@openape/ape-agent 2.8.12 → 2.8.14

package/dist/bridge.mjs

@@ -1053,6 +1053,7 @@ import { ofetch as ofetch2 } from "ofetch";
 import { Buffer as Buffer3 } from "buffer";
 import { createPrivateKey } from "crypto";
 import { ofetch as ofetch4 } from "ofetch";
+import { ofetch as ofetch5 } from "ofetch";
 function getConfigDir() {
   const override = process.env.OPENAPE_CLI_AUTH_HOME;
   if (override) return override;
@@ -1398,7 +1399,7 @@ import { decodeJwt } from "jose";
 import WebSocket from "ws";
 
 // src/chat-api.ts
-import { ofetch as ofetch5 } from "ofetch";
+import { ofetch as ofetch6 } from "ofetch";
 var MAX_BODY = 1e4;
 var ChatApi = class {
   constructor(endpoint, bearer) {
@@ -1414,7 +1415,7 @@ var ChatApi = class {
     if (opts.replyTo) payload.reply_to = opts.replyTo;
     if (opts.threadId) payload.thread_id = opts.threadId;
     if (opts.streaming) payload.streaming = true;
-    const result = await ofetch5(url, {
+    const result = await ofetch6(url, {
       method: "POST",
       headers: { Authorization: await this.bearer() },
       body: payload
@@ -1429,14 +1430,14 @@ var ChatApi = class {
    */
   async listMessages(roomId, threadId, limit = 50) {
     const url = `${this.endpoint}/api/rooms/${encodeURIComponent(roomId)}/messages?thread_id=${encodeURIComponent(threadId)}&limit=${limit}`;
-    return await ofetch5(url, {
+    return await ofetch6(url, {
       method: "GET",
       headers: { Authorization: await this.bearer() }
     });
   }
   async requestContact(peerEmail) {
     const url = `${this.endpoint}/api/contacts`;
-    return await ofetch5(url, {
+    return await ofetch6(url, {
       method: "POST",
       headers: { Authorization: await this.bearer() },
       body: { email: peerEmail }
@@ -1444,14 +1445,14 @@ var ChatApi = class {
   }
   async listContacts() {
     const url = `${this.endpoint}/api/contacts`;
-    return await ofetch5(url, {
+    return await ofetch6(url, {
       method: "GET",
       headers: { Authorization: await this.bearer() }
     });
   }
   async acceptContact(peerEmail) {
     const url = `${this.endpoint}/api/contacts/${encodeURIComponent(peerEmail)}/accept`;
-    return await ofetch5(url, {
+    return await ofetch6(url, {
       method: "POST",
       headers: { Authorization: await this.bearer() }
     });
@@ -1464,7 +1465,7 @@ var ChatApi = class {
    */
   async createThread(roomId, name) {
     const url = `${this.endpoint}/api/rooms/${encodeURIComponent(roomId)}/threads`;
-    return await ofetch5(url, {
+    return await ofetch6(url, {
       method: "POST",
       headers: { Authorization: await this.bearer() },
       body: { name: name.slice(0, 100) }
@@ -1492,7 +1493,7 @@ var ChatApi = class {
     if (opts.streaming !== void 0) payload.streaming = opts.streaming;
     if (opts.streamingStatus !== void 0) payload.streaming_status = opts.streamingStatus;
     if (Object.keys(payload).length === 0) return;
-    await ofetch5(url, {
+    await ofetch6(url, {
       method: "PATCH",
       headers: { Authorization: await this.bearer() },
       body: payload
@@ -1505,12 +1506,133 @@ function clamp(s2, max) {
   return `${s2.slice(0, max - 1)}\u2026`;
 }
 
+// src/troop-chat-api.ts
+import { ofetch as ofetch7 } from "ofetch";
+var MAX_BODY2 = 64 * 1024;
+var SYNTHETIC_THREAD_ID = "main";
+function asHistory(msg, agentEmail, ownerEmail) {
+  return {
+    id: msg.id,
+    roomId: msg.chatId,
+    threadId: SYNTHETIC_THREAD_ID,
+    senderEmail: msg.role === "agent" ? agentEmail : ownerEmail,
