@mifune/agro 0.21.0 → 0.23.0

package/dist/agro.js

@@ -1424,10 +1424,16 @@ async function askSecretPiped(question) {
   process.on("SIGINT", onSigint);
   try {
     return await new Promise((resolve14) => {
-      rl.question(`  ${question} `, (answer) => {
+      let settled = false;
+      const settle = (answer) => {
+        if (settled) return;
+        settled = true;
         process.stdout.write("\n");
         resolve14(answer.trim());
-      });
+      };
+      rl.question(`  ${question} `, settle);
+      rl.once("line", settle);
+      rl.once("close", () => settle(rl.line));
     });
   } finally {
     process.removeListener("SIGINT", onSigint);
@@ -1471,7 +1477,7 @@ import { existsSync as existsSync6, mkdirSync as mkdirSync3, readdirSync as read
 import { dirname as dirname4, join as join4, resolve as resolve5, sep as sep2 } from "node:path";
 
 // agro-asset:/home/runner/work/agro/agro/.devcontainer/docker-compose.yml
-var docker_compose_default = 'name: ${SANDBOX_NAME:-agro}\n\nservices:\n  sandbox:\n    image: ${AGRO_SANDBOX_IMAGE:-sandbox-${SANDBOX_NAME:-agro}}\n    pull_policy: ${AGRO_PULL_POLICY:-missing}\n    container_name: ${SANDBOX_NAME:-agro}\n    build:\n      context: ${AGRO_REPO_DIR:-..}\n      dockerfile: .devcontainer/Dockerfile\n    volumes:\n      - ${AGRO_HOME_MOUNT:-workspace}:/home/sandbox\n      - ${AGRO_REPO_DIR:-..}:/home/sandbox/harness\n    extra_hosts:\n      - "host.docker.internal:host-gateway"\n    environment:\n      - SANDBOX_NAME=${SANDBOX_NAME:-agro}\n      - SANDBOX_PASSWORD=${SANDBOX_PASSWORD:-}\n      - TZ=${TZ:-America/Los_Angeles}\n      - CLAUDE_DANGEROUSLY_SKIP_PERMISSIONS=true\n      - CC_SAFETY_NET_STRICT=1\n      - CC_SAFETY_NET_WORKTREE=1\n      - GIT_USER_NAME=${GIT_USER_NAME:-}\n      - GIT_USER_EMAIL=${GIT_USER_EMAIL:-}\n      - GH_TOKEN=${GH_TOKEN:-}\n      - TYPESAFE_API_KEY=${TYPESAFE_API_KEY:-}\n    stdin_open: true\n    tty: true\n    init: true\n    entrypoint: ["/usr/local/bin/sandbox-main.sh"]\n    stop_signal: SIGTERM\n    healthcheck:\n      test: ["CMD", "bash", "-c", "exec bash /home/sandbox/harness/.agro/scripts/sandbox-healthcheck.sh"]\n      interval: 30s\n      timeout: 10s\n      retries: 3\n      start_period: 600s\n    restart: unless-stopped\n\nvolumes:\n  workspace:\n';
+var docker_compose_default = 'name: ${SANDBOX_NAME:-agro}\n\nservices:\n  sandbox:\n    image: ${AGRO_SANDBOX_IMAGE:-sandbox-${SANDBOX_NAME:-agro}}\n    pull_policy: ${AGRO_PULL_POLICY:-missing}\n    container_name: ${SANDBOX_NAME:-agro}\n    build:\n      context: ${AGRO_REPO_DIR:-..}\n      dockerfile: .devcontainer/Dockerfile\n    volumes:\n      - ${AGRO_HOME_MOUNT:-workspace}:/home/sandbox\n      - ${AGRO_REPO_DIR:-..