@onepointfour-packs/flaredeck-agent 0.1.0

package/dist/approval.js

@@ -0,0 +1,161 @@
+import { randomBytes } from 'node:crypto';
+/** How long a request waits before it is treated as a refusal. */
+export const APPROVAL_TIMEOUT_MS = 10 * 60 * 1000;
+const waiting = new Map();
+/** Called by the stream loop for every `decided` event. Returns true when a wait took it. */
+export function deliverDecision(message) {
+    // `<requestId>:<outcome>:<what>` — see functions/src/card-sync.js notifyRequesterOnDecision.
+    const m = /^([a-z]{5}):(endorsed|rejected|allow|deny):([\s\S]*)$/.exec(message.trim());
+    if (!m)
+        return false;
+    const take = waiting.get(m[1]);
+    if (!take)
+        return false;
+    take({ outcome: m[2], by: m[3].trim() });
+    return true;
+}
+/** True while any request is waiting — the stream loop uses it to know a `decided` event is expected. */
+export const awaitingDecision = (requestId) => waiting.has(requestId);
+/**
+ * Five lowercase letters, no `l`.
+ *
+ * Borrowed from Claude Code's own permission-relay format: `l` is excluded so the token never
+ * reads as a 1 or an I to someone typing it on a phone at three in the morning. Hex looked
+ * tidier and was worse for the one job this has.
+ */
+const ALPHABET = 'abcdefghijkmnopqrstuvwxyz';
+const newToken = () => Array.from(randomBytes(5), (b) => ALPHABET[b % ALPHABET.length]).join('');
+/** Long enough to judge the call, short enough to read on a phone. */
+const PREVIEW_LIMIT = 1200;
+/**
+ * What the approver is shown.
+ *
+ * This text is posted to a card, so it is read by more people than just the approver and it is
+ * stored. A command can carry a token — `curl -H "Authorization: Bearer sk-…"` — and writing that
+ * into FlareDeck would leak it into a place it was never meant to be. Claude Code masks
+ * credentials before relaying a prompt over a channel for exactly this reason; going direct means
+ * doing it here instead.
+ */
+const SECRET = /\b((?:sk|pk|rk|ghp|gho|ghu|ghs|ghr|github_pat|xox[abprs]|AKIA|ASIA|fd_live|fd_test)[-_A-Za-z0-9]{8,}|eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9._-]{10,})/g;
+export const redact = (text) => text.replace(SECRET, '[REDACTED]');
+const summarise = (input) => {
+    const command = input['command'] ?? input['file_path'] ?? input['path'];
+    const text = redact(typeof command === 'string' ? command : JSON.stringify(input));
+    // A production-run SCRIPT is never cut: the reviewer and the approver are judging exactly that
+    // text, and an elided middle is where a second statement hides. The server stores it whole.
+    if (input['whole'] === true)
+        return text;
+    if (text.length <= PREVIEW_LIMIT)
+        return text;
+    // Keep both ends: the tail of a command is usually where the destination is.
+    const head = text.slice(0, PREVIEW_LIMIT - 400);
+    const tail = text.slice(-400);
+    return `${head}\n⋯ ${text.length - PREVIEW_LIMIT} characters elided ⋯\n${tail}`;
+};
+/**
+ * Turn a permission request into a question on the card.
+ *
+ * In auto mode the classifier has already handled everything routine, so whatever arrives here is
+ * the unusual kind — an explicit `ask` rule, or a tool that needs a person. Rather than refusing
+ * and losing the work, the harness posts it to the card and waits: anyone on the board can answer
+ * from their phone, and the reply arrives as an ordinary comment.
+ *
+ * It cannot hang. The wait ends at the timeout, or when the SDK aborts, and both mean "no".
+ */
+export function flaredeckDecider(deck, card, timeoutMs = APPROVAL_TIMEOUT_MS, 
+/** Routing the request carries with it: a lead who must endorse it first, and who may answer. */
+route = {}, 
+/** Called once the request is on the card, with what a local answerer needs to find it. */
+onPosted = () => { }, 
+/** Called when the lead endorses it — the wait continues, now on a person. */
+onReviewed) {
+    return async ({ toolName, input }, { signal }) => {
+        const request = {
+            request_id: newToken(),
+            tool_name: toolName,
+            description: describe(toolName, input),
+            input_preview: summarise(input),
+        };
+        const token = request.request_id;
+        const minutes = Math.round(timeoutMs / 60_000);
+        let askedId;
+        try {
+            // The structured approval is what renders as Approve/Deny on the web and in the phone app,
+            // and what raises the push. The body text is the same request in words, so the typed
+            // `approve <id>` reply still works wherever a button isn't — email, a relay, another agent.
+            const asked = await deck.comment(card, renderRequest(request, minutes, !!route.review_by), {
+                request_id: request.request_id,
+                tool_name: request.tool_name,
+                description: request.description,
+                input_preview: request.input_preview,
+                expires_in_seconds: Math.round(timeoutMs / 1000),
+                ...(route.review_by ? { review_by: route.review_by } : {}),
+                ...(route.approvers?.length ? { approvers: route.approvers } : {}),
+            });
+            askedId = asked.id;
+            onPosted({ request_id: request.request_id, comment_id: asked.id });
+        }
+        catch (e) {
+            // If the request itself cannot be posted, refuse — never fail open into an unreviewed call.
