@hypercli.com/cli 0.0.0-stage → 0.9.2

package/dist/commands/agent-login.js

@@ -0,0 +1,547 @@
+/**
+ * `hyper agents login` — first-class login flows for hosted agent pods,
+ * driven entirely through the existing exec/cp machinery; no TTY needed.
+ *
+ * Flow registry (LOGIN_FLOWS) is keyed by runtime so new runtimes (opencode,
+ * openclaw_acp, ...) slot in by adding an entry — each flow is an async fn over
+ * the shared exec/poll primitives.
+ *
+ * Choreographies (verified live in pods):
+ *   codex device-auth — detached `codex login --device-auth` writes a URL +
+ *     one-time code to /tmp/devauth.log; user completes it in a browser; the
+ *     log then reports success. Codes expire in 15 min.
+ *   claude-code paste-back — `claude auth login` reads stdin from a fifo held
+ *     open by a detached sleep; the OAuth URL lands in /tmp/clin.log; the
+ *     user pastes back the `code#state` string, which is piped into the fifo.
+ *     OAuth codes are single-use and bound to that login process's state, so
+ *     the URL is always re-extracted fresh from the log.
+ *   claude-code host-creds — copies local ~/.claude/.credentials.json into the
+ *     pod. Only ever via the explicit --from-host-creds flag.
+ *
+ * Detached-process discipline: exec calls are kept short; pod-side setsid
+ * processes survive client-side exec timeouts ('operation timed out'), so
+ * every launch tolerates the timeout and the poll loop discovers state.
+ */
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { createInterface } from 'node:readline/promises';
+import { APIError, } from '@hypercli.com/sdk';
+import { parseCommandArgs } from '../core/argv.js';
+import { CliError, UsageError } from '../core/errors.js';
+import { resolveAgentRef } from './agents.js';
+const CODEX_LOG = '/tmp/devauth.log';
+const CLAUDE_LOG = '/tmp/clin.log';
+const CLAUDE_FIFO = '/tmp/clinf';
+/** Short exec timeouts: ws round trips only; detached pod processes survive. */
+const EXEC_TIMEOUT_SEC = 25;
+// ---------------------------------------------------------------------------
+// log text helpers (unit-tested against realistic sample lines)
+// ---------------------------------------------------------------------------
+/** CSI/OSC/charset ANSI escapes and lone ESC sequences. */
+const ANSI_SEQUENCE = /\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)|\x1b\[[0-?]*[ -/]*[@-~]|\x1b[()][0-2A-B]|\x1b[@-Z\\-_]/g;
+/** Strip ANSI escapes from pod log output before any regex extraction. */
+export function stripAnsi(input) {
+    return input.replace(ANSI_SEQUENCE, '');
+}
+const CODEX_URL_RE = /https:\/\/auth\.openai\.com\/codex\/device[^\s"')\]]*/;
+const CODEX_CODE_RE = /\b([A-Z0-9]{4,6}-[A-Z0-9]{4,6})\b/;
+const CLAUDE_URL_RE = /https:\/\/claude\.com\/cai\/oauth\/authorize[^\s"'|\\)\]]*/i;
+/** Pull the device-auth URL + one-time code out of codex's log. */
+export function extractCodexDeviceAuth(log) {
+    const clean = stripAnsi(log);
+    return {
+        url: CODEX_URL_RE.exec(clean)?.[0],
+        code: CODEX_CODE_RE.exec(clean)?.[1],
+    };
+}
+export function codexDeviceAuthOutcome(log) {
+    const clean = stripAnsi(log);
+    if (/successfully logged in/i.test(clean))
+        return 'success';
+    if (/\b(failed|expired|denied)\b/i.test(clean))
+        return 'failed';
+    return undefined;
+}
+/** Pull the OAuth authorize URL out of `claude auth login` output. */
+export function extractClaudeOAuthUrl(log) {
+    return CLAUDE_URL_RE.exec(stripAnsi(log))?.[0];
+}
+export function claudePasteOutcome(log) {
+    const clean = stripAnsi(log);
+    if (/login successful/i.test(clean))
+        return 'success';
+    if (/login (failed|error)|authentication failed/i.test(clean))
+        return 'failed';
+    return undefined;
+}
+/** `claude auth status` prints JSON; tolerate it embedded in noisier output. */
+export function claudeStatusLoggedIn(text) {
+    const clean = stripAnsi(text).trim();
+    try {
+        const parsed = JSON.parse(clean);
+        if (parsed.loggedIn === true)
+            return true;
+    }
+    catch {
+        // Not single-document JSON; fall through to the regex.
