@integrity-labs/agt-cli 0.28.318 → 0.28.320

package/dist/bin/agt.js

@@ -38,8 +38,9 @@ import {
   success,
   table,
   warn
-} from "../chunk-2DIWTRTU.js";
+} from "../chunk-CJSATK6B.js";
 import {
+  AnchorSessionClient,
   CHANNEL_REGISTRY,
   DEFAULT_FRAMEWORK,
   DEPLOYMENT_TEMPLATES,
@@ -67,7 +68,7 @@ import {
   renderTemplate,
   resolveChannels,
   serializeManifestForSlackCli
-} from "../chunk-4DHYHNCV.js";
+} from "../chunk-NAS4DZNG.js";
 import "../chunk-XWVM4KPK.js";
 
 // src/bin/agt.ts
@@ -4826,7 +4827,7 @@ import { execFileSync, execSync } from "child_process";
 import { existsSync as existsSync10, realpathSync as realpathSync2 } from "fs";
 import chalk18 from "chalk";
 import ora16 from "ora";
-var cliVersion = true ? "0.28.318" : "dev";
+var cliVersion = true ? "0.28.320" : "dev";
 async function fetchLatestVersion() {
   const host2 = getHost();
   if (!host2) return null;
@@ -5448,6 +5449,93 @@ async function auditSecretsCommand(options = {}) {
   }
 }
 
+// src/commands/anchor.ts
+import { confirm as confirm4 } from "@inquirer/prompts";
+function describeShape(raw) {
+  if (!raw || typeof raw !== "object") return typeof raw;
+  const keys = Object.keys(raw);
+  return keys.length > 0 ? keys.join(", ") : "(no keys)";
+}
+async function runAnchorOnboard(profileArg, opts, deps) {
+  const { out } = deps;
+  const profile = (profileArg ?? "").trim();
+  const apiKey = (opts.apiKey ?? process.env["ANCHOR_API_KEY"] ?? process.env["ANCHOR_BROWSER_API_KEY"] ?? "").trim();
+  if (!profile) {
+    out.error("A profile name is required: agt anchor onboard <profile>");
+    return { ok: false, reason: "missing-profile" };
+  }
+  if (!apiKey) {
+    out.error("No Anchor API key. Set ANCHOR_API_KEY (a CLI flag would leak the secret via shell history / process list).");
+    return { ok: false, reason: "missing-api-key" };
+  }
+  const client = deps.createClient(apiKey, opts.apiBase);
+  let session;
+  try {
+    session = await client.createSession({ dedicatedStickyIp: opts.stickyIp !== false });
+  } catch (err) {
+    out.error(`Failed to start an Anchor session: ${err.message}`);
+    return { ok: false, reason: "mint-failed" };
+  }
+  if (!session.liveViewUrl) {
+    out.error("Anchor did not return a live-view URL for this session; cannot drive the login by hand.");
+    out.info(`Response shape (keys): ${describeShape(session.raw)}`);
+    await endBestEffort(client, session.sessionId);
+    return { ok: false, reason: "no-live-view" };
+  }
+  out.info(`Onboarding Anchor profile "${profile}".`);
+  out.info("1. Open this live-view URL and log into the target site (LinkedIn, etc.) by hand:");
+  out.url(session.liveViewUrl);
+  out.info("   Your password is typed into Anchor's browser only - it never reaches the agent or Augmented Team.");
+  out.info("2. Once you are fully logged in, confirm below to save the authenticated profile.");
+  let approved = false;
+  try {
+    approved = await deps.confirmSave(profile);
+  } catch {
+    approved = false;
+  }
+  if (!approved) {
+    out.info("Aborted - ending the session without saving the profile.");
+    await endBestEffort(client, session.sessionId);
+    return { ok: false, reason: "aborted" };
+  }
+  try {
+    await client.saveProfileFromSession(profile, session.sessionId, {
+      dedicatedStickyIp: opts.stickyIp !== false
+    });
+  } catch (err) {
+    out.error(`Failed to save the profile: ${err.message}`);
+    await endBestEffort(client, session.sessionId);
+    return { ok: false, reason: "save-failed" };
+  }
+  await endBestEffort(client, session.sessionId);
+  out.success(`Saved Anchor profile "${profile}".`);
+  out.info(`Set it on the agent's anchor-browser integration config as profile_name: "${profile}".`);
+  out.info("The agent will resume this login on its next session - no re-auth needed.");
+  return { ok: true, reason: "saved", profile };
+}
+async function endBestEffort(client, sessionId) {
+  try {
+    await client.endSession(sessionId);
+  } catch {
+  }
+}
+async function anchorOnboardCommand(profile, options) {
+  const result = await runAnchorOnboard(profile, options, {
+    createClient: (apiKey, baseUrl) => new AnchorSessionClient({ apiKey, ...baseUrl ? { baseUrl } : {} }),
+    confirmSave: (p) => confirm4({ message: `Finished logging in as "${p}"? Save the profile now?`, default: true }),
+    out: {
+      info,
+      success,
+      error,
+      // The URL is data the operator must copy, so print it plainly on its own line.
+      url: (u) => console.log(`
+  ${u}
+`)
+    }
+  });
+  if (!result.ok) process.exitCode = 1;
+}
+
 // src/commands/integration.ts
 import { homedir as homedir11 } from "os";
 import { join as join22 } from "path";
@@ -5843,7 +5931,7 @@ function handleError(err) {
 }
 
