@openape/apes 0.25.0 → 0.25.2

package/dist/cli.js

@@ -2578,14 +2578,40 @@ export NPM_CONFIG_PREFIX="$HOME/.npm-global"
 export PATH="$NPM_CONFIG_PREFIX/bin:/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin"
 mkdir -p "$NPM_CONFIG_PREFIX"
 
-if ! command -v openape-chat-bridge >/dev/null 2>&1; then
-  npm install -g --silent @openape/chat-bridge
+# Always pull @latest on boot. npm is cached so this is a no-op when the
+# global is already current; when a new version ships, the daemon auto-
+# upgrades on the next launchctl restart instead of needing manual touch.
+npm install -g --silent @openape/chat-bridge@latest
+
+# apes is needed to refresh the agent's IdP token before each boot \u2014
+# agents auth via SSH key signing, the resulting token has no
+# refresh_token and expires after ~1h. Without re-running 'apes login'
+# the bridge would crashloop after the first hour. KeepAlive's 10s
+# throttle then bounds the recovery gap to ~10s.
+if ! command -v apes >/dev/null 2>&1; then
+  npm install -g --silent @openape/apes
 fi
 
 if ! command -v pi >/dev/null 2>&1; then
   npm install -g --silent @mariozechner/pi-coding-agent
 fi
 
+# Refresh IdP token. Read the agent's own email + idp out of the auth
+# file spawn wrote, then re-sign via the registered SSH key. python3 is
+# always available on macOS \u2014 avoids a jq dep.
+if [ -f "$HOME/.config/apes/auth.json" ]; then
+  agent_email=$(python3 -c "import json,os,sys
+try: print(json.load(open(os.path.expanduser('~/.config/apes/auth.json')))['email'])
+except Exception: sys.exit(1)" 2>/dev/null || true)
+  agent_idp=$(python3 -c "import json,os,sys
+try: print(json.load(open(os.path.expanduser('~/.config/apes/auth.json')))['idp'])
+except Exception: sys.exit(1)" 2>/dev/null || true)
+  if [ -n "$agent_email" ] && [ -n "$agent_idp" ]; then
+    apes login "$agent_email" --idp "$agent_idp" >/dev/null 2>&1 \\
+      || echo "warn: apes login failed for $agent_email; continuing with cached token"
+  fi
+fi
+
 EXT_DIR="$HOME/.pi/agent/extensions"
 mkdir -p "$EXT_DIR"
 if [ ! -f "$EXT_DIR/litellm.ts" ]; then
@@ -4138,7 +4164,7 @@ var mcpCommand = defineCommand32({
     if (transport !== "stdio" && transport !== "sse") {
       throw new Error('Transport must be "stdio" or "sse"');
     }
-    const { startMcpServer } = await import("./server-3HW3TBY5.js");
+    const { startMcpServer } = await import("./server-LEI7F46S.js");
     await startMcpServer(transport, port);
   }
 });
@@ -4776,7 +4802,7 @@ async function bestEffortGrantCount(idp) {
   }
 }
 async function runHealth(args) {
-  const version = true ? "0.25.0" : "0.0.0";
+  const version = true ? "0.25.2" : "0.0.0";
   const auth = loadAuth();
   if (!auth) {
     throw new CliError("Not logged in. Run `apes login` first.", 1);
@@ -5049,10 +5075,10 @@ if (shellRewrite) {
   if (shellRewrite.action === "rewrite") {
     process.argv = shellRewrite.argv;
   } else if (shellRewrite.action === "version") {
-    console.log(`ape-shell ${"0.25.0"} (OpenApe DDISA shell wrapper)`);
+    console.log(`ape-shell ${"0.25.2"} (OpenApe DDISA shell wrapper)`);
     process.exit(0);
   } else if (shellRewrite.action === "help") {
-    console.log(`ape-shell ${"0.25.0"} \u2014 OpenApe DDISA shell wrapper`);
+    console.log(`ape-shell ${"0.25.2"} \u2014 OpenApe DDISA shell wrapper`);
     console.log("");
     console.log("Usage:");
     console.log("  ape-shell                 Start interactive grant-mediated REPL");
@@ -5110,7 +5136,7 @@ var configCommand = defineCommand44({
 var main = defineCommand44({
   meta: {
     name: "apes",
-    version: "0.25.0",
+    version: "0.25.2",
     description: "Unified CLI for OpenApe"
   },
   subCommands: {
@@ -5165,7 +5191,7 @@ async function maybeRefreshAuth() {
   }
 }
 await maybeRefreshAuth();
-await maybeWarnStaleVersion("0.25.0").catch(() => {
+await maybeWarnStaleVersion("0.25.2").catch(() => {
 });
 runMain(main).catch((err) => {
   if (err instanceof CliExit) {