@phnx-labs/agents-cli 1.22.43 → 1.22.45

package/dist/commands/org.js

@@ -1,175 +0,0 @@
-import chalk from 'chalk';
-import { setHelpSections } from '../lib/help.js';
-import { runOrDie } from '../lib/format.js';
-import { createSpace, createSpaceInvite, fetchWhoAmI, listSpaceMembers, listSpaces, removeSpaceMember, resolveMemberFromList, resolvePrixToken, resolveSpaceFromList, slugify, updateSpaceMemberRole, } from '../lib/prix-account.js';
-/** Every `agents org` subcommand needs a token up front — one place to say so. */
-function requireToken() {
-    if (!resolvePrixToken())
-        throw new Error("Not signed in. Run 'agents auth login' first.");
-}
-async function resolveSpace(explicit) {
-    const spaces = await listSpaces();
-    return resolveSpaceFromList(spaces, explicit);
-}
-function printSpace(space) {
-    console.log(`${chalk.bold(space.name)}  ${chalk.gray(space.slug)}  ${chalk.gray(space.id)}`);
-    console.log(`  role: ${space.user_role}${space.organization_id ? `  org: ${space.organization_id}` : ''}`);
-}
-function printMembers(members) {
-    if (!members.length) {
-        console.log(chalk.gray('  No members.'));
-        return;
-    }
-    for (const m of members)
-        console.log(`  ${chalk.cyan(m.email)}  ${m.role}  ${chalk.gray(m.user_id)}`);
-}
-async function runCreate(name, o) {
-    requireToken();
-    const space = await createSpace({ name, slug: o.slug ?? slugify(name), description: o.description });
-    if (o.json) {
-        console.log(JSON.stringify(space, null, 2));
-        return;
-    }
-    console.log(chalk.green(`Created space '${space.name}' (${space.slug}).`));
-    printSpace(space);
-}
-async function runList(o) {
-    requireToken();
-    const spaces = await listSpaces();
-    if (o.json) {
-        console.log(JSON.stringify(spaces, null, 2));
-        return;
-    }
-    if (!spaces.length) {
-        console.log(chalk.gray("No spaces. Create one with 'agents org create <name>'."));
-        return;
-    }
-    for (const space of spaces)
-        printSpace(space);
-}
-async function runView(spaceArg, o) {
-    requireToken();
-    const space = await resolveSpace(spaceArg);
-    if (o.json) {
-        console.log(JSON.stringify(space, null, 2));
-        return;
-    }
-    printSpace(space);
-}
-/** `--role` defaults to member when omitted; anything present must be a real role — never silently coerced. */
-export function resolveInviteRole(raw) {
-    return raw === undefined ? 'member' : parseRole(raw);
-}
-async function runInvite(email, o) {
-    requireToken();
-    const role = resolveInviteRole(o.role);
-    const space = await resolveSpace(o.space);
-    const result = await createSpaceInvite(space.id, email, role);
-    if (o.json) {
-        console.log(JSON.stringify(result, null, 2));
-        return;
-    }
-    if (result.member_added)
-        console.log(chalk.green(`Added ${email} to '${space.name}' as ${role}.`));
-    else
-        console.log(chalk.green(`Invited ${email} to '${space.name}' as ${role}. They'll get an email.`));
-}
-async function runMembers(spaceArg, o) {
-    requireToken();
-    const space = await resolveSpace(spaceArg);
-    const members = await listSpaceMembers(space.id);
-    if (o.json) {
-        console.log(JSON.stringify(members, null, 2));
-        return;
-    }
-    console.log(chalk.bold(`${space.name} (${members.length} member${members.length === 1 ? '' : 's'})`));
-    printMembers(members);
-}
-/** Validate a role argument before any network call — same rule the backend enforces server-side. */
-export function parseRole(raw) {
-    if (raw === 'admin' || raw === 'member')
-        return raw;
-    throw new Error(`role must be 'admin' or 'member', got '${raw}'.`);
-}
-async function runRole(email, roleRaw, o) {
-    requireToken();
-    const role = parseRole(roleRaw);
-    const space = await resolveSpace(o.space);
-    const members = await listSpaceMembers(space.id);
-    const member = resolveMemberFromList(members, email);
-    const result = await updateSpaceMemberRole(space.id, member.user_id, role);
-    if (o.json) {
-        console.log(JSON.stringify(result, null, 2));
-        return;
-    }
-    console.log(chalk.green(`${email} is now ${role} in '${space.name}'.`));
-}
-async function runRemove(email, o) {
-    requireToken();
-    const space = await resolveSpace(o.space);
-    const members = await listSpaceMembers(space.id);
-    const member = resolveMemberFromList(members, email);
-    await removeSpaceMember(space.id, member.user_id);