 // src/bin/agt.ts
-var cliVersion2 = true ? "0.28.318" : "dev";
+var cliVersion2 = true ? "0.28.320" : "dev";
 var program = new Command();
 program.name("agt").description("Augmented CLI \u2014 agent provisioning and management").version(cliVersion2).option("--json", "Emit machine-readable JSON output (suppress spinners and colors)").option("--skip-update-check", "Skip the automatic update check on startup");
 program.hook("preAction", async (thisCommand, actionCommand) => {
@@ -5963,6 +6051,10 @@ var recurring = kanban.command("recurring").description("Manage recurring kanban
 recurring.command("add <title>").description("Create a recurring kanban task").requiredOption("--agent <code-name>", "Agent code name").requiredOption("--every <schedule>", 'Schedule: "every Monday at 9am", "daily at 8:30am", "every 2 hours", or cron').option("--priority <1|2|3>", "Priority: 1=high, 2=medium, 3=low", "2").option("--description <text>", "Task description").option("--estimate <minutes>", "Estimated time in minutes").option("--deliverable <text>", "Expected output/deliverable").option("--timezone <tz>", "Timezone (default: UTC)").action(kanbanRecurringAddCommand);
 recurring.command("list").description("List recurring kanban templates for an agent").requiredOption("--agent <code-name>", "Agent code name").action(kanbanRecurringListCommand);
 recurring.command("disable <title-or-id>").description("Disable a recurring kanban template").requiredOption("--agent <code-name>", "Agent code name").action(kanbanRecurringDisableCommand);
+var anchor = program.command("anchor").description("Anchor Browser persistent-profile tools");
+anchor.command("onboard <profile>").description("One-time live-view login to save an authenticated Anchor profile (agent then resumes it with no re-auth)").option("--api-base <url>", "Override the Anchor API base URL").option("--no-sticky-ip", "Do not request a dedicated sticky IP for the session").action(
+  (profile, opts) => anchorOnboardCommand(profile, { apiBase: opts.apiBase, stickyIp: opts.stickyIp })
+);
 var integration = program.command("integration").description("Manage integrations \u2014 install, configure, and control permission scopes");
 integration.command("list").description("List available integrations for the active team").action(integrationListCommand);
 integration.command("show <slug>").description("Show integration details including permission scopes").action(integrationShowCommand);