+            return { allow: false, reason: `Could not ask for approval (${String(e)}), so this was refused.` };
+        }
+        // Wait for the stream to hand the verdict in. An endorsement is reported and the wait goes
+        // on — the request is now with a person — so a lead's review and a person's answer are two
+        // events on one wait, not two waits.
+        let timer;
+        const final = await new Promise((resolve) => {
+            const done = (d) => { clearTimeout(timer); waiting.delete(token); signal.removeEventListener('abort', onAbort); resolve(d); };
+            const onAbort = () => done(null);
+            waiting.set(token, (d) => {
+                if (d.outcome === 'endorsed') {
+                    onReviewed?.(d);
+                    return;
+                } // keep waiting
+                done(d);
+            });
+            signal.addEventListener('abort', onAbort, { once: true });
+            timer = setTimeout(() => done(null), timeoutMs);
+        });
+        if (final) {
+            const who = final.by || 'someone on the board';
+            if (final.outcome === 'allow')
+                return { allow: true };
+            return {
+                allow: false,
+                reason: final.outcome === 'rejected'
+                    ? `Your lead rejected this: ${who}. Do not resubmit it unchanged; do what the note says, or stop and say why.`
+                    : `${who} declined this. Do not retry it; work around it or stop and say why.`,
+            };
+        }
+        if (signal.aborted)
+            return { allow: false, reason: 'The turn ended before anyone answered, so this did not run.' };
+        await deck
+            .comment(card, `No answer in ${minutes} minutes, so \`${toolName}\` was refused. The agent carried on without it.`)
+            .catch(() => { });
+        return {
+            allow: false,
+            reason: `Nobody approved ${toolName} within ${minutes} minutes, so it did not run. ` +
+                `Carry on with anything that does not depend on it and say clearly what is outstanding.`,
+        };
+    };
+}
+/** One line of what the call does, matching the protocol's `description` field. */
+function describe(toolName, input) {
+    const d = input['description'];
+    if (typeof d === 'string' && d.trim())
+        return redact(d.trim());
+    return toolName === 'Bash' ? 'Run shell command' : `Use ${toolName}`;
+}
+/**
+ * The request as a card comment. Accepts `approve`/`deny` and the protocol's own `yes`/`no`, so
+ * whichever a person reaches for works — and a structured Approve/Deny button, when FlareDeck
+ * grows one, just posts the same verdict without anyone typing.
+ */
+function renderRequest(r, minutes, reviewed = false) {
+    return (`**Approval needed** — ${r.description} (\`${r.tool_name}\`)\n\n` +
+        (reviewed ? '_Goes to the lead for review first; the people who can approve it are asked once the lead endorses it._\n\n' : '') +
+        `\`\`\`\n${r.input_preview}\n\`\`\`\n\n` +
+        `Reply **approve ${r.request_id}** or **deny ${r.request_id}**. ` +
+        `No answer within ${minutes} minutes counts as a refusal and the agent moves on.`);
+}
+//# sourceMappingURL=approval.js.map

package/dist/approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval.js","sourceRoot":"","sources":["../src/approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAkC1C,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAWlD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;AAExD,6FAA6F;AAC7F,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,6FAA6F;IAC7F,MAAM,CAAC,GAAG,uDAAuD,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACvF,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAuB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAEvF;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,2BAA2B,CAAC;AAC7C,MAAM,QAAQ,GAAG,GAAG,EAAE,CACpB,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAE5E,sEAAsE;AACtE,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B;;;;;;;;GAQG;AACH,MAAM,MAAM,GAAG,mJAAmJ,CAAC;AAEnK,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAEnF,MAAM,SAAS,GAAG,CAAC,KAA8B,EAAU,EAAE;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACnF,+FAA+F;IAC/F,4FAA4F;IAC5F,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,IAAI,CAAC,MAAM,IAAI,aAAa;QAAE,OAAO,IAAI,CAAC;IAC9C,6EAA6E;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,GAAG,GAAG,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,GAAG,IAAI,OAAO,IAAI,CAAC,MAAM,GAAG,aAAa,yBAAyB,IAAI,EAAE,CAAC;AAClF,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAe,EACf,IAAY,EACZ,SAAS,GAAG,mBAAmB;AAC/B,iGAAiG;AACjG,QAAsD,EAAE;AACxD,2FAA2F;AAC3F,WAAyE,GAAG,EAAE,GAAE,CAAC;AACjF,8EAA8E;AAC9E,UAAiC;IAEjC,OAAO,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC/C,MAAM,OAAO,GAAsB;YACjC,UAAU,EAAE,QAAQ,EAAE;YACtB,SAAS,EAAE,QAAQ;YACnB,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;YACtC,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC;SAChC,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