@stratusagent/cli 0.11.2 → 0.11.4

package/dist/io.js

@@ -0,0 +1,45 @@
+import { stat } from 'node:fs/promises';
+export const writeLine = (stream, line = '') => {
+    stream.write(`${line}\n`);
+};
+export const stringifyValue = (value) => {
+    if (typeof value === 'string') {
+        return value;
+    }
+    return JSON.stringify(value, null, 2);
+};
+export const readPromptFromStdin = async (stdin) => {
+    stdin.setEncoding('utf8');
+    let data = '';
+    for await (const chunk of stdin) {
+        data += chunk;
+    }
+    return data.trim();
+};
+/**
+ * Stdin exactly as it arrived, for a value where whitespace may be part of
+ * it.
+ *
+ * `readPromptFromStdin` trims, which is right for a prompt and wrong for a
+ * secret: a key whose real value has a leading space would be stored as a
+ * *different* key, reported as stored, and then fail authentication with
+ * nothing to look at — this command never prints a value back.
+ */
+export const readSecretFromStdin = async (stdin) => {
+    stdin.setEncoding('utf8');
+    let data = '';
+    for await (const chunk of stdin) {
+        data += chunk;
+    }
+    return data;
+};
+export const pathExists = async (candidate) => {
+    try {
+        await stat(candidate);
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+//# sourceMappingURL=io.js.map

package/dist/io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.js","sourceRoot":"","sources":["../src/io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAGxC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAA4C,EAAE,IAAI,GAAG,EAAE,EAAQ,EAAE;IACzF,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAgB,EAAU,EAAE;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,KAA4B,EAAmB,EAAE;IACzF,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE1B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI,KAAK,CAAC;IAChB,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;AACrB,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,KAA4B,EAAmB,EAAE;IACzF,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAE1B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI,KAAK,CAAC;IAChB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,SAAiB,EAAoB,EAAE;IACtE,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC"}

package/dist/loaders.d.ts

@@ -0,0 +1,31 @@
+import type { CliEnvironment } from './environment.ts';
+/**
+ * Whether an optional package is installed. The resolver is injectable
+ * because what is installed is a property of the machine: a test asserting
+ * on the real one would be asserting on its own node_modules, which is why
+ * every optional package is a devDependency here in the first place.
+ */
+export declare const packageInstalled: (specifier: string, env?: CliEnvironment) => boolean;
+type SlackAdapterFactory = typeof import('@stratusagent/channel-slack').createSlackChannelAdapter;
+/**
+ * Loads the optional Slack channel package, or undefined when it is not
+ * installed. Only that package being absent is tolerated: an adapter that
+ * fails to load for any other reason (a broken install, a bad transitive
+ * dependency) surfaces rather than silently disabling Slack for a daemon
+ * whose stored tokens say it should be running.
+ */
+export declare const loadSlackAdapter: () => Promise<SlackAdapterFactory | undefined>;
+type ControlApiFactory = typeof import('@stratusagent/control-api').createControlApi;
+export type GatewayFactory = typeof import('@stratusagent/gateway').createGateway;
+/**
+ * Loads the optional control-API package, or undefined when it is not
+ * installed. Same two-step as the Slack adapter, and for the same reason:
+ * only the package being absent means "not installed". A package that IS
+ * installed but is missing one of its own dependencies throws
+ * ERR_MODULE_NOT_FOUND naming that dependency, so inspecting the message
+ * would read a broken install as an absent one — silently leaving a daemon
+ * without the API an operator installed it to have.
+ */
+export declare const loadControlApi: () => Promise<ControlApiFactory | undefined>;
+export {};
+//# sourceMappingURL=loaders.d.ts.map

