@proagentstore/cli 0.1.8 → 0.1.9

package/dist/index.js

@@ -1,25 +1,19 @@
 #!/usr/bin/env node
+import {
+  __require,
+  runnerCommand,
+  writeError,
+  writeLine
+} from "./chunk-LNY7MNUC.js";
 
 // src/index.ts
 import { createRequire } from "module";
-import { Command as Command6 } from "commander";
+import { Command as Command7 } from "commander";
 
 // src/commands/check.ts
 import { existsSync, readFileSync } from "fs";
 import { join, resolve } from "path";
 import { Command } from "commander";
-
-// src/output.ts
-function writeLine(message = "") {
-  process.stdout.write(`${message}
-`);
-}
-function writeError(message = "") {
-  process.stderr.write(`${message}
-`);
-}
-
-// src/commands/check.ts
 var checkCommand = new Command("check").description("Run compliance checks on an agent").option("-d, --dir <path>", "Agent directory", ".").action((opts) => {
   const dir = resolve(opts.dir);
   const results = [];
@@ -363,9 +357,143 @@ jobs:
   writeLine();
 });
 
+// src/commands/login.ts
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { createServer } from "http";
+import { homedir } from "os";
+import { join as join3 } from "path";
+import { Command as Command3 } from "commander";
+var CONFIG_DIR = join3(homedir(), ".config", "proagentstore");
+var TOKEN_FILE = join3(CONFIG_DIR, "session.json");
+var API_BASE = "https://api.proagentstore.online";
+var FAS_API = "https://api.freeappstore.online";
+function loadSession() {
+  try {
+    if (!existsSync3(TOKEN_FILE)) return null;
+    const data = JSON.parse(readFileSync2(TOKEN_FILE, "utf-8"));
+    if (data.expiresAt < Date.now()) {
+      writeLine("Session expired. Run: pags login");
+      return null;
+    }
+    return data;
+  } catch {
+    return null;
+  }
+}
+function saveSession(session) {
+  mkdirSync2(CONFIG_DIR, { recursive: true });
+  writeFileSync2(TOKEN_FILE, JSON.stringify(session, null, 2));
+}
+function requireSession() {
+  const session = loadSession();
+  if (!session) {
+    writeError("Not logged in. Run: pags login");
+    process.exit(1);
+  }
+  return session;
+}
+var loginCommand = new Command3("login").description("Sign in with Google or GitHub (opens browser)").option("--github", "Use GitHub instead of Google").action(async (opts) => {
+  const provider = opts.github ? "github" : "google";
+  writeLine(`Opening browser for ${provider} sign-in...`);
+  const port = await findFreePort();
+  const callbackUrl = `http://127.0.0.1:${port}/callback`;
+  const tokenPromise = new Promise((resolve4, reject) => {
+    const timeout = setTimeout(() => {
+      server.close();
+      reject(new Error("Login timed out (60s)"));
+    }, 6e4);
+    const server = createServer(async (req, res) => {
+      const url = new URL(req.url || "/", `http://127.0.0.1:${port}`);
+      if (url.pathname !== "/callback") {
+        res.writeHead(404);
+        res.end();
+        return;
+      }
+      const fasSession = url.searchParams.get("fas_session");
+      if (!fasSession) {
+        res.writeHead(400, { "Content-Type": "text/html" });
+        res.end("<h1>Sign-in failed</h1><p>No session received.</p>");
+        clearTimeout(timeout);
+        server.close();
+        reject(new Error("No fas_session in callback"));
+        return;
+      }
+      try {
+        const exchangeRes = await fetch(`${API_BASE}/v1/auth/exchange`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ fas_session: fasSession })
+        });
+        const data = await exchangeRes.json();
+        if (!data.token) throw new Error(data.error || "Exchange failed");
+        saveSession({
+          token: data.token,
+          user: data.user,
+          expiresAt: Date.now() + 29 * 24 * 60 * 60 * 1e3
+          // ~29 days
+        });
+        res.writeHead(200, { "Content-Type": "text/html" });
+        res.end(`<h1>Signed in as ${data.user?.login}</h1><p>You can close this tab and return to the terminal.</p><script>window.close()</script>`);