+    senderAct: msg.role,
+    body: msg.body,
+    replyTo: msg.replyTo,
+    createdAt: msg.createdAt
+  };
+}
+function asPosted(msg) {
+  return {
+    id: msg.id,
+    roomId: msg.chatId,
+    threadId: SYNTHETIC_THREAD_ID,
+    body: msg.body,
+    createdAt: msg.createdAt
+  };
+}
+var TroopChatApi = class {
+  constructor(endpoint, bearer) {
+    this.endpoint = endpoint;
+    this.bearer = bearer;
+  }
+  endpoint;
+  bearer;
+  bootstrap = null;
+  /** Resolve + cache the agent's chat row (lazy fetch on first use). */
+  async getBootstrap() {
+    if (this.bootstrap) return this.bootstrap;
+    this.bootstrap = await ofetch7(`${this.endpoint}/api/agents/me/chat`, {
+      method: "GET",
+      headers: { Authorization: await this.bearer() }
+    });
+    return this.bootstrap;
+  }
+  /** chat.id + (lazy-fetched) ownerEmail for the bridge's frame-translation path. */
+  async getChatContext() {
+    const b2 = await this.getBootstrap();
+    return { chatId: b2.chat.id, ownerEmail: b2.chat.ownerEmail, agentEmail: b2.chat.agentEmail };
+  }
+  async postMessage(roomId, body, opts = {}) {
+    void roomId;
+    void opts.threadId;
+    const payload = {
+      body: body.length > MAX_BODY2 ? `${body.slice(0, MAX_BODY2 - 1)}\u2026` : body
+    };
+    if (opts.replyTo) payload.reply_to = opts.replyTo;
+    if (opts.streaming) payload.streaming = true;
+    const msg = await ofetch7(`${this.endpoint}/api/agents/me/chat/messages`, {
+      method: "POST",
+      headers: { Authorization: await this.bearer() },
+      body: payload
+    });
+    return asPosted(msg);
+  }
+  async listMessages(roomId, threadId, limit = 50) {
+    void roomId;
+    void threadId;
+    void limit;
+    const fresh = await ofetch7(`${this.endpoint}/api/agents/me/chat`, {
+      method: "GET",
+      headers: { Authorization: await this.bearer() }
+    });
+    this.bootstrap = fresh;
+    return fresh.messages.map((m2) => asHistory(m2, fresh.chat.agentEmail, fresh.chat.ownerEmail));
+  }
+  async patchMessage(messageId, opts = {}) {
+    const payload = {};
+    if (opts.body !== void 0) {
+      payload.body = opts.body.length > MAX_BODY2 ? `${opts.body.slice(0, MAX_BODY2 - 1)}\u2026` : opts.body;
+    }
+    if (opts.streaming !== void 0) payload.streaming = opts.streaming;
+    if (opts.streamingStatus !== void 0) payload.streaming_status = opts.streamingStatus;
+    if (Object.keys(payload).length === 0) return;
+    await ofetch7(`${this.endpoint}/api/agents/me/chat/messages/${encodeURIComponent(messageId)}`, {
+      method: "PATCH",
+      headers: { Authorization: await this.bearer() },
+      body: payload
+    });
+  }
+  /**
+   * Troop's chat doesn't have contacts — synthesize a single
+   *  always-connected entry pointing at the owner so the bridge's
+   *  initial-contact + allowlist flows are no-ops.
+   */
+  async listContacts() {
+    const b2 = await this.getBootstrap();
+    return [{
+      peerEmail: b2.chat.ownerEmail,
+      myStatus: "accepted",
+      theirStatus: "accepted",
+      connected: true,
+      roomId: b2.chat.id
+    }];
+  }
+  async requestContact(peerEmail) {
+    void peerEmail;
+    return (await this.listContacts())[0];
+  }
+  async acceptContact(peerEmail) {
+    void peerEmail;
+    return (await this.listContacts())[0];
+  }
+  /**
+   * Troop has no threads — return a synthetic one. The bridge's
+   *  cron-runner falls back to the main thread on createThread
+   *  failure already, so a stable "main" stand-in is the right shape.