}:/home/sandbox/harness\n    extra_hosts:\n      - "host.docker.internal:host-gateway"\n    environment:\n      - SANDBOX_NAME=${SANDBOX_NAME:-agro}\n      - SANDBOX_PASSWORD=${SANDBOX_PASSWORD:-}\n      - TZ=${TZ:-America/Los_Angeles}\n      - CLAUDE_DANGEROUSLY_SKIP_PERMISSIONS=true\n      - CC_SAFETY_NET_STRICT=1\n      - CC_SAFETY_NET_WORKTREE=1\n      - GIT_USER_NAME=${GIT_USER_NAME:-}\n      - GIT_USER_EMAIL=${GIT_USER_EMAIL:-}\n      - GH_TOKEN=${GH_TOKEN:-}\n      - TYPESAFE_API_KEY=${TYPESAFE_API_KEY:-}\n      - XAI_API_KEY=${XAI_API_KEY:-}\n    stdin_open: true\n    tty: true\n    init: true\n    entrypoint: ["/usr/local/bin/sandbox-main.sh"]\n    stop_signal: SIGTERM\n    healthcheck:\n      test: ["CMD", "bash", "-c", "exec bash /home/sandbox/harness/.agro/scripts/sandbox-healthcheck.sh"]\n      interval: 30s\n      timeout: 10s\n      retries: 3\n      start_period: 600s\n    restart: unless-stopped\n\nvolumes:\n  workspace:\n';
 
 // agro-asset:/home/runner/work/agro/agro/.devcontainer/docker-compose.image-only.yml
 var docker_compose_image_only_default = 'name: ${SANDBOX_NAME:-agro}\n\nservices:\n  sandbox:\n    image: ${AGRO_SANDBOX_IMAGE:-ghcr.io/mifunedev/agro:latest}\n    pull_policy: ${AGRO_PULL_POLICY:-always}\n    container_name: ${SANDBOX_NAME:-agro}\n    volumes:\n      - ${AGRO_HOME_MOUNT:-workspace}:/home/sandbox\n    extra_hosts:\n      - "host.docker.internal:host-gateway"\n    environment:\n      - SANDBOX_NAME=${SANDBOX_NAME:-agro}\n      - SANDBOX_PASSWORD=${SANDBOX_PASSWORD:-}\n      - TZ=${TZ:-America/Los_Angeles}\n      - CLAUDE_DANGEROUSLY_SKIP_PERMISSIONS=true\n      - CC_SAFETY_NET_STRICT=1\n      - CC_SAFETY_NET_WORKTREE=1\n      - GIT_USER_NAME=${GIT_USER_NAME:-}\n      - GIT_USER_EMAIL=${GIT_USER_EMAIL:-}\n      - GH_TOKEN=${GH_TOKEN:-}\n      - TYPESAFE_API_KEY=${TYPESAFE_API_KEY:-}\n    stdin_open: true\n    tty: true\n    init: true\n    entrypoint: ["/usr/local/bin/sandbox-main.sh"]\n    stop_signal: SIGTERM\n    healthcheck:\n      test: ["CMD", "bash", "-c", "exec bash /home/sandbox/harness/.agro/scripts/sandbox-healthcheck.sh"]\n      interval: 30s\n      timeout: 10s\n      retries: 3\n      start_period: 600s\n    restart: unless-stopped\n\nvolumes:\n  workspace:\n';
@@ -2034,7 +2040,15 @@ var SECRET_KEYS = [
   "PI_SLACK_BOT_TOKEN",
   "LANGFUSE_PUBLIC_KEY",
   "LANGFUSE_SECRET_KEY",
-  "TYPESAFE_API_KEY"
+  "TYPESAFE_API_KEY",
+  "AGRO_CONSOLE_URL",
+  "AGRO_CONSOLE_TOKEN"
+];
+var COMPOSE_SECRET_KEYS = [
+  "GH_TOKEN",
+  "SANDBOX_PASSWORD",
+  "TYPESAFE_API_KEY",
+  "XAI_API_KEY"
 ];
 var ALLOWED = new Set(SECRET_KEYS);
 function secretsFilePath(root) {
@@ -2099,7 +2113,7 @@ import { basename as basename6, join as join6, sep as sep3 } from "node:path";
 import { basename as basename4, resolve as resolve7 } from "node:path";
 
 // src/lib/version.ts
-var AGRO_VERSION = true ? "0.21.0" : "0.0.0-dev";
+var AGRO_VERSION = true ? "0.23.0" : "0.0.0-dev";
 var OFFICIAL_IMAGE = "ghcr.io/mifunedev/agro";
 var RELEASE_VERSION = /^[0-9]+\.[0-9]+\.[0-9]+(?:-[a-z][a-z0-9]*\.[0-9]+)?$/;
 function parseReleaseVersion(value) {
@@ -3423,6 +3437,14 @@ Set it with \`${opts.bin} config set ${key}\` instead.
 
 Keys:
 ${secretKeyList()}
+`
+    );
+    return 1;
+  }
+  if (opts.sandbox !== void 0 && !COMPOSE_SECRET_KEYS.includes(key)) {
+    io.stderr(
+      `${opts.bin} secret set: ${key} does not reach the container from --sandbox ${opts.sandbox} \u2014 Compose passes only ${COMPOSE_SECRET_KEYS.join(", ")}.
+Run \`${opts.bin} secret set ${key}\` in the project checkout instead.
