@openape/apes 0.25.1 → 0.25.2

package/dist/cli.js

@@ -2583,10 +2583,35 @@ mkdir -p "$NPM_CONFIG_PREFIX"
 # upgrades on the next launchctl restart instead of needing manual touch.
 npm install -g --silent @openape/chat-bridge@latest
 
+# apes is needed to refresh the agent's IdP token before each boot \u2014
+# agents auth via SSH key signing, the resulting token has no
+# refresh_token and expires after ~1h. Without re-running 'apes login'
+# the bridge would crashloop after the first hour. KeepAlive's 10s
+# throttle then bounds the recovery gap to ~10s.
+if ! command -v apes >/dev/null 2>&1; then
+  npm install -g --silent @openape/apes
+fi
+
 if ! command -v pi >/dev/null 2>&1; then
   npm install -g --silent @mariozechner/pi-coding-agent
 fi
 
+# Refresh IdP token. Read the agent's own email + idp out of the auth
+# file spawn wrote, then re-sign via the registered SSH key. python3 is
+# always available on macOS \u2014 avoids a jq dep.
+if [ -f "$HOME/.config/apes/auth.json" ]; then
+  agent_email=$(python3 -c "import json,os,sys
+try: print(json.load(open(os.path.expanduser('~/.config/apes/auth.json')))['email'])
+except Exception: sys.exit(1)" 2>/dev/null || true)
+  agent_idp=$(python3 -c "import json,os,sys
+try: print(json.load(open(os.path.expanduser('~/.config/apes/auth.json')))['idp'])
+except Exception: sys.exit(1)" 2>/dev/null || true)
+  if [ -n "$agent_email" ] && [ -n "$agent_idp" ]; then
+    apes login "$agent_email" --idp "$agent_idp" >/dev/null 2>&1 \\
+      || echo "warn: apes login failed for $agent_email; continuing with cached token"
+  fi
+fi
+
 EXT_DIR="$HOME/.pi/agent/extensions"
 mkdir -p "$EXT_DIR"
 if [ ! -f "$EXT_DIR/litellm.ts" ]; then
@@ -4139,7 +4164,7 @@ var mcpCommand = defineCommand32({
     if (transport !== "stdio" && transport !== "sse") {
       throw new Error('Transport must be "stdio" or "sse"');
     }
-    const { startMcpServer } = await import("./server-GQDX7PHW.js");
+    const { startMcpServer } = await import("./server-LEI7F46S.js");
     await startMcpServer(transport, port);
   }
 });
@@ -4777,7 +4802,7 @@ async function bestEffortGrantCount(idp) {
   }
 }
 async function runHealth(args) {
-  const version = true ? "0.25.1" : "0.0.0";
+  const version = true ? "0.25.2" : "0.0.0";
   const auth = loadAuth();
   if (!auth) {
     throw new CliError("Not logged in. Run `apes login` first.", 1);
@@ -5050,10 +5075,10 @@ if (shellRewrite) {
   if (shellRewrite.action === "rewrite") {
     process.argv = shellRewrite.argv;
   } else if (shellRewrite.action === "version") {
-    console.log(`ape-shell ${"0.25.1"} (OpenApe DDISA shell wrapper)`);
+    console.log(`ape-shell ${"0.25.2"} (OpenApe DDISA shell wrapper)`);
     process.exit(0);
   } else if (shellRewrite.action === "help") {
-    console.log(`ape-shell ${"0.25.1"} \u2014 OpenApe DDISA shell wrapper`);
+    console.log(`ape-shell ${"0.25.2"} \u2014 OpenApe DDISA shell wrapper`);
     console.log("");
     console.log("Usage:");
     console.log("  ape-shell                 Start interactive grant-mediated REPL");
@@ -5111,7 +5136,7 @@ var configCommand = defineCommand44({
 var main = defineCommand44({
   meta: {
     name: "apes",
-    version: "0.25.1",
+    version: "0.25.2",
     description: "Unified CLI for OpenApe"
   },
   subCommands: {
@@ -5166,7 +5191,7 @@ async function maybeRefreshAuth() {
   }
 }
 await maybeRefreshAuth();
-await maybeWarnStaleVersion("0.25.1").catch(() => {
+await maybeWarnStaleVersion("0.25.2").catch(() => {
 });
 runMain(main).catch((err) => {
   if (err instanceof CliExit) {