-    if (o.json) {
-        console.log(JSON.stringify({ removed: email, space: space.slug }, null, 2));
-        return;
-    }
-    console.log(chalk.green(`Removed ${email} from '${space.name}'.`));
-}
-async function runLeave(spaceArg, o) {
-    requireToken();
-    const resolved = resolvePrixToken();
-    if (!resolved)
-        throw new Error("Not signed in. Run 'agents auth login' first.");
-    const who = await fetchWhoAmI(resolved.token);
-    const space = await resolveSpace(spaceArg);
-    if (space.owner_user_id === who.userId) {
-        throw new Error(`You own '${space.name}'. Transfer ownership or delete the space instead of leaving it.`);
-    }
-    await removeSpaceMember(space.id, who.userId);
-    if (o.json) {
-        console.log(JSON.stringify({ left: space.slug }, null, 2));
-        return;
-    }
-    console.log(chalk.green(`Left '${space.name}'.`));
-}
-export function registerOrgCommand(program) {
-    const org = program.command('org').description('Create and manage a team (a Rush "space") you can share with `agents auth login` collaborators');
-    org.command('create <name>').description('Create a space (free tier: 1 owned space)')
-        .option('--slug <slug>', 'Override the derived slug')
-        .option('--description <text>', 'Optional description')
-        .option('--json', 'Machine-readable output')
-        .action((name, o, command) => { const json = !!(o.json || command.optsWithGlobals().json); return runOrDie(() => runCreate(name, { ...o, json }), { json }); });
-    org.command('list').description('List spaces you own or belong to').option('--json', 'Machine-readable output')
-        .action((o, command) => { const json = !!(o.json || command.optsWithGlobals().json); return runOrDie(() => runList({ json }), { json }); });
-    org.command('view [space]').description('Show one space (defaults to your only space)').option('--json', 'Machine-readable output')
-        .action((space, o, command) => { const json = !!(o.json || command.optsWithGlobals().json); return runOrDie(() => runView(space, { json }), { json }); });
-    org.command('invite <email>').description('Invite (or directly add) a member')
-        .option('--role <role>', 'admin | member', 'member')
-        .option('--space <id-or-slug>', 'Space to invite into (defaults to your only space)')
-        .option('--json', 'Machine-readable output')
-        .action((email, o, command) => { const json = !!(o.json || command.optsWithGlobals().json); return runOrDie(() => runInvite(email, { ...o, json }), { json }); });
-    org.command('members [space]').description('List a space\'s members').option('--json', 'Machine-readable output')
-        .action((space, o, command) => { const json = !!(o.json || command.optsWithGlobals().json); return runOrDie(() => runMembers(space, { json }), { json }); });
-    org.command('role <email> <role>').description('Change a member\'s role (owner-only for admin)')
-        .option('--space <id-or-slug>', 'Space to change (defaults to your only space)')
-        .option('--json', 'Machine-readable output')
-        .action((email, role, o, command) => { const json = !!(o.json || command.optsWithGlobals().json); return runOrDie(() => runRole(email, role, { ...o, json }), { json }); });
-    org.command('remove <email>').description('Remove a member from a space')
-        .option('--space <id-or-slug>', 'Space to remove from (defaults to your only space)')
-        .option('--json', 'Machine-readable output')
-        .action((email, o, command) => { const json = !!(o.json || command.optsWithGlobals().json); return runOrDie(() => runRemove(email, { ...o, json }), { json }); });
-    org.command('leave [space]').description('Leave a space you do not own').option('--json', 'Machine-readable output')
-        .action((space, o, command) => { const json = !!(o.json || command.optsWithGlobals().json); return runOrDie(() => runLeave(space, { json }), { json }); });
-    setHelpSections(org, {
-        examples: `agents org create acme-team
-agents org list
-agents org view acme-team
-agents org invite dev@example.com --role admin
-agents org members
-agents org role dev@example.com admin
-agents org remove dev@example.com
-agents org leave acme-team`,
-        notes: 'Maps to the Rush backend\'s /api/v1/spaces (the free-tier team primitive), not /api/v1/orgs. Free tier: 1 owned space, 3 members per space. Every command needs `agents auth login` (or a `rush login` session) first. `--space` is only needed once you belong to more than one space.',
-    });
-}