 `
     );
     return 1;
@@ -3489,6 +3511,9 @@ import { homedir as homedir2, tmpdir as tmpdir2 } from "node:os";
 import { dirname as dirname7, join as join11, relative } from "node:path";
 
 // src/lib/tracing/harness-writers.ts
+import { join as join10 } from "node:path";
+
+// src/lib/tracing/providers/langfuse.ts
 import { join as join9 } from "node:path";
 
 // src/lib/tracing/writer.ts
@@ -3531,16 +3556,66 @@ function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// src/lib/tracing/providers/langfuse.ts
+var LANGFUSE_PLUGIN_MAX_CHARS = 1e5;
+var LANGFUSE_FRAGMENT_KEYS = [
+  "LANGFUSE_PUBLIC_KEY",
+  "LANGFUSE_SECRET_KEY",
+  "LANGFUSE_BASE_URL",
+  "LANGFUSE_TRACING_ENVIRONMENT",
+  "PI_LANGFUSE_MAX_CHARS"
+];
+function langfuseFragmentPath(home) {
+  return join9(home, ".config", "agro", "langfuse.env");
+}
+function loadLangfuseCredentials(root) {
+  const publicKey = readSecret(root, "LANGFUSE_PUBLIC_KEY");
+  const secretKey = readSecret(root, "LANGFUSE_SECRET_KEY");
+  if (publicKey !== void 0 && secretKey !== void 0) return { publicKey, secretKey };
+  const missing = [
+    publicKey === void 0 ? "LANGFUSE_PUBLIC_KEY" : void 0,
+    secretKey === void 0 ? "LANGFUSE_SECRET_KEY" : void 0
+  ].filter((key) => key !== void 0);
+  throw new Error(
+    `${missing.join(" and ")} ${missing.length === 1 ? "is" : "are"} not set in .env \u2014 run \`${activeBin()} secret set ${missing[0]} <value>\` first`
+  );
+}
+var BARE_SAFE_VALUE = /^[A-Za-z0-9_.:/@%+=,-]+$/;
+var UNCARRIABLE_IN_VALUE = /[\u0000-\u001f\u007f']/;
+function renderLangfuseFragment(input) {
+  const values = {
+    LANGFUSE_PUBLIC_KEY: input.publicKey,
+    LANGFUSE_SECRET_KEY: input.secretKey,
+    LANGFUSE_BASE_URL: input.baseUrl,
+    LANGFUSE_TRACING_ENVIRONMENT: input.environment,
+    PI_LANGFUSE_MAX_CHARS: String(LANGFUSE_PLUGIN_MAX_CHARS)
+  };
+  return LANGFUSE_FRAGMENT_KEYS.map((key) => `${key}=${quoteFragmentValue(key, values[key])}
+`).join("");
+}
+function writeLangfuseFragment(home, input) {
+  return writeTextIfChanged(langfuseFragmentPath(home), renderLangfuseFragment(input), PRIVATE_FILE_MODE);
+}
+function quoteFragmentValue(key, value) {
+  if (value === "") throw new Error(`${key} must not be empty`);
+  if (UNCARRIABLE_IN_VALUE.test(value)) {
+    throw new Error(
+      `${key} must not contain a newline, a control character, or a single quote \u2014 zsh reads the fragment and does not carry that value safely`
+    );
+  }
+  return BARE_SAFE_VALUE.test(value) ? value : `'${value}'`;
+}
+
 // src/lib/tracing/harness-writers.ts
 var CODEX_TRACING_TAGS = ["codex"];
 function claudeCodeSettingsPath(home) {
-  return join9(home, ".claude", "settings.json");
+  return join10(home, ".claude", "settings.json");
 }
 function piTracingConfigPath(home) {
-  return join9(home, ".pi", "agent", "langfuse.json");
+  return join10(home, ".pi", "agent", "langfuse.json");
 }
 function codexTracingConfigPath(home) {
-  return join9(home, ".codex", "langfuse.json");
+  return join10(home, ".codex", "langfuse.json");
 }
 var claudeCodeTracingWriter = (home, settings) => {
   const path4 = claudeCodeSettingsPath(home);
@@ -3554,7 +3629,8 @@ var claudeCodeTracingWriter = (home, settings) => {
     env: {
       ...env,
       LANGFUSE_BASE_URL: settings.baseUrl,
-      LANGFUSE_TRACING_ENVIRONMENT: settings.environment
+      LANGFUSE_TRACING_ENVIRONMENT: settings.environment,
+      CC_LANGFUSE_MAX_CHARS: String(LANGFUSE_PLUGIN_MAX_CHARS)
     }
   };
   return writeTextIfChanged(path4, renderJson(next));
@@ -3783,54 +3859,6 @@ function harnessBinPath(prefix) {
   return `${prefix}/bin`;
 }
 
-// src/lib/tracing/providers/langfuse.ts
-import { join as join10 } from "node:path";
-var LANGFUSE_FRAGMENT_KEYS = [
-  "LANGFUSE_PUBLIC_KEY",
-  "LANGFUSE_SECRET_KEY",
-  "LANGFUSE_BASE_URL",
-  "LANGFUSE_TRACING_ENVIRONMENT"
-];
-function langfuseFragmentPath(home) {
