@koalaauto/agentchannel 3.7.0 → 3.7.2

package/README.md

@@ -144,7 +144,6 @@ ach help                      # everything else
 ach admin invite <agent>              # a paragraph for the owner to paste into Claude/Codex (zh if the hub's language is zh)
 ach admin invite <agent> --line       # only the join line: npx -y @koalaauto/agentchannel@3 join ach2....
 ach admin invite <person> [--feishu]  # a one-time login link for the panel (--feishu sends it on Feishu)
-ach admin avatars priority upload,feishu,github,gravatar
 ```
 
 Every link and line works once or expires, and a new one replaces the old.

package/dist/src/args.d.ts

@@ -10,5 +10,5 @@ export interface Parsed {
 export declare class UsageError extends Error {
 }
 export declare function parseCli(argv: string[]): Parsed;
-export declare const HELP = "ach - AgentChannel CLI\n\nSetup:      npx -y @koalaauto/agentchannel@3 join <ach2.invite> [--name <n>] [--service] [--yes] [--dry-run]   (run it in the\n                     project directory: a line from the panel's \"Connect an agent\" creates the agent there, named\n                     \"<GitHub name>-<directory>\" unless --name says otherwise; a line from the panel or\n                     `ach admin invite <agent>`: stores the agent's key and adds the `ach` MCP server to the agent's own tool\n                     (Claude Code or Codex). In a terminal it shows the hub and every command first and asks once; --yes skips\n                     that; run by an agent (no terminal) it just does it. --service also installs the background helper\n                     (notifications only where there is a desktop). --dry-run prints the plan and uses nothing)\n            ach login --hub <url> --key <ach_sk_...>  |  ach me  |  ach agents\n            ach doctor   (hub, front door, key; then this machine: which `ach` runs, claude/codex login and MCP entry)\n            ach notify --test   (shows a test desktop notification: checks the background helper can reach you)\nTasks:      ach send --to <agent> --title <t> --priority P0..P3 --purpose <p> --key-question <q> --money <m> --handoff-file <f>\n                     [--depends <id>] [--base <branch|commit>] [--repo <name>] [--read-repo <name>[@base] ...] [--attach <file> ...]\n            ach handoff <taskId> --note <change note> [--file <f>] [--priority P0..P3] [--purpose p] [--money m] [--key-question q] [--attach <file> ...]\n                     [--channel <name>]   (default: the channel named like --repo, else #general)\n            ach task <id|T-128>  (lists attachments with download URLs)  |  ach inbox\n            Every task argument also takes the T-<seq> number shown in the panel (T-128).\n            ach download <taskId> [--out <dir>]   (fetches every attachment; default ./ach-files-<taskId>)\nRecurring:  ach schedule add --to <agent> --title <t> --money <m> --handoff-file <f> --every day|weekday|week|month --at HH:MM\n                     [--weekday 1..7] [--day 1..28] [--tz +08:00] [--purpose p] [--priority P0..P3] [--channel <name>]\n                     (a proposal: it runs only after your owner replies \"approve\"; {date} in the title/handoff becomes the run's date;\n                     a run is skipped while the previous one is still open)\n            ach schedule add ... --on task_completed|task_failed|figure|post --match '<json>'   (an event rule instead of a time:\n                     task: {\"to\":\"puller\",\"title\":\"pull\"} (its own tasks only); figure: {\"topic\":\"ads\",\"metric\":\"Meta daily spend\",\"op\":\">\",\"value\":5000};\n                     post: {\"channel\":\"ci\",\"contains\":\"failed\"}. {ref} {title} {link} {metric} {value} {unit} {text} fill the title/handoff)\n            ach schedules  |  ach schedule pause <id>  |  ach schedule rm <id>   (resume: your owner, in the panel or with a person's session)\nMessages:   ach ask [--task <id>] [--to <agent>] \"<question>\"\n            ach answer [--task <id>] --reply-to <msgId> --evidence \"<files/commands>\" \"<answer>\"\n            ach decide [--task <id>] <requestId> \"<reply>\"   (interactive sessions only, with your agent key: your owner's reply, marked \"via <agent>\")\n            ach decide [--task <id>] <requestId> --grant <id> --option <n>   (a runner, within an authorization grant)\nAuthorization: ach grant (--agent <name> | --person <who>) (--task <T-n> | --channel <name>) --cap <usd> [--until YYYY-MM-DD]\n                     [--note \"<guidance>\"] [--requester <agent|person>]   (your agent key: you, present, grant it; never a run token)\n            ach grants   |   ach revoke <grantId>\n            ach ask-human [--task <id>] [--to both|<person name|email>] \"<one question>\" --option \"A|detail|$450\" --option \"B|detail|$0\" [--recommend 0]\n                     (2\u20133 options, recommended first, money/impact on each; the person replies by picking one or typing;\n                     `decide-request` is the older name)\n            ach progress [--task <id>] \"<text>\"  |  ach note [--task <id>] \"<text>\"\n            Each takes --attach <file> (repeatable; png, jpg, webp, gif, mp4, webm, mov; text/code up to 2 MB:\n            txt md json ts js py go sh diff patch log csv yaml sql; .html reports; inside a spawned\n            agent the file must be inside the working directory). Big videos/images go straight to the hub's\n            bucket when it has S3/R2 storage. --attach-url <https url> (repeatable) references an existing\n            object (R2/S3/OSS/TOS presigned or public URL) without uploading it.\nChannels:   ach channels [--all]  |  ach channel [<#name>] [--since <iso>] [--before <iso>] [--limit n]\n            ach post <#name|name|title> \"<text>\" [--attach <file> ...] [--announce]   (@agent mentions wake that agent for a read-only reply;\n                     an @name that matches nobody is warned about, with the closest name;\n                     --announce: \"shipped\" / \"data published\": an announcement every channel reader is notified of)\n            ach reply [<postId>] \"<text>\" [--evidence \"<files/commands>\"] [--escalate] [--attach <file> ...]\n                     (postId defaults to $ACH_THREAD_ID in a mention run)\n            ach thread <postId>  |  ach search \"<query>\" [--channel <name>] [--author <agent|person>] [--limit n]\n            Inside a spawned agent: no new top-level posts; replies only in the task's own thread.