),JSON.stringify({auths:{"vcr.vercel.com":{auth:Buffer.from(`${t.teamId}:${t.token}`).toString("base64")}}}),{mode:384}),n(`Copying ${Ae()} to Vercel`),!(await e.sys.exec("docker",["tag",Ae(),d])).ok)throw new Error("Could not tag the release for Vercel.");if(!(await e.sys.exec("docker",["--config",u,"push",d],{timeoutMs:9e5})).ok)throw new Error("Could not push the release to Vercel Container Registry.")}finally{await Ti(u,{recursive:!0,force:!0})}if(n("Starting the sandbox from the release image"),s=await o.create(t,{name:r,size:$t(t.plan),image:`fnmoa:${a}`}),!(await Ue(s,`set -eu
|
|
203
205
|
mkdir -p "$HOME/moa"
|
|
204
|
-
ln -s /repo "$HOME/moa/fnmoa"`)).ok)throw new Error("Could not prepare the sandbox's application directory.")}if(!(await
|
|
205
|
-
`)[0]??"":String(p),"check the account on Checks & account, then press r")}let f=!1;if(await vo(l)!==r.revision){n("stopping the servers before the build");try{await $o(l)}catch(w){return C("sandbox",`the servers did not stop: ${w instanceof Error?w.message:String(w)}`,"press r to try again")}n(`building the image at ${r.revision.slice(0,7)} \u2014 several minutes the first time`);let p=await Ro(e),m=await Ja(l,r.url,r.revision,p&&"token"in p?p.token:void 0);if(!m.ok)return C("sandbox",`the image did not build: ${mt(m.stderr||m.stdout)}`,"fix that, then press r");if(f=!0,u){n("snapshotting the image");try{d=await l.snapshot(),l=await o.get(t,s,!0)??l}catch{}}}return{box:l,built:f,info:{name:s,workspaceUrl:l.domain(st),consoleUrl:l.domain(qt),...d?{snapshotId:d,teamId:t.teamId,projectId:t.projectId}:{},revision:r.revision}}}var Bd=async(e,t)=>(await _e(e,`test -s "$HOME/moa/env/workspace/${t}"`)).ok;async function Kd(e,t){return _e(e,t?'claude -p "$PROMPT"':'CLAUDE_CODE_OAUTH_TOKEN=$(cat "$HOME/moa/env/workspace/CLAUDE_CODE_OAUTH_TOKEN") exec claude -p "$PROMPT"',{PROMPT:mn,...t?{CLAUDE_CODE_OAUTH_TOKEN:t}:{}},18e4)}async function Jd(e){let{state:t}=e,n=await Br(e);if(Oo(n))return{lines:[n]};let o=await Kr(e,n);if(Oo(o))return{lines:[o]};let{box:r,info:s}=o,a=ft(n.plan),i=[v("sandbox",`${s.name} \u2014 ${r.vcpus??a.vcpus} vCPU, persistent, fnMoa ${s.revision?.slice(0,7)??""}`)],c={claude:!1,codex:!1},l=ze(e),d=!l&&await Bd(r,"CLAUDE_CODE_OAUTH_TOKEN");if(l||d){let p=await Kd(r,l?.token);c.claude=p.ok&&/\bok\b/i.test(p.stdout),i.push(c.claude?v("claude",`token ${K} (${l?l.from:"kept in the sandbox"}) \u2014 "reply ok" in the sandbox`):C("claude",`the token did not answer: ${mt(p.stdout||p.stderr)||"no answer"}`,"press t to make a new one with `claude setup-token`, or e to paste it again"))}else i.push(J("claude","no token carried in \u2014 t to make one with `claude setup-token`"));let u=await r.exec("codex",["login","status"],{timeoutMs:6e4});c.codex=u.ok,i.push(u.ok?v("codex",`${ye(u.stdout)||"logged in"} \u2014 its own session in the sandbox (l to log in again)`):J("codex","not logged in inside the sandbox \u2014 l to log in with a code"));let f=t.answers.agentCli??(c.claude?"claude":c.codex?"codex":void 0);return f?i.push(c[f]?v("proof run",`uses ${f} (\u2191 \u2193 to change)`):C("proof run",`${f} is not ready in the sandbox`,f==="claude"?"press t to carry a token in \u2014 or \u2191 \u2193 to choose codex":"press l to log codex in \u2014 or \u2191 \u2193 to choose claude")):i.push(C("agent","neither claude nor codex is logged in inside the sandbox","press t to carry a claude token in, or l to log codex in")),i.push(J("note","owner only: your subscriptions; teammates use them, never see them (moa setup login)")),{lines:i,answers:{sandbox:s,...f?{agentCli:f}:{},loggedIn:["claude","codex"].filter(p=>c[p])}}}function mi(e,t){let n=!1,o=()=>{n=!0};return{done:(async()=>{let s=await Br(e);if(Oo(s))return{ok:!1,stdout:"",stderr:s.detail??"no account"};let a=e.state.answers.sandbox?.name??zn(Fr(e.state)),i=await Hr(e.sys).get(s,a,!0);if(!i)return{ok:!1,stdout:"",stderr:`${a} is not there`};if(n)return{ok:!1,stdout:"",stderr:"stopped"};let c="",l=i.stream("codex",["login","--device-auth"],d=>{c+=d,t(qn(c))});return o=l.cancel,l.done})(),cancel:()=>o()}}async function Wd(e){let{sys:t,state:n,secrets:o}=e,r=ke(e),s=[];if(r){let i=await gn(t,r,Fr(n)),c=`secret ${K} (${r.from}), graph ${r.graph}`;s.push(i.read.ok&&i.write.ok?v("LocusGraph",`${c} \u2014 one graph read, one event written`):C("LocusGraph",`${c} \u2014 ${i.read.ok?`the write failed: ${i.write.why}`:`the read failed: ${i.read.why}`}`,"e to paste the secret again, or check LOCUSGRAPH_GRAPH_ID \u2014 then r"))}else n.deployed?.runner==="vercel"&&n.deployed.memoryKept&&!o.noLocusgraph?s.push(J("LocusGraph","the secret the last deploy gave the sandbox, kept there (e to replace it)")):s.push(J("LocusGraph","no secret \u2014 memory stays in the workspace process (e to paste one)"));let a=n.answers.store??"postgres";return s.push(a==="postgres"?v("database","Postgres, in the sandbox on its kept disk \u2014 migrated at deploy (\u2191 \u2193 for SQLite)"):v("database","SQLite, on the sandbox's kept disk \u2014 migrated at deploy (\u2191 \u2193 for Postgres)")),{lines:s,answers:{store:a}}}function qd(e){let t=Ur(e),{githubApp:n,sandbox:o}=e.state.answers,r=[...t.lines];return o?n&&n.consoleUrl!==o.consoleUrl?r.unshift(C("callback",`${n.slug} signs people in at ${n.consoleUrl??"localhost"}, not ${o.consoleUrl}`,"press g to create an app for the sandbox's console")):r.unshift(v("console",`${o.consoleUrl} \u2014 GitHub sends people back here`)):r.unshift(C("console","no sandbox yet","Esc back to Agent logins: the sandbox is made there")),{lines:r,answers:t.answers??{}}}var gi={...Co,checks:Hd,github:Fd,logins:Jd,memory:Wd,access:qd};var tn="vercel";async function Io(e,t,n){let o=Date.now()+n*1e3;for(;Date.now()<o;){if(await e.fetch(t,{signal:AbortSignal.timeout(5e3)}).then(s=>s.ok).catch(()=>!1))return!0;await e.sleep(1e3)}return!1}var zd=e=>typeof e=="object"&&e!==null&&"mark"in e;async function Lo(e){if(!e.sys.vercel)return{label:"account",detail:"this build of moa cannot reach Vercel",fix:"update moa"};try{let{vercelTeam:t,vercelScope:n}=e.state.answers;return await e.sys.vercel.account(t,n)}catch(t){return{label:"account",detail:t instanceof Error?t.message:String(t),fix:"run `vercel login`, then Enter"}}}var nn=e=>typeof e=="object"&&e!==null&&"fix"in e&&"label"in e;async function Uo(e,t,n=()=>{}){let{sys:o,state:r}=e,s=[],a=V=>{let Be=s.findIndex(Ke=>Ke.label===V.label);Be===-1?s.push(V):s[Be]=V,t([...s])},i,c=(V,Be,Ke)=>(a({label:V,mark:"fail",detail:Be,fix:Ke}),i?{ok:!1,deployed:i}:{ok:!1}),l=r.answers.githubApp,d=l?Me(o,l):void 0;if(!l||!d)return c("GitHub App",l?`the client secret for ${l.slug} is not on this machine`:"none yet","Esc back to Console access and press g");a({label:"sandbox",mark:"wait",detail:"looking for it"});let u=await Lo(e);if(nn(u))return c(u.label,u.detail,u.fix);let f=await Kr(e,u,V=>a({label:"sandbox",mark:"wait",detail:V}));if(zd(f))return c("sandbox",f.detail??"",f.fix??"Enter to try again");let{box:p,info:m,built:w}=f,b=ft(u.plan);a({label:"sandbox",mark:"ok",detail:`${m.name} \u2014 ${p.vcpus??b.vcpus} vCPU, persistent${w?", image built":""}`});let g=m.workspaceUrl,k=m.consoleUrl;if(l.consoleUrl!==k)return c("GitHub App",`${l.slug} signs people in at ${l.consoleUrl??"localhost"}, not ${k}`,"Esc back to Console access and press g");let{token:O,pending:P,before:R,had:Y}=await Mt(o,tn,g);a({label:"owner token",mark:"ok",detail:`${K} \u2014 profile ${tn} in ~/.moa/config.json${R===tn||!Y?"":`; \`moa\` now talks to the sandbox, not profile ${R} (\`moa use ${R}\` to go back)`}`});let we=r.answers.tenant??xe(r.answers.owner),I=r.answers.owner,X=ke(e),U=ze(e)?.token,H=await Ro(e),W={...Object.fromEntries(Object.entries(await Dt(e)).map(([V,Be])=>[`workspace/${V}`,Be])),store:r.answers.store??"postgres","workspace/MOA_TOKENS":`${O}:${we}`,"workspace/PORT":String(st),"workspace/MOA_PORT":String(st),"workspace/MOA_SELF_URL":`http://127.0.0.1:${st}`,"workspace/MOA_MAX_CONCURRENT_RUNS":String(b.maxRuns),"workspace/MOA_REPO":r.answers.repo,"workspace/MOA_OWNER_LOGIN":I,"workspace/MOA_GITHUB_CLIENT_ID":l.clientId,"workspace/LOCUSGRAPH_AGENT_SECRET":X?.secret,"workspace/LOCUSGRAPH_GRAPH_ID":X?.graph,"workspace/LOCUSGRAPH_SERVER_URL":X?.server,"workspace/CLAUDE_CODE_OAUTH_TOKEN":U,"workspace/GH_TOKEN":H&&"token"in H?H.token:void 0,"console/MOA_URL":`http://127.0.0.1:${st}`,"console/MOA_TOKEN":O,"console/AUTH_GITHUB_ID":l.clientId,"console/AUTH_GITHUB_SECRET":d.clientSecret,"console/AUTH_SECRET":d.authSecret,"console/AUTH_URL":k,"console/AUTH_TRUST_HOST":"true"};if(!H)return c("secrets","no GitHub token for the sandbox","Esc back to GitHub and press k to paste one");let de=["workspace/MOA_CLIENT_ADDRESS",...r.answers.repo?[]:["workspace/MOA_REPO"],...I?[]:["workspace/MOA_OWNER_LOGIN"],...e.secrets.noLocusgraph?["workspace/LOCUSGRAPH_AGENT_SECRET","workspace/LOCUSGRAPH_GRAPH_ID","workspace/LOCUSGRAPH_SERVER_URL"]:[]];a({label:"secrets",mark:"wait",detail:"writing them into the sandbox"});let _=await Ba(p,W,de);if(!_.ok)return c("secrets",`not written: ${_.why??"no answer"}`,"Enter to try again");let Te=["workspace/MOA_TOKENS","workspace/LOCUSGRAPH_AGENT_SECRET","workspace/CLAUDE_CODE_OAUTH_TOKEN","workspace/GH_TOKEN","console/MOA_TOKEN","console/AUTH_GITHUB_SECRET","console/AUTH_SECRET"].filter(V=>W[V]!==void 0);a({label:"secrets",mark:"ok",detail:`${Te.length} written \u2014 none shown; no Vercel token in the sandbox`});let pe=_.changed||w;a({label:"workspace",mark:"wait",detail:pe?`starting on :${st}`:"checking it runs"});try{await br(p,pe)}catch(V){return c("workspace",`the start did not run: ${V instanceof Error?V.message:String(V)}`,"Enter to try again")}let T=r.deployed?.workspaceUrl===g?r.deployed.people:void 0,Ae=V=>{i={runner:"vercel",workspaceUrl:g,consoleUrl:k,...T?{people:T}:{},...V?{memoryKept:V}:{},at:new Date().toISOString()},n(i)},M=r.deployed?.runner==="vercel"?r.deployed.memoryKept:void 0,N=X?!0:e.secrets.noLocusgraph?!1:M;if(Ae(N),!await Io(o,`${g}/health`,180))return c("workspace",`did not answer at ${g} \u2014 ${await wn(p,"workspace")||"no log yet"}`,"fix that, then Enter");let se=D({url:g,token:O},o.fetch);if(!await se.get("/v1/whoami").then(()=>!0,()=>!1))return c("workspace","it started but refuses the owner token","Enter to try again");P&&await Nt(o,tn,g,O),a({label:"workspace",mark:"ok",detail:`${g} \u2014 :${st} in the sandbox`});let te=await xr(o,g,a,r.answers.store??"postgres",`look at the sandbox's ~/moa/logs \u2014 ${await wn(p,"postgres")}`);if(te)return c(te.label,te.detail,te.fix);let me=await Vt(se,r,a,T);if(me)return c(me.label,me.detail,me.fix);let Fe=T;if(T=r.answers.people??[],JSON.stringify(T)!==JSON.stringify(Fe??[])&&Ae(N),a({label:"console",mark:"wait",detail:`waiting for :${qt}`}),!await Io(o,k,180))return c("console",`did not answer at ${k} \u2014 ${await wn(p,"console")||"no log yet"}`,"fix that, then Enter");a({label:"console",mark:"ok",detail:`${k} \u2014 Sign in with GitHub`}),pe&&await Ka(p);let ve=r.answers.agentCli??"claude",Oe=[...new Set([ve,...r.answers.loggedIn??[]])],Ee=await Yt(se,Oe,"in the sandbox",()=>"Esc back to Agent logins and log it in again, then Enter",a);if("label"in Ee)return c(Ee.label,Ee.detail,Ee.fix);let ge=await Xt(se,a);if("label"in ge)return c(ge.label,ge.detail,ge.fix);ge.live!==void 0&&(N=ge.live),a({label:"Console",mark:"ok",detail:k}),a({label:"Workspace",mark:"ok",detail:g}),a({label:"Next",mark:"skip",detail:`moa setup status \xB7 moa setup stop \xB7 moa run ${vn(ve)} "\u2026"`});let E=Ee.runs[ve];return{ok:!0,deployed:{runner:"vercel",workspaceUrl:g,consoleUrl:k,...E?{proofRunId:E}:{},memory:ge.memory,people:T,...N?{memoryKept:N}:{},at:new Date().toISOString()}}}async function Do(e,t){let n=e.state.answers.sandbox;if(e.state.target!=="vercel"||!n)return{label:"sandbox",detail:"moa setup has not made one",fix:"run `moa setup` and choose Vercel Sandbox"};let o=await Lo(e);if(nn(o))return o;try{let r=await e.sys.vercel?.get(o,n.name,t);return r?{box:r}:{label:"sandbox",detail:`${n.name} is not there`,fix:"run `moa setup` to make it again"}}catch(r){return{label:"sandbox",detail:r instanceof Error?r.message:String(r),fix:"check `vercel whoami`, then try again"}}}async function hi(e,t){let{sys:n,state:o}=e,r=await Do(e,!0);if(nn(r))return t({label:r.label,mark:"fail",detail:r.detail,fix:r.fix}),!1;let{box:s}=r;t({label:"sandbox",mark:"ok",detail:`${s.name} \u2014 ${s.status}${s.vcpus?`, ${s.vcpus} vCPU`:""}`});let a=o.answers.sandbox;try{await br(s,!1)}catch(w){return t({label:"workspace",mark:"fail",detail:`the start did not run: ${mt(w instanceof Error?w.message:String(w))}`,fix:"try again, or run `moa setup` to deploy it again"}),!1}let i={workspace:s.domain(st),console:s.domain(qt)};if(i.workspace!==a.workspaceUrl||i.console!==a.consoleUrl){let w=[...i.workspace!==a.workspaceUrl?[`the workspace is at ${i.workspace}, not ${a.workspaceUrl}`]:[],...i.console!==a.consoleUrl?[`the console is at ${i.console}, not ${a.consoleUrl}`]:[]];return t({label:"URLs",mark:"fail",detail:`the sandbox's domain has changed \u2014 ${w.join("; ")}`,fix:"run `moa setup` to deploy it again, and press g on Console access for the new callback"}),!1}if(!await Io(n,`${a.workspaceUrl}/health`,180))return t({label:"workspace",mark:"fail",detail:`no answer at ${a.workspaceUrl} \u2014 ${await wn(s,"workspace")||"no log"}`,fix:"run `moa setup` to deploy it again"}),!1;let l=(await Pe(n.env)).profiles[tn];if(!l||l.url!==a.workspaceUrl)return t({label:"workspace",mark:"fail",detail:`${a.workspaceUrl} answers, but this machine has no token for it`,fix:"run `moa setup` to deploy it again"}),!1;let d=D(l,n.fetch),u=await n.fetch(`${a.workspaceUrl}/health`,{signal:AbortSignal.timeout(5e3)}).then(w=>w.json()).catch(()=>({})),f=await d.get("/v1/whoami").then(()=>{},w=>w instanceof re?`${w.status}`:String(w));t(f?{label:"workspace",mark:"fail",detail:`refuses the owner token (${f})`,fix:"run `moa setup` to deploy it again"}:{label:"workspace",mark:"ok",detail:`${a.workspaceUrl}${u.database?` \u2014 ${u.database}`:""}`});let p=await d.get("/v1/jobs").then(w=>w.jobs).catch(()=>{});if(p){let w=p.filter(b=>b.state==="running"||b.state==="queued");t({label:"pipelines",mark:"ok",detail:w.length===0?"nothing running":`${w.length} running or waiting \u2014 carried on from before the stop (moa jobs)`})}let m=await Io(n,a.consoleUrl,180);return t(m?{label:"console",mark:"ok",detail:`${a.consoleUrl} \u2014 Sign in with GitHub`}:{label:"console",mark:"fail",detail:`no answer at ${a.consoleUrl} \u2014 ${await wn(s,"console")||"no log"}`,fix:"run `moa setup` to deploy it again"}),!f&&m}async function wi(e,t){let n=await Do(e,!1);if(nn(n))return t({label:n.label,mark:"fail",detail:n.detail,fix:n.fix}),!1;try{await n.box.stop()}catch(o){return t({label:"sandbox",mark:"fail",detail:`did not stop: ${mt(o instanceof Error?o.message:String(o))}`,fix:"try again"}),!1}return t({label:"sandbox",mark:"ok",detail:`${n.box.name} stopped \u2014 its disk is kept; \`moa setup status\` starts it again`}),!0}import{jsx as Z,jsxs as $e}from"react/jsx-runtime";var Ne=(e,t)=>({...e,answers:{...e.answers,...t}}),Qd=[{value:"vercel",label:"Vercel Sandbox",note:"one VM, 24h sessions, resumes by name"},{value:"cloudflare",label:"Cloudflare",note:"Worker + container, needs your domain"},{value:"local",label:"This machine",note:"Docker / local, nothing in the cloud"}],Zd={where:{options:e=>Qd.map(t=>{let n=mo(t.value,Jn(e,t.value));return n?