package/dist/loaders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loaders.d.ts","sourceRoot":"","sources":["../src/loaders.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAmB,MAAM,kBAAkB,CAAC;AAoBxE;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,GAAI,WAAW,MAAM,EAAE,MAAK,cAAmB,KAAG,OACnB,CAAC;AAE7D,KAAK,mBAAmB,GAAG,cAAc,6BAA6B,EAAE,yBAAyB,CAAC;AAElG;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,QAAa,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAOhF,CAAC;AAEF,KAAK,iBAAiB,GAAG,cAAc,2BAA2B,EAAE,gBAAgB,CAAC;AAErF,MAAM,MAAM,cAAc,GAAG,cAAc,uBAAuB,EAAE,aAAa,CAAC;AAElF;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc,QAAa,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAK5E,CAAC"}

package/dist/loaders.js

@@ -0,0 +1,56 @@
+/**
+ * Resolution and loading are separate questions, and only the first one
+ * means "not installed". Inspecting an import's error message cannot tell
+ * them apart: a package that IS installed but is missing one of its own
+ * dependencies throws ERR_MODULE_NOT_FOUND naming that dependency and the
+ * importer — so a broken install would read as an absent one, silently
+ * disabling a channel whose stored tokens say it should be running, or
+ * leaving a daemon without the API an operator installed it to have.
+ */
+const defaultPackageResolver = (specifier) => {
+    try {
+        import.meta.resolve(specifier);
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+/**
+ * Whether an optional package is installed. The resolver is injectable
+ * because what is installed is a property of the machine: a test asserting
+ * on the real one would be asserting on its own node_modules, which is why
+ * every optional package is a devDependency here in the first place.
+ */
+export const packageInstalled = (specifier, env = {}) => (env.packageResolver ?? defaultPackageResolver)(specifier);
+/**
+ * Loads the optional Slack channel package, or undefined when it is not
+ * installed. Only that package being absent is tolerated: an adapter that
+ * fails to load for any other reason (a broken install, a bad transitive
+ * dependency) surfaces rather than silently disabling Slack for a daemon
+ * whose stored tokens say it should be running.
+ */
+export const loadSlackAdapter = async () => {
+    if (!packageInstalled('@stratusagent/channel-slack')) {
+        return undefined;
+    }
+    // Resolvable: any failure from here is a real problem with the
+    // installed package, and surfaces.
+    return (await import('@stratusagent/channel-slack')).createSlackChannelAdapter;
+};
+/**
+ * Loads the optional control-API package, or undefined when it is not
+ * installed. Same two-step as the Slack adapter, and for the same reason:
+ * only the package being absent means "not installed". A package that IS
+ * installed but is missing one of its own dependencies throws
+ * ERR_MODULE_NOT_FOUND naming that dependency, so inspecting the message
+ * would read a broken install as an absent one — silently leaving a daemon
+ * without the API an operator installed it to have.
+ */
+export const loadControlApi = async () => {
+    if (!packageInstalled('@stratusagent/control-api')) {
+        return undefined;
+    }
+    return (await import('@stratusagent/control-api')).createControlApi;
+};
+//# sourceMappingURL=loaders.js.map

package/dist/loaders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loaders.js","sourceRoot":"","sources":["../src/loaders.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAAoB,CAAC,SAAS,EAAE,EAAE;IAC5D,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAE,MAAsB,EAAE,EAAW,EAAE,CACvF,CAAC,GAAG,CAAC,eAAe,IAAI,sBAAsB,CAAC,CAAC,SAAS,CAAC,CAAC;AAI7D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,IAA8C,EAAE;IACnF,IAAI,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,EAAE,CAAC;QACrD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,+DAA+D;IAC/D,mCAAmC;IACnC,OAAO,CAAC,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC,CAAC,yBAAyB,CAAC;AACjF,CAAC,CAAC;AAMF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,IAA4C,EAAE;IAC/E,IAAI,CAAC,gBAAgB,CAAC,2BAA2B,CAAC,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,gBAAgB,CAAC;AACtE,CAAC,CAAC"}

