@mifune/agro 0.23.0 → 0.24.0

package/dist/agro.js

@@ -7,8 +7,8 @@ var __export = (target, all) => {
 
 // src/cli.ts
 import { fileURLToPath } from "node:url";
-import { dirname as dirname10, join as join20, resolve as resolve13 } from "node:path";
-import { existsSync as existsSync23, mkdtempSync as mkdtempSync5, readFileSync as readFileSync13, rmSync as rmSync6 } from "node:fs";
+import { dirname as dirname11, join as join22, resolve as resolve13 } from "node:path";
+import { existsSync as existsSync23, mkdtempSync as mkdtempSync5, readFileSync as readFileSync15, rmSync as rmSync7 } from "node:fs";
 import { tmpdir as tmpdir4 } from "node:os";
 
 // src/commands/update.ts
@@ -2040,9 +2040,7 @@ var SECRET_KEYS = [
   "PI_SLACK_BOT_TOKEN",
   "LANGFUSE_PUBLIC_KEY",
   "LANGFUSE_SECRET_KEY",
-  "TYPESAFE_API_KEY",
-  "AGRO_CONSOLE_URL",
-  "AGRO_CONSOLE_TOKEN"
+  "TYPESAFE_API_KEY"
 ];
 var COMPOSE_SECRET_KEYS = [
   "GH_TOKEN",
@@ -2113,7 +2111,7 @@ import { basename as basename6, join as join6, sep as sep3 } from "node:path";
 import { basename as basename4, resolve as resolve7 } from "node:path";
 
 // src/lib/version.ts
-var AGRO_VERSION = true ? "0.23.0" : "0.0.0-dev";
+var AGRO_VERSION = true ? "0.24.0" : "0.0.0-dev";
 var OFFICIAL_IMAGE = "ghcr.io/mifunedev/agro";
 var RELEASE_VERSION = /^[0-9]+\.[0-9]+\.[0-9]+(?:-[a-z][a-z0-9]*\.[0-9]+)?$/;
 function parseReleaseVersion(value) {
@@ -5123,6 +5121,9 @@ function runEgress(verb, opts, io) {
   });
 }
 
+// src/commands/auth.ts
+import { hostname as hostname2 } from "node:os";
+
 // src/command-table.ts
 var CONFIG_VERBS = ["show", "set", "repo"];
 var CONFIG_INTEGRATIONS = ["langfuse"];
@@ -5134,6 +5135,7 @@ var HARNESS_SUBCOMMANDS = ["list", "install", "status", "uninstall"];
 var TOOL_SUBCOMMANDS = ["list", "install", "status", "uninstall"];
 var EGRESS_VERBS = ["log", "reload"];
 var NODE_VERBS = ["create", "list", "delete"];
+var AUTH_VERBS = ["login", "status", "logout", "token"];
 function isOneOf(values, value) {
   return value !== void 0 && values.includes(value);
 }
@@ -5153,36 +5155,103 @@ var AGRO_COMMANDS = Object.freeze({
   gateway: null,
   egress: EGRESS_VERBS,
   node: NODE_VERBS,
+  auth: AUTH_VERBS,
   ...Object.fromEntries(composeVerbs().map((verb) => [verb, null]))
 });
 
