@openape/apes 0.6.1 → 0.7.2

package/dist/orchestrator-JAMWD6DD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shell/orchestrator.ts","../src/shell/grant-dispatch.ts","../src/shell/pty-bridge.ts","../src/shell/repl.ts","../src/shell/multi-line.ts","../src/shell/session.ts"],"sourcesContent":["import { hostname } from 'node:os'\nimport consola from 'consola'\nimport { loadAuth } from '../config.js'\nimport { requestGrantForShellLine } from './grant-dispatch.js'\nimport { PtyBridge } from './pty-bridge.js'\nimport { ShellRepl } from './repl.js'\nimport { ShellSession } from './session.js'\n\n/**\n * Orchestrates the interactive ape-shell session by wiring the user-facing\n * REPL to a persistent bash child via the PtyBridge. Keeps both components\n * decoupled so each can be unit-tested in isolation.\n *\n * Flow per user-entered line:\n *   1. ShellRepl emits onLine with the completed (possibly multi-line) buffer\n *   2. Line goes through the grant flow. If denied: session logs the denial,\n *      we surface the reason, and return without touching bash.\n *   3. On approval we enter \"output mode\" (raw stdin passthrough so TUI apps\n *      like vim/less/top receive raw keystrokes) and write the line to bash.\n *   4. bash output streams back to stdout live via PtyBridge.onOutput\n *   5. When the marker-bearing PS1 reappears we resolve the pending promise,\n *      readline takes back the terminal, and the next prompt is drawn.\n *\n * The orchestrator also owns the lifecycle niceties:\n *   - SIGWINCH is forwarded to the pty so TUI apps re-render at the right size\n *   - SIGTERM / SIGHUP trigger a clean shutdown (kill bash, restore TTY mode,\n *     close the audit session)\n *   - An emergency process.on('exit') handler restores the terminal out of\n *     raw mode in case a crash left it there\n *\n * Every line is recorded in the audit log via the ShellSession — granted,\n * denied, and done events with seq numbers correlating each event to its\n * parent line within the session.\n */\nexport async function runInteractiveShell(): Promise<void> {\n  /**\n   * When a line is written into the bash pty, handleLine stashes a\n   * resolver here so the PtyBridge's onLineDone can wake it up.\n   */\n  let pendingResolve: (() => void) | null = null\n  let lastExitCode = 0\n  let shuttingDown = false\n  // Forward reference to the REPL so the bridge's onExit can stop it when\n  // bash dies. Assigned after construction below.\n  let repl: ShellRepl | null = null\n\n  // Spawn the bash child up-front so the REPL can write to it as soon as the\n  // first line is accepted. Output from bash goes straight to the terminal.\n  const bridge = new PtyBridge(\n    {\n      onOutput: (chunk) => {\n        // Live streaming to the user's terminal. Always written straight\n        // through so TUI apps (vim, less, top) get their escape sequences\n        // on time.\n        process.stdout.write(chunk)\n      },\n      onLineDone: (frame) => {\n        if (pendingResolve) {\n          const r = pendingResolve\n          pendingResolve = null\n          lastExitCode = frame.exitCode\n          r()\n        }\n      },\n      onExit: (exitCode) => {\n        // bash itself died — typically because the user ran `exit`.\n        // Tear down the REPL so run() returns cleanly.\n        if (!shuttingDown) {\n          process.stdout.write(`\\n[bash exited with code ${exitCode}]\\n`)\n          repl?.stop()\n        }\n      },\n    },\n  )\n\n  await bridge.waitForReady()\n\n  const targetHost = hostname()\n  const auth = loadAuth()\n  const session = new ShellSession({\n    host: targetHost,\n    requester: auth?.email ?? 'unknown',\n  })\n\n  repl = new ShellRepl(\n    {\n      onLine: async (line) => {\n        // --- 1. Gate the line through the grant flow BEFORE bash sees it ---\n        const grant = await requestGrantForShellLine(line, {\n          targetHost,\n          approval: 'once',\n        })\n\n        if (grant.kind === 'denied') {\n          session.logLineDenied({ line, reason: grant.reason })\n          consola.error(grant.reason)\n          return\n        }\n\n        const seq = session.logLineGranted({\n          line,\n          grantId: grant.grantId,\n          grantMode: grant.mode,\n        })\n\n        // --- 2. Raw-mode stdin passthrough while bash runs the line ---\n        const wasRaw = process.stdin.isTTY && (process.stdin as NodeJS.ReadStream).isRaw\n        if (process.stdin.isTTY && !wasRaw)\n          (process.stdin as NodeJS.ReadStream).setRawMode(true)\n\n        const forward = (chunk: Buffer) => {\n          bridge.writeRaw(chunk.toString())\n        }\n        const rawInputAvailable = process.stdin.isTTY === true\n        if (rawInputAvailable)\n          process.stdin.on('data', forward)\n\n        try {\n          await new Promise<void>((resolve) => {\n            pendingResolve = resolve\n            bridge.writeLine(line)\n          })\n        }\n        finally {\n          if (rawInputAvailable) {\n            process.stdin.off('data', forward)\n            if (!wasRaw && process.stdin.isTTY)\n              (process.stdin as NodeJS.ReadStream).setRawMode(false)\n          }\n        }\n\n        session.logLineDone({ seq, exitCode: lastExitCode })\n\n        if (lastExitCode !== 0) {\n          consola.debug(`(exit ${lastExitCode})`)\n        }\n      },\n      onExit: () => {\n        shuttingDown = true\n        session.close()\n        try {\n          bridge.kill()\n        }\n        catch {}\n      },\n    },\n  )\n\n  // SIGWINCH forwarding so TUI apps re-render at the right dimensions.\n  const onResize = () => {\n    const cols = process.stdout.columns ?? 80\n    const rows = process.stdout.rows ?? 24\n    try {\n      bridge.resize(cols, rows)\n    }\n    catch {}\n  }\n  process.stdout.on('resize', onResize)\n\n  // Emergency TTY restore — if a crash leaves stdin in raw mode, subsequent\n  // terminal input becomes unusable until the user manually runs `reset`.\n  // This handler fires on clean exit and on uncaught exceptions.\n  const restoreTty = () => {\n    if (process.stdin.isTTY && (process.stdin as NodeJS.ReadStream).isRaw) {\n      try {\n        (process.stdin as NodeJS.ReadStream).setRawMode(false)\n      }\n      catch {}\n    }\n  }\n  process.on('exit', restoreTty)\n\n  // Clean shutdown on termination signals. kill() is idempotent in node-pty,\n  // and session.close() swallows audit-log errors internally, so this is safe\n  // to call even if already shutting down.\n  const gracefulShutdown = () => {\n    if (shuttingDown)\n      return\n    shuttingDown = true\n    restoreTty()\n    try {\n      session.close()\n    }\n    catch {}\n    try {\n      bridge.kill()\n    }\n    catch {}\n    try {\n      repl?.stop()\n    }\n    catch {}\n  }\n  process.on('SIGTERM', gracefulShutdown)\n  process.on('SIGHUP', gracefulShutdown)\n\n  try {\n    await repl.run()\n  }\n  finally {\n    process.stdout.off('resize', onResize)\n    process.off('exit', restoreTty)\n    process.off('SIGTERM', gracefulShutdown)\n    process.off('SIGHUP', gracefulShutdown)\n  }\n}\n","import { basename } from 'node:path'\nimport consola from 'consola'\nimport { loadAuth } from '../config.js'\nimport { apiFetch, getGrantsEndpoint } from '../http.js'\nimport {\n  createShapesGrant,\n  fetchGrantToken,\n  findExistingGrant,\n  loadOrInstallAdapter,\n  parseShellCommand,\n  resolveCommand,\n  verifyAndConsume,\n  waitForGrantStatus,\n} from '../shapes/index.js'\n\n/**\n * Result of attempting to obtain a grant for a shell line. On success the\n * REPL may proceed to execute the line in its persistent bash pty. On\n * failure the caller should surface `reason` and discard the line.\n */\nexport type GrantLineResult =\n  | { kind: 'approved', grantId: string, mode: 'adapter' | 'session' }\n  | { kind: 'denied', reason: string }\n\n/**\n * Options the orchestrator passes to `requestGrantForShellLine`. They\n * mirror what the `apes run --shell` path reads from its citty args, but\n * come directly from the shell session context instead.\n */\nexport interface GrantLineOptions {\n  /** Target host name. Usually `os.hostname()`. */\n  targetHost: string\n  /** Approval mode — almost always 'once' for interactive shell lines. */\n  approval?: 'once' | 'timed' | 'always'\n}\n\n/**\n * Obtain a grant for a shell line so the interactive REPL may execute it\n * against its persistent bash child.\n *\n * Dispatch strategy mirrors the existing one-shot `tryAdapterModeFromShell`\n * flow:\n *   1. Try to resolve the line as an adapter-backed command (structured\n *      grant with resource chain / permission).\n *   2. If the adapter path succeeds, reuse an existing matching grant or\n *      request a new one, verify + consume it.\n *   3. If the adapter path fails (compound line, no matching adapter,\n *      resolve failure) fall back to a generic `ape-shell` session grant\n *      for the target host.\n *\n * Returns without executing anything. The caller (the orchestrator)\n * decides how to run the line — typically by writing it to bash's pty.\n */\nexport async function requestGrantForShellLine(\n  line: string,\n  options: GrantLineOptions,\n): Promise<GrantLineResult> {\n  const auth = loadAuth()\n  if (!auth) {\n    return { kind: 'denied', reason: 'Not logged in. Run `apes login` first.' }\n  }\n  const idp = auth.idp\n  if (!idp) {\n    return { kind: 'denied', reason: 'No IdP URL configured. Run `apes login` first.' }\n  }\n\n  // --- 1. Adapter path ---\n  const parsed = parseShellCommand(line)\n  if (parsed && !parsed.isCompound) {\n    try {\n      const loaded = await loadOrInstallAdapter(parsed.executable)\n      if (loaded) {\n        const normalizedExecutable = basename(parsed.executable)\n        const resolved = await resolveCommand(loaded, [normalizedExecutable, ...parsed.argv])\n\n        // Try to reuse an existing matching grant first.\n        try {\n          const existingGrantId = await findExistingGrant(resolved, idp)\n          if (existingGrantId) {\n            consola.info(`Reusing grant ${existingGrantId} for: ${resolved.detail.display}`)\n            const token = await fetchGrantToken(idp, existingGrantId)\n            await verifyAndConsume(token, resolved)\n            return { kind: 'approved', grantId: existingGrantId, mode: 'adapter' }\n          }\n        }\n        catch (err) {\n          consola.debug(`ape-shell: findExistingGrant failed, will request new grant:`, err)\n        }\n\n        // Request a new adapter-backed grant.\n        consola.info(`Requesting grant for: ${resolved.detail.display}`)\n        const grant = await createShapesGrant(resolved, {\n          idp,\n          approval: options.approval ?? 'once',\n          reason: `ape-shell: ${resolved.detail.display}`,\n        })\n        consola.info(`Approve at: ${idp}/grant-approval?grant_id=${grant.id}`)\n\n        const status = await waitForGrantStatus(idp, grant.id)\n        if (status !== 'approved') {\n          return { kind: 'denied', reason: `Grant ${status}` }\n        }\n\n        const token = await fetchGrantToken(idp, grant.id)\n        await verifyAndConsume(token, resolved)\n        return { kind: 'approved', grantId: grant.id, mode: 'adapter' }\n      }\n    }\n    catch (err) {\n      // Adapter resolution failed — debug-log and fall through to the\n      // generic session grant path.\n      consola.debug(`ape-shell: adapter resolve failed, falling back to session grant:`, err)\n    }\n  }\n\n  // --- 2. Generic session grant (ape-shell audience) ---\n  const grantsUrl = await getGrantsEndpoint(idp)\n\n  // Try to reuse an existing timed/always session grant first.\n  try {\n    const grants = await apiFetch<{ data: Array<{ id: string, status: string, request: { audience: string, target_host: string, grant_type: string } }> }>(\n      `${grantsUrl}?requester=${encodeURIComponent(auth.email)}&status=approved&limit=20`,\n    )\n    const sessionGrant = grants.data.find(g =>\n      g.request.audience === 'ape-shell'\n      && g.request.target_host === options.targetHost\n      && g.request.grant_type !