package/dist/main.d.ts

@@ -0,0 +1,8 @@
+import type { CliStreams, CliEnvironment } from './environment.ts';
+export interface CliRunOptions {
+    argv: string[];
+    streams?: CliStreams;
+    env?: CliEnvironment;
+}
+export declare const runCli: ({ argv, streams, env }: CliRunOptions) => Promise<number>;
+//# sourceMappingURL=main.d.ts.map

package/dist/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAcnE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB;AAED,eAAO,MAAM,MAAM,GAAU,wBAAuC,aAAa,KAAG,OAAO,CAAC,MAAM,CA0NjG,CAAC"}

package/dist/main.js

@@ -0,0 +1,218 @@
+import { redactAnthropicRawTurns } from '@stratusagent/provider-anthropic';
+import { newerStateMessage, readStateStamp, runStateMigrations, STATE_SCHEMA_VERSION, } from '@stratusagent/state';
+import { runAgentNew } from "./commands/agent-new.js";
+import { runAgents } from "./commands/agents.js";
+import { runChat } from "./commands/chat.js";
+import { runCredential } from "./commands/credential.js";
+import { runDashboard } from "./commands/dashboard.js";
+import { runDoctor } from "./commands/doctor.js";
+import { runGrants } from "./commands/grants.js";
+import { runLogs } from "./commands/logs.js";
+import { runMemory } from "./commands/memory.js";
+import { runPlugins } from "./commands/plugins.js";
+import { runRestart } from "./commands/restart.js";
+import { runSchedules } from "./commands/schedules.js";
+import { runServe } from "./commands/serve.js";
+import { runService } from "./commands/service.js";
+import { runSessionRollover } from "./commands/session.js";
+import { runSetup } from "./commands/setup.js";
+import { runSkillAdd, runSkillValidate, runSkillReload, runSkills } from "./commands/skills.js";
+import { runTemplateAdd } from "./commands/template.js";
+import { runUpdate } from "./commands/update.js";
+import { HELP_TEXT } from "./help.js";
+import { writeLine, readPromptFromStdin } from "./io.js";
+import { CLI_VERSION } from "./npm.js";
+import { parseCommand, defaultApprovalMode } from "./parse.js";
+import { resolveRuntimeConfig, warnOnCredentialOverride, warnOnUntrustedConfig, runSingleLoop, printSessionSummary, formatRuntimeBanner, } from "./runtime.js";
+export const runCli = async ({ argv, streams = process, env = {} }) => {
+    try {
+        const resolvedEnv = argv.includes('--stdin') && env.stdin === undefined
+            ? {
+                ...env,
+                stdin: await readPromptFromStdin(env.stdinStream ?? process.stdin),
+            }
+            : env;
+        const command = parseCommand(argv, resolvedEnv);
+        if (command.command === 'help') {
+            writeLine(streams.stdout, HELP_TEXT);
+            return 0;
+        }
+        // Above the migration check below, like help: reporting which build
+        // this is must not depend on the state it would migrate.
+        if (command.command === 'version') {
+            writeLine(streams.stdout, `stratus ${CLI_VERSION}`);
+            return 0;
+        }
+        // Migrations run on first use of a newer build — every command, every
+        // install path — not only via `stratus update`: state that migrates
+        // only sometimes is worse than state that never migrates, because the
+        // two populations diverge silently. `update` is excluded because it
+        // owns the migration step at its own place in the upgrade sequence
+        // (after the service stop and the package upgrade), and `--check` has
+        // to be able to report what is pending rather than having just done it.
+        if (command.command !== 'update') {
+            const stamp = await readStateStamp(resolvedEnv);
+            const writesState = command.command === 'serve'
+                || command.command === 'setup'
+                || command.command === 'chat'
+                || command.command === 'run'
+                || command.command === 'skill-add'
+                || command.command === 'template-add'
+                || command.command === 'dashboard'
+                || (command.command === 'credential' && command.action !== 'list')
+                || (command.command === 'schedules' && command.action === 'cancel')