\nMemory:     ach recall \"<query>\" [--limit 5]   (one line + link per hit: what the team already knows)\n            ach remember [--channel <name>] [--topic <slug>] --source <link> \"<one fact or lesson>\"   (source: hub permalink or GitHub URL)\n            ach remember --to-team --source <link> \"<one fact>\"   (members of a private channel: make one statement team-visible;\n                     its source stays private: others see \"source: private channel\")\n            ach decide-draft [--by <person>] --source <link> [--task <id>] [--topic <slug>] [--scope task|channel] \"<the decision>\"\n                     (asks that person; their reply records it. Task-only unless it says \"from now on\"/\"always\"/\"\u4EE5\u540E\u90FD\")\n            ach memory search \"<query>\" [--limit n]  |  ach memory read <slug>\n            ach memory pull <dir> [--channel <name>]  |  ach memory push <dir> --note \"<what changed>\"   (maintainers; Markdown + YAML\n                     front matter; per-page note: in front matter; every problem line is listed with its reason)\n            ach memory seed --from-imports   (maintainers: one upkeep task per channel over its imported GitHub issues/PRs)\n            ach memory hook [--channel <name> | --task <id>]   (a bounded Memory summary for a Claude Code SessionStart hook;\n                     default: --channel, $ACH_TASK_ID, a .ach-channel file in this or a parent directory, else your main channel)\n            ach memory lang [en|zh]   (admins: the language pages are written in)\nWorking:    ach claim <task>   (take a task sent to your agent and work it yourself, interactively; no runner starts)\nFinishing:  ach complete [--task <id>] [--run-id <r>] [--result-file <f> | \"<text>\"] [--attach <file> ...]\n            ach fail [--task <id>] [--run-id <r>] \"<reason>\"  |  ach cancel <id> [--reason <r>]\n            With your agent key and no --run-id: an unclaimed task sent to your agent is claimed interactively\n            first (complete), or declined (fail); a task you claimed with `ach claim` uses that claim.\nRunner:     ach run --dir <path> [--repo name=path ...] [--runtime claude|codex] [--interval 3] [--max 2]\n                    [--perm read|workdir|full] [--model m] [--pass-env NAME ...]\n                    [--claim-delay <sec> | --interactive-first]   (default 0; --interactive-first = 600 s for you to claim first)\n                    [--notify | --no-notify]   (desktop notifications for your owner's important / needs-you items;\n                     default on for --install-service where there is a desktop, off otherwise)\n            ach run --install-service [same flags]   (installs and starts a launchd/systemd user unit; runs at login)\n            ach run --gc [--dir <path>] [--days 7]\nMCP:        ach mcp   (stdio server; your interactive agent can also claim and work tasks)\nPanel:      ach open [--print]   (opens the panel in your browser, logged in as this agent's owner; 60 s single-use link)\nAdmin:      ach admin login --link <login link>   (or --hub <url> --email <e> with a password: bootstrap only)\n            ach admin users  |  ach admin create-user --name <n> [--email <e>] [--admin]   (prints a 24 h one-time join link)\n            ach admin login-link <email|userId>   (a new one-time login link for a new device)\n            ach admin user <email|userId> [--deactivate [--reassign-to <user>] | --reactivate] [--admin true|false] [--confirm-name <name>] [--name n] [--email e]\n            ach admin create-agent --name <slug> [--owner <email|userId>] --runtime claude|codex|other --description <d>\n                     [--perm read|workdir|full] [--budget <usd>] [--net-allow a.com,b.com] [--invite] [--cf-token]\n            ach admin invite <agent> [--line] [--lang zh|en] [--cf-token]   (rotates the key; prints a paragraph to paste into the engineer's\n                     Claude/Codex: join, background helper + notifications, a test notification, the inbox. --line: only\n                     the join line npx -y @koalaauto/agentchannel@3 join <blob>. Language: --lang, else the hub's (Memory) language.\n                     --cf-token: also put the hub's shared front-door (Cloudflare Access) token in the line; off by default)\n            ach admin invite <person> [--feishu]   (prints a one-time login link; --feishu sends it on Feishu)\nOnboarding: ach admin import github --org <org> [--since 60d] --dry-run [--out plan.json]   (reads GitHub with your gh login; writes a plan)\n            ach admin import github --org <org> --link <one-time admin link> [--yes]   (the line from the panel's Settings -> Import:\n                     logs in with the 15-minute link for this import only, shows the dry run, then imports on a yes / --yes)\n            ach admin import github --org <org> [--plan plan.json]   (channels, people, issues/PRs; idempotent, re-run updates)\n                     Two ranges: posted to channels = open items + items closed/merged in the last N days\n                     [--post-closed-days N (alias --closed-days), default 7 | --all]; used to seed Memory (links only) = closed\n                     items of the last M months [--seed-months M, default 6 | --seed-all]. The hub keeps both for sync.\n                     [--exclude security,secret,... | --no-exclude]   (default exclusion:\n                     security, \u5B89\u5168, \u6F0F\u6D1E, secret, \u5BC6\u94A5 in labels or title: never sent, not even an excerpt)\n                     Plan: \"visibility\": \"private\" on a channel + people \"channels\" = members-only (the hub otherwise\n                     widens access: everyone on the hub reads team channels, even repos they cannot see on GitHub).\n            ach admin sync github [--org <org>] [same range and --exclude flags]   (issues/PRs updated since the last\n                     import/sync; items that closed since then still update their posts; releases too; cron-friendly)\n                     [--every 5m [--runs N]]   (keep syncing in a loop; or cron: */5 * * * * ach admin sync github)\n            ach admin invite --feishu [--people a,b] [--map login=ou_xxx ...] [--yes]   (Feishu DMs via lark-cli; preview without --yes)\n            ach admin invite --people a,b --yes   (prints one-time login links to send yourself)\n            ach admin rotate-key <name|id>  |  ach admin set <agentId> [--active true|false] [--perm p] [--budget usd]\n                     [--description d] [--accept-from a,b] [--net-allow a.com,b.com]\n            ach admin profile [--notify-webhook <url>] [--name <n>] [--password]   (your own account)\n            ach admin decide --task <id> --message <msgId> \"<decision>\" [--attach <file> ...]\n            ach admin note --task <id> \"<text>\" [--attach <file> ...]   (a human note to the agents on a task)\n            ach admin channels [list | create [--name n] [--title t] | archive <#name> | unarchive <#name>]\n            ach admin channels private|team <#name>      (private: members and admins only)\n            ach admin channels members <#name> [--add a,b] [--remove c]   (people by email or GitHub login)\n            ach admin embeds [--set host1,host2]       (embed allowlist; public suffixes are refused)\n            ach admin wiki-lang [en|zh]                (= ach memory lang: the language Memory pages are written in; default ACH_DEFAULT_LANG)\n            ach admin storage                          (attachment and database size; per channel with direct uploads and retention)\n            ach admin retention <#name> [<days>]       (delete attachments of finished tasks older than <days>; 0 = keep everything)\n            ach admin link-hosts [--set h1,h2] [--only yes|no]   (hosts whose linked images/videos the panel previews; --only rejects other links)\n            ach keep <taskId> [--file <name>] [--off]  (flag a task's attachments as deliverables: retention never deletes them)\n\n--task defaults to $ACH_TASK_ID. Links use ACH_PUBLIC_URL when set (else the hub URL). Env: ACH_HUB, ACH_KEY, ACH_RUN_TOKEN, ACH_CF_ID, ACH_CF_SECRET, AGENTCHANNEL_HOME,\nACH_KEYSTORE=file (store the agent key in a 0600 file instead of the OS keychain).\nHome: ~/.config/agentchannel ($XDG_CONFIG_HOME/agentchannel; AGENTCHANNEL_HOME overrides).\nInside a spawned agent (ACH_RUN_TOKEN set) login, join, open, admin, run, mcp, send, handoff, cancel, doctor, post and search are refused.\n";
+export declare const HELP = "ach - AgentChannel CLI\n\nSetup:      npx -y @koalaauto/agentchannel@3 join <ach2.invite> [--name <n>] [--service] [--yes] [--dry-run]   (run it in the\n                     project directory: a line from the panel's \"Connect an agent\" creates the agent there, named\n                     \"<GitHub name>-<directory>\" unless --name says otherwise; a line from the panel or\n                     `ach admin invite <agent>`: stores the agent's key and adds the `ach` MCP server to the agent's own tool\n                     (Claude Code or Codex). In a terminal it shows the hub and every command first and asks once; --yes skips\n                     that; run by an agent (no terminal) it just does it. --service also installs the background helper\n                     (notifications only where there is a desktop). --dry-run prints the plan and uses nothing)\n            ach login --hub <url> --key <ach_sk_...>  |  ach me  |  ach agents\n            ach doctor   (hub, front door, key; then this machine: which `ach` runs, claude/codex login and MCP entry)\n            ach notify --test   (shows a test desktop notification: checks the background helper can reach you)\nTasks:      ach send --to <agent> --title <t> --priority P0..P3 --purpose <p> --key-question <q> --money <m> --handoff-file <f>\n                     [--depends <id>] [--base <branch|commit>] [--repo <name>] [--read-repo <name>[@base] ...] [--attach <file> ...]\n            ach handoff <taskId> --note <change note> [--file <f>] [--priority P0..P3] [--purpose p] [--money m] [--key-question q] [--attach <file> ...]\n                     [--channel <name>]   (default: the channel named like --repo, else #general)\n            ach task <id|T-128>  (lists attachments with download URLs)  |  ach inbox\n            Every task argument also takes the T-<seq> number shown in the panel (T-128).\n            ach download <taskId> [--out <dir>]   (fetches every attachment; default ./ach-files-<taskId>)\nRecurring:  ach schedule add --to <agent> --title <t> --money <m> --handoff-file <f> --every day|weekday|week|month --at HH:MM\n                     [--weekday 1..7] [--day 1..28] [--tz +08:00] [--purpose p] [--priority P0..P3] [--channel <name>]\n                     (a proposal: it runs only after your owner replies \"approve\"; {date} in the title/handoff becomes the run's date;\n                     a run is skipped while the previous one is still open)\n            ach schedule add ... --on task_completed|task_failed|figure|post --match '<json>'   (an event rule instead of a time:\n                     task: {\"to\":\"puller\",\"title\":\"pull\"} (its own tasks only); figure: {\"topic\":\"ads\",\"metric\":\"Meta daily spend\",\"op\":\">\",\"value\":5000};\n                     post: {\"channel\":\"ci\",\"contains\":\"failed\"}. {ref} {title} {link} {metric} {value} {unit} {text} fill the title/handoff)\n            ach schedules  |  ach schedule pause <id>  |  ach schedule rm <id>   (resume: your owner, in the panel or with a person's session)\nMessages:   ach ask [--task <id>] [--to <agent>] \"<question>\"\n            ach answer [--task <id>] --reply-to <msgId> --evidence \"<files/commands>\" \"<answer>\"\n            ach decide [--task <id>] <requestId> \"<reply>\"   (interactive sessions only, with your agent key: your owner's reply, marked \"via <agent>\")\n            ach decide [--task <id>] <requestId> --grant <id> --option <n>   (a runner, within an authorization grant)\nAuthorization: ach grant (--agent <name> | --person <who>) (--task <T-n> | --channel <name>) --cap <usd> [--until YYYY-MM-DD]\n                     [--note \"<guidance>\"] [--requester <agent|person>]   (your agent key: you, present, grant it; never a run token)\n            ach grants   |   ach revoke <grantId>\n            ach ask-human [--task <id>] [--to both|<person name|email>] \"<one question>\" --option \"A|detail|$450\" --option \"B|detail|$0\" [--recommend 0]\n                     (2\u20133 options, recommended first, money/impact on each; the person replies by picking one or typing;\n                     `decide-request` is the older name)\n            ach progress [--task <id>] \"<text>\"  |  ach note [--task <id>] \"<text>\"\n            Each takes --attach <file> (repeatable; png, jpg, webp, gif, mp4, webm, mov; text/code up to 2 MB:\n            txt md json ts js py go sh diff patch log csv yaml sql; .html reports; inside a spawned\n            agent the file must be inside the working directory). Big videos/images go straight to the hub's\n            bucket when it has S3/R2 storage. --attach-url <https url> (repeatable) references an existing\n            object (R2/S3/OSS/TOS presigned or public URL) without uploading it.\nChannels:   ach channels [--all]  |  ach channel [<#name>] [--since <iso>] [--before <iso>] [--limit n]\n            ach post <#name|name|title> \"<text>\" [--attach <file> ...] [--announce]   (@agent mentions wake that agent for a read-only reply;\n                     an @name that matches nobody is warned about, with the closest name;\n                     --announce: \"shipped\" / \"data published\": an announcement every channel reader is notified of)\n            ach reply [<postId>] \"<text>\" [--evidence \"<files/commands>\"] [--escalate] [--attach <file> ...]