@vibecontrols/agent 2026.531.9 → 2026.531.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,2 +1,2 @@
1
1
  // @bun
2
- import{createApp}from"./index-her974n1.js";import"./index-926vt87h.js";import"./index-g9h64dn9.js";import"./index-skmkfyzb.js";import"./index-95nmejfd.js";import"./index-34syaqa8.js";import"./index-y5q0m3cx.js";import"./index-n3y918j2.js";import"./index-h6a1kkfk.js";import"./index-srbb2214.js";import"./index-sfjbh6fa.js";import"./index-3jez1q8j.js";import"./index-brtw3j8x.js";import"./index-b4wy3jrt.js";import"./index-d3mz9vws.js";import"./index-rnk0kny8.js";import"./index-2pqv0bya.js";import"./index-7pdmqbj8.js";import"./index-bysm7taq.js";import"./index-zs58d1hc.js";import"./index-e9rt4m94.js";export{createApp};
2
+ import{createApp}from"./index-dsfy42e8.js";import"./index-926vt87h.js";import"./index-8xr7ewxg.js";import"./index-skmkfyzb.js";import"./index-95nmejfd.js";import"./index-34syaqa8.js";import"./index-y5q0m3cx.js";import"./index-1atc02se.js";import"./index-7qj1swrk.js";import"./index-srbb2214.js";import"./index-sfjbh6fa.js";import"./index-3jez1q8j.js";import"./index-brtw3j8x.js";import"./index-b4wy3jrt.js";import"./index-d3mz9vws.js";import"./index-rnk0kny8.js";import"./index-2pqv0bya.js";import"./index-7pdmqbj8.js";import"./index-bysm7taq.js";import"./index-zs58d1hc.js";import"./index-e9rt4m94.js";export{createApp};
package/dist/cli.js CHANGED
@@ -1,6 +1,6 @@
1
1
  #!/usr/bin/env bun
2
2
  // @bun
3
- import{pruneStaleBunBinShims}from"./index-6xb3dqrh.js";import{listInstalledPrereqs}from"./index-23rdsqea.js";import{runAliasInherit}from"./index-9e1fgxea.js";import{checkDependencies,installDependencies}from"./index-fg47j98r.js";import{clearTunnelState,getBootstrapTunnelUrl,isProcessAlive,listPersistedTunnels,readTunnelState}from"./index-95nmejfd.js";import{ServiceManager}from"./index-34syaqa8.js";import{REDACTED_VALUE,redactUnknownSecrets}from"./index-y5q0m3cx.js";import{CliContributorRegistry,createIframeBridge,getActiveContributorRegistry,setActiveContributorRegistry}from"./index-n3y918j2.js";import{ABILITIES,PLUGIN_CATALOG,PluginManager,ServiceRegistry,collectPluginBinaries,getDefaultPluginsForAbilities,resolvePluginByShortName}from"./index-h6a1kkfk.js";import{getOsAdapter}from"./index-srbb2214.js";import{telemetryService}from"./index-sfjbh6fa.js";import{validateEvent}from"./index-3jez1q8j.js";import{loadAgentApiKey}from"./index-b4wy3jrt.js";import"./index-d3mz9vws.js";import"./index-rnk0kny8.js";import{Command}from"./index-qbvtba0e.js";import{apiDelete,apiGet,apiPost,apiPut,getAgentUrl,isInteractive,maybePrintJson,pickOutputMode,promptConfirm,resolveApiKey,resolveProfileName,runMultimode}from"./index-wvabz3xh.js";import{blank,colors,errMsg,fail,formatStatus,formatTable,header,icons,info,kv,printAgentDetails,setColorsEnabled,shortId,success,timeAgo,warn}from"./index-r0qezdp7.js";import{interactiveDetail,interactiveTable,stripAnsi}from"./index-campp0wv.js";import{BUILTIN_PROFILE_SEEDS,NAMED_ENV_PRESETS,applyAgentConfigToEnv,assertValidProfileName,buildProfileSeed,clearAllSecrets,deleteProfile,ensureProfilesInitialized,getAgentConfigDefaults,getAgentConfigPath,getProfilePath,getSecret,listProfileNames,previewClearAllSecrets,readActiveProfileName,readAgentConfig,readProfile,writeActiveProfileName,writeAgentConfig,writeProfile}from"./index-2pqv0bya.js";import{assertAllowedGatewayUrl,gatewayClient,getDaemonProfile}from"./index-7pdmqbj8.js";import{getPluginRegistry,getProfileDataDir,getVibecontrolsDir,getVibecontrolsProductDir,getVibecontrolsProfile,getVibecontrolsProfilesDir}from"./index-bysm7taq.js";import"./index-zs58d1hc.js";import{__require}from"./index-e9rt4m94.js";import{join as join14}from"path";import{existsSync as existsSync2}from"fs";import{join as join2}from"path";import{createServer}from"net";function isPortAvailable(port,host="0.0.0.0"){return new Promise((resolve)=>{let server=createServer();server.once("error",()=>resolve(!1)),server.once("listening",()=>{server.close(()=>resolve(!0))}),server.listen({host,port,exclusive:!0})})}async function findFreePortFrom(startPort,host="0.0.0.0"){let port=startPort;while(!await isPortAvailable(port,host))if(port++,port>65535)throw Error(`No free port found starting from ${startPort}`);return port}import{existsSync,readFileSync,unlinkSync,writeFileSync}from"fs";import{join}from"path";var CONSENT_FILENAME=".consent.json";function readConsentAbilities(productDir){try{let raw=readFileSync(consentPath(productDir),"utf8"),rec=JSON.parse(raw);if(Array.isArray(rec.abilities)&&rec.abilities.length>0)return new Set(rec.abilities)}catch{}return null}function consentPath(productDir){return join(productDir,CONSENT_FILENAME)}function hasConsent(productDir){return existsSync(consentPath(productDir))}function getPlannedInstall(options,selectedAbilities){let abilities=selectedAbilities??new Set(ABILITIES.filter((a)=>a.defaultSelected||a.mandatory).map((a)=>a.key)),plugins=options.skipPluginInstall?[]:getDefaultPluginsForAbilities(process.platform,abilities).filter((p)=>!options.skipPlugins.includes(p.packageName)&&!options.skipPlugins.includes(p.pluginName)).map((p)=>({packageName:p.packageName,pluginName:p.pluginName,reason:p.description}));return{tools:[],plugins}}async function promptAbilitySelection(){let defaults=new Set(ABILITIES.filter((a)=>a.defaultSelected||a.mandatory).map((a)=>a.key));for(let a of ABILITIES)if(a.mandatory)defaults.add(a.key);if(!(Boolean(process.stdin.isTTY)&&process.env.VIBE_AUTO_ACCEPT!=="1"))return defaults;try{let{interactiveCheckboxes}=await import("./interactive-v8zwz6wf.js"),result=await interactiveCheckboxes("Select the agent abilities to install",ABILITIES.map((a)=>({key:a.key,label:a.label,description:a.description,mandatory:a.mandatory})),defaults);if(result){for(let a of ABILITIES)if(a.mandatory)result.add(a.key);return result}return defaults}catch{return defaults}}function parseAbilityKeys(csv){let valid=new Set(ABILITIES.map((a)=>a.key)),out=new Set;for(let tok of csv.split(",").map((s)=>s.trim().toLowerCase()))if(valid.has(tok))out.add(tok);for(let a of ABILITIES)if(a.mandatory)out.add(a.key);return out}function defaultAbilityKeys(){return new Set(ABILITIES.filter((a)=>a.defaultSelected||a.mandatory).map((a)=>a.key))}function persistConsent(productDir,plan,selectedAbilities,agentVersion){let record={acceptedAt:new Date().toISOString(),agentVersion,abilities:[...selectedAbilities],tools:plan.tools.map((t)=>({name:t.name,reason:t.reason})),plugins:plan.plugins.map((p)=>({packageName:p.packageName,reason:p.reason}))};writeFileSync(consentPath(productDir),JSON.stringify(record,null,2))}function register(program){program.command("start").description("Start a VibeControls agent instance").option("-p, --port <port>","Port to listen on. Default: 3005 for the 'default' profile, deterministic 3100-3399 for any other profile (FNV-1a hash) so multiple profiles run side-by-side without EADDRINUSE.").option("-n, --name <name>","Agent instance name","default").option("-f, --foreground","Run in foreground mode (default: daemon)",!1).option("--db-path <path>","Path to the agent storage directory").option("--profile <profile>","Profile name for isolated config (env: VIBECONTROLS_PROFILE)").option("--host <host>","Host to bind to","0.0.0.0").option("--skip-plugin-install","Skip automatic installation of default plugins",!1).option("--skip-plugin <name>","Skip a specific default plugin (repeatable). Accepts the short pluginName or the full package name.",(value,prev=[])=>[...prev,value],[]).option("--no-install-deps","Skip auto-installing missing tools (installed by their plugins on start by default)").option("-y, --yes","Skip the first-run install consent prompt. Equivalent to VIBE_AUTO_ACCEPT=1; useful for CI / Docker / nohup contexts.",!1).option("--client-id <id>","Gateway OAuth client ID (env: VIBE_CLIENT_ID)").option("--client-secret <secret>","Gateway OAuth client secret (env: VIBE_CLIENT_SECRET)").option("--global-gateway-url <url>","Global gateway URL (env: VIBE_GLOBAL_GATEWAY_URL)").option("--workspace-gateway-url <url>","Workspace gateway URL (env: VIBE_WORKSPACE_GATEWAY_URL)").option("--workspace-id <id>","Workspace ID for auto-report (env: VIBE_WORKSPACE_ID)").option("--isolate <plugins>","Comma-separated list of plugin names to force into worker_threads isolation (Phase 4 hostile-plugin mode). Sets VIBE_ISOLATE_PLUGINS in the daemon env.").option("--profiles <names>","Comma-separated list of profiles to host in this daemon (multi-profile boot). When unset, the daemon hosts a single profile resolved via --profile / VIBECONTROLS_PROFILE / 'default'. Sets VIBECONTROLS_PROFILES in the daemon env so app boot can spin up additional ProfileContexts via the in-process registry.").option("--strict-key-fetch","Refuse to boot if any profile's encryption-key fetch fails. Default lenient: a failed profile is marked degraded and the daemon stays up. Sets VIBE_STRICT_KEY_FETCH=1 in the daemon env.",!1).option("--json","Emit JSON").option("--plain","Plain text output (no interactive TUI). Implied for non-TTY / CI.").option("--abilities <list>","Comma-separated ability keys to install non-interactively (e.g. session,ai,gitops). Storage/tunnel/backup are always included.").option("--wait-ready [seconds]","Block until the agent is fully ready (or fails). Polls /health/ready and renders phase transitions live. Without a value, defaults to 60s. Exits non-zero if the agent ends up degraded or times out. Useful for scripts/CI.").option("--no-wait","Skip the phase tracker entirely after spawning the daemon. Restores the old fire-and-print behavior \u2014 for users who want the previous quick-return UX.").action(async function(opts){let merged={...program.opts(),...opts};try{let defaultPortForProfile=function(profileName){if(profileName==="default")return 3005;let h=2166136261;for(let i=0;i<profileName.length;i++)h=Math.imul(h^profileName.charCodeAt(i),16777619);return 3100+Math.abs(h)%300},serviceManager=new ServiceManager,profile=opts.profile||process.env.VIBECONTROLS_PROFILE||"default";if(process.env.VIBECONTROLS_PROFILE=profile,typeof opts.isolate==="string"&&opts.isolate.length>0)process.env.VIBE_ISOLATE_PLUGINS=opts.isolate;if(typeof opts.profiles==="string"&&opts.profiles.length>0){let names=opts.profiles.split(",").map((s)=>s.trim()).filter(Boolean);if(names.length>0){if(process.env.VIBECONTROLS_PROFILES=names.join(","),process.env.VIBECONTROLS_PROFILE=names[0],names.length>1)warn(`--profiles received ${names.length} entries; daemon boots with '${names[0]}'. Remaining (${names.slice(1).join(", ")}) will be attached via /api/profiles after listen.`)}}if(opts.strictKeyFetch===!0)process.env.VIBE_STRICT_KEY_FETCH="1";applyAgentConfigToEnv();let dbPath=opts.dbPath||getProfileDataDir(),productDir=getVibecontrolsProductDir(),firstRun=!existsSync2(dbPath)&&!existsSync2(join2(productDir,"agents.json")),outputMode=pickOutputMode(merged),canPromptInteractively=outputMode!=="json"&&outputMode!=="plain"&&isInteractive()&&opts.yes!==!0,selectedAbilities;if(typeof merged.abilities==="string"&&merged.abilities.trim()!=="")selectedAbilities=parseAbilityKeys(merged.abilities);else if(hasConsent(productDir))selectedAbilities=readConsentAbilities(productDir)??defaultAbilityKeys();else if(canPromptInteractively)selectedAbilities=await promptAbilitySelection();else selectedAbilities=defaultAbilityKeys();if(!hasConsent(productDir)){let plan=getPlannedInstall({installDeps:opts.installDeps===!0,skipPluginInstall:opts.skipPluginInstall===!0,skipPlugins:Array.isArray(opts.skipPlugin)?opts.skipPlugin:[]},selectedAbilities);if(firstRun&&plan.plugins.length>0)blank(),info(`Installing ${plan.plugins.length} plugin(s) for the selected abilities.`),blank();persistConsent(productDir,plan,selectedAbilities,process.env.VIBE_AGENT_VERSION)}if(firstRun){info("First run detected \u2014 running setup..."),blank();let skipPlugins=Array.isArray(opts.skipPlugin)?opts.skipPlugin:[],plannedPlugins=opts.skipPluginInstall?[]:getDefaultPluginsForAbilities(process.platform,selectedAbilities).filter((p)=>!skipPlugins.includes(p.packageName)&&!skipPlugins.includes(p.pluginName)).map((p)=>p.packageName),pluginBinaries=collectPluginBinaries(plannedPlugins),missing=checkDependencies(pluginBinaries).filter((d)=>!d.installed);if(missing.length>0)if(warn(`Missing tools: ${missing.map((d)=>d.name).join(", ")}`),opts.installDeps)info("Their plugins will install them automatically on startup.");else info("Auto-install skipped (`--no-install-deps`) \u2014 install them yourself or drop the flag.");else success("All plugin tools present.");blank()}if(!opts.skipPluginInstall){let skipPlugins=Array.isArray(opts.skipPlugin)?opts.skipPlugin:[],pluginManager=new PluginManager;await pluginManager.loadCorePlugins(),await pluginManager.loadAll();let installed=await pluginManager.ensureDefaultPlugins((message)=>{if(message.startsWith("No "))warn(message);else if(message.startsWith("Installed "))success(message);else if(message.startsWith("Failed "))warn(message);else info(message)},skipPlugins,selectedAbilities);if(installed.length>0)success(`Auto-installed ${installed.length} default plugin${installed.length>1?"s":""}.`),blank()}let resolvedProfile=opts.profile||process.env.VIBECONTROLS_PROFILE||opts.name||"default",port=opts.port?parseInt(opts.port,10):defaultPortForProfile(resolvedProfile);if(isNaN(port)||port<1||port>65535)fail("Invalid port number. Must be between 1 and 65535.");let availablePort=await findFreePortFrom(port);if(availablePort!==port)warn(`Port ${port} is in use. Auto-selecting port ${colors.bold(String(availablePort))} instead.`),port=availablePort;let host=opts.host,agentUrl=`http://${host==="0.0.0.0"?"localhost":host}:${port}`,clientId=opts.clientId||process.env.VIBE_CLIENT_ID,clientSecret=opts.clientSecret||process.env.VIBE_CLIENT_SECRET,globalGatewayUrl=opts.globalGatewayUrl||process.env.VIBE_GLOBAL_GATEWAY_URL,workspaceGatewayUrl=opts.workspaceGatewayUrl||process.env.VIBE_WORKSPACE_GATEWAY_URL,workspaceId=opts.workspaceId||process.env.VIBE_WORKSPACE_ID;if(clientId&&!clientSecret)fail("--client-secret is required when --client-id is provided.");if(clientSecret&&!clientId)fail("--client-id is required when --client-secret is provided.");if(clientId&&clientSecret){if(!globalGatewayUrl&&!process.env.VIBE_GLOBAL_GATEWAY_URL)fail("--global-gateway-url is required when providing client credentials (none set in env).");if(process.env.VIBE_CLIENT_ID=clientId,process.env.VIBE_CLIENT_SECRET=clientSecret,globalGatewayUrl)process.env.VIBE_GLOBAL_GATEWAY_URL=globalGatewayUrl;let{writeAgentConfig:writeAgentConfig2}=await import("./agent-config-y63ddxgy.js");if(writeAgentConfig2({clientId,clientSecret,workspaceId,globalGatewayUrl,workspaceGatewayUrl}),workspaceGatewayUrl)process.env.VIBE_WORKSPACE_GATEWAY_URL=workspaceGatewayUrl;if(workspaceId)process.env.VIBE_WORKSPACE_ID=workspaceId;success("Gateway credentials staged in env. Agent will authenticate and persist them on startup."),blank()}else if(workspaceGatewayUrl||workspaceId||globalGatewayUrl){if(warn("Workspace options provided without --client-id / --client-secret \u2014 they will be staged in env but unused until credentials are configured."),workspaceGatewayUrl)process.env.VIBE_WORKSPACE_GATEWAY_URL=workspaceGatewayUrl;if(workspaceId)process.env.VIBE_WORKSPACE_ID=workspaceId;if(globalGatewayUrl)process.env.VIBE_GLOBAL_GATEWAY_URL=globalGatewayUrl;blank()}if(opts.foreground){if(!merged.json)header("Starting agent in foreground"),kv("Name",opts.name),kv("Port",String(port)),kv("Host",host),kv("Database",dbPath),blank();let{bootstrapWorkspace}=await import("./bootstrap-workspace-qwed8tfg.js");bootstrapWorkspace();let{createApp}=await import("./app-zcb5a9pn.js"),appInstance=await createApp({port,host,dbPath});if(await appInstance.start(),clientId&&clientSecret&&workspaceId&&globalGatewayUrl&&workspaceGatewayUrl){let result=await appInstance.finalize({clientId,clientSecret,workspaceId,globalGatewayUrl,workspaceGatewayUrl});if(!result.ok)warn(`Finalize failed \u2014 agent remains in awaiting-config state: ${result.error}`)}if(maybePrintJson(merged,{ok:!0,name:opts.name,port,host,pid:process.pid,url:agentUrl}));else await printAgentDetails(agentUrl);let shutdown=async()=>{await appInstance.stop(),process.exit(0)};process.on("SIGTERM",shutdown),process.on("SIGINT",shutdown)}else{if(!merged.json)header("Starting agent in daemon mode"),kv("Name",opts.name),kv("Port",String(port)),kv("Host",host),kv("Database",dbPath),blank();if(opts.installDeps===!1)process.env.VIBE_SKIP_PREREQ_INSTALL="1";await serviceManager.startDaemon({port,name:opts.name,daemon:!0,dbPath,host,profile});let actualPort=(await serviceManager.getStatus(opts.name))?.port??port,actualAgentUrl=`http://${host==="0.0.0.0"?"localhost":host}:${actualPort}`,waitReady=opts.waitReady,noWait=opts.wait===!1,requestedBlocking=waitReady!