@phnx-labs/agents-cli 0.1.0 → 1.12.0

package/dist/lib/profiles-presets.js

@@ -1,95 +0,0 @@
-// Model IDs verified against openrouter.ai/api/v1/models on 2026-04-20.
-// Presets target the top-ranked open-source model per provider based on
-// SWE-bench Verified, LiveCodeBench, HumanEval, and Chatbot Arena rankings.
-//
-// Important limitation of Claude Code + non-Anthropic models via OpenRouter:
-// Claude Code sends `thinking:{type:"enabled"}` in its Anthropic payload by
-// default, and its `--print` consolidation returns empty text when a response
-// contains thinking/redacted_thinking blocks — even when the model *also*
-// emits a text block. This means reasoning models work fine in interactive
-// `claude` mode (same env vars) but `agents run <profile> --print` sees
-// empty stdout.
-//
-// Presets flagged "print-safe" use non-reasoning variants that ignore
-// thinking:enabled. Presets flagged "reasoning" are the leaderboard leaders
-// but are best invoked interactively.
-const OPENROUTER_BASE = 'https://openrouter.ai/api';
-const OPENROUTER_AUTH = {
-    provider: 'openrouter',
-    host: 'claude',
-    authEnvVar: 'ANTHROPIC_AUTH_TOKEN',
-    signupUrl: 'https://openrouter.ai/keys',
-};
-export const PRESETS = [
-    // ----- Top coding (via OpenRouter) -----
-    {
-        name: 'kimi',
-        description: 'Kimi K2.5 via OpenRouter (262K ctx, $0.38/$1.72 per 1M). Top Kimi: 99% HumanEval, 76.8% SWE-bench. REASONING — works interactively, but `agents run --print` returns empty stdout. Use `kimi-chat` preset for scripting.',
-        ...OPENROUTER_AUTH,
-        env: {
-            ANTHROPIC_BASE_URL: OPENROUTER_BASE,
-            ANTHROPIC_MODEL: 'moonshotai/kimi-k2.5',
-            ANTHROPIC_SMALL_FAST_MODEL: 'moonshotai/kimi-k2.5',
-        },
-    },
-    {
-        name: 'kimi-chat',
-        description: 'Kimi K2 0905 via OpenRouter (262K ctx, $0.40/$2.00 per 1M). Non-reasoning sibling of K2.5 — slightly older but PRINT-SAFE, works end-to-end with `agents run --print` and in scripts/automation.',
-        ...OPENROUTER_AUTH,
-        env: {
-            ANTHROPIC_BASE_URL: OPENROUTER_BASE,
-            ANTHROPIC_MODEL: 'moonshotai/kimi-k2-0905',
-            ANTHROPIC_SMALL_FAST_MODEL: 'moonshotai/kimi-k2-0905',
-        },
-    },
-    {
-        name: 'minimax',
-        description: 'MiniMax M2.5 via OpenRouter (230B params). #1 SWE-bench Verified (80.2%) on Apr 2026 leaderboards. REASONING — works interactively, --print returns empty.',
-        ...OPENROUTER_AUTH,
-        env: {
-            ANTHROPIC_BASE_URL: OPENROUTER_BASE,
-            ANTHROPIC_MODEL: 'minimax/minimax-m2.5',
-            ANTHROPIC_SMALL_FAST_MODEL: 'minimax/minimax-m2.5',
-        },
-    },
-    {
-        name: 'glm',
-        description: 'GLM 5 via OpenRouter (80K ctx, $0.72/$2.30 per 1M). #1 Chatbot Arena ELO (1451) among open-weight models on BenchLM.ai (Apr 2026). Prompt-complexity-dependent reasoning — Claude Code\'s 38K system prompt typically triggers thinking blocks, so --print is unreliable. Interactive use is fine.',
-        ...OPENROUTER_AUTH,
-        env: {
-            ANTHROPIC_BASE_URL: OPENROUTER_BASE,
-            ANTHROPIC_MODEL: 'z-ai/glm-5',
-            ANTHROPIC_SMALL_FAST_MODEL: 'z-ai/glm-5',
-        },
-    },
-    {
-        name: 'qwen',
-        description: 'Qwen3 Coder Next via OpenRouter (256K ctx, $0.15/$0.80 per 1M, sparse MoE 80B/3B active). Latest coding-specific Qwen (Feb 2026). PRINT-SAFE — works with `agents run --print`.',
-        ...OPENROUTER_AUTH,
-        env: {
-            ANTHROPIC_BASE_URL: OPENROUTER_BASE,
-            ANTHROPIC_MODEL: 'qwen/qwen3-coder-next',
-            ANTHROPIC_SMALL_FAST_MODEL: 'qwen/qwen3-coder-next',
-        },
-    },
-    {
-        name: 'deepseek',
-        description: 'DeepSeek Chat V3 (0324) via OpenRouter. Latest DeepSeek Chat variant that ignores thinking:enabled. PRINT-SAFE. The newer V3.2 / V3.1-Terminus / V3.2-Speciale are reasoning variants — use `--model deepseek/deepseek-v3.2` to override if you want those for interactive use.',
-        ...OPENROUTER_AUTH,
-        env: {
-            ANTHROPIC_BASE_URL: OPENROUTER_BASE,
-            ANTHROPIC_MODEL: 'deepseek/deepseek-chat-v3-0324',
-            ANTHROPIC_SMALL_FAST_MODEL: 'deepseek/deepseek-chat-v3-0324',
-        },
-    },
-];
-export function getPreset(name) {
-    return PRESETS.find((p) => p.name === name);
-}
-export function listPresets() {
-    return [...PRESETS];
-}
-export function listProviders() {
-    return [...new Set(PRESETS.map((p) => p.provider))];
-}
-//# sourceMappingURL=profiles-presets.js.map