;QAE/C,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,2FAA2F;YAC3F,qFAAqF;YACrF,4FAA4F;YAC5F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;gBACzF,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;gBAChD,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CAAC,CAAC;YACH,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;YACnB,QAAQ,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,4FAA4F;YAC5F,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,MAAM,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC;QACrG,CAAC;QAED,2FAA2F;QAC3F,2FAA2F;QAC3F,qCAAqC;QACrC,IAAI,KAAgD,CAAC;QACrD,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;YAC1D,MAAM,IAAI,GAAG,CAAC,CAAiB,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9I,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE;gBACvB,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;oBAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC,CAAE,eAAe;gBAC3E,IAAI,CAAC,CAAC,CAAC,CAAC;YACV,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,IAAI,sBAAsB,CAAC;YAC/C,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACtD,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,KAAK,CAAC,OAAO,KAAK,UAAU;oBAClC,CAAC,CAAC,4BAA4B,GAAG,6EAA6E;oBAC9G,CAAC,CAAC,GAAG,GAAG,sEAAsE;aACjF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6DAA6D,EAAE,CAAC;QAEnH,MAAM,IAAI;aACP,OAAO,CAAC,IAAI,EAAE,gBAAgB,OAAO,kBAAkB,QAAQ,kDAAkD,CAAC;aAClH,KAAK,CAAC,GAAG,EAAE,GAAqB,CAAC,CAAC,CAAC;QACtC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EACJ,mBAAmB,QAAQ,WAAW,OAAO,+BAA+B;gBAC5E,wFAAwF;SAC3F,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,QAAQ,CAAC,QAAgB,EAAE,KAA8B;IAChE,MAAM,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,OAAO,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,CAAoB,EAAE,OAAe,EAAE,QAAQ,GAAG,KAAK;IAC5E,OAAO,CACL,yBAAyB,CAAC,CAAC,WAAW,OAAO,CAAC,CAAC,SAAS,SAAS;QACjE,CAAC,QAAQ,CAAC,CAAC,CAAC,6GAA6G,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/H,WAAW,CAAC,CAAC,aAAa,cAAc;QACxC,mBAAmB,CAAC,CAAC,UAAU,gBAAgB,CAAC,CAAC,UAAU,MAAM;QACjE,oBAAoB,OAAO,sDAAsD,CAClF,CAAC;AACJ,CAAC"}

package/dist/approvals.d.ts

@@ -0,0 +1,2 @@
+import type { Flaredeck } from './flaredeck.js';
+export declare function startApprovals(deck: Flaredeck, me: string): Promise<void>;

package/dist/approvals.js

@@ -0,0 +1,148 @@
+import { Box, Text, render, useApp, useInput } from 'ink';
+import React, { useEffect, useState } from 'react';
+/**
+ * The approvals inbox: every request agents are waiting on, answered from the terminal.
+ *
+ * The same record the phone's Approve button writes, so an answer here and an answer there are
+ * indistinguishable to the agent — it is polling the request on the card either way. What this
+ * adds is a place where all of them are visible at once, for whoever is at a keyboard when
+ * several agents are blocked.
+ */
+const REFRESH_MS = 10_000;
+const age = (iso) => {
+    if (!iso)
+        return '';
+    const s = Math.max(0, Math.round((Date.now() - Date.parse(iso)) / 1000));
+    return s < 60 ? `${s}s` : s < 3600 ? `${Math.round(s / 60)}m` : `${Math.round(s / 3600)}h`;
+};
+const left = (iso) => {
+    const s = Math.round((Date.parse(iso) - Date.now()) / 1000);
+    return s <= 0 ? 'expired' : s < 60 ? `${s}s left` : `${Math.round(s / 60)}m left`;
+};
+function Inbox({ deck, me, onQuit }) {
+    const { exit } = useApp();
+    const [items, setItems] = useState([]);
+    const [selected, setSelected] = useState(0);
+    const [open, setOpen] = useState(false);
+    const [busy, setBusy] = useState(false);
+    const [note, setNote] = useState('');
+    const [error, setError] = useState('');
+    const [, tick] = useState(0);
+    const load = async () => {
+        try {
+            const next = await deck.pendingApprovals();
+            setItems(next);
+            setSelected((i) => Math.min(i, Math.max(0, next.length - 1)));
+            setError('');
+        }
+        catch (e) {
+            setError(`could not load: ${e instanceof Error ? e.message : String(e)}`);
+        }
+    };
+    useEffect(() => {
+        void load();
+        const id = setInterval(() => { void load(); tick((n) => n + 1); }, REFRESH_MS);
+        const clock = setInterval(() => tick((n) => n + 1), 1000);
+        return () => { clearInterval(id); clearInterval(clock); };
+    }, []);
+    const decide = async (state) => {
+        const it = items[selected];
+        if (!it || busy)
+            return;
+        if (it.review && it.review.state !== 'endorsed') {
+            setNote(`${it.request_id} is with the lead (${it.review.state}) — it is not yours to answer yet.`);
+            return;
+        }
+        setBusy(true);
+        try {
+            await deck.decide(it.comment_id, state);
+            setNote(`${state === 'allow' ? 'Approved' : 'Denied'} ${it.request_id} — ${it.sender_name ?? 'the agent'} ${state === 'allow' ? 'runs it now' : 'has been told'}.`);
+            setOpen(false);
+            await load();
+        }
+        catch (e) {