==void 0;if(noWait&&requestedBlocking)warn("--wait-ready is ignored because --no-wait was also passed.");let blocking=!noWait&&requestedBlocking,shouldRunTracker=!noWait&&(blocking||!merged.json),timeoutMs=(()=>{let fromFlag=typeof waitReady==="string"?Number.parseInt(waitReady,10):NaN;if(Number.isInteger(fromFlag)&&fromFlag>0)return fromFlag*1000;return blocking?60000:25000})();if(merged.json){if(shouldRunTracker){let{trackAgentReady}=await import("./agent-ready-tracker-5yq97296.js"),result=await trackAgentReady(actualAgentUrl,{timeoutMs,verbose:!1});if(blocking&&(result.outcome==="degraded"||result.outcome==="timeout"))process.exitCode=1;maybePrintJson(merged,{ok:result.outcome==="ready"||result.outcome==="awaiting-config",name:opts.name,port:actualPort,host,url:actualAgentUrl,abilities:[...selectedAbilities],outcome:result.outcome,bootState:result.bootState,degradedReasons:result.degradedReasons,summary:result.summary})}else maybePrintJson(merged,{ok:!0,name:opts.name,port:actualPort,host,url:actualAgentUrl});return}if(await printAgentDetails(actualAgentUrl),shouldRunTracker){let{trackAgentReady}=await import("./agent-ready-tracker-5yq97296.js");blank();let result=await trackAgentReady(actualAgentUrl,{timeoutMs,verbose:!0});if(blocking&&(result.outcome==="degraded"||result.outcome==="timeout"))process.exitCode=1}}}catch(err){let message=err instanceof Error?errMsg(err):String(err);if(merged.json){maybePrintJson(merged,{ok:!1,error:message});return}fail(`Failed to start agent: ${message}`)}})}function register2(program){program.command("stop").description("Stop a running VibeControls agent instance").option("-n, --name <name>","Agent instance name","default").option("--all","Stop all running agent instances",!1).option("--json","Emit JSON").action(async function(opts){let merged={...program.opts(),...opts};try{let serviceManager=new ServiceManager;if(opts.all){let instances=await serviceManager.listInstances();if(!instances||instances.length===0){if(maybePrintJson(merged,{ok:!0,stopped:[]}))return;header("Stopping all agent instances"),blank(),info(`${icons.info} No running agent instances found.`);return}let stoppedNames=[];if(!merged.json)header("Stopping all agent instances"),blank();for(let instance of instances)try{if(await serviceManager.stop(instance.name),stoppedNames.push(instance.name),!merged.json)success(`${icons.success} Stopped ${colors.bold(instance.name)}`)}catch{if(!merged.json)fail(`Failed to stop ${colors.bold(instance.name)}`)}if(maybePrintJson(merged,{ok:!0,stopped:stoppedNames,total:instances.length}))return;blank(),success(`${icons.success} Stopped ${stoppedNames.length}/${instances.length} instance(s).`)}else{if(await serviceManager.stop(opts.name),maybePrintJson(merged,{ok:!0,name:opts.name}))return;header(`Stopping agent: ${opts.name}`),blank(),success(`${icons.success} Agent ${colors.bold(opts.name)} stopped.`)}}catch(err){if(merged.json){maybePrintJson(merged,{ok:!1,error:errMsg(err)});return}fail(`Failed to stop agent: ${errMsg(err)}`)}})}function register3(program){program.command("restart").description("Restart a running VibeControls agent instance").option("-n, --name <name>","Agent instance name","default").option("-p, --port <port>","Port to listen on","3005").option("--db-path <path>","Path to the agent storage directory","./agent-db").option("--json","Emit JSON").action(async function(opts){let merged={...program.opts(),...opts};try{let serviceManager=new ServiceManager;if(!merged.json)header(`Restarting agent: ${opts.name}`),blank(),info(`${icons.info} Stopping agent ${colors.bold(opts.name)}...`);try{if(await serviceManager.stop(opts.name),!merged.json)success(`${icons.success} Agent stopped.`)}catch{if(!merged.json)info(`${icons.info} Agent was not running.`)}let port=parseInt(opts.port,10);if(isNaN(port)||port<1||port>65535){if(merged.json){maybePrintJson(merged,{ok:!1,error:"Invalid port number"});return}fail("Invalid port number. Must be between 1 and 65535.");return}let config={port,name:opts.name,daemon:!0,dbPath:opts.dbPath};if(!merged.json)blank(),info(`${icons.info} Starting agent ${colors.bold(opts.name)}...`);await serviceManager.startDaemon(config);let agentUrl=`http://localhost:${port}`;if(maybePrintJson(merged,{ok:!0,name:opts.name,port,url:agentUrl}))return;blank(),success(`${icons.success} Agent ${colors.bold(opts.name)} restarted.`),blank(),kv("Port",String(port)),kv("Database",opts.dbPath),blank(),printAgentDetails(agentUrl)}catch(err){if(merged.json){maybePrintJson(merged,{ok:!1,error:errMsg(err)});return}fail(`Failed to restart agent: ${errMsg(err)}`)}})}import{existsSync as existsSync3,readFileSync as readFileSync2,unlinkSync as unlinkSync2}from"fs";import{join as join3}from"path";function readProfileRuntime(profileName){let runtimePath=join3(getVibecontrolsProfilesDir(),profileName,"runtime.json");if(!existsSync3(runtimePath))return null;try{let data=JSON.parse(readFileSync2(runtimePath,"utf8"));if(typeof data.pid!=="number")return null;return{...data,pid:data.pid,path:runtimePath}}catch{return null}}async function killAgentProfile(profileName){let rt=readProfileRuntime(profileName);if(!rt)return null;if(!isProcessAlive(rt.pid)){try{unlinkSync2(rt.path)}catch{}return`agent pid=${rt.pid} (${profileName}) already gone (cleaned runtime.json).`}let osAdapter=getOsAdapter();if(!osAdapter.killProcessTree(rt.pid,"SIGTERM"))return`failed to SIGTERM agent pid=${rt.pid}.`;if(await new Promise((r)=>setTimeout(r,3000)),isProcessAlive(rt.pid))osAdapter.killProcessTree(rt.pid,"SIGKILL");try{unlinkSync2(rt.path)}catch{}return`agent ${profileName} pid=${rt.pid}${rt.port?` (port ${rt.port})`:""} killed.`}async function killProfileTunnel(profileName){let dir=join3(getVibecontrolsProfilesDir(),profileName),state=readTunnelState(dir);if(!state)return null;if(!isProcessAlive(state.pid))return clearTunnelState(dir),`tunnel pid=${state.pid} already gone (cleaned state).`;let osAdapter=getOsAdapter();if(!osAdapter.killProcessTree(state.pid,"SIGTERM"))return`failed to SIGTERM tunnel pid=${state.pid}.`;if(await new Promise((r)=>setTimeout(r,3000)),isProcessAlive(state.pid))osAdapter.killProcessTree(state.pid,"SIGKILL");return clearTunnelState(dir),`tunnel ${state.provider} pid=${state.pid} (${state.url??"no url"}) killed.`}function register4(program){program.command("kill").description("Force-kill an agent instance and its tunnel. Defaults to active profile.").option("-n, --name <name>","Agent instance name (alias of --profile, kept for back-compat)").option("--profile <name>","Kill a specific profile (overrides --name and VIBECONTROLS_PROFILE)").option("--all","Kill every agent instance and every profile's tunnel",!1).option("--json","Emit JSON").action(async function(opts){let merged={...program.opts(),...opts},killedAll=[];try{let serviceManager=new ServiceManager;if(opts.all){if(!merged.json)header("Force killing all agent instances + tunnels"),blank();let instances=await serviceManager.listInstances()??[],killedAgents=0,seenProfiles=new Set;for(let instance2 of instances)try{if(await serviceManager.kill(instance2.name),!merged.json)success(`${icons.success} agent ${colors.bold(instance2.name)} (pid=${instance2.pid||"?"}) killed.`);killedAll.push(instance2.name),killedAgents++,seenProfiles.add(instance2.name)}catch{if(!merged.json)warn(`${icons.warning} could not kill agent ${instance2.name}.`)}try{let fs=await import("fs"),agentsDir=getVibecontrolsProfilesDir(),entries=fs.existsSync(agentsDir)?fs.readdirSync(agentsDir):[];for(let profile of entries){if(seenProfiles.has(profile))continue;let rtResult=await killAgentProfile(profile);if(rtResult)success(`${icons.success} ${rtResult}`),killedAgents++}}catch(err){warn(`${icons.warning} runtime.json sweep failed: ${err instanceof Error?errMsg(err):String(err)}`)}let tunnels=listPersistedTunnels({allProfiles:!0}),killedTunnels=0;for(let t of tunnels){if(!t.alive){clearTunnelState(t.profileDir);continue}let osAdapter=getOsAdapter();if(osAdapter.killProcessTree(t.pid,"SIGTERM"),await new Promise((r)=>setTimeout(r,3000)),isProcessAlive(t.pid))osAdapter.killProcessTree(t.pid,"SIGKILL");clearTunnelState(t.profileDir),success(`${icons.success} tunnel ${t.provider} pid=${t.pid} (${t.url??"no url"}, ${t.profileDir.split("/").pop()}) killed.`),killedTunnels++}if(maybePrintJson(merged,{ok:!0,killed:killedAll,tunnels:killedTunnels}))return;blank(),success(`${icons.success} killed ${killedAgents} agent(s) and ${killedTunnels} tunnel(s).`);return}let profileName=opts.profile||opts.name||getVibecontrolsProfile();if(!merged.json)header(`Force killing profile: ${profileName}`),blank();let instance=await serviceManager.getStatus(profileName);if(instance){if(await serviceManager.kill(profileName),killedAll.push(profileName),!merged.json)success(`${icons.success} agent ${colors.bold(profileName)} pid=${instance.pid||"?"} killed.`)}else{let rtResult=await killAgentProfile(profileName);if(rtResult){if(killedAll.push(profileName),!merged.json)success(`${icons.success} ${rtResult}`)}else if(!merged.json)info(`${icons.info} no running agent service for profile ${profileName}.`)}let tunnelResult=await killProfileTunnel(profileName);if(tunnelResult){if(!merged.json)success(`${icons.success} ${tunnelResult}`)}else if(!merged.json)info(`${icons.info} no tunnel recorded for profile ${profileName}.`);maybePrintJson(merged,{ok:!0,killed:killedAll})}catch(err){if(merged.json){maybePrintJson(merged,{ok:!1,error:errMsg(err)});return}fail(`Failed to kill: ${errMsg(err)}`)}})}function register5(program){program.command("list").alias("ls").description("List all VibeControls agent instances").option("--json","Emit JSON").option("--plain","Force plain text output").action(async function(opts){try{let merged={...program.opts(),...opts},sm=new ServiceManager;await runMultimode({mode:pickOutputMode(merged),fetchData:()=>sm.listInstances(),plain:(instances)=>{if(header("Agent Instances"),blank(),!instances||instances.length===0){info(`${icons.info} No agent instances found.`),info(`Run ${colors.bold("vibe start")} to start an agent.`);return}let rows=instances.map((inst)=>({Name:inst.name,Status:formatStatus(inst.status),PID:inst.pid||"-",Port:inst.port||"-",Host:inst.config?.host||"-",Database:inst.config?.dbPath||"-",Started:inst.startTime?timeAgo(inst.startTime):"-"}));formatTable(rows),blank();let running=instances.filter((i)=>i.status==="running").length,stopped=instances.length-running;info(`${icons.info} ${instances.length} instance(s): ${colors.green(String(running))} running, ${colors.dim(String(stopped))} stopped`)},interactive:async(instances)=>{if(!instances||instances.length===0){header("Agent Instances"),blank(),info(`${icons.info} No agent instances found.`),info(`Run ${colors.bold("vibe start")} to start an agent.`);return}let rows=instances.map((inst)=>{let lines=[`${colors.bold(inst.name)} ${formatStatus(inst.status)}`,"",` PID: ${inst.pid??"-"}`,` Port: ${inst.port??"-"}`,` Host: ${inst.config?.host??"-"}`,` Database: ${inst.config?.dbPath??"-"}`,` Started: ${inst.startTime?timeAgo(inst.startTime):"-"}`];return{id:inst.name,label:inst.name,hint:inst.status==="running"?"running":"stopped",detail:lines.join(`
3
+ import{pruneStaleBunBinShims}from"./index-6xb3dqrh.js";import{listInstalledPrereqs}from"./index-23rdsqea.js";import{runAliasInherit}from"./index-9e1fgxea.js";import{checkDependencies,installDependencies}from"./index-fg47j98r.js";import{clearTunnelState,getBootstrapTunnelUrl,isProcessAlive,listPersistedTunnels,readTunnelState}from"./index-95nmejfd.js";import{ServiceManager}from"./index-34syaqa8.js";import{REDACTED_VALUE,redactUnknownSecrets}from"./index-y5q0m3cx.js";import{CliContributorRegistry,createIframeBridge,getActiveContributorRegistry,setActiveContributorRegistry}from"./index-1atc02se.js";import{ABILITIES,PLUGIN_CATALOG,PluginManager,ServiceRegistry,collectPluginBinaries,getDefaultPluginsForAbilities,resolvePluginByShortName}from"./index-7qj1swrk.js";import{getOsAdapter}from"./index-srbb2214.js";import{telemetryService}from"./index-sfjbh6fa.js";import{validateEvent}from"./index-3jez1q8j.js";import{loadAgentApiKey}from"./index-b4wy3jrt.js";import"./index-d3mz9vws.js";import"./index-rnk0kny8.js";import{Command}from"./index-qbvtba0e.js";import{apiDelete,apiGet,apiPost,apiPut,getAgentUrl,isInteractive,maybePrintJson,pickOutputMode,promptConfirm,resolveApiKey,resolveProfileName,runMultimode}from"./index-wvabz3xh.js";import{blank,colors,errMsg,fail,formatStatus,formatTable,header,icons,info,kv,printAgentDetails,setColorsEnabled,shortId,success,timeAgo,warn}from"./index-r0qezdp7.js";import{interactiveDetail,interactiveTable,stripAnsi}from"./index-campp0wv.js";import{BUILTIN_PROFILE_SEEDS,NAMED_ENV_PRESETS,applyAgentConfigToEnv,assertValidProfileName,buildProfileSeed,clearAllSecrets,deleteProfile,ensureProfilesInitialized,getAgentConfigDefaults,getAgentConfigPath,getProfilePath,getSecret,listProfileNames,previewClearAllSecrets,readActiveProfileName,readAgentConfig,readProfile,writeActiveProfileName,writeAgentConfig,writeProfile}from"./index-2pqv0bya.js";import{assertAllowedGatewayUrl,gatewayClient,getDaemonProfile}from"./index-7pdmqbj8.js";import{getPluginRegistry,getProfileDataDir,getVibecontrolsDir,getVibecontrolsProductDir,getVibecontrolsProfile,getVibecontrolsProfilesDir}from"./index-bysm7taq.js";import"./index-zs58d1hc.js";import{__require}from"./index-e9rt4m94.js";import{join as join14}from"path";import{existsSync as existsSync2}from"fs";import{join as join2}from"path";import{createServer}from"net";function isPortAvailable(port,host="0.0.0.0"){return new Promise((resolve)=>{let server=createServer();server.once("error",()=>resolve(!1)),server.once("listening",()=>{server.close(()=>resolve(!0))}),server.listen({host,port,exclusive:!0})})}async function findFreePortFrom(startPort,host="0.0.0.0"){let port=startPort;while(!await isPortAvailable(port,host))if(port++,port>65535)throw Error(`No free port found starting from ${startPort}`);return port}import{existsSync,readFileSync,unlinkSync,writeFileSync}from"fs";import{join}from"path";var CONSENT_FILENAME=".consent.json";function readConsentAbilities(productDir){try{let raw=readFileSync(consentPath(productDir),"utf8"),rec=JSON.parse(raw);if(Array.isArray(rec.abilities)&&rec.abilities.length>0)return new Set(rec.abilities)}catch{}return null}function consentPath(productDir){return join(productDir,CONSENT_FILENAME)}function hasConsent(productDir){return existsSync(consentPath(productDir))}function getPlannedInstall(options,selectedAbilities){let abilities=selectedAbilities??new Set(ABILITIES.filter((a)=>a.defaultSelected||a.mandatory).map((a)=>a.key)),plugins=options.skipPluginInstall?[]:getDefaultPluginsForAbilities(process.platform,abilities).filter((p)=>!options.skipPlugins.includes(p.packageName)&&!options.skipPlugins.includes(p.pluginName)).map((p)=>({packageName:p.packageName,pluginName:p.pluginName,reason:p.description}));return{tools:[],plugins}}async function promptAbilitySelection(){let defaults=new Set(ABILITIES.filter((a)=>a.defaultSelected||a.mandatory).map((a)=>a.key));for(let a of ABILITIES)if(a.mandatory)defaults.add(a.key);if(!(Boolean(process.stdin.isTTY)&&process.env.VIBE_AUTO_ACCEPT!