@openape/apes 1.15.0 → 1.16.0

package/dist/cli.js

@@ -2713,6 +2713,35 @@ mkdir -p "$HOME_DIR/Library/Logs" "$HOME_DIR/.openape/agent/tasks"
 function buildTroopBootstrapBlock(_troop, _name) {
   return "";
 }
+function buildPhaseGTeardownScript(input) {
+  const { name, homeDir } = input;
+  return `#!/bin/bash
+set -u
+
+NAME=${shQuote(name)}
+HOME_DIR=${shQuote(homeDir)}
+
+UID_OF=$(dscl . -read "/Users/$NAME" UniqueID 2>/dev/null | awk '/UniqueID:/ {print $2}')
+
+if [ -n "$UID_OF" ]; then
+  launchctl bootout "user/$UID_OF" 2>/dev/null || true
+  pkill -9 -u "$UID_OF" 2>/dev/null || true
+fi
+
+# Per-agent ecosystem files written by the Nest's pm2-supervisor.
+rm -rf "/var/openape/agents/$NAME"
+
+# Home dir lives under /var/openape/homes/ \u2014 no FDA wall, root can
+# remove directly.
+if [ -d "$HOME_DIR" ] && [ "$HOME_DIR" != "/" ] && [ "$HOME_DIR" != "" ]; then
+  rm -rf "$HOME_DIR"
+fi
+
+# dscl record stays as a tombstone. Operators run
+# \`sudo sysadminctl -deleteUser $NAME\` to fully clean up if desired.
+echo "OK Phase-G teardown done for $NAME (dscl record kept as tombstone)"
+`;
+}
 function buildDestroyTeardownScript(input) {
   const { name, homeDir, adminUser } = input;
   return `#!/bin/bash
@@ -3155,27 +3184,42 @@ ${consequences.join("\n")}`);
       consola19.info("No IdP agent to remove (skipped).");
     }
     if (osUserExists) {
-      const sudo = whichBinary("sudo");
-      if (!sudo) {
-        throw new CliError("`sudo` not found on PATH; required for OS teardown.");
-      }
-      const adminUser = userInfo().username;
-      const adminPassword = await collectAdminPassword({ adminUser });
-      const scratch = mkdtempSync(join3(tmpdir(), `apes-destroy-${name}-`));
-      const scriptPath = join3(scratch, "teardown.sh");
-      try {
-        const homeDir = osUser?.homeDir ?? `/Users/${name}`;
-        const script = buildDestroyTeardownScript({ name, homeDir, adminUser });
-        writeFileSync2(scriptPath, script, { mode: 448 });
-        consola19.start("Running teardown via sudo\u2026");
-        execFileSync4(sudo, ["-S", "--prompt=", "--", "bash", scriptPath], {
-          input: `${adminPassword}
+      const homeDir = osUser?.homeDir ?? `/Users/${name}`;
+      const isPhaseG = homeDir.startsWith("/var/openape/homes/");
+      if (isPhaseG) {
+        const scratch = mkdtempSync(join3(tmpdir(), `apes-destroy-${name}-`));
+        const scriptPath = join3(scratch, "teardown.sh");
+        try {
+          const script = buildPhaseGTeardownScript({ name, homeDir });
+          writeFileSync2(scriptPath, script, { mode: 448 });
+          consola19.start("Running teardown (Phase G \u2014 no admin password needed)\u2026");
+          execFileSync4("apes", ["run", "--as", "root", "--wait", "--", "bash", scriptPath], { stdio: "inherit" });
+        } finally {
+          rmSync(scratch, { recursive: true, force: true });
+        }
+        consola19.info(`dscl record /Users/${name} kept as tombstone (hidden, no home). Run \`sudo sysadminctl -deleteUser ${name}\` to fully remove.`);
+      } else {
+        const sudo = whichBinary("sudo");
+        if (!sudo) {
+          throw new CliError("`sudo` not found on PATH; required for OS teardown.");
+        }
+        const adminUser = userInfo().username;
+        const adminPassword = await collectAdminPassword({ adminUser });
+        const scratch = mkdtempSync(join3(tmpdir(), `apes-destroy-${name}-`));
+        const scriptPath = join3(scratch, "teardown.sh");
+        try {
+          const script = buildDestroyTeardownScript({ name, homeDir, adminUser });
+          writeFileSync2(scriptPath, script, { mode: 448 });
+          consola19.start("Running teardown via sudo\u2026");
+          execFileSync4(sudo, ["-S", "--prompt=", "--", "bash", scriptPath], {
+            input: `${adminPassword}
 ${adminPassword}
 `,
-          stdio: ["pipe", "inherit", "inherit"]
-        });
-      } finally {
-        rmSync(scratch, { recursive: true, force: true });
+            stdio: ["pipe", "inherit", "inherit"]
+          });
+        } finally {
+          rmSync(scratch, { recursive: true, force: true });
+        }
       }
     } else if (!args["keep-os-user"] && isDarwin()) {
       consola19.info("No macOS user to remove (skipped).");
@@ -6323,7 +6367,7 @@ var mcpCommand = defineCommand48({
     if (transport !== "stdio" && transport !== "sse") {
       throw new Error('Transport must be "stdio" or "sse"');
     }
-    const { startMcpServer } = await import("./server-A24A4ILW.js");
+    const { startMcpServer } = await import("./server-FVFFPVVN.js");
     await startMcpServer(transport, port);
   }
 });
@@ -6961,7 +7005,7 @@ async function bestEffortGrantCount(idp) {
   }
 }
 async function runHealth(args) {
-  const version = true ? "1.15.0" : "0.0.0";
+  const version = true ? "1.16.0" : "0.0.0";
   const auth = loadAuth();
   if (!auth) {
     throw new CliError("Not logged in. Run `apes login` first.", 1);
@@ -7234,10 +7278,10 @@ if (shellRewrite) {
   if (shellRewrite.action === "rewrite") {
     process.argv = shellRewrite.argv;
   } else if (shellRewrite.action === "version") {
-    console.log(`ape-shell ${"1.15.0"} (OpenApe DDISA shell wrapper)`);
+    console.log(`ape-shell ${"1.16.0"} (OpenApe DDISA shell wrapper)`);
     process.exit(0);
   } else if (shellRewrite.action === "help") {
-    console.log(`ape-shell ${"1.15.0"} \u2014 OpenApe DDISA shell wrapper`);
+    console.log(`ape-shell ${"1.16.0"} \u2014 OpenApe DDISA shell wrapper`);
     console.log("");
     console.log("Usage:");
     console.log("  ape-shell                 Start interactive grant-mediated REPL");
@@ -7295,7 +7339,7 @@ var configCommand = defineCommand60({
 var main = defineCommand60({
   meta: {
     name: "apes",
-    version: "1.15.0",
+    version: "1.16.0",
     description: "Unified CLI for OpenApe"
   },
   subCommands: {
@@ -7352,7 +7396,7 @@ async function maybeRefreshAuth() {
   }
 }
 await maybeRefreshAuth();
-await maybeWarnStaleVersion("1.15.0").catch(() => {
+await maybeWarnStaleVersion("1.16.0").catch(() => {
 });
 runMain(main).catch((err) => {
   if (err instanceof CliExit) {