package/dist/commands/serve.d.ts

@@ -1,10 +0,0 @@
-/**
- * `agents serve` — read-only local web companion.
- *
- * Boots a localhost-only (127.0.0.1) HTTP + SSE server that renders a live
- * dashboard of team status + per-worktree diffs, scheduled routines, and cloud
- * tasks. Everything is a viewer over data other commands already own — there
- * are no mutation endpoints. See src/lib/serve/.
- */
-import type { Command } from 'commander';
-export declare function registerServeCommand(program: Command): void;

package/dist/commands/serve.js

@@ -1,68 +0,0 @@
-import chalk from 'chalk';
-import { startServeServer, DEFAULT_SERVE_PORT, SERVE_HOST } from '../lib/serve/server.js';
-import { startControlServer } from '../lib/serve/control.js';
-import { ensureControlToken } from '../lib/serve/token.js';
-export function registerServeCommand(program) {
-    program
-        .command('serve')
-        .description('Read-only local web companion: team diffs, routines, and cloud status (binds 127.0.0.1 only).')
-        .option('-p, --port <n>', `Port to bind on ${SERVE_HOST}`, String(DEFAULT_SERVE_PORT))
-        .option('--interval <ms>', 'SSE refresh cadence in milliseconds', '3000')
-        .option('--control', 'Authenticated control mode (RUSH-1731): adds bearer-gated POST /api/run and /api/session/:id/message so the iOS cockpit can dispatch + steer. Enables binding beyond loopback — pair a device with `agents devices pair-ios`.', false)
-        .option('--bind <addr>', 'Address to bind in --control mode (e.g. your tailnet IP, or 0.0.0.0). Ignored without --control; read-only serve is always loopback.', SERVE_HOST)
-        .action(async (opts) => {
-        const port = parseInt(opts.port ?? '', 10) || DEFAULT_SERVE_PORT;
-        const intervalMs = parseInt(opts.interval ?? '', 10) || 3000;
-        try {
-            if (opts.control) {
-                const bind = opts.bind || SERVE_HOST;
-                const minted = ensureControlToken('default');
-                const { server, port: bound } = await startControlServer(port, bind, {
-                    cwd: process.cwd(),
-                    intervalMs,
-                });
-                const url = `http://${bind}:${bound}`;
-                console.log(`${chalk.green('agents serve --control')} ${chalk.dim('→')} ${chalk.cyan(url)}`);
-                if (minted.created) {
-                    console.log(chalk.yellow('New control token (shown once — store it in the cockpit now):'));
-                    console.log(`  ${chalk.bold(minted.token)}  ${chalk.dim(`(id ${minted.id})`)}`);
-                }
-                else {
-                    console.log(chalk.dim('Using existing control token(s). Issue another with `agents devices pair-ios`.'));
-                }
-                if (bind !== SERVE_HOST) {
-                    console.log(chalk.dim('bearer-gated · bind beyond loopback — keep this on the tailnet, never public Funnel · Ctrl-C to stop'));
-                }
-                else {
-                    console.log(chalk.dim('bearer-gated · loopback (pass --bind <tailnet-ip> to reach it from the phone) · Ctrl-C to stop'));
-                }
-                const shutdown = () => server.close(() => process.exit(0));
-                process.on('SIGINT', shutdown);
-                process.on('SIGTERM', shutdown);
-                return;
-            }
-            const { server, port: bound } = await startServeServer(port, {
-                cwd: process.cwd(),
-                intervalMs,
-            });
-            const url = `http://${SERVE_HOST}:${bound}`;
-            console.log(`${chalk.green('agents serve')} ${chalk.dim('→')} ${chalk.cyan(url)}`);
-            console.log(chalk.dim('read-only · localhost only · Ctrl-C to stop'));
-            const shutdown = () => {
-                server.close(() => process.exit(0));
-            };
-            process.on('SIGINT', shutdown);
-            process.on('SIGTERM', shutdown);
-        }
-        catch (err) {
-            const msg = String(err?.message ?? err);
-            if (msg.includes('EADDRINUSE')) {
-                console.error(chalk.red(`Port ${port} is already in use. Pass --port <n> to pick another.`));
-            }
-            else {
-                console.error(chalk.red(`Could not start serve: ${msg}`));
-            }
-            process.exit(1);
-        }
-    });
-}