+        clearTimeout(timeout);
+        server.close();
+        resolve4(data.token);
+      } catch (err) {
+        res.writeHead(500, { "Content-Type": "text/html" });
+        res.end(`<h1>Sign-in failed</h1><p>${err instanceof Error ? err.message : String(err)}</p>`);
+        clearTimeout(timeout);
+        server.close();
+        reject(err);
+      }
+    });
+    server.listen(port, "127.0.0.1");
+  });
+  const oauthBase = provider === "google" ? `${FAS_API}/v1/auth/google/start` : `${FAS_API}/v1/auth/github/start`;
+  const oauthUrl = `${oauthBase}?app_id=pags-cli&response_mode=query&return_to=${encodeURIComponent(callbackUrl)}`;
+  const open = (await import("child_process")).exec;
+  const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
+  open(`${cmd} "${oauthUrl}"`);
+  try {
+    await tokenPromise;
+    const session = loadSession();
+    writeLine(`Signed in as ${session?.user.login}. Token stored at ${TOKEN_FILE}`);
+  } catch (err) {
+    writeError(err instanceof Error ? err.message : String(err));
+    process.exit(1);
+  }
+});
+var logoutCommand = new Command3("logout").description("Sign out and remove stored session").action(() => {
+  try {
+    if (existsSync3(TOKEN_FILE)) {
+      const { unlinkSync } = __require("fs");
+      unlinkSync(TOKEN_FILE);
+    }
+    writeLine("Signed out.");
+  } catch {
+    writeLine("Already signed out.");
+  }
+});
+var whoamiCommand = new Command3("whoami").description("Show current signed-in user").action(() => {
+  const session = loadSession();
+  if (session) {
+    writeLine(`${session.user.login} (${session.user.id})`);
+  } else {
+    writeLine("Not logged in. Run: pags login");
+  }
+});
+async function findFreePort() {
+  return new Promise((resolve4) => {
+    const server = createServer();
+    server.listen(0, "127.0.0.1", () => {
+      const addr = server.address();
+      const port = typeof addr === "object" && addr ? addr.port : 0;
+      server.close(() => resolve4(port));
+    });
+  });
+}
+
 // src/commands/mcp.ts
 import { spawn } from "child_process";
-import { Command as Command3 } from "commander";
+import { Command as Command4 } from "commander";
 var DEFAULT_MCP_URL = "https://mcp.proagentstore.online/mcp";
 function buildMcpRemoteArgs(opts, extraArgs = []) {
   return ["-y", "mcp-remote", opts.url || DEFAULT_MCP_URL, ...extraArgs];
@@ -375,31 +503,31 @@ async function runMcpProxy(opts, extraArgs = []) {
     stdio: "inherit",
     env: process.env
   });
-  await new Promise((resolve5, reject) => {
+  await new Promise((resolve4, reject) => {
     child.on("error", reject);
     child.on("close", (code) => {
       if (code && code !== 0) reject(new Error(`mcp proxy exited with code ${code}`));
-      else resolve5();
+      else resolve4();
     });
   });
 }
-var mcpCommand = new Command3("mcp").description("Run a local stdio proxy for the official ProAgentStore MCP server").option("--url <url>", "Remote MCP endpoint", DEFAULT_MCP_URL).argument("[args...]", "Extra arguments passed to mcp-remote").action(async (args, opts) => {
+var mcpCommand = new Command4("mcp").description("Run a local stdio proxy for the official ProAgentStore MCP server").option("--url <url>", "Remote MCP endpoint", DEFAULT_MCP_URL).argument("[args...]", "Extra arguments passed to mcp-remote").action(async (args, opts) => {
   await runMcpProxy(opts, args);
 });
 
 // src/commands/publish.ts
 import { execFileSync } from "child_process";
-import { existsSync as existsSync3, readFileSync as readFileSync2 } from "fs";
-import { join as join3, resolve as resolve3 } from "path";
-import { Command as Command4 } from "commander";
-var publishCommand = new Command4("publish").description("Publish an agent to ProAgentStore").option("-d, --dir <path>", "Agent directory", ".").action(async (opts) => {
