@hasna/machines 0.0.43 → 0.0.44

package/README.md

@@ -144,6 +144,7 @@ CLI and MCP expose the same topology view:
 machines topology --json
 machines topology --no-tailscale --json
 machines route --machine linux-dev-01 --json
+machines ssh --machine linux-dev-01 --private-metadata
 ```
 
 ## Screen sharing
@@ -322,6 +323,11 @@ set `HASNA_MACHINES_ALLOW_PRIVATE_OUTPUT=1` and pass the explicit
 `privateMetadata=true` query parameter or MCP `private_metadata` argument. The
 caller flag alone is ignored.
 
+Default status and SSH-resolution output is public-safe: local paths, machine
+identifiers, route targets, and generated SSH commands are redacted unless
+private output is explicitly requested. CLI commands that print raw SSH targets
+require `--private-metadata`.
+
 Doctor summaries are also opt-in with `--doctor-summary` or
 `HASNA_MACHINES_AGENT_DOCTOR_SUMMARY=1`. The daemon records a compact
 ok/warn/fail count plus redacted blockers and avoids optional private adapters

package/dist/cli/index.js

@@ -9972,7 +9972,8 @@ function parseJsonObject(value) {
     return null;
   }
 }
-function getStatus() {
+function getStatus(options = {}) {
+  const privateMetadata = options.privateMetadata === true;
   const manifest = readManifest();
   const heartbeats = listHeartbeats();
   const heartbeatByMachine = latestHeartbeatByMachine(heartbeats);
@@ -9981,17 +9982,17 @@ function getStatus() {
     ...heartbeats.map((heartbeat) => heartbeat.machine_id)
   ]);
   return {
-    machineId: getLocalMachineId(),
-    manifestPath: getManifestPath(),
-    dbPath: getDbPath(),
-    notificationsPath: getNotificationsPath(),
+    machineId: privateMetadata ? getLocalMachineId() : REDACTED_VALUE,
+    manifestPath: privateMetadata ? getManifestPath() : REDACTED_VALUE,
+    dbPath: privateMetadata ? getDbPath() : REDACTED_VALUE,
+    notificationsPath: privateMetadata ? getNotificationsPath() : REDACTED_VALUE,
     manifestMachineCount: manifest.machines.length,
     heartbeatCount: heartbeats.length,
     machines: [...machineIds].sort().map((machineId) => {
       const declared = manifest.machines.find((machine) => machine.id === machineId);
       const heartbeat = heartbeatByMachine.get(machineId);
       return {
-        machineId,
+        machineId: privateMetadata ? machineId : REDACTED_VALUE,
         platform: declared?.platform,
         manifestDeclared: Boolean(declared),
         heartbeatStatus: heartbeat?.status || "unknown",
@@ -9999,7 +10000,7 @@ function getStatus() {
         daemonVersion: heartbeat?.daemon_version ?? null,
         agentMode: heartbeat?.agent_mode ?? null,
         storageSyncStatus: heartbeat?.storage_sync_status ?? null,
-        doctorSummary: parseJsonObject(heartbeat?.doctor_summary_json),
+        doctorSummary: privateMetadata ? parseJsonObject(heartbeat?.doctor_summary_json) : null,
         privateMetadata: Boolean(heartbeat?.private_metadata)
       };
     }),
@@ -10588,7 +10589,7 @@ function runDoctor(machineId, options = {}) {
 
 // src/commands/daemon.ts
 import { execFileSync } from "child_process";
-import { chmodSync, existsSync as existsSync8, mkdirSync as mkdirSync2, writeFileSync as writeFileSync4 } from "fs";
+import { chmodSync, existsSync as existsSync8, readFileSync as readFileSync6, statSync, mkdirSync as mkdirSync2, writeFileSync as writeFileSync4 } from "fs";
 import { dirname as dirname4 } from "path";
 import { platform as osPlatform } from "os";
 var DEFAULT_SERVICE_NAME = "machines-agent";
@@ -10984,8 +10985,29 @@ function daemonProgramArguments(options) {
   return [...base, "--interval-ms", String(options.intervalMs)];
 }
 function siblingBunRuntime(executable) {
+  if (!isBunShebangScript(executable))
+    return null;
   const candidate = `${dirname4(executable)}/bun`;
-  return existsSync8(candidate) ? candidate : null;
+  return isExecutableFile(candidate) ? candidate : null;
+}
+function isBunShebangScript(executable) {
+  try {
+    const content = readFileSync6(executable, "utf8").slice(0, 256);
+    const firstLine2 = content.split(/\r?\n/, 1)[0] ?? "";
+    return /^#!.*\bbun\b/.test(firstLine2);
+  } catch {
+    return false;
+  }
+}
+function isExecutableFile(path) {
+  if (!existsSync8(path))
+    return false;
+  try {
+    const stats = statSync(path);
+    return stats.isFile() && (stats.mode & 73) !== 0;
+  } catch {
+    return false;
+  }
 }
 function launchdDomain(options) {
   return options.mode === "system" ? "system" : "gui/$UID";
@@ -11343,7 +11365,7 @@ function startDashboardServer(options = {}) {
         return Response.json({ ok: true, ...getServeInfo(options) });
       }
       if (url.pathname === "/api/status") {
-        return Response.json(getStatus());
+        return Response.json(appendWarnings(getStatus({ privateMetadata }), privateWarnings));
       }
       if (url.pathname === "/api/topology") {
         const topology = discoverMachineTopology({ includeTailscale: url.searchParams.get("tailscale") !== "false" });
@@ -11481,15 +11503,16 @@ function check(id, status, summary, detail) {
 function runSelfTest() {
   const version = getPackageVersion();
   const status = getStatus();
+  const machineId = getLocalMachineId();
   const doctor = runDoctor();