+// src/lib/console-auth.ts
+import { chmodSync as chmodSync2, mkdirSync as mkdirSync9, readFileSync as readFileSync12, rmSync as rmSync4, writeFileSync as writeFileSync9 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { dirname as dirname8, join as join15 } from "node:path";
+var CREDENTIAL_FIELDS = ["url", "token", "tokenId", "tokenPrefix", "login"];
+function consoleCredentialsPath(env = process.env, homeDir = homedir3()) {
+  const xdg = env.XDG_CONFIG_HOME?.trim();
+  const configHome = xdg === void 0 || xdg === "" ? join15(homeDir, ".config") : xdg;
+  return join15(configHome, "agro", "console.json");
+}
+function isMissing(error) {
+  return error.code === "ENOENT";
+}
+function toCredentials(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+  const record = value;
+  if (!CREDENTIAL_FIELDS.every((field) => typeof record[field] === "string")) return void 0;
+  return {
+    url: record.url,
+    token: record.token,
+    tokenId: record.tokenId,
+    tokenPrefix: record.tokenPrefix,
+    login: record.login
+  };
+}
+function readConsoleCredentials(env = process.env, homeDir = homedir3()) {
+  let text;
+  try {
+    text = readFileSync12(consoleCredentialsPath(env, homeDir), "utf8");
+  } catch (error) {
+    if (isMissing(error)) return void 0;
+    throw error;
+  }
+  try {
+    return toCredentials(JSON.parse(text));
+  } catch {
+    return void 0;
+  }
+}
+function writeConsoleCredentials(credentials, env = process.env, homeDir = homedir3()) {
+  const path4 = consoleCredentialsPath(env, homeDir);
+  const dir = dirname8(path4);
+  mkdirSync9(dir, { recursive: true, mode: 448 });
+  chmodSync2(dir, 448);
+  const body = {
+    url: credentials.url,
+    token: credentials.token,
+    tokenId: credentials.tokenId,
+    tokenPrefix: credentials.tokenPrefix,
+    login: credentials.login
+  };
+  rmSync4(path4, { force: true });
+  writeFileSync9(path4, `${JSON.stringify(body, null, 2)}
+`, { mode: 384, flag: "wx" });
+  chmodSync2(path4, 384);
+  return path4;
+}
+function deleteConsoleCredentials(env = process.env, homeDir = homedir3()) {
+  const path4 = consoleCredentialsPath(env, homeDir);
+  try {
+    rmSync4(path4);
+    return true;
+  } catch (error) {
+    if (isMissing(error)) return false;
+    throw error;
+  }
+}
+
 // src/commands/node.ts
+import { readFileSync as readFileSync13 } from "node:fs";
+import { homedir as homedir4, hostname } from "node:os";
+import { join as join16 } from "node:path";
 var DEFAULT_CONSOLE_URL = "https://console.mifune.dev";
-var CONSOLE_CONFIG_MISSING = "set AGRO_CONSOLE_TOKEN, or run agro secret set AGRO_CONSOLE_TOKEN";
+var CONSOLE_CONFIG_MISSING = "not logged in to agro-console: run agro auth login";
 var NODE_READY_TIMEOUT_MS = 15 * 60 * 1e3;
 var NODE_FAST_POLL_INTERVAL_MS = 1e3;
 var NODE_FAST_POLL_WINDOW_MS = 30 * 1e3;
 var NODE_POLL_INTERVAL_MS = 5e3;
 var FREE_TIER_SPEC = "n4";
+var LOCAL_SSH_KEY_MISSING = "no --ssh-key given and ~/.ssh/id_ed25519.pub not found";
 var FAILURE_STATUSES = /* @__PURE__ */ new Set(["failed", "destroy_requested", "destroying", "destroyed", "retired"]);
-function resolveConsoleConfig(env, readSecret2) {
-  const lookup = (key) => {
-    const fromEnv = env[key]?.trim();
-    if (fromEnv !== void 0 && fromEnv !== "") return fromEnv;
-    const fromSecret = readSecret2(key)?.trim();
-    return fromSecret === void 0 || fromSecret === "" ? void 0 : fromSecret;
+function resolveConsoleConfig(env, readCredentials) {
+  const present = (value) => {
+    const trimmed = value?.trim();
+    return trimmed === void 0 || trimmed === "" ? void 0 : trimmed;
   };
-  const token = lookup("AGRO_CONSOLE_TOKEN");
-  if (token === void 0) return void 0;
-  const url = lookup("AGRO_CONSOLE_URL") ?? DEFAULT_CONSOLE_URL;
-  return { url: url.replace(/\/+$/, ""), token };
-}
-function readProjectSecret(key) {
-  try {
-    return readSecret(resolveProjectRoot(), key);
-  } catch {
-    return void 0;
-  }
+  const trimUrl2 = (url) => (url ?? DEFAULT_CONSOLE_URL).replace(/\/+$/, "");
+  const envToken = present(env.AGRO_CONSOLE_TOKEN);
+  if (envToken !== void 0) return { url: trimUrl2(present(env.AGRO_CONSOLE_URL)), token: envToken, source: "env" };
+  const file = readCredentials();
+  const fileToken = present(file?.token);
+  if (fileToken === void 0) return void 0;
+  return { url: trimUrl2(present(file?.url)), token: fileToken, source: "file" };
 }
 function nodePollDelayMs(elapsedMs) {
   return elapsedMs < NODE_FAST_POLL_WINDOW_MS ? NODE_FAST_POLL_INTERVAL_MS : NODE_POLL_INTERVAL_MS;
@@ -5191,7 +5260,16 @@ function defaultDeps2() {
   return {
     fetch: (input, init) => globalThis.fetch(input, init),
     env: process.env,
-    readSecret: readProjectSecret,
+    readCredentials: () => readConsoleCredentials(),
+    homeDir: () => homedir4(),
+    hostname: () => hostname(),
+    readFile: (path4) => {
+      try {
+        return readFileSync13(path4, "utf8");
+      } catch {
+        return void 0;
+      }
+    },
     sleep: (ms) => new Promise((done) => setTimeout(done, ms)),
     now: () => Date.now(),
     pollDelayMs: nodePollDelayMs,
@@ -5203,15 +5281,16 @@ function nodeHelp(bin) {
   return `${bin} node \u2014 Create, list, and delete agro-console sandbox nodes (remote VMs)
 
 Usage:
-  ${bin} node create --spec <spec> --ssh-key <uuid> [--ssh-key <uuid>] [--name <name>] [--free-tier] [--json]
+  ${bin} node create --spec <spec> [--ssh-key <uuid>]... [--name <name>] [--free-tier] [--json]
   ${bin} node list [--json]
   ${bin} node delete <id> [--yes]
 