+    }
+    return /"loggedIn"\s*:\s*true/.test(clean);
+}
+/** POSIX single-quote an argv fragment (the pasted code rides through sh). */
+export function shQuote(value) {
+    return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+const MAX_CONSECUTIVE_READ_ERRORS = 5;
+function describeError(err) {
+    if (err instanceof APIError)
+        return `HTTP ${err.statusCode}: ${err.detail}`;
+    if (err instanceof Error)
+        return err.message;
+    return String(err);
+}
+export async function pollLog(opts) {
+    const now = opts.now ?? (() => Date.now());
+    const sleep = opts.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+    const random = opts.random ?? Math.random;
+    const minMs = opts.minIntervalMs ?? 3_000;
+    const maxMs = Math.max(minMs, opts.maxIntervalMs ?? 5_000);
+    let consecutiveErrors = 0;
+    for (;;) {
+        if (now() >= opts.deadlineAtMs) {
+            throw new CliError(`login: timed out waiting for ${opts.waitingFor}`);
+        }
+        let text = null;
+        try {
+            text = await opts.read();
+            consecutiveErrors = 0;
+        }
+        catch (err) {
+            consecutiveErrors += 1;
+            if (consecutiveErrors >= MAX_CONSECUTIVE_READ_ERRORS) {
+                throw new CliError(`login: log poll failed repeatedly: ${describeError(err)}`);
+            }
+        }
+        if (text !== null) {
+            const abort = opts.fail?.(text);
+            if (abort !== undefined) {
+                throw new CliError(`login: aborted waiting for ${opts.waitingFor}: ${abort}`);
+            }
+            const hit = opts.extract(text);
+            if (hit !== undefined)
+                return hit;
+        }
+        const remaining = opts.deadlineAtMs - now();
+        if (remaining <= 0) {
+            throw new CliError(`login: timed out waiting for ${opts.waitingFor}`);
+        }
+        await sleep(Math.min(minMs + random() * (maxMs - minMs), remaining));
+    }
+}
+async function execPod(d, id, argv) {
+    return d.exec(id, argv, { timeout: EXEC_TIMEOUT_SEC });
+}
+function isExecTimeout(err) {
+    return err instanceof Error && /timed?\s*out/i.test(err.message);
+}
+/** exec that must succeed: throws CliError on transport failure or nonzero exit. */
+async function execChecked(fx, argv, what) {
+    let res;
+    try {
+        res = await execPod(fx.d, fx.agentId, argv);
+    }
+    catch (err) {
+        throw new CliError(`login: could not ${what}: ${describeError(err)}`);
+    }
+    if (res.exitCode !== 0) {
+        const stderr = stripAnsi(res.stderr).trim().slice(0, 200);
+        throw new CliError(`login: could not ${what}: exit ${res.exitCode}${stderr ? `: ${stderr}` : ''}`);
+    }
+    return res;
+}
+/**
+ * Fire-and-forget launch of a detached pod command. A client-side exec
+ * timeout is NOT a failure: the setsid process keeps running and the poll
+ * loop picks up its log output.
+ */
+async function launchDetached(fx, argv, what) {
+    try {
+        const res = await execPod(fx.d, fx.agentId, argv);
+        if (res.exitCode !== 0) {
+            fx.io.info(`login: ${what} launcher exited ${res.exitCode}; polling for evidence anyway`);
+        }
+    }
+    catch (err) {
+        if (isExecTimeout(err)) {
+            fx.io.info(`login: ${what} launch exec timed out client-side; the detached process survives — polling`);
+            return;
+        }
+        throw new CliError(`login: could not launch ${what}: ${describeError(err)}`);
+    }
+}
+/** `cat <path>` reader for pollLog: missing/short-timeout reads -> null (keep polling). */
+function logReader(d, id, path) {
+    return async () => {
+        try {
+            const res = await execPod(d, id, ['cat', path]);
+            return res.exitCode === 0 ? stripAnsi(res.stdout) : null;
+        }
+        catch (err) {
+            if (isExecTimeout(err))
+                return null;
+            throw err;
+        }
+    };
+}
+const LAUNCH_FAILURE_RE = /command not found|no such file or directory|permission denied/i;
+function launchFailureFromLog(text) {
+    return LAUNCH_FAILURE_RE.test(text)
+        ? 'the login process failed to start (is the runtime CLI installed in the pod?)'