+            setError(`could not decide: ${e instanceof Error ? e.message : String(e)}`);
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    useInput((input, key) => {
+        if (key.escape || input === 'q') {
+            onQuit();
+            exit();
+            return;
+        }
+        if (key.upArrow || input === 'k')
+            setSelected((i) => Math.max(0, i - 1));
+        if (key.downArrow || input === 'j')
+            setSelected((i) => Math.min(items.length - 1, i + 1));
+        if (key.return || input === 'v')
+            setOpen((o) => !o);
+        if (input === 'r')
+            void load();
+        if (input === 'a')
+            void decide('allow');
+        if (input === 'd')
+            void decide('deny');
+    });
+    const it = items[selected];
+    return (React.createElement(Box, { flexDirection: "column" },
+        React.createElement(Text, null,
+            React.createElement(Text, { bold: true }, "Approvals"),
+            React.createElement(Text, { dimColor: true },
+                " \u00B7 ",
+                items.length,
+                " waiting \u00B7 answering as ",
+                me)),
+        error ? React.createElement(Text, { color: "red" },
+            "\u26A0 ",
+            error) : null,
+        items.length === 0 ? (React.createElement(Text, { dimColor: true },
+            "Nothing is waiting. Requests appear here as agents ask; this refreshes every ",
+            REFRESH_MS / 1000,
+            "s.")) : (items.map((a, i) => (React.createElement(Box, { key: a.comment_id, flexDirection: "column" },
+            React.createElement(Text, null,
+                React.createElement(Text, { color: i === selected ? 'cyan' : undefined }, i === selected ? '▸ ' : '  '),
+                React.createElement(Text, { dimColor: true },
+                    age(a.created_at).padStart(3),
+                    " "),
+                React.createElement(Text, { bold: true }, a.sender_name ?? '?'),
+                React.createElement(Text, { dimColor: true },
+                    " \u2192 ",
+                    a.card.code ?? a.card.key),
+                React.createElement(Text, null,
+                    " ",
+                    a.description.length > 90 ? `${a.description.slice(0, 90)}…` : a.description),
+                React.createElement(Text, { dimColor: true },
+                    " \u00B7 ",
+                    left(a.expires_at)),
+                a.review ? (React.createElement(Text, { color: a.review.state === 'endorsed' ? 'green' : 'yellow' },
+                    " \u00B7 ",
+                    a.review.state === 'endorsed' ? `endorsed by ${a.review.decided_by_name ?? 'the lead'}` : `awaiting lead review`)) : null),
+            open && i === selected ? (React.createElement(Box, { marginLeft: 4, marginY: 0, borderStyle: "round", borderColor: "gray", flexDirection: "column", paddingX: 1 },
+                React.createElement(Text, { dimColor: true },
+                    a.card.board_name ?? '',
+                    " \u00B7 ",
+                    a.card.name ?? '',
+                    " \u00B7 ",
+                    a.tool_name,
+                    " \u00B7 ",
+                    a.request_id),
+                React.createElement(Text, null, a.input_preview || '(no preview)'),
+                a.review?.note ? React.createElement(Text, { color: "green" },
+                    "lead: ",
+                    a.review.note) : null)) : null)))),
+        note ? React.createElement(Text, { color: "green" }, note) : null,
+        React.createElement(Text, { dimColor: true },
+            busy ? 'sending… ' : '',
+            it ? 'a approve · d deny · ' : '',
+            "\u2191\u2193 select \u00B7 enter view \u00B7 r refresh \u00B7 q quit")));
+}
+export function startApprovals(deck, me) {
+    return new Promise((resolve) => {
+        const app = render(React.createElement(Inbox, { deck: deck, me: me, onQuit: () => resolve() }));
+        void app.waitUntilExit().then(() => resolve());
+    });
+}
+//# sourceMappingURL=approvals.js.map

package/dist/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../src/approvals.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC1D,OAAO,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAGnD;;;;;;;GAOG;AACH,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,GAAG,GAAG,CAAC,GAAkB,EAAU,EAAE;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC;AAC7F,CAAC,CAAC;AACF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAU,EAAE;IACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;AACpF,CAAC,CAAC;AAEF,SAAS,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAuD;IACtF,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAoB,EAAE,CAAC,CAAC;IAC1D,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAE7B,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,CAAC;YACf,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,QAAQ,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,mBAAmB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,KAAK,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