package/dist/lib/profiles-presets.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"profiles-presets.js","sourceRoot":"","sources":["../../src/lib/profiles-presets.ts"],"names":[],"mappings":"AAYA,wEAAwE;AACxE,wEAAwE;AACxE,4EAA4E;AAC5E,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC3E,wEAAwE;AACxE,gBAAgB;AAChB,EAAE;AACF,sEAAsE;AACtE,4EAA4E;AAC5E,sCAAsC;AAEtC,MAAM,eAAe,GAAG,2BAA2B,CAAC;AACpD,MAAM,eAAe,GAAmE;IACtF,QAAQ,EAAE,YAAY;IACtB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,sBAAsB;IAClC,SAAS,EAAE,4BAA4B;CACxC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAa;IAC/B,0CAA0C;IAC1C;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,0NAA0N;QACvO,GAAG,eAAe;QAClB,GAAG,EAAE;YACH,kBAAkB,EAAE,eAAe;YACnC,eAAe,EAAE,sBAAsB;YACvC,0BAA0B,EAAE,sBAAsB;SACnD;KACF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,kMAAkM;QAC/M,GAAG,eAAe;QAClB,GAAG,EAAE;YACH,kBAAkB,EAAE,eAAe;YACnC,eAAe,EAAE,yBAAyB;YAC1C,0BAA0B,EAAE,yBAAyB;SACtD;KACF;IACD;QACE,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,4JAA4J;QACzK,GAAG,eAAe;QAClB,GAAG,EAAE;YACH,kBAAkB,EAAE,eAAe;YACnC,eAAe,EAAE,sBAAsB;YACvC,0BAA0B,EAAE,sBAAsB;SACnD;KACF;IACD;QACE,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,oSAAoS;QACjT,GAAG,eAAe;QAClB,GAAG,EAAE;YACH,kBAAkB,EAAE,eAAe;YACnC,eAAe,EAAE,YAAY;YAC7B,0BAA0B,EAAE,YAAY;SACzC;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,iLAAiL;QAC9L,GAAG,eAAe;QAClB,GAAG,EAAE;YACH,kBAAkB,EAAE,eAAe;YACnC,eAAe,EAAE,uBAAuB;YACxC,0BAA0B,EAAE,uBAAuB;SACpD;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,iRAAiR;QAC9R,GAAG,eAAe;QAClB,GAAG,EAAE;YACH,kBAAkB,EAAE,eAAe;YACnC,eAAe,EAAE,gCAAgC;YACjD,0BAA0B,EAAE,gCAAgC;SAC7D;KACF;CACF,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC"}