-  return join10(home, ".config", "agro", "langfuse.env");
-}
-function loadLangfuseCredentials(root) {
-  const publicKey = readSecret(root, "LANGFUSE_PUBLIC_KEY");
-  const secretKey = readSecret(root, "LANGFUSE_SECRET_KEY");
-  if (publicKey !== void 0 && secretKey !== void 0) return { publicKey, secretKey };
-  const missing = [
-    publicKey === void 0 ? "LANGFUSE_PUBLIC_KEY" : void 0,
-    secretKey === void 0 ? "LANGFUSE_SECRET_KEY" : void 0
-  ].filter((key) => key !== void 0);
-  throw new Error(
-    `${missing.join(" and ")} ${missing.length === 1 ? "is" : "are"} not set in .env \u2014 run \`${activeBin()} secret set ${missing[0]} <value>\` first`
-  );
-}
-var BARE_SAFE_VALUE = /^[A-Za-z0-9_.:/@%+=,-]+$/;
-var UNCARRIABLE_IN_VALUE = /[\u0000-\u001f\u007f']/;
-function renderLangfuseFragment(input) {
-  const values = {
-    LANGFUSE_PUBLIC_KEY: input.publicKey,
-    LANGFUSE_SECRET_KEY: input.secretKey,
-    LANGFUSE_BASE_URL: input.baseUrl,
-    LANGFUSE_TRACING_ENVIRONMENT: input.environment
-  };
-  return LANGFUSE_FRAGMENT_KEYS.map((key) => `${key}=${quoteFragmentValue(key, values[key])}
-`).join("");
-}
-function writeLangfuseFragment(home, input) {
-  return writeTextIfChanged(langfuseFragmentPath(home), renderLangfuseFragment(input), PRIVATE_FILE_MODE);
-}
-function quoteFragmentValue(key, value) {
-  if (value === "") throw new Error(`${key} must not be empty`);
-  if (UNCARRIABLE_IN_VALUE.test(value)) {
-    throw new Error(
-      `${key} must not contain a newline, a control character, or a single quote \u2014 zsh reads the fragment and does not carry that value safely`
-    );
-  }
-  return BARE_SAFE_VALUE.test(value) ? value : `'${value}'`;
-}
-
 // src/commands/langfuse.ts
 var DEFAULT_LANGFUSE_BASE_URL = "https://cloud.langfuse.com";
 var LANGFUSE_FRAGMENT_LABEL = "~/.config/agro/langfuse.env";
@@ -5095,6 +5123,357 @@ function runEgress(verb, opts, io) {
   });
 }
 
+// src/command-table.ts
+var CONFIG_VERBS = ["show", "set", "repo"];
+var CONFIG_INTEGRATIONS = ["langfuse"];
+var SECRET_VERBS = ["set", "get", "list"];
+var LANGFUSE_VERBS = ["apply", "status", "disable"];
+var SANDBOX_SUBCOMMANDS = ["install", "list", "upgrade"];
+var WORKSPACE_SUBCOMMANDS = ["create", "list"];
+var HARNESS_SUBCOMMANDS = ["list", "install", "status", "uninstall"];
+var TOOL_SUBCOMMANDS = ["list", "install", "status", "uninstall"];
+var EGRESS_VERBS = ["log", "reload"];
+var NODE_VERBS = ["create", "list", "delete"];
+function isOneOf(values, value) {
+  return value !== void 0 && values.includes(value);
+}
+var AGRO_COMMANDS = Object.freeze({
+  config: [...CONFIG_VERBS, ...CONFIG_INTEGRATIONS],
+  secret: SECRET_VERBS,
+  langfuse: LANGFUSE_VERBS,
+  update: null,
+  "self-upgrade": null,
+  vendor: null,
+  sandbox: SANDBOX_SUBCOMMANDS,
+  shell: null,
+  compose: null,
+  workspace: WORKSPACE_SUBCOMMANDS,
+  harness: HARNESS_SUBCOMMANDS,
+  tool: TOOL_SUBCOMMANDS,
+  gateway: null,
+  egress: EGRESS_VERBS,
+  node: NODE_VERBS,
+  ...Object.fromEntries(composeVerbs().map((verb) => [verb, null]))
+});
+
+// src/commands/node.ts
+var DEFAULT_CONSOLE_URL = "https://console.mifune.dev";
+var CONSOLE_CONFIG_MISSING = "set AGRO_CONSOLE_TOKEN, or run agro secret set AGRO_CONSOLE_TOKEN";
+var NODE_READY_TIMEOUT_MS = 15 * 60 * 1e3;
+var NODE_FAST_POLL_INTERVAL_MS = 1e3;
+var NODE_FAST_POLL_WINDOW_MS = 30 * 1e3;
+var NODE_POLL_INTERVAL_MS = 5e3;
+var FREE_TIER_SPEC = "n4";
+var FAILURE_STATUSES = /* @__PURE__ */ new Set(["failed", "destroy_requested", "destroying", "destroyed", "retired"]);
+function resolveConsoleConfig(env, readSecret2) {
+  const lookup = (key) => {
+    const fromEnv = env[key]?.trim();
+    if (fromEnv !== void 0 && fromEnv !== "") return fromEnv;
+    const fromSecret = readSecret2(key)?.trim();
+    return fromSecret === void 0 || fromSecret === "" ? void 0 : fromSecret;
+  };
+  const token = lookup("AGRO_CONSOLE_TOKEN");