package/dist/commands/trends.d.ts

@@ -1,10 +0,0 @@
-/**
- * Deprecated top-level spelling of the counter-mix tree.
- *
- * Implementation lives under `agents insights mix` (see
- * `lib/analytics/mix-commands.ts`). This file only registers the thin alias so
- * old scripts and agent briefs keep working while printing one deprecation line
- * — no second recipe implementation.
- */
-import type { Command } from 'commander';
-export declare function registerTrendsCommand(program: Command): void;

package/dist/commands/trends.js

@@ -1,12 +0,0 @@
-/**
- * Deprecated top-level spelling of the counter-mix tree.
- *
- * Implementation lives under `agents insights mix` (see
- * `lib/analytics/mix-commands.ts`). This file only registers the thin alias so
- * old scripts and agent briefs keep working while printing one deprecation line
- * — no second recipe implementation.
- */
-import { registerDeprecatedTrendsAlias } from '../lib/analytics/mix-commands.js';
-export function registerTrendsCommand(program) {
-    registerDeprecatedTrendsAlias(program);
-}

package/dist/lib/entitlement.d.ts

@@ -1,31 +0,0 @@
-/** How long a cached tier is trusted before the next call re-fetches. */
-export declare const ENTITLEMENT_CACHE_TTL_MS: number;
-export type EntitlementSource = 'live' | 'cache' | 'offline' | 'no-session';
-export interface EntitlementTier {
-    /** The raw tier name from the backend ('free', 'admin', or a paid tier name). */
-    tierName: string;
-    /** true for 'admin' or any tier name other than 'free'. */
-    isPaid: boolean;
-    /** Where this value came from — mainly for diagnostics/tests. */
-    source: EntitlementSource;
-}
-export declare function setEntitlementUserYamlPathForTest(value: string | null): void;
-export declare function setEntitlementCachePathForTest(value: string | null): void;
-export declare function setEntitlementFetchForTest(fn: typeof globalThis.fetch): void;
-export declare function entitlementCachePath(): string;
-/**
- * The live plan tier, cache-first with a TTL.
- *
- * - No `~/.rush/user.yaml` at all → free, no network call.
- * - A fresh cache entry (within {@link ENTITLEMENT_CACHE_TTL_MS}) is returned
- *   with no network call.
- * - A stale or missing cache triggers a live fetch; on success the result is
- *   cached and returned.
- * - A failed fetch (offline, timeout, non-2xx) falls back to a stale cache if
- *   one exists — never silently drops a known-paid account to free just
- *   because the network hiccuped — and only falls back to free when there is
- *   no cache at all to fall back to.
- */
-export declare function getTier(): Promise<EntitlementTier>;
-/** Per-harness account cap for a tier: 3 on free, 10 on paid/admin. */
-export declare function accountCapForTier(tier: Pick<EntitlementTier, 'isPaid'>): number;