+import { existsSync as existsSync4, readFileSync as readFileSync3 } from "fs";
+import { join as join4, resolve as resolve3 } from "path";
+import { Command as Command5 } from "commander";
+var publishCommand = new Command5("publish").description("Publish an agent to ProAgentStore").option("-d, --dir <path>", "Agent directory", ".").action(async (opts) => {
   const dir = resolve3(opts.dir);
-  const manifestPath = join3(dir, "agent.json");
-  if (!existsSync3(manifestPath)) {
+  const manifestPath = join4(dir, "agent.json");
+  if (!existsSync4(manifestPath)) {
     writeError("No agent.json found. Run `pags init` first.");
     process.exit(1);
   }
-  const manifest = JSON.parse(readFileSync2(manifestPath, "utf-8"));
+  const manifest = JSON.parse(readFileSync3(manifestPath, "utf-8"));
   const slug = manifest.id;
   if (!slug) {
     writeError("agent.json missing id");
@@ -470,393 +598,72 @@ var publishCommand = new Command4("publish").description("Publish an agent to Pr
   writeLine();
 });
 
-// src/commands/runner.ts
-import { spawn as spawn2 } from "child_process";
-import { randomUUID } from "crypto";
-import { existsSync as existsSync4 } from "fs";
-import { resolve as resolve4 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-import { Command as Command5 } from "commander";
-var runnerCommand = createRunnerCommand();
-function runnerBaseUrl(url) {
-  return (clean(url) || clean(process.env.PAGS_RUNNER_URL) || "http://127.0.0.1:49171").replace(/\/$/, "");
-}
-function pagsApiBase(url) {
-  return (clean(url) || clean(process.env.PAGS_API_BASE) || "https://api.proagentstore.online").replace(/\/$/, "");
-}
-function pagsHeaders(token) {
-  const resolved = clean(token) || clean(process.env.PAGS_TOKEN);
-  return resolved ? { Authorization: `Bearer ${resolved}` } : {};
-}
-function runnerRequestHeaders(opts) {
-  const resolved = clean(opts.token) || clean(process.env.PAGS_RUNNER_TOKEN);
-  const headers = resolved ? { Authorization: `Bearer ${resolved}` } : {};
-  const instanceId = clean(opts.instanceId) || clean(process.env.PAGS_INSTANCE_ID);
-  if (instanceId) headers["X-PAGS-Instance-Id"] = instanceId;
-  return headers;
-}
-function apiPathSegment(value) {
-  return encodeURIComponent(value);
-}
-function buildRunnerArgs(opts) {
-  const args = [];
-  if (clean(opts.host)) args.push("--host", clean(opts.host));
-  if (clean(opts.port)) args.push("--port", clean(opts.port));
-  if (clean(opts.dataDir)) args.push("--data-dir", clean(opts.dataDir));
-  if (clean(opts.token)) args.push("--token", clean(opts.token));
-  if (clean(opts.instanceId)) args.push("--instance-id", clean(opts.instanceId));
-  if (opts.headless) args.push("--headless");
-  return args;
-}
-function buildCloudflaredArgs(localUrl) {
-  return ["tunnel", "--url", localUrl];
-}
-function parseCloudflaredTunnelUrl(text) {
-  return text.match(/https:\/\/[a-z0-9-]+\.trycloudflare\.com/i)?.[0] || null;
-}
-function buildRuntimeRegistrationBody(opts, capabilities = []) {
-  return {
-    endpointUrl: clean(opts.endpointUrl) || opts.endpointUrl,
-    token: clean(opts.runnerToken) || clean(opts.token) || clean(process.env.PAGS_RUNNER_TOKEN),
-    placement: opts.placement === "managed" ? "managed" : "local",
-    capabilities,
-    runnerVersion: clean(opts.runnerVersion) || ""
-  };
-}
-function clean(value) {
-  const trimmed = value?.trim();
-  return trimmed || void 0;
-}
-function findWorkspaceRoot() {
-  let dir = process.cwd();
-  for (let i = 0; i < 8; i++) {
-    if (existsSync4(resolve4(dir, "pnpm-workspace.yaml"))) return dir;
-    const parent = resolve4(dir, "..");
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return process.cwd();
-}
-function bundledRunnerPath() {
-  return fileURLToPath2(new URL("./browser-runner/index.js", import.meta.url));
-}
-function runnerSpawnSpec(opts) {
-  const root = findWorkspaceRoot();