+   */
+  async createThread(roomId, name) {
+    void roomId;
+    return { id: SYNTHETIC_THREAD_ID, name: name.slice(0, 100) };
+  }
+};
+
 // src/cron-runner.ts
 import { existsSync as existsSync4, mkdirSync as mkdirSync3, readdirSync as readdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir6 } from "os";
 import { join as join6 } from "path";
 
-// ../../packages/apes/dist/chunk-OOKB2IL2.js
+// ../../packages/apes/dist/chunk-ZEUSCNCH.js
 import { spawn } from "child_process";
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 import { homedir as homedir3 } from "os";
@@ -1530,8 +1652,10 @@ function capStdio(s2) {
 [truncated to ${MAX_STDIO_BYTES} bytes]`;
 }
 function runApeShell(cmd, timeoutMs = DEFAULT_TIMEOUT_MS) {
+  const bypass = process.env.OPENAPE_BYPASS_APE_SHELL === "1";
+  const [execBin, execArgs] = bypass ? ["/bin/bash", ["-c", cmd]] : [BIN, ["-c", cmd]];
   return new Promise((resolveResult) => {
-    const child = spawn(BIN, ["-c", cmd], {
+    const child = spawn(execBin, execArgs, {
       env: { ...process.env, APE_WAIT: "1" },
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -1566,7 +1690,7 @@ function runApeShell(cmd, timeoutMs = DEFAULT_TIMEOUT_MS) {
           stderr: "",
           exit_code: -1,
           error: spawnError.message,
-          hint: `Could not exec '${BIN}'. The agent host needs @openape/apes installed globally so ape-shell is on PATH.`
+          hint: `Could not exec '${execBin}'. The agent host needs @openape/apes installed globally so ape-shell is on PATH (or set OPENAPE_BYPASS_APE_SHELL=1 to skip the gated shell entirely \u2014 meant for the OpenApe pod where the container IS the sandbox).`
         });
         return;
       }
@@ -2324,6 +2448,52 @@ function previewJson(value, max = 500) {
   }
   return s2.length > max ? `${s2.slice(0, max)}\u2026` : s2;
 }
+async function aggregateChatStream(res) {
+  if (!res.body) throw new Error("LiteLLM streaming response had no body");
+  const reader = res.body.getReader();
+  const decoder = new TextDecoder();
+  let buf = "";
+  let content = "";
+  const toolCalls = /* @__PURE__ */ new Map();
+  let finishReason;
+  while (true) {
+    const { value, done } = await reader.read();
+    if (done) break;
+    buf += decoder.decode(value, { stream: true });
+    while (true) {
+      const nl = buf.indexOf("\n");
+      if (nl === -1) break;
+      const line = buf.slice(0, nl).trim();
+      buf = buf.slice(nl + 1);
+      if (!line.startsWith("data:")) continue;
+      const payload = line.slice(5).trim();
+      if (!payload || payload === "[DONE]") continue;
+      let chunk;
+      try {
+        chunk = JSON.parse(payload);
+      } catch {
+        continue;
+      }
+      const ch0 = chunk.choices?.[0];
+      const delta = ch0?.delta;
+      if (delta?.content) content += delta.content;
+      if (delta?.tool_calls) {
+        for (const tc of delta.tool_calls) {
+          const idx = tc.index ?? 0;
+          const existing = toolCalls.get(idx) ?? { id: "", type: "function", function: { name: "", arguments: "" } };
+          if (tc.id) existing.id = tc.id;
+          if (tc.function?.name) existing.function.name = tc.function.name;
+          if (tc.function?.arguments) existing.function.arguments += tc.function.arguments;
+          toolCalls.set(idx, existing);
+        }
+      }
+      if (ch0?.finish_reason) finishReason = ch0.finish_reason;
+    }
+  }
+  const message = { role: "assistant", content: content || null };
+  if (toolCalls.size > 0) message.tool_calls = Array.from(toolCalls.values());
+  return { choices: [{ message, finish_reason: finishReason }] };
+}
 async function runLoop(opts) {
   const fetchFn = opts.fetchImpl ?? fetch;
   const trace = [];
@@ -2334,23 +2504,25 @@ async function runLoop(opts) {
   ];
   const tools = asOpenAiTools(opts.tools);
   for (let step = 1; step <= opts.maxSteps; step++) {
+    const requestBody = {
+      model: opts.config.model,
+      messages,
+      ...tools.length > 0 ? { tools, tool_choice: "auto" } : {},
+      ...opts.streamAggregate ? { stream: true } : {}