   const serveInfo = getServeInfo();
   const html = renderDashboardHtml();
   const notifications = listNotificationChannels();
-  const apps = listApps(status.machineId);
-  const appsDiff = diffApps(status.machineId);
-  const cliPlan = buildClaudeInstallPlan(status.machineId);
+  const apps = listApps(machineId);
+  const appsDiff = diffApps(machineId);
+  const cliPlan = buildClaudeInstallPlan(machineId);
   return {
-    machineId: getLocalMachineId(),
+    machineId,
     checks: [
       check("package-version", version === "0.0.0" ? "fail" : "ok", "Package version resolves", version),
       check("status", "ok", "Status loads", JSON.stringify({ machines: status.manifestMachineCount, heartbeats: status.heartbeatCount })),
@@ -11507,7 +11530,7 @@ function runSelfTest() {
 // src/commands/clipboard.ts
 init_paths();
 import { createHash } from "crypto";
-import { existsSync as existsSync9, readFileSync as readFileSync6, rmSync, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync9, readFileSync as readFileSync7, rmSync, writeFileSync as writeFileSync5 } from "fs";
 import { join as join6 } from "path";
 var DEFAULT_CONFIG = {
   version: 1,
@@ -11541,7 +11564,7 @@ function readConfig(configPath) {
   if (!existsSync9(path)) {
     return getDefaultConfig();
   }
-  const parsed = JSON.parse(readFileSync6(path, "utf8"));
+  const parsed = JSON.parse(readFileSync7(path, "utf8"));
   return { ...getDefaultConfig(), ...parsed };
 }
 function writeConfig(config, configPath) {
@@ -11556,7 +11579,7 @@ function readHistory(historyPath) {
     return [];
   }
   try {
-    return JSON.parse(readFileSync6(path, "utf8"));
+    return JSON.parse(readFileSync7(path, "utf8"));
   } catch {
     return [];
   }
@@ -11586,7 +11609,7 @@ function sanitizeClipboardForRead(content, maxSizeBytes, skipPatterns) {
 function getOrCreateClipboardKey() {
   const keyPath = getClipboardKeyPath();
   if (existsSync9(keyPath)) {
-    return readFileSync6(keyPath, "utf8").trim();
+    return readFileSync7(keyPath, "utf8").trim();
   }
   const key = createHash("sha256").update(crypto.randomUUID()).digest("hex").slice(0, 32);
   ensureParentDir(keyPath);
@@ -11641,7 +11664,7 @@ function getClipboardStatus(historyPath) {
 
 // src/commands/clipboard-daemon.ts
 init_paths();
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "fs";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync6 } from "fs";
 import { join as join7 } from "path";
 import { createHash as createHash3 } from "crypto";
 
@@ -11649,7 +11672,7 @@ import { createHash as createHash3 } from "crypto";
 init_paths();
 import { createServer } from "http";
 import { createHash as createHash2 } from "crypto";
-import { readFileSync as readFileSync7 } from "fs";
+import { readFileSync as readFileSync8 } from "fs";
 function readLocalClipboardSync() {
   const platform5 = process.platform;
   if (platform5 === "darwin") {
@@ -11695,7 +11718,7 @@ function hasCommand3(binary) {
 function loadSharedSecret() {
   const keyPath = getClipboardKeyPath();
   try {
-    return readFileSync7(keyPath, "utf8").trim();
+    return readFileSync8(keyPath, "utf8").trim();
   } catch {
     return "";
   }
@@ -11862,7 +11885,7 @@ function computeHash2(content) {
 }
 function loadSharedSecret2() {
   try {
-    return readFileSync8(getClipboardKeyPath(), "utf8").trim();
+    return readFileSync9(getClipboardKeyPath(), "utf8").trim();
   } catch {
     return "";
   }
@@ -11873,7 +11896,7 @@ function writePid(pid) {
 }
 function readPid() {
   try {
-    const pid = Number.parseInt(readFileSync8(DAEMON_PID_PATH, "utf8").trim());
+    const pid = Number.parseInt(readFileSync9(DAEMON_PID_PATH, "utf8").trim());
     return Number.isFinite(pid) ? pid : null;
   } catch {
     return null;
@@ -11974,7 +11997,7 @@ async function discoverPeers() {
 
 // src/commands/heal.ts
 init_paths();
-import { existsSync as existsSync10, readFileSync as readFileSync9, writeFileSync as writeFileSync7 } from "fs";
+import { existsSync as existsSync10, readFileSync as readFileSync10, writeFileSync as writeFileSync7 } from "fs";
 import { join as join8 } from "path";
 var DEFAULT_THRESHOLDS = {
   reconnect: 3,
@@ -12028,7 +12051,7 @@ function readHealConfig(path) {
   const p = path || getHealConfigPath();
   if (!existsSync10(p))
     return { ...DEFAULT_HEAL_CONFIG, thresholds: { ...DEFAULT_THRESHOLDS } };
-  const parsed = JSON.parse(readFileSync9(p, "utf8"));
+  const parsed = JSON.parse(readFileSync10(p, "utf8"));
   return {
     ...DEFAULT_HEAL_CONFIG,
     ...parsed,
@@ -12047,7 +12070,7 @@ function readHealState(path) {
   if (!existsSync10(p))
     return defaultHealState();
   try {
-    return { ...defaultHealState(), ...JSON.parse(readFileSync9(p, "utf8")) };
+    return { ...defaultHealState(), ...JSON.parse(readFileSync10(p, "utf8")) };
   } catch {
     return defaultHealState();
   }
@@ -12174,7 +12197,7 @@ function sh(cmd, timeoutMs = 8000) {
 }
 function getCurrentBootId() {
   try {
-    return readFileSync9("/proc/sys/kernel/random/boot_id", "utf8").trim();
+    return readFileSync10("/proc/sys/kernel/random/boot_id", "utf8").trim();
   } catch {
     return "";
   }
@@ -12260,7 +12283,7 @@ function executeAction(action, config) {
 
 // src/commands/heal-daemon.ts