{...t,note:n}:t}),value:e=>e.target,set:(e,t)=>rt(e,t)},checks:{options:()=>[{value:"image",label:"Published image",note:"pull the release from GHCR \u2014 nothing is built here"},{value:"checkout",label:"This checkout",note:"build from source \u2014 for working on fnMoa"}],value:e=>fn(e),set:(e,t)=>Ne(e,{source:t})},logins:{options:()=>[{value:"claude",label:"claude",note:"for the proof run"},{value:"codex",label:"codex",note:"for the proof run"}],value:e=>e.answers.agentCli,set:(e,t)=>Ne(e,{agentCli:t})},memory:{options:e=>e.target==="vercel"?[{value:"postgres",label:"Postgres",note:"in the sandbox, on its kept disk"},{value:"sqlite",label:"SQLite",note:"a file on the sandbox's kept disk"}]:[{value:"node",label:"SQLite",note:"node apps/workspace/dist/node.js"},{value:"compose",label:"Postgres",note:"docker compose up (apps/workspace/compose.yaml)"}],value:e=>e.target==="vercel"?e.answers.store??"postgres":e.answers.runner??"node",set:(e,t)=>e.target==="vercel"?Ne(e,{store:t}):Ne(e,{runner:t})}},Jr=e=>e.target==="vercel",bi=/^[a-z\d](?:[a-z\d-]{0,38})$/i;function eu(e,t){let n=e.answers.people??[],o=f=>p=>p.login.toLowerCase()===f.toLowerCase(),r="a GitHub login, then member or viewer, then a cap in $/day \u2014 or -login to remove",[s,...a]=t.split(/\s+/).filter(Boolean);if(!s)return r;if(s.startsWith("-")){let f=s.slice(1);if(!n.some(o(f)))return`${f} is not on the list`;let p=n.filter(w=>!o(f)(w)),m=[...new Set([...e.answers.removed??[],f.toLowerCase()])];return Ne(e,{people:p.length>0?p:void 0,removed:m})}if(!bi.test(s))return r;if(e.answers.owner&&s.toLowerCase()===e.answers.owner.toLowerCase())return`${s} is you \u2014 the owner already`;let i=n.find(o(s)),c=i?.role??"member",l=i?.dailyCapUsd??dr;for(let f of a){let p=f.toLowerCase(),m=Number(p.replace(/^\$|\/day$/g,""));if(p==="member"||p==="viewer")c=p;else if(Number.isFinite(m)&&m>=0&&m<=1e4)l=m;else return r}let d={login:s,role:c,dailyCapUsd:l},u=(e.answers.removed??[]).filter(f=>f!==s.toLowerCase());return Ne(e,{people:i?n.map(f=>o(s)(f)?d:f):[...n,d],removed:u.length>0?u:void 0})}var Mo=e=>e.target==="cloudflare",tu={checks:[{key:"l",label:"Licence key",secret:!0,shown:(e,t)=>t.licence?K:"saved key, or none",commit:(e,t,n)=>(t.licence=n||void 0,e)},{key:"d",label:"Domain",when:Mo,shown:e=>e.answers.domain??"none",commit:(e,t,n)=>{let o=n.toLowerCase().replace(/^https?:\/\//,"").replace(/\/+$/,"");return o===""?Ne(e,{domain:void 0}):er.test(o)?Ne(e,{domain:o}):"a domain on your Cloudflare account, like example.com"}},{key:"k",label:"D1 token",secret:!0,when:Mo,shown:(e,t)=>t.cloudflare?K:"none",commit:(e,t,n)=>/\s/.test(n)?"one token, no spaces":(t.cloudflare=n||void 0,e)},{key:"e",label:"Vercel team",when:Jr,shown:e=>e.answers.vercelTeam??"the one Vercel picks",initial:e=>e.answers.vercelTeam??"",commit:(e,t,n)=>n===""||/^[\w-]{1,100}$/.test(n)?Ne(e,{vercelTeam:n||void 0,vercelScope:void 0}):"a team's slug or id, as `vercel teams ls` shows it"}],github:[{key:"e",label:"Repo",shown:e=>e.answers.repo??"none",commit:(e,t,n)=>n===""?{...e,answers:{...e.answers,repo:void 0}}:/^[\w.-]+\/[\w.-]+$/.test(n)?Ne(e,{repo:n}):"owner/name, like fnLog0/fnmoa"},{key:"k",label:"GitHub token",secret:!0,when:e=>Jr(e)||Mo(e),shown:(e,t)=>t.github?K:Jr(e)?"none \u2014 your own gh login":"none",commit:(e,t,n)=>/\s/.test(n)?"one token, no spaces":(t.github=n||void 0,e)}],logins:[{key:"e",label:"claude token",secret:!0,shown:(e,t)=>t.claude?K:"none",commit:(e,t,n)=>/\s/.test(n)?"one token, no spaces \u2014 what `claude setup-token` printed":(t.claude=n||void 0,e)}],memory:[{key:"e",label:"LocusGraph secret",secret:!0,shown:(e,t)=>t.locusgraph?K:"none",commit:(e,t,n)=>(t.locusgraph=n||void 0,t.noLocusgraph=!n,e)}],access:[{key:"e",label:"Tenant",shown:e=>e.answers.tenant??"",commit:(e,t,n)=>/^[a-z0-9][a-z0-9-]{0,62}$/.test(n)?Ne(e,{tenant:n}):"lower-case letters, digits and dashes"},{key:"o",label:"App owner",shown:e=>e.answers.appOrg??"your account (o for an organization)",initial:e=>e.answers.appOrg??"",commit:(e,t,n)=>n===""||bi.test(n)?Ne(e,{appOrg:n||void 0}):"a GitHub organization's login, or nothing for your own account"},{key:"a",label:"Add people",shown:()=>"login member|viewer $/day \u2014 -login takes them off",initial:()=>"",commit:(e,t,n)=>eu(e,n)}]},Wr=(e,t)=>{let n=[...e];for(let o of t){let r=n.findIndex(s=>s.label===o.label);r===-1?n.unshift(o):n[r]=o}return n},yi={ok:{char:"\u2713",color:"green"},fail:{char:"\u2717",color:"red"},wait:{char:"\u2026",color:"yellow"},skip:{char:"\u2013",color:"gray"}},qr={where:"Where",checks:"Checks",github:"GitHub",memory:"Memory",logins:"Logins",access:"Access",deploy:"Deploy"},nu=Object.fromEntries(nt.filter(e=>e!=="where"&&e!=="deploy").map((e,t)=>[String(t+1),e])),ou={local:"this machine",vercel:"the Vercel Sandbox",cloudflare:"Cloudflare"},ru={ok:"ok",fail:"failing",wait:"checking"};function su({screen:e,passed:t}){return Z(He,{columnGap:2,flexWrap:"wrap",children:nt.map(n=>n===e?$e(oe,{bold:!0,color:"cyan",children:["\u25B8 ",qr[n]]},n):t.includes(n)?$e(oe,{color:"green",children:["\u2713 ",qr[n]]},n):$e(oe,{dimColor:!0,children:[" ",qr[n]]},n))})}function No({title:e,aside:t,children:n}){return $e(He,{flexDirection:"column",marginTop:1,children:[$e(He,{justifyContent:"space-between",children:[Z(oe,{bold:!0,dimColor:!0,children:e.toUpperCase()}),t?Z(oe,{dimColor:!0,children:t}):null]}),n]})}function au({rows:e}){let t=Math.max(...e.map(n=>n.label.length));return Z(No,{title:"review",children:e.map(n=>$e(He,{children:[Z(He,{flexShrink:0,width:t+2,children:Z(oe,{dimColor:!0,children:n.label})}),Z(oe,{children:n.value})]},n.label))})}function iu({hints:e}){return Z(He,{columnGap:2,flexWrap:"wrap",paddingX:1,children:e.map(t=>{let n=t.indexOf(" ");return $e(oe,{children:[Z(oe,{bold:!0,children:t.slice(0,n)}),Z(oe,{dimColor:!0,children:t.slice(n)})]},t)})})}var cu=e=>[e.deployed?{label:"last deploy",mark:"skip",detail:`console ${e.deployed.consoleUrl} \xB7 workspace ${e.deployed.workspaceUrl} \u2014 Enter to check it again`}:{label:"deploy",mark:"wait",detail:e.target==="vercel"?"Enter to write the secrets into the sandbox, start the workspace and console, and prove it with one agent run and one memory read":e.target==="cloudflare"?"Enter to deploy the Worker, D1 and the container to your domain, and prove it with one agent run and one memory read":"Enter to build, start the workspace and console, and prove it with one agent run and one memory read"}];function $i({initial:e,sys:t,save:n,checks:o,deploy:r,createApp:s=si,onDone:a,secrets:i,onHandOver:c,pasteFirst:l=!1,deviceLogin:d=Ra,after:u={}}){let{exit:f}=Vd(),[p,m]=at(()=>e.screen==="where"&&!e.target?{...e,target:"local"}:e),[w,b]=at([]),[g,k]=at(!1),[O,P]=at(0),R=l&&e.screen==="logins",[Y,we]=at(R?"":void 0),[I,X]=at(R?"e":void 0),U=wt(void 0),H=wt([]),W=h=>Wr(h,H.current),[de,_]=at(void 0),[Te,pe]=at(!1),[T,Ae]=at("no"),M=wt(i??{}).current,N=wt(void 0),[se,fe]=at(0),te=wt(Promise.resolve()),me=wt(0),[Fe,ve]=at(!1),Oe=wt(!1),Ee=h=>{Oe.current=h,ve(h)},ge=wt(e.screen!=="where").current,E=p.screen,V=p.target==="vercel",Be=o??(V?gi:Co),Ke=r??(V?Uo:p.target==="cloudflare"?_o:So),et=E==="checks"&&De({sys:t,state:p}),kt=V||p.answers.runner==="compose",ce=wt(p);ce.current=p;let Ht=wt(p),ne=h=>{Ht.current!==h&&(Ht.current=h,te.current=te.current.then(()=>n(h)).catch(()=>{}))};ki(()=>ne(p),[p,n]);let Ce=()=>(ne(ce.current),te.current),{answers:le}=p,Je=JSON.stringify([E,p.target,le,O,se]);ki(()=>{if(E==="deploy"){g||b(cu(p));return}let h=++me.current;b(A=>A.map(B=>H.current.some(L=>L.label===B.label)?B:{...B,mark:"wait"})),k(!0),Promise.resolve(Be[E]?.({state:p,sys:t,secrets:M})??{lines:[]}).then(async A=>({...A,lines:[...A.lines,...!o&&E==="checks"?await ut({state:p,sys:t,secrets:M}):[]]})).then(A=>{if(h!==me.current)return;let B=W(A.lines);b(B),U.current||k(!1);let L=A.answers??{};Object.entries(L).some(([In,oo])=>p.answers[In]!==oo)&&m(In=>Ne(In,L));let yt=Oe.current;Ee(!1),yt&&Qn(B)&&Bo(E)},A=>{h===me.current&&(b(W([{label:"check",mark:"fail",detail:String(A),fix:"press r to check again"}])),U.current||k(!1),Ee(!1))})},[Je]);let tt=h=>{U.current?.abort(),Ce().then(()=>{a?.(ce.current,h),f()})},Rn=()=>{k(!0),_(void 0);let h=L=>b([{label:"licence",mark:"wait",detail:L},{label:"note",mark:"skip",detail:"sign in there and approve it \u2014 Esc to stop"}]);h("asking the licence server for a code\u2026");let A=new AbortController,B={done:go({state:p,sys:t,secrets:M},L=>h(`open ${L.url} and check it shows ${L.code}`),A.signal).then(()=>({ok:!0,stdout:"",stderr:""}),L=>({ok:!1,stdout:"",stderr:L instanceof Error?L.message:String(L)})),cancel:()=>A.abort()};N.current=B,B.done.then(L=>{N.current===B&&(N.current=void 0,k(!1),L.ok||_(`not connected: ${L.stderr}`),P(j=>j+1))})},Qr=()=>{let h=De({sys:t,state:p})?void 0:t.root;if(!h&&!V)return;k(!0);let A=L=>b([{label:"codex",mark:"wait",detail:L.url&&L.code?`open ${L.url} and enter ${L.code} \u2014 waiting for you to approve it`:`asking codex for a code inside the ${V?"sandbox":"container"}\u2026`},{label:"note",mark:"skip",detail:"its own session, not a copy of this machine's \u2014 Esc to stop"}]);A({});let B=V||!h?mi({state:p,sys:t,secrets:M},A):d(t,h,A);N.current=B,B.done.then(L=>{N.current===B&&(N.current=void 0,k(!1),L.ok||_(`codex login did not finish: ${(L.stderr||L.stdout).trim().split(`
|
|
206
|
-
`).slice(-1)[0]??""}`),
|
|
207
|
-
`).filter(n=>n.trim()!=="").slice(-t).join(" \xB7 ").slice(0,300),
|
|
206
|
+
ln -s /repo "$HOME/moa/fnmoa"`)).ok)throw new Error("Could not prepare the sandbox's application directory.")}if(!(await Ue(s,'printf %s "$VERSION" > "$HOME/moa/image"',{VERSION:a})).ok)throw new Error("Could not record the installed version.");return{box:s,built:!0,info:{name:r,workspaceUrl:s.domain(8787),consoleUrl:s.domain(3100),revision:a}}}catch(r){return _("sandbox",r instanceof Error?r.message:String(r),"Check your account and retry; data is kept.")}}var ns=e=>{if(!e.vercel)throw new Error("this build of moa cannot reach Vercel");return e.vercel},os=e=>e.answers.tenant??Ie(e.answers.owner),Ri=e=>{let t=/^git@([^:]+):(.+)$/.exec(e.trim());return t?`https://${t[1]}/${t[2]}`:e.trim()};async function Di(e){let t=e.root;if(!t)return{why:"not inside a fnMoa checkout",fix:"run moa setup from a clone of https://github.com/fnLog0/fnmoa"};let n=(...i)=>e.exec("git",["-C",t,...i]),[o,r,s]=await Promise.all([n("rev-parse","HEAD"),n("remote","get-url","origin"),n("branch","-r","--contains","HEAD")]),a=pe(o.stdout),c=pe(r.stdout);return!o.ok||!a||!r.ok||!c?{why:"this checkout has no commit, or no origin",fix:"clone fnMoa from GitHub"}:!s.ok||!s.stdout.trim()?{why:`commit ${a.slice(0,7)} is not on ${Ri(c)} \u2014 the sandbox clones it from there`,fix:"push it, or check out a commit that is pushed, then press r"}:{url:Ri(c),revision:a}}async function rs(e){try{let{vercelTeam:t,vercelScope:n}=e.state.answers;return await ns(e.sys).account(t,n)}catch(t){let n=t instanceof Error?t.message:String(t);return _("account",n,/not installed/.test(n)?"install the Vercel CLI: npm i -g vercel":/signed in|token/i.test(n)?"run `vercel login`, then press r":"check the team (e), then press r")}}var Jo=e=>typeof e=="object"&&e!==null&&"mark"in e;async function mu(e){let{sys:t}=e,o=[Number(process.versions.node.split(".")[0])>=22?v("node",process.versions.node):_("node",process.versions.node,"install node 22 or newer"),...await Promise.all([pn(t,"git","install git"),pn(t,"gh","install the GitHub CLI: https://cli.github.com"),pn(t,"vercel","install the Vercel CLI: npm i -g vercel")])],r=Oe(e)?{url:"GHCR",revision:Ae()}:await Di(t);o.push("why"in r?_("fnMoa",r.why,r.fix):v("fnMoa",`${r.revision.slice(0,7)} from ${r.url} \u2014 built in the sandbox`));let s=await rs(e);if(Jo(s))return o.push(s),{lines:o};let a=$t(s.plan);return o.push(v("account",`${s.user} \xB7 team ${s.team} \xB7 ${ni(s.plan,a)}`),v("estimate",Lo(a)),v("storage",oi(a))),s.plan==="hobby"&&o.push(H("note","Hobby: a session stops after 45 minutes \u2014 `moa setup status` starts it again, and pipelines carry on")),{lines:o,answers:{vercelTeam:s.team,vercelPlan:s.plan,vercelScope:{teamId:s.teamId,projectId:s.projectId}}}}async function Wo(e){if(e.secrets.github)return{token:e.secrets.github,from:"pasted"};if(e.state.answers.githubToken==="pasted"&&e.state.deployed?.runner==="vercel")return{kept:!0};let t=await e.sys.exec("gh",["auth","token"]),n=pe(t.stdout);return t.ok&&n?{token:n,from:"own"}:void 0}async function Li(e,t,n){try{let o=await e.fetch(`https://api.github.com${n}`,{headers:{Authorization:`Bearer ${t}`,Accept:"application/vnd.github+json"},signal:AbortSignal.timeout(15e3)});return o.ok?await o.json():o.status}catch{return 0}}async function gu(e){let{sys:t,state:n}=e,o=await t.exec("gh",["api","user","--jq",".login"]),r=pe(o.stdout);if(!o.ok||!r)return{lines:[_("gh login",o.missing?"gh is not installed":"gh has no login on this machine","run `gh auth login`, then press r to check again")]};let s=[v("owner",`${r} \u2014 you, the first owner`)],a=await Wo(e),c,i;if(!a)s.push(_("GitHub token","none for the sandbox","press k to paste a fine-grained token \u2014 a bot account's is best"));else if("kept"in a)i="pasted",s.push(H("GitHub token","the one pasted before, kept in the sandbox (k to replace it)"));else{let d=await Li(t,a.token,"/user");typeof d=="number"?s.push(_("GitHub token",`GitHub refused it${d?` (${d})`:""}`,"press k to paste another \u2014 contents, pull requests, issues read/write; checks, actions read")):(c=a.token,i=a.from,s.push(v("GitHub token",a.from==="pasted"?`${D} \u2014 ${d.login??"?"}${d.login?.toLowerCase()===r.toLowerCase()?" (your own)":" (bot account)"}`:`${D} \u2014 your own gh login; a bot account's is better (k to paste one)`)))}let l=n.answers.repo;if(!l)s.push(H("repo","none \u2014 a pipeline can name any repository later (e to set one)"));else if(c){let d=await Li(t,c,`/repos/${l}`);s.push(typeof d!="number"&&d.permissions?.push?v("repo",`${l} \u2014 the token can push`):_("repo",typeof d=="number"?`${l} is not a repository the token can see`:`the token cannot push to ${l}`,"give the token this repository, or press e to change it"))}return{lines:s,answers:{owner:r,...i?{githubToken:i}:{}}}}async function ss(e,t,n=()=>{}){if(Oe(e))return Ii(e,t,n);let o=ns(e.sys),r=await Di(e.sys);if("why"in r)return _("sandbox",r.why,r.fix);let s=ao(os(e.state)),a=e.state.answers.sandbox?.name===s?e.state.answers.sandbox:void 0,c=a?.teamId===t.teamId&&a.projectId===t.projectId?a.snapshotId:void 0,i=$t(t.plan),l,d=c,u=!1;try{n(`looking for ${s}`),l=await o.get(t,s,!0),!l&&d&&(n(`making ${s} from its snapshot \u2014 ${i.vcpus} vCPU, persistent`),l=await o.create(t,{name:s,size:i,snapshotId:d}).catch(()=>{}),l||(d=void 0)),l||(n(`making ${s} \u2014 ${i.vcpus} vCPU, persistent`),l=await o.create(t,{name:s,size:i}),u=!0)}catch(p){return _("sandbox",p instanceof Error?p.message.split(`
|
|
207
|
+