+    };
     const res = await fetchFn(`${opts.config.apiBase}/chat/completions`, {
       method: "POST",
       headers: {
         "authorization": `Bearer ${opts.config.apiKey}`,
         "content-type": "application/json"
       },
-      body: JSON.stringify({
-        model: opts.config.model,
-        messages,
-        ...tools.length > 0 ? { tools, tool_choice: "auto" } : {}
-      })
+      body: JSON.stringify(requestBody)
     });
     if (!res.ok) {
       const text = await res.text().catch(() => "");
       throw new Error(`LiteLLM ${res.status}: ${text.slice(0, 500)}`);
     }
-    const data = await res.json();
+    const data = opts.streamAggregate ? await aggregateChatStream(res) : await res.json();
     const choice = data.choices?.[0];
     if (!choice) throw new Error("LiteLLM response had no choices");
     const assistant = choice.message;
@@ -2422,7 +2594,7 @@ async function runLoop(opts) {
 }
 var RPC_SESSION_TTL_MS = 60 * 60 * 1e3;
 
-// ../../packages/apes/dist/chunk-DYSFQ26B.js
+// ../../packages/apes/dist/chunk-PEA2RDWK.js
 init_chunk_OBF7IMQ2();
 import { createHash } from "crypto";
 import { existsSync as existsSync3, readdirSync as readdirSync2, readFileSync as readFileSync4 } from "fs";
@@ -2460,6 +2632,149 @@ async function computeArgvHash(argv2) {
   const digest2 = Array.from(hashArray).map((b2) => b2.toString(16).padStart(2, "0")).join("");
   return `SHA-256:${digest2}`;
 }
+function parseOptionArgs(tokens, valueOptions) {
+  const options = {};
+  const positionals = [];
+  const takesValue = new Set(valueOptions ?? []);
+  for (let index = 0; index < tokens.length; index += 1) {
+    const token = tokens[index];
+    if (token.startsWith("--")) {
+      const stripped = token.slice(2);
+      const eqIndex = stripped.indexOf("=");
+      if (eqIndex >= 0) {
+        options[stripped.slice(0, eqIndex)] = stripped.slice(eqIndex + 1);
+        continue;
+      }
+      const next = tokens[index + 1];
+      if (next && !next.startsWith("-")) {
+        options[stripped] = next;
+        index += 1;
+        continue;
+      }
+      options[stripped] = "true";
+    } else if (token.startsWith("-") && token.length > 1 && !/^-\d/.test(token)) {
+      const key = token.slice(1);
+      if (key.length === 1 && !takesValue.has(key)) {
+        options[key] = "true";
+      } else {
+        const next = tokens[index + 1];
+        if (next && !next.startsWith("-")) {
+          options[key] = next;
+          index += 1;
+        } else {
+          options[key] = "true";
+        }
+      }
+    } else {
+      positionals.push(token);
+    }
+  }
+  return { options, positionals };
+}
+function resolveBindingToken(binding, bindings) {
+  const match = binding.match(/^\{([^}|]+)(?:\|([^}]+))?\}$/);
+  if (!match) return binding;
+  const [, name, transform] = match;
+  const value = bindings[name];
+  if (!value) throw new Error(`Missing binding: ${name}`);
+  if (!transform) return value;
+  if (transform === "owner" || transform === "name") {
+    const [owner, repo] = value.split("/");
+    if (!owner || !repo) throw new Error(`Binding ${name} must be in owner/name form`);
+    return transform === "owner" ? owner : repo;
+  }
+  throw new Error(`Unsupported binding transform: ${transform}`);
+}
+function renderTemplate(template, bindings) {
+  return template.replace(/\{([^}]+)\}/g, (_3, expression) => resolveBindingToken(`{${expression}}`, bindings));
+}
+function parseResourceChain(chain, bindings) {
+  return chain.map((entry) => {
+    const [resource, selectorSpec = "*"] = entry.split(":", 2);
+    if (!resource) throw new Error(`Invalid resource chain entry: ${entry}`);
+    if (selectorSpec === "*") return { resource };
+    const selector = Object.fromEntries(
+      selectorSpec.split(",").map((segment) => {
+        const [key, rawValue] = segment.split("=", 2);
+        if (!key || !rawValue) throw new Error(`Invalid selector segment: ${segment}`);
+        return [key, renderTemplate(rawValue, bindings)];
+      })
+    );
+    return { resource, selector };