-  const localPackage = resolve4(root, "packages", "browser-runner", "src", "index.ts");
-  const bundledPackage = bundledRunnerPath();
-  const runnerArgs = buildRunnerArgs(opts);
-  let cwd = root;
-  let command = "pags-browser-runner";
-  let args = runnerArgs;
-  if (existsSync4(localPackage)) {
-    command = "pnpm";
-    args = ["--filter", "@proagentstore/browser-runner", "dev", "--", ...runnerArgs];
-  } else if (existsSync4(bundledPackage)) {
-    cwd = process.cwd();
-    command = process.execPath;
-    args = [bundledPackage, ...runnerArgs];
-  }
-  return { command, args, cwd };
-}
-function startRunnerForeground(opts) {
-  const spec = runnerSpawnSpec(opts);
-  return new Promise((resolvePromise, reject) => {
-    const child = spawn2(spec.command, spec.args, {
-      cwd: spec.cwd,
-      stdio: "inherit",
-      shell: process.platform === "win32"
-    });
-    child.on("error", reject);
-    child.on("exit", (code) => {
-      if (code && code !== 0) reject(new Error(`runner exited with code ${code}`));
-      else resolvePromise();
-    });
-  });
-}
-async function waitForLocalRunner(opts, timeoutMs = 15e3) {
-  const started = Date.now();
-  let lastError;
-  while (Date.now() - started < timeoutMs) {
-    try {
-      await requestRunner("GET", "/health", opts);
-      return;
-    } catch (error) {
-      lastError = error;
-      await new Promise((resolvePromise) => setTimeout(resolvePromise, 500));
-    }
-  }
-  throw new Error(`runner did not become healthy: ${lastError instanceof Error ? lastError.message : String(lastError)}`);
-}
-async function requestRunner(method, path, opts, body) {
-  const headers = {
-    ...runnerRequestHeaders(opts)
-  };
-  if (body !== void 0) headers["Content-Type"] = "application/json";
-  const res = await fetch(`${runnerBaseUrl(opts.url)}${path}`, {
-    method,
-    headers,
-    body: body === void 0 ? void 0 : JSON.stringify(body)
+// src/commands/up.ts
+import { Command as Command6 } from "commander";
+var API_BASE2 = "https://api.proagentstore.online";
+var upCommand = new Command6("up").description("Start the browser runner for all your agent instances").option("--headless", "Run browser in headless mode").option("--instance <id>", "Connect to a specific instance only").action(async (opts) => {
+  const session = requireSession();
+  writeLine(`Signed in as ${session.user.login}`);
+  writeLine("Fetching your instances...");
+  const res = await fetch(`${API_BASE2}/v1/instances/my/instances`, {
+    headers: { Authorization: `Bearer ${session.token}` }
   });
-  const { text, data } = await readResponse(res);
   if (!res.ok) {
-    const message = responseErrorMessage(data, text, res.statusText);
-    throw new Error(`${res.status} ${message}`);
+    writeError(`Failed to fetch instances: ${res.status}`);
+    process.exit(1);
   }
-  return data;
-}
-async function requestPags(method, path, opts, body) {
-  const headers = {
-    ...pagsHeaders(opts.pagsToken)
-  };
-  if (!headers.Authorization) {
-    throw new Error("PAGS token required. Set PAGS_TOKEN or pass --pags-token.");
+  const data = await res.json();
+  let instances = (data.instances || []).filter((i) => i.status === "active");
+  if (opts.instance) {
+    instances = instances.filter((i) => i.id === opts.instance || i.slug === opts.instance);
   }
-  if (body !== void 0) headers["Content-Type"] = "application/json";
-  const res = await fetch(`${pagsApiBase(opts.apiBase)}${path}`, {
-    method,
-    headers,
-    body: body === void 0 ? void 0 : JSON.stringify(body)
-  });
-  const { text, data } = await readResponse(res);
-  if (!res.ok) {
-    const message = responseErrorMessage(data, text, res.statusText);
-    throw new Error(`${res.status} ${message}`);
+  if (instances.length === 0) {
+    writeError("No active instances found. Subscribe to an agent first at https://proagentstore.online");
+    process.exit(1);
   }