== 'once',\n    )\n    if (sessionGrant) {\n      return { kind: 'approved', grantId: sessionGrant.id, mode: 'session' }\n    }\n  }\n  catch (err) {\n    consola.debug(`ape-shell: session grant lookup failed:`, err)\n  }\n\n  // Request a new session grant. The approver sees the literal shell line.\n  consola.info(`Requesting ape-shell session grant on ${options.targetHost}`)\n  try {\n    const grant = await apiFetch<{ id: string, status: string }>(grantsUrl, {\n      method: 'POST',\n      body: {\n        requester: auth.email,\n        target_host: options.targetHost,\n        audience: 'ape-shell',\n        grant_type: options.approval ?? 'once',\n        command: ['bash', '-c', line],\n        reason: `Shell session: ${line.slice(0, 100)}`,\n      },\n    })\n    consola.info(`Approve at: ${idp}/grant-approval?grant_id=${grant.id}`)\n\n    const maxWait = 300_000\n    const interval = 3_000\n    const start = Date.now()\n\n    while (Date.now() - start < maxWait) {\n      const status = await apiFetch<{ status: string }>(`${grantsUrl}/${grant.id}`)\n      if (status.status === 'approved')\n        return { kind: 'approved', grantId: grant.id, mode: 'session' }\n      if (status.status === 'denied' || status.status === 'revoked')\n        return { kind: 'denied', reason: `Grant ${status.status}` }\n      await new Promise(r => setTimeout(r, interval))\n    }\n\n    return { kind: 'denied', reason: 'Grant approval timed out after 5 minutes' }\n  }\n  catch (err) {\n    const msg = err instanceof Error ? err.message : String(err)\n    return { kind: 'denied', reason: `Grant request failed: ${msg}` }\n  }\n}\n","import { randomBytes } from 'node:crypto'\nimport type { IPty } from 'node-pty'\nimport * as pty from 'node-pty'\n\n/**\n * Frame returned when the bash child finishes executing a line and is ready\n * for the next one. The `output` is everything bash printed since the last\n * frame, with the marker line stripped.\n */\nexport interface CompletedLineFrame {\n  output: string\n  exitCode: number\n}\n\n/**\n * Callbacks the PtyBridge delivers to its owner. `onOutput` fires with\n * streaming pty output chunks (marker content already stripped). `onLineDone`\n * fires once per completed shell line with the cumulative output and the\n * exit code extracted from the prompt marker. `onExit` fires when the bash\n * child itself has terminated (user typed `exit`, or the process died).\n */\nexport interface PtyBridgeEvents {\n  onOutput: (chunk: string) => void\n  onLineDone: (frame: CompletedLineFrame) => void\n  onExit: (exitCode: number, signal: number | undefined) => void\n}\n\n/**\n * Wraps a persistent bash child running inside a pty. Each time the frontend\n * feeds a line via `writeLine`, the bridge streams bash's stdout back through\n * `onOutput` until it detects the marker-bearing PS1 — at which point the\n * line is considered complete and `onLineDone` fires with the captured\n * output and the exit code.\n *\n * The marker format embedded in PS1 is:\n *   __APES_<random-hex>__:<exit-code>:__END__\n * The leading token is a 32-char random hex so output collisions are\n * effectively impossible. `<exit-code>` is `$?` at prompt render time.\n *\n * The marker itself is stripped from the output stream before it is\n * forwarded to the caller, so consumers never see it on their terminal.\n */\nexport class PtyBridge {\n  private readonly marker: string\n  /** Compiled once. Captures the exit code in group 1. */\n  private readonly markerRegex: RegExp\n  private readonly term: IPty\n  private readonly events: PtyBridgeEvents\n  /** Bytes received since the last completed line. Searched for the marker. */\n  private pending = ''\n  /**\n   * Accumulated output for the current in-flight line. Streams to `onOutput`\n   * live as chunks arrive, and is handed to `onLineDone` in full when the\n   * marker is matched. Resets at that point.\n   */\n  private currentLineBuffer = ''\n  /** True until bash prints its first marker-prompt. */\n  private readyForFirstLine = false\n  private awaitingInitialPrompt: ((value: void) => void) | null = null\n\n  constructor(events: PtyBridgeEvents, options: { cols?: number, rows?: number, cwd?: string } = {}) {\n    this.events = events\n    this.marker = randomBytes(16).toString('hex')\n    // Example match: __APES_abc123…__:0:__END__\n    // The `\\r?\\n?` tolerates line endings around the marker depending on\n    // how bash renders PS1 on a fresh line.\n    this.markerRegex = new RegExp(\n      `__APES_${this.marker}__:(-?\\\\d+):__END__\\\\r?\\\\n?`,\n    )\n\n    const cols = options.cols ?? process.stdout.columns ?? 80\n    const rows = options.rows ?? process.stdout.rows ?? 24\n\n    // We spawn bash as `--login -i` so the user's ~/.bash_profile / ~/.bashrc\n    // runs and they get their aliases/functions. Trade-off: if the user\n    // overrides PS1 in their rcfile, our marker detection breaks. We protect\n    // against that by re-exporting PS1 via PROMPT_COMMAND on every prompt.\n    //\n    // PROMPT_COMMAND also runs `stty -echo` so the pty line discipline stops\n    // echoing user input back to us. Without this, every line the frontend\n    // writes to the pty gets echoed into the output stream — causing the\n    // command to appear twice in the user's terminal (once from readline,\n    // once from the pty echo). The frontend already owns its own display of\n    // what the user typed; the pty echo is redundant and surprising.\n    // Interactive TUI apps (vim/less/top) set their own termios when they\n    // start, so they are unaffected.\n    this.term = pty.spawn('bash', ['--login', '-i'], {\n      name: 'xterm-256color',\n      cols,\n      rows,\n      cwd: options.cwd ?? process.cwd(),\n      env: {\n        ...process.env,\n        // Force our marker PS1 on every prompt and keep pty echo off —\n        // both survive .bashrc overrides because PROMPT_COMMAND runs\n        // before each prompt.\n        PROMPT_COMMAND: `stty -echo 2>/dev/null; PS1='__APES_${this.marker}__:$?:__END__'`,\n        // Also set it initially so the very first prompt carries the marker.\n        PS1: `__APES_${this.marker}__:$?:__END__`,\n        PS2: '> ',\n        // Silence bash-specific onboarding that would pollute our output.\n        BASH_SILENCE_DEPRECATION_WARNING: '1',\n      },\n    })\n\n    this.term.onData(chunk => this.handleData(chunk))\n    this.term.onExit(({ exitCode, signal }) => {\n      this.events.onExit(exitCode, signal)\n    })\n  }\n\n  /**\n   * Resolves once bash has printed its very first marker-bearing prompt,\n   * which means it has finished sourcing ~/.bashrc and is ready to accept\n   * input. Callers should await this before sending the first line.\n   */\n  waitForReady(): Promise<void> {\n    if (this.readyForFirstLine)\n      return Promise.resolve()\n    return new Promise((resolve) => {\n      this.awaitingInitialPrompt = resolve\n    })\n  }\n\n  /**\n   * Write a shell command line to bash's stdin. The caller must ensure the\n   * line has already been approved by the grant flow. The bridge does NOT\n   * validate or filter the line.\n   */\n  writeLine(line: string): void {\n    // Trim trailing newlines and always append exactly one, so pasting a\n    // multi-line string works naturally.\n    const clean = line.replace(/\\r?\\n+$/, '')\n    this.term.write(`${clean}\\n`)\n  }\n\n  /**\n   * Raw passthrough write — used for forwarding user keystrokes during\n   * interactive output mode (e.g. while vim is running).\n   */\n  writeRaw(data: string): void {\n    this.term.write(data)\n  }\n\n  /** Resize the underlying pty. Called on SIGWINCH. */\n  resize(cols: number, rows: number): void {\n    this.term.resize(cols, rows)\n  }\n\n  /** Kill the bash child. Called on Ctrl-D / shell exit. */\n  kill(signal?: string): void {\n    this.term.kill(signal)\n  }\n\n  /** Process id of the bash child, for logging / debugging. */\n  get pid(): number {\n    return this.term.pid\n  }\n\n  /** Exposed for tests that want to look at the raw marker. */\n  getMarkerForTest(): string {\n    return this.marker\n  }\n\n  // ----- internals -----\n\n  private handleData(chunk: string): void {\n    this.pending += chunk\n\n    // Walk through any complete marker matches. Each marker ends the current\n    // in-flight line; the `before` slice is its final output.\n    for (;;) {\n      const match = this.pending.match(this.markerRegex)\n      if (!match || match.index === undefined)\n        break\n\n      const before = this.pending.slice(0, match.index)\n      const exitCode = Number(match[1])\n      // Stream the pre-marker portion live (for REPL display) AND fold it\n      // into the per-line buffer so the `onLineDone` frame is complete.\n      if (before.length > 0) {\n        this.currentLineBuffer += before\n        if (this.readyForFirstLine)\n          this.events.onOutput(before)\n      }\n      // Drop the matched marker and everything before it from the buffer\n      this.pending = this.pending.slice(match.index + match[0].length)\n\n      if (!this.readyForFirstLine) {\n        // Bootstrap prompt: discard any bash startup noise we captured and\n        // signal readiness. onLineDone does NOT fire for the implicit\n        // first prompt — that would confuse consumers.\n        this.readyForFirstLine = true\n        this.currentLineBuffer = ''\n        const resolve = this.awaitingInitialPrompt\n        this.awaitingInitialPrompt = null\n        if (resolve)\n          resolve()\n        continue\n      }\n\n      // Real command completion: hand over the accumulated line buffer.\n      const frame = { output: this.currentLineBuffer, exitCode }\n      this.currentLineBuffer = ''\n      this.events.onLineDone(frame)\n    }\n\n    // No more markers in the buffer. If we're past bootstrap, stream any\n    // complete lines that have accumulated so the user sees live output,\n    // and keep any partial tail in `pending` in case the marker is still\n    // mid-chunk.\n    if (!this.readyForFirstLine)\n      return\n\n    const lastNewline = this.pending.lastIndexOf('\\n')\n    if (lastNewline >= 0) {\n      const ready = this.pending.slice(0, lastNewline + 1)\n      this.pending = this.pending.slice(lastNewline + 1)\n      if (ready.length > 0) {\n        this.currentLineBuffer += ready\n        this.events.onOutput(ready)\n      }\n    }\n  }\n}\n","import { createInterface  } from 'node:readline'\nimport type { Interface as ReadlineInterface } from 'node:readline'\nimport { homedir } from 'node:os'\nimport { join } from 'node:path'\nimport consola from 'consola'\nimport { checkMultiLineStatus } from './multi-line.js'\n\n/**\n * Where the REPL persists its input history across sessions. Lives alongside\n * the existing apes config so we don't add a new top-level dotfile.\n */\nconst HISTORY_FILE = join(homedir(), '.config', 'apes', 'shell-history')\n\n/**\n * Primary and continuation prompts. PS1 shows when the REPL is ready for a\n * fresh command; PS2 shows when bash syntax is incomplete and the user needs\n * to keep typing (e.g., inside a for-loop or heredoc).\n */\nconst PS1 = 'apes$ '\nconst PS2 = '> '\n\n/**\n * Event sink for the REPL. Keeps the loop decoupled from I/O sinks so tests\n * can feed lines and observe outcomes without touching real stdin/stdout.\n */\nexport interface ReplEvents {\n  /**\n   * Fires when a complete shell line has been accumulated (possibly across\n   * multiple input lines via continuation). The handler is responsible for\n   * actually running the line — typically by handing it to the grant flow\n   * and then to the pty bridge. In M2 this is just logged; the real wiring\n   * lands in M3/M4.\n   */\n  onLine: (line: string) => void | Promise<void>\n\n  /**\n   * Fires when the REPL is about to exit (user pressed Ctrl-D or called\n   * `stop`). Gives owners a chance to tear down resources.\n   */\n  onExit: () => void | Promise<void>\n}\n\n/**\n * Optional overrides for tests. Real usage defaults to `process.stdin`,\n * `process.stdout`, and the standard history file path.