package/dist/lib/entitlement.js

@@ -1,137 +0,0 @@
-/**
- * Plan-tier entitlement — the one place agents-cli reads a user's live billing
- * tier for plan gates (the `agents accounts` per-harness cap, the `agents
- * insights` paid split). Fetches `GET /api/v1/billing/subscription?agent=agi-cli`
- * using the Rush session token from `~/.rush/user.yaml` (same read pattern as
- * `lib/cloud/rush.ts` / `lib/secrets/drivers/rush.ts` — this module does not
- * import either, since neither exports its token reader), caches the result on
- * disk with a TTL, and stays offline-tolerant: a stale cache is honored over a
- * failed network call rather than silently dropping a paid account to free, and
- * no session file at all resolves straight to the free tier with no request.
- */
-import * as fs from 'node:fs';
-import * as os from 'node:os';
-import * as path from 'node:path';
-import * as yaml from 'yaml';
-import { getCacheDir } from './state.js';
-import { atomicWriteFileSync, ensureLockTarget, withFileLock } from './fs-atomic.js';
-const PROXY_BASE = process.env.RUSH_PROXY_BASE ?? 'https://api.prix.dev';
-const SUBSCRIPTION_PATH = '/api/v1/billing/subscription?agent=agi-cli';
-/** How long a cached tier is trusted before the next call re-fetches. */
-export const ENTITLEMENT_CACHE_TTL_MS = 15 * 60_000;
-/** Same shape as bootstrap.ts's fetchNpmPackageMetadata — a hung connection
- * (dead peer, a firewall dropping packets silently) must not block every
- * `accounts add`/`insights` call indefinitely once the cache goes stale. */
-const FETCH_TIMEOUT_MS = 5000;
-const FREE_TIER = { tierName: 'free', isPaid: false };
-// ─── Injectable seams (tests only — the lib's own real read/write paths) ────
-let userYamlPathOverride = null;
-let cachePathOverride = null;
-let fetchImpl = globalThis.fetch;
-export function setEntitlementUserYamlPathForTest(value) {
-    userYamlPathOverride = value;
-}
-export function setEntitlementCachePathForTest(value) {
-    cachePathOverride = value;
-}
-export function setEntitlementFetchForTest(fn) {
-    fetchImpl = fn;
-}
-function userYamlPath() {
-    return userYamlPathOverride ?? path.join(os.homedir(), '.rush', 'user.yaml');
-}
-export function entitlementCachePath() {
-    return cachePathOverride ?? path.join(getCacheDir(), '.entitlement-cache.json');
-}
-function readRushToken() {
-    const file = userYamlPath();
-    if (!fs.existsSync(file))
-        return null;
-    try {
-        const data = yaml.parse(fs.readFileSync(file, 'utf-8'));
-        return data?.session?.access_token || null;
-    }
-    catch {
-        return null;
-    }
-}
-function readCache() {
-    try {
-        const parsed = JSON.parse(fs.readFileSync(entitlementCachePath(), 'utf-8'));
-        if (parsed?.version === 1 && typeof parsed.tierName === 'string' && typeof parsed.fetchedAt === 'number')
-            return parsed;
-    }
-    catch {
-        // missing or corrupt — treat as no cache
-    }
-    return null;
-}
-/** Best-effort write; a failed cache write just means the next call re-fetches. */
-function writeCache(tierName, isPaid) {
-    try {
-        const target = entitlementCachePath();
-        ensureLockTarget(target);
-        withFileLock(target, () => {
-            const entry = { version: 1, tierName, isPaid, fetchedAt: Date.now() };
-            atomicWriteFileSync(target, JSON.stringify(entry, null, 2));
-        });
-    }
-    catch {
-        // best-effort
-    }
-}
-/**
- * Only `tierName: "free"` (or an absent tier name) reads as free — every other
- * name (`admin`, or a real paid-tier name once agi-cli has a pricing manifest,
- * see the integration spec §4.4 G3) is treated as paid. Backend tier config for
- * agi-cli doesn't exist yet, so this deliberately does not lean on
- * `hasSubscription`/`needsUpgrade` nuance the backend isn't populating meaningfully
- * for this agent today.
- */
-function classifySubscription(sub) {
-    const tierName = typeof sub.tierName === 'string' && sub.tierName ? sub.tierName : 'free';
-    return { tierName, isPaid: tierName !== 'free' };
-}
-/**
- * The live plan tier, cache-first with a TTL.
- *
- * - No `~/.rush/user.yaml` at all → free, no network call.
- * - A fresh cache entry (within {@link ENTITLEMENT_CACHE_TTL_MS}) is returned
- *   with no network call.
- * - A stale or missing cache triggers a live fetch; on success the result is
- *   cached and returned.
- * - A failed fetch (offline, timeout, non-2xx) falls back to a stale cache if
- *   one exists — never silently drops a known-paid account to free just
- *   because the network hiccuped — and only falls back to free when there is
- *   no cache at all to fall back to.
- */
-export async function getTier() {
-    const token = readRushToken();
-    if (!token)
-        return { ...FREE_TIER, source: 'no-session' };
-    const cached = readCache();
-    if (cached && Date.now() - cached.fetchedAt < ENTITLEMENT_CACHE_TTL_MS) {
-        return { tierName: cached.tierName, isPaid: cached.isPaid, source: 'cache' };
-    }
-    try {
-        const res = await fetchImpl(`${PROXY_BASE}${SUBSCRIPTION_PATH}`, {
-            headers: { Authorization: `Bearer ${token}` },
-            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
-        });
-        if (!res.ok)
-            throw new Error(`billing/subscription responded ${res.status}`);
-        const sub = (await res.json());
-        const { tierName, isPaid } = classifySubscription(sub);
-        writeCache(tierName, isPaid);
-        return { tierName, isPaid, source: 'live' };
-    }
-    catch {
-        if (cached)
-            return { tierName: cached.tierName, isPaid: cached.isPaid, source: 'offline' };
-        return { ...FREE_TIER, source: 'offline' };
-    }
-}
-/** Per-harness account cap for a tier: 3 on free, 10 on paid/admin. */
-export function accountCapForTier(tier) {
-    return tier.isPaid ? 10 : 3;
-}