+  if (token === void 0) return void 0;
+  const url = lookup("AGRO_CONSOLE_URL") ?? DEFAULT_CONSOLE_URL;
+  return { url: url.replace(/\/+$/, ""), token };
+}
+function readProjectSecret(key) {
+  try {
+    return readSecret(resolveProjectRoot(), key);
+  } catch {
+    return void 0;
+  }
+}
+function nodePollDelayMs(elapsedMs) {
+  return elapsedMs < NODE_FAST_POLL_WINDOW_MS ? NODE_FAST_POLL_INTERVAL_MS : NODE_POLL_INTERVAL_MS;
+}
+function defaultDeps2() {
+  return {
+    fetch: (input, init) => globalThis.fetch(input, init),
+    env: process.env,
+    readSecret: readProjectSecret,
+    sleep: (ms) => new Promise((done) => setTimeout(done, ms)),
+    now: () => Date.now(),
+    pollDelayMs: nodePollDelayMs,
+    timeoutMs: NODE_READY_TIMEOUT_MS,
+    confirm: (question) => confirm(question, false)
+  };
+}
+function nodeHelp(bin) {
+  return `${bin} node \u2014 Create, list, and delete agro-console sandbox nodes (remote VMs)
+
+Usage:
+  ${bin} node create --spec <spec> --ssh-key <uuid> [--ssh-key <uuid>] [--name <name>] [--free-tier] [--json]
+  ${bin} node list [--json]
+  ${bin} node delete <id> [--yes]
+
+\`create\` waits up to 15 minutes for the node to reach \`running\`, then prints
+its SSH command. \`--free-tier\` requests the console free tier. The spec
+defaults to n4. The verbs read AGRO_CONSOLE_URL and AGRO_CONSOLE_TOKEN from the
+environment, then from the project .env (\`${bin} secret set <KEY>\`).
+AGRO_CONSOLE_URL defaults to ${DEFAULT_CONSOLE_URL}.
+`;
+}
+function asRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function asText(value) {
+  if (typeof value === "string" && value !== "") return value;
+  if (typeof value === "number") return String(value);
+  return null;
+}
+function toNode(value) {
+  const outer = asRecord(value);
+  const record = asRecord(outer?.node) ?? outer;
+  const id = asText(record?.id);
+  if (record === void 0 || id === null) return void 0;
+  return {
+    id,
+    name: asText(record.name),
+    profile: asText(record.profile),
+    status: asText(record.status) ?? "unknown",
+    ipv4: asText(record.ipv4),
+    ssh: asText(record.ssh)
+  };
+}
+function sshCommand(node) {
+  if (node.ssh !== null) return node.ssh;
+  return node.ipv4 === null ? null : `ssh sandbox@${node.ipv4}`;
+}
+function errorDetail(status, body) {
+  const record = asRecord(body);
+  const nested = asRecord(record?.error);
+  const code = asText(record?.code) ?? asText(nested?.code) ?? "no code";
+  const message = asText(record?.error) ?? asText(nested?.message) ?? asText(record?.message);
+  return `HTTP ${status} ${code}${message === null ? "" : `: ${message}`}`;
+}
+async function callApi(deps, config, method, path4, payload) {
+  let response;
+  try {
+    response = await deps.fetch(`${config.url}${path4}`, {
+      method,
+      headers: {
+        Authorization: `Bearer ${config.token}`,
+        Accept: "application/json",
+        ...payload === void 0 ? {} : { "Content-Type": "application/json" }
+      },
+      ...payload === void 0 ? {} : { body: JSON.stringify(payload) }
+    });
+  } catch (error) {
+    return { ok: false, message: `request failed: ${error instanceof Error ? error.message : String(error)}` };
+  }
+  const text = await response.text();
+  let body = null;
+  try {
+    body = text === "" ? null : JSON.parse(text);
+  } catch {
+    body = null;
+  }
+  if (response.status >= 400) {
+    return { ok: false, status: response.status, message: errorDetail(response.status, body) };
+  }
+  return { ok: true, status: response.status, body };
+}
+function parseCreate(tokens) {
+  const args = { sshKeyIds: [], freeTier: false, json: false };
+  for (let i = 0; i < tokens.length; i += 1) {
+    const token = tokens[i];
+    if (token === "--json") {
+      args.json = true;
+      continue;
+    }
+    if (token === "--free-tier") {
+      args.freeTier = true;
+      continue;
+    }