,GAAG,EAAE,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,MAAM,GAAG,KAAK,EAAE,KAAuB,EAAE,EAAE;QAC/C,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,IAAI,IAAI;YAAE,OAAO;QACxB,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAChD,OAAO,CAAC,GAAG,EAAE,CAAC,UAAU,sBAAsB,EAAE,CAAC,MAAM,CAAC,KAAK,oCAAoC,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,UAAU,MAAM,EAAE,CAAC,WAAW,IAAI,WAAW,IAAI,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;YACpK,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,qBAAqB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF,QAAQ,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtB,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC;YAAC,IAAI,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC9D,IAAI,GAAG,CAAC,OAAO,IAAI,KAAK,KAAK,GAAG;YAAE,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,GAAG,CAAC,SAAS,IAAI,KAAK,KAAK,GAAG;YAAE,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1F,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,KAAK,KAAK,GAAG;YAAE,KAAK,IAAI,EAAE,CAAC;QAC/B,IAAI,KAAK,KAAK,GAAG;YAAE,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,GAAG;YAAE,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3B,OAAO,CACL,oBAAC,GAAG,IAAC,aAAa,EAAC,QAAQ;QACzB,oBAAC,IAAI;YACH,oBAAC,IAAI,IAAC,IAAI,sBAAiB;YAC3B,oBAAC,IAAI,IAAC,QAAQ;;gBAAK,KAAK,CAAC,MAAM;;gBAA0B,EAAE,CAAQ,CAC9D;QACN,KAAK,CAAC,CAAC,CAAC,oBAAC,IAAI,IAAC,KAAK,EAAC,KAAK;;YAAI,KAAK,CAAQ,CAAC,CAAC,CAAC,IAAI;QACjD,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACpB,oBAAC,IAAI,IAAC,QAAQ;;YAA+E,UAAU,GAAG,IAAI;iBAAU,CACzH,CAAC,CAAC,CAAC,CACF,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAClB,oBAAC,GAAG,IAAC,GAAG,EAAE,CAAC,CAAC,UAAU,EAAE,aAAa,EAAC,QAAQ;YAC5C,oBAAC,IAAI;gBACH,oBAAC,IAAI,IAAC,KAAK,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAQ;gBACvF,oBAAC,IAAI,IAAC,QAAQ;oBAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;wBAAS;gBACtD,oBAAC,IAAI,IAAC,IAAI,UAAE,CAAC,CAAC,WAAW,IAAI,GAAG,CAAQ;gBACxC,oBAAC,IAAI,IAAC,QAAQ;;oBAAK,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAQ;gBACpD,oBAAC,IAAI;;oBAAG,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAQ;gBAC5F,oBAAC,IAAI,IAAC,QAAQ;;oBAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAQ;gBAC5C,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CACV,oBAAC,IAAI,IAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;;oBAAM,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,eAAe,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAQ,CAC9L,CAAC,CAAC,CAAC,IAAI,CACH;YACN,IAAI,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CACxB,oBAAC,GAAG,IAAC,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAC,OAAO,EAAC,WAAW,EAAC,MAAM,EAAC,aAAa,EAAC,QAAQ,EAAC,QAAQ,EAAE,CAAC;gBACvG,oBAAC,IAAI,IAAC,QAAQ;oBAAE,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE;;oBAAK,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE;;oBAAK,CAAC,CAAC,SAAS;;oBAAK,CAAC,CAAC,UAAU,CAAQ;gBACtG,oBAAC,IAAI,QAAE,CAAC,CAAC,aAAa,IAAI,cAAc,CAAQ;gBAC/C,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,oBAAC,IAAI,IAAC,KAAK,EAAC,OAAO;;oBAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAQ,CAAC,CAAC,CAAC,IAAI,CACrE,CACP,CAAC,CAAC,CAAC,IAAI,CACJ,CACP,CAAC,CACH;QACA,IAAI,CAAC,CAAC,CAAC,oBAAC,IAAI,IAAC,KAAK,EAAC,OAAO,IAAE,IAAI,CAAQ,CAAC,CAAC,CAAC,IAAI;QAChD,oBAAC,IAAI,IAAC,QAAQ;YACX,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;YACvB,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE;mFAC7B,CACH,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAe,EAAE,EAAU;IACxD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,oBAAC,KAAK,IAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,GAAI,CAAC,CAAC;QAC3E,KAAK,GAAG,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/auth.d.ts

@@ -0,0 +1,79 @@
+import type { Config } from './config.js';
+export declare function claudeInstalled(): Promise<boolean>;
+export declare function isRegistered(config: Config): Promise<boolean>;
+/**
+ * Registered AND authorised — the CLI health-checks the server and reports it.
+ * Lets `login` skip the one interactive step when a machine is already set up, so re-running it
+ * is safe and cheap rather than another round of paste-the-redirect.
+ */
+export declare function isConnected(config: Config): Promise<boolean>;
+/**
+ * Register the server with the CLI, in the agent's own repo.
+ *
+ * Deliberately the DEFAULT `local` scope — the user's own per-project config — and not a
+ * `.mcp.json` in the repo. A `.mcp.json` can arrive with a checked-out repo, so Claude Code holds
+ * its servers "awaiting approval" until someone reviews them interactively, and `mcp login`
+ * refuses to authorise one until they do. Writing that file to make FlareDeck reachable therefore
+ * made it unreachable. Local scope needs no approval and leaves the repo untouched.
+ *
+ * Idempotent — re-registering an existing name is not an error.
+ */
+export declare function register(config: Config): Promise<void>;
+/**
+ * Make FlareDeck visible to the agent's SESSIONS, which is a different thing from registering it.