-  return data;
-}
-async function readResponse(res) {
-  const text = await res.text();
-  if (!text) return { text, data: {} };
+  writeLine(`Found ${instances.length} instance${instances.length === 1 ? "" : "s"}:`);
+  for (const inst of instances) {
+    writeLine(`  ${inst.name || inst.slug || inst.id.slice(0, 8)} (${inst.id.slice(0, 8)}...)`);
+  }
+  const target = instances[0];
+  writeLine(`
+Connecting runner to: ${target.name || target.id.slice(0, 8)}...`);
+  const { runnerCommand: runnerCommand2 } = await import("./runner-CM72EPKQ.js");
+  const connectCmd = runnerCommand2.commands.find((c) => c.name() === "connect");
+  if (!connectCmd) {
+    writeError("Runner connect command not found");
+    process.exit(1);
+  }
+  const args = [
+    "node",
+    "pags",
+    "runner",
+    "connect",
+    target.id,
+    "--pags-token",
+    session.token
+  ];
+  if (opts.headless) args.push("--headless");
+  process.argv = args;
   try {
-    return { text, data: JSON.parse(text) };
-  } catch {
-    return { text, data: {} };
+    await connectCmd.parseAsync(args.slice(2), { from: "user" });
+  } catch (err) {
+    writeError(err instanceof Error ? err.message : String(err));
+    process.exit(1);
   }
-}
-function responseErrorMessage(data, text, statusText) {
-  return typeof data.error === "string" ? data.error : text || statusText;
-}
-function collectCapability(value, previous = []) {
-  return [...previous, value];
-}
-function createRunnerCommand() {
-  const command = new Command5("runner").description(
-    "Manage the local FAGS browser runtime for ProAgentStore agents"
-  );
-  command.command("start").description("Start the local FAGS browser runtime in the foreground").option("--host <host>", "Host to bind", "127.0.0.1").option("--port <port>", "Port to bind", "49171").option("--data-dir <path>", "Runner data directory").option("--token <token>", "Require this bearer token").option("--instance-id <id>", "Bind runner requests to a PAGS instance id").option("--headless", "Run Playwright headless").action(async (opts) => {
-    await startRunnerForeground(opts);
-  });
-  command.command("connect <instanceId>").description("Start the local FAGS runtime, open a Cloudflare quick tunnel, and register it with PAGS").option("--host <host>", "Host to bind", "127.0.0.1").option("--port <port>", "Port to bind", "49171").option("--data-dir <path>", "Runner data directory").option("--token <token>", "Runner bearer token. Defaults to PAGS_RUNNER_TOKEN or a generated token").option("--headless", "Run Playwright headless").option("--api-base <url>", "PAGS API base URL").option("--pags-token <token>", "PAGS session token. Defaults to PAGS_TOKEN").option("--cloudflared <path>", "cloudflared executable", "cloudflared").option("--runner-version <version>", "Runner version").option("--skip-probe", "Skip PAGS FAGS-runtime probe after registration").action(async (instanceId, opts) => {
-    const runnerToken = clean(opts.token) || clean(process.env.PAGS_RUNNER_TOKEN) || `pags_runner_${randomUUID()}`;
-    const host = clean(opts.host) || "127.0.0.1";
-    const port = clean(opts.port) || "49171";
-    const localUrl = `http://${host}:${port}`;
-    const runnerOpts = {
-      ...opts,
-      host,
-      port,
-      token: runnerToken,
-      instanceId
-    };
-    const spec = runnerSpawnSpec(runnerOpts);
-    const runner = spawn2(spec.command, spec.args, {
-      cwd: spec.cwd,
-      stdio: ["ignore", "pipe", "pipe"],
-      shell: process.platform === "win32"
-    });
-    runner.stdout?.on("data", (data) => process.stdout.write(data));
-    runner.stderr?.on("data", (data) => process.stderr.write(data));
-    runner.on("exit", (code) => {
-      if (code && code !== 0) writeError(`runner exited with code ${code}`);
-    });
-    let tunnel = null;
-    const shutdown = () => {
-      if (tunnel && !tunnel.killed) tunnel.kill("SIGTERM");