 init_paths();
-import { existsSync as existsSync11, readFileSync as readFileSync10, writeFileSync as writeFileSync8 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync11, writeFileSync as writeFileSync8 } from "fs";
 import { join as join9 } from "path";
 var DAEMON_PID_PATH2 = join9(getDataDir(), "heal-daemon.pid");
 var SERVICE_PATH = "/etc/systemd/system/machines-heal.service";
@@ -12308,7 +12331,7 @@ function writePid2(pid) {
 }
 function readPid2() {
   try {
-    const pid = Number.parseInt(readFileSync10(DAEMON_PID_PATH2, "utf8").trim());
+    const pid = Number.parseInt(readFileSync11(DAEMON_PID_PATH2, "utf8").trim());
     return Number.isFinite(pid) ? pid : null;
   } catch {
     return null;
@@ -12382,7 +12405,7 @@ function enableHardwareWatchdog() {
   const log2 = [];
   if (!existsSync11(SYSTEM_CONF))
     return ["/etc/systemd/system.conf not found; skipping hardware watchdog"];
-  let conf = readFileSync10(SYSTEM_CONF, "utf8");
+  let conf = readFileSync11(SYSTEM_CONF, "utf8");
   const set = (key, value) => {
     const re = new RegExp(`^#?\\s*${key}=.*$`, "m");
     if (re.test(conf))
@@ -12499,7 +12522,7 @@ ${items.map((item) => `- ${item}`).join(`
 
 // src/cli/index.ts
 import { rmSync as rmSync2 } from "fs";
-import { readFileSync as readFileSync11 } from "fs";
+import { readFileSync as readFileSync12 } from "fs";
 var program2 = new Command;
 function printJsonOrText(data, text, json = false) {
   if (json || program2.opts().quiet) {
@@ -12831,7 +12854,7 @@ manifestCommand.command("add").description("Add or replace a machine in the flee
       console.error("error: --from-stdin requires piped input");
       process.exit(1);
     }
-    const input = readFileSync11(0, "utf8");
+    const input = readFileSync12(0, "utf8");
     const machine2 = JSON.parse(input);
     console.log(JSON.stringify(manifestAdd(machine2), null, 2));
     return;
@@ -13160,13 +13183,25 @@ program2.command("route").description("Resolve the best route for a machine").re
   }
   console.log(options.privateMetadata ? command2 ?? `${resolved.route}:${resolved.target}` : `${publicResolved.route}:${publicResolved.target ?? "unresolved"}`);
 });
-program2.command("ssh").description("Choose the best SSH route for a machine").requiredOption("--machine <id>", "Machine identifier").option("--cmd <command>", "Remote command to run").option("-j, --json", "Print JSON output", false).action((options) => {
+program2.command("ssh").description("Choose the best SSH route for a machine").requiredOption("--machine <id>", "Machine identifier").option("--cmd <command>", "Remote command to run").option("--private-metadata", "Print private SSH target and command", false).option("-j, --json", "Print JSON output", false).action((options) => {
+  const resolved = resolveMachineRoute(options.machine);
+  const publicResolved = redactRouteForOutput(resolved, { privateMetadata: options.privateMetadata });
+  const command2 = resolved.ok && options.privateMetadata ? buildSshCommand(options.machine, options.cmd) : resolved.ok ? REDACTED_VALUE : null;
   if (options.json) {
-    const resolved = resolveMachineRoute(options.machine);
-    console.log(JSON.stringify({ resolved, command: resolved.ok ? buildSshCommand(options.machine, options.cmd) : null }, null, 2));
+    console.log(JSON.stringify({ resolved: publicResolved, command: command2 }, null, 2));
     return;
   }
-  console.log(buildSshCommand(options.machine, options.cmd));
+  if (!resolved.ok) {
+    console.error(source_default.red(resolved.warnings.join("; ") || `No route found for ${options.machine}`));
+    process.exitCode = 1;
+    return;
+  }
+  if (!options.privateMetadata) {
+    console.error(source_default.red("Refusing to print private SSH target; rerun with --private-metadata."));
+    process.exitCode = 1;
+    return;
+  }
+  console.log(command2);
 });
 program2.command("screen").description("Open Screen Sharing (VNC) to a machine using its best live route").argument("[machine]", "Machine identifier").option("--machine <id>", "Machine identifier (alternative to positional arg)").option("--all", "Open every reachable machine", false).option("--print", "Print the vnc:// URL instead of opening it", false).option("-j, --json", "Print JSON output", false).action((machineArg, options) => {
   if (options.all) {
@@ -13314,8 +13349,8 @@ storageCommand.command("sync").description("Bidirectional storage sync: pull the
     printStorageError(error);
   }
 });
-program2.command("status").description("Print local machine and storage status").option("-j, --json", "Print JSON output", false).action((options) => {
-  const status = getStatus();
+program2.command("status").description("Print local machine and storage status").option("--private-metadata", "Print private local paths and machine identifiers", false).option("-j, --json", "Print JSON output", false).action((options) => {
+  const status = getStatus({ privateMetadata: options.privateMetadata });
   printJsonOrText(status, renderFleetStatus(status), options.json);
 });
 program2.command("doctor").description("Run machine preflight checks").option("--machine <id>", "Machine identifier").option("-j, --json", "Print JSON output", false).action((options) => {