\n */\nexport interface ReplOptions {\n  input?: NodeJS.ReadableStream\n  output?: NodeJS.WritableStream\n  historyFile?: string\n  /** Disables the session-start banner — handy in tests. */\n  quiet?: boolean\n}\n\n/**\n * Interactive REPL loop for `ape-shell`. Implements the state machine:\n *\n *   PROMPT → (line entered) → MULTILINE? → (continue) → PROMPT\n *                                 │\n *                                 └─── complete → emit onLine → PROMPT\n *\n * The loop uses node:readline for line editing, history, and signal\n * handling. Multi-line detection runs a `bash -n` dry-parse on Enter to\n * decide whether to fold the input into a longer buffer or submit it.\n *\n * The REPL does NOT know about pty, grants, or bash internals. Owners wire\n * those in via the `onLine` callback. This keeps M2 independently testable.\n */\nexport class ShellRepl {\n  private readonly events: ReplEvents\n  private readonly input: NodeJS.ReadableStream\n  private readonly output: NodeJS.WritableStream\n  private readonly quiet: boolean\n  private rl: ReadlineInterface | null = null\n  /** Accumulated input across multi-line continuations. */\n  private buffer = ''\n  /** Whether the REPL has called `stop`. */\n  private stopped = false\n\n  constructor(events: ReplEvents, options: ReplOptions = {}) {\n    this.events = events\n    this.input = options.input ?? process.stdin\n    this.output = options.output ?? process.stdout\n    this.quiet = options.quiet ?? false\n  }\n\n  /**\n   * Start the REPL. Resolves when the user ends the session (Ctrl-D) or\n   * `stop()` is called from outside. Errors bubble out of `onLine` and\n   * cause the line to be rejected, but do NOT tear down the REPL.\n   */\n  async run(): Promise<void> {\n    if (this.stopped)\n      return\n\n    this.rl = createInterface({\n      input: this.input,\n      output: this.output,\n      prompt: PS1,\n      historySize: 1000,\n      // Enable tab completion fallback (file names + history) via default.\n      terminal: true,\n    })\n\n    if (!this.quiet)\n      this.writeBanner()\n\n    this.safePrompt(PS1)\n\n    return new Promise<void>((resolve) => {\n      this.rl!.on('line', async (line) => {\n        try {\n          await this.handleLine(line)\n        }\n        catch (err) {\n          const msg = err instanceof Error ? err.message : String(err)\n          consola.error(`Shell error: ${msg}`)\n          this.resetBuffer()\n          this.safePrompt(PS1)\n        }\n      })\n\n      this.rl!.on('SIGINT', () => {\n        // Ctrl-C in prompt mode: clear the buffer, draw a new prompt.\n        if (this.buffer.length > 0)\n          this.output.write('\\n')\n        this.resetBuffer()\n        this.safePrompt(PS1)\n      })\n\n      this.rl!.on('close', async () => {\n        // Ctrl-D or stop() — we're done.\n        this.stopped = true\n        await this.events.onExit()\n        resolve()\n      })\n    })\n  }\n\n  /**\n   * Request the REPL to stop cleanly. Equivalent to the user pressing\n   * Ctrl-D. Typically called during shutdown or after a fatal error.\n   */\n  stop(): void {\n    if (this.rl)\n      this.rl.close()\n  }\n\n  // ----- internals -----\n\n  private writeBanner(): void {\n    this.output.write('apes interactive shell\\n')\n    this.output.write('Ctrl-D to exit.\\n')\n    this.output.write('\\n')\n  }\n\n  private async handleLine(rawLine: string): Promise<void> {\n    // Append the new line to the existing buffer. Use a literal newline so\n    // bash sees the multi-line structure correctly on `bash -n`.\n    this.buffer = this.buffer.length === 0\n      ? rawLine\n      : `${this.buffer}\\n${rawLine}`\n\n    const status = checkMultiLineStatus(this.buffer)\n\n    if (status.kind === 'continue') {\n      this.safePrompt(PS2)\n      return\n    }\n\n    if (status.kind === 'error') {\n      this.output.write(`${status.message}\\n`)\n      this.resetBuffer()\n      this.safePrompt(PS1)\n      return\n    }\n\n    // Complete. Hand off to the owner.\n    const completeLine = this.buffer\n    this.resetBuffer()\n\n    // If the buffer was pure whitespace, skip the callback and re-prompt.\n    if (completeLine.trim().length === 0) {\n      this.safePrompt(PS1)\n      return\n    }\n\n    await this.events.onLine(completeLine)\n\n    // Back to prompt mode. Owners of onLine can await and drive their own\n    // output before we show the next prompt.\n    this.safePrompt(PS1)\n  }\n\n  /**\n   * Draw a prompt, but only if the readline interface is still alive.\n   * The onLine callback may have triggered `stop()` (e.g., bash exited),\n   * in which case setPrompt/prompt would throw ERR_USE_AFTER_CLOSE.\n   */\n  private safePrompt(prompt: string): void {\n    if (this.stopped || !this.rl)\n      return\n    try {\n      this.rl.setPrompt(prompt)\n      this.rl.prompt()\n    }\n    catch (err) {\n      // Swallow ERR_USE_AFTER_CLOSE which races with shutdown.\n      const code = (err as NodeJS.ErrnoException)?.code\n      if (code !== 'ERR_USE_AFTER_CLOSE')\n        throw err\n    }\n  }\n\n  private resetBuffer(): void {\n    this.buffer = ''\n  }\n}\n\nexport { HISTORY_FILE }\n","import { spawnSync } from 'node:child_process'\n\n/**\n * Result of checking whether a shell command buffer is syntactically\n * complete. The REPL uses this to decide whether to submit the line for\n * execution or to keep reading more lines with a continuation prompt.\n */\nexport type MultiLineStatus =\n  | { kind: 'complete' }\n  | { kind: 'continue' }\n  | { kind: 'error', message: string }\n\n/**\n * Patterns that bash writes to stderr when it encounters a syntax error\n * caused by an incomplete construct (missing `done`, unterminated quote,\n * unclosed `$(` or heredoc, etc.). If any of these patterns match, the\n * buffer is treated as incomplete and the REPL shows a continuation prompt\n * instead of reporting an error.\n */\nconst CONTINUE_PATTERNS: RegExp[] = [\n  /syntax error: unexpected end of file/i,\n  /unexpected end of file/i,\n  /here-document.+delimited by end-of-file/i,\n  /unexpected EOF while looking for matching/i,\n]\n\n/**\n * Detects an unterminated here-document in the buffer. `bash -n` accepts\n * these as \"complete\" (it treats end-of-input as the delimiter) so we have\n * to catch them ourselves to match interactive bash's behavior of showing\n * a continuation prompt until the user types the delimiter on its own line.\n *\n * Matches `<<` or `<<-` followed by an optionally-quoted identifier. For\n * each match we scan the remaining lines of the buffer for a line whose\n * content (after leading tabs, which `<<-` strips) equals the delimiter.\n * If no closing line is found, the heredoc is unterminated → continue.\n */\nfunction hasUnterminatedHeredoc(buffer: string): boolean {\n  // Match <<-? optional whitespace, optional ' or \" around the word.\n  // We deliberately don't try to parse bash quoting fully — this is a\n  // best-effort heuristic that catches the common cases.\n  const pattern = /<<(-?)\\s*(['\"]?)([A-Z_]\\w*)\\2/gi\n  for (const match of buffer.matchAll(pattern)) {\n    const stripTabs = match[1] === '-'\n    const delimiter = match[3]!\n    // Look at every line AFTER the match start\n    const afterMatch = buffer.slice((match.index ?? 0) + match[0].length)\n    const lines = afterMatch.split('\\n').slice(1) // skip the rest of the opening line\n    const terminated = lines.some((line) => {\n      const compare = stripTabs ? line.replace(/^\\t+/, '') : line\n      return compare === delimiter\n    })\n    if (!terminated)\n      return true\n  }\n  return false\n}\n\n/**\n * Check whether a (possibly multi-line) shell command buffer forms a\n * complete statement. Runs `bash -n -c <buffer>` in a separate process —\n * `-n` makes bash parse without executing, so there are no side effects.\n *\n * Design note: we spawn bash once per check. That's typically <10ms on\n * modern machines and only happens when the user presses Enter, not per\n * keystroke, so the cost is negligible.\n */\nexport function checkMultiLineStatus(buffer: string): MultiLineStatus {\n  if (buffer.trim().length === 0)\n    return { kind: 'complete' } // empty line is a no-op, treat as complete\n\n  // Heredoc check first — bash -n accepts unterminated heredocs but an\n  // interactive shell should ask for more input until the delimiter line.\n  if (hasUnterminatedHeredoc(buffer))\n    return { kind: 'continue' }\n\n  const result = spawnSync('bash', ['-n', '-c', buffer], {\n    stdio: ['ignore', 'ignore', 'pipe'],\n    encoding: 'utf-8',\n  })\n\n  if (result.error) {\n    // Bash itself couldn't be spawned — treat as a hard error so the REPL\n    // can surface it. This should be vanishingly rare.\n    return { kind: 'error', message: `Failed to spawn bash for syntax check: ${result.error.message}` }\n  }\n\n  if (result.status === 0)\n    return { kind: 'complete' }\n\n  const stderr = result.stderr || ''\n  for (const pattern of CONTINUE_PATTERNS) {\n    if (pattern.test(stderr))\n      return { kind: 'continue' }\n  }\n\n  // Anything else is a genuine syntax error — caller should show it and\n  // reset the buffer instead of accumulating more lines.\n  return { kind: 'error', message: stderr.trim() || 'Syntax error' }\n}\n","import { randomBytes } from 'node:crypto'\nimport { appendAuditLog } from '../shapes/index.js'\n\n/**\n * A single interactive ape-shell session. Tracks a stable session id plus a\n * monotonic sequence number so individual lines can be correlated back to\n * their session in the audit log.\n */\nexport class ShellSession {\n  readonly id: string\n  readonly startedAt: number\n  private lineSeq = 0\n\n  constructor(options: { host: string, requester: string }) {\n    this.id = randomBytes(8).toString('hex')\n    this.startedAt = Date.now()\n    appendAuditLog({\n      action: 'shell-session-start',\n      session_id: this.id,\n      host: options.host,\n      requester: options.requester,\n    })\n  }\n\n  /**\n   * Record a granted line that was approved for execution. Called after the\n   * grant flow returns approval but before (or right after) bash runs the\n   * command. Stores the grant id so the line can be traced back to the\n   * specific grant that authorized it.\n   */\n  logLineGranted(params: {\n    line: string\n    grantId: string\n    grantMode: 'adapter' | 'session'\n  }): number {\n    const seq = ++this.lineSeq\n    appendAuditLog({\n      action: 'shell-session-line',\n      session_id: this.id,\n      seq,\n      line: params.line,\n      grant_id: params.grantId,\n      grant_mode: params.grantMode,\n      status: 'executing',\n    })\n    return seq\n  }\n\n  /** Record the final exit code of a previously-granted line. */\n  logLineDone(params: { seq: number, exitCode: number }): void {\n    appendAuditLog({\n      action: 'shell-session-line-done',\n      session_id: this.id,\n      seq: params.seq,\n      exit_code: params.exitCode,\n    })\n  }\n\n  /** Record that a line was denied by the grant flow and never reached bash. */\n  logLineDenied(params: { line: string, reason: string }): void {\n    const seq = ++this.lineSeq\n    appendAuditLog({\n      action: 'shell-session-line',\n      session_id: this.id,\n      seq,\n      line: params.line,\n      status: 'denied',\n      reason: params.reason,\n    })\n  }\n\n  /** Record session termination. Fires on clean Ctrl-D or bash death. */\n  close(): void {\n    appendAuditLog({\n      action: 'shell-session-end',\n      session_id: this.id,\n      duration_ms: Date.now() - this.startedAt,\n      lines: this.lineSeq,\n    })\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAAA,SAAS,gBAAgB;AACzB,OAAOA,cAAa;;;ACDpB,SAAS,gBAAgB;AACzB,OAAO,aAAa;AAoDpB,eAAsB,yBACpB,MACA,SAC0B;AAC1B,QAAM,OAAO,SAAS;AACtB,MAAI,CAAC,MAAM;AACT,WAAO,EAAE,MAAM,UAAU,QAAQ,yCAAyC;AAAA,EAC5E;AACA,QAAM,MAAM,KAAK;AACjB,MAAI,CAAC,KAAK;AACR,WAAO,EAAE,MAAM,UAAU,QAAQ,iDAAiD;AAAA,EACpF;AAGA,QAAM,SAAS,kBAAkB,IAAI;AACrC,MAAI,UAAU,CAAC,OAAO,YAAY;AAChC,QAAI;AACF,YAAM,SAAS,MAAM,qBAAqB,OAAO,UAAU;AAC3D,UAAI,QAAQ;AACV,cAAM,uBAAuB,SAAS,OAAO,UAAU;AACvD,cAAM,WAAW,MAAM,eAAe,QAAQ,CAAC,sBAAsB,GAAG,OAAO,IAAI,CAAC;AAGpF,YAAI;AACF,gBAAM,kBAAkB,MAAM,kBAAkB,UAAU,GAAG;AAC7D,cAAI,iBAAiB;AACnB,oBAAQ,KAAK,iBAAiB,eAAe,SAAS,SAAS,OAAO,OAAO,EAAE;AAC/E,kBAAMC,SAAQ,MAAM,gBAAgB,KAAK,eAAe;AACxD,kBAAM,iBAAiBA,QAAO,QAAQ;AACtC,mBAAO,EAAE,MAAM,YAAY,SAAS,iBAAiB,MAAM,UAAU;AAAA,UACvE;AAAA,QACF,SACO,KAAK;AACV,kBAAQ,MAAM,gEAAgE,GAAG;AAAA,QACnF;AAGA,gBAAQ,KAAK,yBAAyB,SAAS,OAAO,OAAO,EAAE;AAC/D,cAAM,QAAQ,MAAM,kBAAkB,UAAU;AAAA,UAC9C;AAAA,UACA,UAAU,QAAQ,YAAY;AAAA,UAC9B,QAAQ,cAAc,SAAS,OAAO,OAAO;AAAA,QAC/C,CAAC;AACD,gBAAQ,KAAK,eAAe,GAAG,4BAA4B,MAAM,EAAE,EAAE;AAErE,cAAM,SAAS,MAAM,mBAAmB,KAAK,MAAM,EAAE;AACrD,YAAI,WAAW,YAAY;AACzB,iBAAO,EAAE,MAAM,UAAU,QAAQ,SAAS,MAAM,GAAG;AAAA,QACrD;AAEA,cAAM,QAAQ,MAAM,gBAAgB,KAAK,MAAM,EAAE;AACjD,cAAM,iBAAiB,OAAO,QAAQ;AACtC,eAAO,EAAE,MAAM,YAAY,SAAS,MAAM,IAAI,MAAM,UAAU;AAAA,MAChE;AAAA,IACF,SACO,KAAK;AAGV,cAAQ,MAAM,qEAAqE,GAAG;AAAA,IACxF;AAAA,EACF;AAGA,QAAM,YAAY,MAAM,kBAAkB,GAAG;AAG7C,MAAI;AACF,UAAM,SAAS,MAAM;AAAA,MACnB,GAAG,SAAS,cAAc,mBAAmB,KAAK,KAAK,CAAC;AAAA,IAC1D;AACA,UAAM,eAAe,OAAO,KAAK;AAAA,MAAK,OACpC,EAAE,QAAQ,aAAa,eACpB,EAAE,QAAQ,gBAAgB,QAAQ,cAClC,EAAE,QAAQ,eAAe;AAAA,IAC9B;AACA,QAAI,cAAc;AAChB,aAAO,EAAE,MAAM,YAAY,SAAS,aAAa,IAAI,MAAM,UAAU;AAAA,IACvE;AAAA,EACF,SACO,KAAK;AACV,YAAQ,MAAM,2CAA2C,GAAG;AAAA,EAC9D;AAGA,UAAQ,KAAK,yCAAyC,QAAQ,UAAU,EAAE;AAC1E,MAAI;AACF,UAAM,QAAQ,MAAM,SAAyC,WAAW;AAAA,MACtE,QAAQ;AAAA,MACR,MAAM;AAAA,QACJ,WAAW,KAAK;AAAA,QAChB,aAAa,QAAQ;AAAA,QACrB,UAAU;AAAA,QACV,YAAY,QAAQ,YAAY;AAAA,QAChC,SAAS,CAAC,QAAQ,MAAM,IAAI;AAAA,QAC5B,QAAQ,kBAAkB,KAAK,MAAM,GAAG,GAAG,CAAC;AAAA,MAC9C;AAAA,IACF,CAAC;AACD,YAAQ,KAAK,eAAe,GAAG,4BAA4B,MAAM,EAAE,EAAE;AAErE,UAAM,UAAU;AAChB,UAAM,WAAW;AACjB,UAAM,QAAQ,KAAK,IAAI;AAEvB,WAAO,KAAK,IAAI,IAAI,QAAQ,SAAS;AACnC,YAAM,SAAS,MAAM,SAA6B,GAAG,SAAS,IAAI,MAAM,EAAE,EAAE;AAC5E,UAAI,OAAO,WAAW;AACpB,eAAO,EAAE,MAAM,YAAY,SAAS,MAAM,IAAI,MAAM,UAAU;AAChE,UAAI,OAAO,WAAW,YAAY,OAAO,WAAW;AAClD,eAAO,EAAE,MAAM,UAAU,QAAQ,SAAS,OAAO,MAAM,GAAG;AAC5D,YAAM,IAAI,QAAQ,OAAK,WAAW,GAAG,QAAQ,CAAC;AAAA,IAChD;AAEA,WAAO,EAAE,MAAM,UAAU,QAAQ,2CAA2C;AAAA,EAC9E,SACO,KAAK;AACV,UAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,WAAO,EAAE,MAAM,UAAU,QAAQ,yBAAyB,GAAG,GAAG;AAAA,EAClE;AACF;;;AC3KA,SAAS,mBAAmB;AAE5B,YAAY,SAAS;AAwCd,IAAM,YAAN,MAAgB;AAAA,EACJ;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAET,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMV,oBAAoB;AAAA;AAAA,EAEpB,oBAAoB;AAAA,EACpB,wBAAwD;AAAA,EAEhE,YAAY,QAAyB,UAA0D,CAAC,GAAG;AACjG,SAAK,SAAS;AACd,SAAK,SAAS,YAAY,EAAE,EAAE,SAAS,KAAK;AAI5C,SAAK,cAAc,IAAI;AAAA,MACrB,UAAU,KAAK,MAAM;AAAA,IACvB;AAEA,UAAM,OAAO,QAAQ,QAAQ,QAAQ,OAAO,WAAW;AACvD,UAAM,OAAO,QAAQ,QAAQ,QAAQ,OAAO,QAAQ;AAepD,SAAK,OAAW,UAAM,QAAQ,CAAC,WAAW,IAAI,GAAG;AAAA,MAC/C,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,KAAK,QAAQ,OAAO,QAAQ,IAAI;AAAA,MAChC,KAAK;AAAA,QACH,GAAG,QAAQ;AAAA;AAAA;AAAA;AAAA,QAIX,gBAAgB,uCAAuC,KAAK,MAAM;AAAA;AAAA,QAElE,KAAK,UAAU,KAAK,MAAM;AAAA,QAC1B,KAAK;AAAA;AAAA,QAEL,kCAAkC;AAAA,MACpC;AAAA,IACF,CAAC;AAED,SAAK,KAAK,OAAO,WAAS,KAAK,WAAW,KAAK,CAAC;AAChD,SAAK,KAAK,OAAO,CAAC,EAAE,UAAU,OAAO,MAAM;AACzC,WAAK,OAAO,OAAO,UAAU,MAAM;AAAA,IACrC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,eAA8B;AAC5B,QAAI,KAAK;AACP,aAAO,QAAQ,QAAQ;AACzB,WAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,WAAK,wBAAwB;AAAA,IAC/B,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,UAAU,MAAoB;AAG5B,UAAM,QAAQ,KAAK,QAAQ,WAAW,EAAE;AACxC,SAAK,KAAK,MAAM,GAAG,KAAK;AAAA,CAAI;AAAA,EAC9B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAS,MAAoB;AAC3B,SAAK,KAAK,MAAM,IAAI;AAAA,EACtB;AAAA;AAAA,EAGA,OAAO,MAAc,MAAoB;AACvC,SAAK,KAAK,OAAO,MAAM,IAAI;AAAA,EAC7B;AAAA;AAAA,EAGA,KAAK,QAAuB;AAC1B,SAAK,KAAK,KAAK,MAAM;AAAA,EACvB;AAAA;AAAA,EAGA,IAAI,MAAc;AAChB,WAAO,KAAK,KAAK;AAAA,EACnB;AAAA;AAAA,EAGA,mBAA2B;AACzB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAIQ,WAAW,OAAqB;AACtC,SAAK,WAAW;AAIhB,eAAS;AACP,YAAM,QAAQ,KAAK,QAAQ,MAAM,KAAK,WAAW;AACjD,UAAI,CAAC,SAAS,MAAM,UAAU;AAC5B;AAEF,YAAM,SAAS,KAAK,QAAQ,MAAM,GAAG,MAAM,KAAK;AAChD,YAAM,WAAW,OAAO,MAAM,CAAC,CAAC;AAGhC,UAAI,OAAO,SAAS,GAAG;AACrB,aAAK,qBAAqB;AAC1B,YAAI,KAAK;AACP,eAAK,OAAO,SAAS,MAAM;AAAA,MAC/B;AAEA,WAAK,UAAU,KAAK,QAAQ,MAAM,MAAM,QAAQ,MAAM,CAAC,EAAE,MAAM;AAE/D,UAAI,CAAC,KAAK,mBAAmB;AAI3B,aAAK,oBAAoB;AACzB,aAAK,oBAAoB;AACzB,cAAM,UAAU,KAAK;AACrB,aAAK,wBAAwB;AAC7B,YAAI;AACF,kBAAQ;AACV;AAAA,MACF;AAGA,YAAM,QAAQ,EAAE,QAAQ,KAAK,mBAAmB,SAAS;AACzD,WAAK,oBAAoB;AACzB,WAAK,OAAO,WAAW,KAAK;AAAA,IAC9B;AAMA,QAAI,CAAC,KAAK;AACR;AAEF,UAAM,cAAc,KAAK,QAAQ,YAAY,IAAI;AACjD,QAAI,eAAe,GAAG;AACpB,YAAM,QAAQ,KAAK,QAAQ,MAAM,GAAG,cAAc,CAAC;AACnD,WAAK,UAAU,KAAK,QAAQ,MAAM,cAAc,CAAC;AACjD,UAAI,MAAM,SAAS,GAAG;AACpB,aAAK,qBAAqB;AAC1B,aAAK,OAAO,SAAS,KAAK;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AACF;;;AChOA,SAAS,uBAAwB;AAEjC,SAAS,eAAe;AACxB,SAAS,YAAY;AACrB,OAAOC,cAAa;;;ACJpB,SAAS,iBAAiB;AAmB1B,IAAM,oBAA8B;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAaA,SAAS,uBAAuB,QAAyB;AAIvD,QAAM,UAAU;AAChB,aAAW,SAAS,OAAO,SAAS,OAAO,GAAG;AAC5C,UAAM,YAAY,MAAM,CAAC,MAAM;AAC/B,UAAM,YAAY,MAAM,CAAC;AAEzB,UAAM,aAAa,OAAO,OAAO,MAAM,SAAS,KAAK,MAAM,CAAC,EAAE,MAAM;AACpE,UAAM,QAAQ,WAAW,MAAM,IAAI,EAAE,MAAM,CAAC;AAC5C,UAAM,aAAa,MAAM,KAAK,CAAC,SAAS;AACtC,YAAM,UAAU,YAAY,KAAK,QAAQ,QAAQ,EAAE,IAAI;AACvD,aAAO,YAAY;AAAA,IACrB,CAAC;AACD,QAAI,CAAC;AACH,aAAO;AAAA,EACX;AACA,SAAO;AACT;AAWO,SAAS,qBAAqB,QAAiC;AACpE,MAAI,OAAO,KAAK,EAAE,WAAW;AAC3B,WAAO,EAAE,MAAM,WAAW;AAI5B,MAAI,uBAAuB,MAAM;AAC/B,WAAO,EAAE,MAAM,WAAW;AAE5B,QAAM,SAAS,UAAU,QAAQ,CAAC,MAAM,MAAM,MAAM,GAAG;AAAA,IACrD,OAAO,CAAC,UAAU,UAAU,MAAM;AAAA,IAClC,UAAU;AAAA,EACZ,CAAC;AAED,MAAI,OAAO,OAAO;AAGhB,WAAO,EAAE,MAAM,SAAS,SAAS,0CAA0C,OAAO,MAAM,OAAO,GAAG;AAAA,EACpG;AAEA,MAAI,OAAO,WAAW;AACpB,WAAO,EAAE,MAAM,WAAW;AAE5B,QAAM,SAAS,OAAO,UAAU;AAChC,aAAW,WAAW,mBAAmB;AACvC,QAAI,QAAQ,KAAK,MAAM;AACrB,aAAO,EAAE,MAAM,WAAW;AAAA,EAC9B;AAIA,SAAO,EAAE,MAAM,SAAS,SAAS,OAAO,KAAK,KAAK,eAAe;AACnE;;;ADxFA,IAAM,eAAe,KAAK,QAAQ,GAAG,WAAW,QAAQ,eAAe;AAOvE,IAAM,MAAM;AACZ,IAAM,MAAM;AAiDL,IAAM,YAAN,MAAgB;AAAA,EACJ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT,KAA+B;AAAA;AAAA,EAE/B,SAAS;AAAA;AAAA,EAET,UAAU;AAAA,EAElB,YAAY,QAAoB,UAAuB,CAAC,GAAG;AACzD,SAAK,SAAS;AACd,SAAK,QAAQ,QAAQ,SAAS,QAAQ;AACtC,SAAK,SAAS,QAAQ,UAAU,QAAQ;AACxC,SAAK,QAAQ,QAAQ,SAAS;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,MAAqB;AACzB,QAAI,KAAK;AACP;AAEF,SAAK,KAAK,gBAAgB;AAAA,MACxB,OAAO,KAAK;AAAA,MACZ,QAAQ,KAAK;AAAA,MACb,QAAQ;AAAA,MACR,aAAa;AAAA;AAAA,MAEb,UAAU;AAAA,IACZ,CAAC;AAED,QAAI,CAAC,KAAK;AACR,WAAK,YAAY;AAEnB,SAAK,WAAW,GAAG;AAEnB,WAAO,IAAI,QAAc,CAAC,YAAY;AACpC,WAAK,GAAI,GAAG,QAAQ,OAAO,SAAS;AAClC,YAAI;AACF,gBAAM,KAAK,WAAW,IAAI;AAAA,QAC5B,SACO,KAAK;AACV,gBAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC3D,UAAAC,SAAQ,MAAM,gBAAgB,GAAG,EAAE;AACnC,eAAK,YAAY;AACjB,eAAK,WAAW,GAAG;AAAA,QACrB;AAAA,MACF,CAAC;AAED,WAAK,GAAI,GAAG,UAAU,MAAM;AAE1B,YAAI,KAAK,OAAO,SAAS;AACvB,eAAK,OAAO,MAAM,IAAI;AACxB,aAAK,YAAY;AACjB,aAAK,WAAW,GAAG;AAAA,MACrB,CAAC;AAED,WAAK,GAAI,GAAG,SAAS,YAAY;AAE/B,aAAK,UAAU;AACf,cAAM,KAAK,OAAO,OAAO;AACzB,gBAAQ;AAAA,MACV,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,OAAa;AACX,QAAI,KAAK;AACP,WAAK,GAAG,MAAM;AAAA,EAClB;AAAA;AAAA,EAIQ,cAAoB;AAC1B,SAAK,OAAO,MAAM,0BAA0B;AAC5C,SAAK,OAAO,MAAM,mBAAmB;AACrC,SAAK,OAAO,MAAM,IAAI;AAAA,EACxB;AAAA,EAEA,MAAc,WAAW,SAAgC;AAGvD,SAAK,SAAS,KAAK,OAAO,WAAW,IACjC,UACA,GAAG,KAAK,MAAM;AAAA,EAAK,OAAO;AAE9B,UAAM,SAAS,qBAAqB,KAAK,MAAM;AAE/C,QAAI,OAAO,SAAS,YAAY;AAC9B,WAAK,WAAW,GAAG;AACnB;AAAA,IACF;AAEA,QAAI,OAAO,SAAS,SAAS;AAC3B,WAAK,OAAO,MAAM,GAAG,OAAO,OAAO;AAAA,CAAI;AACvC,WAAK,YAAY;AACjB,WAAK,WAAW,GAAG;AACnB;AAAA,IACF;AAGA,UAAM,eAAe,KAAK;AAC1B,SAAK,YAAY;AAGjB,QAAI,aAAa,KAAK,EAAE,WAAW,GAAG;AACpC,WAAK,WAAW,GAAG;AACnB;AAAA,IACF;AAEA,UAAM,KAAK,OAAO,OAAO,YAAY;AAIrC,SAAK,WAAW,GAAG;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,WAAW,QAAsB;AACvC,QAAI,KAAK,WAAW,CAAC,KAAK;AACxB;AACF,QAAI;AACF,WAAK,GAAG,UAAU,MAAM;AACxB,WAAK,GAAG,OAAO;AAAA,IACjB,SACO,KAAK;AAEV,YAAM,OAAQ,KAA+B;AAC7C,UAAI,SAAS;AACX,cAAM;AAAA,IACV;AAAA,EACF;AAAA,EAEQ,cAAoB;AAC1B,SAAK,SAAS;AAAA,EAChB;AACF;;;AEzNA,SAAS,eAAAC,oBAAmB;AAQrB,IAAM,eAAN,MAAmB;AAAA,EACf;AAAA,EACA;AAAA,EACD,UAAU;AAAA,EAElB,YAAY,SAA8C;AACxD,SAAK,KAAKC,aAAY,CAAC,EAAE,SAAS,KAAK;AACvC,SAAK,YAAY,KAAK,IAAI;AAC1B,mBAAe;AAAA,MACb,QAAQ;AAAA,MACR,YAAY,KAAK;AAAA,MACjB,MAAM,QAAQ;AAAA,MACd,WAAW,QAAQ;AAAA,IACrB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,eAAe,QAIJ;AACT,UAAM,MAAM,EAAE,KAAK;AACnB,mBAAe;AAAA,MACb,QAAQ;AAAA,MACR,YAAY,KAAK;AAAA,MACjB;AAAA,MACA,MAAM,OAAO;AAAA,MACb,UAAU,OAAO;AAAA,MACjB,YAAY,OAAO;AAAA,MACnB,QAAQ;AAAA,IACV,CAAC;AACD,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,YAAY,QAAiD;AAC3D,mBAAe;AAAA,MACb,QAAQ;AAAA,MACR,YAAY,KAAK;AAAA,MACjB,KAAK,OAAO;AAAA,MACZ,WAAW,OAAO;AAAA,IACpB,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,cAAc,QAAgD;AAC5D,UAAM,MAAM,EAAE,KAAK;AACnB,mBAAe;AAAA,MACb,QAAQ;AAAA,MACR,YAAY,KAAK;AAAA,MACjB;AAAA,MACA,MAAM,OAAO;AAAA,MACb,QAAQ;AAAA,MACR,QAAQ,OAAO;AAAA,IACjB,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,QAAc;AACZ,mBAAe;AAAA,MACb,QAAQ;AAAA,MACR,YAAY,KAAK;AAAA,MACjB,aAAa,KAAK,IAAI,IAAI,KAAK;AAAA,MAC/B,OAAO,KAAK;AAAA,IACd,CAAC;AAAA,EACH;AACF;;;AL9CA,eAAsB,sBAAqC;AAKzD,MAAI,iBAAsC;AAC1C,MAAI,eAAe;AACnB,MAAI,eAAe;AAGnB,MAAI,OAAyB;AAI7B,QAAM,SAAS,IAAI;AAAA,IACjB;AAAA,MACE,UAAU,CAAC,UAAU;AAInB,gBAAQ,OAAO,MAAM,KAAK;AAAA,MAC5B;AAAA,MACA,YAAY,CAAC,UAAU;AACrB,YAAI,gBAAgB;AAClB,gBAAM,IAAI;AACV,2BAAiB;AACjB,yBAAe,MAAM;AACrB,YAAE;AAAA,QACJ;AAAA,MACF;AAAA,MACA,QAAQ,CAAC,aAAa;AAGpB,YAAI,CAAC,cAAc;AACjB,kBAAQ,OAAO,MAAM;AAAA,yBAA4B,QAAQ;AAAA,CAAK;AAC9D,gBAAM,KAAK;AAAA,QACb;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,aAAa;AAE1B,QAAM,aAAa,SAAS;AAC5B,QAAM,OAAO,SAAS;AACtB,QAAM,UAAU,IAAI,aAAa;AAAA,IAC/B,MAAM;AAAA,IACN,WAAW,MAAM,SAAS;AAAA,EAC5B,CAAC;AAED,SAAO,IAAI;AAAA,IACT;AAAA,MACE,QAAQ,OAAO,SAAS;AAEtB,cAAM,QAAQ,MAAM,yBAAyB,MAAM;AAAA,UACjD;AAAA,UACA,UAAU;AAAA,QACZ,CAAC;AAED,YAAI,MAAM,SAAS,UAAU;AAC3B,kBAAQ,cAAc,EAAE,MAAM,QAAQ,MAAM,OAAO,CAAC;AACpD,UAAAC,SAAQ,MAAM,MAAM,MAAM;AAC1B;AAAA,QACF;AAEA,cAAM,MAAM,QAAQ,eAAe;AAAA,UACjC;AAAA,UACA,SAAS,MAAM;AAAA,UACf,WAAW,MAAM;AAAA,QACnB,CAAC;AAGD,cAAM,SAAS,QAAQ,MAAM,SAAU,QAAQ,MAA4B;AAC3E,YAAI,QAAQ,MAAM,SAAS,CAAC;AAC1B,UAAC,QAAQ,MAA4B,WAAW,IAAI;AAEtD,cAAM,UAAU,CAAC,UAAkB;AACjC,iBAAO,SAAS,MAAM,SAAS,CAAC;AAAA,QAClC;AACA,cAAM,oBAAoB,QAAQ,MAAM,UAAU;AAClD,YAAI;AACF,kBAAQ,MAAM,GAAG,QAAQ,OAAO;AAElC,YAAI;AACF,gBAAM,IAAI,QAAc,CAAC,YAAY;AACnC,6BAAiB;AACjB,mBAAO,UAAU,IAAI;AAAA,UACvB,CAAC;AAAA,QACH,UACA;AACE,cAAI,mBAAmB;AACrB,oBAAQ,MAAM,IAAI,QAAQ,OAAO;AACjC,gBAAI,CAAC,UAAU,QAAQ,MAAM;AAC3B,cAAC,QAAQ,MAA4B,WAAW,KAAK;AAAA,UACzD;AAAA,QACF;AAEA,gBAAQ,YAAY,EAAE,KAAK,UAAU,aAAa,CAAC;AAEnD,YAAI,iBAAiB,GAAG;AACtB,UAAAA,SAAQ,MAAM,SAAS,YAAY,GAAG;AAAA,QACxC;AAAA,MACF;AAAA,MACA,QAAQ,MAAM;AACZ,uBAAe;AACf,gBAAQ,MAAM;AACd,YAAI;AACF,iBAAO,KAAK;AAAA,QACd,QACM;AAAA,QAAC;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAGA,QAAM,WAAW,MAAM;AACrB,UAAM,OAAO,QAAQ,OAAO,WAAW;AACvC,UAAM,OAAO,QAAQ,OAAO,QAAQ;AACpC,QAAI;AACF,aAAO,OAAO,MAAM,IAAI;AAAA,IAC1B,QACM;AAAA,IAAC;AAAA,EACT;AACA,UAAQ,OAAO,GAAG,UAAU,QAAQ;AAKpC,QAAM,aAAa,MAAM;AACvB,QAAI,QAAQ,MAAM,SAAU,QAAQ,MAA4B,OAAO;AACrE,UAAI;AACF,QAAC,QAAQ,MAA4B,WAAW,KAAK;AAAA,MACvD,QACM;AAAA,MAAC;AAAA,IACT;AAAA,EACF;AACA,UAAQ,GAAG,QAAQ,UAAU;AAK7B,QAAM,mBAAmB,MAAM;AAC7B,QAAI;AACF;AACF,mBAAe;AACf,eAAW;AACX,QAAI;AACF,cAAQ,MAAM;AAAA,IAChB,QACM;AAAA,IAAC;AACP,QAAI;AACF,aAAO,KAAK;AAAA,IACd,QACM;AAAA,IAAC;AACP,QAAI;AACF,YAAM,KAAK;AAAA,IACb,QACM;AAAA,IAAC;AAAA,EACT;AACA,UAAQ,GAAG,WAAW,gBAAgB;AACtC,UAAQ,GAAG,UAAU,gBAAgB;AAErC,MAAI;AACF,UAAM,KAAK,IAAI;AAAA,EACjB,UACA;AACE,YAAQ,OAAO,IAAI,UAAU,QAAQ;AACrC,YAAQ,IAAI,QAAQ,UAAU;AAC9B,YAAQ,IAAI,WAAW,gBAAgB;AACvC,YAAQ,IAAI,UAAU,gBAAgB;AAAA,EACxC;AACF;","names":["consola","token","consola","consola","randomBytes","randomBytes","consola"]}

package/dist/{server-FR6GFS3S.js → server-GPETT3ON.js}

@@ -3,14 +3,16 @@ import {
   apiFetch,
   createShapesGrant,
   fetchGrantToken,
-  getAuthToken,
   getGrantsEndpoint,
-  getIdpUrl,
-  getRequesterIdentity,
   loadAdapter,
   resolveCommand,
   verifyAndExecute
-} from "./chunk-G3Q2TMAI.js";
+} from "./chunk-B32ZQP5K.js";
+import {
+  getAuthToken,
+  getIdpUrl,
+  getRequesterIdentity
+} from "./chunk-TBYYREL6.js";
 
 // src/commands/mcp/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -299,7 +301,7 @@ function registerAdapterTools(server) {
 async function startMcpServer(transport, port) {
   const server = new McpServer({
     name: "apes",
-    version: true ? "0.6.1" : "0.1.0"
+    version: true ? "0.7.2" : "0.1.0"
   });
   registerStaticTools(server);
   registerAdapterTools(server);
@@ -327,4 +329,4 @@ async function startMcpServer(transport, port) {
 export {
   startMcpServer
 };
-//# sourceMappingURL=server-FR6GFS3S.js.map
+//# sourceMappingURL=server-GPETT3ON.js.map