-      if (!runner.killed) runner.kill("SIGTERM");
-    };
-    process.once("SIGINT", () => {
-      shutdown();
-      process.exit(0);
-    });
-    process.once("SIGTERM", () => {
-      shutdown();
-      process.exit(0);
-    });
-    try {
-      await waitForLocalRunner({ url: localUrl, token: runnerToken, instanceId });
-      writeLine(`Local FAGS runtime healthy at ${localUrl}`);
-      const tunnelUrl = await new Promise((resolveTunnel, reject) => {
-        let output = "";
-        const cloudflared = clean(opts.cloudflared) || "cloudflared";
-        tunnel = spawn2(cloudflared, buildCloudflaredArgs(localUrl), {
-          stdio: ["ignore", "pipe", "pipe"],
-          shell: process.platform === "win32"
-        });
-        const onData = (data) => {
-          const text = data.toString("utf-8");
-          output += text;
-          process.stderr.write(text);
-          const parsed = parseCloudflaredTunnelUrl(output);
-          if (parsed) resolveTunnel(parsed);
-        };
-        tunnel.stdout?.on("data", onData);
-        tunnel.stderr?.on("data", onData);
-        tunnel.on("error", reject);
-        tunnel.on("exit", (code) => {
-          if (code && code !== 0) reject(new Error(`cloudflared exited with code ${code}`));
-        });
-        setTimeout(() => reject(new Error("timed out waiting for cloudflared tunnel URL")), 45e3).unref();
-      });
-      writeLine(`Tunnel ready: ${tunnelUrl}`);
-      await waitForLocalRunner({ url: tunnelUrl, token: runnerToken, instanceId }, 3e4);
-      writeLine("Tunnel health check passed");
-      const capabilities = await requestRunner("GET", "/capabilities", {
-        url: tunnelUrl,
-        token: runnerToken,
-        instanceId
-      });
-      const result = await requestPags("POST", `/v1/instances/${apiPathSegment(instanceId)}/runtime`, opts, {
-        endpointUrl: tunnelUrl,
-        token: runnerToken,
-        placement: "local",
-        capabilities: Array.isArray(capabilities.capabilities) ? capabilities.capabilities.filter((item) => typeof item === "string") : [],
-        runnerVersion: clean(opts.runnerVersion) || ""
-      });
-      writeLine(JSON.stringify(result, null, 2));
-      if (!opts.skipProbe) {
-        const status = await requestPags(
-          "GET",
-          `/v1/instances/${apiPathSegment(instanceId)}/runtime/status`,
-          opts
-        );
-        writeLine(JSON.stringify(status, null, 2));
-      }
-      writeLine("Connected. Keep this process running while the agent uses your FAGS browser runtime.");
-      await new Promise((resolvePromise) => {
-        runner.on("exit", () => resolvePromise());
-        tunnel?.on("exit", () => resolvePromise());
-      });
-    } catch (error) {
-      shutdown();
-      throw error;
-    }
-  });
-  command.command("status").description("Check local FAGS runtime health and capabilities").option("--url <url>", "Runner URL").option("--token <token>", "Runner bearer token").option("--instance-id <id>", "PAGS instance id header").action(async (opts) => {
-    const health = await requestRunner("GET", "/health", opts);
-    const capabilities = await requestRunner("GET", "/capabilities", opts);
-    writeLine(JSON.stringify({ health, capabilities }, null, 2));
-  });
-  command.command("task").description("Create a local FAGS runtime task").requiredOption("--type <type>", "Task type, e.g. echo or browser.open").option("--url <url>", "Runner URL").option("--token <token>", "Runner bearer token").option("--instance-id <id>", "PAGS instance id header").option("--input <json>", "Task input JSON").option("--job-url <url>", "Shortcut input for browser.open").option("--approve", "Create task in needs_approval state").option("--approval-prompt <text>", "Approval prompt").action(
-    async (opts) => {
-      let input = {};
-      if (opts.input) {
-        try {