package/dist/lib/profiles.d.ts

@@ -1,35 +0,0 @@
-import type { AgentId } from './types.js';
-import { type Preset } from './profiles-presets.js';
-export interface Profile {
-    name: string;
-    host: {
-        agent: AgentId;
-        version?: string;
-    };
-    env: Record<string, string>;
-    auth?: {
-        envVar: string;
-        keychainItem: string;
-    };
-    description?: string;
-    preset?: string;
-    provider?: string;
-}
-export declare function getProfilesDir(): string;
-export declare function validateProfileName(name: string): void;
-export declare function profileExists(name: string): boolean;
-export declare function readProfile(name: string): Profile;
-export declare function writeProfile(profile: Profile): void;
-export declare function deleteProfile(name: string): boolean;
-export declare function listProfiles(): Profile[];
-export declare function profileFromPreset(profileName: string, preset: Preset, version?: string): Profile;
-export declare function resolveProfileEnv(profile: Profile): Record<string, string>;
-export interface ResolvedProfileRun {
-    agent: AgentId;
-    version?: string;
-    env: Record<string, string>;
-    profileName: string;
-}
-export declare function resolveProfileForRun(name: string): ResolvedProfileRun;
-export declare function getPresetForProfile(profile: Profile): Preset | undefined;
-//# sourceMappingURL=profiles.d.ts.map

package/dist/lib/profiles.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/lib/profiles.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EAAa,KAAK,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/D,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE;QACJ,KAAK,EAAE,OAAO,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,IAAI,CAAC,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAMD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAItD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAmBjD;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CASnD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMnD;AAED,wBAAgB,YAAY,IAAI,OAAO,EAAE,CAcxC;AAKD,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAahG;AAKD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAO1E;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB;AAKD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAQrE;AAID,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAExE"}