+  });
+}
+function matchOperation(operation, argv2) {
+  if (argv2.length < operation.command.length) return null;
+  const prefix = argv2.slice(0, operation.command.length);
+  if (prefix.join("\0") !== operation.command.join("\0")) return null;
+  const remainder = argv2.slice(operation.command.length);
+  const { options, positionals } = parseOptionArgs(remainder, operation.required_options);
+  const expectedPositionals = operation.positionals ?? [];
+  if (positionals.length !== expectedPositionals.length) return null;
+  for (const option of operation.required_options ?? []) {
+    if (!options[option]) return null;
+  }
+  const bindings = { ...options };
+  for (let index = 0; index < expectedPositionals.length; index += 1) {
+    const name = expectedPositionals[index];
+    const value = positionals[index];
+    if (name.startsWith("=")) {
+      if (value !== name.slice(1)) return null;
+      continue;
+    }
+    bindings[name] = value;
+  }
+  return bindings;
+}
+function expandCombinedFlags(argv2) {
+  return argv2.flatMap((token) => {
+    if (token.startsWith("-") && !token.startsWith("--") && token.length > 2 && /^-[a-z]+$/i.test(token)) {
+      return Array.from(token.slice(1), (c3) => `-${c3}`);
+    }
+    return [token];
+  });
+}
+function tryMatch(operations, argv2) {
+  return operations.flatMap((operation) => {
+    try {
+      const bindings = matchOperation(operation, argv2);
+      return bindings ? [{ operation, bindings }] : [];
+    } catch {
+      return [];
+    }
+  });
+}
+function matchArgvToOperation(operations, commandArgv) {
+  let matches = tryMatch(operations, commandArgv);
+  if (matches.length === 0) {
+    const expanded = expandCombinedFlags(commandArgv);
+    if (expanded.length !== commandArgv.length) {
+      matches = tryMatch(operations, expanded);
+    }
+  }
+  if (matches.length === 0) return null;
+  if (matches.length > 1) {
+    matches.sort((a2, b2) => b2.operation.command.length - a2.operation.command.length);
+    matches = [matches[0]];
+  }
+  return matches[0];
+}
+function buildCliAuthDetail(cliId, operation, bindings) {
+  const resource_chain = parseResourceChain(operation.resource_chain, bindings);
+  const detail = {
+    type: "openape_cli",
+    cli_id: cliId,
+    operation_id: operation.id,
+    resource_chain,
+    action: operation.action,
+    permission: "",
+    display: renderTemplate(operation.display, bindings),
+    risk: operation.risk,
+    ...operation.exact_command ? { constraints: { exact_command: true } } : {}
+  };
+  detail.permission = canonicalizeCliPermission(detail);
+  return detail;
+}
 
 // ../../node_modules/.pnpm/consola@3.4.2/node_modules/consola/dist/core.mjs
 var LogLevels = {
@@ -3562,7 +3877,7 @@ function _getDefaultLogLevel() {
 }
 var consola = createConsola2();
 
-// ../../packages/apes/dist/chunk-DYSFQ26B.js
+// ../../packages/apes/dist/chunk-PEA2RDWK.js
 var import_shell_quote = __toESM(require_shell_quote(), 1);
 
 // ../../node_modules/.pnpm/citty@0.2.2/node_modules/citty/dist/index.mjs
@@ -3571,7 +3886,7 @@ function defineCommand(def) {
   return def;
 }
 
-// ../../packages/apes/dist/chunk-DYSFQ26B.js
+// ../../packages/apes/dist/chunk-PEA2RDWK.js
 import { homedir as homedir52 } from "os";
 import { join as join5 } from "path";
 function parseKeyValue(line) {
@@ -3744,131 +4059,6 @@ function loadAdapter(cliId, explicitPath) {
 }
 var REGISTRY_URL = process.env.SHAPES_REGISTRY_URL ?? "https://raw.githubusercontent.com/openape-ai/shapes-registry/main/registry.json";
 var CACHE_TTL_MS = 60 * 60 * 1e3;
-function parseOptionArgs(tokens, valueOptions) {
-  const options = {};
-  const positionals = [];
-  const takesValue = new Set(valueOptions ?? []);
-  for (let index = 0; index < tokens.length; index += 1) {
-    const token = tokens[index];
-    if (token.startsWith("--")) {
-      const stripped = token.slice(2);
-      const eqIndex = stripped.indexOf("=");
-      if (eqIndex >= 0) {
-        options[stripped.slice(0, eqIndex)] = stripped.slice(eqIndex + 1);
-        continue;
-      }
