@songsid/agend 2.1.4-beta.26 → 2.1.4-beta.28

package/dist/fleet-context.d.ts

@@ -116,6 +116,15 @@ export interface FleetContext {
     loginSubmitInput?(text: string): Promise<string>;
     /** Abort the active login session. */
     cancelLoginSession?(): Promise<string>;
+    /** `/install-cli <backend>` — install a CLI in a dedicated window; returns a status line. */
+    startInstallSession?(backend: string, chat: {
+        adapter: import("./channel/types.js").ChannelAdapter;
+        adapterId: string;
+        chatId: string;
+        threadId?: string;
+    }): Promise<string>;
+    /** Abort the active install session. */
+    cancelInstallSession?(): Promise<string>;
     /** Human-readable effective model for an instance (resolves inherited defaults). */
     modelDisplayForInstance?(name: string): string;
     /**

package/dist/fleet-manager.d.ts

@@ -857,6 +857,24 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private handleLoginConfirm;
     /** Kiro provider button → drive the CLI's arrow-key selector. */
     private handleLoginMenuSelect;
+    private activeInstall;
+    /** Start a CLI install session. Caller enforces admin. */
+    startInstallSession(backendArg: string, chat: {
+        adapter: ChannelAdapter;
+        adapterId: string;
+        chatId: string;
+        threadId?: string;
+    }): Promise<string>;
+    /** `/install-cli cancel` — abort the active install and remove its window. */
+    cancelInstallSession(): Promise<string>;
+    /** `command -v` on a login shell, so PATH additions from rc files count. */
+    private verifyBinaryOnLoginShell;
+    /** "Sign in now?" button after a successful install. */
+    private handleInstallLoginConfirm;
+    /** Discord native `/login` slash — shared by every adapter dispatch block. */
+    private handleLoginSlash;
+    /** Discord native `/install-cli` slash — shared by every dispatch block. */
+    private handleInstallCliSlash;
     queueMirrorMessage(text: string): void;
     /** Push an SSE event to all connected Web UI clients. */
     emitSseEvent(event: string, data: unknown): void;

package/dist/fleet-manager.js

@@ -1,5 +1,6 @@
 import { existsSync, readFileSync, mkdirSync, writeFileSync, unlinkSync, rmSync, readdirSync, renameSync, copyFileSync, chmodSync, statSync } from "node:fs";
 import { randomBytes } from "node:crypto";
+import { spawnSync } from "node:child_process";
 import { createServer } from "node:http";
 import { join, dirname, basename } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -214,6 +215,7 @@ const TIP_UNLOCK_CALLBACK_PREFIX = "tip-unlock:";
 const LOGIN_CALLBACK_PREFIX = "login:";
 const LOGIN_MENU_CALLBACK_PREFIX = "login-menu:";
 const LOGIN_CONFIRM_CALLBACK_PREFIX = "login-confirm:";
+const INSTALL_LOGIN_CALLBACK_PREFIX = "install-login:";
 const CLEAR_CONFIRM_TIMEOUT_MS = 15_000;
 /** Default lifetime for long-lived nonce prompts (clear overrides this to 15s). */
 const NONCE_BUTTON_TIMEOUT_MS = 15 * 60_000;
@@ -1273,12 +1275,6 @@ export class FleetManager {
         }
         const backend = config.backend ?? this.fleetConfig?.defaults?.backend ?? "claude-code";
         if (config.general_topic) {
-            // antigravity (agy) does not read MCP instructions — fleet context and
-            // routing instructions are not injected, so it cannot act as a dispatcher.
-            if (backend === "antigravity") {
-                this.logger.warn({ name }, "antigravity backend does not support MCP instructions — general dispatcher will not work correctly");
-                this.notifyInstanceTopic(name, t("general.antigravity_unsupported"));
-            }
             this.ensureGeneralInstructions(config.working_directory, backend, name);
         }
         else if (kind === "fleet-topic") {
@@ -1674,6 +1670,10 @@ export class FleetManager {
         const { getTmuxSocketName: getSocket } = await import("./paths.js");
         TmuxManager.setSocketName(getSocket());
         await TmuxManager.ensureSession(getTmuxSession());
+        // Pre-flight (advisory, fire-and-forget): warm the per-backend auth cache
+        // before instances spawn, so a CLI that comes up on its sign-in screen gets
+        // an instant 🔑 verdict instead of decaying into crash/MCP-died noise.