=="1"))return defaults;try{let{interactiveCheckboxes}=await import("./interactive-v8zwz6wf.js"),result=await interactiveCheckboxes("Select the agent abilities to install",ABILITIES.map((a)=>({key:a.key,label:a.label,description:a.description,mandatory:a.mandatory})),defaults);if(result){for(let a of ABILITIES)if(a.mandatory)result.add(a.key);return result}return defaults}catch{return defaults}}function parseAbilityKeys(csv){let valid=new Set(ABILITIES.map((a)=>a.key)),out=new Set;for(let tok of csv.split(",").map((s)=>s.trim().toLowerCase()))if(valid.has(tok))out.add(tok);for(let a of ABILITIES)if(a.mandatory)out.add(a.key);return out}function defaultAbilityKeys(){return new Set(ABILITIES.filter((a)=>a.defaultSelected||a.mandatory).map((a)=>a.key))}function persistConsent(productDir,plan,selectedAbilities,agentVersion){let record={acceptedAt:new Date().toISOString(),agentVersion,abilities:[...selectedAbilities],tools:plan.tools.map((t)=>({name:t.name,reason:t.reason})),plugins:plan.plugins.map((p)=>({packageName:p.packageName,reason:p.reason}))};writeFileSync(consentPath(productDir),JSON.stringify(record,null,2))}function register(program){program.command("start").description("Start a VibeControls agent instance").option("-p, --port <port>","Port to listen on. Default: 3005 for the 'default' profile, deterministic 3100-3399 for any other profile (FNV-1a hash) so multiple profiles run side-by-side without EADDRINUSE.").option("-n, --name <name>","Agent instance name","default").option("-f, --foreground","Run in foreground mode (default: daemon)",!1).option("--db-path <path>","Path to the agent storage directory").option("--profile <profile>","Profile name for isolated config (env: VIBECONTROLS_PROFILE)").option("--host <host>","Host to bind to","0.0.0.0").option("--skip-plugin-install","Skip automatic installation of default plugins",!1).option("--skip-plugin <name>","Skip a specific default plugin (repeatable). Accepts the short pluginName or the full package name.",(value,prev=[])=>[...prev,value],[]).option("--no-install-deps","Skip auto-installing missing tools (installed by their plugins on start by default)").option("-y, --yes","Skip the first-run install consent prompt. Equivalent to VIBE_AUTO_ACCEPT=1; useful for CI / Docker / nohup contexts.",!1).option("--client-id <id>","Gateway OAuth client ID (env: VIBE_CLIENT_ID)").option("--client-secret <secret>","Gateway OAuth client secret (env: VIBE_CLIENT_SECRET)").option("--global-gateway-url <url>","Global gateway URL (env: VIBE_GLOBAL_GATEWAY_URL)").option("--workspace-gateway-url <url>","Workspace gateway URL (env: VIBE_WORKSPACE_GATEWAY_URL)").option("--workspace-id <id>","Workspace ID for auto-report (env: VIBE_WORKSPACE_ID)").option("--isolate <plugins>","Comma-separated list of plugin names to force into worker_threads isolation (Phase 4 hostile-plugin mode). Sets VIBE_ISOLATE_PLUGINS in the daemon env.").option("--profiles <names>","Comma-separated list of profiles to host in this daemon (multi-profile boot). When unset, the daemon hosts a single profile resolved via --profile / VIBECONTROLS_PROFILE / 'default'. Sets VIBECONTROLS_PROFILES in the daemon env so app boot can spin up additional ProfileContexts via the in-process registry.").option("--strict-key-fetch","Refuse to boot if any profile's encryption-key fetch fails. Default lenient: a failed profile is marked degraded and the daemon stays up. Sets VIBE_STRICT_KEY_FETCH=1 in the daemon env.",!1).option("--json","Emit JSON").option("--plain","Plain text output (no interactive TUI). Implied for non-TTY / CI.").option("--abilities <list>","Comma-separated ability keys to install non-interactively (e.g. session,ai,gitops). Storage/tunnel/backup are always included.").option("--wait-ready [seconds]","Block until the agent is fully ready (or fails). Polls /health/ready and renders phase transitions live. Without a value, defaults to 60s. Exits non-zero if the agent ends up degraded or times out. Useful for scripts/CI.").option("--no-wait","Skip the phase tracker entirely after spawning the daemon. Restores the old fire-and-print behavior \u2014 for users who want the previous quick-return UX.").action(async function(opts){let merged={...program.opts(),...opts};try{let defaultPortForProfile=function(profileName){if(profileName==="default")return 3005;let h=2166136261;for(let i=0;i<profileName.length;i++)h=Math.imul(h^profileName.charCodeAt(i),16777619);return 3100+Math.abs(h)%300},serviceManager=new ServiceManager,profile=opts.profile||process.env.VIBECONTROLS_PROFILE||"default";if(process.env.VIBECONTROLS_PROFILE=profile,typeof opts.isolate==="string"&&opts.isolate.length>0)process.env.VIBE_ISOLATE_PLUGINS=opts.isolate;if(typeof opts.profiles==="string"&&opts.profiles.length>0){let names=opts.profiles.split(",").map((s)=>s.trim()).filter(Boolean);if(names.length>0){if(process.env.VIBECONTROLS_PROFILES=names.join(","),process.env.VIBECONTROLS_PROFILE=names[0],names.length>1)warn(`--profiles received ${names.length} entries; daemon boots with '${names[0]}'. Remaining (${names.slice(1).join(", ")}) will be attached via /api/profiles after listen.`)}}if(opts.strictKeyFetch===!0)process.env.VIBE_STRICT_KEY_FETCH="1";applyAgentConfigToEnv();let dbPath=opts.dbPath||getProfileDataDir(),productDir=getVibecontrolsProductDir(),firstRun=!existsSync2(dbPath)&&!existsSync2(join2(productDir,"agents.json")),outputMode=pickOutputMode(merged),canPromptInteractively=outputMode!=="json"&&outputMode!=="plain"&&isInteractive()&&opts.yes!==!0,selectedAbilities;if(typeof merged.abilities==="string"&&merged.abilities.trim()!=="")selectedAbilities=parseAbilityKeys(merged.abilities);else if(hasConsent(productDir))selectedAbilities=readConsentAbilities(productDir)??defaultAbilityKeys();else if(canPromptInteractively)selectedAbilities=await promptAbilitySelection();else selectedAbilities=defaultAbilityKeys();if(!hasConsent(productDir)){let plan=getPlannedInstall({installDeps:opts.installDeps===!0,skipPluginInstall:opts.skipPluginInstall===!0,skipPlugins:Array.isArray(opts.skipPlugin)?opts.skipPlugin:[]},selectedAbilities);if(firstRun&&plan.plugins.length>0)blank(),info(`Installing ${plan.plugins.length} plugin(s) for the selected abilities.`),blank();persistConsent(productDir,plan,selectedAbilities,process.env.VIBE_AGENT_VERSION)}if(firstRun){info("First run detected \u2014 running setup..."),blank();let skipPlugins=Array.isArray(opts.skipPlugin)?opts.skipPlugin:[],plannedPlugins=opts.skipPluginInstall?[]:getDefaultPluginsForAbilities(process.platform,selectedAbilities).filter((p)=>!skipPlugins.includes(p.packageName)&&!skipPlugins.includes(p.pluginName)).map((p)=>p.packageName),pluginBinaries=collectPluginBinaries(plannedPlugins),missing=checkDependencies(pluginBinaries).filter((d)=>!d.installed);if(missing.length>0)if(warn(`Missing tools: ${missing.map((d)=>d.name).join(", ")}`),opts.installDeps)info("Their plugins will install them automatically on startup.");else info("Auto-install skipped (`--no-install-deps`) \u2014 install them yourself or drop the flag.");else success("All plugin tools present.");blank()}if(!opts.skipPluginInstall){let skipPlugins=Array.isArray(opts.skipPlugin)?opts.skipPlugin:[],pluginManager=new PluginManager;await pluginManager.loadCorePlugins(),await pluginManager.loadAll();let installed=await pluginManager.ensureDefaultPlugins((message)=>{if(message.startsWith("No "))warn(message);else if(message.startsWith("Installed "))success(message);else if(message.startsWith("Failed "))warn(message);else info(message)},skipPlugins,selectedAbilities);if(installed.length>0)success(`Auto-installed ${installed.length} default plugin${installed.length>1?"s":""}.`),blank()}let resolvedProfile=opts.profile||process.env.VIBECONTROLS_PROFILE||opts.name||"default",port=opts.port?parseInt(opts.port,10):defaultPortForProfile(resolvedProfile);if(isNaN(port)||port<1||port>65535)fail("Invalid port number. Must be between 1 and 65535.");let availablePort=await findFreePortFrom(port);if(availablePort!==port)warn(`Port ${port} is in use. Auto-selecting port ${colors.bold(String(availablePort))} instead.`),port=availablePort;let host=opts.host,agentUrl=`http://${host==="0.0.0.0"?"localhost":host}:${port}`,clientId=opts.clientId||process.env.VIBE_CLIENT_ID,clientSecret=opts.clientSecret||process.env.VIBE_CLIENT_SECRET,globalGatewayUrl=opts.globalGatewayUrl||process.env.VIBE_GLOBAL_GATEWAY_URL,workspaceGatewayUrl=opts.workspaceGatewayUrl||process.env.VIBE_WORKSPACE_GATEWAY_URL,workspaceId=opts.workspaceId||process.env.VIBE_WORKSPACE_ID;if(clientId&&!clientSecret)fail("--client-secret is required when --client-id is provided.");if(clientSecret&&!clientId)fail("--client-id is required when --client-secret is provided.");if(clientId&&clientSecret){if(!globalGatewayUrl&&!process.env.VIBE_GLOBAL_GATEWAY_URL)fail("--global-gateway-url is required when providing client credentials (none set in env).");if(process.env.VIBE_CLIENT_ID=clientId,process.env.VIBE_CLIENT_SECRET=clientSecret,globalGatewayUrl)process.env.VIBE_GLOBAL_GATEWAY_URL=globalGatewayUrl;let{writeAgentConfig:writeAgentConfig2}=await import("./agent-config-y63ddxgy.js");if(writeAgentConfig2({clientId,clientSecret,workspaceId,globalGatewayUrl,workspaceGatewayUrl}),workspaceGatewayUrl)process.env.VIBE_WORKSPACE_GATEWAY_URL=workspaceGatewayUrl;if(workspaceId)process.env.VIBE_WORKSPACE_ID=workspaceId;success("Gateway credentials staged in env. Agent will authenticate and persist them on startup."),blank()}else if(workspaceGatewayUrl||workspaceId||globalGatewayUrl){if(warn("Workspace options provided without --client-id / --client-secret \u2014 they will be staged in env but unused until credentials are configured."),workspaceGatewayUrl)process.env.VIBE_WORKSPACE_GATEWAY_URL=workspaceGatewayUrl;if(workspaceId)process.env.VIBE_WORKSPACE_ID=workspaceId;if(globalGatewayUrl)process.env.VIBE_GLOBAL_GATEWAY_URL=globalGatewayUrl;blank()}if(opts.foreground){if(!merged.json)header("Starting agent in foreground"),kv("Name",opts.name),kv("Port",String(port)),kv("Host",host),kv("Database",dbPath),blank();let{bootstrapWorkspace}=await import("./bootstrap-workspace-qwed8tfg.js");bootstrapWorkspace();let{createApp}=await import("./app-fnvdnqv4.js"),appInstance=await createApp({port,host,dbPath});if(await appInstance.start(),clientId&&clientSecret&&workspaceId&&globalGatewayUrl&&workspaceGatewayUrl){let result=await appInstance.finalize({clientId,clientSecret,workspaceId,globalGatewayUrl,workspaceGatewayUrl});if(!result.ok)warn(`Finalize failed \u2014 agent remains in awaiting-config state: ${result.error}`)}if(maybePrintJson(merged,{ok:!0,name:opts.name,port,host,pid:process.pid,url:agentUrl}));else await printAgentDetails(agentUrl);let shutdown=async()=>{await appInstance.stop(),process.exit(0)};process.on("SIGTERM",shutdown),process.on("SIGINT",shutdown)}else{if(!merged.json)header("Starting agent in daemon mode"),kv("Name",opts.name),kv("Port",String(port)),kv("Host",host),kv("Database",dbPath),blank();if(opts.installDeps===!1)process.env.VIBE_SKIP_PREREQ_INSTALL="1";await serviceManager.startDaemon({port,name:opts.name,daemon:!0,dbPath,host,profile});let actualPort=(await serviceManager.getStatus(opts.name))?.port??port,actualAgentUrl=`http://${host==="0.0.0.0"?"localhost":host}:${actualPort}`,waitReady=opts.waitReady,noWait=opts.wait===!1,requestedBlocking=waitReady!==void 0;if(noWait&&requestedBlocking)warn("--wait-ready is ignored because --no-wait was also passed.");let blocking=!noWait&&requestedBlocking,shouldRunTracker=!noWait&&(blocking||!merged.json),timeoutMs=(()=>{let fromFlag=typeof waitReady==="string"?Number.parseInt(waitReady,10):NaN;if(Number.isInteger(fromFlag)&&fromFlag>0)return fromFlag*1000;return blocking?60000:25000})();if(merged.json){if(shouldRunTracker){let{trackAgentReady}=await import("./agent-ready-tracker-5yq97296.js"),result=await trackAgentReady(actualAgentUrl,{timeoutMs,verbose:!1});if(blocking&&(result.outcome==="degraded"||result.outcome==="timeout"))process.exitCode=1;maybePrintJson(merged,{ok:result.outcome==="ready"||result.outcome==="awaiting-config",name:opts.name,port:actualPort,host,url:actualAgentUrl,abilities:[...selectedAbilities],outcome:result.outcome,bootState:result.bootState,degradedReasons:result.degradedReasons,summary:result.summary})}else maybePrintJson(merged,{ok:!0,name:opts.name,port:actualPort,host,url:actualAgentUrl});return}if(await printAgentDetails(actualAgentUrl),shouldRunTracker){let{trackAgentReady}=await import("./agent-ready-tracker-5yq97296.js");blank();let result=await trackAgentReady(actualAgentUrl,{timeoutMs,verbose:!0});if(blocking&&(result.outcome==="degraded"||result.outcome==="timeout"))process.exitCode=1}}}catch(err){let message=err instanceof Error?errMsg(err):String(err);if(merged.json){maybePrintJson(merged,{ok:!1,error:message});return}fail(`Failed to start agent: ${message}`)}})}function register2(program){program.command("stop").description("Stop a running VibeControls agent instance").option("-n, --name <name>","Agent instance name","default").option("--all","Stop all running agent instances",!1).option("--json","Emit JSON").action(async function(opts){let merged={...program.opts(),...opts};try{let serviceManager=new ServiceManager;if(opts.all){let instances=await serviceManager.listInstances();if(!instances||instances.length===0){if(maybePrintJson(merged,{ok:!0,stopped:[]}))return;header("Stopping all agent instances"),blank(),info(`${icons.info} No running agent instances found.`);return}let stoppedNames=[];if(!merged.json)header("Stopping all agent instances"),blank();for(let instance of instances)try{if(await serviceManager.stop(instance.name),stoppedNames.push(instance.name),!merged.json)success(`${icons.success} Stopped ${colors.bold(instance.name)}`)}catch{if(!merged.json)fail(`Failed to stop ${colors.bold(instance.name)}`)}if(maybePrintJson(merged,{ok:!0,stopped:stoppedNames,total:instances.length}))return;blank(),success(`${icons.success} Stopped ${stoppedNames.length}/${instances.length} instance(s).`)}else{if(await serviceManager.stop(opts.name),maybePrintJson(merged,{ok:!0,name:opts.name}))return;header(`Stopping agent: ${opts.name}`),blank(),success(`${icons.success} Agent ${colors.bold(opts.name)} stopped.`)}}catch(err){if(merged.json){maybePrintJson(merged,{ok:!1,error:errMsg(err)});return}fail(`Failed to stop agent: ${errMsg(err)}`)}})}function register3(program){program.command("restart").description("Restart a running VibeControls agent instance").option("-n, --name <name>","Agent instance name","default").option("-p, --port <port>","Port to listen on","3005").option("--db-path <path>","Path to the agent storage directory","./agent-db").option("--json","Emit JSON").action(async function(opts){let merged={...program.opts(),...opts};try{let serviceManager=new ServiceManager;if(!merged.json)header(`Restarting agent: ${opts.name}`),blank(),info(`${icons.info} Stopping agent ${colors.bold(opts.name)}...`);try{if(await serviceManager.stop(opts.name),!merged.json)success(`${icons.success} Agent stopped.`)}catch{if(!merged.json)info(`${icons.info} Agent was not running.`)}let port=parseInt(opts.port,10);if(isNaN(port)||port<1||port>65535){if(merged.json){maybePrintJson(merged,{ok:!1,error:"Invalid port number"});return}fail("Invalid port number. Must be between 1 and 65535.");return}let config={port,name:opts.name,daemon:!0,dbPath:opts.dbPath};if(!merged.json)blank(),info(`${icons.info} Starting agent ${colors.bold(opts.name)}...`);await serviceManager.startDaemon(config);let agentUrl=`http://localhost:${port}`;if(maybePrintJson(merged,{ok:!0,name:opts.name,port,url:agentUrl}))return;blank(),success(`${icons.success} Agent ${colors.bold(opts.name)} restarted.`),blank(),kv("Port",String(port)),kv("Database",opts.dbPath),blank(),printAgentDetails(agentUrl)}catch(err){if(merged.json){maybePrintJson(merged,{ok:!1,error:errMsg(err)});return}fail(`Failed to restart agent: ${errMsg(err)}`)}})}import{existsSync as existsSync3,readFileSync as readFileSync2,unlinkSync as unlinkSync2}from"fs";import{join as join3}from"path";function readProfileRuntime(profileName){let runtimePath=join3(getVibecontrolsProfilesDir(),profileName,"runtime.json");if(!existsSync3(runtimePath))return null;try{let data=JSON.parse(readFileSync2(runtimePath,"utf8"));if(typeof data.pid!