+    const [flag, inline] = token.startsWith("--") && token.includes("=") ? [token.slice(0, token.indexOf("=")), token.slice(token.indexOf("=") + 1)] : [token, void 0];
+    if (flag !== "--spec" && flag !== "--ssh-key" && flag !== "--name") {
+      return { ok: false, error: token.startsWith("-") ? `unknown flag "${token}"` : `unexpected argument "${token}"` };
+    }
+    const value = inline ?? tokens[++i];
+    if (value === void 0 || value === "") return { ok: false, error: `${flag} requires a value` };
+    if (flag === "--spec") args.spec = value;
+    else if (flag === "--name") args.name = value;
+    else args.sshKeyIds.push(value);
+  }
+  if (args.spec === void 0 && args.freeTier) args.spec = FREE_TIER_SPEC;
+  if (args.spec === void 0) return { ok: false, error: "--spec is required" };
+  if (args.sshKeyIds.length === 0) return { ok: false, error: "at least one --ssh-key is required" };
+  return { ok: true, args };
+}
+function printCreateResult(io, node, json) {
+  const ssh = node.status === "running" ? sshCommand(node) : null;
+  if (json) {
+    io.stdout(`${JSON.stringify({ id: node.id, status: node.status, ssh })}
+`);
+    return;
+  }
+  io.stdout(`id: ${node.id}
+status: ${node.status}
+${ssh === null ? "" : `${ssh}
+`}`);
+}
+async function runCreate(tokens, io, deps, config, bin) {
+  const prefix = `${bin} node create`;
+  const parsed = parseCreate(tokens);
+  if (!parsed.ok) {
+    io.stderr(`${prefix}: ${parsed.error}
+`);
+    return 1;
+  }
+  const { spec, sshKeyIds, name, freeTier, json } = parsed.args;
+  const requestedAt = deps.now();
+  const created = await callApi(deps, config, "POST", "/api/nodes", {
+    profile: "sandbox",
+    spec,
+    sshKeyIds,
+    ...name === void 0 ? {} : { name },
+    ...freeTier ? { freeTier: true } : {}
+  });
+  if (!created.ok) {
+    io.stderr(`${prefix}: ${created.message}
+`);
+    return 1;
+  }
+  let node = toNode(created.body);
+  if (node === void 0) {
+    io.stderr(`${prefix}: the console response has no node id
+`);
+    return 1;
+  }
+  io.stderr(`${prefix}: node ${node.id} ${node.status}
+`);
+  const deadline = deps.now() + deps.timeoutMs;
+  while (node.status !== "running" && !FAILURE_STATUSES.has(node.status)) {
+    const remaining = deadline - deps.now();
+    if (remaining <= 0) {
+      printCreateResult(io, node, json);
+      io.stderr(`${prefix}: node ${node.id} is not running after 15 minutes \u2014 last status ${node.status}
+`);
+      return 1;
+    }
+    await deps.sleep(Math.min(deps.pollDelayMs(deps.now() - requestedAt), remaining));
+    const polled = await callApi(deps, config, "GET", `/api/nodes/${encodeURIComponent(node.id)}`);
+    if (!polled.ok) {
+      io.stderr(`${prefix}: node ${node.id}: ${polled.message}
+`);
+      return 1;
+    }
+    const previous = node.status;
+    node = toNode(polled.body) ?? { ...node, status: "unknown" };
+    if (node.status !== previous) io.stderr(`${prefix}: node ${node.id} ${node.status}
+`);
+  }
+  printCreateResult(io, node, json);
+  if (node.status !== "running") {
+    io.stderr(`${prefix}: node ${node.id} failed \u2014 last status ${node.status}
+`);
+    return 1;
+  }
+  return 0;
+}
+function toNodeList(body) {
+  const record = asRecord(body);
+  const items = Array.isArray(body) ? body : record?.nodes ?? record?.data ?? record?.items;
+  if (!Array.isArray(items)) return [];
+  return items.flatMap((item) => toNode(item) ?? []);
+}
+async function runList(tokens, io, deps, config, bin) {
+  const prefix = `${bin} node list`;
+  const extra = tokens.find((token) => token !== "--json");
+  if (extra !== void 0) {
+    io.stderr(`${prefix}: ${extra.startsWith("-") ? "unknown flag" : "unexpected argument"} "${extra}"
+`);
+    return 1;
+  }
+  const listed = await callApi(deps, config, "GET", "/api/nodes");
+  if (!listed.ok) {
+    io.stderr(`${prefix}: ${listed.message}
+`);
+    return 1;
+  }