package/dist/lib/profiles.js

@@ -1,123 +0,0 @@
-import * as fs from 'fs';
-import * as path from 'path';
-import * as yaml from 'yaml';
-import { getAgentsDir } from './state.js';
-import { getKeychainToken, keychainItemName } from './profiles-keychain.js';
-import { getPreset } from './profiles-presets.js';
-const PROFILE_NAME_PATTERN = /^[a-z0-9][a-z0-9-_]{0,48}$/i;
-export function getProfilesDir() {
-    return path.join(getAgentsDir(), 'profiles');
-}
-function profilePath(name) {
-    return path.join(getProfilesDir(), `${name}.yml`);
-}
-export function validateProfileName(name) {
-    if (!PROFILE_NAME_PATTERN.test(name)) {
-        throw new Error(`Invalid profile name '${name}'. Use letters, digits, dash, underscore (max 48 chars).`);
-    }
-}
-export function profileExists(name) {
-    return fs.existsSync(profilePath(name));
-}
-export function readProfile(name) {
-    validateProfileName(name);
-    const file = profilePath(name);
-    if (!fs.existsSync(file)) {
-        throw new Error(`Profile '${name}' not found.`);
-    }
-    const raw = fs.readFileSync(file, 'utf-8');
-    const parsed = yaml.parse(raw);
-    if (!parsed || typeof parsed !== 'object') {
-        throw new Error(`Profile '${name}' is malformed.`);
-    }
-    if (!parsed.name)
-        parsed.name = name;
-    if (!parsed.host?.agent) {
-        throw new Error(`Profile '${name}' is missing host.agent.`);
-    }
-    if (!parsed.env || typeof parsed.env !== 'object') {
-        parsed.env = {};
-    }
-    return parsed;
-}
-export function writeProfile(profile) {
-    validateProfileName(profile.name);
-    const dir = getProfilesDir();
-    fs.mkdirSync(dir, { recursive: true });
-    const body = yaml.stringify(profile);
-    const file = profilePath(profile.name);
-    const tmp = `${file}.tmp-${process.pid}`;
-    fs.writeFileSync(tmp, body, 'utf-8');
-    fs.renameSync(tmp, file);
-}
-export function deleteProfile(name) {
-    validateProfileName(name);
-    const file = profilePath(name);
-    if (!fs.existsSync(file))
-        return false;
-    fs.unlinkSync(file);
-    return true;
-}
-export function listProfiles() {
-    const dir = getProfilesDir();
-    if (!fs.existsSync(dir))
-        return [];
-    const entries = fs.readdirSync(dir).filter((f) => f.endsWith('.yml') || f.endsWith('.yaml'));
-    const profiles = [];
-    for (const entry of entries) {
-        const name = entry.replace(/\.(yml|yaml)$/, '');
-        try {
-            profiles.push(readProfile(name));
-        }
-        catch {
-            // Skip malformed profile files; surfacing via `agents profiles view <name>`.
-        }
-    }
-    return profiles.sort((a, b) => a.name.localeCompare(b.name));
-}
-// Build a profile from a preset. The keychain item is shared across all
-// profiles that point at the same provider, so adding kimi + deepseek prompts
-// for the OpenRouter key exactly once.
-export function profileFromPreset(profileName, preset, version) {
-    return {
-        name: profileName,
-        host: { agent: preset.host, version },
-        env: { ...preset.env },
-        auth: {
-            envVar: preset.authEnvVar,
-            keychainItem: keychainItemName(preset.provider),
-        },
-        description: preset.description,
-        preset: preset.name,
-        provider: preset.provider,
-    };
-}
-// Resolve a profile into the env block that should be injected into the
-// spawned agent process. Reads the token from keychain at exec time so the
-// profile YAML never holds secrets.
-export function resolveProfileEnv(profile) {
-    const env = { ...profile.env };
-    if (profile.auth) {
-        const token = getKeychainToken(profile.auth.keychainItem);
-        env[profile.auth.envVar] = token;
-    }
-    return env;
-}
-// Resolve a name into (agent, version, env). Throws if the name is not a
-// profile. Callers are expected to try agent-id resolution first and fall
-// back to this when that fails, so we don't need a "isProfile" probe.
-export function resolveProfileForRun(name) {
-    const profile = readProfile(name);
-    return {
-        agent: profile.host.agent,
-        version: profile.host.version,
-        env: resolveProfileEnv(profile),
-        profileName: profile.name,
-    };
-}
-// Look up the preset a profile was created from, if any. Used by
-// `profiles view` to show upstream metadata like signup URLs.
-export function getPresetForProfile(profile) {
-    return profile.preset ? getPreset(profile.preset) : undefined;
-}
-//# sourceMappingURL=profiles.js.map

package/dist/lib/profiles.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/lib/profiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAe,MAAM,uBAAuB,CAAC;AAkB/D,MAAM,oBAAoB,GAAG,6BAA6B,CAAC;AAE3D,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,0DAA0D,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IAC1C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,iBAAiB,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,0BAA0B,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7F,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,6EAA6E;QAC/E,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,wEAAwE;AACxE,8EAA8E;AAC9E,uCAAuC;AACvC,MAAM,UAAU,iBAAiB,CAAC,WAAmB,EAAE,MAAc,EAAE,OAAgB;IACrF,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE;QACrC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE;QACtB,IAAI,EAAE;YACJ,MAAM,EAAE,MAAM,CAAC,UAAU;YACzB,YAAY,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC;SAChD;QACD,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,2EAA2E;AAC3E,oCAAoC;AACpC,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,MAAM,GAAG,GAA2B,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACvD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1D,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,yEAAyE;AACzE,0EAA0E;AAC1E,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;QACzB,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO;QAC7B,GAAG,EAAE,iBAAiB,CAAC,OAAO,CAAC;QAC/B,WAAW,EAAE,OAAO,CAAC,IAAI;KAC1B,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,8DAA8D;AAC9D,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC"}