+        this.lifecycle.primeAuthVerification(Object.values(fleet.instances).map(config => config.backend ?? fleet.defaults?.backend ?? "claude-code"));
         // Start tmux control mode client for idle detection
         if (!this.controlClient) {
             this.controlClient = new TmuxControlClient(getTmuxSession(), 2000, this.logger);
@@ -2375,6 +2375,8 @@ export class FleetManager {
                 return;
             if (await this.handleLoginConfirm(data, adapterId, this.adapter ?? undefined))
                 return;
+            if (await this.handleInstallLoginConfirm(data, adapterId, this.adapter ?? undefined))
+                return;
             if (await this.handleClearConfirmation(data, adapterId, this.adapter ?? undefined))
                 return;
             if (await this.handleExitRestartPrompt(data, adapterId, this.adapter ?? undefined))
@@ -2504,6 +2506,12 @@ export class FleetManager {
                 });
                 await data.respond(result);
             }
+            else if (data.command === "login") {
+                await this.handleLoginSlash(data, adapterId, this.adapter);
+            }
+            else if (data.command === "install-cli") {
+                await this.handleInstallCliSlash(data, adapterId, this.adapter);
+            }
             else if (data.command === "clear") {
                 await this.handleClearSlash(data, adapterId);
             }
@@ -2668,6 +2676,12 @@ export class FleetManager {
                 });
                 await data.respond(result);
             }
+            else if (data.command === "login") {
+                await this.handleLoginSlash(data, adapterId, this.adapter);
+            }
+            else if (data.command === "install-cli") {
+                await this.handleInstallCliSlash(data, adapterId, this.adapter);
+            }
         }, this.logger, "adapter.slash_command"));
         await this.topicCommands.registerBotCommands().catch(e => this.logger.warn({ err: e }, "registerBotCommands failed (non-fatal)"));
         // Background-probe each backend's CLI env (version/models) → cli-env cache.
@@ -2754,6 +2768,8 @@ export class FleetManager {
                 return;
             if (await this.handleLoginConfirm(data, adapterId, adapter))
                 return;
+            if (await this.handleInstallLoginConfirm(data, adapterId, adapter))
+                return;
             if (await this.handleClearConfirmation(data, adapterId, adapter))
                 return;
             if (await this.handleExitRestartPrompt(data, adapterId, adapter))
@@ -3000,6 +3016,12 @@ export class FleetManager {
                 });
                 await data.respond(result);
             }
+            else if (data.command === "login") {
+                await this.handleLoginSlash(data, adapterId, adapter);
+            }
+            else if (data.command === "install-cli") {
+                await this.handleInstallCliSlash(data, adapterId, adapter);
+            }
         }, this.logger, `adapter[${adapterId}].slash_command`));
         await adapter.start();
         if (channelConfig.group_id) {
@@ -6238,6 +6260,9 @@ export class FleetManager {
             return t("login.unsupported", backendArg);
         if (this.activeLogin)
             return t("login.busy", this.activeLogin.backend);
+        // Install sessions share the window namespace — never run both at once.
+        if (this.activeInstall)
+            return t("install.busy");
         // Token-free pre-check (5s cap): re-login while auth still works is
         // usually a mistake, so it needs a confirmed click. An invalid OR
         // uncertain result (timeout, missing binary) proceeds straight to login —
@@ -6269,6 +6294,9 @@ export class FleetManager {
     async launchLoginSession(flow, backend, chat) {
         if (this.activeLogin)
             return t("login.busy", this.activeLogin.backend);
+        // Install sessions share the window namespace — never run both at once.
+        if (this.activeInstall)
+            return t("install.busy");
         const sessionName = getTmuxSession();
         await TmuxManager.ensureSession(sessionName);
         const tmux = new TmuxManager(sessionName, "");
@@ -6302,7 +6330,9 @@ export class FleetManager {
                     text = t("login.success", backend, woken.length ? woken.join(", ") : none, restarted.length ? restarted.join(", ") : none);
                 }
                 else if (detail === "cancelled") {
-                    text = t("login.cancelled", backend);
+                    // The cancel command's own reply already announced this — a second
+                    // message here was a duplicate.