package/dist/lib/prix-account.d.ts

@@ -1,158 +0,0 @@
-/**
- * Client for the Rush account layer (`api.prix.dev`) — backs `agents auth` and
- * `agents org`. `agents org` maps to `/api/v1/spaces`, not `/api/v1/orgs`: spaces
- * already carry the free-tier caps (1 owned space, 3 members) and can exist
- * standalone with no parent organization, matching a "just want a team" CLI flow
- * better than the heavier enterprise-tenancy `orgs` routes (domain, SSO). See
- * `.agents/artifacts/2026-08-20/agi-cli-client-integration-spec.md` §4.2 in the
- * agi-cli-web repo for the full reasoning and the live-confirmed route/shape audit.
- *
- * Token custody: `agents auth login` writes its own session file
- * (`getPrixSessionFile()`), separate from `~/.rush/user.yaml`, so `agents auth
- * logout` never signs the user out of `rush` (the two CLIs share a backend
- * account, not a credential store). Reads fall back to `~/.rush/user.yaml`
- * (the pattern `readRushToken` in `lib/secrets/drivers/rush.ts` already uses)
- * so a user who is only signed in via `rush login` still gets a working
- * `agents auth whoami` / `agents org` with zero extra login step.
- */
-export declare const PRIX_API_BASE = "https://api.prix.dev";
-/** The session `agents auth login` owns. */
-export interface PrixSession {
-    access_token: string;
-    refresh_token?: string;
-    /** Unix ms. */
-    expires_at?: number;
-    email?: string;
-    userId?: string;
-}
-export declare function getPrixSessionFile(): string;
-export declare function readPrixSession(): PrixSession | null;
-export declare function writePrixSession(session: PrixSession): void;
-export declare function clearPrixSession(): boolean;
-/** Where the caller's Bearer token came from — surfaced by `whoami` so the user knows which login is live. */
-export type PrixTokenSource = 'agents' | 'rush';
-export declare function resolvePrixToken(): {
-    token: string;
-    source: PrixTokenSource;
-} | null;
-export declare class PrixApiError extends Error {
-    status: number;
-    constructor(status: number, message: string);
-}
-export interface WhoAmI {
-    userId: string;
-    email: string;
-    valid: true;
-}
-/** `GET /api/v1/auth/me` — live-confirmed shape: `{email, userId, valid}`. */
-export declare function fetchWhoAmI(token?: string): Promise<WhoAmI>;
-export interface DeviceAuthorization {
-    device_code: string;
-    user_code: string;
-    verification_uri: string;
-    verification_uri_complete: string;
-    expires_in: number;
-    interval: number;
-}
-/** `POST /api/v1/auth/device/authorization` — public, no token. */
-export declare function startDeviceAuthorization(): Promise<DeviceAuthorization>;
-export type DeviceTokenPoll = {
-    status: 'authorized';
-    access_token: string;
-    refresh_token?: string;
-    expires_in?: number;
-    user: {
-        email: string;
-        id: string;
-    };
-} | {
-    status: 'pending';
-} | {
-    status: 'slow_down';
-} | {
-    status: 'expired';
-} | {
-    status: 'denied';
-};
-/** `POST /api/v1/auth/device/token` — one poll attempt. Callers own the interval loop. */
-export declare function pollDeviceToken(deviceCode: string): Promise<DeviceTokenPoll>;
-export interface SpaceSummary {
-    id: string;
-    slug: string;
-    name: string;
-    organization_id: string | null;