+ *
+ * `claude mcp add` defaults to `local` scope, which lives in ~/.claude.json. The CLI reports that
+ * as Connected — but ~/.claude.json is not a filesystem *settings source*, so an SDK session with
+ * `settingSources: ['project']` never loads it. The result is the worst shape available: the CLI
+ * says everything is fine while the agent has no tools and cannot read the card it was sent.
+ *
+ * So the server goes in the repo's `.mcp.json` (project scope, which IS loaded) and is
+ * pre-approved for this project. The approval matters: a `.mcp.json` can arrive with a checked-out
+ * repo, so Claude Code holds its servers until a human reviews them — reasonable for a repo you
+ * cloned, useless for a file this program just wrote itself.
+ */
+export declare function ensureSessionsSeeFlaredeck(config: Config): void;
+/**
+ * The one interactive step, and only once per machine.
+ *
+ * `--no-browser` prints the authorisation URL instead of trying to open one, which is what makes
+ * this work over SSH: open the URL on any device, sign in, and paste the redirect back. Sign in as
+ * the agent's own account (or as an admin and choose "connect as an agent") so its work is
+ * attributed to it rather than to you.
+ */
+/** Forget the current MCP authorisation, so the next login is a clean choice of account. */
+export declare function logout(config: Config): Promise<void>;
+export declare function login(config: Config): Promise<void>;
+/**
+ * How this machine pays for the model. It must be the Claude subscription — metered API billing
+ * is far too expensive for agents that run unattended for hours.
+ *
+ * Nothing here has to defend against ANTHROPIC_API_KEY: `subscriptionEnv()` in agent.ts removes it
+ * from the environment the Claude process is given, so it cannot be picked up even when it is set
+ * on the box for something else. This only reports what the machine is signed in as.
+ */
+export type ClaudeAuth = {
+    kind: 'subscription' | 'metered' | 'none';
+    detail: string;
+};
+/**
+ * What this machine is signed in as — asked directly, not inferred from a model call.
+ *
+ * It used to run `claude -p 'say ok' --max-turns 1` and read a non-zero exit as "not signed in".
+ * That conflates two unrelated things. A session that spends its single turn on a tool call exits
+ * 1 with `Error: Reached max turns (1)` while perfectly authenticated, so the answer depended on
+ * how the model happened to reply — and in a bare directory it reliably said "no credentials" to
+ * a machine that had them. Setup then ran again, minted a token, and the next start asked again:
+ * a loop with no exit, whose message pointed at the one thing that was not wrong.
+ *
+ * `claude auth status --json` is the question we actually mean. It costs nothing, bills nothing,
+ * and answers the same way every time. It also distinguishes a subscription from metered API
+ * billing, which matters here more than being signed in at all — an agent left running overnight
+ * on a per-token key is a bill nobody agreed to.
+ */
+export declare function claudeAuth(): Promise<ClaudeAuth>;
+/**
+ * Mint a long-lived subscription token for an unattended machine. Interactive, once per box.
+ * The token goes in the environment as CLAUDE_CODE_OAUTH_TOKEN, usually via the service file.
+ */
+export declare function setupToken(): Promise<void>;

package/dist/auth.js

@@ -0,0 +1,181 @@
+import { spawn } from 'node:child_process';
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { subscriptionEnv } from './agent.js';
+/**
+ * Authentication is entirely the Claude CLI's job, and that is the point.
+ *
+ * The Agent SDK runs the Claude Code binary, so an MCP server registered and authorised through
+ * the CLI is the same server an SDK session sees, using the same stored credentials. The CLI
+ * refreshes the OAuth token on its own, which is why a login lasts weeks rather than the hour an
+ * access token lives. Nothing here holds a token, and no long-lived Flaredeck credential exists
+ * for someone to copy off the box.
+ */
+function run(command, args, opts = {}) {
+    return new Promise((resolve) => {
+        const child = spawn(command, args, {
+            stdio: opts.inherit ? 'inherit' : ['ignore', 'pipe', 'pipe'],
+            ...(opts.env ? { env: opts.env } : {}),
+            // MCP registrations and their credentials are per project, so every `claude mcp` call has
+            // to run in the repo the agent works in. Run from anywhere else and `mcp get` answers for
+            // the WRONG project — which is how a login reported success while leaving the agent's own
+            // repo unauthorised and toolless.
+            ...(opts.cwd ? { cwd: opts.cwd } : {}),
+        });
+        let out = '';
+        child.stdout?.on('data', (d) => (out += String(d)));
+        child.stderr?.on('data', (d) => (out += String(d)));
+        child.on('close', (code) => resolve({ code: code ?? 1, out }));
+        child.on('error', (e) => resolve({ code: 1, out: String(e) }));
+    });
+}
+export async function claudeInstalled() {
+    return (await run('claude', ['--version'])).code === 0;
+}
+export async function isRegistered(config) {
+    return (await run('claude', ['mcp', 'get', config.mcpServerName], { cwd: config.repo })).code === 0;
+}
+/**
+ * Registered AND authorised — the CLI health-checks the server and reports it.
+ * Lets `login` skip the one interactive step when a machine is already set up, so re-running it
+ * is safe and cheap rather than another round of paste-the-redirect.