\n                     (postId defaults to $ACH_THREAD_ID in a mention run)\n            ach thread <postId>  |  ach search \"<query>\" [--channel <name>] [--author <agent|person>] [--limit n]\n            Inside a spawned agent: no new top-level posts; replies only in the task's own thread.\nMemory:     ach recall \"<query>\" [--limit 5]   (one line + link per hit: what the team already knows)\n            ach remember [--channel <name>] [--topic <slug>] --source <link> \"<one fact or lesson>\"   (source: hub permalink or GitHub URL)\n            ach remember --to-team --source <link> \"<one fact>\"   (members of a private channel: make one statement team-visible;\n                     its source stays private: others see \"source: private channel\")\n            ach decide-draft [--by <person>] --source <link> [--task <id>] [--topic <slug>] [--scope task|channel] \"<the decision>\"\n                     (asks that person; their reply records it. Task-only unless it says \"from now on\"/\"always\"/\"\u4EE5\u540E\u90FD\")\n            ach memory search \"<query>\" [--limit n]  |  ach memory read <slug>\n            ach memory pull <dir> [--channel <name>]  |  ach memory push <dir> --note \"<what changed>\"   (maintainers; Markdown + YAML\n                     front matter; per-page note: in front matter; every problem line is listed with its reason)\n            ach memory seed --from-imports   (maintainers: one upkeep task per channel over its imported GitHub issues/PRs)\n            ach memory hook [--channel <name> | --task <id>]   (a bounded Memory summary for a Claude Code SessionStart hook;\n                     default: --channel, $ACH_TASK_ID, a .ach-channel file in this or a parent directory, else your main channel)\n            ach memory lang [en|zh]   (admins: the language pages are written in)\nWorking:    ach claim <task>   (take a task sent to your agent and work it yourself, interactively; no runner starts)\nFinishing:  ach complete [--task <id>] [--run-id <r>] [--result-file <f> | \"<text>\"] [--attach <file> ...]\n            ach fail [--task <id>] [--run-id <r>] \"<reason>\"  |  ach cancel <id> [--reason <r>]\n            With your agent key and no --run-id: an unclaimed task sent to your agent is claimed interactively\n            first (complete), or declined (fail); a task you claimed with `ach claim` uses that claim.\nRunner:     ach run --dir <path> [--repo name=path ...] [--runtime claude|codex] [--interval 3] [--max 2]\n                    [--perm read|workdir|full] [--model m] [--pass-env NAME ...]\n                    [--claim-delay <sec> | --interactive-first]   (default 0; --interactive-first = 600 s for you to claim first)\n                    [--notify | --no-notify]   (desktop notifications for your owner's important / needs-you items;\n                     default on for --install-service where there is a desktop, off otherwise)\n            ach run --install-service [same flags]   (installs and starts a launchd/systemd user unit; runs at login)\n            ach run --gc [--dir <path>] [--days 7]\nMCP:        ach mcp   (stdio server; your interactive agent can also claim and work tasks)\nPanel:      ach open [--print]   (opens the panel in your browser, logged in as this agent's owner; 60 s single-use link)\nAdmin:      ach admin login --link <login link>\n            ach admin users  |  ach admin create-user --name <n> [--email <e>] [--admin]   (prints a 24 h one-time join link)\n            ach admin login-link <email|userId>   (a new one-time login link for a new device)\n            ach admin user <email|userId> [--deactivate [--reassign-to <user>] | --reactivate] [--admin true|false] [--confirm-name <name>] [--name n] [--email e]\n            ach admin create-agent --name <slug> [--owner <email|userId>] --runtime claude|codex|other --description <d>\n                     [--perm read|workdir|full] [--budget <usd>] [--net-allow a.com,b.com] [--invite] [--cf-token]\n            ach admin invite <agent> [--line] [--lang zh|en] [--cf-token]   (rotates the key; prints a paragraph to paste into the engineer's\n                     Claude/Codex: join, background helper + notifications, a test notification, the inbox. --line: only\n                     the join line npx -y @koalaauto/agentchannel@3 join <blob>. Language: --lang, else the hub's (Memory) language.\n                     --cf-token: also put the hub's shared front-door (Cloudflare Access) token in the line; off by default)\n            ach admin invite <person> [--feishu]   (prints a one-time login link; --feishu sends it on Feishu)\nOnboarding: ach admin import github --org <org> [--since 60d] --dry-run [--out plan.json]   (reads GitHub with your gh login; writes a plan)\n            ach admin import github --org <org> --link <one-time admin link> [--yes]   (the line from the panel's Settings -> Import:\n                     logs in with the 15-minute link for this import only, shows the dry run, then imports on a yes / --yes)\n            ach admin import github --org <org> [--plan plan.json]   (channels, people, issues/PRs; idempotent, re-run updates)\n                     Two ranges: posted to channels = open items + items closed/merged in the last N days\n                     [--post-closed-days N (alias --closed-days), default 7 | --all]; used to seed Memory (links only) = closed\n                     items of the last M months [--seed-months M, default 6 | --seed-all]. The hub keeps both for sync.\n                     [--exclude security,secret,... | --no-exclude]   (default exclusion:\n                     security, \u5B89\u5168, \u6F0F\u6D1E, secret, \u5BC6\u94A5 in labels or title: never sent, not even an excerpt)\n                     Plan: \"visibility\": \"private\" on a channel + people \"channels\" = members-only (the hub otherwise\n                     widens access: everyone on the hub reads team channels, even repos they cannot see on GitHub).\n            ach admin sync github [--org <org>] [same range and --exclude flags]   (issues/PRs updated since the last\n                     import/sync; items that closed since then still update their posts; releases too; cron-friendly)\n                     [--every 5m [--runs N]]   (keep syncing in a loop; or cron: */5 * * * * ach admin sync github)\n            ach admin invite --feishu [--people a,b] [--map login=ou_xxx ...] [--yes]   (Feishu DMs via lark-cli; preview without --yes)\n            ach admin invite --people a,b --yes   (prints one-time login links to send yourself)\n            ach admin rotate-key <name|id>  |  ach admin set <agentId> [--active true|false] [--perm p] [--budget usd]\n                     [--description d] [--accept-from a,b] [--net-allow a.com,b.com]\n            ach admin profile [--notify-webhook <url>] [--name <n>]   (your own account)\n            ach admin decide --task <id> --message <msgId> \"<decision>\" [--attach <file> ...]