package/dist/lib/rotate.d.ts

@@ -1,52 +0,0 @@
-import type { AgentId } from './types.js';
-import { type AccountInfo } from './agents.js';
-export interface RotateCandidate {
-    agent: AgentId;
-    version: string;
-    email: string | null;
-    usageStatus: AccountInfo['usageStatus'];
-    authValid: boolean;
-    lastActive: Date | null;
-}
-export interface RotateResult {
-    /** The version picked for this run. */
-    picked: RotateCandidate;
-    /** Candidates that were considered healthy (including the picked one). */
-    healthy: RotateCandidate[];
-    /** Candidates excluded (not signed in, or out of credits). */
-    excluded: RotateCandidate[];
-}
-/**
- * Pure selection: given a set of candidates, return the best one for the
- * next run. Kept separate from I/O so it can be unit-tested with fixtures.
- *
- * Eligibility: signed in (email present) and not out of credits.
- * Tie-break: least-recently-active wins. Never-used versions sort oldest
- * so fresh installs are tried before recently-used ones.
- */
-export declare function pickRotateCandidate(candidates: RotateCandidate[]): RotateResult | null;
-/**
- * Rotate across installed versions of an agent and pick the best one for the
- * next run. "Best" means: signed in, not out of credits, and least-recently-
- * active (so two back-to-back runs hit different accounts automatically).
- *
- * No external state: rotation and health are both read off per-version
- * AccountInfo — the same data `agents view` already surfaces. `lastActive`
- * advances naturally after each run, so the cursor is self-maintaining.
- *
- * Returns null if no installed version is eligible (either nothing installed
- * or every account is exhausted / not signed in). Callers fall back to the
- * global default so behavior stays predictable — we never refuse to run.
- */
-export declare function selectRotateVersion(agent: AgentId): Promise<RotateResult | null>;
-/**
- * Resolve the version `agents run` should use when the caller did not pin
- * one with `@version`. Rotation is the default; falls back to the global
- * default if no version is healthy, and to null if the agent isn't installed
- * under agents-cli at all (let exec surface its own error).
- */
-export declare function resolveRunVersion(agent: AgentId): Promise<{
-    version: string | null;
-    rotation: RotateResult | null;
-}>;
-//# sourceMappingURL=rotate.d.ts.map

package/dist/lib/rotate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rotate.d.ts","sourceRoot":"","sources":["../../src/lib/rotate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAI/D,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;IACxC,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,uCAAuC;IACvC,MAAM,EAAE,eAAe,CAAC;IACxB,0EAA0E;IAC1E,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,eAAe,EAAE,GAAG,YAAY,GAAG,IAAI,CA4BtF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAuBtF;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;IAC/D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;CAC/B,CAAC,CAOD"}