 \`create\` waits up to 15 minutes for the node to reach \`running\`, then prints
 its SSH command. \`--free-tier\` requests the console free tier. The spec
-defaults to n4. The verbs read AGRO_CONSOLE_URL and AGRO_CONSOLE_TOKEN from the
-environment, then from the project .env (\`${bin} secret set <KEY>\`).
-AGRO_CONSOLE_URL defaults to ${DEFAULT_CONSOLE_URL}.
+defaults to n4. When AGRO_CONSOLE_TOKEN is set, the verbs use it with
+AGRO_CONSOLE_URL. Otherwise the verbs use the token and the URL from the
+credentials file that \`${bin} auth login\` writes. The URL defaults to
+${DEFAULT_CONSOLE_URL}.
 `;
 }
 function asRecord(value) {
@@ -5298,9 +5377,40 @@ function parseCreate(tokens) {
   }
   if (args.spec === void 0 && args.freeTier) args.spec = FREE_TIER_SPEC;
   if (args.spec === void 0) return { ok: false, error: "--spec is required" };
-  if (args.sshKeyIds.length === 0) return { ok: false, error: "at least one --ssh-key is required" };
   return { ok: true, args };
 }
+function keyIdentity(publicKey) {
+  return publicKey.trim().split(/\s+/).slice(0, 2).join(" ");
+}
+function toKeyList(body) {
+  const record = asRecord(body);
+  const items = Array.isArray(body) ? body : record?.sshKeys;
+  if (!Array.isArray(items)) return [];
+  return items.flatMap((item) => {
+    const key = asRecord(item);
+    return key === void 0 ? [] : [key];
+  });
+}
+async function resolveSshKeyId(deps, config) {
+  const publicKey = deps.readFile(join16(deps.homeDir(), ".ssh", "id_ed25519.pub"))?.trim();
+  if (publicKey === void 0 || publicKey === "") return { ok: false, error: LOCAL_SSH_KEY_MISSING };
+  const listed = await callApi(deps, config, "GET", "/api/ssh-keys");
+  if (!listed.ok) return { ok: false, error: listed.message };
+  const identity = keyIdentity(publicKey);
+  const match = toKeyList(listed.body).find(
+    (key) => typeof key.publicKey === "string" && keyIdentity(key.publicKey) === identity
+  );
+  const matchId = asText(match?.id);
+  if (matchId !== null) return { ok: true, id: matchId };
+  const registered = await callApi(deps, config, "POST", "/api/ssh-keys", {
+    name: `agro-cli@${deps.hostname()}`,
+    publicKey
+  });
+  if (!registered.ok) return { ok: false, error: registered.message };
+  const outer = asRecord(registered.body);
+  const id = asText((asRecord(outer?.sshKey) ?? outer)?.id);
+  return id === null ? { ok: false, error: "the console response has no SSH key id" } : { ok: true, id };
+}
 function printCreateResult(io, node, json) {
   const ssh = node.status === "running" ? sshCommand(node) : null;
   if (json) {
@@ -5321,7 +5431,17 @@ async function runCreate(tokens, io, deps, config, bin) {
 `);
     return 1;
   }
-  const { spec, sshKeyIds, name, freeTier, json } = parsed.args;
+  const { spec, name, freeTier, json } = parsed.args;
+  let sshKeyIds = parsed.args.sshKeyIds;
+  if (sshKeyIds.length === 0) {
+    const resolved = await resolveSshKeyId(deps, config);
+    if (!resolved.ok) {
+      io.stderr(`${prefix}: ${resolved.error}
+`);
+      return 1;
+    }
+    sshKeyIds = [resolved.id];
+  }
   const requestedAt = deps.now();
   const created = await callApi(deps, config, "POST", "/api/nodes", {
     profile: "sandbox",
@@ -5463,9 +5583,9 @@ async function runNode(args, io, overrides = {}, bin = "agro") {
     return 0;
   }
   const deps = { ...defaultDeps2(), ...overrides };
-  const config = resolveConsoleConfig(deps.env, deps.readSecret);
+  const config = resolveConsoleConfig(deps.env, deps.readCredentials);
   if (config === void 0) {
-    io.stderr(`${bin} node ${verb}: ${CONSOLE_CONFIG_MISSING}
+    io.stderr(`${CONSOLE_CONFIG_MISSING}
 `);
     return 1;
   }
@@ -5474,10 +5594,250 @@ async function runNode(args, io, overrides = {}, bin = "agro") {
   return runCreate(rest, io, deps, config, bin);
 }
 