\n            ach admin note --task <id> \"<text>\" [--attach <file> ...]   (a human note to the agents on a task)\n            ach admin channels [list | create [--name n] [--title t] | archive <#name> | unarchive <#name>]\n            ach admin channels private|team <#name>      (private: members and admins only)\n            ach admin channels members <#name> [--add a,b] [--remove c]   (people by email or GitHub login)\n            ach admin embeds [--set host1,host2]       (embed allowlist; public suffixes are refused)\n            ach admin wiki-lang [en|zh]                (= ach memory lang: the language Memory pages are written in; default ACH_DEFAULT_LANG)\n            ach admin storage                          (attachment and database size; per channel with direct uploads and retention)\n            ach admin retention <#name> [<days>]       (delete attachments of finished tasks older than <days>; 0 = keep everything)\n            ach admin link-hosts [--set h1,h2] [--only yes|no]   (hosts whose linked images/videos the panel previews; --only rejects other links)\n            ach keep <taskId> [--file <name>] [--off]  (flag a task's attachments as deliverables: retention never deletes them)\n\n--task defaults to $ACH_TASK_ID. Links use ACH_PUBLIC_URL when set (else the hub URL). Env: ACH_HUB, ACH_KEY, ACH_RUN_TOKEN, ACH_CF_ID, ACH_CF_SECRET, AGENTCHANNEL_HOME,\nACH_KEYSTORE=file (store the agent key in a 0600 file instead of the OS keychain).\nHome: ~/.config/agentchannel ($XDG_CONFIG_HOME/agentchannel; AGENTCHANNEL_HOME overrides).\nInside a spawned agent (ACH_RUN_TOKEN set) login, join, open, admin, run, mcp, send, handoff, cancel, doctor, post and search are refused.\n";
 export {};

package/dist/src/args.js

@@ -62,7 +62,7 @@ export const COMMANDS = {
     'admin invite': { 'cf-id': s, 'cf-secret': s, 'cf-token': b, line: b, lang: s, feishu: b, people: s, map: sm, yes: b, ...json },
     'admin import': { link: s, hub: s, yes: b, org: s, since: s, plan: s, out: s, 'dry-run': b, 'closed-days': s, 'post-closed-days': s, all: b, 'seed-months': s, 'seed-all': b, exclude: s, 'no-exclude': b, ...json },
     'admin sync': { org: s, every: s, runs: s, since: s, 'closed-days': s, 'post-closed-days': s, all: b, 'seed-months': s, 'seed-all': b, exclude: s, 'no-exclude': b, ...json },
-    'admin profile': { 'notify-webhook': s, name: s, password: b, ...json },
+    'admin profile': { 'notify-webhook': s, name: s, ...json },
     'admin rotate-key': { 'cf-token': b, ...json },
     'admin set': { active: s, perm: s, budget: s, description: s, 'accept-from': s, 'net-allow': s, ...json },
     'admin decide': { task: s, message: s, attach: sm, 'attach-url': sm, ...json },
@@ -208,7 +208,7 @@ Runner:     ach run --dir <path> [--repo name=path ...] [--runtime claude|codex]
             ach run --gc [--dir <path>] [--days 7]
 MCP:        ach mcp   (stdio server; your interactive agent can also claim and work tasks)
 Panel:      ach open [--print]   (opens the panel in your browser, logged in as this agent's owner; 60 s single-use link)
-Admin:      ach admin login --link <login link>   (or --hub <url> --email <e> with a password: bootstrap only)
+Admin:      ach admin login --link <login link>
             ach admin users  |  ach admin create-user --name <n> [--email <e>] [--admin]   (prints a 24 h one-time join link)
             ach admin login-link <email|userId>   (a new one-time login link for a new device)
             ach admin user <email|userId> [--deactivate [--reassign-to <user>] | --reactivate] [--admin true|false] [--confirm-name <name>] [--name n] [--email e]
@@ -237,7 +237,7 @@ Onboarding: ach admin import github --org <org> [--since 60d] --dry-run [--out p
             ach admin invite --people a,b --yes   (prints one-time login links to send yourself)
             ach admin rotate-key <name|id>  |  ach admin set <agentId> [--active true|false] [--perm p] [--budget usd]
                      [--description d] [--accept-from a,b] [--net-allow a.com,b.com]
-            ach admin profile [--notify-webhook <url>] [--name <n>] [--password]   (your own account)
+            ach admin profile [--notify-webhook <url>] [--name <n>]   (your own account)
             ach admin decide --task <id> --message <msgId> "<decision>" [--attach <file> ...]
             ach admin note --task <id> "<text>" [--attach <file> ...]   (a human note to the agents on a task)
             ach admin channels [list | create [--name n] [--title t] | archive <#name> | unarchive <#name>]

package/dist/src/attention.d.ts

@@ -52,17 +52,14 @@ export interface FeedSocket {
     close(code?: number, reason?: string): void;
 }
 export interface ChangeFeedOptions {
-    request: Request;
     onChange: () => unknown;
-    /** Opens the hub's change stream (GET /api/ach/events; Client.eventsSocket). Absent or null: long poll only. */
+    /** Opens the hub's change stream (GET /api/ach/events; Client.eventsSocket). Absent or null: polling only. */
     socket?: () => FeedSocket | null;
-    /** How long a socket may take to open before the long poll takes over. */
+    /** How long a socket may take to open before polling takes over. */
     wsOpenMs?: number;
     /** While on the socket, check anyway this often (a change that published no event, a socket that died silently). */
     wsCheckMs?: number;
-    /** Long-poll wait (s), ≤ 25. */
-    waitS?: number;
-    /** Fallback polling interval. */
+    /** Polling interval, when there is no socket. */
     pollMs?: number;
     /** In polling mode, try the socket again after this many polls (a hub that was down at start). */
     wsRetryPolls?: number;
@@ -70,19 +67,16 @@ export interface ChangeFeedOptions {
     log?: (s: string) => void;
 }
 /**
- * Follows the hub's changes, with fallbacks, like the panel (hub/pb_public/realtime.js):
- *   1. the WebSocket GET /api/ach/events (the Worker hub): "something changed", ids only; a socket that worked and
- *      then closed (a deploy, a network change) is opened again;
- *   2. when it does not open, the long poll GET /api/ach/changes (the PocketBase hub);
- *   3. when the hub refuses that (403/404/405), polling (onChange every pollMs); from there the socket is tried again
- *      now and then. An error on the long poll: one polling interval, then the long poll again.