+        : undefined;
+}
+// ---------------------------------------------------------------------------
+// flow: codex device-auth
+// ---------------------------------------------------------------------------
+async function runCodexDeviceAuth(fx) {
+    await launchDetached(fx, ['sh', '-c', `rm -f ${CODEX_LOG}; setsid nohup codex login --device-auth > ${CODEX_LOG} 2>&1 & echo $!`], 'codex login --device-auth');
+    fx.io.info('waiting for the codex device-auth code...');
+    const pair = await pollLog({
+        read: logReader(fx.d, fx.agentId, CODEX_LOG),
+        extract: (text) => {
+            const { url, code } = extractCodexDeviceAuth(text);
+            return url && code ? { url, code } : undefined;
+        },
+        fail: launchFailureFromLog,
+        deadlineAtMs: fx.deadlineAtMs,
+        waitingFor: 'the codex device-auth URL and code',
+    });
+    fx.io.announce(pair.url, pair.code);
+    fx.io.info('waiting for the login to complete (codes expire after 15 minutes)...');
+    const outcome = await pollLog({
+        read: logReader(fx.d, fx.agentId, CODEX_LOG),
+        extract: codexDeviceAuthOutcome,
+        deadlineAtMs: fx.deadlineAtMs,
+        waitingFor: 'codex to confirm the login',
+    });
+    if (outcome !== 'success') {
+        throw new CliError('login: codex device-auth failed or the code expired; run again for a fresh code');
+    }
+    fx.io.info('verifying with codex login status...');
+    const status = await execChecked(fx, ['codex', 'login', 'status'], 'verify the codex login');
+    if (!/logged in/i.test(stripAnsi(status.stdout))) {
+        throw new CliError(`login: 'codex login status' does not report a login: ${stripAnsi(status.stdout).trim().slice(0, 200)}`);
+    }
+    return {
+        loggedIn: true,
+        flow: 'device-auth',
+        runtime: 'codex',
+        agentId: fx.agentId,
+        detail: stripAnsi(status.stdout).trim().slice(0, 200),
+    };
+}
+// ---------------------------------------------------------------------------
+// flow: claude-code paste-back
+// ---------------------------------------------------------------------------
+async function runClaudePasteBack(fx) {
+    const { d, agentId, io } = fx;
+    await launchDetached(fx, ['sh', '-c', `mkfifo ${CLAUDE_FIFO}; (setsid nohup claude auth login < ${CLAUDE_FIFO} > ${CLAUDE_LOG} 2>&1 &); (setsid nohup sleep 600 > ${CLAUDE_FIFO} &)`], 'claude auth login');
+    try {
+        io.info('waiting for the Claude OAuth URL...');
+        const url = await pollLog({
+            read: logReader(d, agentId, CLAUDE_LOG),
+            extract: extractClaudeOAuthUrl,
+            fail: launchFailureFromLog,
+            deadlineAtMs: fx.deadlineAtMs,
+            waitingFor: 'the Claude OAuth URL',
+        });
+        io.announce(url);
+        const code = await io.readInput('Paste the code#state string from the callback page: ');
+        await execChecked(fx, ['sh', '-c', `printf '%s\\n' ${shQuote(code)} > ${CLAUDE_FIFO}`], 'pass the code to claude');
+        io.info('code delivered; waiting for the login to complete...');
+        const outcome = await pollLog({
+            read: logReader(d, agentId, CLAUDE_LOG),
+            extract: claudePasteOutcome,
+            deadlineAtMs: fx.deadlineAtMs,
+            waitingFor: 'claude to confirm the login',
+        });
+        if (outcome !== 'success') {
+            throw new CliError('login: claude reported the login failed (OAuth codes are single-use — run again for a fresh URL)');
+        }
+        io.info('verifying with claude auth status...');
+        const status = await execChecked(fx, ['claude', 'auth', 'status'], 'verify the claude login');
+        if (!claudeStatusLoggedIn(status.stdout)) {
+            throw new CliError(`login: 'claude auth status' does not report loggedIn:true: ${stripAnsi(status.stdout).trim().slice(0, 200)}`);
+        }
+        return {
+            loggedIn: true,
+            flow: 'paste-back',
+            runtime: 'claude-code',
+            agentId,
+            detail: 'claude auth status: loggedIn:true',
+        };
+    }
+    finally {
+        try {
+            await execPod(d, agentId, [
+                'sh', '-c',
+                `pkill -f "claude auth login" >/dev/null 2>&1; pkill -f "^sleep 600\$" >/dev/null 2>&1; rm -f ${CLAUDE_FIFO} ${CLAUDE_LOG}`,
+            ]);
+        }
+        catch (err) {
+            io.info(`login: cleanup warning: ${describeError(err)}`);
+        }
+    }
+}
+// ---------------------------------------------------------------------------
+// flow: claude-code host-creds seed
+// ---------------------------------------------------------------------------
+const POD_CLAUDE_CREDS = '/home/node/.claude/.credentials.json';
+async function runClaudeHostCreds(fx) {
+    const local = join(homedir(), '.claude', '.credentials.json');
+    if (!existsSync(local)) {
+        throw new CliError(`login: no local Claude credentials at ${local}; run 'claude auth login' locally first (or use --flow paste-back)`);
+    }
+    fx.io.info(`seeding ${local} into the pod`);
+    try {
+        // cp dst is sync-root-relative; an absolute-path fix is landing separately,
+        // so land the file at the sync root and move it into place.