-    owner_user_id: string;
-    invite_code?: string;
-    user_role: 'owner' | 'admin' | 'member';
-    created_at: string;
-}
-export interface SpaceMember {
-    user_id: string;
-    email: string;
-    name?: string;
-    avatar_url?: string;
-    role: 'owner' | 'admin' | 'member';
-    joined_at: string;
-}
-/** `GET /api/v1/spaces` — live-confirmed: array of `SpaceSummary`. */
-export declare function listSpaces(): Promise<SpaceSummary[]>;
-/** `POST /api/v1/spaces` — 403 if the caller already owns a space (free tier: 1). */
-export declare function createSpace(input: {
-    name: string;
-    slug: string;
-    description?: string;
-}): Promise<SpaceSummary>;
-/** `GET /api/v1/spaces/:id` — requires membership. */
-export declare function getSpace(spaceId: string): Promise<SpaceSummary>;
-/** `GET /api/v1/spaces/:id/members`. */
-export declare function listSpaceMembers(spaceId: string): Promise<SpaceMember[]>;
-export type CreateSpaceInviteResult = {
-    invited: true;
-    email: string;
-    role: string;
-    member_added: true;
-} | {
-    invited: true;
-    email: string;
-    role: string;
-    invite_code: string;
-    member_added?: false;
-};
-/** `POST /api/v1/spaces/:id/invites` — sends a real email for the pending-invite path. */
-export declare function createSpaceInvite(spaceId: string, email: string, role?: 'admin' | 'member'): Promise<CreateSpaceInviteResult>;
-export interface SpaceInvite {
-    id: string;
-    space_id: string;
-    email: string;
-    role: 'admin' | 'member';
-    invite_code: string;
-    created_at: string;
-}
-/** `GET /api/v1/spaces/:id/invites`. */
-export declare function listSpaceInvites(spaceId: string): Promise<SpaceInvite[]>;
-/** `DELETE /api/v1/spaces/:id/invites/:inviteId`. */
-export declare function revokeSpaceInvite(spaceId: string, inviteId: string): Promise<{
-    revoked: true;
-}>;
-/** `PATCH /api/v1/spaces/:id/members/:userId` — owner-only for admin changes. Route takes userId, not email. */
-export declare function updateSpaceMemberRole(spaceId: string, userId: string, role: 'admin' | 'member'): Promise<{
-    user_id: string;
-    role: string;
-    updated: true;
-}>;
-/** `DELETE /api/v1/spaces/:id/members/:userId` — owner, admin, or the member themself (leave). */
-export declare function removeSpaceMember(spaceId: string, userId: string): Promise<void>;
-/** `DELETE /api/v1/spaces/:id` — soft delete, 30-day restore window. */
-export declare function deleteSpace(spaceId: string): Promise<void>;
-/** `agents-cli-space-name` -> `agi-cli-space-name`; lowercase, hyphenated, matches the backend's `^[a-z0-9-]+$` slug rule. */
-export declare function slugify(name: string): string;
-/**
- * Resolve the `--space` a command should act on: an explicit id/slug match
- * against the caller's own space list, or — with nothing passed — the
- * caller's sole space (free tier caps ownership at one, so this is almost
- * always unambiguous). Pure over an already-fetched list so it's cheaply
- * unit-testable with a fixture.
- */
-export declare function resolveSpaceFromList(spaces: SpaceSummary[], explicit?: string): SpaceSummary;
-/** Resolve a member's email to their `user_id` from an already-fetched member list. */
-export declare function resolveMemberFromList(members: SpaceMember[], email: string): SpaceMember;