-      const next = tokens[index + 1];
-      if (next && !next.startsWith("-")) {
-        options[stripped] = next;
-        index += 1;
-        continue;
-      }
-      options[stripped] = "true";
-    } else if (token.startsWith("-") && token.length > 1 && !/^-\d/.test(token)) {
-      const key = token.slice(1);
-      if (key.length === 1 && !takesValue.has(key)) {
-        options[key] = "true";
-      } else {
-        const next = tokens[index + 1];
-        if (next && !next.startsWith("-")) {
-          options[key] = next;
-          index += 1;
-        } else {
-          options[key] = "true";
-        }
-      }
-    } else {
-      positionals.push(token);
-    }
-  }
-  return { options, positionals };
-}
-function resolveBindingToken(binding, bindings) {
-  const match = binding.match(/^\{([^}|]+)(?:\|([^}]+))?\}$/);
-  if (!match)
-    return binding;
-  const [, name, transform] = match;
-  const value = bindings[name];
-  if (!value)
-    throw new Error(`Missing binding: ${name}`);
-  if (!transform)
-    return value;
-  if (transform === "owner" || transform === "name") {
-    const [owner, repo] = value.split("/");
-    if (!owner || !repo)
-      throw new Error(`Binding ${name} must be in owner/name form`);
-    return transform === "owner" ? owner : repo;
-  }
-  throw new Error(`Unsupported binding transform: ${transform}`);
-}
-function renderTemplate(template, bindings) {
-  return template.replace(/\{([^}]+)\}/g, (_3, expression) => resolveBindingToken(`{${expression}}`, bindings));
-}
-function parseResourceChain(chain, bindings) {
-  return chain.map((entry) => {
-    const [resource, selectorSpec = "*"] = entry.split(":", 2);
-    if (!resource)
-      throw new Error(`Invalid resource chain entry: ${entry}`);
-    if (selectorSpec === "*") {
-      return { resource };
-    }
-    const selector = Object.fromEntries(
-      selectorSpec.split(",").map((segment) => {
-        const [key, rawValue] = segment.split("=", 2);
-        if (!key || !rawValue)
-          throw new Error(`Invalid selector segment: ${segment}`);
-        return [key, renderTemplate(rawValue, bindings)];
-      })
-    );
-    return { resource, selector };
-  });
-}
-function matchOperation(operation, argv2) {
-  if (argv2.length < operation.command.length)
-    return null;
-  const prefix = argv2.slice(0, operation.command.length);
-  if (prefix.join("\0") !== operation.command.join("\0"))
-    return null;
-  const remainder = argv2.slice(operation.command.length);
-  const { options, positionals } = parseOptionArgs(remainder, operation.required_options);
-  const expectedPositionals = operation.positionals ?? [];
-  if (positionals.length !== expectedPositionals.length)
-    return null;
-  for (const option of operation.required_options ?? []) {
-    if (!options[option])
-      return null;
-  }
-  const bindings = { ...options };
-  for (let index = 0; index < expectedPositionals.length; index += 1) {
-    const name = expectedPositionals[index];
-    const value = positionals[index];
-    if (name.startsWith("=")) {
-      if (value !== name.slice(1))
-        return null;
-      continue;
-    }
-    bindings[name] = value;
-  }
-  return bindings;
-}
-function expandCombinedFlags(argv2) {
-  return argv2.flatMap((token) => {
-    if (token.startsWith("-") && !token.startsWith("--") && token.length > 2 && /^-[a-z]+$/i.test(token)) {
-      return Array.from(token.slice(1), (c3) => `-${c3}`);
-    }
-    return [token];
-  });
-}
-function tryMatch(operations, argv2) {
-  return operations.flatMap((operation) => {
-    try {
-      const bindings = matchOperation(operation, argv2);
-      return bindings ? [{ operation, bindings }] : [];
-    } catch {
-      return [];
-    }
-  });
-}
 async function resolveCommand(loaded, fullArgv) {
   const [executable, ...commandArgv] = fullArgv;
   if (!executable) {
@@ -3877,34 +4067,12 @@ async function resolveCommand(loaded, fullArgv) {
   if (executable !== loaded.adapter.cli.executable) {
     throw new Error(`Adapter ${loaded.adapter.cli.id} expects executable ${loaded.adapter.cli.executable}, got ${executable}`);