package/dist/lib/rotate.js

@@ -1,87 +0,0 @@
-import { getAccountInfo } from './agents.js';
-import { listInstalledVersions, getVersionHomePath, getGlobalDefault } from './versions.js';
-import { isClaudeAuthValid } from './usage.js';
-/**
- * Pure selection: given a set of candidates, return the best one for the
- * next run. Kept separate from I/O so it can be unit-tested with fixtures.
- *
- * Eligibility: signed in (email present) and not out of credits.
- * Tie-break: least-recently-active wins. Never-used versions sort oldest
- * so fresh installs are tried before recently-used ones.
- */
-export function pickRotateCandidate(candidates) {
-    const healthy = [];
-    const excluded = [];
-    for (const c of candidates) {
-        if (!c.email) {
-            excluded.push(c);
-            continue;
-        }
-        if (c.usageStatus === 'out_of_credits') {
-            excluded.push(c);
-            continue;
-        }
-        if (!c.authValid) {
-            excluded.push(c);
-            continue;
-        }
-        healthy.push(c);
-    }
-    if (healthy.length === 0)
-        return null;
-    const sorted = [...healthy].sort((a, b) => {
-        const ta = a.lastActive ? a.lastActive.getTime() : 0;
-        const tb = b.lastActive ? b.lastActive.getTime() : 0;
-        return ta - tb;
-    });
-    return { picked: sorted[0], healthy: sorted, excluded };
-}
-/**
- * Rotate across installed versions of an agent and pick the best one for the
- * next run. "Best" means: signed in, not out of credits, and least-recently-
- * active (so two back-to-back runs hit different accounts automatically).
- *
- * No external state: rotation and health are both read off per-version
- * AccountInfo — the same data `agents view` already surfaces. `lastActive`
- * advances naturally after each run, so the cursor is self-maintaining.
- *
- * Returns null if no installed version is eligible (either nothing installed
- * or every account is exhausted / not signed in). Callers fall back to the
- * global default so behavior stays predictable — we never refuse to run.
- */
-export async function selectRotateVersion(agent) {
-    const versions = listInstalledVersions(agent);
-    if (versions.length === 0)
-        return null;
-    const candidates = await Promise.all(versions.map(async (version) => {
-        const home = getVersionHomePath(agent, version);
-        const info = await getAccountInfo(agent, home);
-        const authValid = info.email
-            ? agent === 'claude' ? await isClaudeAuthValid(home) : true
-            : false;
-        return {
-            agent,
-            version,
-            email: info.email,
-            usageStatus: info.usageStatus,
-            authValid,
-            lastActive: info.lastActive,
-        };
-    }));
-    return pickRotateCandidate(candidates);
-}
-/**
- * Resolve the version `agents run` should use when the caller did not pin
- * one with `@version`. Rotation is the default; falls back to the global
- * default if no version is healthy, and to null if the agent isn't installed
- * under agents-cli at all (let exec surface its own error).
- */
-export async function resolveRunVersion(agent) {
-    const rotation = await selectRotateVersion(agent);
-    if (rotation) {
-        return { version: rotation.picked.version, rotation };
-    }
-    const fallback = getGlobalDefault(agent);
-    return { version: fallback, rotation: null };
-}
-//# sourceMappingURL=rotate.js.map

package/dist/lib/rotate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rotate.js","sourceRoot":"","sources":["../../src/lib/rotate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAoB,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAoB/C;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAA6B;IAC/D,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,WAAW,KAAK,gBAAgB,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,EAAE,GAAG,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAc;IACtD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,UAAU,GAAsB,MAAM,OAAO,CAAC,GAAG,CACrD,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK;YAC1B,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;YAC3D,CAAC,CAAC,KAAK,CAAC;QACV,OAAO;YACL,KAAK;YACL,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS;YACT,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,mBAAmB,CAAC,UAAU,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAc;IAIpD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC/C,CAAC"}

package/dist/lib/secrets-bundles.d.ts

@@ -1,29 +0,0 @@
-import { type BundleValue, type SecretRef } from './secrets.js';
-export interface SecretsBundle {
-    name: string;
-    description?: string;
-    allow_exec?: boolean;
-    vars: Record<string, BundleValue>;
-}
-export declare function validateBundleName(name: string): void;
-export declare function validateEnvKey(key: string): void;
-export declare function bundleExists(name: string): boolean;
-export declare function readBundle(name: string): SecretsBundle;
-export declare function writeBundle(bundle: SecretsBundle): void;
-export declare function deleteBundle(name: string): boolean;
-export declare function listBundles(): SecretsBundle[];
-export interface BundleEntryInfo {
-    key: string;
-    kind: 'literal' | 'keychain' | 'env' | 'file' | 'exec';
-    detail: string;
-}
-export declare function describeBundle(bundle: SecretsBundle): BundleEntryInfo[];
-export declare function resolveBundleEnv(bundle: SecretsBundle): Record<string, string>;
-export declare function keychainRef(key: string): string;
-export declare function keychainItemsForBundle(bundle: SecretsBundle): Array<{
-    key: string;
-    item: string;
-}>;
-export declare function parseDotenv(content: string): Record<string, string>;
-export type { SecretRef };
-//# sourceMappingURL=secrets-bundles.d.ts.map

