@openape/apes 0.25.1 → 0.26.0

package/dist/cli.js

@@ -1908,6 +1908,16 @@ chmod 644 ${shQuote(bridge.plistPath)}
 function buildBridgeBootstrapBlock(bridge) {
   if (!bridge) return "";
   return `
+echo "==> Installing bridge stack as $NAME via bun (one-time)\u2026"
+su - "$NAME" -c '
+set -euo pipefail
+export PATH="/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:$HOME/.bun/install/global/bin"
+bun add -g @openape/chat-bridge @openape/apes @mariozechner/pi-coding-agent
+'
+
+# Bootstrap into the system domain. Spawn already runs as root via
+# \`apes run --as root\`, so we have permission. Stale label is bootouted
+# first to make re-spawn idempotent.
 launchctl bootout "system/${bridge.plistLabel}" 2>/dev/null || true
 launchctl bootstrap system ${shQuote(bridge.plistPath)} || \\
   echo "warn: bridge bootstrap into system domain failed; check ${bridge.plistPath}"
@@ -2571,20 +2581,26 @@ LITELLM_API_KEY=${cfg.apiKey}
 function buildBridgeStartScript() {
   return `#!/usr/bin/env bash
 # Auto-generated by 'apes agents spawn --bridge'.
-# Idempotent installer + launcher.
+# Slim launcher \u2014 install stack lives in spawn, not here.
 set -euo pipefail
 
-export NPM_CONFIG_PREFIX="$HOME/.npm-global"
-export PATH="$NPM_CONFIG_PREFIX/bin:/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin"
-mkdir -p "$NPM_CONFIG_PREFIX"
+export PATH="$HOME/.bun/install/global/bin:/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin"
 
-# Always pull @latest on boot. npm is cached so this is a no-op when the
-# global is already current; when a new version ships, the daemon auto-
-# upgrades on the next launchctl restart instead of needing manual touch.
-npm install -g --silent @openape/chat-bridge@latest
-
-if ! command -v pi >/dev/null 2>&1; then
-  npm install -g --silent @mariozechner/pi-coding-agent
+# Refresh IdP token. Agents auth via SSH-key signing \u2014 the cached IdP
+# token has no refresh_token and expires after ~1h. Re-running apes
+# login re-signs against the registered key. Soft-fails to leave the
+# bridge usable on cached token if the IdP is briefly unreachable.
+if [ -f "$HOME/.config/apes/auth.json" ] && command -v apes >/dev/null 2>&1; then
+  agent_email=$(python3 -c "import json,os,sys
+try: print(json.load(open(os.path.expanduser('~/.config/apes/auth.json')))['email'])
+except Exception: sys.exit(1)" 2>/dev/null || true)
+  agent_idp=$(python3 -c "import json,os,sys
+try: print(json.load(open(os.path.expanduser('~/.config/apes/auth.json')))['idp'])
+except Exception: sys.exit(1)" 2>/dev/null || true)
+  if [ -n "$agent_email" ] && [ -n "$agent_idp" ]; then
+    apes login "$agent_email" --idp "$agent_idp" >/dev/null 2>&1 \\
+      || echo "warn: apes login failed for $agent_email; continuing with cached token"
+  fi
 fi
 
 EXT_DIR="$HOME/.pi/agent/extensions"
@@ -2665,7 +2681,7 @@ function buildBridgePlist(agentName, homeDir) {
         <key>HOME</key>
         <string>${homeDir}</string>
         <key>PATH</key>
-        <string>/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin</string>
+        <string>${homeDir}/.bun/install/global/bin:/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin</string>
     </dict>
 </dict>
 </plist>
@@ -4139,7 +4155,7 @@ var mcpCommand = defineCommand32({
     if (transport !== "stdio" && transport !== "sse") {
       throw new Error('Transport must be "stdio" or "sse"');
     }
-    const { startMcpServer } = await import("./server-GQDX7PHW.js");
+    const { startMcpServer } = await import("./server-M55Z6QYF.js");
     await startMcpServer(transport, port);
   }
 });
@@ -4777,7 +4793,7 @@ async function bestEffortGrantCount(idp) {
   }
 }
 async function runHealth(args) {
-  const version = true ? "0.25.1" : "0.0.0";
+  const version = true ? "0.26.0" : "0.0.0";
   const auth = loadAuth();
   if (!auth) {
     throw new CliError("Not logged in. Run `apes login` first.", 1);
@@ -5050,10 +5066,10 @@ if (shellRewrite) {
   if (shellRewrite.action === "rewrite") {
     process.argv = shellRewrite.argv;
   } else if (shellRewrite.action === "version") {
-    console.log(`ape-shell ${"0.25.1"} (OpenApe DDISA shell wrapper)`);
+    console.log(`ape-shell ${"0.26.0"} (OpenApe DDISA shell wrapper)`);
     process.exit(0);
   } else if (shellRewrite.action === "help") {
-    console.log(`ape-shell ${"0.25.1"} \u2014 OpenApe DDISA shell wrapper`);
+    console.log(`ape-shell ${"0.26.0"} \u2014 OpenApe DDISA shell wrapper`);
     console.log("");
     console.log("Usage:");
     console.log("  ape-shell                 Start interactive grant-mediated REPL");
@@ -5111,7 +5127,7 @@ var configCommand = defineCommand44({
 var main = defineCommand44({
   meta: {
     name: "apes",
-    version: "0.25.1",
+    version: "0.26.0",
     description: "Unified CLI for OpenApe"
   },
   subCommands: {
@@ -5166,7 +5182,7 @@ async function maybeRefreshAuth() {
   }
 }
 await maybeRefreshAuth();
-await maybeWarnStaleVersion("0.25.1").catch(() => {
+await maybeWarnStaleVersion("0.26.0").catch(() => {
 });
 runMain(main).catch((err) => {
   if (err instanceof CliExit) {