`)[0]??"":String(p),"check the account on Checks & account, then press r")}let f=!1;if(await Uo(l)!==r.revision){n("stopping the servers before the build");try{await Do(l)}catch(y){return _("sandbox",`the servers did not stop: ${y instanceof Error?y.message:String(y)}`,"press r to try again")}n(`building the image at ${r.revision.slice(0,7)} \u2014 several minutes the first time`);let p=await Wo(e),g=await ai(l,r.url,r.revision,p&&"token"in p?p.token:void 0);if(!g.ok)return _("sandbox",`the image did not build: ${vt(g.stderr||g.stdout)}`,"fix that, then press r");if(f=!0,u){n("snapshotting the image");try{d=await l.snapshot(),l=await o.get(t,s,!0)??l}catch{}}}return{box:l,built:f,info:{name:s,workspaceUrl:l.domain(ft),consoleUrl:l.domain(sn),...d?{snapshotId:d,teamId:t.teamId,projectId:t.projectId}:{},revision:r.revision}}}var hu=async(e,t)=>(await Ue(e,`test -s "$HOME/moa/env/workspace/${t}"`)).ok;async function wu(e,t){return Ue(e,t?'claude -p "$PROMPT"':'CLAUDE_CODE_OAUTH_TOKEN=$(cat "$HOME/moa/env/workspace/CLAUDE_CODE_OAUTH_TOKEN") exec claude -p "$PROMPT"',{PROMPT:En,...t?{CLAUDE_CODE_OAUTH_TOKEN:t}:{}},18e4)}async function ku(e){let{state:t}=e,n=await rs(e);if(Jo(n))return{lines:[n]};let o=await ss(e,n);if(Jo(o))return{lines:[o]};let{box:r,info:s}=o,a=$t(n.plan),c=[v("sandbox",`${s.name} \u2014 ${r.vcpus??a.vcpus} vCPU, persistent, fnMoa ${s.revision?.slice(0,7)??""}`)],i={claude:!1,codex:!1,cursor:!1},l=tt(e),d=!l&&await hu(r,"CLAUDE_CODE_OAUTH_TOKEN");if(l||d){let p=await wu(r,l?.token);i.claude=p.ok&&/\bok\b/i.test(p.stdout),c.push(i.claude?v("claude",`token ${D} (${l?l.from:"kept in the sandbox"}) \u2014 "reply ok" in the sandbox`):_("claude",`the token did not answer: ${vt(p.stdout||p.stderr)||"no answer"}`,"press c to make a new one with `claude setup-token`, or k for an API key"))}else $e(e,"claude")?(i.claude=!0,c.push(v("claude",`ANTHROPIC_API_KEY ${D} \u2014 carried into the sandbox`))):c.push(H("claude","not connected \u2014 c for your Claude subscription, or k for an API key"));if($e(e,"codex"))i.codex=!0,c.push(v("codex",`OPENAI_API_KEY ${D} \u2014 carried into the sandbox`));else{let p=await r.exec("codex",["login","status"],{timeoutMs:6e4});i.codex=p.ok,c.push(p.ok?v("codex",`${pe(p.stdout)||"logged in"} \u2014 its own session in the sandbox (c to log in again)`):H("codex","not connected \u2014 c to log in with a code (ChatGPT), or k for an API key"))}if($e(e,"cursor"))i.cursor=!0,c.push(v("cursor",`CURSOR_API_KEY ${D} \u2014 carried into the sandbox`));else{let p=await r.exec("cursor-agent",["status"],{timeoutMs:6e4});i.cursor=p.ok&&!/not logged in/i.test(`${p.stdout}${p.stderr}`),c.push(i.cursor?v("cursor","logged in \u2014 its own session in the sandbox (c to log in again)"):H("cursor","not connected \u2014 c to log in with your Cursor account, or k for an API key"))}let u=ue.filter(p=>i[p]),f=t.answers.agentCli??u[0];return f?c.push(i[f]?v("proof run",`uses ${f} (\u2191 \u2193 to change) \xB7 ${u.length} of 3 connected`):_("proof run",`${f} is not connected in the sandbox`,"press c to connect it or k for its API key \u2014 or \u2191 \u2193 to another agent")):c.push(_("agent","no agent is connected in the sandbox","\u2191 \u2193 to an agent, then c to connect it or k for its API key")),c.push(H("note","owner only: your subscriptions; teammates use them, never see them (moa setup login)")),{lines:c,answers:{sandbox:s,...f?{agentCli:f}:{},loggedIn:u}}}function Ui(e,t,n="codex"){let o=!1,r=()=>{o=!0};return{done:(async()=>{let a=await rs(e);if(Jo(a))return{ok:!1,stdout:"",stderr:a.detail??"no account"};let c=e.state.answers.sandbox?.name??ao(os(e.state)),i=await ns(e.sys).get(a,c,!0);if(!i)return{ok:!1,stdout:"",stderr:`${c} is not there`};if(o)return{ok:!1,stdout:"",stderr:"stopped"};let l="",d=n==="codex"?i.stream("codex",["login","--device-auth"],u=>{l+=u,t(rn(l))}):i.stream("env",["NO_OPEN_BROWSER=1","cursor-agent","login"],u=>{l+=u,t(No(l))});return r=d.cancel,d.done})(),cancel:()=>r()}}async function yu(e){let{sys:t,state:n,secrets:o}=e,r=xe(e),s=[],a=zr(e);if(a)s.push(a);else if(r){let i=await Cn(t,r,os(n)),l=`secret ${D} (${r.from}), graph ${r.graph}`;s.push(i.read.ok&&i.write.ok?v("LocusGraph",`${l} \u2014 one graph read, one event written`):_("LocusGraph",`${l} \u2014 ${i.read.ok?`the write failed: ${i.write.why}`:`the read failed: ${i.read.why}`}`,"e to paste the secret again, or g to check the graph ID \u2014 then r"))}else n.deployed?.runner==="vercel"&&n.deployed.memoryKept&&!o.noLocusgraph?s.push(H("LocusGraph","the secret the last deploy gave the sandbox, kept there (e to replace it)")):s.push(H("LocusGraph","not connected \u2014 memory stays in the workspace process (g for the graph ID, e for its secret)"));let c=n.answers.store??"postgres";return s.push(c==="postgres"?v("database","Postgres, in the sandbox on its kept disk \u2014 migrated at deploy (\u2191 \u2193 for SQLite)"):v("database","SQLite, on the sandbox's kept disk \u2014 migrated at deploy (\u2191 \u2193 for Postgres)")),{lines:s,answers:{store:c}}}function bu(e){let t=Vr(e),{githubApp:n,sandbox:o}=e.state.answers,r=[...t.lines];return o?n&&n.consoleUrl!==o.consoleUrl?r.unshift(_("callback",`${n.slug} signs people in at ${n.consoleUrl??"localhost"}, not ${o.consoleUrl}`,"press g to create an app for the sandbox's console")):r.unshift(v("console",`${o.consoleUrl} \u2014 GitHub sends people back here`)):r.unshift(_("console","no sandbox yet","Esc back to Agent logins: the sandbox is made there")),{lines:r,answers:t.answers??{}}}var Mi={...Ho,checks:mu,github:gu,logins:ku,memory:yu,access:bu};var fn="vercel";async function qo(e,t,n){let o=Date.now()+n*1e3;for(;Date.now()<o;){if(await e.fetch(t,{signal:AbortSignal.timeout(5e3)}).then(s=>s.ok).catch(()=>!1))return!0;await e.sleep(1e3)}return!1}var $u=e=>typeof e=="object"&&e!==null&&"mark"in e;async function zo(e){if(!e.sys.vercel)return{label:"account",detail:"this build of moa cannot reach Vercel",fix:"update moa"};try{let{vercelTeam:t,vercelScope:n}=e.state.answers;return await e.sys.vercel.account(t,n)}catch(t){return{label:"account",detail:t instanceof Error?t.message:String(t),fix:"run `vercel login`, then Enter"}}}var mn=e=>typeof e=="object"&&e!==null&&"fix"in e&&"label"in e;async function Vo(e,t,n=()=>{}){let{sys:o,state:r}=e,s=[],a=F=>{let Ye=s.findIndex(Xe=>Xe.label===F.label);Ye===-1?s.push(F):s[Ye]=F,t([...s])},c,i=(F,Ye,Xe)=>(a({label:F,mark:"fail",detail:Ye,fix:Xe}),c?{ok:!1,deployed:c}:{ok:!1}),l=r.answers.githubApp,d=l?He(o,l):void 0;if(!l||!d)return i("GitHub App",l?`the client secret for ${l.slug} is not on this machine`:"none yet","Esc back to Console access and press g");a({label:"sandbox",mark:"wait",detail:"looking for it"});let u=await zo(e);if(mn(u))return i(u.label,u.detail,u.fix);let f=await ss(e,u,F=>a({label:"sandbox",mark:"wait",detail:F}));if($u(f))return i("sandbox",f.detail??"",f.fix??"Enter to try again");let{box:p,info:g,built:y}=f,$=$t(u.plan);a({label:"sandbox",mark:"ok",detail:`${g.name} \u2014 ${p.vcpus??$.vcpus} vCPU, persistent${y?", image built":""}`});let m=g.workspaceUrl,h=g.consoleUrl;if(l.consoleUrl!==h)return i("GitHub App",`${l.slug} signs people in at ${l.consoleUrl??"localhost"}, not ${h}`,"Esc back to Console access and press g");let{token:A,pending:E,before:I,had:J}=await Kt(o,fn,m);a({label:"owner token",mark:"ok",detail:`${D} \u2014 profile ${fn} in ~/.moa/config.json${I===fn||!J?"":`; \`moa\` now talks to the sandbox, not profile ${I} (\`moa use ${I}\` to go back)`}`});let fe=r.answers.tenant??Ie(r.answers.owner),M=r.answers.owner,z=xe(e),R=tt(e)?.token,W=await Wo(e),V={...Object.fromEntries(Object.entries(await Ht(e)).map(([F,Ye])=>[`workspace/${F}`,Ye])),store:r.answers.store??"postgres","workspace/MOA_TOKENS":`${A}:${fe}`,"workspace/PORT":String(ft),"workspace/MOA_PORT":String(ft),"workspace/MOA_SELF_URL":`http://127.0.0.1:${ft}`,"workspace/MOA_MAX_CONCURRENT_RUNS":String($.maxRuns),"workspace/MOA_REPO":r.answers.repo,"workspace/MOA_OWNER_LOGIN":M,"workspace/MOA_GITHUB_CLIENT_ID":l.clientId,"workspace/LOCUSGRAPH_AGENT_SECRET":z?.secret,"workspace/LOCUSGRAPH_GRAPH_ID":z?.graph,"workspace/LOCUSGRAPH_SERVER_URL":z?.server,"workspace/CLAUDE_CODE_OAUTH_TOKEN":R,...Object.fromEntries(ue.map(F=>[`workspace/${Se[F]}`,$e(e,F)])),"workspace/GH_TOKEN":W&&"token"in W?W.token:void 0,"console/MOA_URL":`http://127.0.0.1:${ft}`,"console/MOA_TOKEN":A,"console/AUTH_GITHUB_ID":l.clientId,"console/AUTH_GITHUB_SECRET":d.clientSecret,"console/AUTH_SECRET":d.authSecret,"console/AUTH_URL":h,"console/AUTH_TRUST_HOST":"true"};if(!W)return i("secrets","no GitHub token for the sandbox","Esc back to GitHub and press k to paste one");let Ce=["workspace/MOA_CLIENT_ADDRESS",...r.answers.repo?[]:["workspace/MOA_REPO"],...M?[]:["workspace/MOA_OWNER_LOGIN"],...e.secrets.noLocusgraph?["workspace/LOCUSGRAPH_AGENT_SECRET","workspace/LOCUSGRAPH_GRAPH_ID","workspace/LOCUSGRAPH_SERVER_URL"]:[]];a({label:"secrets",mark:"wait",detail:"writing them into the sandbox"});let X=await ri(p,V,Ce);if(!X.ok)return i("secrets",`not written: ${X.why??"no answer"}`,"Enter to try again");let Fe=["workspace/MOA_TOKENS","workspace/LOCUSGRAPH_AGENT_SECRET","workspace/CLAUDE_CODE_OAUTH_TOKEN",...ue.map(F=>`workspace/${Se[F]}`),"workspace/GH_TOKEN","console/MOA_TOKEN","console/AUTH_GITHUB_SECRET","console/AUTH_SECRET"].filter(F=>V[F]!==void 0);a({label:"secrets",mark:"ok",detail:`${Fe.length} written \u2014 none shown; no Vercel token in the sandbox`});let me=X.changed||y;a({label:"workspace",mark:"wait",detail:me?`starting on :${ft}`:"checking it runs"});try{await Ir(p,me)}catch(F){return i("workspace",`the start did not run: ${F instanceof Error?F.message:String(F)}`,"Enter to try again")}let b=r.deployed?.workspaceUrl===m?r.deployed.people:void 0,te=F=>{c={runner:"vercel",workspaceUrl:m,consoleUrl:h,...b?{people:b}:{},...F?{memoryKept:F}:{},at:new Date().toISOString()},n(c)},O=r.deployed?.runner==="vercel"?r.deployed.memoryKept:void 0,N=z?!0:e.secrets.noLocusgraph?!1:O;if(te(N),!await qo(o,`${m}/health`,180))return i("workspace",`did not answer at ${m} \u2014 ${await _n(p,"workspace")||"no log yet"}`,"fix that, then Enter");let ne=U({url:m,token:A},o.fetch);if(!await ne.get("/v1/whoami").then(()=>!0,()=>!1))return i("workspace","it started but refuses the owner token","Enter to try again");E&&await Bt(o,fn,m,A),a({label:"workspace",mark:"ok",detail:`${m} \u2014 :${ft} in the sandbox`});let oe=await Ur(o,m,a,r.answers.store??"postgres",`look at the sandbox's ~/moa/logs \u2014 ${await _n(p,"postgres")}`);if(oe)return i(oe.label,oe.detail,oe.fix);let ke=await ln(ne,r,a,b);if(ke)return i(ke.label,ke.detail,ke.fix);let Ve=b;if(b=r.answers.people??[],JSON.stringify(b)!==JSON.stringify(Ve??[])&&te(N),a({label:"console",mark:"wait",detail:`waiting for :${sn}`}),!await qo(o,h,180))return i("console",`did not answer at ${h} \u2014 ${await _n(p,"console")||"no log yet"}`,"fix that, then Enter");a({label:"console",mark:"ok",detail:`${h} \u2014 Sign in with GitHub`}),me&&await si(p);let Pe=r.answers.agentCli??"claude",Me=[...new Set([Pe,...r.answers.loggedIn??[]])],Le=await Dt(ne,Me,"in the sandbox",()=>"Esc back to Agent logins and log it in again, then Enter",a);if("label"in Le)return i(Le.label,Le.detail,Le.fix);let ye=await dn(ne,a);if("label"in ye)return i(ye.label,ye.detail,ye.fix);ye.live!==void 0&&(N=ye.live),a({label:"Console",mark:"ok",detail:h}),a({label:"Workspace",mark:"ok",detail:m}),a({label:"Next",mark:"skip",detail:`moa setup status \xB7 moa setup stop \xB7 moa run ${Rn(Pe)} "\u2026"`});let T=Le.runs[Pe];return{ok:!0,deployed:{runner:"vercel",workspaceUrl:m,consoleUrl:h,...T?{proofRunId:T}:{},memory:ye.memory,people:b,...N?{memoryKept:N}:{},at:new Date().toISOString()}}}async function Yo(e,t){let n=e.state.answers.sandbox;if(e.state.target!=="vercel"||!n)return{label:"sandbox",detail:"moa setup has not made one",fix:"run `moa setup` and choose Vercel Sandbox"};let o=await zo(e);if(mn(o))return o;try{let r=await e.sys.vercel?.get(o,n.name,t);return r?{box:r}:{label:"sandbox",detail:`${n.name} is not there`,fix:"run `moa setup` to make it again"}}catch(r){return{label:"sandbox",detail:r instanceof Error?r.message:String(r),fix:"check `vercel whoami`, then try again"}}}async function Ni(e,t){let{sys:n,state:o}=e,r=await Yo(e,!0);if(mn(r))return t({label:r.label,mark:"fail",detail:r.detail,fix:r.fix}),!1;let{box:s}=r;t({label:"sandbox",mark:"ok",detail:`${s.name} \u2014 ${s.status}${s.vcpus?`, ${s.vcpus} vCPU`:""}`});let a=o.answers.sandbox;try{await Ir(s,!1)}catch(y){return t({label:"workspace",mark:"fail",detail:`the start did not run: ${vt(y instanceof Error?y.message:String(y))}`,fix:"try again, or run `moa setup` to deploy it again"}),!1}let c={workspace:s.domain(ft),console:s.domain(sn)};if(c.workspace!==a.workspaceUrl||c.console!==a.consoleUrl){let y=[...c.workspace!==a.workspaceUrl?[`the workspace is at ${c.workspace}, not ${a.workspaceUrl}`]:[],...c.console!==a.consoleUrl?[`the console is at ${c.console}, not ${a.consoleUrl}`]:[]];return t({label:"URLs",mark:"fail",detail:`the sandbox's domain has changed \u2014 ${y.join("; ")}`,fix:"run `moa setup` to deploy it again, and press g on Console access for the new callback"}),!1}if(!await qo(n,`${a.workspaceUrl}/health`,180))return t({label:"workspace",mark:"fail",detail:`no answer at ${a.workspaceUrl} \u2014 ${await _n(s,"workspace")||"no log"}`,fix:"run `moa setup` to deploy it again"}),!1;let l=(await ve(n.env)).profiles[fn];if(!l||l.url!==a.workspaceUrl)return t({label:"workspace",mark:"fail",detail:`${a.workspaceUrl} answers, but this machine has no token for it`,fix:"run `moa setup` to deploy it again"}),!1;let d=U(l,n.fetch),u=await n.fetch(`${a.workspaceUrl}/health`,{signal:AbortSignal.timeout(5e3)}).then(y=>y.json()).catch(()=>({})),f=await d.get("/v1/whoami").then(()=>{},y=>y instanceof ae?`${y.status}`:String(y));t(f?{label:"workspace",mark:"fail",detail:`refuses the owner token (${f})`,fix:"run `moa setup` to deploy it again"}:{label:"workspace",mark:"ok",detail:`${a.workspaceUrl}${u.database?` \u2014 ${u.database}`:""}`});let p=await d.get("/v1/jobs").then(y=>y.jobs).catch(()=>{});if(p){let y=p.filter($=>$.state==="running"||$.state==="queued");t({label:"pipelines",mark:"ok",detail:y.length===0?"nothing running":`${y.length} running or waiting \u2014 carried on from before the stop (moa jobs)`})}let g=await qo(n,a.consoleUrl,180);return t(g?{label:"console",mark:"ok",detail:`${a.consoleUrl} \u2014 Sign in with GitHub`}:{label:"console",mark:"fail",detail:`no answer at ${a.consoleUrl} \u2014 ${await _n(s,"console")||"no log"}`,fix:"run `moa setup` to deploy it again"}),!f&&g}async function ji(e,t){let n=await Yo(e,!1);if(mn(n))return t({label:n.label,mark:"fail",detail:n.detail,fix:n.fix}),!1;try{await n.box.stop()}catch(o){return t({label:"sandbox",mark:"fail",detail:`did not stop: ${vt(o instanceof Error?o.message:String(o))}`,fix:"try again"}),!1}return t({label:"sandbox",mark:"ok",detail:`${n.box.name} stopped \u2014 its disk is kept; \`moa setup status\` starts it again`}),!0}import{jsx as Z,jsxs as Ee}from"react/jsx-runtime";var Re=(e,t)=>({...e,answers:{...e.answers,...t}}),Eu=[{value:"vercel",label:"Vercel Sandbox",note:"one VM, 24h sessions, resumes by name"},{value:"cloudflare",label:"Cloudflare",note:"Worker + container, needs your domain"},{value:"local",label:"This machine",note:"Docker / local, nothing in the cloud"}],Cu={where:{options:e=>Eu.map(t=>{let n=Po(t.value,ro(e,t.value));return n?{...t,note:n}:t}),value:e=>e.target,set:(e,t)=>st(e,t)},checks:{options:()=>[{value:"image",label:"Published image",note:"pull the release from GHCR \u2014 nothing is built here"},{value:"checkout",label:"This checkout",note:"build from source \u2014 for working on fnMoa"}],value:e=>xn(e),set:(e,t)=>Re(e,{source:t})},logins:{options:()=>[{value:"claude",label:"claude",note:"a Claude subscription, or an API key"},{value:"codex",label:"codex",note:"a ChatGPT plan, or an API key"},{value:"cursor",label:"cursor",note:"a Cursor plan, or an API key"}],value:e=>e.answers.agentCli,set:(e,t)=>Re(e,{agentCli:t})},memory:{options:e=>e.target==="vercel"?