+        await fx.d.cpTo(fx.agentId, local, '.credentials.json');
+    }
+    catch (err) {
+        throw new CliError(`login: could not copy credentials into the pod: ${describeError(err)}`);
+    }
+    await execChecked(fx, [
+        'sh', '-c',
+        `mkdir -p /home/node/.claude && mv /home/node/.credentials.json ${POD_CLAUDE_CREDS} && chmod 600 ${POD_CLAUDE_CREDS}`,
+    ], 'install the credentials file');
+    fx.io.info('verifying with claude auth status...');
+    const status = await execChecked(fx, ['claude', 'auth', 'status'], 'verify the claude login');
+    if (!claudeStatusLoggedIn(status.stdout)) {
+        throw new CliError(`login: credentials seeded but 'claude auth status' does not report loggedIn:true`);
+    }
+    return {
+        loggedIn: true,
+        flow: 'host-creds',
+        runtime: 'claude-code',
+        agentId: fx.agentId,
+        detail: 'claude auth status: loggedIn:true',
+    };
+}
+// ---------------------------------------------------------------------------
+// flow: env advisories (no exec)
+// ---------------------------------------------------------------------------
+const CLAUDE_ENV_ADVISORY = 'claude-code pods read CLAUDE_CODE_OAUTH_TOKEN (or ANTHROPIC_AUTH_TOKEN) from the pod environment at launch; set it at create time: hyper agents create <name> --runtime claude-code --env CLAUDE_CODE_OAUTH_TOKEN=<token>';
+const CODEX_ENV_ADVISORY = 'codex pods read OPENAI_API_KEY from the pod environment at launch; set it at create time: hyper agents create <name> --runtime codex --env OPENAI_API_KEY=<key> (or use --flow device-auth)';
+function envAdvisoryFlow(runtime, advisory) {
+    return {
+        name: 'env',
+        runtime,
+        requiresWalletUserInput: { type: 'none' },
+        summary: 'print the at-launch env-injection advisory (no exec)',
+        run: async (fx) => {
+            fx.io.info(advisory);
+            return { loggedIn: false, flow: 'env', runtime, agentId: fx.agentId, detail: advisory };
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// registry
+// ---------------------------------------------------------------------------
+export const LOGIN_FLOWS = new Map([
+    ['codex', [
+            {
+                name: 'device-auth',
+                runtime: 'codex',
+                requiresWalletUserInput: { type: 'none' },
+                summary: 'codex login --device-auth in the pod; user completes the URL+code in a browser',
+                run: runCodexDeviceAuth,
+            },
+            envAdvisoryFlow('codex', CODEX_ENV_ADVISORY),
+        ]],
+    ['claude-code', [
+            {
+                name: 'paste-back',
+                runtime: 'claude-code',
+                requiresWalletUserInput: { type: 'code-paste' },
+                summary: 'claude auth login over a fifo; user pastes back the code#state from the callback page',
+                run: runClaudePasteBack,
+            },
+            {
+                name: 'host-creds',
+                runtime: 'claude-code',
+                requiresWalletUserInput: { type: 'none' },
+                summary: 'seed local ~/.claude/.credentials.json into the pod (requires --from-host-creds)',
+                run: runClaudeHostCreds,
+            },
+            envAdvisoryFlow('claude-code', CLAUDE_ENV_ADVISORY),
+        ]],
+]);
+const DEFAULT_FLOW = new Map([
+    ['codex', 'device-auth'],
+    ['claude-code', 'paste-back'],
+]);
+/** Native-path hints for runtimes with no flow (point users at the real path). */
+const NATIVE_LOGIN_HINTS = {
+    opencode: 'opencode authenticates in-pod: hyper agents exec <id> -- opencode auth login -p openai -m "ChatGPT Pro/Plus (headless)"',
+    goose: 'goose reads provider credentials from the pod environment at launch: hyper agents create <name> --runtime goose --env ...',
+    'kimi-code': 'kimi-code reads provider credentials from the pod environment at launch: hyper agents create <name> --runtime kimi-code --env ...',
+    'buzz-agent': 'buzz-agent is configured at launch via env; there is no interactive pod login',
+    pi: 'Pi uses native provider configuration: open hyper agents shell <id>, then run pi to configure API keys or login',
+    openclaw_acp: 'openclaw authenticates in-pod over ACP; there is no pod login flow',
+    hermes_acp: 'hermes authenticates in-pod over ACP; there is no pod login flow',
+};
+// ---------------------------------------------------------------------------
+// command
+// ---------------------------------------------------------------------------
+const LOGIN_USAGE = [
+    'hyper agents login <id> [--flow F] [--provider X] [--session SECS] [--key-stdin] [--from-host-creds] [--json]',
+    '',
+    'flows by runtime:',
+    '  codex        device-auth (default), env',
+    '  claude-code  paste-back (default), host-creds (requires --from-host-creds), env',
+    '',
+    '--session SECS  overall deadline for the interactive window (default 900)',