   }
-  let matches = tryMatch(loaded.adapter.operations, commandArgv);
-  if (matches.length === 0) {
-    const expanded = expandCombinedFlags(commandArgv);
-    if (expanded.length !== commandArgv.length) {
-      matches = tryMatch(loaded.adapter.operations, expanded);
-    }
-  }
-  if (matches.length === 0) {
+  const match = matchArgvToOperation(loaded.adapter.operations, commandArgv);
+  if (!match) {
     throw new Error(`No adapter operation matched: ${fullArgv.join(" ")}`);
   }
-  if (matches.length > 1) {
-    matches.sort((a2, b2) => b2.operation.command.length - a2.operation.command.length);
-    matches = [matches[0]];
-  }
-  const { operation, bindings } = matches[0];
-  const resource_chain = parseResourceChain(operation.resource_chain, bindings);
-  const detail = {
-    type: "openape_cli",
-    cli_id: loaded.adapter.cli.id,
-    operation_id: operation.id,
-    resource_chain,
-    action: operation.action,
-    permission: "",
-    display: renderTemplate(operation.display, bindings),
-    risk: operation.risk,
-    ...operation.exact_command ? { constraints: { exact_command: true } } : {}
-  };
-  detail.permission = canonicalizeCliPermission(detail);
+  const { operation, bindings } = match;
+  const detail = buildCliAuthDetail(loaded.adapter.cli.id, operation, bindings);
   return {
     adapter: loaded.adapter,
     source: loaded.source,
@@ -3975,7 +4143,7 @@ function extractOption(args, name) {
 }
 var AUTH_FILE2 = join5(homedir52(), ".config", "apes", "auth.json");
 
-// ../../packages/apes/dist/chunk-4KPKANZT.js
+// ../../packages/apes/dist/chunk-NYJSBFLG.js
 init_chunk_OBF7IMQ2();
 var debug = process.argv.includes("--debug");
 
@@ -4294,7 +4462,7 @@ function readAgentIdentity() {
   const ownerEmail = parsed.owner_email ?? process.env.OPENAPE_OWNER_EMAIL;
   if (!ownerEmail) {
     throw new Error(
-      `auth.json at ${path} missing 'owner_email' and no OPENAPE_OWNER_EMAIL env var set \u2014 re-spawn the agent with @openape/apes >= 0.28 or add OPENAPE_OWNER_EMAIL to the launchd plist`
+      `auth.json at ${path} missing 'owner_email' and no OPENAPE_OWNER_EMAIL env var set \u2014 re-spawn the agent with @openape/apes >= 0.28 or set OPENAPE_OWNER_EMAIL in the container env`
     );
   }
   return { email: parsed.email, ownerEmail, idp: parsed.idp };
@@ -4794,6 +4962,8 @@ function readConfig() {
       "APE_CHAT_BRIDGE_MODEL is not set. Set it in the bridge .env (usually `~/Library/Application Support/openape/bridge/.env` on macOS) or globally in `~/litellm/.env` so resolveBridgeConfig picks it up at spawn time. Common values: `gpt-5.4` (ChatGPT-only LiteLLM proxy), `claude-haiku-4-5` (Anthropic-only)."
     );
   }
+  const targetRaw = (process3.env.OPENAPE_BRIDGE_TARGET ?? "chat").toLowerCase();
+  const target = targetRaw === "troop" ? "troop" : "chat";
   return {
     endpoint: (process3.env.APE_CHAT_ENDPOINT ?? DEFAULT_ENDPOINT).replace(/\/$/, ""),
     apesBin: process3.env.APE_CHAT_BRIDGE_APES_BIN ?? DEFAULT_APES_BIN,
@@ -4801,7 +4971,8 @@ function readConfig() {
     systemPrompt: process3.env.APE_CHAT_BRIDGE_SYSTEM_PROMPT ?? DEFAULT_SYSTEM_PROMPT,
     tools,
     maxSteps: Number.isFinite(maxSteps) && maxSteps > 0 ? maxSteps : DEFAULT_MAX_STEPS,
-    roomFilter: process3.env.APE_CHAT_BRIDGE_ROOM
+    roomFilter: process3.env.APE_CHAT_BRIDGE_ROOM,
+    target
   };
 }
 async function getIdentity() {
@@ -4837,7 +5008,7 @@ var Bridge = class {
       const idp = await ensureFreshIdpAuth();
       return `Bearer ${idp.access_token}`;
     };
-    this.chat = new ChatApi(this.cfg.endpoint, this.bearer);
+    this.chat = this.cfg.target === "troop" ? new TroopChatApi(this.cfg.endpoint, this.bearer) : new ChatApi(this.cfg.endpoint, this.bearer);
     this.cron = new CronRunner({
       runtimeConfig: this.runtimeConfig(),
       chat: this.chat,
@@ -4855,6 +5026,11 @@ var Bridge = class {
   // its own message history and calls @openape/apes' runLoop directly
   // (no stdio JSON-RPC subprocess — see thread-session.ts).