package/dist/{server-FR6GFS3S.js.map → server-GPETT3ON.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/commands/mcp/server.ts","../src/commands/mcp/tools.ts","../src/commands/mcp/adapter-tools.ts"],"sourcesContent":["import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'\nimport { SSEServerTransport } from '@modelcontextprotocol/sdk/server/sse.js'\nimport { createServer } from 'node:http'\nimport consola from 'consola'\nimport { registerAdapterTools, registerStaticTools } from './tools'\n\ndeclare const __VERSION__: string\n\nexport async function startMcpServer(transport: 'stdio' | 'sse', port: number) {\n  const server = new McpServer({\n    name: 'apes',\n    version: typeof __VERSION__ !== 'undefined' ? __VERSION__ : '0.1.0',\n  })\n\n  // Register static tools\n  registerStaticTools(server)\n\n  // Register adapter-derived tools\n  registerAdapterTools(server)\n\n  if (transport === 'stdio') {\n    const stdioTransport = new StdioServerTransport()\n    await server.connect(stdioTransport)\n  }\n  else if (transport === 'sse') {\n    const httpServer = createServer(async (req, res) => {\n      if (req.url === '/sse' && req.method === 'GET') {\n        const sseTransport = new SSEServerTransport('/messages', res)\n        await server.connect(sseTransport)\n      }\n      else if (req.url === '/messages' && req.method === 'POST') {\n        // SSE message handling is done by the transport\n        res.writeHead(200)\n        res.end()\n      }\n      else {\n        res.writeHead(404)\n        res.end('Not found')\n      }\n    })\n\n    httpServer.listen(port, () => {\n      consola.info(`MCP SSE server listening on http://localhost:${port}/sse`)\n    })\n  }\n}\n","import { hostname } from 'node:os'\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport {\n  createShapesGrant,\n  fetchGrantToken,\n  loadAdapter,\n  resolveCommand,\n  verifyAndExecute,\n} from '../../shapes/index.js'\nimport { z } from 'zod'\nimport { getAuthToken, getIdpUrl, getRequesterIdentity } from '../../config'\nimport { apiFetch, getGrantsEndpoint } from '../../http'\nimport { loadAdapterTools } from './adapter-tools'\n\nexport function registerStaticTools(server: McpServer) {\n  server.registerTool('apes.grants.list', {\n    description: 'List grants',\n    inputSchema: {\n      status: z.string().optional().describe('Filter by status: pending, approved, denied, revoked, used'),\n      limit: z.string().optional().describe('Max results'),\n    },\n  }, async ({ status, limit }) => {\n    const idp = getIdpUrl()\n    if (!idp)\n      return { content: [{ type: 'text' as const, text: 'Not configured. Run `apes login` first.' }] }\n\n    const grantsUrl = await getGrantsEndpoint(idp)\n    const params = new URLSearchParams()\n    if (status)\n      params.set('status', status)\n    if (limit)\n      params.set('limit', limit)\n    const query = params.toString() ? `?${params.toString()}` : ''\n    const response = await apiFetch(`${grantsUrl}${query}`)\n    return { content: [{ type: 'text' as const, text: JSON.stringify(response, null, 2) }] }\n  })\n\n  server.registerTool('apes.grants.request', {\n    description: 'Request a grant for a command',\n    inputSchema: {\n      command: z.string().describe('Command to request permission for'),\n      audience: z.string().describe('Service identifier (e.g. escapes, proxy, shapes)'),\n      approval: z.string().optional().describe('once, timed, or always'),\n      reason: z.string().optional().describe('Reason for the request'),\n    },\n  }, async ({ command, audience, approval, reason }) => {\n    const idp = getIdpUrl()\n    const requester = getRequesterIdentity()\n    if (!idp || !requester)\n      return { content: [{ type: 'text' as const, text: 'Not authenticated. Run `apes login` first.' }] }\n\n    const grantsUrl = await getGrantsEndpoint(idp)\n    const cmdParts = command.split(' ')\n    const grant = await apiFetch<{ id: string, status: string }>(grantsUrl, {\n      method: 'POST',\n      body: {\n        requester,\n        target_host: hostname(),\n        audience,\n        grant_type: approval || 'once',\n        command: cmdParts,\n        reason: reason || command,\n      },\n    })\n\n    return {\n      content: [{\n        type: 'text' as const,\n        text: JSON.stringify({\n          status: 'pending_approval',\n          grant_id: grant.id,\n          approve_url: `${idp}/grant-approval?grant_id=${grant.id}`,\n          message: 'Grant needs approval. Approve via URL or `apes grants approve <id>`, then retry with grant_id.',\n        }, null, 2),\n      }],\n    }\n  })\n\n  server.registerTool('apes.config.get', {\n    description: 'Get apes configuration value',\n    inputSchema: {\n      key: z.string().describe('Config key: idp, email'),\n    },\n  }, ({ key }) => {\n    if (key === 'idp') {\n      const idp = getIdpUrl()\n      return { content: [{ type: 'text' as const, text: idp || 'Not configured' }] }\n    }\n    if (key === 'email') {\n      const email = getRequesterIdentity()\n      return { content: [{ type: 'text' as const, text: email || 'Not logged in' }] }\n    }\n    return { content: [{ type: 'text' as const, text: `Unknown key: ${key}` }] }\n  })\n\n  server.registerTool('apes.explain', {\n    description: 'Show what permissions a command would need',\n    inputSchema: {\n      command: z.array(z.string()).describe('Command as array of strings (e.g. [\"gh\", \"repo\", \"list\"])'),\n      adapter: z.string().optional().describe('Explicit adapter TOML path'),\n    },\n  }, async ({ command, adapter }) => {\n    try {\n      const loaded = loadAdapter(command[0]!, adapter)\n      const resolved = await resolveCommand(loaded, command)\n      return {\n        content: [{\n          type: 'text' as const,\n          text: JSON.stringify({\n            adapter: resolved.adapter.cli.id,\n            operation: resolved.detail.operation_id,\n            display: resolved.detail.display,\n            permission: resolved.permission,\n            resource_chain: resolved.detail.resource_chain,\n            exact_command: resolved.detail.constraints?.exact_command ?? false,\n            adapter_digest: resolved.digest,\n          }, null, 2),\n        }],\n      }\n    }\n    catch (err) {\n      return { content: [{ type: 'text' as const, text: `Error: ${err instanceof Error ? err.message : String(err)}` }], isError: true }\n    }\n  })\n\n  server.registerTool('apes.adapter.list', {\n    description: 'List installed CLI adapters',\n  }, () => {\n    const tools = loadAdapterTools()\n    const adapters = [...new Set(tools.map(t => t.adapterId))]\n    return {\n      content: [{\n        type: 'text' as const,\n        text: adapters.length > 0\n          ? `Installed adapters: ${adapters.join(', ')}`\n          : 'No adapters installed.',\n      }],\n    }\n  })\n\n  server.registerTool('apes.fetch', {\n    description: 'Make an authenticated HTTP request',\n    inputSchema: {\n      method: z.string().describe('HTTP method (GET, POST, PUT, DELETE)'),\n      url: z.string().describe('URL to fetch'),\n      body: z.string().optional().describe('Request body (JSON string)'),\n    },\n  }, async ({ method, url, body }) => {\n    const token = getAuthToken()\n    if (!token)\n      return { content: [{ type: 'text' as const, text: 'Not authenticated. Run `apes login` first.' }], isError: true }\n\n    const response = await fetch(url, {\n      method,\n      headers: {\n        'Authorization': `Bearer ${token}`,\n        'Content-Type': 'application/json',\n      },\n      body: body || undefined,\n    })\n    const text = await response.text()\n    try {\n      return { content: [{ type: 'text' as const, text: JSON.stringify(JSON.parse(text), null, 2) }] }\n    }\n    catch {\n      return { content: [{ type: 'text' as const, text }] }\n    }\n  })\n}\n\nexport function registerAdapterTools(server: McpServer) {\n  const adapterTools = loadAdapterTools()\n\n  for (const tool of adapterTools) {\n    // Build Zod schema from adapter operation\n    const schemaShape: Record<string, z.ZodType> = {\n      grant_id: z.string().optional().describe('Grant ID from a previous pending_approval response'),\n    }\n\n    if (tool.inputSchema && typeof tool.inputSchema === 'object') {\n      const props = (tool.inputSchema as { properties?: Record<string, { description?: string }> }).properties\n      if (props) {\n        for (const [key, val] of Object.entries(props)) {\n          schemaShape[key] = z.string().optional().describe(val.description || key)\n        }\n      }\n    }\n\n    server.registerTool(tool.name, {\n      description: tool.description,\n      inputSchema: schemaShape,\n    }, async (args) => {\n      const idp = getIdpUrl()\n      if (!idp)\n        return { content: [{ type: 'text' as const, text: 'Not configured. Run `apes login` first.' }], isError: true }\n\n      try {\n        const loaded = loadAdapter(tool.adapterId)\n        const op = loaded.adapter.operations.find(o => o.id === tool.operationId)\n        if (!op)\n          return { content: [{ type: 'text' as const, text: `Operation ${tool.operationId} not found` }], isError: true }\n\n        const argv = [loaded.adapter.cli.executable, ...op.command]\n        if (op.positionals) {\n          for (const pos of op.positionals) {\n            if (args[pos])\n              argv.push(String(args[pos]))\n          }\n        }\n        if (op.required_options) {\n          for (const opt of op.required_options) {\n            const name = opt.replace(/^--/, '')\n            if (args[name])\n              argv.push(opt, String(args[name]))\n          }\n        }\n\n        const resolved = await resolveCommand(loaded, argv)\n\n        if (args.grant_id) {\n          const token = await fetchGrantToken(idp, String(args.grant_id))\n          await verifyAndExecute(token, resolved)\n          return { content: [{ type: 'text' as const, text: 'Command executed successfully.' }] }\n        }\n\n        const grant = await createShapesGrant(resolved, { idp, approval: 'once' })\n        return {\n          content: [{\n            type: 'text' as const,\n            text: JSON.stringify({\n              status: 'pending_approval',\n              grant_id: grant.id,\n              approve_url: `${idp}/grant-approval?grant_id=${grant.id}`,\n              message: 'Grant needs approval. Approve, then call this tool again with grant_id.',\n            }, null, 2),\n          }],\n        }\n      }\n      catch (err) {\n        return { content: [{ type: 'text' as const, text: `Error: ${err instanceof Error ? err.message : String(err)}` }], isError: true }\n      }\n    })\n  }\n}\n","import { readdirSync } from 'node:fs'\nimport { homedir } from 'node:os'\nimport { join } from 'node:path'\nimport { loadAdapter } from '../../shapes/index.js'\nimport type { ShapesOperation } from '../../shapes/index.js'\n\nexport interface AdapterToolDef {\n  name: string\n  description: string\n  inputSchema: Record<string, unknown>\n  adapterId: string\n  operationId: string\n}\n\nfunction operationToInputSchema(op: ShapesOperation): Record<string, unknown> {\n  const properties: Record<string, unknown> = {}\n  const required: string[] = []\n\n  if (op.positionals) {\n    for (const pos of op.positionals) {\n      properties[pos] = { type: 'string', description: `Positional argument: ${pos}` }\n      required.push(pos)\n    }\n  }\n\n  if (op.required_options) {\n    for (const opt of op.required_options) {\n      const name = opt.replace(/^--/, '')\n      properties[name] = { type: 'string', description: `Required option: ${opt}` }\n      required.push(name)\n    }\n  }\n\n  return {\n    type: 'object',\n    properties,\n    required: required.length > 0 ? required : undefined,\n  }\n}\n\nfunction scanAdapterDir(dir: string): string[] {\n  try {\n    return readdirSync(dir)\n      .filter(f => f.endsWith('.toml'))\n      .map(f => f.replace('.toml', ''))\n  }\n  catch {\n    return []\n  }\n}\n\nexport function loadAdapterTools(): AdapterToolDef[] {\n  const tools: AdapterToolDef[] = []\n  const seen = new Set<string>()\n\n  const adapterDirs = [\n    join(process.cwd(), '.openape', 'shapes', 'adapters'),\n    join(homedir(), '.openape', 'shapes', 'adapters'),\n    '/etc/openape/shapes/adapters',\n  ]\n\n  for (const dir of adapterDirs) {\n    for (const id of scanAdapterDir(dir)) {\n      if (seen.has(id))\n        continue\n      seen.add(id)\n\n      try {\n        const loaded = loadAdapter(id)\n        for (const op of loaded.adapter.operations) {\n          tools.push({\n            name: `apes.run.