+  const rows = toNodeList(listed.body).map(({ id, name, profile, status, ipv4 }) => ({ id, name, profile, status, ipv4 }));
+  if (tokens.includes("--json")) {
+    io.stdout(`${JSON.stringify(rows)}
+`);
+    return 0;
+  }
+  if (rows.length === 0) {
+    io.stdout("no nodes\n");
+    return 0;
+  }
+  const table = [
+    ["ID", "NAME", "PROFILE", "STATUS", "IPV4"],
+    ...rows.map((row) => [row.id, row.name ?? "-", row.profile ?? "-", row.status, row.ipv4 ?? "-"])
+  ];
+  const widths = table[0].map((_, column) => Math.max(...table.map((cells) => cells[column].length)));
+  for (const cells of table) {
+    io.stdout(`${cells.map((cell3, column) => cell3.padEnd(widths[column])).join("  ").trimEnd()}
+`);
+  }
+  return 0;
+}
+async function runDelete(tokens, io, deps, config, bin) {
+  const prefix = `${bin} node delete`;
+  const flag = tokens.find((token) => token.startsWith("-") && token !== "--yes" && token !== "-y");
+  if (flag !== void 0) {
+    io.stderr(`${prefix}: unknown flag "${flag}"
+`);
+    return 1;
+  }
+  const ids = tokens.filter((token) => !token.startsWith("-"));
+  if (ids.length !== 1) {
+    io.stderr(`${prefix}: takes exactly one node id
+`);
+    return 1;
+  }
+  const [id] = ids;
+  const yes = tokens.includes("--yes") || tokens.includes("-y");
+  if (!yes && !await deps.confirm(`Destroy console node ${id}?`)) {
+    io.stderr(`${prefix}: aborted \u2014 node ${id} unchanged
+`);
+    return 1;
+  }
+  const deleted = await callApi(deps, config, "DELETE", `/api/nodes/${encodeURIComponent(id)}`);
+  if (!deleted.ok) {
+    io.stderr(
+      deleted.status === 403 ? `${prefix}: destroy needs the admin role in agro-console
+` : `${prefix}: ${deleted.message}
+`
+    );
+    return 1;
+  }
+  io.stdout(`deleted ${id}
+`);
+  return 0;
+}
+async function runNode(args, io, overrides = {}, bin = "agro") {
+  const [verb, ...rest] = args;
+  if (verb === void 0 || verb === "--help" || verb === "-h" || verb === "help") {
+    io.stdout(nodeHelp(bin));
+    return verb === void 0 ? 1 : 0;
+  }
+  if (!isOneOf(NODE_VERBS, verb)) {
+    io.stderr(`${bin} node: unknown subcommand "${verb}" \u2014 expected ${NODE_VERBS.join(", ")}
+`);
+    return 1;
+  }
+  if (rest.some((token) => token === "--help" || token === "-h")) {
+    io.stdout(nodeHelp(bin));
+    return 0;
+  }
+  const deps = { ...defaultDeps2(), ...overrides };
+  const config = resolveConsoleConfig(deps.env, deps.readSecret);
+  if (config === void 0) {
+    io.stderr(`${bin} node ${verb}: ${CONSOLE_CONFIG_MISSING}
+`);
+    return 1;
+  }
+  if (verb === "list") return runList(rest, io, deps, config, bin);
+  if (verb === "delete") return runDelete(rest, io, deps, config, bin);
+  return runCreate(rest, io, deps, config, bin);
+}
+
 // src/commands/harness.ts
 import { existsSync as existsSync20 } from "node:fs";
 import { homedir as homedir3 } from "node:os";
@@ -6453,6 +6832,54 @@ install -d -m 0700 "$HOME/.tailscale"`
     ]),
     docsPath: TOOLS_DOC
   }),
+  Object.freeze({
+    id: "ffmpeg",
+    title: "FFmpeg + FFprobe",
+    kind: "installable",
+    binary: "ffmpeg",
+    verifyArgv: Object.freeze(["bash", "-lc", "command -v ffmpeg >/dev/null && command -v ffprobe >/dev/null"]),
+    versionArgv: Object.freeze(["ffmpeg", "-version"]),
+    installArgv: Object.freeze([
+      "bash",
+      "-lc",
+      [
+        "set -e",
+        "release=b6.1.1",
+        'case "$(dpkg --print-architecture)" in',
+        "  amd64) arch=x64; ffmpeg_sha=bfe8a8fc511530457b528c48d77b5737527b504a3797a9bc4866aeca69c2dffa; ffprobe_sha=25d9b6ccb05e3d9de9e04e31e2506d8dd7f9f0418981965ac6df12e8d3afd067 ;;",
+        "  arm64) arch=arm64; ffmpeg_sha=754a678672298bc68156adff58aa7385a592c2b30b1d0ae8750c45c915c4bac0; ffprobe_sha=2ab6aba60ee84412dff9188720703376cb4e7aaf7e0b5e43aa8249f2acae5bf8 ;;",
+        '  *) echo "no pinned FFmpeg build for $(dpkg --print-architecture)" >&2; exit 1 ;;',