+                    return;
                 }
                 else {
                     text = t("login.failed", backend, detail);
@@ -6447,6 +6477,173 @@ export class FleetManager {
         await this.retireNonceButtons(entry, entry.messageId ?? data.messageId, ok ? t("login.provider_selected", label) : t("login.no_session"));
         return true;
     }
+    // ── Remote CLI install (`/install-cli`) ──────────────────────────────────
+    //
+    // Same dedicated-window model as /login (and the same LoginSession state
+    // machine — an install is a login flow with no auth hints): run the
+    // installer, judge by exit code, verify the binary on a fresh login shell,
+    // then offer to chain straight into /login.
+    activeInstall = null;
+    /** Start a CLI install session. Caller enforces admin. */
+    async startInstallSession(backendArg, chat) {
+        const backend = LOGIN_BACKEND_ALIASES[backendArg.toLowerCase()] ?? backendArg.toLowerCase();
+        const info = BACKEND_INSTALLATION_INFO[backend];
+        if (!info)
+            return t("install.unsupported", backendArg);
+        if (checkBinaryInstalled(info.binary))
+            return t("install.already", backend, info.binary);
+        if (this.activeInstall)
+            return t("install.busy");
+        if (this.activeLogin)
+            return t("login.busy", this.activeLogin.backend);
+        const sessionName = getTmuxSession();
+        await TmuxManager.ensureSession(sessionName);
+        const tmux = new TmuxManager(sessionName, "");
+        // A synthetic login flow: success is decided by the installer's exit code
+        // (LoginSession treats a clean exit as success), never by pane text — and
+        // installer output that happens to contain a URL must not be forwarded as
+        // an auth hint, hence the no-op events below.
+        const flow = {
+            backend,
+            command: info.install,
+            successPattern: /$^/,
+            timeoutMs: 10 * 60 * 1000,
+        };
+        const session = new LoginSession(flow, tmux, {
+            onMenu: () => { },
+            onAuthHint: () => { },
+            onNeedInput: () => { },
+            onDone: async ({ ok, detail }) => {
+                this.activeInstall = null;
+                if (!ok) {
+                    // A cancel is user-initiated — the cancel command's own reply already
+                    // said so; a second message here would be a duplicate.
+                    if (detail !== "cancelled") {
+                        await chat.adapter.sendText(chat.chatId, t("install.failed", backend, detail), { threadId: chat.threadId }).catch(() => { });
+                    }
+                    return;
+                }
+                // The installer may only have added the binary to a profile PATH; a
+                // fresh login shell sees that, the fleet process's PATH may not.
+                if (!this.verifyBinaryOnLoginShell(info.binary)) {
+                    await chat.adapter.sendText(chat.chatId, t("install.verify_failed", backend, info.binary), { threadId: chat.threadId }).catch(() => { });
+                    return;
+                }
+                if (!LOGIN_FLOWS[backend]) {
+                    await chat.adapter.sendText(chat.chatId, t("install.success_no_login", backend), { threadId: chat.threadId }).catch(() => { });
+                    return;
+                }
+                await this.postNonceButtonPrompt({
+                    prefix: INSTALL_LOGIN_CALLBACK_PREFIX,
+                    alertType: "login",
+                    instanceName: backend,
+                    adapter: chat.adapter,
+                    adapterId: chat.adapterId,
+                    chatId: chat.chatId,
+                    threadId: chat.threadId,
+                    message: t("install.login_prompt", backend),
+                    choices: [
+                        { action: "go", label: t("install.login_now") },
+                        { action: "later", label: t("install.later") },
+                    ],
+                    expiredText: t("install.later_ack", backend),
+                });
+            },
+        }, this.logger);
+        this.activeInstall = { session, backend, chat };
+        try {
+            await session.start();
+        }
+        catch (err) {
+            this.activeInstall = null;
+            return t("install.failed", backend, err.message);
+        }
+        return t("install.started", backend);
+    }
+    /** `/install-cli cancel` — abort the active install and remove its window. */
+    async cancelInstallSession() {