+// src/commands/auth.ts
+var ENV_TOKEN_LOGOUT = "token comes from AGRO_CONSOLE_TOKEN; unset it to log out";
+var ALREADY_REVOKED = "token was already revoked; removed local credentials";
+var SLOW_DOWN_STEP_S = 5;
+function defaultDeps3() {
+  return {
+    fetch: (input, init) => globalThis.fetch(input, init),
+    env: process.env,
+    hostname: () => hostname2(),
+    sleep: (ms) => new Promise((done) => setTimeout(done, ms)),
+    now: () => Date.now(),
+    readCredentials: () => readConsoleCredentials(),
+    writeCredentials: (credentials) => writeConsoleCredentials(credentials),
+    deleteCredentials: () => deleteConsoleCredentials()
+  };
+}
+function authHelp(bin) {
+  return `${bin} auth \u2014 Sign in to agro-console
+
+Usage:
+  ${bin} auth login [--url <url>]
+  ${bin} auth status
+  ${bin} auth logout
+  ${bin} auth token
+
+\`login\` starts a device authorization, prints a URL and a code, and waits
+for approval in the browser. It stores the token in the user credentials file.
+Without --url it uses AGRO_CONSOLE_URL, then ${DEFAULT_CONSOLE_URL}.
+\`status\` shows the signed-in identity. \`logout\` revokes the token and deletes
+the credentials file. \`token\` prints the token. AGRO_CONSOLE_TOKEN in the
+environment overrides the credentials file.
+`;
+}
+function asRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
+}
+function asText2(value) {
+  if (typeof value === "string" && value !== "") return value;
+  if (typeof value === "number") return String(value);
+  return void 0;
+}
+async function callApi2(deps, url, method, path4, options = {}) {
+  let response;
+  try {
+    response = await deps.fetch(`${url}${path4}`, {
+      method,
+      headers: {
+        Accept: "application/json",
+        ...options.token === void 0 ? {} : { Authorization: `Bearer ${options.token}` },
+        ...options.payload === void 0 ? {} : { "Content-Type": "application/json" }
+      },
+      ...options.payload === void 0 ? {} : { body: JSON.stringify(options.payload) }
+    });
+  } catch (error) {
+    return { ok: false, message: `request failed: ${error instanceof Error ? error.message : String(error)}` };
+  }
+  const text = await response.text();
+  let body = null;
+  try {
+    body = text === "" ? null : JSON.parse(text);
+  } catch {
+    body = null;
+  }
+  const record = asRecord2(body);
+  if (response.status >= 400) {
+    const nested = asRecord2(record.error);
+    const code = asText2(record.code) ?? asText2(nested.code);
+    return { ok: false, status: response.status, code, message: `HTTP ${response.status} ${code ?? "no code"}` };
+  }
+  return { ok: true, status: response.status, body: record };
+}
+function trimUrl(url) {
+  return url.trim().replace(/\/+$/, "");
+}
+function parseLogin(tokens) {
+  let url;
+  for (let i = 0; i < tokens.length; i += 1) {
+    const token = tokens[i];
+    const [flag, inline] = token.startsWith("--") && token.includes("=") ? [token.slice(0, token.indexOf("=")), token.slice(token.indexOf("=") + 1)] : [token, void 0];
+    if (flag !== "--url") {
+      return { ok: false, error: token.startsWith("-") ? `unknown flag "${token}"` : `unexpected argument "${token}"` };
+    }
+    const value = inline ?? tokens[++i];
+    if (value === void 0 || value.trim() === "") return { ok: false, error: "--url requires a value" };
+    url = value;
+  }
+  return { ok: true, url };
+}
+async function runLogin(tokens, io, deps, bin) {
+  const prefix = `${bin} auth login`;
+  const parsed = parseLogin(tokens);
+  if (!parsed.ok) {
+    io.stderr(`${prefix}: ${parsed.error}
+`);
+    return 1;
+  }
+  const envUrl = deps.env.AGRO_CONSOLE_URL?.trim();
+  const url = trimUrl(parsed.url ?? (envUrl === void 0 || envUrl === "" ? DEFAULT_CONSOLE_URL : envUrl));
+  const started = await callApi2(deps, url, "POST", "/api/cli/device", { payload: { clientName: deps.hostname() } });
+  if (!started.ok) {
+    io.stderr(`${prefix}: ${started.message}
+`);
+    return 1;
+  }
+  const deviceCode = asText2(started.body.device_code);
+  const userCode = asText2(started.body.user_code);
+  const verificationUri = asText2(started.body.verification_uri);
+  if (deviceCode === void 0 || userCode === void 0 || verificationUri === void 0) {
+    io.stderr(`${prefix}: unexpected device authorization response
+`);
+    return 1;
+  }
+  let intervalS = Number(started.body.interval) > 0 ? Number(started.body.interval) : 5;
+  const expiresInS = Number(started.body.expires_in) > 0 ? Number(started.body.expires_in) : 900;
+  const deadline = deps.now() + expiresInS * 1e3;
+  io.stdout(`Open ${verificationUri} and enter the code ${userCode}
+Waiting for approval...
+`);
+  while (deps.now() + intervalS * 1e3 <= deadline) {
+    await deps.sleep(intervalS * 1e3);
+    const polled = await callApi2(deps, url, "POST", "/api/cli/device/token", { payload: { device_code: deviceCode } });
+    if (polled.ok) {
+      const credentials = {
+        url,
+        token: asText2(polled.body.token),
+        tokenId: asText2(polled.body.tokenId),
+        tokenPrefix: asText2(polled.body.tokenPrefix),
+        login: asText2(polled.body.login)
+      };
+      if (Object.values(credentials).some((value) => value === void 0)) {
+        io.stderr(`${prefix}: unexpected token response
+`);
+        return 1;
+      }
+      deps.writeCredentials(credentials);
+      io.stdout(`logged in to ${url} as ${credentials.login}
+`);
+      return 0;
+    }
+    if (polled.code === "authorization_pending") continue;
+    if (polled.code === "slow_down") {
+      intervalS += SLOW_DOWN_STEP_S;
+      continue;
+    }
+    if (polled.code === "access_denied") {
+      io.stderr(`${prefix}: the authorization was denied
+`);
+      return 1;
+    }
+    if (polled.code === "expired_token") {
+      io.stderr(`${prefix}: the code expired; run ${bin} auth login again
+`);
+      return 1;
+    }
+    io.stderr(`${prefix}: ${polled.message}
+`);
+    return 1;
+  }
+  io.stderr(`${prefix}: the code expired; run ${bin} auth login again
+`);
+  return 1;
+}
+async function runStatus(io, deps, config, bin) {
+  const me = await callApi2(deps, config.url, "GET", "/api/me", { token: config.token });
+  if (!me.ok) {
+    const hint = me.status === 401 ? `: the token is invalid or revoked; run ${bin} auth login` : "";
+    io.stderr(`${bin} auth status: ${me.message}${hint}
+`);
+    return 1;
+  }
+  const field = (value) => asText2(value) ?? "-";
+  io.stdout(
+    `url: ${config.url}
+login: ${field(me.body.login)}
+role: ${field(me.body.role)}
+org: ${field(me.body.orgId)}
+source: ${config.source}
+token prefix: ${field(me.body.tokenPrefix)}
+`
+  );
+  return 0;
+}
+async function runLogout(io, deps, config, bin) {
+  if (config.source === "env") {
+    io.stderr(`${ENV_TOKEN_LOGOUT}
+`);
+    return 1;
+  }
+  const revoked = await callApi2(deps, config.url, "DELETE", "/api/me/token", { token: config.token });
+  if (!revoked.ok && revoked.status === 401) {
+    deps.deleteCredentials();
+    io.stdout(`${ALREADY_REVOKED}
+`);
+    return 0;
+  }
+  if (!revoked.ok) {
+    io.stderr(`${bin} auth logout: ${revoked.message}
+`);
+    return 1;
+  }
+  deps.deleteCredentials();
+  io.stdout(`logged out of ${config.url}
+`);
+  return 0;
+}
+async function runAuth(args, io, overrides = {}, bin = "agro") {
+  const [verb, ...rest] = args;
+  if (verb === void 0 || verb === "--help" || verb === "-h" || verb === "help") {
+    io.stdout(authHelp(bin));
+    return verb === void 0 ? 1 : 0;
+  }
+  if (!isOneOf(AUTH_VERBS, verb)) {
+    io.stderr(`${bin} auth: unknown subcommand "${verb}" \u2014 expected ${AUTH_VERBS.join(", ")}
+`);
+    return 1;
+  }
+  if (rest.some((token) => token === "--help" || token === "-h")) {
+    io.stdout(authHelp(bin));
+    return 0;
+  }
+  const deps = { ...defaultDeps3(), ...overrides };
+  if (verb === "login") return runLogin(rest, io, deps, bin);
+  if (rest.length > 0) {
+    io.stderr(`${bin} auth ${verb}: unexpected argument "${rest[0]}"
+`);
+    return 1;
+  }
+  const config = resolveConsoleConfig(deps.env, deps.readCredentials);
+  if (config === void 0) {
+    io.stderr(`${CONSOLE_CONFIG_MISSING}
+`);
+    return 1;
+  }
+  if (verb === "status") return runStatus(io, deps, config, bin);
+  if (verb === "logout") return runLogout(io, deps, config, bin);
+  io.stdout(`${config.token}
+`);
+  return 0;
+}
+
 // src/commands/harness.ts
 import { existsSync as existsSync20 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
-import { delimiter as delimiter2, join as join17 } from "node:path";
+import { homedir as homedir5 } from "node:os";
+import { delimiter as delimiter2, join as join19 } from "node:path";
 