[{value:"postgres",label:"Postgres",note:"in the sandbox, on its kept disk"},{value:"sqlite",label:"SQLite",note:"a file on the sandbox's kept disk"}]:[{value:"node",label:"SQLite",note:"node apps/workspace/dist/node.js"},{value:"compose",label:"Postgres",note:"docker compose up (apps/workspace/compose.yaml)"}],value:e=>e.target==="vercel"?e.answers.store??"postgres":e.answers.runner??"node",set:(e,t)=>e.target==="vercel"?Re(e,{store:t}):Re(e,{runner:t})}},as=e=>e.target==="vercel",Ki=/^[a-z\d](?:[a-z\d-]{0,38})$/i;function Pu(e,t){let n=e.answers.people??[],o=f=>p=>p.login.toLowerCase()===f.toLowerCase(),r="a GitHub login, then member or viewer, then a cap in $/day \u2014 or -login to remove",[s,...a]=t.split(/\s+/).filter(Boolean);if(!s)return r;if(s.startsWith("-")){let f=s.slice(1);if(!n.some(o(f)))return`${f} is not on the list`;let p=n.filter(y=>!o(f)(y)),g=[...new Set([...e.answers.removed??[],f.toLowerCase()])];return Re(e,{people:p.length>0?p:void 0,removed:g})}if(!Ki.test(s))return r;if(e.answers.owner&&s.toLowerCase()===e.answers.owner.toLowerCase())return`${s} is you \u2014 the owner already`;let c=n.find(o(s)),i=c?.role??"member",l=c?.dailyCapUsd??vr;for(let f of a){let p=f.toLowerCase(),g=Number(p.replace(/^\$|\/day$/g,""));if(p==="member"||p==="viewer")i=p;else if(Number.isFinite(g)&&g>=0&&g<=1e4)l=g;else return r}let d={login:s,role:i,dailyCapUsd:l},u=(e.answers.removed??[]).filter(f=>f!==s.toLowerCase());return Re(e,{people:c?n.map(f=>o(s)(f)?d:f):[...n,d],removed:u.length>0?u:void 0})}var Xo=e=>e.target==="cloudflare",_u="\x1B",Tu=new RegExp(`(?:${_u})?\\[20[01]~|[\\u0000-\\u001f\\u007f]`,"g"),Hi=e=>e.replace(Tu,""),Ou={checks:[{key:"l",label:"Licence key",secret:!0,shown:(e,t)=>t.licence?D:"saved key, or none",commit:(e,t,n)=>(t.licence=n||void 0,e)},{key:"d",label:"Domain",when:Xo,shown:e=>e.answers.domain??"none",commit:(e,t,n)=>{let o=n.toLowerCase().replace(/^https?:\/\//,"").replace(/\/+$/,"");return o===""?Re(e,{domain:void 0}):pr.test(o)?Re(e,{domain:o}):"a domain on your Cloudflare account, like example.com"}},{key:"k",label:"D1 token",secret:!0,when:Xo,shown:(e,t)=>t.cloudflare?D:"none",commit:(e,t,n)=>/\s/.test(n)?"one token, no spaces":(t.cloudflare=n||void 0,e)},{key:"e",label:"Vercel team",when:as,shown:e=>e.answers.vercelTeam??"the one Vercel picks",initial:e=>e.answers.vercelTeam??"",commit:(e,t,n)=>n===""||/^[\w-]{1,100}$/.test(n)?Re(e,{vercelTeam:n||void 0,vercelScope:void 0}):"a team's slug or id, as `vercel teams ls` shows it"}],github:[{key:"e",label:"Repo",shown:e=>e.answers.repo??"none",commit:(e,t,n)=>n===""?{...e,answers:{...e.answers,repo:void 0}}:/^[\w.-]+\/[\w.-]+$/.test(n)?Re(e,{repo:n}):"owner/name, like fnLog0/fnmoa"},{key:"k",label:"GitHub token",secret:!0,when:e=>as(e)||Xo(e),shown:(e,t)=>t.github?D:as(e)?"none \u2014 your own gh login":"none",commit:(e,t,n)=>/\s/.test(n)?"one token, no spaces":(t.github=n||void 0,e)}],logins:[{key:"e",label:"claude token",secret:!0,shown:(e,t)=>t.claude?D:"none",commit:(e,t,n)=>/\s/.test(n)?"one token, no spaces \u2014 what `claude setup-token` printed":(t.claude=n||void 0,e)},{key:"k",label:"API key",secret:!0,shown:(e,t)=>{let n=e.answers.agentCli??"claude";return`${Se[n]} ${t.keys?.[n]?D:"none"}`},commit:(e,t,n)=>{if(/\s/.test(n))return"one key, no spaces";let o=e.answers.agentCli??"claude";return t.keys={...t.keys,[o]:n||void 0},e}}],memory:[{key:"g",label:"LocusGraph graph ID",shown:e=>e.answers.locusgraphGraph??"none",initial:e=>e.answers.locusgraphGraph??"",commit:(e,t,n)=>n===""||/^[\w.:-]{1,100}$/.test(n)?Re(e,{locusgraphGraph:n||void 0}):"the graph's ID, as LocusGraph shows it \u2014 letters, digits, - _ . :"},{key:"e",label:"LocusGraph secret",secret:!0,shown:(e,t)=>t.locusgraph?D:"none",commit:(e,t,n)=>(t.locusgraph=n||void 0,t.noLocusgraph=!n,e)}],access:[{key:"e",label:"Tenant",shown:e=>e.answers.tenant??"",commit:(e,t,n)=>/^[a-z0-9][a-z0-9-]{0,62}$/.test(n)?Re(e,{tenant:n}):"lower-case letters, digits and dashes"},{key:"o",label:"App owner",shown:e=>e.answers.appOrg??"your account (o for an organization)",initial:e=>e.answers.appOrg??"",commit:(e,t,n)=>n===""||Ki.test(n)?Re(e,{appOrg:n||void 0}):"a GitHub organization's login, or nothing for your own account"},{key:"a",label:"Add people",shown:()=>"login member|viewer $/day \u2014 -login takes them off",initial:()=>"",commit:(e,t,n)=>Pu(e,n)}]},is=(e,t)=>{let n=[...e];for(let o of t){let r=n.findIndex(s=>s.label===o.label);r===-1?n.unshift(o):n[r]=o}return n},Fi={ok:{char:"\u2713",color:"green"},fail:{char:"\u2717",color:"red"},wait:{char:"\u2026",color:"yellow"},skip:{char:"\u2013",color:"gray"}},cs={where:"Where",checks:"Checks",github:"GitHub",memory:"Memory",logins:"Logins",access:"Access",deploy:"Deploy"},Iu=Object.fromEntries(ut.filter(e=>e!=="where"&&e!=="deploy").map((e,t)=>[String(t+1),e])),Ru={local:"this machine",vercel:"the Vercel Sandbox",cloudflare:"Cloudflare"},Lu={ok:"ok",fail:"failing",wait:"checking"};function Du({screen:e,passed:t}){return Z(ze,{columnGap:2,flexWrap:"wrap",children:ut.map(n=>n===e?Ee(se,{bold:!0,color:"cyan",children:["\u25B8 ",cs[n]]},n):t.includes(n)?Ee(se,{color:"green",children:["\u2713 ",cs[n]]},n):Ee(se,{dimColor:!0,children:[" ",cs[n]]},n))})}function Qo({title:e,aside:t,children:n}){return Ee(ze,{flexDirection:"column",marginTop:1,children:[Ee(ze,{justifyContent:"space-between",children:[Z(se,{bold:!0,dimColor:!0,children:e.toUpperCase()}),t?Z(se,{dimColor:!0,children:t}):null]}),n]})}function Uu({rows:e}){let t=Math.max(...e.map(n=>n.label.length));return Z(Qo,{title:"review",children:e.map(n=>Ee(ze,{children:[Z(ze,{flexShrink:0,width:t+2,children:Z(se,{dimColor:!0,children:n.label})}),Z(se,{children:n.value})]},n.label))})}function Mu({hints:e}){return Z(ze,{columnGap:2,flexWrap:"wrap",paddingX:1,children:e.map(t=>{let n=t.indexOf(" ");return Ee(se,{children:[Z(se,{bold:!0,children:t.slice(0,n)}),Z(se,{dimColor:!0,children:t.slice(n)})]},t)})})}var Nu=e=>[e.deployed?{label:"last deploy",mark:"skip",detail:`console ${e.deployed.consoleUrl} \xB7 workspace ${e.deployed.workspaceUrl} \u2014 Enter to check it again`}:{label:"deploy",mark:"wait",detail:e.target==="vercel"?"Enter to write the secrets into the sandbox, start the workspace and console, and prove it with one agent run and one memory read":e.target==="cloudflare"?"Enter to deploy the Worker, D1 and the container to your domain, and prove it with one agent run and one memory read":"Enter to build, start the workspace and console, and prove it with one agent run and one memory read"}];function Bi({initial:e,sys:t,save:n,checks:o,deploy:r,createApp:s=Ci,onDone:a,secrets:c,onHandOver:i,pasteFirst:l=!1,deviceLogin:d=qa,after:u={}}){let{exit:f}=vu(),[p,g]=mt(()=>e.screen==="where"&&!e.target?{...e,target:"local"}:e),[y,$]=mt([]),[m,h]=mt(!1),[A,E]=mt(0),I=l&&e.screen==="logins",[J,fe]=mt(I?"":void 0),[M,z]=mt(I?"e":void 0),R=xt(void 0),W=xt([]),V=w=>is(w,W.current),[Ce,X]=mt(void 0),[Fe,me]=mt(!1),[b,te]=mt("no"),O=xt(c??{}).current,N=xt(void 0),[ne,ge]=mt(0),oe=xt(Promise.resolve()),ke=xt(0),[Ve,Pe]=mt(!1),Me=xt(!1),Le=w=>{Me.current=w,Pe(w)},ye=xt(e.screen!=="where").current,T=p.screen,F=p.target==="vercel",Ye=o??(F?Mi:Ho),Xe=r??(F?Vo:p.target==="cloudflare"?Ko:Mo),ct=T==="checks"&&Oe({sys:t,state:p}),Et=F||p.answers.runner==="compose",ie=xt(p);ie.current=p;let Yt=xt(p),re=w=>{Yt.current!==w&&(Yt.current=w,oe.current=oe.current.then(()=>n(w)).catch(()=>{}))};Gi(()=>re(p),[p,n]);let _e=()=>(re(ie.current),oe.current),{answers:de}=p,Qe=JSON.stringify([T,p.target,de,A,ne]);Gi(()=>{if(T==="deploy"){m||$(Nu(p));return}let w=++ke.current;$(S=>S.map(B=>W.current.some(j=>j.label===B.label)?B:{...B,mark:"wait"})),h(!0),Promise.resolve(Ye[T]?.({state:p,sys:t,secrets:O})??{lines:[]}).then(async S=>({...S,lines:[...S.lines,...!o&&T==="checks"?await yt({state:p,sys:t,secrets:O}):[]]})).then(S=>{if(w!==ke.current)return;let B=V(S.lines);$(B),R.current||h(!1);let j=S.answers??{};Object.entries(j).some(([dt,wn])=>p.answers[dt]!==wn)&&g(dt=>Re(dt,j));let Ne=Me.current;Le(!1),Ne&&po(B)&&Xt(T)},S=>{w===ke.current&&($(V([{label:"check",mark:"fail",detail:String(S),fix:"press r to check again"}])),R.current||h(!1),Le(!1))})},[Qe]);let lt=w=>{R.current?.abort(),_e().then(()=>{a?.(ie.current,w),f()})},Wn=()=>{h(!0),X(void 0);let w=j=>$([{label:"licence",mark:"wait",detail:j},{label:"note",mark:"skip",detail:"sign in there and approve it \u2014 Esc to stop"}]);w("asking the licence server for a code\u2026");let S=new AbortController,B={done:_o({state:p,sys:t,secrets:O},j=>w(`open ${j.url} and check it shows ${j.code}`),S.signal).then(()=>({ok:!0,stdout:"",stderr:""}),j=>({ok:!1,stdout:"",stderr:j instanceof Error?j.message:String(j)})),cancel:()=>S.abort()};N.current=B,B.done.then(j=>{N.current===B&&(N.current=void 0,h(!1),j.ok||X(`not connected: ${j.stderr}`),E(L=>L+1))})},qn=(w="codex")=>{let S=Oe({sys:t,state:p})?void 0:t.root,B=!S&&p.deployed?.runner==="image";if(!S&&!F&&!B)return;h(!0);let j=F?"sandbox":"container",L=dt=>$([{label:w,mark:"wait",detail:Nn(dt)??`starting its login inside the ${j}\u2026`},{label:"note",mark:"skip",detail:"its own session, not a copy of this machine's \u2014 Esc to stop"}]);L({});let Ne=F?Ui({state:p,sys:t,secrets:O},L,w):B?Mn(t,w,L):d(t,S,L);N.current=Ne,Ne.done.then(dt=>{N.current===Ne&&(N.current=void 0,h(!1),dt.ok||X(`${w} login did not finish: ${(dt.stderr||dt.stdout).trim().split(`
|
|
208
|
+
`).slice(-1)[0]??""}`),E(wn=>wn+1))})},hn=w=>{if(X(void 0),w==="claude"){if(!i)return X("run `claude setup-token`, then e to paste the token");_e().then(()=>{i(ie.current),f()});return}let S=Oe({sys:t,state:p});if(F)return qn(w);if(p.target==="cloudflare")return X(w==="codex"?"codex logs in inside the container at Deploy \u2014 a link and a code; or k for its API key":"on Cloudflare cursor runs on an API key: k");if(S)return p.deployed?.runner==="image"?qn(w):X(`${w} logs in inside the container at Deploy when it is picked \u2014 or k for its API key`);if(Et)return w==="codex"?qn("codex"):X("cursor runs in the published image or on Vercel \u2014 k for its API key");X(`run \`${w==="codex"?"codex login":"cursor-agent login"}\` in a terminal, then r`)},ms=w=>{if(X(void 0),O.keys={...O.keys,[w]:void 0},w==="claude"&&(O.claude=void 0),ge(S=>S+1),g(S=>Re(S,{loggedIn:(S.answers.loggedIn??[]).filter(B=>B!==w)})),w!=="claude"&&p.deployed?.runner==="image"&&Oe({sys:t,state:p})){t.exec("docker",it(t,"exec","-T","workspace",...Yr[w]),{timeoutMs:6e4}).then(()=>E(S=>S+1));return}E(S=>S+1)},go=w=>{te("no"),X(void 0),Le(!1),W.current=[],$([]),g(S=>({...S,screen:w}))},Xt=w=>{ie.current.screen===w&&(g(S=>({...S,passed:[...new Set([...S.passed,w])]})),go(u[w]??La(w)))},ho=()=>{h(!0),$([]),Xe({state:p,sys:t,secrets:O},$,B=>{let j={...ie.current,deployed:B};ie.current=j,re(j),g(L=>({...L,deployed:B}))},B=>{let j={...ie.current,cloudflare:B};ie.current=j,re(j),g(L=>({...L,cloudflare:B}))}).then(B=>{let j=B.deployed;B.ok&&j?(me(!0),g(L=>({...L,answers:{...L.answers,removed:void 0},deployed:j,passed:[...new Set([...L.passed,"deploy"])]}))):j&&g(L=>({...L,deployed:j}))}).catch(B=>$(j=>[...j,{label:"deploy",mark:"fail",detail:String(B),fix:"Enter to try again"}])).finally(()=>h(!1))},wo=w=>{W.current=is(W.current,w),$(S=>is(S,w))},Qt=()=>{let w=new AbortController;R.current=w,h(!0),X(void 0),wo([{label:"GitHub App",mark:"wait",detail:"starting a page for GitHub\u2026"}]),s({state:p,sys:t,secrets:O},wo,w.signal).then(S=>{R.current=void 0,h(!1),W.current=[],g(B=>Re(B,S)),E(B=>B+1)},S=>{R.current=void 0,h(!1),!w.signal.aborted&&wo([{label:"GitHub App",mark:"fail",detail:S instanceof Error?S.message:String(S),fix:"press g to try again"}])})},Ke=(Ou[T]??[]).filter(w=>!w.when||w.when(p)),ko=Ke.find(w=>w.key===M),Ct=T==="memory"&&Xo(p)||T==="checks"&&!t.root?void 0:Cu[T],Zt=T==="access"?p.answers.githubApp:void 0;xu(w=>{let S=Hi(w);S&&fe(B=>`${B??""}${S}`)},{isActive:J!==void 0}),Su((w,S)=>{if(J!==void 0&&ko){if(S.escape){fe(void 0),z(void 0);return}if(S.return){let L=ko.commit(p,O,J.trim());if(typeof L=="string"){X(L);return}X(void 0),fe(void 0),z(void 0),ge(Ne=>Ne+1),g(L);return}if(S.backspace||S.delete){fe(L=>(L??"").slice(0,-1));return}if(w&&!S.ctrl&&!S.meta){let L=Hi(w);L&&fe(Ne=>`${Ne??""}${L}`)}return}if(N.current){(S.escape||w==="q")&&(N.current.cancel(),N.current=void 0,h(!1),E(L=>L+1));return}if(w==="q")return lt(Fe);if(S.escape){if(b==="asking")return te("no");T!=="where"&&!(m&&(T==="deploy"||R.current))&&go(Da(T));return}if(m){S.return&&T!=="deploy"&&Le(!0);return}if(W.current=[],w==="r")return E(L=>L+1);let B=T==="deploy"&&!Fe?Iu[w]:void 0;if(B)return go(B);if(T==="logins"&&w==="t"&&i){_e().then(()=>{i(ie.current),f()});return}if(T==="logins"&&w==="l"&&Et)return qn();if(T==="logins"&&(w==="c"||w==="x")){let L=p.answers.agentCli??"claude";return w==="c"?hn(L):ms(L)}if(T==="checks"&&w==="c"&&ct)return Wn();let j=Ke.find(L=>L.key===w);if(j){X(void 0),z(j.key),fe(j.secret?"":j.initial?j.initial(p):j.shown(p,O)==="none"?"":j.shown(p,O));return}if(T==="access"&&w==="g")return Qt();if(Zt&&w==="d"){g(L=>{let Ne=L.answers.githubApp;return Ne?Re(L,{githubApp:{...Ne,deviceFlow:!Ne.deviceFlow}}):L});return}if((S.upArrow||S.downArrow)&&Ct){let L=Ct.options(p).map(rr=>rr.value),Ne=L.indexOf(Ct.value(p)??L[0]??""),dt=S.upArrow?-1:1,wn=L[(Ne+dt+L.length)%L.length];wn!==void 0&&g(rr=>Ct.set(rr,wn));return}if(S.return){if(T==="deploy")return Fe?lt(!0):b==="no"?te("asking"):(te("yes"),ho());if(!po(y))return;Xt(T)}});let K=Math.max(...y.map(w=>w.label.length),8),Q=[T==="deploy"?Fe?"Enter done":"Enter deploy":"Enter continue",T==="where"?void 0:"Esc back","q quit",Ct?"\u2191 \u2193 choose":void 0,...Ke.length===1?["e edit"]:Ke.map(w=>`${w.key} ${w.label.toLowerCase()}`),T==="access"?Zt?"g new GitHub App":"g create GitHub App":void 0,Zt?Zt.deviceFlow?"d undo device flow":"d device flow is ticked":void 0,T==="logins"?"c connect \xB7 x disconnect":void 0,ct?"c connect account":void 0,T==="deploy"?void 0:"r check again",T==="deploy"&&!Fe?"1\u20135 change a step":void 0].filter(Boolean),Be=Au(()=>T==="deploy"?Pi({state:p,sys:t,secrets:O}):[],[T,p,t,O,ne]),he=["ok","fail","wait"].map(w=>[w,y.filter(S=>S.mark===w).length]).filter(([,w])=>w>0).map(([w,S])=>`${S} ${Lu[w]}`),or=Math.max(...Ke.map(w=>w.label.length),0);return Ee(ze,{flexDirection:"column",children:[Ee(ze,{borderStyle:"round",borderColor:"cyan",flexDirection:"column",paddingX:1,children:[Z(se,{bold:!0,color:"cyan",children:T==="where"?"moa setup":`${Ua(T)} ${oo[T]}`}),T==="where"?null:Z(Du,{screen:T,passed:p.passed}),T==="where"?Z(se,{children:oo.where}):null,ye&&T===e.screen&&T!=="where"?Z(se,{color:"yellow",children:"resumed where the last setup stopped"}):null,Ct?Z(Qo,{title:"choose",children:Ct.options(p).map(w=>{let S=Ct.value(p)===w.value;return Ee(se,{color:S?"cyan":void 0,children:[S?" \u25CF ":" \u25CB ",Z(se,{bold:S,children:w.label.padEnd(16)}),Z(se,{dimColor:!0,children:w.note})]},w.value)})}):null,Ke.length>0?Z(Qo,{title:"settings",children:Ke.map(w=>Ee(se,{children:[w.label.padEnd(or)," ",J!==void 0&&w.key===M?Ee(se,{color:"cyan",children:[w.secret?J?`${D} ${J.length} character${J.length===1?"":"s"}`:"":J,"\u258F"]}):Z(se,{dimColor:!w.shown(p,O),children:w.shown(p,O)||"\u2014"})]},w.key))}):null,Ce?Z(ze,{marginTop:1,children:Ee(se,{color:"red",children:["\u2717 ",Ce]})}):null,T==="deploy"?Z(Uu,{rows:Be}):null,Z(Qo,{title:"status",aside:T==="deploy"?void 0:he.join(" \xB7 "),children:y.map(w=>Ee(ze,{flexDirection:"column",children:[Ee(ze,{children:[Z(ze,{flexShrink:0,width:K+4,children:Ee(se,{children:[Z(se,{color:Fi[w.mark].color,children:Fi[w.mark].char})," ",w.label]})}),Z(se,{children:w.detail??""})]}),w.mark==="fail"&&w.fix?Z(ze,{paddingLeft:K+4,children:Ee(se,{color:"red",children:["\u2192 ",w.fix]})}):null]},w.label))}),b==="asking"?Z(ze,{marginTop:1,children:Ee(se,{color:"yellow",bold:!0,children:["Enter again to deploy to ",Ru[p.target??"local"],p.answers.domain&&p.target==="cloudflare"?` (${p.answers.domain})`:""," ","\u2014 Esc to cancel"]})}):null,Ve&&m?Z(se,{color:"yellow",children:"still checking \u2014 Enter goes on once every line is \u2713"}):null]}),Z(Mu,{hints:J!==void 0?["Enter keep","Esc cancel"]:N.current?["Esc stop the login"]:b==="asking"?["Enter deploy now","Esc cancel"]:Q})]})}De();Ze();qe();Zn();Jt();import{randomBytes as ju}from"node:crypto";import{rm as Ji}from"node:fs/promises";import{join as Zo}from"node:path";at();It();Ft();Pn();We();io();an();var Gu="codex/auth.json",nt=(e,t=2)=>e.replace(/\u001B\[[0-9;]*m/g,"").trim().split(`