=="number")return null;return{...data,pid:data.pid,path:runtimePath}}catch{return null}}async function killAgentProfile(profileName){let rt=readProfileRuntime(profileName);if(!rt)return null;if(!isProcessAlive(rt.pid)){try{unlinkSync2(rt.path)}catch{}return`agent pid=${rt.pid} (${profileName}) already gone (cleaned runtime.json).`}let osAdapter=getOsAdapter();if(!osAdapter.killProcessTree(rt.pid,"SIGTERM"))return`failed to SIGTERM agent pid=${rt.pid}.`;if(await new Promise((r)=>setTimeout(r,3000)),isProcessAlive(rt.pid))osAdapter.killProcessTree(rt.pid,"SIGKILL");try{unlinkSync2(rt.path)}catch{}return`agent ${profileName} pid=${rt.pid}${rt.port?` (port ${rt.port})`:""} killed.`}async function killProfileTunnel(profileName){let dir=join3(getVibecontrolsProfilesDir(),profileName),state=readTunnelState(dir);if(!state)return null;if(!isProcessAlive(state.pid))return clearTunnelState(dir),`tunnel pid=${state.pid} already gone (cleaned state).`;let osAdapter=getOsAdapter();if(!osAdapter.killProcessTree(state.pid,"SIGTERM"))return`failed to SIGTERM tunnel pid=${state.pid}.`;if(await new Promise((r)=>setTimeout(r,3000)),isProcessAlive(state.pid))osAdapter.killProcessTree(state.pid,"SIGKILL");return clearTunnelState(dir),`tunnel ${state.provider} pid=${state.pid} (${state.url??"no url"}) killed.`}function register4(program){program.command("kill").description("Force-kill an agent instance and its tunnel. Defaults to active profile.").option("-n, --name <name>","Agent instance name (alias of --profile, kept for back-compat)").option("--profile <name>","Kill a specific profile (overrides --name and VIBECONTROLS_PROFILE)").option("--all","Kill every agent instance and every profile's tunnel",!1).option("--json","Emit JSON").action(async function(opts){let merged={...program.opts(),...opts},killedAll=[];try{let serviceManager=new ServiceManager;if(opts.all){if(!merged.json)header("Force killing all agent instances + tunnels"),blank();let instances=await serviceManager.listInstances()??[],killedAgents=0,seenProfiles=new Set;for(let instance2 of instances)try{if(await serviceManager.kill(instance2.name),!merged.json)success(`${icons.success} agent ${colors.bold(instance2.name)} (pid=${instance2.pid||"?"}) killed.`);killedAll.push(instance2.name),killedAgents++,seenProfiles.add(instance2.name)}catch{if(!merged.json)warn(`${icons.warning} could not kill agent ${instance2.name}.`)}try{let fs=await import("fs"),agentsDir=getVibecontrolsProfilesDir(),entries=fs.existsSync(agentsDir)?fs.readdirSync(agentsDir):[];for(let profile of entries){if(seenProfiles.has(profile))continue;let rtResult=await killAgentProfile(profile);if(rtResult)success(`${icons.success} ${rtResult}`),killedAgents++}}catch(err){warn(`${icons.warning} runtime.json sweep failed: ${err instanceof Error?errMsg(err):String(err)}`)}let tunnels=listPersistedTunnels({allProfiles:!0}),killedTunnels=0;for(let t of tunnels){if(!t.alive){clearTunnelState(t.profileDir);continue}let osAdapter=getOsAdapter();if(osAdapter.killProcessTree(t.pid,"SIGTERM"),await new Promise((r)=>setTimeout(r,3000)),isProcessAlive(t.pid))osAdapter.killProcessTree(t.pid,"SIGKILL");clearTunnelState(t.profileDir),success(`${icons.success} tunnel ${t.provider} pid=${t.pid} (${t.url??"no url"}, ${t.profileDir.split("/").pop()}) killed.`),killedTunnels++}if(maybePrintJson(merged,{ok:!0,killed:killedAll,tunnels:killedTunnels}))return;blank(),success(`${icons.success} killed ${killedAgents} agent(s) and ${killedTunnels} tunnel(s).`);return}let profileName=opts.profile||opts.name||getVibecontrolsProfile();if(!merged.json)header(`Force killing profile: ${profileName}`),blank();let instance=await serviceManager.getStatus(profileName);if(instance){if(await serviceManager.kill(profileName),killedAll.push(profileName),!merged.json)success(`${icons.success} agent ${colors.bold(profileName)} pid=${instance.pid||"?"} killed.`)}else{let rtResult=await killAgentProfile(profileName);if(rtResult){if(killedAll.push(profileName),!merged.json)success(`${icons.success} ${rtResult}`)}else if(!merged.json)info(`${icons.info} no running agent service for profile ${profileName}.`)}let tunnelResult=await killProfileTunnel(profileName);if(tunnelResult){if(!merged.json)success(`${icons.success} ${tunnelResult}`)}else if(!merged.json)info(`${icons.info} no tunnel recorded for profile ${profileName}.`);maybePrintJson(merged,{ok:!0,killed:killedAll})}catch(err){if(merged.json){maybePrintJson(merged,{ok:!1,error:errMsg(err)});return}fail(`Failed to kill: ${errMsg(err)}`)}})}function register5(program){program.command("list").alias("ls").description("List all VibeControls agent instances").option("--json","Emit JSON").option("--plain","Force plain text output").action(async function(opts){try{let merged={...program.opts(),...opts},sm=new ServiceManager;await runMultimode({mode:pickOutputMode(merged),fetchData:()=>sm.listInstances(),plain:(instances)=>{if(header("Agent Instances"),blank(),!instances||instances.length===0){info(`${icons.info} No agent instances found.`),info(`Run ${colors.bold("vibe start")} to start an agent.`);return}let rows=instances.map((inst)=>({Name:inst.name,Status:formatStatus(inst.status),PID:inst.pid||"-",Port:inst.port||"-",Host:inst.config?.host||"-",Database:inst.config?.dbPath||"-",Started:inst.startTime?timeAgo(inst.startTime):"-"}));formatTable(rows),blank();let running=instances.filter((i)=>i.status==="running").length,stopped=instances.length-running;info(`${icons.info} ${instances.length} instance(s): ${colors.green(String(running))} running, ${colors.dim(String(stopped))} stopped`)},interactive:async(instances)=>{if(!instances||instances.length===0){header("Agent Instances"),blank(),info(`${icons.info} No agent instances found.`),info(`Run ${colors.bold("vibe start")} to start an agent.`);return}let rows=instances.map((inst)=>{let lines=[`${colors.bold(inst.name)} ${formatStatus(inst.status)}`,"",` PID: ${inst.pid??"-"}`,` Port: ${inst.port??"-"}`,` Host: ${inst.config?.host??"-"}`,` Database: ${inst.config?.dbPath??"-"}`,` Started: ${inst.startTime?timeAgo(inst.startTime):"-"}`];return{id:inst.name,label:inst.name,hint:inst.status==="running"?"running":"stopped",detail:lines.join(`
4
4
  `)}});await interactiveTable({title:`vibe list \u2014 ${instances.length} instance(s)`,rows,footer:"\u2191/\u2193 navigate \xB7 q to quit"})},json:(instances)=>instances.map((inst)=>({name:inst.name,status:inst.status,pid:inst.pid??null,port:inst.port??null,host:inst.config?.host??null,database:inst.config?.dbPath??null,startTime:inst.startTime??null}))})}catch(err){fail(`Failed to list instances: ${err.message}`)}})}var MAX_TAIL_LINES=5000;function register6(program){program.command("logs").description("View logs for a VibeControls agent instance").option("-n, --name <name>","Agent instance name","default").option("-f, --follow","Follow log output",!1).option("--tail <lines>","Number of lines to show from the end","100").option("--json","Emit JSON (one object per line, banners suppressed)").option("--plain","Force plain text output").action(async function(opts){try{let merged={...program.opts(),...opts},serviceManager=new ServiceManager,tail=parseInt(merged.tail??"100",10);if(isNaN(tail)||tail<1||tail>MAX_TAIL_LINES){fail(`Invalid tail value. Must be between 1 and ${MAX_TAIL_LINES}.`);return}let name=merged.name??"default";if(!await serviceManager.getStatus(name)){fail(`Agent instance ${colors.bold(name)} not found.`);return}if(!merged.json){if(merged.follow)header(`Following logs: ${name}`),info(`${icons.info} Press Ctrl+C to stop following.`);else header(`Logs: ${name}`);blank()}await serviceManager.showLogs(name,{follow:!!merged.follow,tail})}catch(err){fail(`Failed to get logs: ${errMsg(err)}`)}})}function register7(program){program.command("setup").description("Install system dependencies and (optionally) write gateway auth config").option("--check","Only check dependencies without installing",!1).option("--client-id <id>","OAuth app client ID (for backend authentication)").option("--client-secret <secret>","OAuth app client secret").option("--workspace-id <id>","Workspace UUID this agent belongs to").option("--global-gateway-url <url>","Global public gateway URL (default: http://localhost:4000/global/graphql)").option("--workspace-gateway-url <url>","Workspace gateway URL (default: http://localhost:4001/workspaces/graphql)").option("--storage-adapter <name>","Named storage adapter (default: skalex, or custom:<path>)").option("--json","Emit JSON").action(async function(options){let merged={...program.opts(),...options},configured=[];try{if(!merged.json)header("VibeControls Agent Setup");let update={};if(options.clientId)update.clientId=options.clientId;if(options.clientSecret)update.clientSecret=options.clientSecret;if(options.workspaceId)update.workspaceId=options.workspaceId;if(options.globalGatewayUrl)update.globalGatewayUrl=assertAllowedGatewayUrl(options.globalGatewayUrl,"globalGatewayUrl");if(options.workspaceGatewayUrl)update.workspaceGatewayUrl=assertAllowedGatewayUrl(options.workspaceGatewayUrl,"workspaceGatewayUrl");if(options.storageAdapter)update.storageAdapter=options.storageAdapter;if(Object.keys(update).length>0){let written=writeAgentConfig(update);if(configured.push(...Object.keys(update)),!merged.json){success(`Agent config written to ${getAgentConfigPath()}`),kv("clientId",written.clientId?colors.dim("(set)"):colors.dim("(unset)")),kv("clientSecret",written.clientSecret?colors.dim("(set)"):colors.dim("(unset)")),kv("workspaceId",written.workspaceId??colors.dim("(unset)"));let defaults=getAgentConfigDefaults();if(kv("globalGatewayUrl",written.globalGatewayUrl??defaults.globalGatewayUrl),kv("workspaceGatewayUrl",written.workspaceGatewayUrl??defaults.workspaceGatewayUrl),written.storageAdapter)kv("storageAdapter",written.storageAdapter);blank()}}else{let existing=readAgentConfig();if((existing.clientId||existing.clientSecret||existing.workspaceId)&&!merged.json)info(`Using existing agent config at ${getAgentConfigPath()} (pass --client-id/--client-secret/--workspace-id to update).`),blank()}if(!merged.json)info("Checking dependencies..."),blank();let deps=checkDependencies(),missing=[],installed=[];for(let dep of deps){if(dep.installed)installed.push(dep.name);if(!merged.json){let icon=dep.installed?icons.success:icons.error,version=dep.version?colors.dim(` (${dep.version})`):"",required=dep.required?"":colors.dim(" [optional]");kv(`${icon} ${dep.name}`,`${dep.installed?colors.green("installed"):colors.red("missing")}${version}${required}`)}if(!dep.installed)missing.push(dep.name)}if(!merged.json)blank();if(missing.length===0){if(maybePrintJson(merged,{ok:!0,installed,configured}))return;success("All dependencies are installed.");return}if(options.check){if(merged.json){maybePrintJson(merged,{ok:!1,installed,missing,configured});return}warn(`Missing: ${missing.join(", ")}`),info(`Run ${colors.bold("vibe setup")} to install them.`),process.exit(1)}if(!merged.json)info(`Installing missing dependencies: ${missing.join(", ")}...`),blank();let result=await installDependencies(missing),newlyInstalled=missing.filter((n)=>!result.failed.includes(n));if(result.failed.length>0){if(merged.json){maybePrintJson(merged,{ok:!1,installed:[...installed,...newlyInstalled],failed:result.failed,configured});return}warn(`${result.failed.length} tool(s) failed: ${result.failed.join(", ")}`),info("You may need to install manually or use sudo."),process.exit(1)}else{if(maybePrintJson(merged,{ok:!0,installed:[...installed,...newlyInstalled],configured}))return;success("All dependencies installed successfully.")}}catch(err){let message=err instanceof Error?errMsg(err):String(err);if(merged.json){maybePrintJson(merged,{ok:!1,error:message});return}fail(`Setup failed: ${message}`)}})}import{join as join4}from"path";async function getPackageMetadata(){let depths=["..","../..","../../.."];for(let depth of depths)try{let pkgPath=join4(import.meta.dir,depth,"package.json"),data=await Bun.file(pkgPath).json(),name=data.name,version=data.version;if(name&&version){let publishConfig=data.publishConfig;return{name,version,registry:publishConfig?.registry??getPluginRegistry()}}}catch{}throw Error("package.json not found")}async function fetchRemoteManifest(pkg,version,registry){try{let result=Bun.spawnSync([process.platform==="win32"?"npm.cmd":"npm","view",`${pkg}@${version}`,"--json",`--registry=${registry}`],{stdout:"pipe",stderr:"pipe"});if(result.exitCode!==0)return null;let parsed=JSON.parse(result.stdout.toString());return Array.isArray(parsed)?parsed[0]??null:parsed}catch{return null}}function compareSemver(a,b){let parse=(v)=>v.replace(/^[\^~>=<v]+/,"").split(/[.+-]/).map((p)=>Number(p)||0),aa=parse(a),bb=parse(b);for(let i=0;i<Math.max(aa.length,bb.length);i++){let ai=aa[i]??0,bi=bb[i]??0;if(ai!==bi)return ai-bi}return 0}function checkBunCompat(required,current){if(!required)return{ok:!0,message:""};let cleaned=required.replace(/^[\^~]/,"").replace(/^>=?\s*/,"");if(compareSemver(current,cleaned)>=0)return{ok:!0,message:`bun ${current} >= ${cleaned}`};return{ok:!1,message:`requires bun ${required}, this process is bun ${current}`}}function getInstalledPath(pkg){try{let npmCmd=process.platform==="win32"?"npm.cmd":"npm",r=Bun.spawnSync([npmCmd,"root","-g"],{stdout:"pipe",stderr:"pipe"});if(r.exitCode!==0)return null;return`${r.stdout.toString().trim()}/${pkg}`}catch{return null}}function smokeTestInstalled(pkg){let root=getInstalledPath(pkg);if(!root)return{ok:!0,step:"(skipped, install root unknown)"};let cli=`${root}/dist/cli.js`,run=(args,step,timeoutMs)=>{try{let runtime=process.platform==="win32"?"bun.exe":"bun",r=Bun.spawnSync([runtime,cli,...args],{stdout:"pipe",stderr:"pipe",timeout:timeoutMs});if(r.exitCode===0)return{ok:!0,step};return{ok:!1,step,detail:r.stderr.toString().slice(0,300)||`exit ${r.exitCode}`}}catch(err){return{ok:!1,step,detail:String(err)}}},v=run(["--version"],"vibe --version",1e4);if(!v.ok)return v;let i=run(["info"],"vibe info",15000);if(!i.ok)return i;let p=run(["plugin","list","--json"],"vibe plugin list",30000);if(!p.ok)return p;return{ok:!0,step:"all checks passed"}}async function maybeAutoRestart(name){try{let sm=new ServiceManager,status=await sm.getStatus(name);if(!status||status.status!=="running")return{kind:"not-running"};let agentUrl=`http://localhost:${status.port}`,apiKey;try{apiKey=await resolveApiKey(agentUrl)}catch{}let headers={};if(apiKey)headers["x-agent-api-key"]=apiKey;let POLL_MS=1000,MAX_MS=60000,started=Date.now();while(Date.now()-started<MAX_MS){try{let res=await fetch(`${agentUrl}/api/profiles/${encodeURIComponent(name)}/stats/inflight`,{headers,signal:AbortSignal.timeout(2000)});if(res.ok){let body=await res.json();if(typeof body.inflight==="number"&&body.inflight===0){let cfg=status.config;return await sm.restart(name,cfg),{kind:"restarted"}}}}catch{}await new Promise((r)=>setTimeout(r,POLL_MS))}return{kind:"still-busy"}}catch(err){return{kind:"error",message:err instanceof Error?errMsg(err):String(err)}}}function register8(program){program.command("update").description("Check for and install VibeControls agent updates").option("--check","Only check for updates without installing",!1).option("--allow-incompatible","Override engines.bun compatibility check (use with care)",!1).option("--no-restart","Skip the post-install idle-aware restart of any running agent").option("-n, --name <name>","Agent profile name to restart after update","default").option("--json","Emit JSON").action(async function(opts){let merged={...program.opts(),...opts};try{if(!merged.json)header("VibeControls Agent Update"),blank();let metadata;try{metadata=await getPackageMetadata()}catch{fail("Could not read package metadata.");return}if(!merged.json)info(`${icons.info} Checking for updates...`),blank();let latestVersion;try{let result=Bun.spawnSync([process.platform==="win32"?"npm.cmd":"npm","view",metadata.name,"version",`--registry=${metadata.registry}`],{stdout:"pipe",stderr:"pipe"});if(result.exitCode!