+                || (command.command === 'memory' && command.action === 'reassert')
+                || command.command === 'session'
+                || (command.command === 'service' && (command.action === 'install' || command.action === 'start'));
+            if (stamp.schemaVersion > STATE_SCHEMA_VERSION) {
+                // Anything that writes under ~/.stratus refuses, not only the
+                // daemon: a downgraded build's setup, chat, or run can discard
+                // fields and invariants the newer format relies on — the exact
+                // hazard the stamp exists to close. Read-only commands warn and
+                // continue, because reading logs or the roster is how someone
+                // diagnoses their way OUT of this state; so do `service stop`,
+                // `status`, and `uninstall`, for the same reason. (`agent new`
+                // only prints an identity — it writes nothing.)
+                if (writesState) {
+                    writeLine(streams.stderr, newerStateMessage(stamp.schemaVersion));
+                    writeLine(streams.stderr, `Refusing \`stratus ${command.command}\` — it writes state the newer format owns. Read-only commands (logs, agents, doctor, service status/stop) still work.`);
+                    return 1;
+                }
+                writeLine(streams.stderr, `Warning: ${newerStateMessage(stamp.schemaVersion)}`);
+            }
+            else {
+                try {
+                    for (const migration of await runStateMigrations(resolvedEnv)) {
+                        if (migration.detail !== undefined) {
+                            writeLine(streams.stderr, `state migration ${migration.id}: ${migration.detail}`);
+                        }
+                    }
+                }
+                catch (error) {
+                    const reason = error instanceof Error ? error.message : String(error);
+                    // A command that writes state must not run on a home whose stamp
+                    // could not be written: the labels it would persist are what the
+                    // stamp protects, and a stamp still reading the old schema lets a
+                    // downgraded build in afterwards to read an `external` fact as
+                    // ordinary memory — the exact hole the stamp closes. A read-only
+                    // command warns and continues, because reading is how someone
+                    // diagnoses their way out; silence here is how the migrated and
+                    // unmigrated populations diverge.
+                    if (writesState) {
+                        writeLine(streams.stderr, `State migration failed (${reason}).`);
+                        writeLine(streams.stderr, `Refusing \`stratus ${command.command}\` — it writes state the migration stamps. Fix ~/.stratus (is state.json writable?) or run \`stratus update\`; read-only commands (logs, agents, doctor, memory list, service status/stop) still work.`);
+                        return 1;
+                    }
+                    writeLine(streams.stderr, `Warning: state migration failed (${reason}). Continuing on unmigrated state — \`stratus update\` retries it.`);
+                }
+            }
+        }
+        // Every handler is awaited, never bare-returned: a bare `return
+        // promise` inside try/catch settles the async function before the
+        // catch can see it, so a command that fails at runtime — a gateway
+        // that cannot open its store, a missing credential — would escape as
+        // a raw rejection instead of the error line and exit code below.
+        if (command.command === 'agent-new') {
+            return await runAgentNew(command, streams, resolvedEnv);
+        }
+        if (command.command === 'agents') {
+            return await runAgents(command, streams, resolvedEnv);
+        }
+        if (command.command === 'template-add') {
+            return await runTemplateAdd(command, streams, resolvedEnv);
+        }
+        if (command.command === 'skill-add') {
+            return await runSkillAdd(command, streams, resolvedEnv);
+        }
+        if (command.command === 'skill-validate') {