 // src/lib/docs.ts
 var SOURCE_DOCS_BASE = "https://github.com/mifunedev/agro/blob/main/";
@@ -5490,8 +5850,8 @@ function sourceDocsUrl(docsPath) {
 }
 
 // src/lib/host-config.ts
-import { existsSync as existsSync18, mkdirSync as mkdirSync9, readFileSync as readFileSync12, renameSync as renameSync4, unlinkSync as unlinkSync6, writeFileSync as writeFileSync9 } from "node:fs";
-import { basename as basename8, dirname as dirname8, isAbsolute, join as join15, resolve as resolve10 } from "node:path";
+import { existsSync as existsSync18, mkdirSync as mkdirSync10, readFileSync as readFileSync14, renameSync as renameSync4, unlinkSync as unlinkSync6, writeFileSync as writeFileSync10 } from "node:fs";
+import { basename as basename8, dirname as dirname9, isAbsolute, join as join17, resolve as resolve10 } from "node:path";
 var HOST_CONFIG_MODE = 420;
 var HOST_CONFIG_FILE = "config.json";
 var WORKSPACES_SUBDIR = "workspaces";
@@ -5503,7 +5863,7 @@ function hostStateHome(env, home) {
   return resolveUserStateHome(env, home);
 }
 function hostConfigPath(env, home) {
-  return join15(hostStateHome(env, home), HOST_CONFIG_FILE);
+  return join17(hostStateHome(env, home), HOST_CONFIG_FILE);
 }
 function assertWorkspaceName(name) {
   if (!SANDBOX_NAME_PATTERN.test(name)) {
@@ -5513,14 +5873,14 @@ function assertWorkspaceName(name) {
   }
 }
 function workspacesRoot(env, home) {
-  return join15(hostStateHome(env, home), WORKSPACES_SUBDIR);
+  return join17(hostStateHome(env, home), WORKSPACES_SUBDIR);
 }
 function workspaceRoot(name, env, home) {
   assertWorkspaceName(name);
-  return join15(workspacesRoot(env, home), name);
+  return join17(workspacesRoot(env, home), name);
 }
 function defaultHarnessRoot(env, home) {
-  return join15(workspacesRoot(env, home), DEFAULT_WORKSPACE_NAME);
+  return join17(workspacesRoot(env, home), DEFAULT_WORKSPACE_NAME);
 }
 function validateHostConfig(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
@@ -5588,7 +5948,7 @@ function readHostConfig(env, home) {
   if (!existsSync18(path4)) return { version: 1 };
   let raw;
   try {
-    raw = readFileSync12(path4, "utf8");
+    raw = readFileSync14(path4, "utf8");
   } catch (error) {
     const detail = error instanceof Error ? error.message : String(error);
     throw new Error(`could not read ${path4}: ${detail}`);
@@ -5607,9 +5967,9 @@ function writeHostConfig(config, env, home) {
   const body = `${JSON.stringify(validated, null, 2)}
 `;
   const tmp = `${path4}.tmp.${process.pid}`;
-  mkdirSync9(dirname8(path4), { recursive: true });
+  mkdirSync10(dirname9(path4), { recursive: true });
   try {
-    writeFileSync9(tmp, body, { mode: HOST_CONFIG_MODE, encoding: "utf8" });
+    writeFileSync10(tmp, body, { mode: HOST_CONFIG_MODE, encoding: "utf8" });
     renameSync4(tmp, path4);
   } catch (error) {
     try {
@@ -5636,8 +5996,8 @@ function fieldError2(path4, requirement) {
 }
 