==0)throw Error("npm view failed");latestVersion=result.stdout.toString().trim()}catch{fail("Could not check for updates. Ensure you have internet connectivity and npm is available.");return}if(!merged.json)kv("Package",colors.bold(metadata.name)),kv("Registry",colors.bold(metadata.registry)),kv("Current version",colors.bold(metadata.version)),kv("Latest version",colors.bold(latestVersion)),blank();if(metadata.version===latestVersion){if(maybePrintJson(merged,{ok:!0,current:metadata.version,latest:latestVersion,upToDate:!0}))return;success(`${icons.success} You are running the latest version.`);return}if(opts.check){if(maybePrintJson(merged,{ok:!0,current:metadata.version,latest:latestVersion,upToDate:!1}))return;warn(`${icons.warning} A new version is available: ${colors.green(latestVersion)}`),info(`${icons.info} Run ${colors.bold("vibe update")} to install the update.`);return}let remoteManifest=await fetchRemoteManifest(metadata.name,latestVersion,metadata.registry);if(!remoteManifest)warn(`${icons.warning} Could not fetch remote manifest; skipping engine compat check.`);else{let bunVersion=typeof Bun<"u"?Bun.version:"0.0.0",compat=checkBunCompat(remoteManifest.engines?.bun,bunVersion);if(!compat.ok){if(!opts.allowIncompatible){fail(`${icons.error} Refusing to upgrade: ${compat.message}. Pass --allow-incompatible to override.`);return}warn(`${icons.warning} Engine mismatch (${compat.message}); proceeding due to --allow-incompatible.`)}else kv("Engine check",colors.bold(compat.message))}let installRoot=getInstalledPath(metadata.name),previousVersion=metadata.version;info(`${icons.info} Updating to ${colors.bold(latestVersion)}...`),blank();try{if(Bun.spawnSync([process.platform==="win32"?"npm.cmd":"npm","install","-g",`${metadata.name}@${latestVersion}`,`--registry=${metadata.registry}`],{stdout:"inherit",stderr:"inherit"}).exitCode!==0)throw Error("install failed")}catch{fail(`Failed to install update. Try running with sudo: ${colors.bold(`sudo npm install -g ${metadata.name}@${latestVersion} --registry=${metadata.registry}`)}`);return}let smoke=smokeTestInstalled(metadata.name);if(!smoke.ok){if(warn(`${icons.warning} Post-install smoke test failed at "${smoke.step}". Rolling back to ${previousVersion}\u2026`),smoke.detail)warn(`${icons.warning} Details: ${smoke.detail}`);try{if(Bun.spawnSync([process.platform==="win32"?"npm.cmd":"npm","install","-g",`${metadata.name}@${previousVersion}`,`--registry=${metadata.registry}`],{stdout:"inherit",stderr:"inherit"}).exitCode!==0)throw Error("rollback npm install failed");warn(`${icons.warning} Rolled back to ${previousVersion}. Investigate the new version before retrying.`)}catch{fail(`${icons.error} Rollback failed. Manually run: ${colors.bold(`npm install -g ${metadata.name}@${previousVersion}`)}`)}return}let shouldAutoRestart=opts.restart!==!1,restartOutcome={kind:"skipped"};if(shouldAutoRestart){if(!merged.json)blank(),info(`${icons.info} Waiting for agent ${colors.bold(opts.name)} to become idle before restart\u2026`);if(restartOutcome=await maybeAutoRestart(opts.name),!merged.json)switch(restartOutcome.kind){case"restarted":success(`${icons.success} Restarted agent ${colors.bold(opts.name)} on the new version.`);break;case"not-running":info(`${icons.info} No running agent for profile ${colors.bold(opts.name)}; nothing to restart.`);break;case"still-busy":warn(`${icons.warning} Agent still serving requests after 60s \u2014 run ${colors.bold("vibe restart")} when it's quiet.`);break;case"error":warn(`${icons.warning} Auto-restart failed: ${restartOutcome.message}. Run ${colors.bold("vibe restart")} manually.`);break}}if(maybePrintJson(merged,{ok:!0,current:latestVersion,previous:previousVersion,latest:latestVersion,restart:restartOutcome.kind,...restartOutcome.kind==="error"?{restartError:restartOutcome.message}:{}}))return;if(blank(),success(`${icons.success} Updated to ${colors.bold(latestVersion)} (smoke: ${smoke.step}).`),installRoot)info(`${icons.info} Installed at ${installRoot}.`);if(!shouldAutoRestart)info(`${icons.info} --no-restart set \u2014 restart running agents manually for the update to take effect.`)}catch(err){let message=err instanceof Error?errMsg(err):String(err);if(merged.json){maybePrintJson(merged,{ok:!1,error:message});return}fail(`Update failed: ${message}`)}}),program.command("rollback").description("Roll the global agent install back to a specific version").argument("<version>","Target CalVer version (e.g. 2026.428.3)").action(async(version)=>{try{header("VibeControls Agent Rollback");let metadata=await getPackageMetadata();if(kv("Package",colors.bold(metadata.name)),kv("Current version",colors.bold(metadata.version)),kv("Target version",colors.bold(version)),blank(),info(`${icons.info} Rolling back\u2026`),Bun.spawnSync([process.platform==="win32"?"npm.cmd":"npm","install","-g",`${metadata.name}@${version}`,`--registry=${metadata.registry}`],{stdout:"inherit",stderr:"inherit"}).exitCode!==0){fail("Rollback failed.");return}success(`${icons.success} Rolled back to ${colors.bold(version)}.`)}catch(err){fail(`Rollback failed: ${err instanceof Error?errMsg(err):String(err)}`)}})}import{existsSync as existsSync4,mkdirSync,writeFileSync as writeFileSync2,unlinkSync as unlinkSync3,readFileSync as readFileSync3}from"fs";import{join as join5}from"path";import{homedir}from"os";var SAFE_COMPLETION_NAME_RE=/^[A-Za-z0-9][A-Za-z0-9:_-]{0,63}$/,SAFE_COMPLETION_OPTION_RE=/^--[A-Za-z0-9][A-Za-z0-9-]{0,63}$/;function safeCompletionName(name){return SAFE_COMPLETION_NAME_RE.test(name)?name:null}function safeCompletionWords(words){return words.filter((word)=>safeCompletionName(word))}function safeCompletionOptions(options){return options.filter((option)=>SAFE_COMPLETION_OPTION_RE.test(option))}function collectCommands(cmd){return cmd.commands.flatMap((sub)=>{let name=safeCompletionName(sub.name());if(!name)return[];return[{name,description:sub.description()||"",options:sub.options.map((opt)=>({flags:opt.flags,description:opt.description||""})),subcommands:collectCommands(sub)}]})}function topLevelNames(cmds){return safeCompletionWords(cmds.map((c)=>c.name))}function longOptions(cmds,name){let cmd=cmds.find((c)=>c.name===name);if(!cmd)return[];let opts=[];for(let o of cmd.options){let match=o.flags.match(/--([\w-]+)/);if(match)opts.push(`--${match[1]}`)}return safeCompletionOptions(opts)}function generateBash(cmds){let top=topLevelNames(cmds),caseArms=cmds.filter((c)=>c.subcommands.length>0).map((c)=>({name:c.name,subs:safeCompletionWords(c.subcommands.map((s)=>s.name))})).map((g)=>` ${g.name})
5
5
  COMPREPLY=($(compgen -W "${g.subs.join(" ")}" -- "\${cur}"))
6
6
  return 0
@@ -209,7 +209,7 @@ Version: ${dump.agent.version??"n/a"}`}),probes.push({name:"System snapshot",o
209
209
  `).filter(Boolean).length} process(es)`,detail:dump.processes||"(none found)"}),probes}function register13(program){program.command("diagnostics").alias("diag").description("Collect a redacted diagnostic dump for support").option("--agent-url <url>","Agent URL (default http://localhost:3005)","http://localhost:3005").option("--lines <n>","Tail this many log lines","1000").option("--out <path>","Write JSON dump to file").option("--json","Emit JSON to stdout").option("--plain","Force plain text output").action(async function(options){try{let merged={...program.opts(),...options},url=getAgentUrl(merged),profile=encodeURIComponent(resolveProfileName(merged)),linesN=Number.parseInt(merged.lines??"1000",10)||1000;await runMultimode({mode:pickOutputMode(merged),fetchData:async()=>{let[system,agentVersion,health]=await Promise.all([fetchSystem(url,profile),fetchAgentVersion(url,profile),fetchHealth(url)]),cfg=readAgentConfig(),cfgRedacted=redactUnknownSecrets(cfg),logsDir=join9(getVibecontrolsDir(),"logs"),logFile=["default.log","agent.log"].map((n)=>join9(logsDir,n)).find((p)=>existsSync8(p))??join9(logsDir,"default.log"),tail=readLastLines(logFile,linesN),dump={timestamp:new Date().toISOString(),agent:{version:agentVersion,agentUrl:url},system,health,config:cfgRedacted,processes:listProcesses(),logFile,logsTail:tail},probes=buildProbes(dump);return{dump,probes}},plain:(data)=>{header("VibeControls Agent Diagnostics"),blank(),info("Collecting agent state\u2026");let outPath=merged.out?merged.out:join9(mkdtempSync(join9(tmpdir(),"vibe-diag-")),`vibe-diagnostics-${Date.now()}.json`);writeFileSync6(outPath,JSON.stringify(data.dump,null,2),"utf8"),kv("Wrote",colors.bold(outPath)),kv("Log lines",String(data.dump.logsTail.length)),kv("Processes",String(data.dump.processes.split(`
210
210
  `).filter(Boolean).length)),blank(),success("Diagnostics complete. Attach the JSON to your support ticket.")},interactive:async(data)=>{let rows=data.probes.map((p,i)=>({id:`${i}-${p.name}`,label:p.name,hint:p.ok?"ok":"fail",detail:[`${p.ok?colors.green("\u2714 ok"):colors.red("\u2718 fail")} ${colors.bold(p.name)}`,"",p.message,...p.detail?["",p.detail]:[]].join(`
211
211
  `)})),okCount=data.probes.filter((p)=>p.ok).length;await interactiveTable({title:`Vibe Diagnostics \u2014 ${okCount}/${data.probes.length} ok`,rows,footer:"\u2191/\u2193 navigate \xB7 q to quit"})},json:(data)=>({checks:data.probes.map((p)=>({name:p.name,ok:p.ok,message:p.message})),dump:data.dump})})}catch(err){fail(`Diagnostics failed: ${err instanceof Error?errMsg(err):String(err)}`)}})}import{existsSync as existsSync10,readFileSync as readFileSync7,readdirSync as readdirSync2,renameSync,rmSync as rmSync2,statSync as statSync2,writeFileSync as writeFileSync7}from"fs";import{join as join11}from"path";import{existsSync as existsSync9,readdirSync,rmSync,statSync}from"fs";import{dirname,join as join10}from"path";var SCOPE="@vibecontrols";function resolveNpmGlobalNodeModulesDir(){let binDir=getOsAdapter().npmGlobalBin();if(!binDir)return null;let posixCandidate=join10(dirname(binDir),"lib","node_modules");if(existsSync9(posixCandidate))return posixCandidate;let winCandidate=join10(dirname(binDir),"node_modules");if(existsSync9(winCandidate))return winCandidate;let dotBinSibling=join10(dirname(binDir),"..","node_modules");if(existsSync9(dotBinSibling))return dotBinSibling;return null}function resolveBunGlobalNodeModulesDir(){let adapter=getOsAdapter(),binDir=adapter.bunGlobalBin();if(binDir){let candidate=join10(dirname(binDir),"node_modules");if(existsSync9(candidate))return candidate;let fallback=join10(adapter.homeDir,".bun","install","global","node_modules");if(existsSync9(fallback))return fallback}return null}function listScopeMembers(nodeModulesDir){let scopeDir=join10(nodeModulesDir,SCOPE);if(!existsSync9(scopeDir))return[];try{return readdirSync(scopeDir).filter((name)=>{if(name.startsWith("."))return!1;try{return statSync(join10(scopeDir,name)).isDirectory()}catch{return!1}})}catch{return[]}}function listGlobalVibecontrolsPlugins(){let out=[],bunRoot=resolveBunGlobalNodeModulesDir();if(bunRoot)for(let name of listScopeMembers(bunRoot))out.push({packageName:`${SCOPE}/${name}`,root:"bun",rootDir:join10(bunRoot,SCOPE)});let npmRoot=resolveNpmGlobalNodeModulesDir();if(npmRoot)for(let name of listScopeMembers(npmRoot))out.push({packageName:`${SCOPE}/${name}`,root:"npm",rootDir:join10(npmRoot,SCOPE)});return out}function uninstallGlobalPlugin(pkg,opts){if(opts.dryRun)return{packageName:pkg.packageName,root:pkg.root,ok:!0,via:"skip"};let adapter=getOsAdapter();if(pkg.root==="bun"){let bunBin=adapter.platform==="win32"?"bun.exe":"bun";try{if(Bun.spawnSync([bunBin,"remove","-g",pkg.packageName],{timeout:60000,stdout:"pipe",stderr:"pipe"}).exitCode===0)return{packageName:pkg.packageName,root:pkg.root,ok:!0,via:"bun"}}catch{}}else{let npmBin=adapter.platform==="win32"?"npm.cmd":"npm";try{if(Bun.spawnSync([npmBin,"uninstall","-g",pkg.packageName],{timeout:120000,stdout:"pipe",stderr:"pipe"}).exitCode===0)return{packageName:pkg.packageName,root:pkg.root,ok:!0,via:"npm"}}catch{}}let dir=join10(pkg.rootDir,pkg.packageName.slice(SCOPE.length+1));try{if(existsSync9(dir))rmSync(dir,{recursive:!0,force:!0});return{packageName:pkg.packageName,root:pkg.root,ok:!0,via:"rm"}}catch(err){return{packageName:pkg.packageName,root:pkg.root,ok:!1,via:"rm",error:err instanceof Error?err.message:String(err)}}}var AGENT_PACKAGE_NAME=`${SCOPE}/agent`;function isAgentSelf(packageName){return packageName===AGENT_PACKAGE_NAME}var VALID_KEEP_FLAGS=new Set(["db","plugins-registry","logs","binaries","subprocs"]);function parseKeepFlags(input){let keep=new Set,unknown=[];if(!input)return{keep,unknown};for(let raw of input.split(",").map((s)=>s.trim()).filter(Boolean))if(VALID_KEEP_FLAGS.has(raw))keep.add(raw);else unknown.push(raw);return{keep,unknown}}var SAFE_PROFILE_RE=/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;function isSafeAgentDir(parent,child){if(!SAFE_PROFILE_RE.test(child))return!1;let full=join11(parent,child);try{return statSync2(full).isDirectory()}catch{return!1}}function listAgentTargets(){let profilesRoot=getVibecontrolsProfilesDir();if(!existsSync10(profilesRoot))return[];return readdirSync2(profilesRoot).filter((id)=>isSafeAgentDir(profilesRoot,id)).map((profile)=>({profile,agentDir:join11(profilesRoot,profile)}))}function currentAgentTarget(){let profile=process.env.VIBECONTROLS_PROFILE||"default";return{profile,agentDir:join11(getVibecontrolsProfilesDir(),profile)}}function parsePluginList(input){if(!input)return[];return input.split(",").map((s)=>s.trim()).filter(Boolean)}function resolveRequestedPlugins(raw){let resolved=[],unknown=[],bundled=[];for(let name of raw){let entry=resolvePluginByShortName(name);if(!entry){unknown.push(name);continue}let r={packageName:entry.packageName,pluginName:entry.pluginName,isCore:!!entry.isCore,raw:name};if(r.isCore)bundled.push(r);else resolved.push(r)}return{resolved,unknown,bundled}}async function killTrackedSubprocs(){return(await import("./subprocess-vks78xmn.js")).killAllTracked()}function killPersistedTunnelForAgent(agentDir,dryRun){let state=readTunnelState(agentDir);if(!state||typeof state.pid!=="number"||state.pid<=0)return{killed:0,skipped:0};let os=getOsAdapter();if(!os.isProcessAlive(state.pid)){if(!dryRun)clearTunnelState(agentDir);return{killed:0,skipped:1}}if(dryRun)return info(` would kill tunnel pid ${state.pid} (${state.provider}) from ${colors.dim(agentDir)}`),{killed:1,skipped:0};let ok=os.killProcessTree(state.pid,"SIGTERM");if(ok&&os.isProcessAlive(state.pid))os.killProcessTree(state.pid,"SIGKILL");return clearTunnelState(agentDir),{killed:ok?1:0,skipped:ok?0:1}}function getBunGlobalDir(){let home=process.env.HOME??process.env.USERPROFILE??"";return join11(home,".bun","install","global")}function cleanBunGlobalManifest(pattern,dryRun){let dir=getBunGlobalDir(),manifestPath=join11(dir,"package.json"),lockPath=join11(dir,"bun.lock");if(!existsSync10(manifestPath))return{droppedCount:0,manifestPath,lockPath};let matcher=typeof pattern==="function"?pattern:(k)=>k===pattern,raw;try{raw=readFileSync7(manifestPath,"utf8")}catch{return{droppedCount:0,manifestPath,lockPath}}let pkg;try{pkg=JSON.parse(raw)}catch{return{droppedCount:0,manifestPath,lockPath}}if(!pkg.dependencies||typeof pkg.dependencies!=="object")return{droppedCount:0,manifestPath,lockPath};let before=Object.keys(pkg.dependencies),after={};for(let k of before)if(!matcher(k))after[k]=pkg.dependencies[k];let droppedCount=before.length-Object.keys(after).length;if(droppedCount===0)return{droppedCount:0,manifestPath,lockPath};if(dryRun)return info(` would drop ${droppedCount} dep(s) from ${colors.dim(manifestPath)} and remove ${colors.dim(lockPath)}`),{droppedCount,manifestPath,lockPath};pkg.dependencies=after;let tmp=`${manifestPath}.${process.pid}.tmp`;if(writeFileSync7(tmp,`${JSON.stringify(pkg,null,2)}
212