+        if (!this.activeInstall)
+            return t("install.no_session");
+        const backend = this.activeInstall.backend;
+        await this.activeInstall.session.cancel();
+        return t("install.cancelled", backend);
+    }
+    /** `command -v` on a login shell, so PATH additions from rc files count. */
+    verifyBinaryOnLoginShell(binary) {
+        try {
+            const result = spawnSync("bash", ["-lc", `command -v ${binary}`], { timeout: 10_000, stdio: "pipe" });
+            return result.status === 0;
+        }
+        catch {
+            return false;
+        }
+    }
+    /** "Sign in now?" button after a successful install. */
+    async handleInstallLoginConfirm(data, callbackAdapterId, receivingAdapter) {
+        const claimed = this.consumeNonceCallback(INSTALL_LOGIN_CALLBACK_PREFIX, /^install-login:([0-9a-f]+):(go|later)$/, data, callbackAdapterId, receivingAdapter);
+        if (claimed === null)
+            return false;
+        if (claimed === "consumed")
+            return true;
+        const { entry, action } = claimed;
+        const backend = entry.instanceName;
+        if (action === "later") {
+            await this.retireNonceButtons(entry, entry.messageId ?? data.messageId, t("install.later_ack", backend));
+            return true;
+        }
+        await this.retireNonceButtons(entry, entry.messageId ?? data.messageId, t("login.starting_backend", backend));
+        const text = await this.startLoginSession(backend, {
+            adapter: entry.adapter,
+            adapterId: entry.adapterId,
+            chatId: entry.chatId,
+            threadId: entry.threadId,
+        });
+        if (text)
+            await entry.adapter.sendText(entry.chatId, text, { threadId: entry.threadId }).catch(() => { });
+        return true;
+    }
+    /** Discord native `/login` slash — shared by every adapter dispatch block. */
+    async handleLoginSlash(data, adapterId, adapter) {
+        if (!data.userId || !this.isFleetAdmin(data.userId, adapterId)) {
+            await data.respond(t("permission.denied"));
+            return;
+        }
+        const chat = { adapter, adapterId, chatId: data.channelId };
+        if (data.options?.cancel === true) {
+            await data.respond(await this.cancelLoginSession());
+            return;
+        }
+        const code = String(data.options?.code ?? "").trim();
+        if (code) {
+            await data.respond(await this.loginSubmitInput(code));
+            return;
+        }
+        const backend = String(data.options?.backend ?? "").trim();
+        if (backend) {
+            const text = await this.startLoginSession(backend, chat);
+            await data.respond(text ?? t("login.confirm_posted"));
+            return;
+        }
+        await this.promptLoginBackends(chat);
+        await data.respond(t("login.chooser_posted"));
+    }
+    /** Discord native `/install-cli` slash — shared by every dispatch block. */
+    async handleInstallCliSlash(data, adapterId, adapter) {
+        if (!data.userId || !this.isFleetAdmin(data.userId, adapterId)) {
+            await data.respond(t("permission.denied"));
+            return;
+        }
+        if (data.options?.cancel === true) {
+            await data.respond(await this.cancelInstallSession());
+            return;
+        }
+        const backend = String(data.options?.backend ?? "").trim();
+        if (!backend) {
+            await data.respond(t("install.usage"));
+            return;
+        }
+        await data.respond(await this.startInstallSession(backend, { adapter, adapterId, chatId: data.channelId }));
+    }
     queueMirrorMessage(text) {
         const mirrorTopicId = this.fleetConfig?.channel?.mirror_topic_id;
         if (mirrorTopicId == null || !this.adapter)
@@ -6618,9 +6815,8 @@ Plus the operational skills (fleet-health, instance-lifecycle, scheduling, sessi
     }
     /** Resolve the workspace path a backend actually uses before publishing knowledge. */
     resolveKnowledgeWorkDir(workDir, backend, instanceName) {
-        // Some backends relocate their real cwd (agy moves hidden paths to
-        // ~/agend-workspaces/<name>). Instructions and skills must land where the
-        // CLI actually runs, not where fleet.yaml points.
+        // Backend resolution may create/normalize the real cwd. Instructions and
+        // skills must land where the CLI actually runs, not an assumed path.
         try {
             const resolved = createBackend(backend, join(getAgendHome(), "cli-env"))
                 .resolveWorkingDirectory?.(workDir, instanceName);