|
|
209
|
+
`).filter(n=>n.trim()!=="").slice(-t).join(" \xB7 ").slice(0,300),Fn=e=>e instanceof Error?e.message:String(e);function Vt(e){let t=xr(e);return t.length>0?t:e.target?[e.target]:[]}var Kn=(e,t)=>({...e,state:st(e.state,t??e.state.target)}),zi=(e,t)=>e.state?{...e,state:st(e.state,t)}:e,mo=e=>e==="vercel"?fn:e==="cloudflare"?jn:On;function At(e){let t=e.deployed;if(!(!t||!e.target))return e.target==="local"?t.runner==="node"||t.runner==="compose"||t.runner==="image"?t:void 0:t.runner===e.target?t:void 0}var Bn=e=>(e({label:"fnMoa",mark:"fail",detail:"moa setup has not deployed it here yet",fix:"run `moa setup`"}),{ok:!1});async function Wi(e,t,n){for(let o=0;o<n*1e3;o+=500){if(!e.alive(t))return!0;await e.sleep(500)}return!e.alive(t)}var Hu=15,Fu=5,ds=(e,t,n,o={},r=3e4)=>e.fetch(t,{...o,headers:{authorization:`Bearer ${n}`},signal:AbortSignal.timeout(r)});async function er(e,t,n){let o=(await ve(e.env)).profiles[mo(t)];return o?.url===n?o.token:void 0}async function Vi(e,t,n){let{sys:o}=e,r=Date.now()+t.seconds*1e3,s;for(;s=await o.fetch(`${t.workspaceUrl}/health`,{signal:AbortSignal.timeout(t.seconds>0?13e4:5e3)}).then(l=>l.json()).catch(()=>{}),!(s?.ok===!0||Date.now()>=r);)await o.sleep(2e3);let a=!0,c=await er(o,t.target,t.workspaceUrl);if(!s)a=!1,n({label:"workspace",mark:"fail",detail:`no answer at ${t.workspaceUrl}`,fix:t.fix});else if(!c)a=!1,n({label:"workspace",mark:"fail",detail:`${t.workspaceUrl} answers, but this machine has no token for it`,fix:"run `moa setup` to deploy it again"});else{let l=U({url:t.workspaceUrl,token:c},o.fetch),d=await l.get("/v1/whoami").then(()=>{},u=>u instanceof ae?`${u.status}`:Fn(u));if(d)a=!1,n({label:"workspace",mark:"fail",detail:`refuses the owner token (${d})`,fix:"run `moa setup` to deploy it again"});else{n({label:"workspace",mark:"ok",detail:`${t.workspaceUrl}${t.where}`}),s.ok===!0?n({label:"database",mark:"ok",detail:`${s.database??"the store"} \u2014 it answers`}):(a=!1,n({label:"database",mark:"fail",detail:`${s.database??"the store"} does not answer: ${nt(String(s.error??"no answer"),1)}`,fix:t.fix}));let u=await l.get("/v1/jobs").then(f=>f.jobs).catch(()=>{});if(u){let f=u.filter(p=>p.state==="running"||p.state==="queued");n({label:"pipelines",mark:"ok",detail:f.length===0?"nothing running":`${f.length} running or waiting (moa jobs)`})}}}let i=await o.fetch(t.consoleUrl,{redirect:"manual",signal:AbortSignal.timeout(t.seconds>0?13e4:5e3)}).then(l=>l.status<500).catch(()=>!1);return n(i?{label:"console",mark:"ok",detail:t.consoleUrl}:{label:"console",mark:"fail",detail:`no answer at ${t.consoleUrl}`,fix:t.fix}),a&&i}async function Ku(e,t){let n=At(e.state);if(!n)return Bn(t);let o=Ln(e.sys,n),r=o.workspacePid,s=o.runner==="compose"?` \u2014 docker compose, project ${we}`:r!==void 0&&Lt(e.sys,r,o.workspaceStarted,St(o.workspaceUrl))?` (pid ${r})`:"";return{ok:await Vi(e,{target:"local",workspaceUrl:o.workspaceUrl,consoleUrl:o.consoleUrl,where:s,fix:"run `moa setup` to start it again",seconds:0},t)}}async function Bu(e,t){let n=At(e.state);if(!n)return Bn(t);let{sys:o}=e,r=await er(o,"cloudflare",n.workspaceUrl);if(!r)return t({label:"workspace",mark:"fail",detail:`this machine has no token for ${n.workspaceUrl}`,fix:"run `moa setup` to deploy it again"}),{ok:!1};let s=await ds(o,`${n.workspaceUrl}/_moa/box`,r).then(async c=>c.ok?await c.json():`${c.status} ${nt(await c.text().catch(()=>""),1)}`.trim()).catch(c=>Fn(c));return typeof s=="string"?(t({label:"Worker",mark:"fail",detail:`${n.workspaceUrl} did not answer: ${s}`,fix:"run `moa setup` to deploy it again"}),{ok:!1}):(t({label:"container",mark:"ok",detail:s.running?`running \u2014 kept up ${_t}h after the last request`:"was stopped \u2014 this check starts it again, on its data in D1"}),{ok:await Vi(e,{target:"cloudflare",workspaceUrl:n.workspaceUrl,consoleUrl:n.consoleUrl,where:" \u2014 in the Cloudflare container",fix:`look at \`pnpm --dir apps/workspace exec wrangler tail ${Je}\`, or run \`moa setup\` to deploy it again`,seconds:600},t)})}var Hn={local:"This machine",vercel:"Vercel Sandbox",cloudflare:"Cloudflare"};function Ju(e,t){let n=xr(e);for(let o of n){let r=ro(e,o);t({label:o,mark:"skip",detail:`${Hn[o]} \u2014 ${Po(o,r)}${Ra(o,r)?"; billed while it stands":""}`})}return n}async function Wu(e,t){let n=e.state.target==="vercel"?{ok:await Ni(e,t)}:e.state.target==="cloudflare"?await Bu(e,t):await Ku(e,t);return At(e.state)&&qu(e.state,t),n}function qu(e,t){let n=e.answers.loggedIn??[];for(let o of ue)t(n.includes(o)?{label:o,mark:"ok",detail:`connected${e.answers.agentCli===o?" \u2014 the proof runs on it":""}`}:{label:o,mark:"skip",detail:`not connected \u2014 \`moa setup login ${o}\``})}async function Yi(e,t,n){let o=Ju(e.state,t),r=n==="all"?Vt(e.state):n?[n]:o.length===1&&o[0]?[o[0]]:[],s=r.length>0?r:[e.state.target??"local"],a=!0;for(let c of s){s.length>1&&t({label:c,mark:"skip",detail:`\u2500\u2500 ${Hn[c]}`});let i=await Wu(Kn(e,c),t);a=a&&i.ok}return{ok:a}}async function ls(e,t,n,o=!1){let{sys:r}=e,s=r.root;if(!s)return t({label:"workspace",mark:"fail",detail:"not inside a fnMoa checkout: docker compose needs its compose.yaml",fix:"run it from your fnMoa checkout"}),!1;let a=await r.exec("docker",n==="down"?Rt(s,"down","--volumes","--remove-orphans","--rmi","local"):Rt(s,"stop"),{cwd:s,env:on(r),timeoutMs:3e5});return a.ok?(t({label:"workspace",mark:"ok",detail:o?`compose project ${we} taken down, with any volumes an earlier compose run left \u2014 codex's login among them`:n==="down"?`compose project ${we} removed, with its volumes \u2014 Postgres and codex's login`:`stopped \u2014 Postgres kept in the ${we} volumes`}),!0):(t({label:"workspace",mark:"fail",detail:`docker compose: ${nt(a.stderr||a.stdout)}`,fix:"start Docker, then run this again"}),!1)}async function tr(e,t,n,o){let{sys:r}=e;if(t.runner==="image"){let i=await r.exec("docker",it(r,...o==="down"?["down","--volumes"]:["stop"]),{timeoutMs:12e4});return n({label:"image",mark:i.ok?"ok":"fail",detail:o==="down"?"Container and data volumes removed":"Container stopped; data kept"}),{ok:i.ok,deployed:t}}let s=!0;t=Ln(r,t);let a={...t};if(t.runner==="compose"&&!await ls(e,n,o)&&(s=!1),t.runner==="compose"&&o==="down"){let{people:i,...l}=a;a=l}let c=[["workspace",t.workspacePid,t.workspaceStarted,St(t.workspaceUrl)],["console",t.consolePid,t.consoleStarted,St(t.consoleUrl)]];for(let[i,l,d,u]of c){if(l===void 0){if(i==="workspace"&&t.runner==="compose")continue;n({label:i,mark:"ok",detail:"not running"});continue}let f=()=>{let{[i==="workspace"?"workspacePid":"consolePid"]:y,[i==="workspace"?"workspaceStarted":"consoleStarted"]:$,...m}=a;a=m};if(r.alive(l)&&!Lt(r,l,d,u)){n({label:i,mark:"ok",detail:`not running \u2014 pid ${l} is another process now, left alone`}),f();continue}let p=r.processOf(l)?.started;if(r.alive(l)&&r.stop(l),await Wi(r,l,Hu)){n({label:i,mark:"ok",detail:`stopped (pid ${l})`}),f();continue}let g=r.processOf(l);if(p===void 0||g?.started!==p){let y=p!==void 0&&(g!==void 0||!r.alive(l));y?f():s=!1,n(y?{label:i,mark:"ok",detail:`stopped (pid ${l})`}:{label:i,mark:"fail",detail:`pid ${l} is still running`,fix:`stop it (\`kill -9 ${l}\`), then run this again`});continue}r.stop(l,!0),await Wi(r,l,Fu)?(n({label:i,mark:"ok",detail:`stopped (pid ${l}) \u2014 killed, it did not stop when asked to`}),f()):(s=!1,n({label:i,mark:"fail",detail:`pid ${l} is still running, after SIGTERM and SIGKILL`,fix:`stop it (\`kill -9 ${l}\`), then run this again`}))}return{ok:s,deployed:a}}async function zu(e,t){let n=At(e.state);if(!n)return Bn(t);let o=await tr(e,n,t,"stop");return o.ok&&t({label:"data",mark:"skip",detail:"kept \u2014 `moa setup` starts it all again"}),{ok:o.ok,state:{...e.state,deployed:o.deployed}}}async function Vu(e,t){let n=At(e.state);if(!n)return Bn(t);let{sys:o}=e,r=await er(o,"cloudflare",n.workspaceUrl);if(!r)return t({label:"container",mark:"fail",detail:`this machine has no token for ${n.workspaceUrl}`,fix:"run `moa setup` to deploy it again"}),{ok:!1};let s=await ds(o,`${n.workspaceUrl}/_moa/restart`,r,{method:"POST"}).then(async a=>a.ok?await a.json():`${a.status} ${nt(await a.text().catch(()=>""),1)}`.trim()).catch(a=>Fn(a));return typeof s=="string"?(t({label:"container",mark:"fail",detail:`did not stop: ${s}`,fix:"try again"}),{ok:!1}):(t({label:"container",mark:"ok",detail:`${s.restarted?"stopped":"was not running"} \u2014 D1 and R2 kept; the next request to it, or \`moa setup status\`, starts it again`}),{ok:!0})}async function Xi(e,t,n){let o=Kn(e,n),r=o.state.target==="vercel"?{ok:await ji(o,t)}:o.state.target==="cloudflare"?await Vu(o,t):await zu(o,t);return zi(r,e.state.target)}var Yu=(e,t)=>e.replace(/\n$/,"").split(`
|
|
208
210
|
`).slice(-t).join(`
|
|
209
|
-
`);async function
|
|
210
|
-
${
|
|
211
|
-
${g.stderr}`,p=(g,k,O)=>(t({label:g,mark:"fail",detail:Ve(f(k))||"no answer",fix:O}),{ok:!1,removed:s,left:a}),m;if(i.imagesUnlisted){let g=await Mn(o,l,d);if(g.ok){let{imagesUnlisted:k,images:O=[],...P}=i,R=[...new Set([...i.unsureImages??[],...g.images.filter(Y=>!O.includes(Y))])];i={...P,...O.length>0?{images:O}:{},...R.length>0?{unsureImages:R}:{}}}else m=g.why}if(n){let g=await Eu(i,n);i=g.made,a.push(...g.declined)}let w=a.length>0||i.d1?.unsure===!0||i.r2?.unsure===!0||(i.unsureImages??[]).length>0||m!==void 0;if(i.worker){let g=await u(["delete",i.worker,"--force"]);if(!g.ok&&!on.test(f(g)))return p("Worker",g,"check `wrangler whoami`, then run this again");g.ok&&s.push(`Worker ${i.worker}`),t({label:"Worker",mark:"ok",detail:g.ok?`${i.worker} deleted, and its two names with it`:`${i.worker} was already gone`})}else t({label:"Worker",mark:"ok",detail:"setup recorded none"});if(i.containerId){let g=await u(["containers","delete",i.containerId]);if(!g.ok&&!on.test(f(g)))return p("container",g,"run this again \u2014 or delete it in the dashboard: Workers \u2192 Containers");g.ok&&s.push(`container ${i.containerId}`),t({label:"container",mark:"ok",detail:g.ok?`${i.containerId} deleted`:`${i.containerId} was already gone`})}else t({label:"container",mark:"ok",detail:"setup recorded none"});let b=0;for(let g of i.images??[]){let k=await u(["containers","images","delete",g,"-y"]);if(!k.ok&&!on.test(f(k)))return p("images",k,"run this again");k.ok&&(b+=1)}if(b>0&&s.push(`${b} container image${b===1?"":"s"}`),t({label:"images",mark:"ok",detail:(i.images??[]).length===0?"setup recorded none":b>0?`${b} setup pushed deleted from Cloudflare's registry`:"the ones setup pushed were already gone"}),(i.unsureImages??[]).length>0){let g=`${(i.unsureImages??[]).length} image tag(s) of ${Le} \u2014 setup cannot tell whether it pushed them; left as they were`;n||a.push(g),t({label:"images",mark:"skip",detail:g})}if(m!==void 0){let g=`any image tags of ${Le} an older moa pushed \u2014 Cloudflare's registry could not be listed; left as they were`;a.push(g),t({label:"images",mark:"skip",detail:`${g}: ${m} \u2014 check the dashboard: Workers \u2192 Containers \u2192 Images`})}if(i.d1?.made){let g=i.d1.id,k=await u(["d1","list","--json"]),O=Bt(k.stdout);if(!k.ok||!Array.isArray(O))return p("D1",k,"run this again");let P=O.find(R=>R.uuid===g);if(!P?.name)t({label:"D1",mark:"ok",detail:`${g} was already gone`});else{let R=await u(["d1","delete",P.name,"-y"]);if(!R.ok&&!on.test(f(R)))return p("D1",R,"run this again");R.ok&&s.push(`D1 ${P.name} (${g})`),t({label:"D1",mark:"ok",detail:R.ok?`${P.name} (${g}) deleted`:`${g} was already gone`})}}else i.d1?.unsure?(n||a.push(`D1 ${i.d1.id} \u2014 setup cannot tell whether it made it; left as it was`),t({label:"D1",mark:"skip",detail:`${i.d1.id} \u2014 setup cannot tell whether it made it; left as it was`})):i.d1&&(a.push(`D1 ${i.d1.id} \u2014 it was there before setup; left as it was`),t({label:"D1",mark:"skip",detail:`${i.d1.id} was there before setup used it \u2014 left as it was`}));if(i.r2&&await u(["r2","object","delete",`${i.r2.name}/${du}`,"--remote"]),i.r2?.made){let g=await u(["r2","bucket","delete",i.r2.name]);if(!g.ok&&!on.test(f(g)))return p("R2",g,`empty ${i.r2.name} in the dashboard (R2 \u2192 ${i.r2.name}), then run this again`);g.ok&&s.push(`R2 ${i.r2.name}`),t({label:"R2",mark:"ok",detail:g.ok?`${i.r2.name} deleted`:`${i.r2.name} was already gone`})}else i.r2?.unsure?(n||a.push(`R2 ${i.r2.name} \u2014 setup cannot tell whether it made it; left as it was`),t({label:"R2",mark:"skip",detail:`${i.r2.name} \u2014 setup cannot tell whether it made it; codex's login taken out, the bucket left`})):i.r2&&(a.push(`R2 ${i.r2.name} \u2014 it was there before setup; left as it was`),t({label:"R2",mark:"skip",detail:`${i.r2.name} was there before setup used it \u2014 codex's login taken out, the bucket left`}));return{ok:!0,removed:s,left:a,unsure:w}}async function Ii(e,t,n=new Date,o,r){let s=r??e.state.target;if(!s)return t({label:"fnMoa",mark:"ok",detail:"moa setup has made nothing to take down"}),{ok:!0};let a=e.state.target,i=U=>Ai(U,a),{sys:c,state:l}=Tn(e,s),d=Gt(l).filter(U=>U!==s),u=d.length===0,f=[],p=[],m=!1;if(s==="vercel"||s==="cloudflare"){let U=s==="vercel"?{...await xu({...e,state:l},t),left:[],unsure:!1}:await Cu({...e,state:l},t,o);if(f.push(...U.removed),p.push(...U.left),m=U.unsure===!0,!U.ok)return{ok:!1}}else{let U=Ct(l),H=!1,W={ok:!1};if(U){let de=await Ho({...e,state:l},U,t,"down");if(W=i({ok:!1,state:{...l,deployed:de.deployed}}),!de.ok)return W;H=U.runner==="compose",f.push(H?`compose project ${ue} and its volumes`:"the workspace and console setup started")}else if(l.answers.runner==="compose"){if(!await zr({...e,state:l},t,"down"))return{ok:!1};H=!0,f.push(`compose project ${ue} and its volumes`)}if(!H){let de=c.root?await c.exec("docker",["info","--format","{{.ServerVersion}}"]):void 0;if(de?.ok){if(!await zr({...e,state:l},t,"down",!0))return W;f.push(`compose project ${ue}, if an earlier run left one`)}else de&&!de.missing&&(p.push(`any ${ue} volumes an earlier compose run left \u2014 Docker was not running`),t({label:"compose",mark:"skip",detail:`Docker is not running \u2014 any ${ue} volumes an earlier compose run left are still there: start it, then \`docker compose -p ${ue} down --volumes\``}))}}let w=await Pe(c.env),b=eo(s);if(w.profiles[b]){let{[b]:U,...H}=w.profiles,W=w.current===b?Object.keys(H)[0]??"default":w.current;await it({current:W,profiles:H},c.env),f.push(`profile ${b}`),t({label:"owner token",mark:"ok",detail:`profile ${b} removed from ~/.moa/config.json${w.current===b&&H[W]?