+            return await runSkillValidate(command, streams, resolvedEnv);
+        }
+        if (command.command === 'skills') {
+            return await runSkills(streams, resolvedEnv);
+        }
+        if (command.command === 'plugins') {
+            return await runPlugins(command, streams, resolvedEnv);
+        }
+        if (command.command === 'credential') {
+            return await runCredential(command, streams, resolvedEnv);
+        }
+        if (command.command === 'skill-reload') {
+            return await runSkillReload(command, streams, resolvedEnv);
+        }
+        if (command.command === 'restart') {
+            return await runRestart(command, streams, resolvedEnv);
+        }
+        if (command.command === 'schedules') {
+            return await runSchedules(command, streams, resolvedEnv);
+        }
+        if (command.command === 'grants') {
+            return await runGrants(command, streams, resolvedEnv);
+        }
+        if (command.command === 'memory') {
+            return await runMemory(command, streams, resolvedEnv);
+        }
+        if (command.command === 'session') {
+            return await runSessionRollover(command, streams, resolvedEnv);
+        }
+        if (command.command === 'doctor') {
+            return await runDoctor(command, streams, resolvedEnv);
+        }
+        if (command.command === 'logs') {
+            return await runLogs(command, streams, resolvedEnv);
+        }
+        if (command.command === 'service') {
+            return await runService(command, streams, resolvedEnv);
+        }
+        if (command.command === 'update') {
+            return await runUpdate(command, streams, resolvedEnv);
+        }
+        if (command.command === 'chat') {
+            return await runChat(command, streams, resolvedEnv);
+        }
+        if (command.command === 'setup') {
+            return await runSetup(command, streams, resolvedEnv);
+        }
+        if (command.command === 'dashboard') {
+            return await runDashboard(command, streams, resolvedEnv);
+        }
+        if (command.command === 'serve') {
+            return await runServe(command, streams, resolvedEnv);
+        }
+        const runtime = await resolveRuntimeConfig(command, resolvedEnv);
+        warnOnUntrustedConfig(runtime, streams);
+        await warnOnCredentialOverride(runtime, streams, resolvedEnv);
+        if (command.format === 'text') {
+            writeLine(streams.stdout, formatRuntimeBanner(runtime));
+        }
+        const session = await runSingleLoop(command.prompt, streams, {
+            events: command.events && command.format === 'text',
+            runtime,
+            // `--stdin` has already read the terminal, so nothing could take a
+            // y/N there — what the parser refuses for an explicit `ask`.
+            approvals: command.approvals ?? defaultApprovalMode(resolvedEnv, argv.includes('--stdin')),
+            approvalsDefaulted: command.approvals === undefined,
+            ...(command.maxTurns !== undefined ? { maxTurns: command.maxTurns } : {}),
+            ...(command.configPath ? { configPath: command.configPath } : {}),
+            env: resolvedEnv,
+        });
+        if (command.format === 'json') {
+            writeLine(streams.stdout, JSON.stringify({
+                provider: runtime.provider,
+                // Replay state (Claude's raw thinking turns) stays in the stored
+                // session but never in user-facing output.
+                session: redactAnthropicRawTurns(session),
+            }, null, 2));
+            return 0;
+        }
+        printSessionSummary(session, streams);
+        return 0;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        writeLine(streams.stderr, `Error: ${message}`);
+        writeLine(streams.stderr, '');
+        writeLine(streams.stderr, HELP_TEXT);
+        return 1;
+    }
+};