 // src/lib/host-workspace.ts
-import { existsSync as existsSync19, mkdirSync as mkdirSync10, mkdtempSync as mkdtempSync4, readdirSync as readdirSync3, renameSync as renameSync5, rmSync as rmSync4, statSync as statSync5 } from "node:fs";
-import { dirname as dirname9, join as join16, resolve as resolve11 } from "node:path";
+import { existsSync as existsSync19, mkdirSync as mkdirSync11, mkdtempSync as mkdtempSync4, readdirSync as readdirSync3, renameSync as renameSync5, rmSync as rmSync5, statSync as statSync5 } from "node:fs";
+import { dirname as dirname10, join as join18, resolve as resolve11 } from "node:path";
 var AGRO_REPO_URL = "https://github.com/mifunedev/agro.git";
 var IGNORABLE_ENTRIES = [
   REGISTRY_SUBDIR,
@@ -5649,7 +6009,7 @@ function isDirectory3(path4) {
   return statSync5(path4, { throwIfNoEntry: false })?.isDirectory() === true;
 }
 function stateHomes(home) {
-  return STATE_HOME_DIRS.map((name) => join16(home, name));
+  return STATE_HOME_DIRS.map((name) => join18(home, name));
 }
 function stateHomeRootRefusal(bin, root, home, verb = "harness") {
   const target = resolve11(root);
@@ -5657,7 +6017,7 @@ function stateHomeRootRefusal(bin, root, home, verb = "harness") {
   if (enclosing === void 0) return void 0;
   return `${bin} ${verb}: the ${verb} root ${target} is the state home ${enclosing} itself.
 A workspace there collides with AGRO state and blocks every command run from ${home}.
-Move it out \u2014 for example \`mv ${enclosing} ${join16(home, "agro")}\` \u2014 then re-run this command.
+Move it out \u2014 for example \`mv ${enclosing} ${join18(home, "agro")}\` \u2014 then re-run this command.
 `;
 }
 function isIgnorableEntry(name) {
@@ -5674,27 +6034,27 @@ function cloneInto(target, run, root, ref) {
   assertCloned(run("git", ["clone", ...branch, AGRO_REPO_URL, target], { stdio: "inherit" }), root);
 }
 function cloneThroughStaging(root, run, ref) {
-  const staging = mkdtempSync4(join16(dirname9(root), "agro-clone-"));
+  const staging = mkdtempSync4(join18(dirname10(root), "agro-clone-"));
   try {
-    const checkout = join16(staging, "agro");
+    const checkout = join18(staging, "agro");
     cloneInto(checkout, run, root, ref);
     for (const name of readdirSync3(checkout)) {
-      const destination = join16(root, name);
+      const destination = join18(root, name);
       if (existsSync19(destination)) {
         throw new Error(`could not move ${name} into ${root} \u2014 the path already exists`);
       }
-      renameSync5(join16(checkout, name), destination);
+      renameSync5(join18(checkout, name), destination);
     }
   } finally {
-    rmSync4(staging, { recursive: true, force: true });
+    rmSync5(staging, { recursive: true, force: true });
   }
 }
 function ensureHostWorkspace(path4, run = spawnRunner, ref) {
   const root = resolve11(path4);
-  if (existsSync19(join16(root, ".git"))) return { root, action: "reused" };
+  if (existsSync19(join18(root, ".git"))) return { root, action: "reused" };
   const stats = statSync5(root, { throwIfNoEntry: false });
   if (stats === void 0) {
-    mkdirSync10(dirname9(root), { recursive: true });
+    mkdirSync11(dirname10(root), { recursive: true });
     cloneInto(root, run, root, ref);
     return { root, action: "cloned" };
   }
@@ -5713,11 +6073,11 @@ function ensureHostWorkspace(path4, run = spawnRunner, ref) {
 function listHostWorkspaces(env, home) {
   const root = workspacesRoot(env, home);
   if (!isDirectory3(root)) return [];
-  return readdirSync3(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter((name) => SANDBOX_NAME_PATTERN.test(name)).filter((name) => existsSync19(join16(root, name, ".git"))).sort();
+  return readdirSync3(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter((name) => SANDBOX_NAME_PATTERN.test(name)).filter((name) => existsSync19(join18(root, name, ".git"))).sort();
 }
 function resolveExistingWorkspace(bin, verb, path4, env, home) {
   const root = resolve11(path4);
-  if (existsSync19(join16(root, ".git"))) return { ok: true, root };
+  if (existsSync19(join18(root, ".git"))) return { ok: true, root };
   const existing = listHostWorkspaces(env, home);
   const inventory = existing.length === 0 ? "No host workspace exists yet.\n" : `Workspaces that exist: ${existing.join(", ")}
 `;
@@ -5754,7 +6114,7 @@ function targetFor(root, cwd, run, env) {
   });
 }
 function hostPrefix(home) {
-  return join17(home, ".local");
+  return join19(home, ".local");
 }
 function pathEntries(env) {
   return (env.PATH ?? "").split(delimiter2).filter((part) => part !== "");
@@ -5801,7 +6161,7 @@ async function sandboxMarkerExists(target, entry) {
   return r.exitCode === 0;
 }
 function hostBinaryUnderPrefix(entry, prefix) {
-  return existsSync20(join17(harnessBinPath(prefix), entry.binary));
+  return existsSync20(join19(harnessBinPath(prefix), entry.binary));
 }
 function stateOf(entry, installed, location) {
   return {
@@ -5822,7 +6182,7 @@ function probeableHost(env, home) {
     return void 0;
   }
   const prefix = hostPrefix(home);
-  if (!existsSync20(join17(root, ".git")) && !existsSync20(prefix)) return void 0;
+  if (!existsSync20(join19(root, ".git")) && !existsSync20(prefix)) return void 0;
   return { root, prefix };
 }
 async function collectStates(root, cwd, run, home, env, only) {
@@ -6053,7 +6413,7 @@ Start it with \`${bin} sandbox\`, then re-run this command.
 `;
 }
 function homeOf(opts) {
-  return (opts.homedir ?? homedir3)();
+  return (opts.homedir ?? homedir5)();
 }
 function isInteractive(opts) {
   return opts.interactive ?? (process.stdin.isTTY === true && process.stdout.isTTY === true);
@@ -6442,11 +6802,11 @@ async function runHarnessInstall(name, opts, io) {
 }
 