+    '--json          machine output: {"url":..., "code"?} then a final {"loggedIn": true, ...};',
+    '                paste-back reads the code#state back as one line on stdin',
+].join('\n');
+function positiveSeconds(parsed, key, fallback) {
+    const raw = parsed.values[key];
+    if (raw === undefined)
+        return fallback;
+    const value = Number(raw);
+    if (!Number.isFinite(value) || value <= 0) {
+        throw new UsageError(`--${key} must be a positive number of seconds (got '${String(raw)}')`);
+    }
+    return Math.round(value);
+}
+function makeIO(ctx, hooks) {
+    const machine = ctx.format === 'json' || process.stdout.isTTY !== true;
+    return {
+        machine,
+        info: (message) => ctx.output.info(message),
+        announce(url, code) {
+            if (machine) {
+                process.stdout.write(`${JSON.stringify({ url, ...(code ? { code } : {}) })}\n`);
+                return;
+            }
+            ctx.output.result({ url, ...(code ? { code } : {}) }, [`Open this URL to authenticate:`, `  ${url}`, ...(code ? ['', `Enter code: ${code}`] : [])].join('\n'));
+        },
+        async readInput(prompt) {
+            if (hooks.readInput) {
+                const injected = (await hooks.readInput(prompt)).trim();
+                if (!injected)
+                    throw new CliError('login: empty code received');
+                return injected;
+            }
+            if (machine)
+                this.info('reading the code#state as one line on stdin...');
+            const rl = createInterface({ input: process.stdin, output: process.stderr });
+            try {
+                const answer = (await rl.question(machine ? '' : prompt)).trim();
+                if (!answer)
+                    throw new CliError('login: no code received on stdin');
+                return answer;
+            }
+            finally {
+                rl.close();
+            }
+        },
+        finish(outcome, provider) {
+            ctx.output.result({
+                loggedIn: outcome.loggedIn,
+                flow: outcome.flow,
+                runtime: outcome.runtime,
+                agent_id: outcome.agentId,
+                ...(provider !== undefined ? { provider } : {}),
+                ...(outcome.detail !== undefined ? { detail: outcome.detail } : {}),
+            }, outcome.loggedIn
+                ? `logged in (runtime ${outcome.runtime}, flow ${outcome.flow})${outcome.detail ? `\n${outcome.detail}` : ''}`
+                : outcome.detail ?? 'login flow finished without a login');
+        },
+    };
+}
+/** Exported for `hyper agents login` wiring in agents.ts. */
+export async function cmdAgentsLogin(ctx, args, hooks = {}) {
+    const parsed = parseCommandArgs(args, {
+        flow: { type: 'string' },
+        provider: { type: 'string' },
+        session: { type: 'string' },
+        'key-stdin': { type: 'boolean', default: false },
+        'from-host-creds': { type: 'boolean', default: false },
+    });
+    if (parsed.help) {
+        process.stdout.write(`${LOGIN_USAGE}\n`);
+        return;
+    }
+    if (parsed.positionals.length !== 1) {
+        throw new UsageError('usage: hyper agents login <id> [--flow F] [--provider X] [--session SECS] [--key-stdin] [--from-host-creds] [--json]');
+    }
+    const ref = parsed.positionals[0];
+    let flowName = typeof parsed.values.flow === 'string' ? parsed.values.flow : undefined;
+    const provider = typeof parsed.values.provider === 'string' ? parsed.values.provider : undefined;
+    const keyStdin = parsed.values['key-stdin'] === true;
+    const fromHostCreds = parsed.values['from-host-creds'] === true;
+    const sessionSec = positiveSeconds(parsed, 'session', 900);
+    const io = makeIO(ctx, hooks);
+    const client = await ctx.client();
+    const d = client.deployments;
+    const id = await resolveAgentRef(d, ref);
+    let agent;
+    try {
+        agent = await d.get(id);
+    }
+    catch (err) {
+        throw new CliError(`login: get agent failed: ${describeError(err)}`);
+    }
+    const runtime = (agent.runtime ?? '').toLowerCase();
+    if (!runtime)
+        throw new CliError('login: the agent record carries no runtime');
+    if (fromHostCreds) {
+        if (runtime !== 'claude-code') {
+            throw new UsageError('--from-host-creds is only valid for claude-code agents');
+        }
+        if (flowName !== undefined && flowName !== 'host-creds') {
+            throw new UsageError('--from-host-creds only pairs with --flow host-creds');
+        }
+        flowName = 'host-creds';
+    }
+    if (flowName === 'host-creds' && !fromHostCreds) {
+        throw new UsageError('the host-creds flow copies your local Claude credentials into the pod; pass --from-host-creds to allow this explicitly');
+    }
+    // --key-stdin never runs exec stdin today (exec-stdin support lands
+    // separately): refuse clearly, except on claude-code where the answer is
+    // the at-launch env advisory.