   threads = /* @__PURE__ */ new Map();
+  // ChatApi and TroopChatApi expose the same surface (postMessage /
+  // listMessages / patchMessage / listContacts / requestContact /
+  // acceptContact / createThread) so the rest of the bridge calls
+  // through a structurally-typed reference without caring which
+  // backend is in play. Picked at construction time from cfg.target.
   chat;
   bearer;
   cron;
@@ -4912,6 +5088,29 @@ var Bridge = class {
     if (accepted.length > 0) log(`accepted: ${accepted.join(", ")}`);
     if (skipped.length > 0) log(`skipped (not on allowlist): ${skipped.join(", ")}`);
   }
+  /**
+   * Translate troop's chat-frame payload shape into the
+   * chat.openape.ai-style Message the rest of this bridge expects.
+   * Troop's payload uses `role` (human|agent) + `chatId` + no
+   * senderEmail; the bridge's handleInbound checks
+   * `senderEmail === selfEmail` to skip its own echoes, so we
+   * synthesize the email from role (agent → self, human → owner).
+   * threadId is the synthetic 'main' because troop has no threads.
+   */
+  translateTroopPayload(chatId, payload) {
+    const role = payload.role === "agent" ? "agent" : "human";
+    return {
+      id: String(payload.id ?? ""),
+      roomId: chatId || String(payload.chatId ?? ""),
+      threadId: "main",
+      senderEmail: role === "agent" ? this.selfEmail : this.ownerEmail,
+      senderAct: role,
+      body: typeof payload.body === "string" ? payload.body : "",
+      replyTo: typeof payload.replyTo === "string" ? payload.replyTo : null,
+      createdAt: typeof payload.createdAt === "number" ? payload.createdAt : Math.floor(Date.now() / 1e3),
+      editedAt: typeof payload.editedAt === "number" ? payload.editedAt : null
+    };
+  }
   async handleInbound(msg) {
     if (msg.senderEmail === this.selfEmail) return;
     if (!msg.body.trim()) return;
@@ -4977,7 +5176,8 @@ var Bridge = class {
   }
   async pumpOnce() {
     const bearer = await this.bearer();
-    const wsUrl = `${this.cfg.endpoint.replace(/^http/, "ws")}/api/ws?token=${encodeURIComponent(bearer.replace(/^Bearer\s+/i, ""))}`;
+    const wsPath = this.cfg.target === "troop" ? "/_ws/chat" : "/api/ws";
+    const wsUrl = `${this.cfg.endpoint.replace(/^http/, "ws")}${wsPath}?token=${encodeURIComponent(bearer.replace(/^Bearer\s+/i, ""))}`;
     const ws = new WebSocket(wsUrl);
     return new Promise((resolve4, reject) => {
       let pingTimer;
@@ -5006,8 +5206,9 @@ var Bridge = class {
         } catch {
           return;
         }
-        if (frame.type !== "message") return;
-        void this.handleInbound(frame.payload);
+        if (frame.type !== "message" || !frame.payload) return;
+        const msg = this.cfg.target === "troop" ? this.translateTroopPayload(frame.chat_id ?? "", frame.payload) : frame.payload;
+        void this.handleInbound(msg);
       });
       ws.on("close", () => {
         if (pingTimer) clearInterval(pingTimer);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openape/ape-agent",
-  "version": "2.8.12",
+  "version": "2.8.14",
   "description": "OpenApe agent runtime: per-agent process that connects to chat.openape.ai, runs the LLM loop with tools + cron tasks, and streams replies back to owners.",
   "type": "module",
   "license": "MIT",
@@ -23,9 +23,9 @@
     "ofetch": "^1.4.1",
     "ws": "^8.18.0",
     "yaml": "^2.8.0",
-    "@openape/apes": "1.28.11",
+    "@openape/apes": "1.28.13",
     "@openape/prompt-injection-detector": "0.1.0",
-    "@openape/cli-auth": "0.4.1"
+    "@openape/cli-auth": "0.5.0"
   },
   "devDependencies": {
     "@antfu/eslint-config": "^7.6.1",