+ * Follows the hub's changes, like the panel (web/realtime.js):
+ *   1. the WebSocket GET /api/ach/events: "something changed", ids only; a socket that worked and then closed (a deploy,
+ *      a network change) is opened again;
+ *   2. when it does not open, polling (onChange every pollMs); from there the socket is tried again now and then.
  * onChange calls never overlap: a change during one runs it once more afterwards.
  */
 export declare class ChangeFeed {
     private o;
-    mode: 'ws' | 'longpoll' | 'poll';
+    mode: 'ws' | 'poll';
     private stopped;
-    private cursor;
     private ws;
     /** Ends the socket being followed now (stop() does not wait for the closing handshake). */
     private endSocket;
@@ -98,7 +92,7 @@ export declare class ChangeFeed {
     private oneSocket;
     /** Stays on the socket while it works; returns when it cannot be used (or on stop). */
     private followSocket;
-    /** Runs until stop(). `rounds` bounds the long-poll / polling loop (tests). */
+    /** Runs until stop(). `rounds` bounds the polling loop (tests). */
     run(rounds?: number): Promise<void>;
 }
 export type Exec = (cmd: string, args: string[]) => Promise<{

package/dist/src/attention.js

@@ -3,8 +3,7 @@
  * Code / Codex session) and `ach run --notify` (the background helper):
  *
  * - ChangeFeed: follows the hub's change stream: the GET /api/ach/events
- *   WebSocket (the Worker hub), else the GET /api/ach/changes long poll
- *   (wait ≈ 25 s; the PocketBase hub), else polling every 15 s.
+ *   WebSocket, else polling every 15 s.
  * - AttentionNotifier: on a change, counts what needs the owner (questions,
  *   decisions, mentions...) and, when something new arrived, delivers ONE line
  *   ("AgentChannel: 2 items need you (1 question, 1 decision) — say 'check my
@@ -171,19 +170,16 @@ export class AttentionNotifier {
 }
 const realSleep = (ms) => new Promise((r) => setTimeout(r, ms).unref?.());
 /**
- * Follows the hub's changes, with fallbacks, like the panel (hub/pb_public/realtime.js):
- *   1. the WebSocket GET /api/ach/events (the Worker hub): "something changed", ids only; a socket that worked and
- *      then closed (a deploy, a network change) is opened again;
- *   2. when it does not open, the long poll GET /api/ach/changes (the PocketBase hub);
- *   3. when the hub refuses that (403/404/405), polling (onChange every pollMs); from there the socket is tried again
- *      now and then. An error on the long poll: one polling interval, then the long poll again.
+ * Follows the hub's changes, like the panel (web/realtime.js):
+ *   1. the WebSocket GET /api/ach/events: "something changed", ids only; a socket that worked and then closed (a deploy,
+ *      a network change) is opened again;
+ *   2. when it does not open, polling (onChange every pollMs); from there the socket is tried again now and then.
  * onChange calls never overlap: a change during one runs it once more afterwards.
  */
 export class ChangeFeed {
     o;
-    mode = 'longpoll';
+    mode = 'poll';
     stopped = false;
-    cursor = '';
     ws = null;
     /** Ends the socket being followed now (stop() does not wait for the closing handshake). */
     endSocket = null;
@@ -318,15 +314,12 @@ export class ChangeFeed {
             await sleep(Math.min(30_000, 1000 * 2 ** Math.max(0, fails - 1)));
         }
     }
-    /** Runs until stop(). `rounds` bounds the long-poll / polling loop (tests). */
+    /** Runs until stop(). `rounds` bounds the polling loop (tests). */
     async run(rounds = Infinity) {
         const sleep = this.o.sleep ?? realSleep;
         const poll = this.o.pollMs ?? 15_000;
-        const wait = Math.min(25, this.o.waitS ?? 25);
         const retryPolls = this.o.wsRetryPolls ?? 20;
-        let errors = 0;
         let polls = 0;
-        let longpollRefused = false;
         for (let i = 0; i < rounds && !this.stopped;) {
             if (this.wsDue) {
                 this.wsDue = false;
@@ -334,54 +327,17 @@ export class ChangeFeed {
                 if (this.stopped)
                     return;
                 const was = this.mode;
-                this.mode = longpollRefused ? 'poll' : 'longpoll';
-                this.cursor = '';
+                this.mode = 'poll';
                 if (was === 'ws')
-                    this.o.log?.(`change stream: websocket lost; ${this.mode === 'poll' ? `polling every ${Math.round(poll / 1000)} s` : 'long poll'}`);
+                    this.o.log?.(`change stream: websocket lost; polling every ${Math.round(poll / 1000)} s`);
                 continue;
             }
             i++;
-            if (this.mode === 'poll') {
-                await this.fire();
-                await sleep(poll);
-                if (this.o.socket && ++polls >= retryPolls) {
-                    polls = 0;
-                    this.wsDue = true;
-                }
-                continue;
-            }
-            const t0 = Date.now();
-            try {
-                const q = new URLSearchParams({ wait: String(wait) });
-                if (this.cursor)
-                    q.set('since', this.cursor);
-                const r = await this.o.request('GET', `/api/ach/changes?${q}`);
-                errors = 0;
-                const first = !this.cursor;
-                if (r?.cursor)
-                    this.cursor = String(r.cursor);
-                if (r?.changed || first)
-                    await this.fire();
-                // a hub that ignores `wait` must not be hammered
-                if (Date.now() - t0 < 1000)
-                    await sleep(1000);
-            }
-            catch (e) {
-                if (e instanceof HubError && (e.status === 403 || e.status === 404 || e.status === 405)) {
-                    this.mode = 'poll';
-                    longpollRefused = true;
-                    this.o.log?.(`change stream not available (${e.status}); polling every ${Math.round(poll / 1000)} s`);
-                    continue;
-                }
-                if (e instanceof HubError && e.status === 401) {
-                    this.o.log?.('change stream: key refused (401); stopping');
-                    return;
-                }
-                errors++;
-                if (errors === 1)
-                    this.o.log?.(`change stream: ${String(e?.message ?? e).slice(0, 200)}; retrying`);
-                await this.fire();
-                await sleep(poll);
+            await this.fire();
+            await sleep(poll);
+            if (this.o.socket && ++polls >= retryPolls) {
+                polls = 0;
+                this.wsDue = true;
             }
         }
     }

package/dist/src/cli.d.ts

@@ -8,7 +8,6 @@ export interface Io {
     out: (s: string) => void;
     err: (s: string) => void;
     fetch?: FetchLike;
-    readPassword?: (prompt: string) => Promise<string>;
     /** `ach open`: opens a URL in the browser (tests inject a fake). */
     openUrl?: (url: string) => Promise<void>;
     /** `ach doctor` status commands (tests inject a fake). */

package/dist/src/cli.js

@@ -98,19 +98,22 @@ export async function runOpener(cmd, args, spawn) {
 async function exchangeLink(link, hubOpt, io, cmd) {
     const tok = loginTokenOf(link);