package/dist/commands/self-test.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"self-test.d.ts","sourceRoot":"","sources":["../../src/commands/self-test.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,aAAa,CAAC;AAMjE,wBAAgB,WAAW,IAAI,cAAc,CAkD5C"}
+{"version":3,"file":"self-test.d.ts","sourceRoot":"","sources":["../../src/commands/self-test.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,aAAa,CAAC;AAMjE,wBAAgB,WAAW,IAAI,cAAc,CAmD5C"}

package/dist/commands/status.d.ts

@@ -1,3 +1,6 @@
 import type { FleetStatus } from "../types.js";
-export declare function getStatus(): FleetStatus;
+export interface FleetStatusOptions {
+    privateMetadata?: boolean;
+}
+export declare function getStatus(options?: FleetStatusOptions): FleetStatus;
 //# sourceMappingURL=status.d.ts.map

package/dist/commands/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAY/C,wBAAgB,SAAS,IAAI,WAAW,CAmCvC"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAY/C,MAAM,WAAW,kBAAkB;IACjC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAgB,SAAS,CAAC,OAAO,GAAE,kBAAuB,GAAG,WAAW,CAoCvE"}

package/dist/index.js

@@ -13728,7 +13728,7 @@ function renderDomainMapping(domain) {
 }
 // src/commands/daemon.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import { chmodSync, existsSync as existsSync6, mkdirSync as mkdirSync2, writeFileSync as writeFileSync3 } from "fs";
+import { chmodSync, existsSync as existsSync6, readFileSync as readFileSync4, statSync, mkdirSync as mkdirSync2, writeFileSync as writeFileSync3 } from "fs";
 import { dirname as dirname4 } from "path";
 import { platform as osPlatform } from "os";
 var DEFAULT_SERVICE_NAME = "machines-agent";
@@ -14147,8 +14147,29 @@ function daemonProgramArguments(options) {
   return [...base, "--interval-ms", String(options.intervalMs)];
 }
 function siblingBunRuntime(executable) {
+  if (!isBunShebangScript(executable))
+    return null;
   const candidate = `${dirname4(executable)}/bun`;
-  return existsSync6(candidate) ? candidate : null;
+  return isExecutableFile(candidate) ? candidate : null;
+}
+function isBunShebangScript(executable) {
+  try {
+    const content = readFileSync4(executable, "utf8").slice(0, 256);
+    const firstLine2 = content.split(/\r?\n/, 1)[0] ?? "";
+    return /^#!.*\bbun\b/.test(firstLine2);
+  } catch {
+    return false;
+  }
+}
+function isExecutableFile(path) {
+  if (!existsSync6(path))
+    return false;
+  try {
+    const stats = statSync(path);
+    return stats.isFile() && (stats.mode & 73) !== 0;
+  } catch {
+    return false;
+  }
 }
 function launchdDomain(options) {
   return options.mode === "system" ? "system" : "gui/$UID";
@@ -14430,7 +14451,7 @@ function runTailscaleInstall(machineId, options = {}, runner = runMachineCommand
   };
 }
 // src/commands/notifications.ts
-import { existsSync as existsSync7, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
 var notificationChannelSchema = exports_external.object({
   id: exports_external.string(),
   type: exports_external.enum(["email", "webhook", "command"]),
@@ -14589,7 +14610,7 @@ function readNotificationConfig(path = getNotificationsPath()) {
   if (!existsSync7(path)) {
     return getDefaultNotificationConfig();
   }
-  return notificationConfigSchema.parse(JSON.parse(readFileSync4(path, "utf8")));
+  return notificationConfigSchema.parse(JSON.parse(readFileSync5(path, "utf8")));
 }
 function writeNotificationConfig(config, path = getNotificationsPath()) {
   ensureParentDir(path);
@@ -14830,7 +14851,8 @@ function parseJsonObject2(value) {
     return null;
   }
 }
-function getStatus() {
+function getStatus(options = {}) {
+  const privateMetadata = options.privateMetadata === true;
   const manifest = readManifest();
   const heartbeats = listHeartbeats();
   const heartbeatByMachine = latestHeartbeatByMachine(heartbeats);
@@ -14839,17 +14861,17 @@ function getStatus() {
     ...heartbeats.map((heartbeat) => heartbeat.machine_id)
   ]);
   return {
-    machineId: getLocalMachineId(),
-    manifestPath: getManifestPath(),
-    dbPath: getDbPath(),
-    notificationsPath: getNotificationsPath(),
+    machineId: privateMetadata ? getLocalMachineId() : REDACTED_VALUE,
+    manifestPath: privateMetadata ? getManifestPath() : REDACTED_VALUE,
+    dbPath: privateMetadata ? getDbPath() : REDACTED_VALUE,
+    notificationsPath: privateMetadata ? getNotificationsPath() : REDACTED_VALUE,
     manifestMachineCount: manifest.machines.length,
     heartbeatCount: heartbeats.length,
     machines: [...machineIds].sort().map((machineId) => {
       const declared = manifest.machines.find((machine) => machine.id === machineId);
       const heartbeat = heartbeatByMachine.get(machineId);
       return {
-        machineId,
+        machineId: privateMetadata ? machineId : REDACTED_VALUE,
         platform: declared?.platform,
         manifestDeclared: Boolean(declared),
         heartbeatStatus: heartbeat?.status || "unknown",
@@ -14857,7 +14879,7 @@ function getStatus() {
         daemonVersion: heartbeat?.daemon_version ?? null,
         agentMode: heartbeat?.agent_mode ?? null,
         storageSyncStatus: heartbeat?.storage_sync_status ?? null,
-        doctorSummary: parseJsonObject2(heartbeat?.doctor_summary_json),