${id}.${op.id}`,\n            description: op.display || `${id}: ${op.id}`,\n            inputSchema: operationToInputSchema(op),\n            adapterId: id,\n            operationId: op.id,\n          })\n        }\n      }\n      catch {\n        // Skip adapters that fail to load\n      }\n    }\n  }\n\n  return tools\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AACrC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,OAAO,aAAa;;;ACJpB,SAAS,gBAAgB;AASzB,SAAS,SAAS;;;ACTlB,SAAS,mBAAmB;AAC5B,SAAS,eAAe;AACxB,SAAS,YAAY;AAYrB,SAAS,uBAAuB,IAA8C;AAC5E,QAAM,aAAsC,CAAC;AAC7C,QAAM,WAAqB,CAAC;AAE5B,MAAI,GAAG,aAAa;AAClB,eAAW,OAAO,GAAG,aAAa;AAChC,iBAAW,GAAG,IAAI,EAAE,MAAM,UAAU,aAAa,wBAAwB,GAAG,GAAG;AAC/E,eAAS,KAAK,GAAG;AAAA,IACnB;AAAA,EACF;AAEA,MAAI,GAAG,kBAAkB;AACvB,eAAW,OAAO,GAAG,kBAAkB;AACrC,YAAM,OAAO,IAAI,QAAQ,OAAO,EAAE;AAClC,iBAAW,IAAI,IAAI,EAAE,MAAM,UAAU,aAAa,oBAAoB,GAAG,GAAG;AAC5E,eAAS,KAAK,IAAI;AAAA,IACpB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,UAAU,SAAS,SAAS,IAAI,WAAW;AAAA,EAC7C;AACF;AAEA,SAAS,eAAe,KAAuB;AAC7C,MAAI;AACF,WAAO,YAAY,GAAG,EACnB,OAAO,OAAK,EAAE,SAAS,OAAO,CAAC,EAC/B,IAAI,OAAK,EAAE,QAAQ,SAAS,EAAE,CAAC;AAAA,EACpC,QACM;AACJ,WAAO,CAAC;AAAA,EACV;AACF;AAEO,SAAS,mBAAqC;AACnD,QAAM,QAA0B,CAAC;AACjC,QAAM,OAAO,oBAAI,IAAY;AAE7B,QAAM,cAAc;AAAA,IAClB,KAAK,QAAQ,IAAI,GAAG,YAAY,UAAU,UAAU;AAAA,IACpD,KAAK,QAAQ,GAAG,YAAY,UAAU,UAAU;AAAA,IAChD;AAAA,EACF;AAEA,aAAW,OAAO,aAAa;AAC7B,eAAW,MAAM,eAAe,GAAG,GAAG;AACpC,UAAI,KAAK,IAAI,EAAE;AACb;AACF,WAAK,IAAI,EAAE;AAEX,UAAI;AACF,cAAM,SAAS,YAAY,EAAE;AAC7B,mBAAW,MAAM,OAAO,QAAQ,YAAY;AAC1C,gBAAM,KAAK;AAAA,YACT,MAAM,YAAY,EAAE,IAAI,GAAG,EAAE;AAAA,YAC7B,aAAa,GAAG,WAAW,GAAG,EAAE,KAAK,GAAG,EAAE;AAAA,YAC1C,aAAa,uBAAuB,EAAE;AAAA,YACtC,WAAW;AAAA,YACX,aAAa,GAAG;AAAA,UAClB,CAAC;AAAA,QACH;AAAA,MACF,QACM;AAAA,MAEN;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;;;ADxEO,SAAS,oBAAoB,QAAmB;AACrD,SAAO,aAAa,oBAAoB;AAAA,IACtC,aAAa;AAAA,IACb,aAAa;AAAA,MACX,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,4DAA4D;AAAA,MACnG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,aAAa;AAAA,IACrD;AAAA,EACF,GAAG,OAAO,EAAE,QAAQ,MAAM,MAAM;AAC9B,UAAM,MAAM,UAAU;AACtB,QAAI,CAAC;AACH,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,0CAA0C,CAAC,EAAE;AAEjG,UAAM,YAAY,MAAM,kBAAkB,GAAG;AAC7C,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI;AACF,aAAO,IAAI,UAAU,MAAM;AAC7B,QAAI;AACF,aAAO,IAAI,SAAS,KAAK;AAC3B,UAAM,QAAQ,OAAO,SAAS,IAAI,IAAI,OAAO,SAAS,CAAC,KAAK;AAC5D,UAAM,WAAW,MAAM,SAAS,GAAG,SAAS,GAAG,KAAK,EAAE;AACtD,WAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,UAAU,MAAM,CAAC,EAAE,CAAC,EAAE;AAAA,EACzF,CAAC;AAED,SAAO,aAAa,uBAAuB;AAAA,IACzC,aAAa;AAAA,IACb,aAAa;AAAA,MACX,SAAS,EAAE,OAAO,EAAE,SAAS,mCAAmC;AAAA,MAChE,UAAU,EAAE,OAAO,EAAE,SAAS,kDAAkD;AAAA,MAChF,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,wBAAwB;AAAA,MACjE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,wBAAwB;AAAA,IACjE;AAAA,EACF,GAAG,OAAO,EAAE,SAAS,UAAU,UAAU,OAAO,MAAM;AACpD,UAAM,MAAM,UAAU;AACtB,UAAM,YAAY,qBAAqB;AACvC,QAAI,CAAC,OAAO,CAAC;AACX,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,6CAA6C,CAAC,EAAE;AAEpG,UAAM,YAAY,MAAM,kBAAkB,GAAG;AAC7C,UAAM,WAAW,QAAQ,MAAM,GAAG;AAClC,UAAM,QAAQ,MAAM,SAAyC,WAAW;AAAA,MACtE,QAAQ;AAAA,MACR,MAAM;AAAA,QACJ;AAAA,QACA,aAAa,SAAS;AAAA,QACtB;AAAA,QACA,YAAY,YAAY;AAAA,QACxB,SAAS;AAAA,QACT,QAAQ,UAAU;AAAA,MACpB;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL,SAAS,CAAC;AAAA,QACR,MAAM;AAAA,QACN,MAAM,KAAK,UAAU;AAAA,UACnB,QAAQ;AAAA,UACR,UAAU,MAAM;AAAA,UAChB,aAAa,GAAG,GAAG,4BAA4B,MAAM,EAAE;AAAA,UACvD,SAAS;AAAA,QACX,GAAG,MAAM,CAAC;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAED,SAAO,aAAa,mBAAmB;AAAA,IACrC,aAAa;AAAA,IACb,aAAa;AAAA,MACX,KAAK,EAAE,OAAO,EAAE,SAAS,wBAAwB;AAAA,IACnD;AAAA,EACF,GAAG,CAAC,EAAE,IAAI,MAAM;AACd,QAAI,QAAQ,OAAO;AACjB,YAAM,MAAM,UAAU;AACtB,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,OAAO,iBAAiB,CAAC,EAAE;AAAA,IAC/E;AACA,QAAI,QAAQ,SAAS;AACnB,YAAM,QAAQ,qBAAqB;AACnC,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,SAAS,gBAAgB,CAAC,EAAE;AAAA,IAChF;AACA,WAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,gBAAgB,GAAG,GAAG,CAAC,EAAE;AAAA,EAC7E,CAAC;AAED,SAAO,aAAa,gBAAgB;AAAA,IAClC,aAAa;AAAA,IACb,aAAa;AAAA,MACX,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,2DAA2D;AAAA,MACjG,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,4BAA4B;AAAA,IACtE;AAAA,EACF,GAAG,OAAO,EAAE,SAAS,QAAQ,MAAM;AACjC,QAAI;AACF,YAAM,SAAS,YAAY,QAAQ,CAAC,GAAI,OAAO;AAC/C,YAAM,WAAW,MAAM,eAAe,QAAQ,OAAO;AACrD,aAAO;AAAA,QACL,SAAS,CAAC;AAAA,UACR,MAAM;AAAA,UACN,MAAM,KAAK,UAAU;AAAA,YACnB,SAAS,SAAS,QAAQ,IAAI;AAAA,YAC9B,WAAW,SAAS,OAAO;AAAA,YAC3B,SAAS,SAAS,OAAO;AAAA,YACzB,YAAY,SAAS;AAAA,YACrB,gBAAgB,SAAS,OAAO;AAAA,YAChC,eAAe,SAAS,OAAO,aAAa,iBAAiB;AAAA,YAC7D,gBAAgB,SAAS;AAAA,UAC3B,GAAG,MAAM,CAAC;AAAA,QACZ,CAAC;AAAA,MACH;AAAA,IACF,SACO,KAAK;AACV,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,KAAK;AAAA,IACnI;AAAA,EACF,CAAC;AAED,SAAO,aAAa,qBAAqB;AAAA,IACvC,aAAa;AAAA,EACf,GAAG,MAAM;AACP,UAAM,QAAQ,iBAAiB;AAC/B,UAAM,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,OAAK,EAAE,SAAS,CAAC,CAAC;AACzD,WAAO;AAAA,MACL,SAAS,CAAC;AAAA,QACR,MAAM;AAAA,QACN,MAAM,SAAS,SAAS,IACpB,uBAAuB,SAAS,KAAK,IAAI,CAAC,KAC1C;AAAA,MACN,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAED,SAAO,aAAa,cAAc;AAAA,IAChC,aAAa;AAAA,IACb,aAAa;AAAA,MACX,QAAQ,EAAE,OAAO,EAAE,SAAS,sCAAsC;AAAA,MAClE,KAAK,EAAE,OAAO,EAAE,SAAS,cAAc;AAAA,MACvC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,4BAA4B;AAAA,IACnE;AAAA,EACF,GAAG,OAAO,EAAE,QAAQ,KAAK,KAAK,MAAM;AAClC,UAAM,QAAQ,aAAa;AAC3B,QAAI,CAAC;AACH,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,6CAA6C,CAAC,GAAG,SAAS,KAAK;AAEnH,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC;AAAA,MACA,SAAS;AAAA,QACP,iBAAiB,UAAU,KAAK;AAAA,QAChC,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,QAAQ;AAAA,IAChB,CAAC;AACD,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI;AACF,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,KAAK,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,EAAE;AAAA,IACjG,QACM;AACJ,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,KAAK,CAAC,EAAE;AAAA,IACtD;AAAA,EACF,CAAC;AACH;AAEO,SAAS,qBAAqB,QAAmB;AACtD,QAAM,eAAe,iBAAiB;AAEtC,aAAW,QAAQ,cAAc;AAE/B,UAAM,cAAyC;AAAA,MAC7C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,oDAAoD;AAAA,IAC/F;AAEA,QAAI,KAAK,eAAe,OAAO,KAAK,gBAAgB,UAAU;AAC5D,YAAM,QAAS,KAAK,YAA0E;AAC9F,UAAI,OAAO;AACT,mBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC9C,sBAAY,GAAG,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,IAAI,eAAe,GAAG;AAAA,QAC1E;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,MAAM;AAAA,MAC7B,aAAa,KAAK;AAAA,MAClB,aAAa;AAAA,IACf,GAAG,OAAO,SAAS;AACjB,YAAM,MAAM,UAAU;AACtB,UAAI,CAAC;AACH,eAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,0CAA0C,CAAC,GAAG,SAAS,KAAK;AAEhH,UAAI;AACF,cAAM,SAAS,YAAY,KAAK,SAAS;AACzC,cAAM,KAAK,OAAO,QAAQ,WAAW,KAAK,OAAK,EAAE,OAAO,KAAK,WAAW;AACxE,YAAI,CAAC;AACH,iBAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,aAAa,KAAK,WAAW,aAAa,CAAC,GAAG,SAAS,KAAK;AAEhH,cAAM,OAAO,CAAC,OAAO,QAAQ,IAAI,YAAY,GAAG,GAAG,OAAO;AAC1D,YAAI,GAAG,aAAa;AAClB,qBAAW,OAAO,GAAG,aAAa;AAChC,gBAAI,KAAK,GAAG;AACV,mBAAK,KAAK,OAAO,KAAK,GAAG,CAAC,CAAC;AAAA,UAC/B;AAAA,QACF;AACA,YAAI,GAAG,kBAAkB;AACvB,qBAAW,OAAO,GAAG,kBAAkB;AACrC,kBAAM,OAAO,IAAI,QAAQ,OAAO,EAAE;AAClC,gBAAI,KAAK,IAAI;AACX,mBAAK,KAAK,KAAK,OAAO,KAAK,IAAI,CAAC,CAAC;AAAA,UACrC;AAAA,QACF;AAEA,cAAM,WAAW,MAAM,eAAe,QAAQ,IAAI;AAElD,YAAI,KAAK,UAAU;AACjB,gBAAM,QAAQ,MAAM,gBAAgB,KAAK,OAAO,KAAK,QAAQ,CAAC;AAC9D,gBAAM,iBAAiB,OAAO,QAAQ;AACtC,iBAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,iCAAiC,CAAC,EAAE;AAAA,QACxF;AAEA,cAAM,QAAQ,MAAM,kBAAkB,UAAU,EAAE,KAAK,UAAU,OAAO,CAAC;AACzE,eAAO;AAAA,UACL,SAAS,CAAC;AAAA,YACR,MAAM;AAAA,YACN,MAAM,KAAK,UAAU;AAAA,cACnB,QAAQ;AAAA,cACR,UAAU,MAAM;AAAA,cAChB,aAAa,GAAG,GAAG,4BAA4B,MAAM,EAAE;AAAA,cACvD,SAAS;AAAA,YACX,GAAG,MAAM,CAAC;AAAA,UACZ,CAAC;AAAA,QACH;AAAA,MACF,SACO,KAAK;AACV,eAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,KAAK;AAAA,MACnI;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AD1OA,eAAsB,eAAe,WAA4B,MAAc;AAC7E,QAAM,SAAS,IAAI,UAAU;AAAA,IAC3B,MAAM;AAAA,IACN,SAAS,OAAqC,UAAc;AAAA,EAC9D,CAAC;AAGD,sBAAoB,MAAM;AAG1B,uBAAqB,MAAM;AAE3B,MAAI,cAAc,SAAS;AACzB,UAAM,iBAAiB,IAAI,qBAAqB;AAChD,UAAM,OAAO,QAAQ,cAAc;AAAA,EACrC,WACS,cAAc,OAAO;AAC5B,UAAM,aAAa,aAAa,OAAO,KAAK,QAAQ;AAClD,UAAI,IAAI,QAAQ,UAAU,IAAI,WAAW,OAAO;AAC9C,cAAM,eAAe,IAAI,mBAAmB,aAAa,GAAG;AAC5D,cAAM,OAAO,QAAQ,YAAY;AAAA,MACnC,WACS,IAAI,QAAQ,eAAe,IAAI,WAAW,QAAQ;AAEzD,YAAI,UAAU,GAAG;AACjB,YAAI,IAAI;AAAA,MACV,OACK;AACH,YAAI,UAAU,GAAG;AACjB,YAAI,IAAI,WAAW;AAAA,MACrB;AAAA,IACF,CAAC;AAED,eAAW,OAAO,MAAM,MAAM;AAC5B,cAAQ,KAAK,gDAAgD,IAAI,MAAM;AAAA,IACzE,CAAC;AAAA,EACH;AACF;","names":[]}
+{"version":3,"sources":["../src/commands/mcp/server.ts","../src/commands/mcp/tools.ts","../src/commands/mcp/adapter-tools.ts"],"sourcesContent":["import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js'\nimport { SSEServerTransport } from '@modelcontextprotocol/sdk/server/sse.js'\nimport { createServer } from 'node:http'\nimport consola from 'consola'\nimport { registerAdapterTools, registerStaticTools } from './tools'\n\ndeclare const __VERSION__: string\n\nexport async function startMcpServer(transport: 'stdio' | 'sse', port: number) {\n  const server = new McpServer({\n    name: 'apes',\n    version: typeof __VERSION__ !== 'undefined' ? __VERSION__ : '0.1.0',\n  })\n\n  // Register static tools\n  registerStaticTools(server)\n\n  // Register adapter-derived tools\n  registerAdapterTools(server)\n\n  if (transport === 'stdio') {\n    const stdioTransport = new StdioServerTransport()\n    await server.connect(stdioTransport)\n  }\n  else if (transport === 'sse') {\n    const httpServer = createServer(async (req, res) => {\n      if (req.url === '/sse' && req.method === 'GET') {\n        const sseTransport = new SSEServerTransport('/messages', res)\n        await server.connect(sseTransport)\n      }\n      else if (req.url === '/messages' && req.method === 'POST') {\n        // SSE message handling is done by the transport\n        res.writeHead(200)\n        res.end()\n      }\n      else {\n        res.writeHead(404)\n        res.end('Not found')\n      }\n    })\n\n    httpServer.listen(port, () => {\n      consola.info(`MCP SSE server listening on http://localhost:${port}/sse`)\n    })\n  }\n}\n","import { hostname } from 'node:os'\nimport type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport {\n  createShapesGrant,\n  fetchGrantToken,\n  loadAdapter,\n  resolveCommand,\n  verifyAndExecute,\n} from '../../shapes/index.js'\nimport { z } from 'zod'\nimport { getAuthToken, getIdpUrl, getRequesterIdentity } from '../../config'\nimport { apiFetch, getGrantsEndpoint } from '../../http'\nimport { loadAdapterTools } from './adapter-tools'\n\nexport function registerStaticTools(server: McpServer) {\n  server.registerTool('apes.grants.list', {\n    description: 'List grants',\n    inputSchema: {\n      status: z.string().optional().describe('Filter by status: pending, approved, denied, revoked, used'),\n      limit: z.string().optional().describe('Max results'),\n    },\n  }, async ({ status, limit }) => {\n    const idp = getIdpUrl()\n    if (!idp)\n      return { content: [{ type: 'text' as const, text: 'Not configured. Run `apes login` first.' }] }\n\n    const grantsUrl = await getGrantsEndpoint(idp)\n    const params = new URLSearchParams()\n    if (status)\n      params.set('status', status)\n    if (limit)\n      params.set('limit', limit)\n    const query = params.toString() ? `?