-          input = JSON.parse(opts.input);
-        } catch {
-          writeError("--input must be valid JSON");
-          process.exit(1);
-        }
-      }
-      if (opts.jobUrl) input.url = opts.jobUrl;
-      const task = await requestRunner("POST", "/tasks", opts, {
-        type: opts.type,
-        input,
-        requiresApproval: Boolean(opts.approve),
-        approvalPrompt: opts.approvalPrompt
-      });
-      writeLine(JSON.stringify(task, null, 2));
-    }
-  );
-  command.command("register <instanceId>").description("Register a local or managed FAGS runtime endpoint with a PAGS instance").requiredOption("--endpoint-url <url>", "FAGS runtime endpoint URL to store in PAGS").option("--api-base <url>", "PAGS API base URL").option("--pags-token <token>", "PAGS session token. Defaults to PAGS_TOKEN").option("--runner-token <token>", "FAGS runtime bearer token to store in PAGS").option("--url <url>", "Local FAGS runtime URL to probe for capabilities").option("--token <token>", "Local FAGS runtime bearer token for capability probe").option("--instance-id <id>", "PAGS instance id header for capability probe").option("--placement <placement>", "Runtime placement: local or managed", "local").option("--runner-version <version>", "Runner version").option("--capability <name>", "Runtime capability; repeatable", collectCapability, []).option("--probe", "Read capabilities from the FAGS runtime before registering").action(async (instanceId, opts) => {
-    let capabilities = opts.capability || [];
-    if (opts.probe) {
-      const data = await requestRunner("GET", "/capabilities", {
-        url: opts.url || opts.endpointUrl,
-        token: opts.token || opts.runnerToken,
-        instanceId: opts.instanceId || instanceId
-      });
-      capabilities = Array.isArray(data.capabilities) ? data.capabilities.filter((item) => typeof item === "string") : capabilities;
-    }
-    const body = buildRuntimeRegistrationBody(opts, capabilities);
-    const result = await requestPags("POST", `/v1/instances/${apiPathSegment(instanceId)}/runtime`, opts, body);
-    writeLine(JSON.stringify(result, null, 2));
-  });
-  command.command("runtime <instanceId>").description("Read the PAGS runtime registration for an instance").option("--api-base <url>", "PAGS API base URL").option("--pags-token <token>", "PAGS session token. Defaults to PAGS_TOKEN").option("--probe", "Ask PAGS to probe /health and /capabilities on the FAGS runtime").action(async (instanceId, opts) => {
-    const path = opts.probe ? `/v1/instances/${apiPathSegment(instanceId)}/runtime/status` : `/v1/instances/${apiPathSegment(instanceId)}/runtime`;
-    const result = await requestPags("GET", path, opts);
-    writeLine(JSON.stringify(result, null, 2));
-  });
-  command.command("unregister <instanceId>").description("Remove the PAGS runtime registration for an instance").option("--api-base <url>", "PAGS API base URL").option("--pags-token <token>", "PAGS session token. Defaults to PAGS_TOKEN").action(async (instanceId, opts) => {
-    const result = await requestPags("DELETE", `/v1/instances/${apiPathSegment(instanceId)}/runtime`, opts);
-    writeLine(JSON.stringify(result, null, 2));
-  });
-  command.command("run <instanceId>").description("Create a task through PAGS on an instance's registered FAGS runtime").requiredOption("--type <type>", "Task type, e.g. echo or browser.open").option("--api-base <url>", "PAGS API base URL").option("--pags-token <token>", "PAGS session token. Defaults to PAGS_TOKEN").option("--input <json>", "Task input JSON").option("--job-url <url>", "Shortcut input for browser.open").option("--approve", "Create task in needs_approval state").option("--approval-prompt <text>", "Approval prompt").action(
-    async (instanceId, opts) => {
-      let input = {};
-      if (opts.input) {
-        try {
-          input = JSON.parse(opts.input);
-        } catch {