`; \`moa\` now uses profile ${W}`:""}`})}if(u)await vi(jo(ot(c.env),"..","local"),{recursive:!0,force:!0}),f.push("~/.moa/local"),t({label:"this machine",mark:"ok",detail:"~/.moa/local removed"});else{for(let U of Su(s))await vi(ie(c,U),{recursive:!0,force:!0});f.push("this target's files in ~/.moa/local"),t({label:"this machine",mark:"ok",detail:`${Pn[s]}'s files in ~/.moa/local removed; the rest kept \u2014 ${d.map(U=>Pn[U]).join(" and ")} still ${d.length===1?"uses":"use"} it`})}let g=l.answers.githubApp;g&&(u||await Gr(c,g),p.push(`GitHub App ${g.slug} \u2014 ${g.settingsUrl}/advanced`),t({label:"GitHub App",mark:"skip",detail:`${g.slug} is yours to delete: ${g.settingsUrl}/advanced \u2192 Delete GitHub App (it costs nothing)${u?"":"; its client secret is gone from this machine"}`}));let k=d.map(U=>`${Pn[U]} \u2014 \`moa setup down --target ${U}\``).join("; ");t(m?{label:"billing",mark:"skip",detail:`setup cannot tell all it made on Cloudflare is gone \u2014 check the dashboard for anything billed${u?"":`; still deployed: ${k}`}`}:u?{label:"billing",mark:"ok",detail:"nothing setup made is left running or stored"}:{label:"billing",mark:"ok",detail:`nothing ${Pn[s]} had is left running or stored; still deployed: ${k}`});let O={target:s,at:n.toISOString(),removed:f,...p.length>0?{left:p}:{}};if(u)return{ok:!0,state:{...po(),down:O}};let{deployed:P,cloudflare:R,...Y}=l,{sandbox:we,githubApp:I,...X}=l.answers;return i({ok:!0,state:{...Y,answers:X,...a===s?{screen:"where",passed:Y.passed.filter(U=>U!=="deploy")}:{},down:O}})}async function Pu(e,t,n){let o=(...u)=>e.exec("git",["-C",t,...u],{timeoutMs:12e4}),r=async()=>(await o("rev-parse","HEAD")).stdout.trim().slice(0,7),s=await r(),a=await o("status","--porcelain","--untracked-files=no"),i=await o("rev-parse","--abbrev-ref","--symbolic-full-name","@{u}");if(!a.ok||a.stdout.trim()!=="")return n({label:"fnMoa",mark:"skip",detail:`${t} has changes of its own \u2014 deploying it as it is, at ${s||"its commit"}`}),!0;if(!i.ok||!i.stdout.trim())return n({label:"fnMoa",mark:"skip",detail:`no upstream branch to pull \u2014 deploying the checkout as it is, at ${s}`}),!0;let c=i.stdout.trim(),l=await o("pull","--ff-only");if(!l.ok)return n({label:"fnMoa",mark:"fail",detail:`git pull: ${Ve(l.stderr||l.stdout)}`,fix:`bring ${t} up to date yourself, then run \`moa setup update\` again`}),!1;let d=await r();return n({label:"fnMoa",mark:"ok",detail:s===d?`${d} \u2014 the newest on ${c}`:`${s} \u2192 ${d}, from ${c}`}),!0}async function _u(e,t,n,o){let r=jo(t,"apps","console",".next");if(e.exists(r)&&!e.exists(jo(r,"BUILD_ID")))return o({label:"build",mark:"fail",detail:"apps/console/.next holds no build \u2014 `next dev` may be using it",fix:"stop the console's dev server, then run `moa setup update` again"}),!1;let s=[...n?[]:[["--filter","@fnmoa/workspace...","run","build"]],["--filter","@fnmoa/console","run","build"]];o({label:"build",mark:"wait",detail:"building the new fnMoa \u2014 a few minutes"});for(let a of[["install"],...s]){let i=await e.exec("pnpm",a,{cwd:t,timeoutMs:9e5});if(!i.ok)return o({label:"build",mark:"fail",detail:`pnpm ${a.join(" ")}: ${Ve(i.stderr||i.stdout)}`,fix:`run \`pnpm ${a.join(" ")}\` in ${t}, then \`moa setup update\` again`}),!1}return o({label:"build",mark:"ok",detail:n?"console built":"workspace and console built"}),!0}async function Fo(e,t,n){e=Tn(e,n);let{sys:o,state:r}=e,s=Ct(r);if(!s)return On(t);if(s.runner==="image"||!o.root){let c=await ut(e);return c.forEach(t),c.some(l=>l.mark==="fail")?{ok:!1}:{ok:!0,state:{...r,screen:"deploy"}}}let a=o.root;if(!a)return t({label:"checkout",mark:"fail",detail:"not inside a fnMoa checkout: the new fnMoa is built from one",fix:"run it from your fnMoa checkout"}),{ok:!1};if(!await Pu(o,a,t))return{ok:!1};let i=s;if(r.target==="local"){let c=await Ho(e,s,t,"stop");if(i=c.deployed,!c.ok)return{ok:!1,state:{...r,deployed:i}};if(!await _u(o,a,s.runner==="compose",t))return{ok:!1,state:{...r,deployed:i}};t({label:"data",mark:"skip",detail:s.runner==="compose"?`kept in the ${ue} volumes \u2014 Deploy builds the image and starts it all again`:"kept in ~/.moa/local \u2014 Deploy starts it all again"})}else t({label:"data",mark:"skip",detail:r.target==="vercel"?"kept on the sandbox's disk \u2014 Deploy builds its image at this commit and restarts it":"kept in D1 and R2 \u2014 Deploy builds the Worker and the container image at this commit"});return{ok:!0,state:{...r,screen:"deploy",deployed:i}}}async function Li(e,t,n,o){e=Tn(e,o);let{sys:r,state:s}=e,a=Ct(s),i=s.target;if(!a||!i)return On(t);let c={},l=s.answers.githubApp,d=l?Me(r,l):void 0,u=l&&d?(await n(`GitHub App ${l.slug}: on ${l.settingsUrl} press "Generate a new client secret" and paste it (Enter keeps the current one): `)).trim():"",f;if(i!=="local"&&(f=(await n(`New GitHub token for the ${i==="vercel"?"sandbox":"container"} \u2014 fine-grained: contents, pull requests, issues read/write; checks, actions read (Enter keeps the current one): `)).trim(),f)){let g=await r.fetch("https://api.github.com/user",{headers:{Authorization:`Bearer ${f}`,Accept:"application/vnd.github+json"},signal:AbortSignal.timeout(15e3)}).then(async k=>k.ok?(await k.json()).login:void 0).catch(()=>{});if(!g)return t({label:"GitHub token",mark:"fail",detail:"GitHub refuses it",fix:"make another, then run `moa setup rotate` again \u2014 nothing was changed"}),{ok:!1};c.github=f,t({label:"GitHub token",mark:"ok",detail:`${K} \u2014 ${g}'s, new`})}let p=a.memoryKept===!0||ke(e)!==void 0,m=i==="vercel"||ke(e)!==void 0;if(p){let g=(await n(m?"New LocusGraph agent secret (Enter keeps the current one): ":"LocusGraph agent secret \u2014 this machine has no copy, and Deploy needs one: paste the current one or a new one: ")).trim();if(!g&&!m)return t({label:"LocusGraph",mark:"fail",detail:"the workspace keeps its memory there, and this machine has no copy of the secret \u2014 Deploy would turn memory off",fix:"run `moa setup rotate` again and paste the secret, the current one or a new one \u2014 nothing was changed"}),{ok:!1};if(g){let k=ke({...e,secrets:{locusgraph:g}}),O=s.answers.tenant??xe(s.answers.owner),P=k?await gn(r,k,O):void 0;if(!P?.read.ok||!P.write.ok)return t({label:"LocusGraph",mark:"fail",detail:`the new secret does not work: ${P?.read.why??P?.write.why??"no answer"}`,fix:"check it, then run `moa setup rotate` again \u2014 nothing was changed"}),{ok:!1};c.locusgraph=g,t({label:"LocusGraph",mark:"ok",detail:`${K} \u2014 new; it reads and writes ${k?.graph}`})}}let w=eo(i);await Ua(r,w,a.workspaceUrl,kr()),t({label:"owner token",mark:"ok",detail:`${K} \u2014 new; Deploy gives it to the workspace, and profile ${w} takes it once the workspace answers to it`}),l&&d?(await jr(r,l,{clientSecret:u||d.clientSecret,authSecret:lu(32).toString("base64url")}),t({label:"GitHub App",mark:"ok",detail:u?`new client secret and AUTH_SECRET \u2014 once Deploy is done, delete the old secret on ${l.settingsUrl}`:"new AUTH_SECRET; client secret kept \u2014 everyone signs in again"})):t({label:"GitHub App",mark:"skip",detail:l?"its secret is not on this machine \u2014 Console access, g, makes a new app":"none \u2014 the console stays on this machine"}),i==="local"?t({label:"GitHub token",mark:"skip",detail:"this machine's own gh login \u2014 `gh auth refresh` renews it"}):f||t({label:"GitHub token",mark:"skip",detail:"kept"}),p?c.locusgraph||t({label:"LocusGraph",mark:"skip",detail:"kept"}):t({label:"LocusGraph",mark:"skip",detail:"not used \u2014 memory stays in the workspace"});let b=a;if(i==="local"){let g=await Ho(e,a,t,"stop");if(b=g.deployed,!g.ok)return{ok:!1,state:{...s,screen:"deploy",deployed:b}}}return{ok:!0,secrets:c,state:{...s,screen:"deploy",answers:{...s.answers,...c.github?{githubToken:"pasted"}:{}},deployed:b}}}St();Ze();Vn();qe();Qt();function Tu(e){let{state:t,sys:n}=e;if(!t.target||!t.deployed||!t.passed.includes("deploy"))return"finish the initial deployment with `moa setup`";if(!t.answers.owner)return"the GitHub owner (run `moa setup`)";if(Zt(e))return"the LocusGraph secret (set LOCUSGRAPH_AGENT_SECRET)";if(t.answers.githubApp&&!Me(n,t.answers.githubApp))return"the GitHub App client secret (run `moa setup`)";if(t.target==="cloudflare"&&!t.answers.domain)return"the Cloudflare domain (run `moa setup`)"}async function Ui(e,t,n){let o=Tu(e);if(o)return t({label:"update",mark:"fail",detail:`Update needs ${o}`}),!1;let r=await Fo(e,t);if(r.state&&await n(r.state),!r.ok||!r.state)return!1;let s=r.state,a=Promise.resolve(),i=u=>{s=u,a=a.then(()=>n(u))},c=new Map,l=u=>{for(let f of u){let p=JSON.stringify(f);c.get(f.label)!==p&&t(f),c.set(f.label,p)}},d=s.target==="vercel"?Uo:s.target==="cloudflare"?_o:So;try{let u=await d({...e,state:s},l,f=>i({...s,deployed:f}),f=>i({...s,cloudflare:f}));return u.deployed&&i({...s,deployed:u.deployed,...u.ok?{answers:{...s.answers,removed:void 0}}:{}}),u.ok}finally{await a}}var Uu=["status","login","licence","rotate","update","logs","stop","down"],Du={ok:"\u2713",fail:"\u2717",wait:"\u2026",skip:"\u2013"},rn=e=>{process.stdout.write(`${Du[e.mark]} ${e.label.padEnd(12)} ${e.detail??""}
|
|
211
|
+
`);async function Xu(e,t){let{sys:n}=e;if(e.state.deployed?.runner==="image"){let c=await n.exec("docker",it(n,"logs","--no-color","--tail",String(t)),{timeoutMs:3e4});return c.ok?{ok:!0,sections:[{name:"image",from:"docker compose",text:c.stdout}]}:{ok:!1,line:{label:"logs",mark:"fail",detail:"Docker Compose logs failed."}}}let o=At(e.state);if(!o)return{ok:!1,line:{label:"fnMoa",mark:"fail",detail:"not deployed here yet",fix:"run `moa setup`"}};let r=c=>{let i=le(n,`${c}.log`),l=n.read(i);return{name:c,from:i,text:l===void 0?"":Yu(l,t)}};if(o.runner!=="compose")return{ok:!0,sections:[r("workspace"),r("console")]};let s=n.root;if(!s)return{ok:!1,line:{label:"workspace",mark:"fail",detail:"not inside a fnMoa checkout: docker compose needs its compose.yaml",fix:"run it from your fnMoa checkout"}};let a=await n.exec("docker",Rt(s,"logs","--no-color","--tail",String(t),"workspace"),{cwd:s,env:on(n),timeoutMs:6e4});return a.ok?{ok:!0,sections:[{name:"workspace",from:`docker compose -p ${we} logs workspace`,text:a.stdout},r("console")]}:{ok:!1,line:{label:"workspace",mark:"fail",detail:`docker compose: ${nt(a.stderr||a.stdout)}`,fix:"start Docker, then run this again"}}}async function Qu(e,t){let n=await Yo(e,!1);if(mn(n))return{ok:!1,line:{label:n.label,mark:"fail",detail:n.detail,fix:n.fix}};let o=[];for(let r of["workspace","console"]){let s=`$HOME/moa/logs/${r}.log`,a=await Ue(n.box,`if [ -f "${s}" ]; then tail -n ${t} "${s}"; fi`);if(!a.ok)return{ok:!1,line:{label:"sandbox",mark:"fail",detail:`its logs could not be read: ${nt(a.stderr||a.stdout)||"no answer"}`,fix:"a stopped sandbox is started by `moa setup status` \u2014 then run this again"}};o.push({name:r,from:`${n.box.name}:~/moa/logs/${r}.log`,text:a.stdout})}return{ok:!0,sections:o}}async function Zu(e,t){let{sys:n}=e,o=At(e.state),r=(i,l,d)=>({ok:!1,line:{label:i,mark:"fail",detail:l,fix:d}});if(!o)return r("fnMoa","not deployed here yet","run `moa setup`");let s=await er(n,"cloudflare",o.workspaceUrl);if(!s)return r("container",`this machine has no token for ${o.workspaceUrl}`,"run `moa setup` to deploy it again");let a=await ds(n,`${o.workspaceUrl}/_moa/logs?lines=${t}`,s).catch(i=>Fn(i));if(typeof a=="string")return r("container",a,"try again");if(a.status===404)return r("container","this deploy keeps no logs to read","`moa setup update` deploys a fnMoa that does");if(!a.ok)return r("container",`${a.status} ${nt(await a.text())}`.trim(),"try again");let c=await a.json();return c.running?{ok:!0,sections:[{name:"workspace",from:"the container's /home/moa/logs",text:c.workspace??""},{name:"console",from:"the container's /home/moa/logs",text:c.console??""}]}:r("container","not running \u2014 a container's disk, and its logs, go when it stops",`\`moa setup status\` starts it; Cloudflare keeps older output: dashboard \u2192 Workers \u2192 ${Je} \u2192 Logs`)}function Qi(e,t,n){let o=Kn(e,n);return o.state.target==="vercel"?Qu(o,t):o.state.target==="cloudflare"?Zu(o,t):Xu(o,t)}var ep=e=>[...e==="local"?["workspace.db","workspace.db-wal","workspace.db-shm","worktrees","workspace.log","console.log"]:[],...e==="cloudflare"?["cloudflare"]:[],Zo("rotate",`${mo(e)}.json`)],Zi="~/.moa/local \u2014 the GitHub Apps' secrets, logs, and what setup kept there";function ec(e,t){if(t==="all")return[...Vt(e).map(s=>qi(st(e,s),s,!1)).flat(),Zi];let n=t??e.target??"local",o=Vt(e).filter(r=>r!==n);return qi(st(e,n),n,o.length===0)}function qi(e,t,n){let o=[n?Zi:`its files in ~/.moa/local${t==="local"?" \u2014 the SQLite database, worktrees and logs":t==="cloudflare"?" \u2014 the Worker's config and its secrets":""}; the rest is the other targets'`,`profile ${mo(t)} in ~/.moa/config.json`];if(t==="vercel")return[`sandbox ${e.answers.sandbox?.name??"the sandbox"} and its disk \u2014 the database is on it`,"its snapshot",...o];if(t==="cloudflare"){let r=tc(e);if(!r)return["nothing on Cloudflare unless you say yes \u2014 setup recorded nothing it made there; what it finds by its names is asked about one at a time",...o];let s=e.answers.domain;return[...r.worker?[`Worker ${r.worker}${s?`, with ${en(s).workspace} and ${en(s).console}`:""}`]:[],...r.containerId?[`container ${r.containerId}`]:[],...(r.images??[]).length>0?[`${(r.images??[]).length} container image tag(s) setup pushed`]:[],...(r.unsureImages??[]).length>0?[`${(r.unsureImages??[]).length} container image tag(s) \u2014 asked about: an older moa pushed them, so whether setup did cannot be told`]:[],...r.imagesUnlisted?["any container image tags an older moa pushed \u2014 asked about: the deploy could not list Cloudflare's registry, so it is listed again"]:[],...r.d1?.made?[`D1 database ${r.d1.id} \u2014 the database`]:r.d1?.unsure?[`D1 database ${r.d1.id} \u2014 asked about: an older moa deployed it, so whether setup made it cannot be told`]:[],...r.r2?.made?[`R2 bucket ${r.r2.name} \u2014 codex's login`]:r.r2?.unsure?[`R2 bucket ${r.r2.name} \u2014 asked about: an older moa deployed it, so whether setup made it cannot be told`]:[],...o]}return[(e.deployed?.runner??e.answers.runner)==="compose"?`the compose project ${we} and its volumes \u2014 the database`:"the workspace and console setup started; the database is in ~/.moa/local",...o]}async function tp(e,t){let{sys:n,state:o}=e,r=o.answers.sandbox,s=[];if(!r)return t({label:"sandbox",mark:"ok",detail:"setup made none"}),{ok:!0,removed:s};let a=await zo(e);if(mn(a))return t({label:a.label,mark:"fail",detail:a.detail,fix:a.fix}),{ok:!1,removed:s};let c=n.vercel;if(!c)return t({label:"sandbox",mark:"fail",detail:"this build of moa cannot reach Vercel",fix:"update moa"}),{ok:!1,removed:s};try{let i=await c.get(a,r.name,!1);i?(await i.delete(),s.push(`sandbox ${r.name}`),t({label:"sandbox",mark:"ok",detail:`${r.name} deleted, its disk with it`})):t({label:"sandbox",mark:"ok",detail:`${r.name} was already gone`})}catch(i){return t({label:"sandbox",mark:"fail",detail:`${r.name} was not deleted: ${nt(Fn(i))}`,fix:"check `vercel whoami`, then run this again"}),{ok:!1,removed:s}}if(r.snapshotId)try{await c.deleteSnapshot(a,r.snapshotId),s.push(`snapshot ${r.snapshotId}`),t({label:"snapshot",mark:"ok",detail:`${r.snapshotId} deleted`})}catch(i){return t({label:"snapshot",mark:"fail",detail:`${r.snapshotId} was not deleted: ${nt(Fn(i))}`,fix:"run this again"}),{ok:!1,removed:s}}return{ok:!0,removed:s}}var gn=/not found|does not exist|couldn't find|could not find|no such|10007\b/i,tc=e=>e.cloudflare??(e.deployed?.runner==="cloudflare"?e.deployed.cloudflare:void 0);async function np(e,t,n){let{sys:o,state:r}=e,s=r.answers.cloudflareAccount,a=o.root;if(!s)return{declined:[],why:"setup recorded no Cloudflare account"};if(!a)return{declined:[],why:"not inside a fnMoa checkout: wrangler is run from it"};let c=M=>Ge(o,a,M,{account:s,timeoutMs:6e4}),i=M=>`${M.stdout}