package/dist/lib/secrets-bundles.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets-bundles.d.ts","sourceRoot":"","sources":["../../src/lib/secrets-bundles.ts"],"names":[],"mappings":"AAIA,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;CACnC;AAKD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAIrD;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAIhD;AAMD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAqBtD;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAiBvD;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMlD;AAED,wBAAgB,WAAW,IAAI,aAAa,EAAE,CAc7C;AAGD,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,GAAG,eAAe,EAAE,CAWvE;AAMD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAwB9E;AAGD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE/C;AAGD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CASlG;AAGD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAqBnE;AAED,YAAY,EAAE,SAAS,EAAE,CAAC"}

package/dist/lib/secrets-bundles.js

@@ -1,168 +0,0 @@
-import * as fs from 'fs';
-import * as path from 'path';
-import * as yaml from 'yaml';
-import { getSecretsDir } from './state.js';
-import { parseBundleValue, resolveRef, secretsKeychainItem, } from './secrets.js';
-const BUNDLE_NAME_PATTERN = /^[a-z0-9][a-z0-9-_]{0,48}$/i;
-const ENV_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
-export function validateBundleName(name) {
-    if (!BUNDLE_NAME_PATTERN.test(name)) {
-        throw new Error(`Invalid bundle name '${name}'. Use letters, digits, dash, underscore (max 48 chars).`);
-    }
-}
-export function validateEnvKey(key) {
-    if (!ENV_KEY_PATTERN.test(key)) {
-        throw new Error(`Invalid environment variable name '${key}'. Must match [A-Za-z_][A-Za-z0-9_]*.`);
-    }
-}
-function bundlePath(name) {
-    return path.join(getSecretsDir(), `${name}.yml`);
-}
-export function bundleExists(name) {
-    return fs.existsSync(bundlePath(name));
-}
-export function readBundle(name) {
-    validateBundleName(name);
-    const file = bundlePath(name);
-    if (!fs.existsSync(file)) {
-        throw new Error(`Secrets bundle '${name}' not found.`);
-    }
-    const raw = fs.readFileSync(file, 'utf-8');
-    const parsed = yaml.parse(raw);
-    if (!parsed || typeof parsed !== 'object') {
-        throw new Error(`Bundle '${name}' is malformed.`);
-    }
-    const bundle = {
-        name: parsed.name || name,
-        description: parsed.description,
-        allow_exec: Boolean(parsed.allow_exec),
-        vars: parsed.vars && typeof parsed.vars === 'object' ? parsed.vars : {},
-    };
-    for (const key of Object.keys(bundle.vars)) {
-        validateEnvKey(key);
-    }
-    return bundle;
-}
-export function writeBundle(bundle) {
-    validateBundleName(bundle.name);
-    for (const key of Object.keys(bundle.vars)) {
-        validateEnvKey(key);
-    }
-    const dir = getSecretsDir();
-    fs.mkdirSync(dir, { recursive: true });
-    const body = yaml.stringify({
-        name: bundle.name,
-        description: bundle.description,
-        allow_exec: bundle.allow_exec ? true : undefined,
-        vars: bundle.vars,
-    });
-    const file = bundlePath(bundle.name);
-    const tmp = `${file}.tmp-${process.pid}`;
-    fs.writeFileSync(tmp, body, 'utf-8');
-    fs.renameSync(tmp, file);
-}
-export function deleteBundle(name) {
-    validateBundleName(name);
-    const file = bundlePath(name);
-    if (!fs.existsSync(file))
-        return false;
-    fs.unlinkSync(file);
-    return true;
-}
-export function listBundles() {
-    const dir = getSecretsDir();
-    if (!fs.existsSync(dir))
-        return [];
-    const entries = fs.readdirSync(dir).filter((f) => f.endsWith('.yml') || f.endsWith('.yaml'));
-    const bundles = [];
-    for (const entry of entries) {
-        const name = entry.replace(/\.(yml|yaml)$/, '');
-        try {
-            bundles.push(readBundle(name));
-        }
-        catch {
-            // Skip malformed bundles; surfaced via `agents secrets view <name>`.
-        }
-    }
-    return bundles.sort((a, b) => a.name.localeCompare(b.name));
-}
-export function describeBundle(bundle) {
-    const out = [];
-    for (const [key, raw] of Object.entries(bundle.vars)) {
-        const parsed = parseBundleValue(raw);
-        if ('literal' in parsed) {
-            out.push({ key, kind: 'literal', detail: '' });
-        }
-        else {
-            out.push({ key, kind: parsed.ref.provider, detail: parsed.ref.value });
-        }
-    }
-    return out;
-}
-// Walk the bundle and produce a flat env map. Keychain refs are translated via