- `,{encoding:"utf8"}),renameSync(tmp,manifestPath),existsSync10(lockPath))try{rmSync2(lockPath,{force:!0})}catch{}return{droppedCount,manifestPath,lockPath}}async function rmPathSafely(path,dryRun){if(!existsSync10(path))return;if(dryRun){info(` would remove ${colors.dim(path)}`);return}try{rmSync2(path,{recursive:!0,force:!0})}catch(err){warn(`Failed to remove ${path}: ${err instanceof Error?errMsg(err):String(err)}`)}}async function uninstallExternalPlugin(packageName,dryRun,agentUrl){if(dryRun)return info(` would uninstall plugin ${colors.bold(packageName)}`),!0;if(agentUrl)try{if((await fetch(`${agentUrl}/api/plugins/remove`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({packageName})})).ok)return!0}catch{}try{let bunBin=process.platform==="win32"?"bun.exe":"bun";if(Bun.spawnSync([bunBin,"remove","-g",packageName],{timeout:60000,stdout:"pipe",stderr:"pipe"}).exitCode===0)return!0}catch{}let bunGlobalPkgDir=join11(getBunGlobalDir(),"node_modules",packageName),removedFromDisk=!1;try{if(existsSync10(bunGlobalPkgDir))rmSync2(bunGlobalPkgDir,{recursive:!0,force:!0}),removedFromDisk=!0}catch{}cleanBunGlobalManifest(packageName,!1);try{let{pruneStaleBunBinShims:pruneStaleBunBinShims2}=await import("./prune-stale-shims-kfth5bta.js");pruneStaleBunBinShims2()}catch{}return removedFromDisk||!0}async function callPluginPrereqsUninstall(agentUrl,packageName){try{let res=await fetch(`${agentUrl}/api/plugins/prereqs/uninstall`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({packageName})});if(!res.ok)return{ok:!1,pendingSudo:[]};let data=await res.json();return{ok:!!data.ok,pendingSudo:data.pendingSudo??[]}}catch{return{ok:!1,pendingSudo:[]}}}async function callPluginNuke(agentUrl,packageName,dryRun){try{let res=await fetch(`${agentUrl}/api/plugins/nuke`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(packageName?{packageName,dryRun}:{dryRun})});if(!res.ok)return[];let data=await res.json(),out=[];for(let r of data.results??[]){if(r.error){out.push(`${r.plugin} (failed: ${r.error})`);continue}for(let item of r.reaped??[])out.push(`${r.plugin}: ${item}`)}return out}catch{return[]}}async function nukeAgent(target,opts){header(`Nuking agent: ${target.profile}`),kv("Path",target.agentDir);let agentUrl=null;try{let inst=(await opts.serviceManager.listInstances()).find((i)=>i.name===target.profile);if(inst?.status==="running"){if(agentUrl=`http://localhost:${inst.config?.port??3005}`,(!opts.keep.has("binaries")||!opts.keep.has("subprocs"))&&(opts.nukeAllPlugins||opts.removePlugins.length>0)){let pkgs=opts.nukeAllPlugins?[void 0]:opts.removePlugins.map((p)=>p.packageName);for(let pkg of pkgs){let reaped=await callPluginNuke(agentUrl,pkg,opts.dryRun);for(let r of reaped)if(opts.dryRun)info(` would nuke \u2192 ${r}`);else success(`Plugin nuke \u2192 ${r}`)}}if(opts.dryRun)info(` would stop running agent ${colors.bold(target.profile)}`);else try{await opts.serviceManager.stop(target.profile),success(`Stopped ${colors.bold(target.profile)}`)}catch(err){warn(`Failed to stop ${target.profile}: ${err}`)}}}catch{}if(!opts.dryRun&&!opts.keep.has("subprocs"))try{let{reaped}=await killTrackedSubprocs();if(reaped>0)success(`Reaped ${reaped} tracked subprocess(es)`)}catch{}else if(opts.keep.has("subprocs"))info(" keeping tracked subprocesses (--keep includes subprocs)");if(!opts.keep.has("subprocs"))try{let{killed}=killPersistedTunnelForAgent(target.agentDir,opts.dryRun);if(killed>0&&!opts.dryRun)success(`Killed persisted tunnel subprocess for ${target.profile}`)}catch(err){warn(`Failed to kill tunnel for ${target.profile}: ${err instanceof Error?errMsg(err):String(err)}`)}let pendingSudo=[];if(!opts.keep.has("binaries")){let tracked=listInstalledPrereqs(target.agentDir),byPlugin=new Map;for(let t of tracked){let arr=byPlugin.get(t.pluginPackageName)??[];arr.push(t),byPlugin.set(t.pluginPackageName,arr)}if(byPlugin.size===0)info(" no agent-installed prerequisites tracked");else if(!agentUrl)warn(` agent not running \u2014 cannot call prereqs/uninstall on ${byPlugin.size} plugin(s); rerun with the agent up to clean binaries`);else for(let[pkg,items]of byPlugin){if(opts.dryRun){info(` would call prereqs/uninstall on ${colors.bold(pkg)} (${items.length} item(s))`);continue}let r=await callPluginPrereqsUninstall(agentUrl,pkg);if(r.ok)success(`Uninstalled prereqs for ${pkg}`);else warn(`Plugin ${pkg} did not implement prereqs/uninstall`);for(let ps of r.pendingSudo)pendingSudo.push(ps)}}else info(" keeping installed binaries (--keep includes binaries)");for(let p of opts.removePlugins)if(await uninstallExternalPlugin(p.packageName,opts.dryRun,agentUrl))success(`Removed plugin ${p.packageName}`);else warn(`Failed to remove plugin ${p.packageName}`);if(!opts.keep.has("db"))await rmPathSafely(join11(target.agentDir,"agent-db"),opts.dryRun);else info(" keeping encrypted DB (--keep includes db)");if(!opts.keep.has("plugins-registry"))await rmPathSafely(join11(target.agentDir,"plugins.json"),opts.dryRun),await rmPathSafely(join11(target.agentDir,"prereqs-installed.json"),opts.dryRun);else info(" keeping plugins.json + prereqs-installed.json (--keep includes plugins-registry)");if(!opts.keep.has("logs"))await rmPathSafely(join11(target.agentDir,"logs"),opts.dryRun);else info(" keeping log files (--keep includes logs)");if(opts.removeConfig)await rmPathSafely(join11(target.agentDir,"config.json"),opts.dryRun),success(`Removed config.json for ${target.profile}`);return{pendingSudo}}function register14(program){program.command("nuke").description("Cleanly remove agent state, tracked binaries, and (optionally) plugins/config across one or all agents.").option("--remove-plugins <csv>","Comma-separated plugin names (short or full) to uninstall").option("--remove-config","Also delete config.json").option("--all","Apply to every agent under .boff/vibecontrols/agents/ and wipe all external provider plugins").option("--keep <csv>","Comma-separated list of things to preserve. Valid: db, plugins-registry, logs, binaries, subprocs").option("--dry-run","Print what would happen without doing it").option("-y, --yes","Skip the confirmation prompt").option("--json","Emit JSON").action(async function(opts){let merged={...program.opts(),...opts};try{let targets=opts.all?listAgentTargets():[currentAgentTarget()].filter((t)=>existsSync10(t.agentDir));if(targets.length===0){info("Nothing to nuke \u2014 no agent state directories found.");return}let requestedRaw=parsePluginList(opts.removePlugins),{resolved,unknown,bundled}=resolveRequestedPlugins(requestedRaw);if(unknown.length>0){fail(`Unknown plugin(s): ${unknown.join(", ")} \u2014 try the full @vibecontrols/* package name`);return}if(bundled.length>0)for(let b of bundled)warn(`Skipping ${colors.bold(b.packageName)}: bundled with the agent (uninstall the agent itself with \`npm uninstall -g @vibecontrols/agent\`)`);let{keep,unknown:badKeep}=parseKeepFlags(opts.keep);if(badKeep.length>0){fail(`Unknown --keep value(s): ${badKeep.join(", ")} \u2014 valid: db, plugins-registry, logs, binaries, subprocs`);return}if(header(opts.dryRun?"Dry-run nuke":"Nuke"),info(`Agents: ${targets.map((t)=>t.profile).join(", ")}`),info(`Plugins: ${resolved.map((p)=>p.packageName).join(", ")||"(none)"}`),info(`Remove config: ${opts.removeConfig?"yes":"no"}`),info(`Keep: ${keep.size>0?[...keep].sort().join(", "):"(nothing)"}`),info(`Wipe bun-global @vibecontrols/*: ${opts.all?"yes":"no"}`),blank(),!opts.yes&&!opts.dryRun){if(!await promptConfirm(colors.bold("This will permanently delete the listed state. Continue?"))){info("Cancelled.");return}blank()}let serviceManager=new ServiceManager,allPendingSudo=[];for(let target of targets){let{pendingSudo}=await nukeAgent(target,{serviceManager,removePlugins:resolved,nukeAllPlugins:!!opts.all,removeConfig:!!opts.removeConfig,keep,dryRun:!!opts.dryRun});for(let ps of pendingSudo)allPendingSudo.push(ps);blank()}let allRemovals=[],secretsResult=null;if(opts.all){try{if(opts.dryRun){let preview=await previewClearAllSecrets();secretsResult=preview,info(` would clear ${preview.count} secret(s) from ${preview.backend}`)}else{let preview=await previewClearAllSecrets(),proceed=!0;if(preview.count>0&&!opts.yes)proceed=await promptConfirm(colors.bold(`About to remove ${preview.count} secret(s) from ${preview.backend}. Continue?`));if(proceed)if(secretsResult=await clearAllSecrets(),secretsResult.count>0)success(`Cleared ${secretsResult.count} secret(s) from ${secretsResult.backend}`);else info(" no secrets to clear");else info(" skipped clearing secrets (user declined)"),secretsResult={count:0,backend:"none",names:[]}}}catch(err){warn(`Failed to clear secrets: ${err instanceof Error?errMsg(err):String(err)}`)}let discovered=listGlobalVibecontrolsPlugins().filter((p)=>!isAgentSelf(p.packageName));if(discovered.length===0)info(" no @vibecontrols/* packages found in bun-global / npm-global");else{info(` found ${discovered.length} @vibecontrols/* package(s) in global roots`);for(let pkg of discovered){let r=uninstallGlobalPlugin(pkg,{dryRun:!!opts.dryRun});if(allRemovals.push(r),opts.dryRun)info(` would uninstall ${colors.bold(pkg.packageName)} (${pkg.root}-global)`);else if(r.ok)success(`Removed ${pkg.packageName} (${pkg.root}-global, via ${r.via})`);else warn(`Failed to remove ${pkg.packageName} (${pkg.root}-global): ${r.error??"unknown"}`)}}let{droppedCount,manifestPath}=cleanBunGlobalManifest((k)=>k.startsWith("@vibecontrols/")&&k!==AGENT_PACKAGE_NAME,!!opts.dryRun);if(droppedCount>0&&!opts.dryRun)success(`Dropped ${droppedCount} @vibecontrols/* dep(s) from ${manifestPath}`);await rmPathSafely(join11(getVibecontrolsProductDir(),"agents.json"),!!opts.dryRun),await rmPathSafely(join11(getVibecontrolsProductDir(),".consent.json"),!!opts.dryRun)}if(allPendingSudo.length>0){blank(),warn(`${allPendingSudo.length} command(s) require sudo to fully uninstall:`);for(let ps of allPendingSudo)kv(` ${ps.name}`,ps.command)}if(maybePrintJson(merged,{ok:!0,deleted:targets.map((t)=>t.profile),removedGlobalPackages:allRemovals,clearedSecrets:secretsResult,dryRun:!!opts.dryRun}))return;if(opts.all&&allRemovals.length>0&&!opts.dryRun){let okCount=allRemovals.filter((r)=>r.ok).length;blank(),info(`${icons.info} Uninstalled ${okCount}/${allRemovals.length} global @vibecontrols/* package(s)`)}if(blank(),success(opts.dryRun?"Dry-run complete.":"Nuke complete."),opts.all&&!opts.dryRun)info(`${icons.info} To remove the agent itself: ${colors.bold("npm uninstall -g @vibecontrols/agent")} (or ${colors.bold("bun remove -g @vibecontrols/agent")})`)}catch(err){let message=err instanceof Error?errMsg(err):String(err);if(merged.json){maybePrintJson(merged,{ok:!1,error:message});return}fail(message)}})}import{existsSync as existsSync11}from"fs";import{platform as platform2}from"os";var DEFAULT_AGENT_URL="http://localhost:3005";function gradeBadge(g){if(g==="pass")return colors.green("\u2714 pass");if(g==="warn")return colors.yellow("\u26A0 warn");return colors.red("\u2718 fail")}async function checkAgentReachable(url){try{return await apiGet(url,"/health"),{name:"Agent HTTP reachable",grade:"pass",message:url}}catch(err){return{name:"Agent HTTP reachable",grade:"fail",message:errMsg(err),hint:"Run `vibe start` (or check `vibe status` if it should already be running)."}}}async function checkConfig(){try{let profile="default";try{profile=getVibecontrolsProfile()}catch{}let fromSecrets=await getSecret(`${profile}:static-api-key`),cfg=readAgentConfig();if(!Boolean(fromSecrets||cfg["static-api-key"]||process.env.AGENT_API_KEY))return{name:"Agent config / API key",grade:"warn",message:"No persistent API key set; agent will mint a fresh one each restart.",hint:"Run `vibe config --set static-api-key=true` to persist."};return{name:"Agent config / API key",grade:"pass",message:"config.json present, API key persisted"}}catch(err){return{name:"Agent config / API key",grade:"fail",message:errMsg(err)}}}function checkAgentDir(){let dir=getVibecontrolsDir();if(!existsSync11(dir))return{name:"Agent working directory",grade:"warn",message:`${dir} does not exist (will be created on first start)`};return{name:"Agent working directory",grade:"pass",message:dir}}async function checkGatewayAuth(url,profile){try{if((await apiGet(url,`/api/profiles/${profile}/agent/gateway-auth`))?.configured)return{name:"Gateway OAuth",grade:"pass",message:"configured"};return{name:"Gateway OAuth",grade:"warn",message:"not configured \u2014 agent works locally but won't sync with platform",hint:"Add the agent on the VibeControls platform and paste the credentials."}}catch{return{name:"Gateway OAuth",grade:"warn",message:"could not query agent for gateway-auth state"}}}async function checkPlugins(url,profile){try{let list=await apiGet(url,`/api/profiles/${profile}/plugins`),all=list?.plugins??list??[],failed=all.filter((p)=>p.status==="error"||p.status==="failed");if(failed.length>0)return{name:"Plugin registry",grade:"fail",message:`${failed.length} plugin(s) failed to load`,hint:failed.map((p)=>p.name??p.packageName).join(", ")};return{name:"Plugin registry",grade:"pass",message:`${all.length} plugin(s) loaded cleanly`}}catch{return{name:"Plugin registry",grade:"warn",message:"could not query agent for plugin list"}}}function checkRuntime(){let os=platform2();if(!["linux","darwin","win32"].includes(os))return{name:"OS runtime",grade:"warn",message:`${os} is not officially supported (linux, darwin, win32)`};let bunVersion=typeof Bun<"u"?Bun.version:null;if(!bunVersion)return{name:"OS runtime",grade:"warn",message:`${os} / no Bun runtime detected`};return{name:"OS runtime",grade:"pass",message:`${os} / Bun ${bunVersion}`}}function register15(program){program.command("doctor").description("Run a graded health check across the agent's subsystems").option("--agent-url <url>","Agent URL",DEFAULT_AGENT_URL).option("--profile <name>","Target a specific profile by name").option("--json","Emit machine-readable JSON instead of grading text").option("--plain","Force plain text output").action(async function(options){let merged={...program.opts(),...options},url=getAgentUrl(merged),profile=encodeURIComponent(resolveProfileName(merged)),collected=[];if(await runMultimode({mode:pickOutputMode(merged),fetchData:async()=>{let checks=[];checks.push(checkRuntime()),checks.push(checkAgentDir()),checks.push(await checkConfig()),checks.push(await checkAgentReachable(url)),checks.push(await checkGatewayAuth(url,profile)),checks.push(await checkPlugins(url,profile));let registry=getActiveContributorRegistry();for(let contributor of registry.getDoctorChecks())try{let results=await contributor.run();for(let r of results){let grade=r.ok?"pass":r.grade??"fail";checks.push({name:r.name,grade,message:r.message,hint:r.hint})}}catch(err){checks.push({name:`${contributor.source}: doctor contributor`,grade:"warn",message:`contributor threw: ${err.message}`})}return collected=checks,checks},plain:(checks)=>{header("Vibe Doctor"),blank();for(let c of checks)if(console.log(`${gradeBadge(c.grade)} ${colors.bold(c.name)}`),console.log(` ${c.message}`),c.hint)console.log(` ${colors.dim("\u2192 "+c.hint)}`);blank();let failed=checks.filter((c)=>c.grade==="fail").length,warned=checks.filter((c)=>c.grade==="warn").length,passed=checks.filter((c)=>c.grade==="pass").length;if(info(`${passed} pass, ${warned} warn, ${failed} fail`),failed>0)fail("Doctor found problems. See hints above."),process.exitCode=1;else if(warned>0)info("Doctor finished with warnings.");else success("All checks pass.")},interactive:async(checks)=>{let rows=checks.map((c,i)=>{let detailLines=[`${gradeBadge(c.grade)} ${colors.bold(c.name)}`,"",c.message];if(c.hint)detailLines.push(""),detailLines.push(colors.dim("\u2192 "+c.hint));return{id:`${i}-${c.name}`,label:c.name,hint:c.grade==="pass"?"ok":c.grade,detail:detailLines.join(`
212