+ */
+export async function isConnected(config) {
+    const { code, out } = await run('claude', ['mcp', 'get', config.mcpServerName], { cwd: config.repo });
+    return code === 0 && /Status:.*Connected/i.test(out);
+}
+/**
+ * Register the server with the CLI, in the agent's own repo.
+ *
+ * Deliberately the DEFAULT `local` scope — the user's own per-project config — and not a
+ * `.mcp.json` in the repo. A `.mcp.json` can arrive with a checked-out repo, so Claude Code holds
+ * its servers "awaiting approval" until someone reviews them interactively, and `mcp login`
+ * refuses to authorise one until they do. Writing that file to make FlareDeck reachable therefore
+ * made it unreachable. Local scope needs no approval and leaves the repo untouched.
+ *
+ * Idempotent — re-registering an existing name is not an error.
+ */
+export async function register(config) {
+    if (await isRegistered(config))
+        return;
+    const { code, out } = await run('claude', [
+        'mcp', 'add', '--transport', 'http', config.mcpServerName, config.mcpUrl,
+    ], { cwd: config.repo });
+    if (code !== 0)
+        throw new Error(`Could not register the MCP server:\n${out}`);
+}
+/**
+ * Make FlareDeck visible to the agent's SESSIONS, which is a different thing from registering it.
+ *
+ * `claude mcp add` defaults to `local` scope, which lives in ~/.claude.json. The CLI reports that
+ * as Connected — but ~/.claude.json is not a filesystem *settings source*, so an SDK session with
+ * `settingSources: ['project']` never loads it. The result is the worst shape available: the CLI
+ * says everything is fine while the agent has no tools and cannot read the card it was sent.
+ *
+ * So the server goes in the repo's `.mcp.json` (project scope, which IS loaded) and is
+ * pre-approved for this project. The approval matters: a `.mcp.json` can arrive with a checked-out
+ * repo, so Claude Code holds its servers until a human reviews them — reasonable for a repo you
+ * cloned, useless for a file this program just wrote itself.
+ */
+export function ensureSessionsSeeFlaredeck(config) {
+    const file = join(config.repo, '.mcp.json');
+    const existing = existsSync(file) ? JSON.parse(readFileSync(file, 'utf8') || '{}') : {};
+    const servers = existing.mcpServers ?? {};
+    if (!servers[config.mcpServerName]) {
+        servers[config.mcpServerName] = { type: 'http', url: config.mcpUrl };
+        writeFileSync(file, `${JSON.stringify({ ...existing, mcpServers: servers }, null, 2)}\n`, 'utf8');
+    }
+    // Pre-approve it for this project, or the entry sits "awaiting approval" and stays invisible.
+    const claudeJson = join(homedir(), '.claude.json');
+    if (!existsSync(claudeJson))
+        return;
+    try {
+        const cfg = JSON.parse(readFileSync(claudeJson, 'utf8') || '{}');
+        const project = (cfg.projects ??= {})[config.repo] ?? ((cfg.projects[config.repo] = {}));
+        const enabled = (project.enabledMcpjsonServers ??= []);
+        if (!enabled.includes(config.mcpServerName)) {
+            enabled.push(config.mcpServerName);
+            writeFileSync(claudeJson, JSON.stringify(cfg, null, 2), 'utf8');
+        }
+    }
+    catch {
+        /* leave the CLI's own file alone if it is not what we expect */
+    }
+}
+/**
+ * The one interactive step, and only once per machine.
+ *
+ * `--no-browser` prints the authorisation URL instead of trying to open one, which is what makes
+ * this work over SSH: open the URL on any device, sign in, and paste the redirect back. Sign in as
+ * the agent's own account (or as an admin and choose "connect as an agent") so its work is
+ * attributed to it rather than to you.
+ */
+/** Forget the current MCP authorisation, so the next login is a clean choice of account. */
+export async function logout(config) {
+    await run('claude', ['mcp', 'logout', config.mcpServerName], { cwd: config.repo });
+}
+export async function login(config) {
+    const { code } = await run('claude', ['mcp', 'login', config.mcpServerName, '--no-browser'], {
+        inherit: true,
+        cwd: config.repo,
+    });
+    if (code !== 0)
+        throw new Error('Authorisation did not complete.');
+}
+/**
+ * What this machine is signed in as — asked directly, not inferred from a model call.
+ *
+ * It used to run `claude -p 'say ok' --max-turns 1` and read a non-zero exit as "not signed in".
+ * That conflates two unrelated things. A session that spends its single turn on a tool call exits
+ * 1 with `Error: Reached max turns (1)` while perfectly authenticated, so the answer depended on
+ * how the model happened to reply — and in a bare directory it reliably said "no credentials" to
+ * a machine that had them. Setup then ran again, minted a token, and the next start asked again:
+ * a loop with no exit, whose message pointed at the one thing that was not wrong.
+ *
+ * `claude auth status --json` is the question we actually mean. It costs nothing, bills nothing,
+ * and answers the same way every time. It also distinguishes a subscription from metered API
+ * billing, which matters here more than being signed in at all — an agent left running overnight
+ * on a per-token key is a bill nobody agreed to.