+        doctorSummary: privateMetadata ? parseJsonObject2(heartbeat?.doctor_summary_json) : null,
         privateMetadata: Boolean(heartbeat?.private_metadata)
       };
     }),
@@ -15099,7 +15121,7 @@ function startDashboardServer(options = {}) {
         return Response.json({ ok: true, ...getServeInfo(options) });
       }
       if (url.pathname === "/api/status") {
-        return Response.json(getStatus());
+        return Response.json(appendWarnings(getStatus({ privateMetadata }), privateWarnings));
       }
       if (url.pathname === "/api/topology") {
         const topology = discoverMachineTopology({ includeTailscale: url.searchParams.get("tailscale") !== "false" });
@@ -15237,15 +15259,16 @@ function check(id, status, summary, detail) {
 function runSelfTest() {
   const version = getPackageVersion();
   const status = getStatus();
+  const machineId = getLocalMachineId();
   const doctor = runDoctor();
   const serveInfo = getServeInfo();
   const html = renderDashboardHtml();
   const notifications = listNotificationChannels();
-  const apps = listApps(status.machineId);
-  const appsDiff = diffApps(status.machineId);
-  const cliPlan = buildClaudeInstallPlan(status.machineId);
+  const apps = listApps(machineId);
+  const appsDiff = diffApps(machineId);
+  const cliPlan = buildClaudeInstallPlan(machineId);
   return {
-    machineId: getLocalMachineId(),
+    machineId,
     checks: [
       check("package-version", version === "0.0.0" ? "fail" : "ok", "Package version resolves", version),
       check("status", "ok", "Status loads", JSON.stringify({ machines: status.manifestMachineCount, heartbeats: status.heartbeatCount })),
@@ -15526,7 +15549,7 @@ function buildScreenEnableCommand(machineId, options = {}) {
   };
 }
 // src/commands/sync.ts
-import { existsSync as existsSync8, lstatSync, readFileSync as readFileSync5, symlinkSync, copyFileSync } from "fs";
+import { existsSync as existsSync8, lstatSync, readFileSync as readFileSync6, symlinkSync, copyFileSync } from "fs";
 import { homedir as homedir5 } from "os";
 function quote4(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
@@ -15586,8 +15609,8 @@ function detectFileActions(machine) {
       if (file.mode === "symlink") {
         status = lstatSync(file.target).isSymbolicLink() ? "ok" : "drifted";
       } else {
-        const source = readFileSync5(file.source, "utf8");
-        const target = readFileSync5(file.target, "utf8");
+        const source = readFileSync6(file.source, "utf8");
+        const target = readFileSync6(file.target, "utf8");
         status = source === target ? "ok" : "drifted";
       }
     }
@@ -24815,14 +24838,17 @@ function privateOutputWarnings2(requested, allowed) {
 function appendWarnings2(payload, warnings) {
   if (warnings.length === 0)
     return payload;
-  return { ...payload, warnings: [...payload.warnings ?? [], ...warnings] };
+  const currentWarnings = typeof payload === "object" && payload && "warnings" in payload && Array.isArray(payload.warnings) ? payload.warnings : [];
+  return { ...payload, warnings: [...currentWarnings, ...warnings] };
 }
 function createMcpServer(version2) {
   const server = new McpServer({ name: "machines", version: version2 });
   const events = new EventsClient3;
-  server.tool("machines_status", "Return local machine fleet status paths and machine identity.", {}, async () => ({
-    content: [{ type: "text", text: JSON.stringify(getStatus(), null, 2) }]
-  }));
+  server.tool("machines_status", "Return local machine fleet status paths and machine identity.", { private_metadata: exports_external.boolean().optional().describe("Include private local paths and machine identifiers") }, async ({ private_metadata }) => {
+    const privateMetadata = privateMetadataAllowed(private_metadata);
+    const warnings = privateOutputWarnings2(private_metadata, privateMetadata);
+    return { content: [{ type: "text", text: JSON.stringify(appendWarnings2(getStatus({ privateMetadata }), warnings), null, 2) }] };
+  });
   server.tool("machines_doctor", "Run machine preflight checks.", { machine_id: exports_external.string().optional().describe("Machine identifier") }, async ({ machine_id }) => ({ content: [{ type: "text", text: JSON.stringify(runDoctor(machine_id), null, 2) }] }));
   server.tool("machines_self_test", "Run local package smoke checks.", {}, async () => ({
     content: [{ type: "text", text: JSON.stringify(runSelfTest(), null, 2) }]
@@ -25003,9 +25029,23 @@ function createMcpServer(version2) {
       }), null, 2)
     }]
   }));
-  server.tool("machines_ssh_resolve", "Resolve the best SSH route for a machine.", { machine_id: exports_external.string().describe("Machine identifier"), remote_command: exports_external.string().optional().describe("Optional remote command") }, async ({ machine_id, remote_command }) => ({
-    content: [{ type: "text", text: JSON.stringify({ resolved: resolveMachineRoute(machine_id), command: buildSshCommand(machine_id, remote_command) }, null, 2) }]
-  }));
+  server.tool("machines_ssh_resolve", "Resolve the best SSH route for a machine.", {
+    machine_id: exports_external.string().describe("Machine identifier"),
+    remote_command: exports_external.string().optional().describe("Optional remote command"),