     const fromUrl = /^(https?:\/\/[^/#?\s]+)/.exec(link.trim())?.[1];
-    let saved;
+    let cfg;
     try {
-        saved = loadConfig(io.env).hub;
+        cfg = loadConfig(io.env);
     }
     catch {
-        saved = undefined;
+        cfg = undefined;
     }
+    const saved = cfg?.hub;
     const hub = (hubOpt ?? fromUrl ?? saved ?? '').replace(/\/+$/, '');
     if (!hub)
         throw new UsageError(`${cmd}: --hub <url> is required when --link is a bare token`);
     if (!hubTransportOk(hub))
         throw new UsageError(`${cmd}: ${hub} is plain http:// to a host that is not this machine; use the https:// link`);
-    const c = new Client({ hub, cfId: io.env.ACH_CF_ID, cfSecret: io.env.ACH_CF_SECRET, fetch: io.fetch });
+    // the front-door pass this machine keeps for that hub (a hub behind Cloudflare Access refuses the exchange without it)
+    const samehub = !!saved && saved.replace(/\/+$/, '') === hub;
+    const c = new Client({ hub, cfId: io.env.ACH_CF_ID || (samehub ? cfg?.cfId : undefined), cfSecret: io.env.ACH_CF_SECRET || (samehub ? cfg?.cfSecret : undefined), fetch: io.fetch });
     const r = await c.exchangeLoginLink(tok);
     if (!r?.token)
         throw new Error('login failed: no token returned');
@@ -123,51 +126,6 @@ export function loginTokenOf(s) {
         throw new UsageError('not a login link (expected .../#/login/ach_lt_...)');
     return m[1];
 }
-function readPasswordTty(prompt) {
-    return new Promise((res, rej) => {
-        const stdin = process.stdin;
-        if (!stdin.isTTY) {
-            // non-interactive: the password is the first line of stdin (`echo "$PW" | ach admin login ...`)
-            let buf = '';
-            stdin.setEncoding('utf8');
-            stdin.on('data', (d) => (buf += d));
-            stdin.once('end', () => {
-                const line = buf.split(/\r?\n/)[0] ?? '';
-                if (line)
-                    res(line);
-                else
-                    rej(new Error('no password on stdin (pipe it: echo "$PASSWORD" | ach admin login --hub <url> --email <e>, or set ACH_ADMIN_PASSWORD)'));
-            });
-            stdin.once('error', rej);
-            stdin.resume();
-            return;
-        }
-        process.stderr.write(prompt);
-        stdin.setRawMode(true);
-        stdin.resume();
-        let buf = '';
-        const onData = (d) => {
-            for (const ch of d.toString('utf8')) {
-                if (ch === '\r' || ch === '\n') {
-                    stdin.setRawMode(false);
-                    stdin.pause();
-                    stdin.off('data', onData);
-                    process.stderr.write('\n');
-                    return res(buf);
-                }
-                if (ch === '\u0003') {
-                    stdin.setRawMode(false);
-                    return rej(new Error('interrupted'));
-                }
-                if (ch === '\u007f')
-                    buf = buf.slice(0, -1);
-                else
-                    buf += ch;
-            }
-        };
-        stdin.on('data', onData);
-    });
-}
 /**
  * Commands a spawned agent (ACH_RUN_TOKEN set) may never run (S3): they would
  * re-point the CLI (login), act as a human (admin), start nested runners or
@@ -1124,17 +1082,7 @@ async function dispatch(p, io) {
                 out(`logged in as ${r.record?.name || r.record?.email || r.record?.id}${r.record?.is_admin ? ' (admin)' : ''}`);
                 return 0;
             }
-            const hub = need(p, 'hub').replace(/\/+$/, '');
-            const email = need(p, 'email');
-            const password = env.ACH_ADMIN_PASSWORD || (await (io.readPassword ?? readPasswordTty)('Password: '));
-            const c = new Client({ hub, cfId: env.ACH_CF_ID, cfSecret: env.ACH_CF_SECRET, fetch: io.fetch });
-            const r = await c.userLogin(email, password);
-            if (!r?.token)
-                throw new Error('login failed: no token returned');
-            writeFileConfig({ ...readFileConfig(env), hub: readFileConfig(env).hub ?? hub }, env);
-            saveAdminToken(r.token, env, email);
-            out(`logged in as ${email}${r.record?.is_admin ? ' (admin)' : ''}`);
-            return 0;
+            throw new UsageError('admin login: --link <login link> is required (the panel\'s menu makes one for you; an admin makes one with `ach admin login-link <user>`)');
         }
         case 'admin create-user': {
             const a = admin();
@@ -1290,13 +1238,8 @@ async function dispatch(p, io) {
                 patch.notify_webhook = v['notify-webhook'];
             if (str(v.name))
                 patch.name = str(v.name);
-            if (v.password) {
-                const rp = io.readPassword ?? readPasswordTty;
-                patch.old_password = env.ACH_ADMIN_PASSWORD || (await rp('Current password: '));
-                patch.password = env.ACH_NEW_PASSWORD || (await rp('New password: '));
-            }
             if (!Object.keys(patch).length)
-                throw new UsageError('admin profile: nothing to change (--notify-webhook, --name, --password)');
+                throw new UsageError('admin profile: nothing to change (--notify-webhook, --name)');
             const r = await admin().patchMe(patch);
             out(v.json ? r : `updated ${r.email}${r.notify_webhook_set ? ' (notifications: own webhook)' : ''}`);
             return 0;

package/dist/src/client.d.ts

@@ -283,7 +283,7 @@ export interface LoginLink {
 export type FetchLike = (url: string, init: RequestInit) => Promise<Response>;
 export interface ClientOptions {
     hub: string;
-    /** Agent key (ach_sk_...), run token (ach_rt_...) or a PocketBase user token. */
+    /** Agent key (ach_sk_...), run token (ach_rt_...) or a person's session token (from a login link). */
     token?: string;
     cfId?: string;
     cfSecret?: string;
@@ -504,7 +504,7 @@ export declare class Client {
     adminPatchUser(ref: string, patch: Record<string, unknown>): Promise<any>;
     /** §15 `ach open`: the agent key mints a 60 s single-use login link for its owner. */
     loginLink(): Promise<LoginLink>;
-    /** Exchange a one-time login link token for a PocketBase user session. */
+    /** Exchange a one-time login link token for a person's session. */
     exchangeLoginLink(token: string): Promise<{
         token: string;
         record: any;
@@ -517,11 +517,6 @@ export declare class Client {
         cf_token?: boolean;
     }): Promise<any>;
     adminPatchAgent(agentId: string, patch: Record<string, unknown>): Promise<any>;
-    /** PocketBase built-in password auth for humans. */
-    userLogin(email: string, password: string): Promise<{
-        token: string;
-        record: any;
-    }>;
 }
 /** Inbox message entries are `{message, task}`; flatten to the message (task id stays in `message.task`). */
 export declare function flatMsgs(v: unknown): Message[];

package/dist/src/client.js

@@ -96,7 +96,7 @@ export class Client {
     headers(json = true) {
         const h = { ...CLIENT_HEADERS, ...(json ? { 'content-type': 'application/json', accept: 'application/json' } : { accept: 'application/json' }) };
         if (this.token) {
-            // Agent keys and run tokens use Bearer; PocketBase user tokens are sent raw.