|
|
212
|
+
${M.stderr}`,l=[],d=[],u=(M,z)=>{d.push(`${M}: ${nt(i(z))||"wrangler did not answer"}`)},f=await c(["deployments","list","--name",Je,"--json"]);f.ok?l.push({what:`Worker ${Je}, and its two names`,more:{worker:Je}}):gn.test(i(f))||u("wrangler deployments list",f);let p=await fr(o,a,s);p.ok||d.push(`wrangler containers list: ${p.why}`);let g=p.ok?mr(p.apps):void 0;g&&l.push({what:`container ${g.id} (${je})`,more:{containerId:g.id}});let y=await Xn(o,a,s);y.ok||d.push(`wrangler containers images list: ${y.why}`);let $=[...new Set([...y.ok?y.images:[],...g?.image?[g.image]:[]])];for(let M=0;M<$.length;M+=nn){let z=$.slice(M,M+nn),R=z.map(V=>V.slice(je.length+1)),W=$.length>nn?` \u2014 ${M+1} to ${M+z.length} of ${$.length}`:"";l.push({what:`${z.length} image tag${z.length===1?"":"s"} of ${je} in Cloudflare's registry${W} (${R.join(", ")})`,more:{images:z}})}let m=await c(["d1","list","--json"]),h=tn(m.stdout);(!m.ok||!Array.isArray(h))&&u("wrangler d1 list",m);let A=(Array.isArray(h)?h:[]).filter(M=>M.name===ht),E=A.length===1?A[0]?.uuid:void 0;E&&l.push({what:`D1 database ${ht} (${E}) \u2014 the workspace's data`,more:{d1:{id:E,made:!0}}});let I=await c(["r2","bucket","info",wt,"--json"]);if(I.ok?l.push({what:`R2 bucket ${wt} \u2014 codex's login`,more:{r2:{name:wt,made:!0}}}):gn.test(i(I))||u("wrangler r2 bucket info",I),l.length===0)return{declined:[],why:d.length>0?`wrangler could not look for what setup may have made \u2014 ${d.join("; ")}`:`nothing is found by setup's names on account ${s}`};t({label:"Cloudflare",mark:"skip",detail:`setup recorded nothing it made on account ${s} \u2014 an older moa deployed it. ${l.length} found by setup's names: each is deleted only if you say yes`});let J={account:s},fe=d.map(M=>`not looked for \u2014 ${M}; anything there is left as it was`);d.length>0&&t({label:"Cloudflare",mark:"skip",detail:`wrangler could not look for all of it \u2014 ${d.join("; ")}`});for(let M of l)await n(`Delete ${M.what}? Only if setup made it [y/N] `)?J={...J,...M.more,...M.more.images?{images:[...J.images??[],...M.more.images]}:{}}:fe.push(`${M.what}: you said no \u2014 left as it was`);return{made:J,declined:fe}}async function op(e,t){let n=[],o=e,r=i=>t(`Delete ${i}? An older moa deployed it, so setup cannot tell \u2014 only if setup made it [y/N] `);if(e.d1?.unsure&&!e.d1.made){let i=`D1 database ${ht} (${e.d1.id}) \u2014 the workspace's data`;await r(i)?o={...o,d1:{id:e.d1.id,made:!0}}:n.push(`${i}: you said no \u2014 left as it was`)}if(e.r2?.unsure&&!e.r2.made){let i=`R2 bucket ${e.r2.name} \u2014 codex's login`;await r(i)?o={...o,r2:{name:e.r2.name,made:!0}}:n.push(`${i}: you said no \u2014 left as it was`)}let s=e.unsureImages??[],a=[],c=[];for(let i=0;i<s.length;i+=nn){let l=s.slice(i,i+nn),d=l.map(p=>p.slice(je.length+1)),u=s.length>nn?` \u2014 ${i+1} to ${i+l.length} of ${s.length}`:"",f=`${l.length} image tag${l.length===1?"":"s"} of ${je} in Cloudflare's registry${u} (${d.join(", ")})`;await r(f)?a=[...a,...l]:(c=[...c,...l],n.push(`${f}: you said no \u2014 left as they were`))}if(a.length>0&&(o={...o,images:[...new Set([...o.images??[],...a])],...c.length>0?{unsureImages:c}:{}},c.length===0)){let{unsureImages:i,...l}=o;o=l}return{made:o,declined:n}}async function rp(e,t,n){let{sys:o,state:r}=e,s=[],a=[],c=tc(r),i;if(!c&&n){let m=await np(e,t,n);c=m.made,i=m.why,a.push(...m.declined)}if(!c)return t({label:"Cloudflare",mark:"skip",detail:`setup recorded no deploy there${i?`, and ${i}`:""} \u2014 nothing on Cloudflare was deleted; anything left is in the dashboard`}),r.answers.cloudflareAccount&&a.push(`Cloudflare account ${r.answers.cloudflareAccount}: nothing recorded, nothing deleted`),{ok:!0,removed:s,left:a,unsure:!0};let l=o.root;if(!l)return t({label:"Cloudflare",mark:"fail",detail:"not inside a fnMoa checkout: wrangler is run from it",fix:"run it from your fnMoa checkout"}),{ok:!1,removed:s,left:a};let d=c.account,u=m=>Ge(o,l,m,{account:d,timeoutMs:18e4}),f=m=>`${m.stdout}
|
|
213
|
+
${m.stderr}`,p=(m,h,A)=>(t({label:m,mark:"fail",detail:nt(f(h))||"no answer",fix:A}),{ok:!1,removed:s,left:a}),g;if(c.imagesUnlisted){let m=await Xn(o,l,d);if(m.ok){let{imagesUnlisted:h,images:A=[],...E}=c,I=[...new Set([...c.unsureImages??[],...m.images.filter(J=>!A.includes(J))])];c={...E,...A.length>0?{images:A}:{},...I.length>0?{unsureImages:I}:{}}}else g=m.why}if(n){let m=await op(c,n);c=m.made,a.push(...m.declined)}let y=a.length>0||c.d1?.unsure===!0||c.r2?.unsure===!0||(c.unsureImages??[]).length>0||g!==void 0;if(c.worker){let m=await u(["delete",c.worker,"--force"]);if(!m.ok&&!gn.test(f(m)))return p("Worker",m,"check `wrangler whoami`, then run this again");m.ok&&s.push(`Worker ${c.worker}`),t({label:"Worker",mark:"ok",detail:m.ok?`${c.worker} deleted, and its two names with it`:`${c.worker} was already gone`})}else t({label:"Worker",mark:"ok",detail:"setup recorded none"});if(c.containerId){let m=await u(["containers","delete",c.containerId]);if(!m.ok&&!gn.test(f(m)))return p("container",m,"run this again \u2014 or delete it in the dashboard: Workers \u2192 Containers");m.ok&&s.push(`container ${c.containerId}`),t({label:"container",mark:"ok",detail:m.ok?`${c.containerId} deleted`:`${c.containerId} was already gone`})}else t({label:"container",mark:"ok",detail:"setup recorded none"});let $=0;for(let m of c.images??[]){let h=await u(["containers","images","delete",m,"-y"]);if(!h.ok&&!gn.test(f(h)))return p("images",h,"run this again");h.ok&&($+=1)}if($>0&&s.push(`${$} container image${$===1?"":"s"}`),t({label:"images",mark:"ok",detail:(c.images??[]).length===0?"setup recorded none":$>0?`${$} setup pushed deleted from Cloudflare's registry`:"the ones setup pushed were already gone"}),(c.unsureImages??[]).length>0){let m=`${(c.unsureImages??[]).length} image tag(s) of ${je} \u2014 setup cannot tell whether it pushed them; left as they were`;n||a.push(m),t({label:"images",mark:"skip",detail:m})}if(g!==void 0){let m=`any image tags of ${je} an older moa pushed \u2014 Cloudflare's registry could not be listed; left as they were`;a.push(m),t({label:"images",mark:"skip",detail:`${m}: ${g} \u2014 check the dashboard: Workers \u2192 Containers \u2192 Images`})}if(c.d1?.made){let m=c.d1.id,h=await u(["d1","list","--json"]),A=tn(h.stdout);if(!h.ok||!Array.isArray(A))return p("D1",h,"run this again");let E=A.find(I=>I.uuid===m);if(!E?.name)t({label:"D1",mark:"ok",detail:`${m} was already gone`});else{let I=await u(["d1","delete",E.name,"-y"]);if(!I.ok&&!gn.test(f(I)))return p("D1",I,"run this again");I.ok&&s.push(`D1 ${E.name} (${m})`),t({label:"D1",mark:"ok",detail:I.ok?`${E.name} (${m}) deleted`:`${m} was already gone`})}}else c.d1?.unsure?(n||a.push(`D1 ${c.d1.id} \u2014 setup cannot tell whether it made it; left as it was`),t({label:"D1",mark:"skip",detail:`${c.d1.id} \u2014 setup cannot tell whether it made it; left as it was`})):c.d1&&(a.push(`D1 ${c.d1.id} \u2014 it was there before setup; left as it was`),t({label:"D1",mark:"skip",detail:`${c.d1.id} was there before setup used it \u2014 left as it was`}));if(c.r2&&await u(["r2","object","delete",`${c.r2.name}/${Gu}`,"--remote"]),c.r2?.made){let m=await u(["r2","bucket","delete",c.r2.name]);if(!m.ok&&!gn.test(f(m)))return p("R2",m,`empty ${c.r2.name} in the dashboard (R2 \u2192 ${c.r2.name}), then run this again`);m.ok&&s.push(`R2 ${c.r2.name}`),t({label:"R2",mark:"ok",detail:m.ok?`${c.r2.name} deleted`:`${c.r2.name} was already gone`})}else c.r2?.unsure?(n||a.push(`R2 ${c.r2.name} \u2014 setup cannot tell whether it made it; left as it was`),t({label:"R2",mark:"skip",detail:`${c.r2.name} \u2014 setup cannot tell whether it made it; codex's login taken out, the bucket left`})):c.r2&&(a.push(`R2 ${c.r2.name} \u2014 it was there before setup; left as it was`),t({label:"R2",mark:"skip",detail:`${c.r2.name} was there before setup used it \u2014 codex's login taken out, the bucket left`}));return{ok:!0,removed:s,left:a,unsure:y}}async function nc(e,t,n=new Date,o,r){let s=r??e.state.target;if(!s)return t({label:"fnMoa",mark:"ok",detail:"moa setup has made nothing to take down"}),{ok:!0};let a=e.state.target,c=R=>zi(R,a),{sys:i,state:l}=Kn(e,s),d=Vt(l).filter(R=>R!==s),u=d.length===0,f=[],p=[],g=!1;if(s==="vercel"||s==="cloudflare"){let R=s==="vercel"?{...await tp({...e,state:l},t),left:[],unsure:!1}:await rp({...e,state:l},t,o);if(f.push(...R.removed),p.push(...R.left),g=R.unsure===!0,!R.ok)return{ok:!1}}else{let R=At(l),W=!1,V={ok:!1};if(R){let Ce=await tr({...e,state:l},R,t,"down");if(V=c({ok:!1,state:{...l,deployed:Ce.deployed}}),!Ce.ok)return V;W=R.runner==="compose",f.push(W?`compose project ${we} and its volumes`:"the workspace and console setup started")}else if(l.answers.runner==="compose"){if(!await ls({...e,state:l},t,"down"))return{ok:!1};W=!0,f.push(`compose project ${we} and its volumes`)}if(!W){let Ce=i.root?await i.exec("docker",["info","--format","{{.ServerVersion}}"]):void 0;if(Ce?.ok){if(!await ls({...e,state:l},t,"down",!0))return V;f.push(`compose project ${we}, if an earlier run left one`)}else Ce&&!Ce.missing&&(p.push(`any ${we} volumes an earlier compose run left \u2014 Docker was not running`),t({label:"compose",mark:"skip",detail:`Docker is not running \u2014 any ${we} volumes an earlier compose run left are still there: start it, then \`docker compose -p ${we} down --volumes\``}))}}let y=await ve(i.env),$=mo(s);if(y.profiles[$]){let{[$]:R,...W}=y.profiles,V=y.current===$?Object.keys(W)[0]??"default":y.current;await gt({current:V,profiles:W},i.env),f.push(`profile ${$}`),t({label:"owner token",mark:"ok",detail:`profile ${$} removed from ~/.moa/config.json${y.current===$&&W[V]?`; \`moa\` now uses profile ${V}`:""}`})}if(u)await Ji(Zo(pt(i.env),"..","local"),{recursive:!0,force:!0}),f.push("~/.moa/local"),t({label:"this machine",mark:"ok",detail:"~/.moa/local removed"});else{for(let R of ep(s))await Ji(le(i,R),{recursive:!0,force:!0});f.push("this target's files in ~/.moa/local"),t({label:"this machine",mark:"ok",detail:`${Hn[s]}'s files in ~/.moa/local removed; the rest kept \u2014 ${d.map(R=>Hn[R]).join(" and ")} still ${d.length===1?"uses":"use"} it`})}let m=l.answers.githubApp;m&&(u||await ts(i,m),p.push(`GitHub App ${m.slug} \u2014 ${m.settingsUrl}/advanced`),t({label:"GitHub App",mark:"skip",detail:`${m.slug} is yours to delete: ${m.settingsUrl}/advanced \u2192 Delete GitHub App (it costs nothing)${u?"":"; its client secret is gone from this machine"}`}));let h=d.map(R=>`${Hn[R]} \u2014 \`moa setup down --target ${R}\``).join("; ");t(g?{label:"billing",mark:"skip",detail:`setup cannot tell all it made on Cloudflare is gone \u2014 check the dashboard for anything billed${u?"":`; still deployed: ${h}`}`}:u?{label:"billing",mark:"ok",detail:"nothing setup made is left running or stored"}:{label:"billing",mark:"ok",detail:`nothing ${Hn[s]} had is left running or stored; still deployed: ${h}`});let A={target:s,at:n.toISOString(),removed:f,...p.length>0?{left:p}:{}};if(u)return{ok:!0,state:{...Eo(),down:A}};let{deployed:E,cloudflare:I,...J}=l,{sandbox:fe,githubApp:M,...z}=l.answers;return c({ok:!0,state:{...J,answers:z,...a===s?{screen:"where",passed:J.passed.filter(R=>R!=="deploy")}:{},down:A}})}async function sp(e,t,n){let o=(...u)=>e.exec("git",["-C",t,...u],{timeoutMs:12e4}),r=async()=>(await o("rev-parse","HEAD")).stdout.trim().slice(0,7),s=await r(),a=await o("status","--porcelain","--untracked-files=no"),c=await o("rev-parse","--abbrev-ref","--symbolic-full-name","@{u}");if(!a.ok||a.stdout.trim()!=="")return n({label:"fnMoa",mark:"skip",detail:`${t} has changes of its own \u2014 deploying it as it is, at ${s||"its commit"}`}),!0;if(!c.ok||!c.stdout.trim())return n({label:"fnMoa",mark:"skip",detail:`no upstream branch to pull \u2014 deploying the checkout as it is, at ${s}`}),!0;let i=c.stdout.trim(),l=await o("pull","--ff-only");if(!l.ok)return n({label:"fnMoa",mark:"fail",detail:`git pull: ${nt(l.stderr||l.stdout)}`,fix:`bring ${t} up to date yourself, then run \`moa setup update\` again`}),!1;let d=await r();return n({label:"fnMoa",mark:"ok",detail:s===d?`${d} \u2014 the newest on ${i}`:`${s} \u2192 ${d}, from ${i}`}),!0}async function ap(e,t,n,o){let r=Zo(t,"apps","console",".next");if(e.exists(r)&&!e.exists(Zo(r,"BUILD_ID")))return o({label:"build",mark:"fail",detail:"apps/console/.next holds no build \u2014 `next dev` may be using it",fix:"stop the console's dev server, then run `moa setup update` again"}),!1;let s=[...n?[]:[["--filter","@fnmoa/workspace...","run","build"]],["--filter","@fnmoa/console","run","build"]];o({label:"build",mark:"wait",detail:"building the new fnMoa \u2014 a few minutes"});for(let a of[["install"],...s]){let c=await e.exec("pnpm",a,{cwd:t,timeoutMs:9e5});if(!c.ok)return o({label:"build",mark:"fail",detail:`pnpm ${a.join(" ")}: ${nt(c.stderr||c.stdout)}`,fix:`run \`pnpm ${a.join(" ")}\` in ${t}, then \`moa setup update\` again`}),!1}return o({label:"build",mark:"ok",detail:n?"console built":"workspace and console built"}),!0}async function nr(e,t,n){e=Kn(e,n);let{sys:o,state:r}=e,s=At(r);if(!s)return Bn(t);if(s.runner==="image"||!o.root){let i=await yt(e);return i.forEach(t),i.some(l=>l.mark==="fail")?{ok:!1}:{ok:!0,state:{...r,screen:"deploy"}}}let a=o.root;if(!a)return t({label:"checkout",mark:"fail",detail:"not inside a fnMoa checkout: the new fnMoa is built from one",fix:"run it from your fnMoa checkout"}),{ok:!1};if(!await sp(o,a,t))return{ok:!1};let c=s;if(r.target==="local"){let i=await tr(e,s,t,"stop");if(c=i.deployed,!i.ok)return{ok:!1,state:{...r,deployed:c}};if(!await ap(o,a,s.runner==="compose",t))return{ok:!1,state:{...r,deployed:c}};t({label:"data",mark:"skip",detail:s.runner==="compose"?`kept in the ${we} volumes \u2014 Deploy builds the image and starts it all again`:"kept in ~/.moa/local \u2014 Deploy starts it all again"})}else t({label:"data",mark:"skip",detail:r.target==="vercel"?"kept on the sandbox's disk \u2014 Deploy builds its image at this commit and restarts it":"kept in D1 and R2 \u2014 Deploy builds the Worker and the container image at this commit"});return{ok:!0,state:{...r,screen:"deploy",deployed:c}}}async function oc(e,t,n,o){e=Kn(e,o);let{sys:r,state:s}=e,a=At(s),c=s.target;if(!a||!c)return Bn(t);let i={},l=s.answers.githubApp,d=l?He(r,l):void 0,u=l&&d?(await n(`GitHub App ${l.slug}: on ${l.settingsUrl} press "Generate a new client secret" and paste it (Enter keeps the current one): `)).trim():"",f;if(c!