+//# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAChG,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EACb,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAQtB,MAAM,CAAC,MAAM,MAAM,GAAG,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,EAAE,GAAG,GAAG,EAAE,EAAiB,EAAmB,EAAE;IACpG,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YACrE,CAAC,CAAC;gBACE,GAAG,GAAG;gBACN,KAAK,EAAE,MAAM,mBAAmB,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC;aACnE;YACH,CAAC,CAAC,GAAG,CAAC;QAER,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAEhD,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC/B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,oEAAoE;QACpE,yDAAyD;QACzD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,sEAAsE;QACtE,oEAAoE;QACpE,sEAAsE;QACtE,oEAAoE;QACpE,mEAAmE;QACnE,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,KAAK,OAAO;mBAC1C,OAAO,CAAC,OAAO,KAAK,OAAO;mBAC3B,OAAO,CAAC,OAAO,KAAK,MAAM;mBAC1B,OAAO,CAAC,OAAO,KAAK,KAAK;mBACzB,OAAO,CAAC,OAAO,KAAK,WAAW;mBAC/B,OAAO,CAAC,OAAO,KAAK,cAAc;mBAClC,OAAO,CAAC,OAAO,KAAK,WAAW;mBAC/B,CAAC,OAAO,CAAC,OAAO,KAAK,YAAY,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;mBAC/D,CAAC,OAAO,CAAC,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC;mBAChE,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC;mBAC/D,OAAO,CAAC,OAAO,KAAK,SAAS;mBAC7B,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC;YACrG,IAAI,KAAK,CAAC,aAAa,GAAG,oBAAoB,EAAE,CAAC;gBAC/C,8DAA8D;gBAC9D,+DAA+D;gBAC/D,+DAA+D;gBAC/D,gEAAgE;gBAChE,8DAA8D;gBAC9D,+DAA+D;gBAC/D,+DAA+D;gBAC/D,gDAAgD;gBAChD,IAAI,WAAW,EAAE,CAAC;oBAChB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;oBAClE,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,sBAAsB,OAAO,CAAC,OAAO,wHAAwH,CAAC,CAAC;oBACzL,OAAO,CAAC,CAAC;gBACX,CAAC;gBACD,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,KAAK,MAAM,SAAS,IAAI,MAAM,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;wBAC9D,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;4BACnC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,SAAS,CAAC,EAAE,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;wBACpF,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACtE,iEAAiE;oBACjE,iEAAiE;oBACjE,kEAAkE;oBAClE,+DAA+D;oBAC/D,iEAAiE;oBACjE,8DAA8D;oBAC9D,gEAAgE;oBAChE,kCAAkC;oBAClC,IAAI,WAAW,EAAE,CAAC;wBAChB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,2BAA2B,MAAM,IAAI,CAAC,CAAC;wBACjE,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,sBAAsB,OAAO,CAAC,OAAO,wMAAwM,CAAC,CAAC;wBACzQ,OAAO,CAAC,CAAC;oBACX,CAAC;oBACD,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,oCAAoC,MAAM,oEAAoE,CAAC,CAAC;gBAC5I,CAAC;YACH,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,kEAAkE;QAClE,mEAAmE;QACnE,qEAAqE;QACrE,iEAAiE;QACjE,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACpC,OAAO,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;YACvC,OAAO,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACpC,OAAO,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACzC,OAAO,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;YACrC,OAAO,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;YACvC,OAAO,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACpC,OAAO,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC/B,OAAO,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,MAAM,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC/B,OAAO,MAAM,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAChC,OAAO,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACpC,OAAO,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAChC,OAAO,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACjE,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAE9D,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;YAC3D,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YACnD,OAAO;YACP,mEAAmE;YACnE,6DAA6D;YAC7D,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,mBAAmB,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC1F,kBAAkB,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS;YACnD,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,EAAE,WAAW;SACjB,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;gBACvC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,iEAAiE;gBACjE,2CAA2C;gBAC3C,OAAO,EAAE,uBAAuB,CAAC,OAAO,CAAC;aAC1C,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,OAAO,CAAC,CAAC;QACX,CAAC;QAED,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,OAAO,EAAE,CAAC,CAAC;QAC/C,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9B,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC,CAAC"}