-          writeError("--input must be valid JSON");
-          process.exit(1);
-        }
-      }
-      if (opts.jobUrl) input.url = opts.jobUrl;
-      const result = await requestPags("POST", `/v1/instances/${apiPathSegment(instanceId)}/tasks`, opts, {
-        type: opts.type,
-        input,
-        requiresApproval: Boolean(opts.approve),
-        approvalPrompt: opts.approvalPrompt
-      });
-      writeLine(JSON.stringify(result, null, 2));
-    }
-  );
-  command.command("approve-task <instanceId> <taskId>").description("Approve a registered FAGS runtime task through PAGS").option("--api-base <url>", "PAGS API base URL").option("--pags-token <token>", "PAGS session token. Defaults to PAGS_TOKEN").action(async (instanceId, taskId, opts) => {
-    const result = await requestPags(
-      "POST",
-      `/v1/instances/${apiPathSegment(instanceId)}/tasks/${apiPathSegment(taskId)}/approve`,
-      opts
-    );
-    writeLine(JSON.stringify(result, null, 2));
-  });
-  command.command("cancel-task <instanceId> <taskId>").description("Cancel a registered FAGS runtime task through PAGS").option("--api-base <url>", "PAGS API base URL").option("--pags-token <token>", "PAGS session token. Defaults to PAGS_TOKEN").action(async (instanceId, taskId, opts) => {
-    const result = await requestPags(
-      "POST",
-      `/v1/instances/${apiPathSegment(instanceId)}/tasks/${apiPathSegment(taskId)}/cancel`,
-      opts
-    );
-    writeLine(JSON.stringify(result, null, 2));
-  });
-  command.command("task-events <instanceId>").description("Read registered FAGS runtime task events through PAGS").option("--api-base <url>", "PAGS API base URL").option("--pags-token <token>", "PAGS session token. Defaults to PAGS_TOKEN").option("--limit <n>", "Number of events", "50").action(async (instanceId, opts) => {
-    const result = await requestPags(
-      "GET",
-      `/v1/instances/${apiPathSegment(instanceId)}/task-events?limit=${Number(opts.limit) || 50}`,
-      opts
-    );
-    writeLine(JSON.stringify(result, null, 2));
-  });
-  command.command("approve <taskId>").description("Approve a task waiting on human approval").option("--url <url>", "Runner URL").option("--token <token>", "Runner bearer token").option("--instance-id <id>", "PAGS instance id header").action(async (taskId, opts) => {
-    const task = await requestRunner("POST", `/tasks/${apiPathSegment(taskId)}/approve`, opts);
-    writeLine(JSON.stringify(task, null, 2));
-  });
-  command.command("cancel <taskId>").description("Cancel a local FAGS runtime task").option("--url <url>", "Runner URL").option("--token <token>", "Runner bearer token").option("--instance-id <id>", "PAGS instance id header").action(async (taskId, opts) => {
-    const task = await requestRunner("POST", `/tasks/${apiPathSegment(taskId)}/cancel`, opts);
-    writeLine(JSON.stringify(task, null, 2));
-  });
-  command.command("events").description("List recent FAGS runtime events").option("--url <url>", "Runner URL").option("--token <token>", "Runner bearer token").option("--instance-id <id>", "PAGS instance id header").option("--limit <n>", "Number of events", "50").action(async (opts) => {
-    const events = await requestRunner("GET", `/events?limit=${Number(opts.limit) || 50}`, opts);
-    writeLine(JSON.stringify(events, null, 2));
-  });
-  return command;
-}
+});
 
 // src/index.ts
 var require2 = createRequire(import.meta.url);
 var { version } = require2("../package.json");
-var program = new Command6();
+var program = new Command7();
 program.name("pags").description(
   "ProAgentStore CLI \u2014 create and publish server-powered AI agents"
 ).version(version);
+program.addCommand(loginCommand);
+program.addCommand(logoutCommand);
+program.addCommand(whoamiCommand);
+program.addCommand(upCommand);
 program.addCommand(initCommand);
 program.addCommand(checkCommand);
 program.addCommand(publishCommand);