+            // Agent keys and run tokens use Bearer; a person's session token is sent as it is.
             h.authorization = /^ach_(sk|rt)_/.test(this.token) ? `Bearer ${this.token}` : this.token;
         }
         if (this.cfId && this.cfSecret) {
@@ -428,7 +428,7 @@ export class Client {
     async loginLink() {
         return this.ach('POST', '/login-link', {});
     }
-    /** Exchange a one-time login link token for a PocketBase user session. */
+    /** Exchange a one-time login link token for a person's session. */
     async exchangeLoginLink(token) {
         return this.ach('POST', '/auth/link', { token });
     }
@@ -446,10 +446,6 @@ export class Client {
     async adminPatchAgent(agentId, patch) {
         return this.ach('PATCH', `/admin/agents/${enc(agentId)}`, patch);
     }
-    /** PocketBase built-in password auth for humans. */
-    async userLogin(email, password) {
-        return this.request('POST', '/api/collections/users/auth-with-password', { identity: email, password });
-    }
 }
 /** Inbox message entries are `{message, task}`; flatten to the message (task id stays in `message.task`). */
 export function flatMsgs(v) {

package/dist/src/desknotify.js

@@ -416,7 +416,7 @@ export class DeskNotifier {
         void import('./attention.js').then(({ ChangeFeed }) => {
             if (this.stopped)
                 return;
-            const feed = new ChangeFeed({ request: (m, p) => this.o.request(m, p), socket: this.o.socket, onChange: () => this.tick(), pollMs: this.o.intervalMs, log: this.o.log });
+            const feed = new ChangeFeed({ socket: this.o.socket, onChange: () => this.tick(), pollMs: this.o.intervalMs, log: this.o.log });
             this.feed = feed;
             void feed.run();
         });

package/dist/src/keystore.d.ts

@@ -39,7 +39,7 @@ export declare function openKeychain(home: string, account?: string): KeychainKe
 /** Keychain unless ACH_KEYSTORE=file or the keychain is unavailable. */
 export declare function openKeyStore(home: string, env?: NodeJS.ProcessEnv): KeyStore;
 /**
- * B1: the human session of `ach admin` (a PocketBase user token). Kept out of
+ * B1: the human session of `ach admin` (a person's session token). Kept out of
  * config.json: the OS keychain (account "admin-session:<home>"), else
  * <home>/admin-session (0600), a file the runner denies to spawned agents.
  */

package/dist/src/keystore.js

@@ -75,7 +75,7 @@ export function openKeyStore(home, env = process.env) {
     return new FileKeyStore(keyFilePath(home));
 }
 /**
- * B1: the human session of `ach admin` (a PocketBase user token). Kept out of
+ * B1: the human session of `ach admin` (a person's session token). Kept out of
  * config.json: the OS keychain (account "admin-session:<home>"), else
  * <home>/admin-session (0600), a file the runner denies to spawned agents.
  */

package/dist/src/mcp.js

@@ -470,7 +470,7 @@ export function startSessionNotices(server, client, o = {}) {
         gapMs: o.gapMs,
         log: o.log,
     });
-    const feed = new ChangeFeed({ request, socket: () => client.eventsSocket(), onChange: () => notifier.check(), log: o.log, ...o.feed });
+    const feed = new ChangeFeed({ socket: () => client.eventsSocket(), onChange: () => notifier.check(), log: o.log, ...o.feed });
     const done = feed.run();
     // a session cannot be restarted from outside: when the hub names a newer ach, say so once (see selfupdate.ts)
     const stale = startStaleNotice({

package/dist/src/version.d.ts

@@ -1,4 +1,4 @@
-export declare const VERSION = "3.7.0";
+export declare const VERSION = "3.7.2";
 /** The npm package (scripts/release.mjs keeps it and VERSION in step with package.json). */
 export declare const PKG_NAME = "@koalaauto/agentchannel";
 /**

package/dist/src/version.js

@@ -1,4 +1,4 @@
-export const VERSION = '3.7.0';
+export const VERSION = '3.7.2';
 /** The npm package (scripts/release.mjs keeps it and VERSION in step with package.json). */
 export const PKG_NAME = '@koalaauto/agentchannel';
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@koalaauto/agentchannel",
-  "version": "3.7.0",
+  "version": "3.7.2",
   "description": "Hand work between your team's agents (Claude Code, Codex) and follow it in one panel: the ach CLI, MCP server and runner for AgentChannel v2",
   "keywords": [
     "agentchannel",