package/dist/npm.d.ts

@@ -0,0 +1,66 @@
+import type { InstalledVersionReader, PackageInstaller, PackageVersionFetcher } from './environment.ts';
+/** How long `stratus update` waits for npm to answer a version lookup. */
+export declare const VERSION_LOOKUP_TIMEOUT_MS = 15000;
+export declare const defaultPackageVersionFetcher: PackageVersionFetcher;
+/**
+ * Dotted-numeric comparison with SemVer's prerelease precedence, enough for
+ * this package's own versions: positive when `a` is newer than `b`.
+ * Anything unparseable in a segment counts as zero rather than throwing — a
+ * weird registry answer must not crash the update that would fix things.
+ *
+ * The prerelease half is not decoration. Split on dots alone, `0.11.2-beta.1`
+ * parses as a *fourth* numeric segment and so reads as newer than the stable
+ * `0.11.2` that supersedes it — which left a prerelease companion behind and
+ * stopped a prerelease CLI from ever seeing the stable release as an upgrade.
+ * SemVer's rule is the opposite and is the one applied here: a version
+ * carrying a prerelease is lower than the same version without one, and two
+ * prereleases compare identifier by identifier, numeric ones numerically and
+ * below alphanumeric ones.
+ */
+export declare const compareVersions: (a: string, b: string) => number;
+/**
+ * Whether spawning npm needs a shell on this platform.
+ *
+ * On Windows npm is `npm.cmd`, a batch file: a bare `npm` does not exist as
+ * an executable there (PATHEXT is a shell's job, not spawn's), and naming
+ * the `.cmd` directly has thrown EINVAL since the fix for CVE-2024-27980 —
+ * both land in the caller's error handler, so a Windows setup would report
+ * that it could not install and leave Slack and the dashboard missing.
+ *
+ * `shell: true` concatenates the arguments without escaping — Node 24
+ * deprecates the pattern as DEP0190 for exactly that reason — so what may
+ * reach it is fenced by `isInstallablePackageName` below rather than by an
+ * argument about where the names come from. That argument used to be
+ * "every name here is a constant in the CLI's own source", and it stopped
+ * being true
+ * the moment the Plugins menu started listing package names read from a
+ * config.
+ */
+export declare const npmNeedsShell: (platform: NodeJS.Platform) => boolean;
+export declare const isPackageName: (name: string) => boolean;
+/**
+ * A package name, optionally with a plain version — what npm may be handed.
+ *
+ * A wider question than `isPackageName` and a different one: the updater
+ * installs `@stratusagent/cli@latest`, which is a valid thing to install and
+ * an invalid thing to import. Using one predicate for both let a versioned
+ * `plugins` key through the menu's install offer.
+ *
+ * The version half is deliberately not npm's full range syntax: `^1.0.0` is
+ * a valid range and `^` is cmd.exe's escape character. Only the plain forms
+ * this CLI actually passes are accepted, and a range that needs more is a
+ * thing to install by hand.
+ */
+export declare const isInstallableSpecifier: (specifier: string) => boolean;
+export declare const defaultPackageInstaller: PackageInstaller;
+/**
+ * What `stratus update` reads to learn which version of a companion this
+ * machine actually has. Through `@stratusagent/plugins`, which already owns
+ * the bounded walk from a resolved specifier to its package.json — a second
+ * copy here would drift from it, and this one would be the copy that
+ * decides whether somebody's Slack adapter gets upgraded.
+ */
+export declare const defaultInstalledVersionReader: InstalledVersionReader;
+export declare const CLI_VERSION = "0.11.4";
+export declare const CLI_PACKAGE_NAME = "@stratusagent/cli";
+//# sourceMappingURL=npm.d.ts.map

package/dist/npm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm.d.ts","sourceRoot":"","sources":["../src/npm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EAEtB,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,kBAAkB,CAAC;AAE1B,0EAA0E;AAC1E,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAEhD,eAAO,MAAM,4BAA4B,EAAE,qBA4B1C,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,eAAe,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,MAsDtD,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa,GAAI,UAAU,MAAM,CAAC,QAAQ,KAAG,OAA+B,CAAC;AAE1F,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,KAAG,OAC0C,CAAC;AAExF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,sBAAsB,GAAI,WAAW,MAAM,KAAG,OAW1D,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,gBAwCrC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,EAAE,sBAG3C,CAAC;AAEF,eAAO,MAAM,WAAW,WAAW,CAAC;AAEpC,eAAO,MAAM,gBAAgB,sBAAsB,CAAC"}