+    if (keyStdin) {
+        if (runtime === 'claude-code') {
+            const flow = envAdvisoryFlow('claude-code', CLAUDE_ENV_ADVISORY);
+            io.finish(await flow.run({ d, agentId: id, deadlineAtMs: 0, io, provider }), provider);
+            return;
+        }
+        throw new CliError('login: --key-stdin is not yet supported: agents exec has no stdin channel yet '
+            + '(pod-side exec-stdin support is landing separately). '
+            + `Use ${runtime === 'codex' ? '--flow device-auth' : 'the available login flows'} or \`hyper agents login ${ref} --help\`.`);
+    }
+    const flows = LOGIN_FLOWS.get(runtime);
+    if (!flows || flows.length === 0) {
+        const hint = NATIVE_LOGIN_HINTS[runtime];
+        throw new CliError(`login: runtime '${runtime}' has no login flow.${hint ? `\n${hint}` : ''}`);
+    }
+    const chosenName = flowName ?? DEFAULT_FLOW.get(runtime) ?? flows[0].name;
+    const flow = flows.find((entry) => entry.name === chosenName);
+    if (!flow) {
+        throw new UsageError(`unknown --flow '${chosenName}' for runtime '${runtime}' (available: ${flows.map((entry) => entry.name).join(', ')})`);
+    }
+    if (flowName === undefined && runtime === 'claude-code') {
+        io.info('hint: to seed your local Claude credentials instead, run with --flow host-creds --from-host-creds');
+    }
+    const now = hooks.now ?? (() => Date.now());
+    const fx = {
+        d,
+        agentId: id,
+        deadlineAtMs: now() + sessionSec * 1000,
+        io,
+        ...(provider !== undefined ? { provider } : {}),
+    };
+    io.finish(await flow.run(fx), provider);
+}
+//# sourceMappingURL=agent-login.js.map

package/dist/commands/agent-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-login.js","sourceRoot":"","sources":["../../src/commands/agent-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EACL,QAAQ,GAGT,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAsB,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,SAAS,GAAG,kBAAkB,CAAC;AACrC,MAAM,UAAU,GAAG,eAAe,CAAC;AACnC,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC,gFAAgF;AAChF,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,8EAA8E;AAC9E,gEAAgE;AAChE,8EAA8E;AAE9E,2DAA2D;AAC3D,MAAM,aAAa,GAAG,2FAA2F,CAAC;AAElH,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,YAAY,GAAG,uDAAuD,CAAC;AAC7E,MAAM,aAAa,GAAG,mCAAmC,CAAC;AAC1D,MAAM,aAAa,GAAG,6DAA6D,CAAC;AAEpF,mEAAmE;AACnE,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO;QACL,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,OAAO,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,IAAI,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAA4B,CAAC;QAC5D,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IACD,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAuBD,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAEtC,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,YAAY,QAAQ;QAAE,OAAO,QAAQ,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;IAC5E,IAAI,GAAG,YAAY,KAAK;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC7C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAI,IAAuB;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,CAAC;IAC3D,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,SAAS,CAAC;QACR,IAAI,GAAG,EAAE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,QAAQ,CAAC,gCAAgC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,IAAI,GAAkB,IAAI,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,iBAAiB,GAAG,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,iBAAiB,IAAI,CAAC,CAAC;YACvB,IAAI,iBAAiB,IAAI,2BAA2B,EAAE,CAAC;gBACrD,MAAM,IAAI,QAAQ,CAAC,sCAAsC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,QAAQ,CAAC,8BAA8B,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,GAAG,CAAC;QACpC,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,GAAG,GAAG,EAAE,CAAC;QAC5C,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,QAAQ,CAAC,gCAAgC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,MAAM,EAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAwCD,KAAK,UAAU,OAAO,CAAC,CAAc,EAAE,EAAU,EAAE,IAAc;IAC/D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,OAAO,GAAG,YAAY,KAAK,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,WAAW,CAAC,EAAoB,EAAE,IAAc,EAAE,IAAY;IAC3E,IAAI,GAAoB,CAAC;IACzB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,oBAAoB,IAAI,KAAK,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,IAAI,QAAQ,CAAC,oBAAoB,IAAI,UAAU,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,EAAoB,EAAE,IAAc,EAAE,IAAY;IAC9E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACvB,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,oBAAoB,GAAG,CAAC,QAAQ,+BAA+B,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,6EAA6E,CAAC,CAAC;YACxG,OAAO;QACT,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,2BAA2B,IAAI,KAAK,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,SAAS,SAAS,CAAC,CAAc,EAAE,EAAU,EAAE,IAAY;IACzD,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;YAChD,OAAO,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,aAAa,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpC,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAG,gEAAgE,CAAC;AAE3F,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,CAAC,CAAC,8EAA8E;QAChF,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,KAAK,UAAU,kBAAkB,CAAC,EAAoB;IACpD,MAAM,cAAc,CAClB,EAAE,EACF,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,SAAS,8CAA8C,SAAS,iBAAiB,CAAC,EACxG,2BAA2B,CAC5B,CAAC;IACF,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC;QACzB,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;QAC5C,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAChB,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACjD,CAAC;QACD,IAAI,EAAE,oBAAoB;QAC1B,YAAY,EAAE,EAAE,CAAC,YAAY;QAC7B,UAAU,EAAE,oCAAoC;KACjD,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IAEnF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;QAC5B,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;QAC5C,OAAO,EAAE,sBAAsB;QAC/B,YAAY,EAAE,EAAE,CAAC,YAAY;QAC7B,UAAU,EAAE,4BAA4B;KACzC,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC,iFAAiF,CAAC,CAAC;IACxG,CAAC;IAED,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC7F,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,QAAQ,CAAC,wDAAwD,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9H,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,KAAK,UAAU,kBAAkB,CAAC,EAAoB;IACpD,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;IAC9B,MAAM,cAAc,CAClB,EAAE,EACF,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,WAAW,uCAAuC,WAAW,MAAM,UAAU,uCAAuC,WAAW,KAAK,CAAC,EAC5J,mBAAmB,CACpB,CAAC;IACF,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;YACxB,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC;YACvC,OAAO,EAAE,qBAAqB;YAC9B,IAAI,EAAE,oBAAoB;YAC1B,YAAY,EAAE,EAAE,CAAC,YAAY;YAC7B,UAAU,EAAE,sBAAsB;SACnC,CAAC,CAAC;QACH,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAEjB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,sDAAsD,CAAC,CAAC;QACxF,MAAM,WAAW,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,OAAO,CAAC,IAAI,CAAC,MAAM,WAAW,EAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;QACnH,EAAE,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QAEhE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;YAC5B,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC;YACvC,OAAO,EAAE,kBAAkB;YAC3B,YAAY,EAAE,EAAE,CAAC,YAAY;YAC7B,UAAU,EAAE,6BAA6B;SAC1C,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,QAAQ,CAAC,kGAAkG,CAAC,CAAC;QACzH,CAAC;QAED,EAAE,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC9F,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,QAAQ,CAAC,8DAA8D,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACpI,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,aAAa;YACtB,OAAO;YACP,MAAM,EAAE,mCAAmC;SAC5C,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE;gBACxB,IAAI,EAAE,IAAI;gBACV,gGAAgG,WAAW,IAAI,UAAU,EAAE;aAC5H,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,IAAI,CAAC,2BAA2B,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,sCAAsC,CAAC;AAEhE,KAAK,UAAU,kBAAkB,CAAC,EAAoB;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC9D,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,QAAQ,CAAC,yCAAyC,KAAK,oEAAoE,CAAC,CAAC;IACzI,CAAC;IACD,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,eAAe,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,4EAA4E;QAC5E,4DAA4D;QAC5D,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,mDAAmD,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,WAAW,CAAC,EAAE,EAAE;QACpB,IAAI,EAAE,IAAI;QACV,kEAAkE,gBAAgB,iBAAiB,gBAAgB,EAAE;KACtH,EAAE,8BAA8B,CAAC,CAAC;IAEnC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC9F,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,QAAQ,CAAC,kFAAkF,CAAC,CAAC;IACzG,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,aAAa;QACtB,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,MAAM,EAAE,mCAAmC;KAC5C,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E,MAAM,mBAAmB,GAAG,2NAA2N,CAAC;AACxP,MAAM,kBAAkB,GAAG,6LAA6L,CAAC;AAEzN,SAAS,eAAe,CAAC,OAAe,EAAE,QAAgB;IACxD,OAAO;QACL,IAAI,EAAE,KAAK;QACX,OAAO;QACP,uBAAuB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;QACzC,OAAO,EAAE,sDAAsD;QAC/D,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAChB,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC1F,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,CAAC,MAAM,WAAW,GAA8C,IAAI,GAAG,CAA+B;IAC1G,CAAC,OAAO,EAAE;YACR;gBACE,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,OAAO;gBAChB,uBAAuB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBACzC,OAAO,EAAE,gFAAgF;gBACzF,GAAG,EAAE,kBAAkB;aACxB;YACD,eAAe,CAAC,OAAO,EAAE,kBAAkB,CAAC;SAC7C,CAAC;IACF,CAAC,aAAa,EAAE;YACd;gBACE,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,aAAa;gBACtB,uBAAuB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;gBAC/C,OAAO,EAAE,uFAAuF;gBAChG,GAAG,EAAE,kBAAkB;aACxB;YACD;gBACE,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,aAAa;gBACtB,uBAAuB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBACzC,OAAO,EAAE,kFAAkF;gBAC3F,GAAG,EAAE,kBAAkB;aACxB;YACD,eAAe,CAAC,aAAa,EAAE,mBAAmB,CAAC;SACpD,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,YAAY,GAAgC,IAAI,GAAG,CAAC;IACxD,CAAC,OAAO,EAAE,aAAa,CAAC;IACxB,CAAC,aAAa,EAAE,YAAY,CAAC;CAC9B,CAAC,CAAC;AAEH,kFAAkF;AAClF,MAAM,kBAAkB,GAAqC;IAC3D,QAAQ,EAAE,yHAAyH;IACnI,KAAK,EAAE,2HAA2H;IAClI,WAAW,EAAE,mIAAmI;IAChJ,YAAY,EAAE,+EAA+E;IAC7F,EAAE,EAAE,iHAAiH;IACrH,YAAY,EAAE,oEAAoE;IAClF,UAAU,EAAE,kEAAkE;CAC/E,CAAC;AAEF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,WAAW,GAAG;IAClB,+GAA+G;IAC/G,EAAE;IACF,mBAAmB;IACnB,2CAA2C;IAC3C,mFAAmF;IACnF,EAAE;IACF,2EAA2E;IAC3E,4FAA4F;IAC5F,2EAA2E;CAC5E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAS,eAAe,CAAC,MAAqB,EAAE,GAAW,EAAE,QAAgB;IAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,UAAU,CAAC,KAAK,GAAG,+CAA+C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,MAAM,CACb,GAAmB,EACnB,KAA0D;IAE1D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;IACvE,OAAO;QACL,OAAO;QACP,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QAC3C,QAAQ,CAAC,GAAG,EAAE,IAAI;YAChB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,MAAM,CACf,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAClC,CAAC,gCAAgC,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACxG,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,MAAM;YACpB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxD,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,QAAQ,CAAC,4BAA4B,CAAC,CAAC;gBAChE,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,IAAI,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YACzE,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACjE,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,QAAQ,CAAC,kCAAkC,CAAC,CAAC;gBACpE,OAAO,MAAM,CAAC;YAChB,CAAC;oBAAS,CAAC;gBACT,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,QAAQ;YACtB,GAAG,CAAC,MAAM,CAAC,MAAM,CACf;gBACE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,QAAQ,EAAE,OAAO,CAAC,OAAO;gBACzB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE,EACD,OAAO,CAAC,QAAQ;gBACd,CAAC,CAAC,sBAAsB,OAAO,CAAC,OAAO,UAAU,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC9G,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,qCAAqC,CAC5D,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAmB,EACnB,IAAc,EACd,QAAiF,EAAE;IAEnF,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE;QACpC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3B,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;QAChD,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;KACvD,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,IAAI,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,UAAU,CAAC,sHAAsH,CAAC,CAAC;IAC/I,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,QAAQ,GAAG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACjG,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IACrD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC;IAChE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAE3D,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;IAC7B,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,4BAA4B,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,4CAA4C,CAAC,CAAC;IAE/E,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,UAAU,CAAC,wDAAwD,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YACxD,MAAM,IAAI,UAAU,CAAC,qDAAqD,CAAC,CAAC;QAC9E,CAAC;QACD,QAAQ,GAAG,YAAY,CAAC;IAC1B,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY,IAAI,CAAC,aAAa,EAAE,CAAC;QAChD,MAAM,IAAI,UAAU,CAAC,wHAAwH,CAAC,CAAC;IACjJ,CAAC;IAED,oEAAoE;IACpE,yEAAyE;IACzE,8BAA8B;IAC9B,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,eAAe,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;YACjE,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACvF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,QAAQ,CAChB,gFAAgF;cAC9E,uDAAuD;cACvD,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,2BAA2B,4BAA4B,GAAG,YAAY,CAC7H,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,QAAQ,CAAC,mBAAmB,OAAO,uBAAuB,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,UAAU,CAClB,mBAAmB,UAAU,kBAAkB,OAAO,iBAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtH,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QACxD,EAAE,CAAC,IAAI,CAAC,mGAAmG,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAqB;QAC3B,CAAC;QACD,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI;QACvC,EAAE;QACF,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC;IACF,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC"}

package/dist/commands/agents.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `hyper agents` — manage hosted agents (deployments).
+ *
+ * Golden-pattern duties carried by this group:
+ *   - <id> arguments accept an unambiguous id prefix (list + prefix match,
+ *     ambiguous -> UsageError listing candidates). Later groups copy this.
+ *   - Records render as label/value blocks and curated JSON bags; gateway
+ *     tokens, jwt tokens, and secret-shaped values are redacted to last-4.
+ *
+ * Substitutions against the original spec (records.ts / Commands.adopt do not
+ * exist in the frozen core, so this module ships local equivalents):
+ *   - adopt(ctx) resolves the lazy SDK client (ctx.client()) once per call.
+ *   - routines ride client.routines (RoutinesAPI), not d.routines.
+ *   - activate calls client.agent.redeemGrantCode (agent.ts), not a
+ *     deployments method.
+ *   - token calls d.createScopedKey(id, name); the SDK has no typed scopes
+ *     field, so repeated --scope values are joined into the key name.
+ */
+import { type Deployments } from '@hypercli.com/sdk';
+import type { CommandContext } from '../core/types.js';
+export declare const name = "agents";
+export declare const summary = "Manage hosted agents (deployments, shells, logs, files, routines).";
+export declare const usage: string[];
+/** Map a stored or user-supplied legacy runtime spelling to its canonical name. */
+export declare function canonicalRuntimeName(runtime: string): string;
+/**
+ * Resolve a user-typed <id> reference to a full agent id.
+ *
+ *   hyper agents status a1b2      — prefix of exactly one id/name/handle/hostname
+ *   ambiguous                      — UsageError (exit 2) listing candidates
+ *   no match                       — CliError (exit 1)
+ *
+ * Exported for `hyper routines` (routines.ts) so --agent resolves identically.
+ */
+export declare function resolveAgentRef(d: Deployments, ref: string): Promise<string>;
+/**
+ * Piped stdin collector for cmdExec. A TTY keeps exec strictly one-shot:
+ * stdin stays untouched and the pod command sees no stdin attachment at all.
+ * A pipe is drained to EOF and forwarded; an unbounded pipe is a caller error,
+ * exactly like `kubectl exec -i` on a never-closing stream.
+ */
+declare function readPipedExecStdin(): Promise<Uint8Array | undefined>;
+/** Test seam: tests replace `collect` instead of piping process.stdin. */
+export declare const execStdin: {
+    collect: typeof readPipedExecStdin;
+};
+export declare function run(ctx: CommandContext, args: string[]): Promise<number | void>;
+export {};