-// the bundle-scoped naming scheme so two bundles with the same short ID never
-// collide. Throws on the first missing secret so `agents run` fails loudly
-// rather than silently injecting empty strings.
-export function resolveBundleEnv(bundle) {
-    const env = {};
-    for (const [key, raw] of Object.entries(bundle.vars)) {
-        const parsed = parseBundleValue(raw);
-        if ('literal' in parsed) {
-            env[key] = parsed.literal;
-            continue;
-        }
-        try {
-            env[key] = resolveRef(parsed.ref, {
-                allowExec: bundle.allow_exec,
-                keychainItemFor: (shortId) => secretsKeychainItem(bundle.name, shortId),
-            });
-        }
-        catch (err) {
-            const msg = err.message;
-            if (parsed.ref.provider === 'keychain' && /not found/.test(msg)) {
-                throw new Error(`${msg} Run: agents secrets set ${bundle.name} ${key}`);
-            }
-            throw new Error(`Bundle '${bundle.name}' key '${key}': ${msg}`);
-        }
-    }
-    return env;
-}
-// Build a keychain ref expression from a bundle+key pair, for storage in YAML.
-export function keychainRef(key) {
-    return `keychain:${key}`;
-}
-// Iterate all keychain-backed keys in a bundle for cleanup on rm/unset.
-export function keychainItemsForBundle(bundle) {
-    const items = [];
-    for (const [key, raw] of Object.entries(bundle.vars)) {
-        const parsed = parseBundleValue(raw);
-        if ('ref' in parsed && parsed.ref.provider === 'keychain') {
-            items.push({ key, item: secretsKeychainItem(bundle.name, parsed.ref.value) });
-        }
-    }
-    return items;
-}
-// Parse a dotenv string into key=value pairs, preserving last-wins on duplicates.
-export function parseDotenv(content) {
-    const out = {};
-    for (const raw of content.split('\n')) {
-        const line = raw.trim();
-        if (!line || line.startsWith('#'))
-            continue;
-        const stripped = line.startsWith('export ') ? line.slice('export '.length) : line;
-        const eq = stripped.indexOf('=');
-        if (eq <= 0)
-            continue;
-        const key = stripped.slice(0, eq).trim();
-        let value = stripped.slice(eq + 1).trim();
-        if ((value.startsWith('"') && value.endsWith('"')) ||
-            (value.startsWith("'") && value.endsWith("'"))) {
-            value = value.slice(1, -1);
-        }
-        if (ENV_KEY_PATTERN.test(key)) {
-            out[key] = value;
-        }
-    }
-    return out;
-}
-//# sourceMappingURL=secrets-bundles.js.map

package/dist/lib/secrets-bundles.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secrets-bundles.js","sourceRoot":"","sources":["../../src/lib/secrets-bundles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,mBAAmB,GAGpB,MAAM,cAAc,CAAC;AAStB,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAC1D,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAEnD,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,0DAA0D,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,uCAAuC,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,cAAc,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;IACzD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,iBAAiB,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,MAAM,GAAkB;QAC5B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QACtC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;KACxE,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,cAAc,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAqB;IAC/C,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,cAAc,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAChD,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9D,CAAC;AASD,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,gDAAgD;AAChD,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE;gBAChC,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,eAAe,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;aAChF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,CAAC;YACnC,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,4BAA4B,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE,CACvD,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,CAAC,IAAI,UAAU,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,YAAY,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,sBAAsB,CAAC,MAAqB;IAC1D,MAAM,KAAK,GAAyC,EAAE,CAAC;IACvD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACtB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}