+    private_metadata: exports_external.boolean().optional().describe("Include private SSH target and command")
+  }, async ({ machine_id, remote_command, private_metadata }) => {
+    const privateMetadata = privateMetadataAllowed(private_metadata);
+    const warnings = privateOutputWarnings2(private_metadata, privateMetadata);
+    const resolved = resolveMachineRoute(machine_id);
+    const publicResolved = redactRouteForOutput(resolved, { privateMetadata });
+    const command2 = resolved.ok && privateMetadata ? buildSshCommand(machine_id, remote_command) : resolved.ok ? "[redacted]" : null;
+    return {
+      content: [{
+        type: "text",
+        text: JSON.stringify(appendWarnings2({ resolved: publicResolved, command: command2 }, warnings), null, 2)
+      }]
+    };
+  });
   server.tool("machines_ports", "List listening ports on a machine.", { machine_id: exports_external.string().optional().describe("Machine identifier") }, async ({ machine_id }) => ({
     content: [{ type: "text", text: JSON.stringify(listPorts(machine_id), null, 2) }]
   }));

package/dist/mcp/index.js

@@ -5954,7 +5954,7 @@ function diffMachines(leftMachineId, rightMachineId) {
 }
 
 // src/commands/daemon.ts
-import { chmodSync, existsSync as existsSync6, mkdirSync as mkdirSync2, writeFileSync as writeFileSync3 } from "fs";
+import { chmodSync, existsSync as existsSync6, readFileSync as readFileSync4, statSync, mkdirSync as mkdirSync2, writeFileSync as writeFileSync3 } from "fs";
 import { dirname as dirname4 } from "path";
 import { platform as osPlatform } from "os";
 var DEFAULT_SERVICE_NAME = "machines-agent";
@@ -6224,8 +6224,29 @@ function daemonProgramArguments(options) {
   return [...base, "--interval-ms", String(options.intervalMs)];
 }
 function siblingBunRuntime(executable) {
+  if (!isBunShebangScript(executable))
+    return null;
   const candidate = `${dirname4(executable)}/bun`;
-  return existsSync6(candidate) ? candidate : null;
+  return isExecutableFile(candidate) ? candidate : null;
+}
+function isBunShebangScript(executable) {
+  try {
+    const content = readFileSync4(executable, "utf8").slice(0, 256);
+    const firstLine = content.split(/\r?\n/, 1)[0] ?? "";
+    return /^#!.*\bbun\b/.test(firstLine);
+  } catch {
+    return false;
+  }
+}
+function isExecutableFile(path) {
+  if (!existsSync6(path))
+    return false;
+  try {
+    const stats = statSync(path);
+    return stats.isFile() && (stats.mode & 73) !== 0;
+  } catch {
+    return false;
+  }
 }
 function launchdDomain(options) {
   return options.mode === "system" ? "system" : "gui/$UID";
@@ -6621,7 +6642,7 @@ function runTailscaleInstall(machineId, options = {}, runner = runMachineCommand
 }
 
 // src/commands/notifications.ts
-import { existsSync as existsSync7, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
 var notificationChannelSchema = exports_external.object({
   id: exports_external.string(),
   type: exports_external.enum(["email", "webhook", "command"]),
@@ -6780,7 +6801,7 @@ function readNotificationConfig(path = getNotificationsPath()) {
   if (!existsSync7(path)) {
     return getDefaultNotificationConfig();
   }
-  return notificationConfigSchema.parse(JSON.parse(readFileSync4(path, "utf8")));
+  return notificationConfigSchema.parse(JSON.parse(readFileSync5(path, "utf8")));
 }
 function writeNotificationConfig(config, path = getNotificationsPath()) {
   ensureParentDir(path);
@@ -7408,7 +7429,8 @@ function parseJsonObject2(value) {
     return null;
   }
 }
-function getStatus() {
+function getStatus(options = {}) {
+  const privateMetadata = options.privateMetadata === true;
   const manifest = readManifest();
   const heartbeats = listHeartbeats();
   const heartbeatByMachine = latestHeartbeatByMachine(heartbeats);
@@ -7417,17 +7439,17 @@ function getStatus() {
     ...heartbeats.map((heartbeat) => heartbeat.machine_id)
   ]);
   return {
-    machineId: getLocalMachineId(),
-    manifestPath: getManifestPath(),
-    dbPath: getDbPath(),
-    notificationsPath: getNotificationsPath(),
+    machineId: privateMetadata ? getLocalMachineId() : REDACTED_VALUE,
+    manifestPath: privateMetadata ? getManifestPath() : REDACTED_VALUE,
+    dbPath: privateMetadata ? getDbPath() : REDACTED_VALUE,
+    notificationsPath: privateMetadata ? getNotificationsPath() : REDACTED_VALUE,
     manifestMachineCount: manifest.machines.length,
     heartbeatCount: heartbeats.length,
     machines: [...machineIds].sort().map((machineId) => {
       const declared = manifest.machines.find((machine) => machine.id === machineId);
       const heartbeat = heartbeatByMachine.get(machineId);
       return {
-        machineId,
+        machineId: privateMetadata ? machineId : REDACTED_VALUE,
         platform: declared?.platform,
         manifestDeclared: Boolean(declared),
         heartbeatStatus: heartbeat?.status || "unknown",
@@ -7435,7 +7457,7 @@ function getStatus() {
         daemonVersion: heartbeat?.daemon_version ?? null,
         agentMode: heartbeat?.agent_mode ?? null,
         storageSyncStatus: heartbeat?.storage_sync_status ?? null,
-        doctorSummary: parseJsonObject2(heartbeat?.doctor_summary_json),
+        doctorSummary: privateMetadata ? parseJsonObject2(heartbeat?.doctor_summary_json) : null,