+        "esac",
+        'prefix="${NPM_USER_PREFIX:-$HOME/.local}"',
+        'tmp="$(mktemp -d)"',
+        `trap 'rm -rf "$tmp"' EXIT`,
+        "for name in ffmpeg ffprobe; do",
+        '  curl -fsSL "https://github.com/eugeneware/ffmpeg-static/releases/download/$release/$name-linux-$arch.gz" -o "$tmp/$name.gz"',
+        "done",
+        'echo "$ffmpeg_sha  $tmp/ffmpeg.gz" | sha256sum -c -',
+        'echo "$ffprobe_sha  $tmp/ffprobe.gz" | sha256sum -c -',
+        'install -d "$prefix/bin"',
+        "for name in ffmpeg ffprobe; do",
+        '  gzip -dc "$tmp/$name.gz" > "$tmp/$name"',
+        '  install -m 0755 "$tmp/$name" "$prefix/bin/$name"',
+        "done",
+        '"$prefix/bin/ffprobe" -version >/dev/null',
+        'if ! "$prefix/bin/ffmpeg" -hide_banner -encoders | grep -qw libx264; then',
+        '  echo "$prefix/bin/ffmpeg lists no libx264 encoder" >&2',
+        "  exit 1",
+        "fi"
+      ].join("\n")
+    ]),
+    installUser: "sandbox",
+    hostCapable: true,
+    uninstallArgv: Object.freeze([
+      "rm",
+      "-rf",
+      `${HARNESS_PREFIX_TOKEN}/bin/ffmpeg`,
+      `${HARNESS_PREFIX_TOKEN}/bin/ffprobe`
+    ]),
+    docsPath: TOOLS_DOC
+  }),
   Object.freeze({
     id: "docker-engine",
     title: "Docker Engine + Compose",
@@ -7246,37 +7673,6 @@ function fetchRemoteSource(opts) {
   return opts.destDir;
 }
 
-// src/command-table.ts
-var CONFIG_VERBS = ["show", "set", "repo"];
-var CONFIG_INTEGRATIONS = ["langfuse"];
-var SECRET_VERBS = ["set", "get", "list"];
-var LANGFUSE_VERBS = ["apply", "status", "disable"];
-var SANDBOX_SUBCOMMANDS = ["install", "list", "upgrade"];
-var WORKSPACE_SUBCOMMANDS = ["create", "list"];
-var HARNESS_SUBCOMMANDS = ["list", "install", "status", "uninstall"];
-var TOOL_SUBCOMMANDS = ["list", "install", "status", "uninstall"];
-var EGRESS_VERBS = ["log", "reload"];
-function isOneOf(values, value) {
-  return value !== void 0 && values.includes(value);
-}
-var AGRO_COMMANDS = Object.freeze({
-  config: [...CONFIG_VERBS, ...CONFIG_INTEGRATIONS],
-  secret: SECRET_VERBS,
-  langfuse: LANGFUSE_VERBS,
-  update: null,
-  "self-upgrade": null,
-  vendor: null,
-  sandbox: SANDBOX_SUBCOMMANDS,
-  shell: null,
-  compose: null,
-  workspace: WORKSPACE_SUBCOMMANDS,
-  harness: HARNESS_SUBCOMMANDS,
-  tool: TOOL_SUBCOMMANDS,
-  gateway: null,
-  egress: EGRESS_VERBS,
-  ...Object.fromEntries(composeVerbs().map((verb) => [verb, null]))
-});
-
 // src/cli.ts
 var DEFAULT_SOURCE_CONTROL_DIR = resolve13(
   dirname10(fileURLToPath(import.meta.url)),
@@ -7323,6 +7719,7 @@ Usage:
   ${bin} compose config         Print the resolved docker compose configuration
   ${bin} egress <args...>       Read the egress proxy log or reload its allowlist (log|reload)
   ${bin} workspace <args...>    Create and list host AGRO workspaces (create|list)
+  ${bin} node <args...>         Manage remote agro-console sandbox nodes (create|list|delete)
   ${bin} harness <args...>      Install and inspect agent CLI harnesses
   ${bin} tool <args...>         Install and inspect sandbox tooling
   ${bin} gateway <args...>      Manage a messaging client session (pi|hermes|openclaw)
@@ -8420,6 +8817,14 @@ async function main(argv) {
     }
     return runEgress(a.verb, a.name === void 0 ? { bin } : { bin, name: a.name }, lifecycleIo());
   }
+  if (first === "node") {
+    return await runNode(
+      argv.slice(1),
+      { stdout: (s) => process.stdout.write(s), stderr: (s) => process.stderr.write(s) },
+      {},
+      bin
+    );
+  }
   if (first === "workspace") {
     const parsed = parseWorkspaceArgs(argv.slice(1), bin);
     if (!parsed.ok) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mifune/agro",
-  "version": "0.21.0",
+  "version": "0.23.0",
   "description": "AGRO CLI — create and manage sandboxes for coding agents.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/mifunedev/agro#readme",