 // src/commands/workspace.ts
-import { existsSync as existsSync21, rmSync as rmSync5 } from "node:fs";
-import { homedir as homedir4 } from "node:os";
-import { join as join18, resolve as resolve12 } from "node:path";
+import { existsSync as existsSync21, rmSync as rmSync6 } from "node:fs";
+import { homedir as homedir6 } from "node:os";
+import { join as join20, resolve as resolve12 } from "node:path";
 function homeOf2(opts) {
-  return (opts.homedir ?? homedir4)();
+  return (opts.homedir ?? homedir6)();
 }
 function messageOf2(error) {
   return error instanceof Error ? error.message : String(error);
@@ -6492,7 +6852,7 @@ async function runWorkspaceCreate(name, opts, io) {
   let action;
   const preexisting = existsSync21(root);
   try {
-    if (!opts.json && !existsSync21(join18(root, ".git"))) {
+    if (!opts.json && !existsSync21(join20(root, ".git"))) {
       const at = opts.ref !== void 0 ? ` at ${opts.ref}` : "";
       io.stdout(`cloning ${AGRO_REPO_URL}${at} into ${root}\u2026
 `);
@@ -6502,7 +6862,7 @@ async function runWorkspaceCreate(name, opts, io) {
     action = created.action;
   } catch (err) {
     if (opts.ref !== void 0) {
-      if (!preexisting) rmSync5(root, { recursive: true, force: true });
+      if (!preexisting) rmSync6(root, { recursive: true, force: true });
       io.stderr(
         `${bin} workspace: could not clone ref "${opts.ref}" \u2014 the ref does not exist in ${AGRO_REPO_URL} or the clone failed (${messageOf2(err)})
 `
@@ -6537,7 +6897,7 @@ async function runWorkspaceList(opts, io) {
     const recorded = recordedRoot(env, home);
     const registry = workspacesRoot(env, home);
     rows = listHostWorkspaces(env, home).map((name) => {
-      const root = join18(registry, name);
+      const root = join20(registry, name);
       return { name, root, default: recorded === root };
     });
   } catch (err) {
@@ -6563,8 +6923,8 @@ async function runWorkspaceList(opts, io) {
 
 // src/commands/tool.ts
 import { existsSync as existsSync22 } from "node:fs";
-import { homedir as homedir5, userInfo as userInfo2 } from "node:os";
-import { delimiter as delimiter3, join as join19 } from "node:path";
+import { homedir as homedir7, userInfo as userInfo2 } from "node:os";
+import { delimiter as delimiter3, join as join21 } from "node:path";
 
 // src/lib/tools/catalog.ts
 var TOOLS_DOC = "docs/installation.md";
@@ -6607,22 +6967,47 @@ var TOOL_CATALOG = Object.freeze([
         '  browser="$resolved"',
         "  break",
         "done",
-        'if [ -z "$browser" ]; then',
-        '  echo "agent-browser is installed at $prefix/bin/agent-browser, but no Chromium-family browser was found on this host." >&2',
-        '  echo "AGRO does not install browser libraries on the host. Point agent-browser at an existing browser, then rerun:" >&2',
-        '  echo "  export AGENT_BROWSER_EXECUTABLE_PATH=/path/to/chrome" >&2',
-        '  echo "Or install one with your own package manager. Inside the sandbox, agro tool install agent-browser downloads Chrome for you." >&2',
+        'deps=""',
+        'if [ -n "$browser" ]; then',
+        '  echo "agent-browser will drive $browser"',
+        'elif [ "$(id -u)" = 0 ] || sudo -n true 2>/dev/null; then',
+        "  if ! command -v sudo >/dev/null 2>&1; then",
+        `    printf '#!/bin/sh\\nexec "$@"\\n' > "$tmp/sudo"`,
+        '    chmod +x "$tmp/sudo"',
+        '    PATH="$tmp:$PATH"',
+        "  fi",
+        '  "$prefix/bin/agent-browser" install --with-deps',
+        "else",
+        '  "$prefix/bin/agent-browser" install',
+        "  deps=missing",
+        "fi",
+        'export AGENT_BROWSER_SOCKET_DIR="$tmp"',
+        "session=agro-install-check",
+        "launched=yes",
+        '"$prefix/bin/agent-browser" --session "$session" open about:blank >"$tmp/launch.log" 2>&1 || launched=no',
+        '"$prefix/bin/agent-browser" --session "$session" close >/dev/null 2>&1 || true',
+        'if [ "$launched" = no ]; then',
+        '  cat "$tmp/launch.log" >&2',
+        '  echo "agent-browser is installed at $prefix/bin/agent-browser, but headless Chrome did not launch." >&2',
+        '  if [ "$deps" = missing ]; then',
+        '    echo "Chrome needs system libraries, and this user has no passwordless sudo. Run this command, then rerun agro tool install agent-browser:" >&2',
+        '    echo "  sudo $prefix/bin/agent-browser install --with-deps" >&2',
+        "  fi",
         "  exit 1",
         "fi",
-        'echo "agent-browser will drive $browser"',
-        '"$prefix/bin/agent-browser" --version >/dev/null'
+        'echo "agent-browser launched headless Chrome"'
       ].join("\n")
     ]),
     installUser: "sandbox",
     downloadSize: "~1 GB",
+    hostDownloadSize: "~400 MB",
     hostCapable: true,
     uninstallArgv: Object.freeze(["bash", "-lc", "pnpm remove -g agent-browser"]),
-    hostUninstallArgv: Object.freeze(["rm", "-rf", `${HARNESS_PREFIX_TOKEN}/bin/agent-browser`]),
+    hostUninstallArgv: Object.freeze([
+      "bash",
+      "-c",
+      `rm -rf "${HARNESS_PREFIX_TOKEN}/bin/agent-browser" "$HOME/.agent-browser/browsers"`
+    ]),
     docsPath: TOOLS_DOC
   }),
   Object.freeze({
@@ -7043,7 +7428,7 @@ function targetFor2(root, run, env) {
   });
 }
 function hostPrefix2(home) {
-  return join19(home, ".local");
+  return join21(home, ".local");
 }
 function sandboxMarkerPath2(entry) {
   return `${SANDBOX_HARNESS_PREFIX}/share/agro/tools/${entry.id}.installed`;
@@ -7057,7 +7442,7 @@ async function sandboxMarkerExists2(target, entry) {
   return r.exitCode === 0;
 }
 function hostBinaryUnderPrefix2(entry, prefix) {
-  return existsSync22(join19(harnessBinPath(prefix), entry.binary));
+  return existsSync22(join21(harnessBinPath(prefix), entry.binary));
 }
 function pathEntries2(env) {
   return (env.PATH ?? "").split(delimiter3).filter((part) => part !== "");
@@ -7077,7 +7462,7 @@ function messageOf3(error) {
   return error instanceof Error ? error.message : String(error);
 }
 function homeOf3(opts) {
-  return (opts.homedir ?? homedir5)();
+  return (opts.homedir ?? homedir7)();
 }
 function platformOf(opts) {
   return opts.platform ?? process.platform;
@@ -7137,7 +7522,7 @@ function probeableHost2(env, home) {
     return void 0;
   }
   const prefix = hostPrefix2(home);
-  if (!existsSync22(join19(root, ".git")) && !existsSync22(prefix)) return void 0;
+  if (!existsSync22(join21(root, ".git")) && !existsSync22(prefix)) return void 0;
   return { root, prefix };
 }
 async function collectRows(root, run, home, env, only) {
@@ -7675,7 +8060,7 @@ function fetchRemoteSource(opts) {
 
 // src/cli.ts
 var DEFAULT_SOURCE_CONTROL_DIR = resolve13(
-  dirname10(fileURLToPath(import.meta.url)),
+  dirname11(fileURLToPath(import.meta.url)),
   "../.."
 );
 var INTEGRATIONS = {
@@ -7720,6 +8105,7 @@ Usage:
   ${bin} egress <args...>       Read the egress proxy log or reload its allowlist (log|reload)
   ${bin} workspace <args...>    Create and list host AGRO workspaces (create|list)
   ${bin} node <args...>         Manage remote agro-console sandbox nodes (create|list|delete)
+  ${bin} auth <args...>         Sign in to agro-console (login|status|logout|token)
   ${bin} harness <args...>      Install and inspect agent CLI harnesses
   ${bin} tool <args...>         Install and inspect sandbox tooling
   ${bin} gateway <args...>      Manage a messaging client session (pi|hermes|openclaw)
@@ -8555,7 +8941,7 @@ function parseGatewayArgs(rest) {
   return { ok: true, args: { help: false, passthrough: [...rest] } };
 }
 function bundledPayloadExists(bundled, exists = existsSync23) {
-  return exists(join20(bundled.sourceControlDir, "manifest.json"));
+  return exists(join22(bundled.sourceControlDir, "manifest.json"));
 }
 function resolveVendorSource(args, bundled, bin = AGRO_PRODUCT.bin) {
   const exists = bundled.exists ?? existsSync23;
@@ -8578,7 +8964,7 @@ function resolveVendorSource(args, bundled, bin = AGRO_PRODUCT.bin) {
 function readPayloadVersion(checkoutDir) {
   try {
     const parsed = JSON.parse(
-      readFileSync13(join20(resolveControlDir(checkoutDir), "cli", "package.json"), "utf8")
+      readFileSync15(join22(resolveControlDir(checkoutDir), "cli", "package.json"), "utf8")
     );
     if (parsed && typeof parsed.version === "string") return parsed.version;
   } catch {
@@ -8587,8 +8973,8 @@ function readPayloadVersion(checkoutDir) {
 }
 async function runWithRemoteSource(hooks, fn) {
   const fetch2 = hooks.fetch ?? fetchRemoteSource;
-  const mkdtemp = hooks.mkdtemp ?? (() => mkdtempSync5(join20(tmpdir4(), "oh-remote-")));
-  const rm = hooks.rm ?? ((dir) => rmSync6(dir, { recursive: true, force: true }));
+  const mkdtemp = hooks.mkdtemp ?? (() => mkdtempSync5(join22(tmpdir4(), "oh-remote-")));
+  const rm = hooks.rm ?? ((dir) => rmSync7(dir, { recursive: true, force: true }));
   const out = hooks.stdout ?? ((s) => process.stdout.write(s));
   const checkoutDir = mkdtemp();
   try {
@@ -8817,6 +9203,14 @@ async function main(argv) {
     }
     return runEgress(a.verb, a.name === void 0 ? { bin } : { bin, name: a.name }, lifecycleIo());
   }
+  if (first === "auth") {
+    return await runAuth(
+      argv.slice(1),
+      { stdout: (s) => process.stdout.write(s), stderr: (s) => process.stderr.write(s) },
+      {},
+      bin
+    );
+  }
   if (first === "node") {
     return await runNode(
       argv.slice(1),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mifune/agro",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "description": "AGRO CLI — create and manage sandboxes for coding agents.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/mifunedev/agro#readme",