+ `,{encoding:"utf8"}),renameSync(tmp,manifestPath),existsSync10(lockPath))try{rmSync2(lockPath,{force:!0})}catch{}return{droppedCount,manifestPath,lockPath}}async function rmPathSafely(path,dryRun){if(!existsSync10(path))return;if(dryRun){info(` would remove ${colors.dim(path)}`);return}try{rmSync2(path,{recursive:!0,force:!0})}catch(err){warn(`Failed to remove ${path}: ${err instanceof Error?errMsg(err):String(err)}`)}}async function uninstallExternalPlugin(packageName,dryRun,agentUrl){if(dryRun)return info(` would uninstall plugin ${colors.bold(packageName)}`),!0;if(agentUrl)try{if((await fetch(`${agentUrl}/api/plugins/remove`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({packageName})})).ok)return!0}catch{}try{let bunBin=process.platform==="win32"?"bun.exe":"bun";if(Bun.spawnSync([bunBin,"remove","-g",packageName],{timeout:60000,stdout:"pipe",stderr:"pipe"}).exitCode===0)return!0}catch{}let bunGlobalPkgDir=join11(getBunGlobalDir(),"node_modules",packageName),removedFromDisk=!1;try{if(existsSync10(bunGlobalPkgDir))rmSync2(bunGlobalPkgDir,{recursive:!0,force:!0}),removedFromDisk=!0}catch{}cleanBunGlobalManifest(packageName,!1);try{let{pruneStaleBunBinShims:pruneStaleBunBinShims2}=await import("./prune-stale-shims-kfth5bta.js");pruneStaleBunBinShims2()}catch{}return removedFromDisk||!0}async function callPluginPrereqsUninstall(agentUrl,packageName){try{let res=await fetch(`${agentUrl}/api/plugins/prereqs/uninstall`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({packageName})});if(!res.ok)return{ok:!1,pendingSudo:[]};let data=await res.json();return{ok:!!data.ok,pendingSudo:data.pendingSudo??[]}}catch{return{ok:!1,pendingSudo:[]}}}async function callPluginNuke(agentUrl,packageName,dryRun){try{let res=await fetch(`${agentUrl}/api/plugins/nuke`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(packageName?{packageName,dryRun}:{dryRun})});if(!res.ok)return[];let data=await res.json(),out=[];for(let r of data.results??[]){if(r.error){out.push(`${r.plugin} (failed: ${r.error})`);continue}for(let item of r.reaped??[])out.push(`${r.plugin}: ${item}`)}return out}catch{return[]}}async function nukeAgent(target,opts){header(`Nuking agent: ${target.profile}`),kv("Path",target.agentDir);let agentUrl=null;try{let inst=(await opts.serviceManager.listInstances()).find((i)=>i.name===target.profile);if(inst?.status==="running"){if(agentUrl=`http://localhost:${inst.config?.port??3005}`,(!opts.keep.has("binaries")||!opts.keep.has("subprocs"))&&(opts.nukeAllPlugins||opts.removePlugins.length>0)){let pkgs=opts.nukeAllPlugins?[void 0]:opts.removePlugins.map((p)=>p.packageName);for(let pkg of pkgs){let reaped=await callPluginNuke(agentUrl,pkg,opts.dryRun);for(let r of reaped)if(opts.dryRun)info(` would nuke \u2192 ${r}`);else success(`Plugin nuke \u2192 ${r}`)}}if(opts.dryRun)info(` would stop running agent ${colors.bold(target.profile)}`);else try{await opts.serviceManager.stop(target.profile),success(`Stopped ${colors.bold(target.profile)}`)}catch(err){warn(`Failed to stop ${target.profile}: ${err}`)}}}catch{}if(!opts.dryRun&&!opts.keep.has("subprocs"))try{let{reaped}=await killTrackedSubprocs();if(reaped>0)success(`Reaped ${reaped} tracked subprocess(es)`)}catch{}else if(opts.keep.has("subprocs"))info(" keeping tracked subprocesses (--keep includes subprocs)");if(!opts.keep.has("subprocs"))try{let{killed}=killPersistedTunnelForAgent(target.agentDir,opts.dryRun);if(killed>0&&!opts.dryRun)success(`Killed persisted tunnel subprocess for ${target.profile}`)}catch(err){warn(`Failed to kill tunnel for ${target.profile}: ${err instanceof Error?errMsg(err):String(err)}`)}let pendingSudo=[];if(!opts.keep.has("binaries")){let tracked=listInstalledPrereqs(target.agentDir),byPlugin=new Map;for(let t of tracked){let arr=byPlugin.get(t.pluginPackageName)??[];arr.push(t),byPlugin.set(t.pluginPackageName,arr)}if(byPlugin.size===0)info(" no agent-installed prerequisites tracked");else if(!agentUrl)warn(` agent not running \u2014 cannot call prereqs/uninstall on ${byPlugin.size} plugin(s); rerun with the agent up to clean binaries`);else for(let[pkg,items]of byPlugin){if(opts.dryRun){info(` would call prereqs/uninstall on ${colors.bold(pkg)} (${items.length} item(s))`);continue}let r=await callPluginPrereqsUninstall(agentUrl,pkg);if(r.ok)success(`Uninstalled prereqs for ${pkg}`);else warn(`Plugin ${pkg} did not implement prereqs/uninstall`);for(let ps of r.pendingSudo)pendingSudo.push(ps)}}else info(" keeping installed binaries (--keep includes binaries)");for(let p of opts.removePlugins)if(await uninstallExternalPlugin(p.packageName,opts.dryRun,agentUrl))success(`Removed plugin ${p.packageName}`);else warn(`Failed to remove plugin ${p.packageName}`);if(opts.nukeAllPlugins||!opts.keep.has("plugins-registry"))await rmPathSafely(join11(target.agentDir,"agent-plugins"),opts.dryRun);else info(" keeping local agent-plugins store (--keep includes plugins-registry)");if(!opts.keep.has("db"))await rmPathSafely(join11(target.agentDir,"agent-db"),opts.dryRun);else info(" keeping encrypted DB (--keep includes db)");if(!opts.keep.has("plugins-registry"))await rmPathSafely(join11(target.agentDir,"plugins.json"),opts.dryRun),await rmPathSafely(join11(target.agentDir,"prereqs-installed.json"),opts.dryRun);else info(" keeping plugins.json + prereqs-installed.json (--keep includes plugins-registry)");if(!opts.keep.has("logs"))await rmPathSafely(join11(target.agentDir,"logs"),opts.dryRun);else info(" keeping log files (--keep includes logs)");if(opts.removeConfig)await rmPathSafely(join11(target.agentDir,"config.json"),opts.dryRun),success(`Removed config.json for ${target.profile}`);return{pendingSudo}}function register14(program){program.command("nuke").description("Cleanly remove agent state, tracked binaries, and (optionally) plugins/config across one or all agents.").option("--remove-plugins <csv>","Comma-separated plugin names (short or full) to uninstall").option("--remove-config","Also delete config.json").option("--all","Apply to every agent under .boff/vibecontrols/agents/ and wipe all external provider plugins").option("--keep <csv>","Comma-separated list of things to preserve. Valid: db, plugins-registry, logs, binaries, subprocs").option("--dry-run","Print what would happen without doing it").option("-y, --yes","Skip the confirmation prompt").option("--json","Emit JSON").action(async function(opts){let merged={...program.opts(),...opts};try{let targets=opts.all?listAgentTargets():[currentAgentTarget()].filter((t)=>existsSync10(t.agentDir));if(targets.length===0){info("Nothing to nuke \u2014 no agent state directories found.");return}let requestedRaw=parsePluginList(opts.removePlugins),{resolved,unknown,bundled}=resolveRequestedPlugins(requestedRaw);if(unknown.length>0){fail(`Unknown plugin(s): ${unknown.join(", ")} \u2014 try the full @vibecontrols/* package name`);return}if(bundled.length>0)for(let b of bundled)warn(`Skipping ${colors.bold(b.packageName)}: bundled with the agent (uninstall the agent itself with \`npm uninstall -g @vibecontrols/agent\`)`);let{keep,unknown:badKeep}=parseKeepFlags(opts.keep);if(badKeep.length>0){fail(`Unknown --keep value(s): ${badKeep.join(", ")} \u2014 valid: db, plugins-registry, logs, binaries, subprocs`);return}if(header(opts.dryRun?"Dry-run nuke":"Nuke"),info(`Agents: ${targets.map((t)=>t.profile).join(", ")}`),info(`Plugins: ${resolved.map((p)=>p.packageName).join(", ")||"(none)"}`),info(`Remove config: ${opts.removeConfig?"yes":"no"}`),info(`Keep: ${keep.size>0?[...keep].sort().join(", "):"(nothing)"}`),info(`Wipe bun-global @vibecontrols/*: ${opts.all?"yes":"no"}`),blank(),!opts.yes&&!opts.dryRun){if(!await promptConfirm(colors.bold("This will permanently delete the listed state. Continue?"))){info("Cancelled.");return}blank()}let serviceManager=new ServiceManager,allPendingSudo=[];for(let target of targets){let{pendingSudo}=await nukeAgent(target,{serviceManager,removePlugins:resolved,nukeAllPlugins:!!opts.all,removeConfig:!!opts.removeConfig,keep,dryRun:!!opts.dryRun});for(let ps of pendingSudo)allPendingSudo.push(ps);blank()}let allRemovals=[],secretsResult=null;if(opts.all){try{if(opts.dryRun){let preview=await previewClearAllSecrets();secretsResult=preview,info(` would clear ${preview.count} secret(s) from ${preview.backend}`)}else{let preview=await previewClearAllSecrets(),proceed=!0;if(preview.count>0&&!opts.yes)proceed=await promptConfirm(colors.bold(`About to remove ${preview.count} secret(s) from ${preview.backend}. Continue?`));if(proceed)if(secretsResult=await clearAllSecrets(),secretsResult.count>0)success(`Cleared ${secretsResult.count} secret(s) from ${secretsResult.backend}`);else info(" no secrets to clear");else info(" skipped clearing secrets (user declined)"),secretsResult={count:0,backend:"none",names:[]}}}catch(err){warn(`Failed to clear secrets: ${err instanceof Error?errMsg(err):String(err)}`)}let discovered=listGlobalVibecontrolsPlugins().filter((p)=>!isAgentSelf(p.packageName));if(discovered.length===0)info(" no @vibecontrols/* packages found in bun-global / npm-global");else{info(` found ${discovered.length} @vibecontrols/* package(s) in global roots`);for(let pkg of discovered){let r=uninstallGlobalPlugin(pkg,{dryRun:!!opts.dryRun});if(allRemovals.push(r),opts.dryRun)info(` would uninstall ${colors.bold(pkg.packageName)} (${pkg.root}-global)`);else if(r.ok)success(`Removed ${pkg.packageName} (${pkg.root}-global, via ${r.via})`);else warn(`Failed to remove ${pkg.packageName} (${pkg.root}-global): ${r.error??"unknown"}`)}}let{droppedCount,manifestPath}=cleanBunGlobalManifest((k)=>k.startsWith("@vibecontrols/")&&k!==AGENT_PACKAGE_NAME,!!opts.dryRun);if(droppedCount>0&&!opts.dryRun)success(`Dropped ${droppedCount} @vibecontrols/* dep(s) from ${manifestPath}`);await rmPathSafely(join11(getVibecontrolsProductDir(),"agents.json"),!!opts.dryRun),await rmPathSafely(join11(getVibecontrolsProductDir(),".consent.json"),!!opts.dryRun)}if(allPendingSudo.length>0){blank(),warn(`${allPendingSudo.length} command(s) require sudo to fully uninstall:`);for(let ps of allPendingSudo)kv(` ${ps.name}`,ps.command)}if(maybePrintJson(merged,{ok:!0,deleted:targets.map((t)=>t.profile),removedGlobalPackages:allRemovals,clearedSecrets:secretsResult,dryRun:!!opts.dryRun}))return;if(opts.all&&allRemovals.length>0&&!opts.dryRun){let okCount=allRemovals.filter((r)=>r.ok).length;blank(),info(`${icons.info} Uninstalled ${okCount}/${allRemovals.length} global @vibecontrols/* package(s)`)}if(blank(),success(opts.dryRun?"Dry-run complete.":"Nuke complete."),opts.all&&!opts.dryRun)info(`${icons.info} To remove the agent itself: ${colors.bold("npm uninstall -g @vibecontrols/agent")} (or ${colors.bold("bun remove -g @vibecontrols/agent")})`)}catch(err){let message=err instanceof Error?errMsg(err):String(err);if(merged.json){maybePrintJson(merged,{ok:!1,error:message});return}fail(message)}})}import{existsSync as existsSync11}from"fs";import{platform as platform2}from"os";var DEFAULT_AGENT_URL="http://localhost:3005";function gradeBadge(g){if(g==="pass")return colors.green("\u2714 pass");if(g==="warn")return colors.yellow("\u26A0 warn");return colors.red("\u2718 fail")}async function checkAgentReachable(url){try{return await apiGet(url,"/health"),{name:"Agent HTTP reachable",grade:"pass",message:url}}catch(err){return{name:"Agent HTTP reachable",grade:"fail",message:errMsg(err),hint:"Run `vibe start` (or check `vibe status` if it should already be running)."}}}async function checkConfig(){try{let profile="default";try{profile=getVibecontrolsProfile()}catch{}let fromSecrets=await getSecret(`${profile}:static-api-key`),cfg=readAgentConfig();if(!Boolean(fromSecrets||cfg["static-api-key"]||process.env.AGENT_API_KEY))return{name:"Agent config / API key",grade:"warn",message:"No persistent API key set; agent will mint a fresh one each restart.",hint:"Run `vibe config --set static-api-key=true` to persist."};return{name:"Agent config / API key",grade:"pass",message:"config.json present, API key persisted"}}catch(err){return{name:"Agent config / API key",grade:"fail",message:errMsg(err)}}}function checkAgentDir(){let dir=getVibecontrolsDir();if(!existsSync11(dir))return{name:"Agent working directory",grade:"warn",message:`${dir} does not exist (will be created on first start)`};return{name:"Agent working directory",grade:"pass",message:dir}}async function checkGatewayAuth(url,profile){try{if((await apiGet(url,`/api/profiles/${profile}/agent/gateway-auth`))?.configured)return{name:"Gateway OAuth",grade:"pass",message:"configured"};return{name:"Gateway OAuth",grade:"warn",message:"not configured \u2014 agent works locally but won't sync with platform",hint:"Add the agent on the VibeControls platform and paste the credentials."}}catch{return{name:"Gateway OAuth",grade:"warn",message:"could not query agent for gateway-auth state"}}}async function checkPlugins(url,profile){try{let list=await apiGet(url,`/api/profiles/${profile}/plugins`),all=list?.plugins??list??[],failed=all.filter((p)=>p.status==="error"||p.status==="failed");if(failed.length>0)return{name:"Plugin registry",grade:"fail",message:`${failed.length} plugin(s) failed to load`,hint:failed.map((p)=>p.name??p.packageName).join(", ")};return{name:"Plugin registry",grade:"pass",message:`${all.length} plugin(s) loaded cleanly`}}catch{return{name:"Plugin registry",grade:"warn",message:"could not query agent for plugin list"}}}function checkRuntime(){let os=platform2();if(!["linux","darwin","win32"].includes(os))return{name:"OS runtime",grade:"warn",message:`${os} is not officially supported (linux, darwin, win32)`};let bunVersion=typeof Bun<"u"?Bun.version:null;if(!bunVersion)return{name:"OS runtime",grade:"warn",message:`${os} / no Bun runtime detected`};return{name:"OS runtime",grade:"pass",message:`${os} / Bun ${bunVersion}`}}function register15(program){program.command("doctor").description("Run a graded health check across the agent's subsystems").option("--agent-url <url>","Agent URL",DEFAULT_AGENT_URL).option("--profile <name>","Target a specific profile by name").option("--json","Emit machine-readable JSON instead of grading text").option("--plain","Force plain text output").action(async function(options){let merged={...program.opts(),...options},url=getAgentUrl(merged),profile=encodeURIComponent(resolveProfileName(merged)),collected=[];if(await runMultimode({mode:pickOutputMode(merged),fetchData:async()=>{let checks=[];checks.push(checkRuntime()),checks.push(checkAgentDir()),checks.push(await checkConfig()),checks.push(await checkAgentReachable(url)),checks.push(await checkGatewayAuth(url,profile)),checks.push(await checkPlugins(url,profile));let registry=getActiveContributorRegistry();for(let contributor of registry.getDoctorChecks())try{let results=await contributor.run();for(let r of results){let grade=r.ok?"pass":r.grade??"fail";checks.push({name:r.name,grade,message:r.message,hint:r.hint})}}catch(err){checks.push({name:`${contributor.source}: doctor contributor`,grade:"warn",message:`contributor threw: ${err.message}`})}return collected=checks,checks},plain:(checks)=>{header("Vibe Doctor"),blank();for(let c of checks)if(console.log(`${gradeBadge(c.grade)} ${colors.bold(c.name)}`),console.log(` ${c.message}`),c.hint)console.log(` ${colors.dim("\u2192 "+c.hint)}`);blank();let failed=checks.filter((c)=>c.grade==="fail").length,warned=checks.filter((c)=>c.grade==="warn").length,passed=checks.filter((c)=>c.grade==="pass").length;if(info(`${passed} pass, ${warned} warn, ${failed} fail`),failed>0)fail("Doctor found problems. See hints above."),process.exitCode=1;else if(warned>0)info("Doctor finished with warnings.");else success("All checks pass.")},interactive:async(checks)=>{let rows=checks.map((c,i)=>{let detailLines=[`${gradeBadge(c.grade)} ${colors.bold(c.name)}`,"",c.message];if(c.hint)detailLines.push(""),detailLines.push(colors.dim("\u2192 "+c.hint));return{id:`${i}-${c.name}`,label:c.name,hint:c.grade==="pass"?"ok":c.grade,detail:detailLines.join(`
213
213