+ */
+export async function claudeAuth() {
+    if (process.env['CLAUDE_CODE_OAUTH_TOKEN']) {
+        return { kind: 'subscription', detail: 'CLAUDE_CODE_OAUTH_TOKEN (from `claude setup-token`)' };
+    }
+    const { code, out } = await run('claude', ['auth', 'status', '--json'], { env: subscriptionEnv() });
+    if (code !== 0) {
+        return { kind: 'none', detail: 'could not ask the Claude CLI who it is signed in as' };
+    }
+    let status;
+    try {
+        status = JSON.parse(out.slice(out.indexOf('{'), out.lastIndexOf('}') + 1));
+    }
+    catch {
+        return { kind: 'none', detail: 'could not read the Claude CLI sign-in status' };
+    }
+    if (!status.loggedIn) {
+        return { kind: 'none', detail: 'no Claude credentials found — run `claude setup-token`' };
+    }
+    // Signed in, but billed per token. Say so plainly rather than starting and letting it run.
+    if (status.apiProvider && status.apiProvider !== 'firstParty') {
+        return {
+            kind: 'metered',
+            detail: `signed in via ${status.apiProvider} — metered API billing, not a subscription`,
+        };
+    }
+    const plan = status.subscriptionType ? ` (${status.subscriptionType})` : '';
+    return {
+        kind: 'subscription',
+        detail: `signed in to the Claude CLI as ${status.authMethod ?? 'claude.ai'}${plan}`,
+    };
+}
+/**
+ * Mint a long-lived subscription token for an unattended machine. Interactive, once per box.
+ * The token goes in the environment as CLAUDE_CODE_OAUTH_TOKEN, usually via the service file.
+ */
+export async function setupToken() {
+    const { code } = await run('claude', ['setup-token'], { inherit: true });
+    if (code !== 0)
+        throw new Error('Could not set up a Claude token.');
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7C;;;;;;;;GAQG;AAEH,SAAS,GAAG,CACV,OAAe,EACf,IAAc,EACd,OAAsF,EAAE;IAExF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YAC5D,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,0FAA0F;YAC1F,0FAA0F;YAC1F,0FAA0F;YAC1F,kCAAkC;YAClC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC,CAAC;QACH,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,OAAO,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc;IAC/C,OAAO,CAAC,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;AACtG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAc;IAC9C,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACtG,OAAO,IAAI,KAAK,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAc;IAC3C,IAAI,MAAM,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO;IACvC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE;QACxC,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM;KACzE,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACzB,IAAI,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAQ,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACrE,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpG,CAAC;IAED,8FAA8F;IAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACzF,MAAM,OAAO,GAAa,CAAC,OAAO,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACnC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,MAAc;IACzC,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,MAAc;IACxC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE;QAC3F,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,MAAM,CAAC,IAAI;KACjB,CAAC,CAAC;IACH,IAAI,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACrE,CAAC;AAYD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;IACjG,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC;IACpG,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,MAAoG,CAAC;IACzG,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IAC5F,CAAC;IACD,2FAA2F;IAC3F,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;QAC9D,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,iBAAiB,MAAM,CAAC,WAAW,4CAA4C;SACxF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,kCAAkC,MAAM,CAAC,UAAU,IAAI,WAAW,GAAG,IAAI,EAAE;KACpF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACtE,CAAC"}

package/dist/automode.d.ts

@@ -0,0 +1,33 @@
+import { type Config } from './config.js';
+/**
+ * What the auto-mode classifier is told about this machine.
+ *
+ * In auto mode a second model reviews each action instead of a human. By default it trusts only
+ * the working directory and the repo's own remotes, so ordinary agent work — pushing a branch,
+ * reaching the Flaredeck API, resetting a scratch database — looks like it could be exfiltration
+ * and gets blocked. Describing the environment is how the judge stops guessing.
+ *
+ * Entries are prose, not patterns: "write them the way you would describe your infrastructure to
+ * a new engineer". `$defaults` splices the built-in entries back in — omitting it would silently
+ * discard them, including the built-in data-exfiltration rule.
+ */
+export type Environment = {
+    organization: string;
+    /** Hosts the agent legitimately talks to. */
+    trustedDomains: string[];
+    /** Branches, hosts or namespaces that count as production. */
+    sensitiveTargets: string[];
+    /** True when this box is a dedicated, disposable sandbox rather than someone's laptop. */
+    sandboxed: boolean;
+};
+export declare const DEFAULT_ENVIRONMENT: Environment;
+/**
+ * The settings the agent runs under, written OUTSIDE the repo on purpose.
+ *
+ * The classifier deliberately refuses to read `autoMode` from a repo's `.claude/settings.json`,
+ * "so a checked-in repo or a build step could not otherwise inject its own allow rules". The same
+ * reasoning applies here with more force: the agent can edit its own checkout, so any policy kept
+ * there is policy the agent could rewrite. Keeping it beside the agent's config means the thing
+ * being governed cannot reach the thing governing it.
+ */
+export declare function writeAutoModeSettings(config: Config, env?: Environment): string;