${params.toString()}` : ''\n    const response = await apiFetch(`${grantsUrl}${query}`)\n    return { content: [{ type: 'text' as const, text: JSON.stringify(response, null, 2) }] }\n  })\n\n  server.registerTool('apes.grants.request', {\n    description: 'Request a grant for a command',\n    inputSchema: {\n      command: z.string().describe('Command to request permission for'),\n      audience: z.string().describe('Service identifier (e.g. escapes, proxy, shapes)'),\n      approval: z.string().optional().describe('once, timed, or always'),\n      reason: z.string().optional().describe('Reason for the request'),\n    },\n  }, async ({ command, audience, approval, reason }) => {\n    const idp = getIdpUrl()\n    const requester = getRequesterIdentity()\n    if (!idp || !requester)\n      return { content: [{ type: 'text' as const, text: 'Not authenticated. Run `apes login` first.' }] }\n\n    const grantsUrl = await getGrantsEndpoint(idp)\n    const cmdParts = command.split(' ')\n    const grant = await apiFetch<{ id: string, status: string }>(grantsUrl, {\n      method: 'POST',\n      body: {\n        requester,\n        target_host: hostname(),\n        audience,\n        grant_type: approval || 'once',\n        command: cmdParts,\n        reason: reason || command,\n      },\n    })\n\n    return {\n      content: [{\n        type: 'text' as const,\n        text: JSON.stringify({\n          status: 'pending_approval',\n          grant_id: grant.id,\n          approve_url: `${idp}/grant-approval?grant_id=${grant.id}`,\n          message: 'Grant needs approval. Approve via URL or `apes grants approve <id>`, then retry with grant_id.',\n        }, null, 2),\n      }],\n    }\n  })\n\n  server.registerTool('apes.config.get', {\n    description: 'Get apes configuration value',\n    inputSchema: {\n      key: z.string().describe('Config key: idp, email'),\n    },\n  }, ({ key }) => {\n    if (key === 'idp') {\n      const idp = getIdpUrl()\n      return { content: [{ type: 'text' as const, text: idp || 'Not configured' }] }\n    }\n    if (key === 'email') {\n      const email = getRequesterIdentity()\n      return { content: [{ type: 'text' as const, text: email || 'Not logged in' }] }\n    }\n    return { content: [{ type: 'text' as const, text: `Unknown key: ${key}` }] }\n  })\n\n  server.registerTool('apes.explain', {\n    description: 'Show what permissions a command would need',\n    inputSchema: {\n      command: z.array(z.string()).describe('Command as array of strings (e.g. [\"gh\", \"repo\", \"list\"])'),\n      adapter: z.string().optional().describe('Explicit adapter TOML path'),\n    },\n  }, async ({ command, adapter }) => {\n    try {\n      const loaded = loadAdapter(command[0]!, adapter)\n      const resolved = await resolveCommand(loaded, command)\n      return {\n        content: [{\n          type: 'text' as const,\n          text: JSON.stringify({\n            adapter: resolved.adapter.cli.id,\n            operation: resolved.detail.operation_id,\n            display: resolved.detail.display,\n            permission: resolved.permission,\n            resource_chain: resolved.detail.resource_chain,\n            exact_command: resolved.detail.constraints?.exact_command ?? false,\n            adapter_digest: resolved.digest,\n          }, null, 2),\n        }],\n      }\n    }\n    catch (err) {\n      return { content: [{ type: 'text' as const, text: `Error: ${err instanceof Error ? err.message : String(err)}` }], isError: true }\n    }\n  })\n\n  server.registerTool('apes.adapter.list', {\n    description: 'List installed CLI adapters',\n  }, () => {\n    const tools = loadAdapterTools()\n    const adapters = [...new Set(tools.map(t => t.adapterId))]\n    return {\n      content: [{\n        type: 'text' as const,\n        text: adapters.length > 0\n          ? `Installed adapters: ${adapters.join(', ')}`\n          : 'No adapters installed.',\n      }],\n    }\n  })\n\n  server.registerTool('apes.fetch', {\n    description: 'Make an authenticated HTTP request',\n    inputSchema: {\n      method: z.string().describe('HTTP method (GET, POST, PUT, DELETE)'),\n      url: z.string().describe('URL to fetch'),\n      body: z.string().optional().describe('Request body (JSON string)'),\n    },\n  }, async ({ method, url, body }) => {\n    const token = getAuthToken()\n    if (!token)\n      return { content: [{ type: 'text' as const, text: 'Not authenticated. Run `apes login` first.' }], isError: true }\n\n    const response = await fetch(url, {\n      method,\n      headers: {\n        'Authorization': `Bearer ${token}`,\n        'Content-Type': 'application/json',\n      },\n      body: body || undefined,\n    })\n    const text = await response.text()\n    try {\n      return { content: [{ type: 'text' as const, text: JSON.stringify(JSON.parse(text), null, 2) }] }\n    }\n    catch {\n      return { content: [{ type: 'text' as const, text }] }\n    }\n  })\n}\n\nexport function registerAdapterTools(server: McpServer) {\n  const adapterTools = loadAdapterTools()\n\n  for (const tool of adapterTools) {\n    // Build Zod schema from adapter operation\n    const schemaShape: Record<string, z.ZodType> = {\n      grant_id: z.string().optional().describe('Grant ID from a previous pending_approval response'),\n    }\n\n    if (tool.inputSchema && typeof tool.inputSchema === 'object') {\n      const props = (tool.inputSchema as { properties?: Record<string, { description?: string }> }).properties\n      if (props) {\n        for (const [key, val] of Object.entries(props)) {\n          schemaShape[key] = z.string().optional().describe(val.description || key)\n        }\n      }\n    }\n\n    server.registerTool(tool.name, {\n      description: tool.description,\n      inputSchema: schemaShape,\n    }, async (args) => {\n      const idp = getIdpUrl()\n      if (!idp)\n        return { content: [{ type: 'text' as const, text: 'Not configured. Run `apes login` first.' }], isError: true }\n\n      try {\n        const loaded = loadAdapter(tool.adapterId)\n        const op = loaded.adapter.operations.find(o => o.id === tool.operationId)\n        if (!op)\n          return { content: [{ type: 'text' as const, text: `Operation ${tool.operationId} not found` }], isError: true }\n\n        const argv = [loaded.adapter.cli.executable, ...op.command]\n        if (op.positionals) {\n          for (const pos of op.positionals) {\n            if (args[pos])\n              argv.push(String(args[pos]))\n          }\n        }\n        if (op.required_options) {\n          for (const opt of op.required_options) {\n            const name = opt.replace(/^--/, '')\n            if (args[name])\n              argv.push(opt, String(args[name]))\n          }\n        }\n\n        const resolved = await resolveCommand(loaded, argv)\n\n        if (args.grant_id) {\n          const token = await fetchGrantToken(idp, String(args.grant_id))\n          await verifyAndExecute(token, resolved)\n          return { content: [{ type: 'text' as const, text: 'Command executed successfully.' }] }\n        }\n\n        const grant = await createShapesGrant(resolved, { idp, approval: 'once' })\n        return {\n          content: [{\n            type: 'text' as const,\n            text: JSON.stringify({\n              status: 'pending_approval',\n              grant_id: grant.id,\n              approve_url: `${idp}/grant-approval?grant_id=${grant.id}`,\n              message: 'Grant needs approval. Approve, then call this tool again with grant_id.',\n            }, null, 2),\n          }],\n        }\n      }\n      catch (err) {\n        return { content: [{ type: 'text' as const, text: `Error: ${err instanceof Error ? err.message : String(err)}` }], isError: true }\n      }\n    })\n  }\n}\n","import { readdirSync } from 'node:fs'\nimport { homedir } from 'node:os'\nimport { join } from 'node:path'\nimport { loadAdapter } from '../../shapes/index.js'\nimport type { ShapesOperation } from '../../shapes/index.js'\n\nexport interface AdapterToolDef {\n  name: string\n  description: string\n  inputSchema: Record<string, unknown>\n  adapterId: string\n  operationId: string\n}\n\nfunction operationToInputSchema(op: ShapesOperation): Record<string, unknown> {\n  const properties: Record<string, unknown> = {}\n  const required: string[] = []\n\n  if (op.positionals) {\n    for (const pos of op.positionals) {\n      properties[pos] = { type: 'string', description: `Positional argument: ${pos}` }\n      required.push(pos)\n    }\n  }\n\n  if (op.required_options) {\n    for (const opt of op.required_options) {\n      const name = opt.replace(/^--/, '')\n      properties[name] = { type: 'string', description: `Required option: ${opt}` }\n      required.push(name)\n    }\n  }\n\n  return {\n    type: 'object',\n    properties,\n    required: required.length > 0 ? required : undefined,\n  }\n}\n\nfunction scanAdapterDir(dir: string): string[] {\n  try {\n    return readdirSync(dir)\n      .filter(f => f.endsWith('.toml'))\n      .map(f => f.replace('.toml', ''))\n  }\n  catch {\n    return []\n  }\n}\n\nexport function loadAdapterTools(): AdapterToolDef[] {\n  const tools: AdapterToolDef[] = []\n  const seen = new Set<string>()\n\n  const adapterDirs = [\n    join(process.cwd(), '.openape', 'shapes', 'adapters'),\n    join(homedir(), '.openape', 'shapes', 'adapters'),\n    '/etc/openape/shapes/adapters',\n  ]\n\n  for (const dir of adapterDirs) {\n    for (const id of scanAdapterDir(dir)) {\n      if (seen.has(id))\n        continue\n      seen.add(id)\n\n      try {\n        const loaded = loadAdapter(id)\n        for (const op of loaded.adapter.operations) {\n          tools.push({\n            name: `apes.run.${id}.${op.id}`,\n            description: op.display || `${id}: ${op.id}`,\n            inputSchema: operationToInputSchema(op),\n            adapterId: id,\n            operationId: op.id,\n          })\n        }\n      }\n      catch {\n        // Skip adapters that fail to load\n      }\n    }\n  }\n\n  return tools\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AACrC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,OAAO,aAAa;;;ACJpB,SAAS,gBAAgB;AASzB,SAAS,SAAS;;;ACTlB,SAAS,mBAAmB;AAC5B,SAAS,eAAe;AACxB,SAAS,YAAY;AAYrB,SAAS,uBAAuB,IAA8C;AAC5E,QAAM,aAAsC,CAAC;AAC7C,QAAM,WAAqB,CAAC;AAE5B,MAAI,GAAG,aAAa;AAClB,eAAW,OAAO,GAAG,aAAa;AAChC,iBAAW,GAAG,IAAI,EAAE,MAAM,UAAU,aAAa,wBAAwB,GAAG,GAAG;AAC/E,eAAS,KAAK,GAAG;AAAA,IACnB;AAAA,EACF;AAEA,MAAI,GAAG,kBAAkB;AACvB,eAAW,OAAO,GAAG,kBAAkB;AACrC,YAAM,OAAO,IAAI,QAAQ,OAAO,EAAE;AAClC,iBAAW,IAAI,IAAI,EAAE,MAAM,UAAU,aAAa,oBAAoB,GAAG,GAAG;AAC5E,eAAS,KAAK,IAAI;AAAA,IACpB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,UAAU,SAAS,SAAS,IAAI,WAAW;AAAA,EAC7C;AACF;AAEA,SAAS,eAAe,KAAuB;AAC7C,MAAI;AACF,WAAO,YAAY,GAAG,EACnB,OAAO,OAAK,EAAE,SAAS,OAAO,CAAC,EAC/B,IAAI,OAAK,EAAE,QAAQ,SAAS,EAAE,CAAC;AAAA,EACpC,QACM;AACJ,WAAO,CAAC;AAAA,EACV;AACF;AAEO,SAAS,mBAAqC;AACnD,QAAM,QAA0B,CAAC;AACjC,QAAM,OAAO,oBAAI,IAAY;AAE7B,QAAM,cAAc;AAAA,IAClB,KAAK,QAAQ,IAAI,GAAG,YAAY,UAAU,UAAU;AAAA,IACpD,KAAK,QAAQ,GAAG,YAAY,UAAU,UAAU;AAAA,IAChD;AAAA,EACF;AAEA,aAAW,OAAO,aAAa;AAC7B,eAAW,MAAM,eAAe,GAAG,GAAG;AACpC,UAAI,KAAK,IAAI,EAAE;AACb;AACF,WAAK,IAAI,EAAE;AAEX,UAAI;AACF,cAAM,SAAS,YAAY,EAAE;AAC7B,mBAAW,MAAM,OAAO,QAAQ,YAAY;AAC1C,gBAAM,KAAK;AAAA,YACT,MAAM,YAAY,EAAE,IAAI,GAAG,EAAE;AAAA,YAC7B,aAAa,GAAG,WAAW,GAAG,EAAE,KAAK,GAAG,EAAE;AAAA,YAC1C,aAAa,uBAAuB,EAAE;AAAA,YACtC,WAAW;AAAA,YACX,aAAa,GAAG;AAAA,UAClB,CAAC;AAAA,QACH;AAAA,MACF,QACM;AAAA,MAEN;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;;;ADxEO,SAAS,oBAAoB,QAAmB;AACrD,SAAO,aAAa,oBAAoB;AAAA,IACtC,aAAa;AAAA,IACb,aAAa;AAAA,MACX,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,4DAA4D;AAAA,MACnG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,aAAa;AAAA,IACrD;AAAA,EACF,GAAG,OAAO,EAAE,QAAQ,MAAM,MAAM;AAC9B,UAAM,MAAM,UAAU;AACtB,QAAI,CAAC;AACH,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,0CAA0C,CAAC,EAAE;AAEjG,UAAM,YAAY,MAAM,kBAAkB,GAAG;AAC7C,UAAM,SAAS,IAAI,gBAAgB;AACnC,QAAI;AACF,aAAO,IAAI,UAAU,MAAM;AAC7B,QAAI;AACF,aAAO,IAAI,SAAS,KAAK;AAC3B,UAAM,QAAQ,OAAO,SAAS,IAAI,IAAI,OAAO,SAAS,CAAC,KAAK;AAC5D,UAAM,WAAW,MAAM,SAAS,GAAG,SAAS,GAAG,KAAK,EAAE;AACtD,WAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,UAAU,MAAM,CAAC,EAAE,CAAC,EAAE;AAAA,EACzF,CAAC;AAED,SAAO,aAAa,uBAAuB;AAAA,IACzC,aAAa;AAAA,IACb,aAAa;AAAA,MACX,SAAS,EAAE,OAAO,EAAE,SAAS,mCAAmC;AAAA,MAChE,UAAU,EAAE,OAAO,EAAE,SAAS,kDAAkD;AAAA,MAChF,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,wBAAwB;AAAA,MACjE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,wBAAwB;AAAA,IACjE;AAAA,EACF,GAAG,OAAO,EAAE,SAAS,UAAU,UAAU,OAAO,MAAM;AACpD,UAAM,MAAM,UAAU;AACtB,UAAM,YAAY,qBAAqB;AACvC,QAAI,CAAC,OAAO,CAAC;AACX,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,6CAA6C,CAAC,EAAE;AAEpG,UAAM,YAAY,MAAM,kBAAkB,GAAG;AAC7C,UAAM,WAAW,QAAQ,MAAM,GAAG;AAClC,UAAM,QAAQ,MAAM,SAAyC,WAAW;AAAA,MACtE,QAAQ;AAAA,MACR,MAAM;AAAA,QACJ;AAAA,QACA,aAAa,SAAS;AAAA,QACtB;AAAA,QACA,YAAY,YAAY;AAAA,QACxB,SAAS;AAAA,QACT,QAAQ,UAAU;AAAA,MACpB;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL,SAAS,CAAC;AAAA,QACR,MAAM;AAAA,QACN,MAAM,KAAK,UAAU;AAAA,UACnB,QAAQ;AAAA,UACR,UAAU,MAAM;AAAA,UAChB,aAAa,GAAG,GAAG,4BAA4B,MAAM,EAAE;AAAA,UACvD,SAAS;AAAA,QACX,GAAG,MAAM,CAAC;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAED,SAAO,aAAa,mBAAmB;AAAA,IACrC,aAAa;AAAA,IACb,aAAa;AAAA,MACX,KAAK,EAAE,OAAO,EAAE,SAAS,wBAAwB;AAAA,IACnD;AAAA,EACF,GAAG,CAAC,EAAE,IAAI,MAAM;AACd,QAAI,QAAQ,OAAO;AACjB,YAAM,MAAM,UAAU;AACtB,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,OAAO,iBAAiB,CAAC,EAAE;AAAA,IAC/E;AACA,QAAI,QAAQ,SAAS;AACnB,YAAM,QAAQ,qBAAqB;AACnC,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,SAAS,gBAAgB,CAAC,EAAE;AAAA,IAChF;AACA,WAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,gBAAgB,GAAG,GAAG,CAAC,EAAE;AAAA,EAC7E,CAAC;AAED,SAAO,aAAa,gBAAgB;AAAA,IAClC,aAAa;AAAA,IACb,aAAa;AAAA,MACX,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,2DAA2D;AAAA,MACjG,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,4BAA4B;AAAA,IACtE;AAAA,EACF,GAAG,OAAO,EAAE,SAAS,QAAQ,MAAM;AACjC,QAAI;AACF,YAAM,SAAS,YAAY,QAAQ,CAAC,GAAI,OAAO;AAC/C,YAAM,WAAW,MAAM,eAAe,QAAQ,OAAO;AACrD,aAAO;AAAA,QACL,SAAS,CAAC;AAAA,UACR,MAAM;AAAA,UACN,MAAM,KAAK,UAAU;AAAA,YACnB,SAAS,SAAS,QAAQ,IAAI;AAAA,YAC9B,WAAW,SAAS,OAAO;AAAA,YAC3B,SAAS,SAAS,OAAO;AAAA,YACzB,YAAY,SAAS;AAAA,YACrB,gBAAgB,SAAS,OAAO;AAAA,YAChC,eAAe,SAAS,OAAO,aAAa,iBAAiB;AAAA,YAC7D,gBAAgB,SAAS;AAAA,UAC3B,GAAG,MAAM,CAAC;AAAA,QACZ,CAAC;AAAA,MACH;AAAA,IACF,SACO,KAAK;AACV,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,KAAK;AAAA,IACnI;AAAA,EACF,CAAC;AAED,SAAO,aAAa,qBAAqB;AAAA,IACvC,aAAa;AAAA,EACf,GAAG,MAAM;AACP,UAAM,QAAQ,iBAAiB;AAC/B,UAAM,WAAW,CAAC,GAAG,IAAI,IAAI,MAAM,IAAI,OAAK,EAAE,SAAS,CAAC,CAAC;AACzD,WAAO;AAAA,MACL,SAAS,CAAC;AAAA,QACR,MAAM;AAAA,QACN,MAAM,SAAS,SAAS,IACpB,uBAAuB,SAAS,KAAK,IAAI,CAAC,KAC1C;AAAA,MACN,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAED,SAAO,aAAa,cAAc;AAAA,IAChC,aAAa;AAAA,IACb,aAAa;AAAA,MACX,QAAQ,EAAE,OAAO,EAAE,SAAS,sCAAsC;AAAA,MAClE,KAAK,EAAE,OAAO,EAAE,SAAS,cAAc;AAAA,MACvC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,4BAA4B;AAAA,IACnE;AAAA,EACF,GAAG,OAAO,EAAE,QAAQ,KAAK,KAAK,MAAM;AAClC,UAAM,QAAQ,aAAa;AAC3B,QAAI,CAAC;AACH,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,6CAA6C,CAAC,GAAG,SAAS,KAAK;AAEnH,UAAM,WAAW,MAAM,MAAM,KAAK;AAAA,MAChC;AAAA,MACA,SAAS;AAAA,QACP,iBAAiB,UAAU,KAAK;AAAA,QAChC,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,QAAQ;AAAA,IAChB,CAAC;AACD,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI;AACF,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,KAAK,UAAU,KAAK,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,EAAE;AAAA,IACjG,QACM;AACJ,aAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,KAAK,CAAC,EAAE;AAAA,IACtD;AAAA,EACF,CAAC;AACH;AAEO,SAAS,qBAAqB,QAAmB;AACtD,QAAM,eAAe,iBAAiB;AAEtC,aAAW,QAAQ,cAAc;AAE/B,UAAM,cAAyC;AAAA,MAC7C,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,oDAAoD;AAAA,IAC/F;AAEA,QAAI,KAAK,eAAe,OAAO,KAAK,gBAAgB,UAAU;AAC5D,YAAM,QAAS,KAAK,YAA0E;AAC9F,UAAI,OAAO;AACT,mBAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC9C,sBAAY,GAAG,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,IAAI,eAAe,GAAG;AAAA,QAC1E;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK,MAAM;AAAA,MAC7B,aAAa,KAAK;AAAA,MAClB,aAAa;AAAA,IACf,GAAG,OAAO,SAAS;AACjB,YAAM,MAAM,UAAU;AACtB,UAAI,CAAC;AACH,eAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,0CAA0C,CAAC,GAAG,SAAS,KAAK;AAEhH,UAAI;AACF,cAAM,SAAS,YAAY,KAAK,SAAS;AACzC,cAAM,KAAK,OAAO,QAAQ,WAAW,KAAK,OAAK,EAAE,OAAO,KAAK,WAAW;AACxE,YAAI,CAAC;AACH,iBAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,aAAa,KAAK,WAAW,aAAa,CAAC,GAAG,SAAS,KAAK;AAEhH,cAAM,OAAO,CAAC,OAAO,QAAQ,IAAI,YAAY,GAAG,GAAG,OAAO;AAC1D,YAAI,GAAG,aAAa;AAClB,qBAAW,OAAO,GAAG,aAAa;AAChC,gBAAI,KAAK,GAAG;AACV,mBAAK,KAAK,OAAO,KAAK,GAAG,CAAC,CAAC;AAAA,UAC/B;AAAA,QACF;AACA,YAAI,GAAG,kBAAkB;AACvB,qBAAW,OAAO,GAAG,kBAAkB;AACrC,kBAAM,OAAO,IAAI,QAAQ,OAAO,EAAE;AAClC,gBAAI,KAAK,IAAI;AACX,mBAAK,KAAK,KAAK,OAAO,KAAK,IAAI,CAAC,CAAC;AAAA,UACrC;AAAA,QACF;AAEA,cAAM,WAAW,MAAM,eAAe,QAAQ,IAAI;AAElD,YAAI,KAAK,UAAU;AACjB,gBAAM,QAAQ,MAAM,gBAAgB,KAAK,OAAO,KAAK,QAAQ,CAAC;AAC9D,gBAAM,iBAAiB,OAAO,QAAQ;AACtC,iBAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,iCAAiC,CAAC,EAAE;AAAA,QACxF;AAEA,cAAM,QAAQ,MAAM,kBAAkB,UAAU,EAAE,KAAK,UAAU,OAAO,CAAC;AACzE,eAAO;AAAA,UACL,SAAS,CAAC;AAAA,YACR,MAAM;AAAA,YACN,MAAM,KAAK,UAAU;AAAA,cACnB,QAAQ;AAAA,cACR,UAAU,MAAM;AAAA,cAChB,aAAa,GAAG,GAAG,4BAA4B,MAAM,EAAE;AAAA,cACvD,SAAS;AAAA,YACX,GAAG,MAAM,CAAC;AAAA,UACZ,CAAC;AAAA,QACH;AAAA,MACF,SACO,KAAK;AACV,eAAO,EAAE,SAAS,CAAC,EAAE,MAAM,QAAiB,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,KAAK;AAAA,MACnI;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AD1OA,eAAsB,eAAe,WAA4B,MAAc;AAC7E,QAAM,SAAS,IAAI,UAAU;AAAA,IAC3B,MAAM;AAAA,IACN,SAAS,OAAqC,UAAc;AAAA,EAC9D,CAAC;AAGD,sBAAoB,MAAM;AAG1B,uBAAqB,MAAM;AAE3B,MAAI,cAAc,SAAS;AACzB,UAAM,iBAAiB,IAAI,qBAAqB;AAChD,UAAM,OAAO,QAAQ,cAAc;AAAA,EACrC,WACS,cAAc,OAAO;AAC5B,UAAM,aAAa,aAAa,OAAO,KAAK,QAAQ;AAClD,UAAI,IAAI,QAAQ,UAAU,IAAI,WAAW,OAAO;AAC9C,cAAM,eAAe,IAAI,mBAAmB,aAAa,GAAG;AAC5D,cAAM,OAAO,QAAQ,YAAY;AAAA,MACnC,WACS,IAAI,QAAQ,eAAe,IAAI,WAAW,QAAQ;AAEzD,YAAI,UAAU,GAAG;AACjB,YAAI,IAAI;AAAA,MACV,OACK;AACH,YAAI,UAAU,GAAG;AACjB,YAAI,IAAI,WAAW;AAAA,MACrB;AAAA,IACF,CAAC;AAED,eAAW,OAAO,MAAM,MAAM;AAC5B,cAAQ,KAAK,gDAAgD,IAAI,MAAM;AAAA,IACzE,CAAC;AAAA,EACH;AACF;","names":[]}

package/dist/ssh-key-YBNNG5K5.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import {
+  loadEd25519PrivateKey,
+  readPublicKeyComment
+} from "./chunk-ION3CWD5.js";
+export {
+  loadEd25519PrivateKey,
+  readPublicKeyComment
+};
+//# sourceMappingURL=ssh-key-YBNNG5K5.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openape/apes",
-  "version": "0.6.1",
+  "version": "0.7.2",
   "turbo": {
     "tags": [
       "publishable"
@@ -20,6 +20,7 @@
   },
   "files": [
     "dist",
+    "scripts",
     "README.md"
   ],
   "dependencies": {
@@ -27,6 +28,7 @@
     "citty": "^0.1.6",
     "consola": "^3.4.2",
     "giget": "^2.0.0",
+    "node-pty": "^1.1.0",
     "shell-quote": "^1.8.3",
     "zod": "^4.3.6",
     "@openape/core": "0.12.0",
@@ -58,6 +60,7 @@
     "lint": "eslint .",
     "typecheck": "tsc --noEmit",
     "test": "vitest run --coverage",
-    "test:coverage": "vitest run --coverage"
+    "test:coverage": "vitest run --coverage",
+    "postinstall": "node scripts/fix-node-pty-perms.mjs"
   }
 }

package/scripts/ape-shell-wrapper.sh

@@ -0,0 +1,103 @@
+#!/bin/bash
+# -----------------------------------------------------------------------------
+# ape-shell login-shell wrapper
+# -----------------------------------------------------------------------------
+#
+# The `@openape/apes` CLI is a Node.js script with a `#!/usr/bin/env node`
+# shebang. When `ape-shell` is set as a user's login shell via `chsh`, the
+# kernel invokes it BEFORE any rc file has run — so only the system default
+# PATH is visible, which typically does NOT include Homebrew or nvm paths.
+# The shebang then fails with:
+#
+#   env: node: No such file or directory
+#
+# This wrapper is the actual file pointed at by `chsh` and by the
+# `/usr/local/bin/ape-shell` symlink. It:
+#
+#   1. Prepends known node install locations to PATH (Homebrew, nvm)
+#   2. Sets APES_SHELL_WRAPPER=1 so the CLI knows it was invoked via this
+#      wrapper (because argv[0]/argv[1] inspection gets clobbered when we
+#      exec Node through the wrapper)
+#   3. Exec's node with the real dist/cli.js path, preserving the original
+#      argv[0] via `exec -a "$0"` so login-shell detection ("-ape-shell"
+#      prefix) still works inside the CLI
+#
+# To install, point a symlink at this file:
+#
+#   sudo ln -sf /path/to/ape-shell-wrapper.sh /usr/local/bin/ape-shell
+#   sudo chsh -s /usr/local/bin/ape-shell <user>
+#
+# You can override the node binary via APES_SHELL_NODE, and the CLI entry
+# point via APES_SHELL_CLI_JS, for environments where the defaults don't
+# apply.
+# -----------------------------------------------------------------------------
+
+set -e
+
+# Known node install locations searched in order. The first one found wins.
+# Users with exotic setups can override via APES_SHELL_NODE env var.
+_node_candidates=(
+  "${APES_SHELL_NODE:-}"
+  "/opt/homebrew/bin/node"
+  "/usr/local/bin/node"
+  "/usr/bin/node"
+)
+
+_node_bin=""
+for candidate in "${_node_candidates[@]}"; do
+  if [ -n "$candidate" ] && [ -x "$candidate" ]; then
+    _node_bin="$candidate"
+    break
+  fi
+done
+
+if [ -z "$_node_bin" ]; then
+  echo "ape-shell: no node binary found. Install Node.js or set APES_SHELL_NODE." >&2
+  exit 127
+fi
+
+# Locate the CLI JS. Default: sibling of this wrapper script via a known
+# relative path (assumes the wrapper lives in packages/apes/scripts). Can be
+# overridden via APES_SHELL_CLI_JS for production installs where the paths
+# might differ.
+#
+# Symlink resolution: when the wrapper is installed as a symlink (e.g.
+# /usr/local/bin/ape-shell → /path/to/packages/apes/scripts/ape-shell-wrapper.sh)
+# BASH_SOURCE[0] points at the symlink, not the real file. We must walk the
+# symlink chain before computing the relative `../dist/cli.js` path, otherwise
+# it ends up as `/usr/local/bin/../dist/cli.js` = `/usr/local/dist/cli.js`
+# which doesn't exist. macOS's readlink lacks `-f`, so use the portable
+# loop idiom.
+if [ -z "${APES_SHELL_CLI_JS:-}" ]; then
+  _source="${BASH_SOURCE[0]}"
+  while [ -L "$_source" ]; do
+    _target="$(readlink "$_source")"
+    case "$_target" in
+      /*) _source="$_target" ;;
+      *) _source="$(cd -P "$(dirname "$_source")" >/dev/null && pwd)/$_target" ;;
+    esac
+  done
+  _wrapper_dir="$(cd -P "$(dirname "$_source")" >/dev/null && pwd)"
+  _cli_js="$_wrapper_dir/../dist/cli.js"
+else
+  _cli_js="$APES_SHELL_CLI_JS"
+fi
+
+if [ ! -f "$_cli_js" ]; then
+  echo "ape-shell: cli.js not found at $_cli_js. Set APES_SHELL_CLI_JS to override." >&2
+  exit 127
+fi
+
+# Prepend common node install dirs to PATH so anything spawned inside the
+# shell (or by the interactive REPL's bash child) can also find node.
+export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH"
+
+# Signal to the CLI that it was invoked via this wrapper, so invocation-mode
+# detection can fall back to this hint when argv-based detection fails (the
+# argv[1] basename check becomes `cli.js` once we exec node directly).
+export APES_SHELL_WRAPPER=1
+
+# exec -a preserves the original argv[0] that login/sshd/su gave us — notably
+# the leading "-" prefix for a login shell. The CLI still sees it via
+# process.argv0, so its login-shell detection keeps working.
+exec -a "$0" "$_node_bin" "$_cli_js" "$@"

package/scripts/fix-node-pty-perms.mjs

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+/**
+ * Workaround for pnpm 10 losing execute permissions on `spawn-helper`
+ * binaries shipped in node-pty prebuilds.
+ *
+ * Without exec bit, `pty.spawn(...)` fails at runtime with
+ *   Error: posix_spawnp failed.
+ *
+ * This script runs after `pnpm install` and chmods the helper for every
+ * platform's prebuild directory that it can find. Missing directories are
+ * ignored silently so it's safe to run on any host.
+ */
+import { chmodSync, existsSync } from 'node:fs'
+import { createRequire } from 'node:module'
+import { dirname, join } from 'node:path'
+
+const require = createRequire(import.meta.url)
+
+let ptyRoot
+try {
+  ptyRoot = dirname(require.resolve('node-pty/package.json'))
+}
+catch {
+  // node-pty not installed yet (prepare runs before install in some flows) — nothing to do.
+  process.exit(0)
+}
+
+const platforms = ['darwin-arm64', 'darwin-x64', 'linux-x64', 'linux-arm64']
+for (const platform of platforms) {
+  const helper = join(ptyRoot, 'prebuilds', platform, 'spawn-helper')
+  if (existsSync(helper)) {
+    try {
+      chmodSync(helper, 0o755)
+    }
+    catch (err) {
+      console.warn(`[fix-node-pty-perms] failed to chmod ${helper}:`, err instanceof Error ? err.message : String(err))
+    }
+  }
+}