         privateMetadata: Boolean(heartbeat?.private_metadata)
       };
     }),
@@ -7451,15 +7473,16 @@ function check(id, status, summary, detail) {
 function runSelfTest() {
   const version = getPackageVersion();
   const status = getStatus();
+  const machineId = getLocalMachineId();
   const doctor = runDoctor();
   const serveInfo = getServeInfo();
   const html = renderDashboardHtml();
   const notifications = listNotificationChannels();
-  const apps = listApps(status.machineId);
-  const appsDiff = diffApps(status.machineId);
-  const cliPlan = buildClaudeInstallPlan(status.machineId);
+  const apps = listApps(machineId);
+  const appsDiff = diffApps(machineId);
+  const cliPlan = buildClaudeInstallPlan(machineId);
   return {
-    machineId: getLocalMachineId(),
+    machineId,
     checks: [
       check("package-version", version === "0.0.0" ? "fail" : "ok", "Package version resolves", version),
       check("status", "ok", "Status loads", JSON.stringify({ machines: status.manifestMachineCount, heartbeats: status.heartbeatCount })),
@@ -7818,7 +7841,7 @@ function runSetup(machineId, options = {}, runner = runMachineCommand) {
 }
 
 // src/commands/sync.ts
-import { existsSync as existsSync8, lstatSync, readFileSync as readFileSync5, symlinkSync, copyFileSync } from "fs";
+import { existsSync as existsSync8, lstatSync, readFileSync as readFileSync6, symlinkSync, copyFileSync } from "fs";
 import { homedir as homedir5 } from "os";
 function quote4(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
@@ -7878,8 +7901,8 @@ function detectFileActions(machine) {
       if (file.mode === "symlink") {
         status = lstatSync(file.target).isSymbolicLink() ? "ok" : "drifted";
       } else {
-        const source = readFileSync5(file.source, "utf8");
-        const target = readFileSync5(file.target, "utf8");
+        const source = readFileSync6(file.source, "utf8");
+        const target = readFileSync6(file.target, "utf8");
         status = source === target ? "ok" : "drifted";
       }
     }
@@ -8229,14 +8252,17 @@ function privateOutputWarnings(requested, allowed) {
 function appendWarnings(payload, warnings) {
   if (warnings.length === 0)
     return payload;
-  return { ...payload, warnings: [...payload.warnings ?? [], ...warnings] };
+  const currentWarnings = typeof payload === "object" && payload && "warnings" in payload && Array.isArray(payload.warnings) ? payload.warnings : [];
+  return { ...payload, warnings: [...currentWarnings, ...warnings] };
 }
 function createMcpServer(version) {
   const server = new McpServer({ name: "machines", version });
   const events = new EventsClient2;
-  server.tool("machines_status", "Return local machine fleet status paths and machine identity.", {}, async () => ({
-    content: [{ type: "text", text: JSON.stringify(getStatus(), null, 2) }]
-  }));
+  server.tool("machines_status", "Return local machine fleet status paths and machine identity.", { private_metadata: exports_external.boolean().optional().describe("Include private local paths and machine identifiers") }, async ({ private_metadata }) => {
+    const privateMetadata = privateMetadataAllowed(private_metadata);
+    const warnings = privateOutputWarnings(private_metadata, privateMetadata);
+    return { content: [{ type: "text", text: JSON.stringify(appendWarnings(getStatus({ privateMetadata }), warnings), null, 2) }] };
+  });
   server.tool("machines_doctor", "Run machine preflight checks.", { machine_id: exports_external.string().optional().describe("Machine identifier") }, async ({ machine_id }) => ({ content: [{ type: "text", text: JSON.stringify(runDoctor(machine_id), null, 2) }] }));
   server.tool("machines_self_test", "Run local package smoke checks.", {}, async () => ({
     content: [{ type: "text", text: JSON.stringify(runSelfTest(), null, 2) }]
@@ -8417,9 +8443,23 @@ function createMcpServer(version) {
       }), null, 2)
     }]
   }));
-  server.tool("machines_ssh_resolve", "Resolve the best SSH route for a machine.", { machine_id: exports_external.string().describe("Machine identifier"), remote_command: exports_external.string().optional().describe("Optional remote command") }, async ({ machine_id, remote_command }) => ({
-    content: [{ type: "text", text: JSON.stringify({ resolved: resolveMachineRoute(machine_id), command: buildSshCommand(machine_id, remote_command) }, null, 2) }]
-  }));
+  server.tool("machines_ssh_resolve", "Resolve the best SSH route for a machine.", {
+    machine_id: exports_external.string().describe("Machine identifier"),
+    remote_command: exports_external.string().optional().describe("Optional remote command"),
+    private_metadata: exports_external.boolean().optional().describe("Include private SSH target and command")
+  }, async ({ machine_id, remote_command, private_metadata }) => {
+    const privateMetadata = privateMetadataAllowed(private_metadata);
+    const warnings = privateOutputWarnings(private_metadata, privateMetadata);
+    const resolved = resolveMachineRoute(machine_id);
+    const publicResolved = redactRouteForOutput(resolved, { privateMetadata });
+    const command2 = resolved.ok && privateMetadata ? buildSshCommand(machine_id, remote_command) : resolved.ok ? "[redacted]" : null;