=="local"&&(f=(await n(`New GitHub token for the ${c==="vercel"?"sandbox":"container"} \u2014 fine-grained: contents, pull requests, issues read/write; checks, actions read (Enter keeps the current one): `)).trim(),f)){let m=await r.fetch("https://api.github.com/user",{headers:{Authorization:`Bearer ${f}`,Accept:"application/vnd.github+json"},signal:AbortSignal.timeout(15e3)}).then(async h=>h.ok?(await h.json()).login:void 0).catch(()=>{});if(!m)return t({label:"GitHub token",mark:"fail",detail:"GitHub refuses it",fix:"make another, then run `moa setup rotate` again \u2014 nothing was changed"}),{ok:!1};i.github=f,t({label:"GitHub token",mark:"ok",detail:`${D} \u2014 ${m}'s, new`})}let p=a.memoryKept===!0||xe(e)!==void 0,g=c==="vercel"||xe(e)!==void 0;if(p){let m=(await n(g?"New LocusGraph agent secret (Enter keeps the current one): ":"LocusGraph agent secret \u2014 this machine has no copy, and Deploy needs one: paste the current one or a new one: ")).trim();if(!m&&!g)return t({label:"LocusGraph",mark:"fail",detail:"the workspace keeps its memory there, and this machine has no copy of the secret \u2014 Deploy would turn memory off",fix:"run `moa setup rotate` again and paste the secret, the current one or a new one \u2014 nothing was changed"}),{ok:!1};if(m){let h=xe({...e,secrets:{locusgraph:m}});if(!h)return t({label:"LocusGraph",mark:"fail",detail:"setup has no graph ID for this secret",fix:"run `moa setup`, type the graph ID on Memory (g), then `moa setup rotate` again \u2014 nothing was changed"}),{ok:!1};let A=s.answers.tenant??Ie(s.answers.owner),E=await Cn(r,h,A);if(!E.read.ok||!E.write.ok)return t({label:"LocusGraph",mark:"fail",detail:`the new secret does not work: ${E.read.why??E.write.why??"no answer"}`,fix:"check it, then run `moa setup rotate` again \u2014 nothing was changed"}),{ok:!1};i.locusgraph=m,t({label:"LocusGraph",mark:"ok",detail:`${D} \u2014 new; it reads and writes ${h.graph}`})}}let y=mo(c);await Ya(r,y,a.workspaceUrl,Tr()),t({label:"owner token",mark:"ok",detail:`${D} \u2014 new; Deploy gives it to the workspace, and profile ${y} takes it once the workspace answers to it`}),l&&d?(await es(r,l,{clientSecret:u||d.clientSecret,authSecret:ju(32).toString("base64url")}),t({label:"GitHub App",mark:"ok",detail:u?`new client secret and AUTH_SECRET \u2014 once Deploy is done, delete the old secret on ${l.settingsUrl}`:"new AUTH_SECRET; client secret kept \u2014 everyone signs in again"})):t({label:"GitHub App",mark:"skip",detail:l?"its secret is not on this machine \u2014 Console access, g, makes a new app":"none \u2014 the console stays on this machine"}),c==="local"?t({label:"GitHub token",mark:"skip",detail:"this machine's own gh login \u2014 `gh auth refresh` renews it"}):f||t({label:"GitHub token",mark:"skip",detail:"kept"}),p?i.locusgraph||t({label:"LocusGraph",mark:"skip",detail:"kept"}):t({label:"LocusGraph",mark:"skip",detail:"not used \u2014 memory stays in the workspace"});let $=a;if(c==="local"){let m=await tr(e,a,t,"stop");if($=m.deployed,!m.ok)return{ok:!1,state:{...s,screen:"deploy",deployed:$}}}return{ok:!0,secrets:i,state:{...s,screen:"deploy",answers:{...s.answers,...i.github?{githubToken:"pasted"}:{}},deployed:$}}}It();We();io();qe();Jt();function ip(e){let{state:t,sys:n}=e;if(!t.target||!t.deployed||!t.passed.includes("deploy"))return"finish the initial deployment with `moa setup`";if(!t.answers.owner)return"the GitHub owner (run `moa setup`)";if(un(e))return"the LocusGraph secret (set LOCUSGRAPH_AGENT_SECRET)";if(t.answers.githubApp&&!He(n,t.answers.githubApp))return"the GitHub App client secret (run `moa setup`)";if(t.target==="cloudflare"&&!t.answers.domain)return"the Cloudflare domain (run `moa setup`)"}async function rc(e,t,n){let o=ip(e);if(o)return t({label:"update",mark:"fail",detail:`Update needs ${o}`}),!1;let r=await nr(e,t);if(r.state&&await n(r.state),!r.ok||!r.state)return!1;let s=r.state,a=Promise.resolve(),c=u=>{s=u,a=a.then(()=>n(u))},i=new Map,l=u=>{for(let f of u){let p=JSON.stringify(f);i.get(f.label)!==p&&t(f),i.set(f.label,p)}},d=s.target==="vercel"?Vo:s.target==="cloudflare"?Ko:Mo;try{let u=await d({...e,state:s},l,f=>c({...s,deployed:f}),f=>c({...s,cloudflare:f}));return u.deployed&&c({...s,deployed:u.deployed,...u.ok?{answers:{...s.answers,removed:void 0}}:{}}),u.ok}finally{await a}}var pp=["status","login","logout","licence","rotate","update","logs","stop","down"],fp={ok:"\u2713",fail:"\u2717",wait:"\u2026",skip:"\u2013"},Mt=e=>{process.stdout.write(`${fp[e.mark]} ${e.label.padEnd(12)} ${e.detail??""}
|
|
212
214
|
${e.mark==="fail"&&e.fix?` ${"".padEnd(12)} \u2192 ${e.fix}
|
|
213
|
-
`:""}`)};async function
|
|
214
|
-
`)}}var
|
|
215
|
-
`);;){let
|
|
216
|
-
`)}}async function
|
|
215
|
+
`:""}`)};async function ps(e){let t=fs({input:process.stdin,output:process.stdout});try{return await t.question(e)}finally{t.close()}}async function us(e){process.stdout.write(e);let t=new lp({write:(o,r,s)=>s()}),n=fs({input:process.stdin,output:t,terminal:!0});try{return await n.question("")}finally{n.close(),process.stdout.write(`
|
|
216
|
+
`)}}var mp=e=>{let t=P(e,"lines");if(t===void 0)return 100;let n=Number(t);if(!Number.isInteger(n)||n<=0||n>2e3)throw new x("--lines must be a whole number, 1\u20132000");return n},sc=e=>Tt.includes(e);async function Jn(e,t,n){let o=e==="status"||e==="down",r=P(n,"target");if(r!==void 0){if(sc(r)||o&&r==="all")return r;throw new x(`--target must be one of ${Tt.join(", ")}${o?" or all":""}, not ${r}`)}let s=Vt(t);if(s.length<=1)return s[0];let a=`${s.join(", ")}${o?" or all":""}`;if(C(n,"yes")||!process.stdin.isTTY)throw new x(`moa setup has ${s.length} deployments on record, ${s.join(" and ")}: say which with --target ${s.join("|")}${o?"|all":""}`);for(process.stdout.write(`moa setup has ${s.length} deployments on record: ${s.map(c=>`--target ${c}`).join(", ")}
|
|
217
|
+
`);;){let c=(await ps(`Which one? ${a}: `)).trim().toLowerCase();if(sc(c)&&s.includes(c)||o&&c==="all")return c;if(c==="")throw new x(`moa setup ${e} needs a target: ${a}`);process.stdout.write(`One of ${a}.
|
|
218
|
+
`)}}async function gp(e,t,n){let o=await An(n),r={state:o,sys:cn(n),secrets:{}},s=await Jn(e,o,t);if(e==="logs"){let i=await Qi(r,mp(t),s==="all"?void 0:s);if(!i.ok)return Mt(i.line),k.failed;for(let l of i.sections)process.stdout.write(`\u2500\u2500 ${l.name} \xB7 ${l.from}
|
|
217
219
|
`),process.stdout.write(l.text.trim()?`${l.text.replace(/\n?$/,`
|
|
218
220
|
`)}`:`(nothing yet)
|
|
219
|
-
`);return
|
|
220
|
-
${
|
|
221
|
-
`).join("")}${
|
|
222
|
-
`:""}`),(await
|
|
223
|
-
`),
|
|
224
|
-
`);let l=await
|
|
221
|
+
`);return k.ok}let a;if(e==="down"&&s&&!C(t,"yes")){if(!process.stdin.isTTY)throw new x("moa setup down asks first, and needs a terminal to ask in \u2014 or --yes");let i=s==="all"?[]:Vt(o).filter(l=>l!==s);if(process.stdout.write(`moa setup down deletes, for good:
|
|
222
|
+
${ec(o,s).map(l=>` \xB7 ${l}
|
|
223
|
+
`).join("")}${i.length>0?`and leaves ${i.join(" and ")} deployed, with ${i.length===1?"its":"their"} profile and record.
|
|
224
|
+
`:""}`),(await ps("Type down to delete it all: ")).trim()!=="down")return process.stdout.write(`Nothing was deleted.
|
|
225
|
+
`),k.ok;a=async l=>/^y(es)?$/i.test((await ps(l)).trim())}if(e==="status")return(await Yi(r,Mt,s)).ok?k.ok:k.failed;if(e==="stop"){let i=await Xi(r,Mt,s==="all"?void 0:s);return i.state&&await Ot(i.state,n),i.ok?k.ok:k.failed}let c=o;for(let i of s==="all"?Vt(o):[s]){s==="all"&&process.stdout.write(`\u2500\u2500 ${i}
|
|
226
|
+
`);let l=await nc({...r,state:c},Mt,new Date,a,i);if(l.state&&(c=l.state,await Ot(c,n)),!l.ok)return k.failed}return k.ok}var ac=(e,t)=>{let n=P(e,t);if(n===void 0)return;let o=Number(n);if(!Number.isInteger(o)||o<=0||o>=65536)throw new x(`--${t} must be a port, 1\u201365535`);return o};async function ic(){process.stdout.write(`
|
|
225
227
|
moa setup: handing the terminal to \`claude setup-token\`.
|
|
226
228
|
|
|
227
|
-
`);let e=
|
|
229
|
+
`);let e=cp("claude",["setup-token"],{stdio:"inherit"}),t=fs({input:process.stdin,output:process.stdout});await t.question(e.error?`
|
|
228
230
|
claude setup-token did not start: ${e.error.message}. Enter to go back. `:`
|
|
229
|
-
Copy the token it printed, then press Enter: the screen is cleared and setup asks for it. `),t.close(),process.stdout.write("\x1B[2J\x1B[3J\x1B[H")}async function
|
|
230
|
-
Sign in, check the page shows ${
|
|
231
|
-
`),new AbortController().signal);return process.stdout.write("Licence activated. Run `moa setup update` to apply it to the workspace.\n"),
|
|
231
|
+
Copy the token it printed, then press Enter: the screen is cleared and setup asks for it. `),t.close(),process.stdout.write("\x1B[2J\x1B[3J\x1B[H")}async function cc(e,t=process.env){let n=e.positional[1];if(n!==void 0&&!pp.includes(n))throw new x(`moa setup has no ${n}`);if(n==="licence"){let $=await An(t),m=await Jn(n,$,e),A={state:st($,m==="all"?void 0:m),sys:cn(t),secrets:{}};if(t.FNMOA_LICENCE_KEY||C(e,"key")){let E=t.FNMOA_LICENCE_KEY??(process.stdin.isTTY?await us("Licence key: "):"");if(!E.trim())throw new x("Licence activation needs a key: set FNMOA_LICENCE_KEY or run in a terminal.");await Cr(A,E.trim())}else await _o(A,E=>process.stdout.write(`Open ${E.url}
|
|
232
|
+
Sign in, check the page shows ${E.code}, and approve it. Waiting\u2026
|
|
233
|
+
`),new AbortController().signal);return process.stdout.write("Licence activated. Run `moa setup update` to apply it to the workspace.\n"),k.ok}if(n==="status"||n==="stop"||n==="logs"||n==="down")return gp(n,e,t);let o=e.positional[2],r;if(n==="login"&&o!==void 0||n==="logout"){if(!yi(o))throw new x(`moa setup ${n} takes an agent: ${ue.join(", ")}`);if(!process.stdin.isTTY&&n==="login")throw new x("moa setup login asks for a login, and needs a terminal to ask in");let $=await An(t),m=await Jn(n,$,e),h={state:st($,m==="all"?void 0:m),sys:cn(t),secrets:{}};if(n==="login"&&h.state.deployed?.runner!=="image")r=o;else{let A=n==="logout"?await xi(h,o,Mt):await Si(h,o,C(e,"key"),{print:Mt,secret:us,setupToken:ic});return A.state&&await Ot(A.state,t),A.ok?k.ok:k.failed}}if(!process.stdin.isTTY){if(n==="update"){let $=await An(t),m=await Jn(n,$,e),h=st($,m==="all"?void 0:m);return await rc({state:h,sys:cn(t),secrets:{}},Mt,E=>Ot(E,t))?k.ok:k.failed}throw new x("moa setup asks questions, and needs a terminal to ask them in")}let s={},a=await An(t);if(n==="login"){let $=await Jn(n,a,e);$&&$!=="all"&&$!==a.target&&(a=st(a,$),await Ot(a,t))}if(n==="update"||n==="rotate"){let $={state:a,sys:cn(t),secrets:s},m=await Jn(n,a,e),h=m==="all"?void 0:m,A=n==="update"?await nr($,Mt,h):await oc($,Mt,us,h);if(A.state&&await Ot(A.state,t),!A.ok||!A.state)return k.failed;a=A.state,s=A.secrets??{},process.stdout.write(`
|
|
232
234
|
Deploy runs next: Enter there hands it all to fnMoa.
|
|
233
|
-
`)}let
|
|
234
|
-
`),
|
|
235
|
+
`)}let c=ac(e,"workspace-port"),i=ac(e,"console-port"),{down:l,...d}=a,u={...d,answers:{...a.answers,...c?{workspacePort:c}:{},...i?{consolePort:i}:{}}};(c||i)&&await Ot(u,t);let f={};n==="login"&&(u.screen="logins",r&&(u.answers={...u.answers,agentCli:r}),u.passed.includes("deploy")&&(f={logins:"deploy"}));let p=cn(t),g,y=!1;for(;;){let $;if(await dp(up(Bi,{initial:u,sys:p,secrets:s,pasteFirst:y,after:f,save:h=>Ot(h,t),onDone:(h,A)=>{g={state:h,finished:A}},onHandOver:h=>{$=h}})).waitUntilExit(),!$)break;await ic(),u=$,y=!0}return g&&!g.finished&&process.stdout.write(`Saved. \`moa setup\` picks up at ${oo[g.state.screen]}.
|
|
236
|
+
`),k.ok}var lc=`moa \u2014 talk to a workspace
|
|
235
237
|
|
|
236
238
|
moa setup set fnMoa up \u2014 this machine, Vercel or Cloudflare \u2014
|
|
237
239
|
step by step; resumes where it stopped
|
|
238
240
|
[--workspace-port n] [--console-port n]
|
|
239
241
|
moa setup status each piece \u2713/\u2717, live; resumes a stopped sandbox
|
|
240
242
|
moa setup login add or replace the agent logins (owner only)
|
|
243
|
+
moa setup login <agent> [--key] connect one agent (claude, codex, cursor) in the browser, or by API key
|
|
244
|
+
moa setup logout <agent> disconnect one agent
|
|
241
245
|
moa setup rotate new workspace, GitHub, LocusGraph and GitHub App secrets
|
|
242
246
|
moa setup update deploy a newer fnMoa, data kept
|
|
243
247
|
moa setup licence connect your fnMoa account in the browser for a licence
|
|
@@ -318,9 +322,9 @@ Flags
|
|
|
318
322
|
|
|
319
323
|
Environment
|
|
320
324
|
MOA_URL, MOA_TOKEN override the saved profile entirely
|
|
321
|
-
`,
|
|
322
|
-
${
|
|
323
|
-
`}var
|
|
325
|
+
`,yp="Proprietary. Copyright (c) 2026 fnLog0. See LICENSE.";function bp(){let e=JSON.parse(hp(new URL("../package.json",import.meta.url),"utf8"));return`moa ${typeof e.version=="string"?e.version:"unknown"}
|
|
326
|
+
${yp}
|
|
327
|
+
`}var $p=["profile","json","help"],vp={login:["token","github"],whoami:[],health:["url"],doctor:[],profiles:[],use:[],logout:[],seats:[],spend:["since"],agent:["cli","role","peers"],peers:["all"],run:["watch","detach","timeout","key"],runs:["limit","state","failed","before"],watch:["every"],logs:["tail","since","watch","every"],ask:["watch","detach","timeout","key"],mcp:["file","revoke"],send:["thread"],inbox:[],mail:["limit"],delegate:["parent"],delegations:["blocked"],thread:[],reply:["kind"],team:["watch","timeout","nudge","route-replies","max-cost","max-turns","key"],ship:["watch","timeout","repo","max-cost","max-steps","key"],jobs:[],stop:[],manager:["timeout"],completion:[],setup:["workspace-port","console-port","lines","yes"]};function Sp(e,t){let n=(r,s)=>{if(r.length!==s.length)return!1;let a=[...r].map((l,d)=>d).filter(l=>r[l]!==s[l]),[c,i]=a;return a.length===2&&c!==void 0&&i!==void 0&&r[c]===s[i]&&r[i]===s[c]},o=(r,s)=>{if(r===s||n(r,s))return!0;if(r.startsWith(s)||s.startsWith(r))return Math.abs(r.length-s.length)<=2;if(Math.abs(r.length-s.length)>1)return!1;let a=0,c=0,i=0;for(;a<r.length&&c<s.length;){if(r[a]===s[c]){a+=1,c+=1;continue}if(++i>1)return!1;r.length>s.length?a+=1:(s.length>r.length||(a+=1),c+=1)}return i+(r.length-a)+(s.length-c)<=1};return t.find(r=>o(e,r))}function xp(e,t){let n=vp[e];if(n===void 0)return;let o=[...n,...$p],r=[...t.flags.keys()].filter(c=>!o.includes(c));if(r.length===0)return;let s=r[0],a=Sp(s,o);throw new x(`moa ${e} has no --${s}${a===void 0?"":` \u2014 did you mean --${a}?`}`)}var dc={login:Ss,whoami:xs,health:As,doctor:Es,profiles:Ps,use:Ts,logout:_s,seats:Cs,spend:Os,agent:Rs,peers:Ls,run:Xs,runs:na,watch:oa,logs:ea,ask:ta,mcp:Js,send:Us,inbox:Ms,mail:Ns,delegate:js,delegations:Gs,thread:Hs,reply:Fs,team:Ws,ship:qs,jobs:zs,stop:Vs,manager:Bs,setup:cc};async function Ap(e,t=process.env){let n=gs(e),o=n.positional[0];if(!o&&C(n,"version"))return process.stdout.write(bp()),k.ok;if(!o||C(n,"help")||o==="help")return process.stdout.write(lc),o?k.ok:k.misuse;if(o==="completion")return process.stdout.write(ra(n.positional[1]??"",Object.keys(dc))),k.ok;let r=dc[o];if(!r)throw new x(`unknown command ${o}
|
|
324
328
|
|
|
325
|
-
${
|
|
326
|
-
`),process.exitCode=n}}export{
|
|
329
|
+
${lc}`);return xp(o,n),r(n,t)}var Ep=()=>{let e=process.argv[1];if(!e)return!1;try{return wp(e)===kp(import.meta.url)}catch{return!1}};if(Ep()){for(let e of[process.stdout,process.stderr])e.on("error",t=>{throw t.code==="EPIPE"&&process.exit(0),t});try{process.exitCode=await Ap(process.argv.slice(2))}catch(e){let{message:t,code:n}=bs(e);process.stderr.write(`moa: ${t}
|
|
330
|
+
`),process.exitCode=n}}export{dc as COMMANDS,vp as FLAGS,yp as NOTICE,xp as checkFlags,Sp as nearest,Ap as run,bp as versionText};
|