+    return {
+      content: [{
+        type: "text",
+        text: JSON.stringify(appendWarnings({ resolved: publicResolved, command: command2 }, warnings), null, 2)
+      }]
+    };
+  });
   server.tool("machines_ports", "List listening ports on a machine.", { machine_id: exports_external.string().optional().describe("Machine identifier") }, async ({ machine_id }) => ({
     content: [{ type: "text", text: JSON.stringify(listPorts(machine_id), null, 2) }]
   }));

package/dist/mcp/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAiCpE,eAAO,MAAM,sBAAsB,k9CA2DzB,CAAC;AAEX,wBAAgB,WAAW,CAAC,OAAO,GAAE,MAA4B,GAAG,SAAS,CAE5E;AAeD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAojB1D"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAiCpE,eAAO,MAAM,sBAAsB,k9CA2DzB,CAAC;AAEX,wBAAgB,WAAW,CAAC,OAAO,GAAE,MAA4B,GAAG,SAAS,CAE5E;AAkBD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAykB1D"}

package/dist/types.d.ts

@@ -116,6 +116,7 @@ export interface FleetStatus {
     machines: FleetStatusMachine[];
     recentSetupRuns: number;
     recentSyncRuns: number;
+    warnings?: string[];
 }
 export type NotificationChannelType = "email" | "webhook" | "command";
 export interface NotificationChannel {

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAC5D,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,KAAK,GAAG,WAAW,CAAC;AAE9D,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,eAAe,CAAC;IAC1B,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACjC,IAAI,CAAC,EAAE,eAAe,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,oBAAoB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,aAAa,CAAC;AAExD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,kBAAkB,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,UAAU,EAAE,kBAAkB,GAAG,SAAS,GAAG,UAAU,CAAC;IACxD,cAAc,CAAC,EAAE,iBAAiB,CAAC;IACnC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IACrD,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,SAAS,CAAC;IACrC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,EAAE;QACf,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,SAAS,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IACF,YAAY,EAAE;QACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,SAAS,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAClD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/C,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AAEtE,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,uBAAuB,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvD,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,GAAG,KAAK,GAAG,WAAW,GAAG,KAAK,CAAC;IAC9C,IAAI,EAAE,kBAAkB,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,cAAe,SAAQ,gBAAgB;IACtD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,GAAG,KAAK,GAAG,WAAW,GAAG,KAAK,CAAC;IAC9C,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAChE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,uBAAuB,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,0BAA0B,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,GAAG,KAAK,GAAG,WAAW,GAAG,KAAK,CAAC;IAC9C,aAAa,CAAC,EAAE,CAAC,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;AAC5D,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,KAAK,GAAG,WAAW,CAAC;AAE9D,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,eAAe,CAAC;IAC1B,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACjC,IAAI,CAAC,EAAE,eAAe,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,oBAAoB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,aAAa,CAAC;AAExD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,kBAAkB,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,UAAU,EAAE,kBAAkB,GAAG,SAAS,GAAG,UAAU,CAAC;IACxD,cAAc,CAAC,EAAE,iBAAiB,CAAC;IACnC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IACrD,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,SAAS,CAAC;IACrC,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,EAAE;QACf,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,SAAS,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IACF,YAAY,EAAE;QACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,SAAS,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAClD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/C,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AAEtE,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,uBAAuB,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACvD,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,GAAG,KAAK,GAAG,WAAW,GAAG,KAAK,CAAC;IAC9C,IAAI,EAAE,kBAAkB,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,cAAe,SAAQ,gBAAgB;IACtD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,GAAG,KAAK,GAAG,WAAW,GAAG,KAAK,CAAC;IAC9C,KAAK,EAAE,aAAa,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAChE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,uBAAuB,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,0BAA0B,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,GAAG,KAAK,GAAG,WAAW,GAAG,KAAK,CAAC;IAC9C,aAAa,CAAC,EAAE,CAAC,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,gBAAgB,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/machines",
-  "version": "0.0.43",
+  "version": "0.0.44",
   "description": "Machine fleet management CLI + MCP for developers",
   "type": "module",
   "license": "Apache-2.0",