  `)}}),failed=checks.filter((c)=>c.grade==="fail").length,warned=checks.filter((c)=>c.grade==="warn").length,passed=checks.filter((c)=>c.grade==="pass").length;if(await interactiveTable({title:`Vibe Doctor \u2014 ${passed} pass, ${warned} warn, ${failed} fail`,rows,footer:"\u2191/\u2193 navigate \xB7 q to quit"}),failed>0)process.exitCode=1},json:(checks)=>({checks:checks.map((c)=>({name:c.name,ok:c.grade==="pass",grade:c.grade,message:c.message,hint:c.hint??null}))})}),collected.some((c)=>c.grade==="fail"))process.exitCode=1})}var DEFAULT_AGENT_URL2="http://localhost:3005",VALID=new Set(["debug","info","warn","error","silent"]);function register16(program){program.command("log-level [level]").description("Show or update the running agent's log level").option("--agent-url <url>","Agent URL",DEFAULT_AGENT_URL2).option("--profile <name>","Target a specific profile by name").option("--json","Emit JSON").option("--plain","Force plain text output").action(async function(level,options){try{let merged={...program.opts(),...options},url=getAgentUrl(merged),profile=encodeURIComponent(resolveProfileName(merged));if(!level){await runMultimode({mode:pickOutputMode(merged),fetchData:async()=>{return{level:(await apiGet(url,`/api/profiles/${profile}/agent/log-level`))?.level??"(unknown)"}},plain:(data)=>{header("Agent Log Level"),kv("Current",data.level)},interactive:async(data)=>{await interactiveDetail({title:"Agent Log Level",body:`Current: ${data.level}`,footer:"press q to exit"})}});return}let target=level.toLowerCase();if(!VALID.has(target)){if(!maybePrintJson(merged,{ok:!1,error:`Invalid log level: ${level}`,valid:[...VALID]}))fail(`Invalid log level: ${level}. Use one of: ${[...VALID].join(", ")}`);return}if(await apiPost(url,`/api/profiles/${profile}/agent/log-level`,{level:target}),maybePrintJson(merged,{ok:!0,level:target}))return;success(`Log level set to ${target}`)}catch(err){if(maybePrintJson({json:!!options.json},{ok:!1,error:errMsg(err)}))return;fail(errMsg(err))}})}import{existsSync as existsSync12,readdirSync as readdirSync3,statSync as statSync3,unlinkSync as unlinkSync5}from"fs";import{join as join12}from"path";function listAgentDirs(){let root=getVibecontrolsProfilesDir();if(!existsSync12(root))return[];return readdirSync3(root).map((n)=>join12(root,n)).filter((p)=>statSync3(p).isDirectory())}function sweepLogs(agentDir,keepDays,dryRun){let logsDir=join12(agentDir,"logs");if(!existsSync12(logsDir))return{count:0,bytes:0};let cutoff=Date.now()-keepDays*86400000,count=0,bytes=0;for(let f of readdirSync3(logsDir)){let p=join12(logsDir,f),s=statSync3(p);if(!s.isFile())continue;if(s.mtimeMs>cutoff)continue;if(count+=1,bytes+=s.size,!dryRun)try{unlinkSync5(p)}catch{}}return{count,bytes}}function sweepTunnelState(agentDir,dryRun){let state=readTunnelState(agentDir);if(!state)return 0;if(isProcessAlive(state.pid))return 0;if(!dryRun)clearTunnelState(agentDir);return 1}function register17(program){program.command("gc").description("Garbage-collect stale agent state (tunnel files, old logs)").option("--keep-days <n>","Keep log files newer than N days","14").option("--dry-run","Show what would be removed without changing anything",!1).option("--json","Emit JSON").action(function(opts){let merged={...program.opts(),...opts};try{let keepDays=Number(opts.keepDays);if(!Number.isFinite(keepDays)||keepDays<0){if(merged.json){maybePrintJson(merged,{ok:!1,error:`Invalid --keep-days: ${opts.keepDays}`});return}fail(`Invalid --keep-days: ${opts.keepDays}`);return}let dryRun=Boolean(opts.dryRun);if(!merged.json)header(dryRun?"vibe gc (dry-run)":"vibe gc"),blank();let stats={staleTunnelStates:0,oldLogFiles:0,bytesFreed:0},removedDirs=[];for(let agentDir of listAgentDirs()){let t=sweepTunnelState(agentDir,dryRun);stats.staleTunnelStates+=t;let logs=sweepLogs(agentDir,keepDays,dryRun);if(stats.oldLogFiles+=logs.count,stats.bytesFreed+=logs.bytes,t>0||logs.count>0)removedDirs.push(agentDir)}if(maybePrintJson(merged,{ok:!0,removed:removedDirs,staleTunnelStates:stats.staleTunnelStates,oldLogFiles:stats.oldLogFiles,freedBytes:stats.bytesFreed,dryRun}))return;if(kv("Stale tunnel state files",String(stats.staleTunnelStates)),kv("Old log files",String(stats.oldLogFiles)),kv("Bytes freed",`${(stats.bytesFreed/1048576).toFixed(2)} MiB`),blank(),dryRun)info(colors.dim("dry-run: no files were removed"));else success("gc complete")}catch(err){if(merged.json){maybePrintJson(merged,{ok:!1,error:errMsg(err)});return}fail(errMsg(err))}})}function parseSshTarget(input){let m=/^(?:ssh:\/\/)?(?:([^@\s]+)@)?([^:/\s]+)(?::(\d+))?$/.exec(input.trim());if(!m)throw Error(`Could not parse SSH target: ${input}`);let hasUser=Boolean(m[1]),hasPort=Boolean(m[3]);if(!hasUser&&!hasPort&&!input.includes(":"))return{alias:m[2],host:m[2]};return{user:m[1],host:m[2],port:m[3]?Number(m[3]):void 0}}class SSHTransportImpl{mode="ssh";id;target;constructor(target){if(this.target=target,target.alias)this.id=`ssh://${target.alias}`;else{let userPart=target.user?`${target.user}@`:"",portPart=target.port?`:${target.port}`:"";this.id=`ssh://${userPart}${target.host}${portPart}`}}sshArgv(){let args=["ssh","-o","BatchMode=yes","-o","StrictHostKeyChecking=accept-new","-o","ServerAliveInterval=30"];if(this.target.identityFile)args.push("-i",this.target.identityFile);if(this.target.port)args.push("-p",String(this.target.port));return args.push(this.target.alias??(this.target.user?`${this.target.user}@${this.target.host}`:this.target.host)),args}async probe(){let out={},tasks=[["npm","command -v npm"],["node","command -v node"],["bun","command -v bun"],["vibe","command -v vibe"],["os","uname -s 2>/dev/null || echo unknown"],["arch","uname -m 2>/dev/null || echo unknown"]];for(let[k,cmd]of tasks){let r=await this.run(["sh","-c",cmd]),trimmed=r.stdout.trim();if(r.code===0&&trimmed)out[k]=trimmed}return out}async run(command,opts){let remoteCmd=command.map(quoteForRemoteSh).join(" "),argv=[...this.sshArgv(),remoteCmd],r=Bun.spawnSync(argv,{stdout:"pipe",stderr:"pipe",timeout:opts?.timeoutMs??600000});return{code:r.exitCode??1,stdout:r.stdout.toString(),stderr:r.stderr.toString()}}async upload(remotePath,contents,mode){let argv=[...this.sshArgv(),`cat > ${quoteForRemoteSh(remotePath)} && chmod ${(mode??384).toString(8)} ${quoteForRemoteSh(remotePath)}`],proc=Bun.spawn(argv,{stdin:"pipe",stdout:"pipe",stderr:"pipe"}),writer=proc.stdin;writer.write(typeof contents==="string"?contents:Buffer.from(contents).toString("binary")),await writer.end();let code=await proc.exited;if(code!==0){let err=await new Response(proc.stderr).text();throw Error(`upload to ${remotePath} failed (exit ${code}): ${err}`)}}async close(){}}function quoteForRemoteSh(value){if(/^[A-Za-z0-9._\-/=:]+$/.test(value))return value;return`'${value.replace(/'/g,"'\\''")}'`}function getInstallTransport(target,options){let scheme=/^([a-z]+):\/\//.exec(target)?.[1];if(!scheme||scheme==="ssh"){let parsed=parseSshTarget(target);if(options?.identityFile)parsed.identityFile=options.identityFile;return new SSHTransportImpl(parsed)}throw Error(`Unsupported install transport scheme: ${scheme}://. Supported today: ssh:// (and bare host or ssh_config alias). Future: winrm://, ssm://, docker://, k8s://`)}import{existsSync as existsSync13,mkdirSync as mkdirSync4,readFileSync as readFileSync8,renameSync as renameSync2,writeFileSync as writeFileSync8}from"fs";import{dirname as dirname2,join as join13}from"path";var ALL_PEER_PERMISSIONS=["tunnel:read","session:list","session:share:read","session:share:write","plugin:list","plugin:install","plugin:remove","log:read","diagnostics:read","key:mint","admin"];function registryPath(agentDir){return join13(agentDir??getVibecontrolsDir(),"agent-network.json")}function read(agentDir){let file=registryPath(agentDir);if(!existsSync13(file))return{schemaVersion:1,peers:[]};let raw=readFileSync8(file,"utf8");try{let parsed=JSON.parse(raw);if(!parsed||!Array.isArray(parsed.peers))return{schemaVersion:1,peers:[]};return parsed}catch{return{schemaVersion:1,peers:[]}}}function write(reg,agentDir){let file=registryPath(agentDir);mkdirSync4(dirname2(file),{recursive:!0});let tmp=`${file}.${process.pid}.tmp`;writeFileSync8(tmp,JSON.stringify(reg,null,2),{mode:384}),renameSync2(tmp,file)}function listPeers(agentDir){return read(agentDir).peers}function getPeer(id,agentDir){return read(agentDir).peers.find((p)=>p.id===id)??null}function upsertPeer(record,agentDir){let reg=read(agentDir),i=reg.peers.findIndex((p)=>p.id===record.id);if(i>=0)reg.peers[i]={...reg.peers[i],...record};else reg.peers.push(record);return write(reg,agentDir),record}function updatePeer(id,patch,agentDir){let reg=read(agentDir),i=reg.peers.findIndex((p)=>p.id===id);if(i<0)return null;return reg.peers[i]={...reg.peers[i],...patch},write(reg,agentDir),reg.peers[i]}function removePeer(id,agentDir){let reg=read(agentDir),before=reg.peers.length;if(reg.peers=reg.peers.filter((p)=>p.id!==id),reg.peers.length===before)return!1;return write(reg,agentDir),!0}function sanitizePermissions(requested){let valid=new Set(ALL_PEER_PERMISSIONS);return[...requested].filter((p)=>valid.has(p)).map((p)=>p)}async function doRequest(peer,path,opts){let url=`${peer.tunnelUrl.replace(/\/$/,"")}${path}`;try{let r=await fetch(url,{method:opts.method??"GET",headers:{"x-agent-api-key":peer.apiKey,"content-type":opts.body?"application/json":"application/octet-stream"},body:opts.body?JSON.stringify(opts.body):void 0,signal:AbortSignal.timeout(opts.timeoutMs??30000)});if(r.status===200||r.status===201||r.status===204){let data=await r.json().catch(()=>{return});return{ok:!0,status:r.status,data}}let text=await r.text().catch(()=>"");return{ok:!1,status:r.status,error:text}}catch(err){return{ok:!1,status:0,error:err instanceof Error?err.message:String(err)}}}async function callPeer(peerId,path,opts={}){let peer=getPeer(peerId);if(!peer)return{ok:!1,status:0,error:`No peer with id ${peerId}`};let first=await doRequest(peer,path,opts);if(first.ok)return updatePeer(peer.id,{lastReachable:new Date().toISOString()}),first;if(!(first.status===401||first.status===0||first.status===502||first.status===503||first.status===504))return first;if(!peer.agentRecordId||!gatewayClient.isConfigured())return first;let refreshed=null;try{refreshed=await gatewayClient.lookupPeerAgent(peer.agentRecordId,opts.operation??"peer-call")}catch(err){getDaemonProfile().logger.warn("peer-client","Backend rotation lookup failed",{peerId,error:err instanceof Error?err.message:String(err)})}if(!refreshed)return first;updatePeer(peer.id,{tunnelUrl:refreshed.tunnelUrl,apiKey:refreshed.apiKey});let updated={...peer,tunnelUrl:refreshed.tunnelUrl,apiKey:refreshed.apiKey};return{...await doRequest(updated,path,opts),rotated:!0}}async function runOrFail(transport,cmd,step,timeoutMs){info(`\u2192 ${step}`);let r=await transport.run(cmd,{timeoutMs});if(r.code!==0)throw warn(r.stderr.slice(0,600)),Error(`${step} failed (exit ${r.code})`);return r.stdout}function register18(program){program.command("deploy <target>").description("Install + auto-configure the VibeControls agent on a remote target (defaults to SSH)").option("--version <version>","Pin a specific agent version (default: latest)").option("--registry <url>","npm registry (default: https://registry.npmjs.org/)").option("-i, --identity-file <path>","SSH identity file (override ssh_config)").option("--label <label>","Friendly name to record this peer under (default: target host)").option("--permissions <list>","Permissions to grant ourselves on the new peer (comma-separated)","tunnel:read,session:list,plugin:list,diagnostics:read").option("--expires-in <duration>","TTL for the minted peer key (default: no expiry)").option("--install-plugins <list>","Comma-separated plugin packages to also install on the remote agent").option("--autostart","Run `vibe autostart install` on the remote agent",!1).option("--no-bun","Skip Bun runtime install on the remote (default: best-effort)").option("--confirm","Required to proceed (no destructive ops; this is a sanity gate)").option("--json","Emit JSON").action(async function(target,opts){let merged={...program.opts(),...opts};try{if(!opts.confirm){fail("Pass --confirm to proceed. `vibe deploy` runs npm install on the remote host.");return}let transport=getInstallTransport(target,{identityFile:opts.identityFile});header(`vibe deploy \u2192 ${transport.id}`),blank(),info("Probing remote host\u2026");let probe=await transport.probe();if(kv("Remote OS",probe.os??"(unknown)"),kv("Remote arch",probe.arch??"(unknown)"),probe.npm)kv("Remote npm",probe.npm);if(probe.bun)kv("Remote bun",probe.bun);if(probe.vibe)kv("Remote vibe (existing)",probe.vibe);if(blank(),!probe.npm&&!probe.bun){if(opts.bun===!1){fail("Neither npm nor bun found and --no-bun was passed. Install Node.js manually, then re-run.");return}info("Installing Bun on remote\u2026");let r=await transport.run(["sh","-c",`curl -fsSL https://bun.sh/install | bash && echo 'export PATH="$HOME/.bun/bin:$PATH"' >> ~/.bashrc`],{timeoutMs:300000});if(r.code!==0){warn(r.stderr.slice(0,500)),fail("Bun auto-install failed. Install Node.js or Bun manually, then re-run.");return}let reprobe=await transport.run(["sh","-c","$HOME/.bun/bin/bun --version 2>/dev/null"],{timeoutMs:1e4});if(reprobe.code===0&&reprobe.stdout.trim())probe.bun="$HOME/.bun/bin/bun",kv("Remote bun (installed)",reprobe.stdout.trim());else{fail("Bun installer ran but the binary isn't reachable. Manual investigation needed.");return}}else if(!probe.bun&&opts.bun!==!1)info("Installing Bun on remote (best-effort)\u2026"),await transport.run(["sh","-c","curl -fsSL https://bun.sh/install | bash"],{timeoutMs:300000}).catch(()=>{});let version=opts.version??"latest",registry=opts.registry??"https://registry.npmjs.org/",installer=probe.npm?"npm":"bun";await runOrFail(transport,installer==="npm"?["npm","install","-g",`@vibecontrols/agent@${version}`,`--registry=${registry}`]:["bun","install","-g",`@vibecontrols/agent@${version}`,"--no-cache"],`Installing @vibecontrols/agent@${version} via ${installer}`,600000);let verify=await runOrFail(transport,["sh","-c","vibe --version || ~/.bun/bin/vibe --version"],"Verifying remote vibe binary",15000);if(kv("Remote agent version",verify.trim()),opts.autostart)await runOrFail(transport,["sh","-c","vibe autostart install || ~/.bun/bin/vibe autostart install"],"Installing autostart unit",60000);if(opts.installPlugins)for(let pkg of opts.installPlugins.split(",").map((s)=>s.trim()).filter(Boolean))await runOrFail(transport,["sh","-c",`vibe plugin install ${pkg} || ~/.bun/bin/vibe plugin install ${pkg}`],`Installing plugin ${pkg}`,300000);info("Starting remote agent in daemon mode\u2026"),await transport.run(["sh","-c","vibe start || ~/.bun/bin/vibe start"],{timeoutMs:60000}),info("Waiting for remote tunnel\u2026");let bootstrapJson=null,expFlag=opts.expiresIn?` --expires-in ${opts.expiresIn}`:"",label=opts.label??transport.id,perms=opts.permissions??"tunnel:read";for(let attempt=0;attempt<15;attempt++){let r=await transport.run(["sh","-c",`vibe peer-bootstrap --label '${label.replace(/'/g,"")}' --scope ${perms}${expFlag} 2>/dev/null || ~/.bun/bin/vibe peer-bootstrap --label '${label.replace(/'/g,"")}' --scope ${perms}${expFlag} 2>/dev/null`],{timeoutMs:15000});if(r.code===0){let text=r.stdout,start=text.indexOf("{"),end=text.lastIndexOf("}");if(start>=0&&end>start){let candidate=text.slice(start,end+1);try{JSON.parse(candidate),bootstrapJson=candidate;break}catch{}}}await new Promise((res)=>setTimeout(res,2000))}if(!bootstrapJson){warn("Could not run `vibe peer-bootstrap` on the remote. The agent is installed but not registered as a peer. Run `vibe network add ...` manually with the remote's API key + tunnel URL.");return}let bundle;try{bundle=JSON.parse(bootstrapJson)}catch(err){warn(`Could not parse peer-bootstrap output: ${err.message}`);return}if(!bundle.tunnelUrl)warn("Remote agent has no tunnel URL yet \u2014 it may still be coming up. Re-run `vibe network test <id>` later.");if(upsertPeer({id:bundle.id,label,tunnelUrl:bundle.tunnelUrl??"",apiKey:bundle.apiKey,permissions:bundle.permissions,addedAt:new Date().toISOString(),agentRecordId:bundle.agentRecordId??void 0,workspaceId:bundle.workspaceId??void 0,fingerprint:bundle.id}),maybePrintJson(merged,{ok:!0,host:target,version:verify.trim(),peerId:bundle.id,tunnelUrl:bundle.tunnelUrl??null}))return;if(blank(),success(`Deployed agent + registered peer ${bundle.id}`),kv("Remote tunnel",bundle.tunnelUrl??"(pending)"),kv("Permissions",bundle.permissions.join(",")),bundle.expiresAt)kv("Key expires",bundle.expiresAt);blank(),info(`${colors.dim("Try it")}: ${colors.bold(`vibe network test ${bundle.id.substring(0,8)}`)}`);let probeResult=await callPeer(bundle.id,"/api/profiles/default/agent/identity",{operation:"post-deploy-probe"});if(probeResult.ok)success("Peer probe succeeded.");else warn(`Peer probe failed: ${probeResult.status} ${probeResult.error??""}. Tunnel may still be warming up.`)}catch(err){if(merged.json){maybePrintJson(merged,{ok:!1,error:errMsg(err)});return}fail(errMsg(err))}})}function parsePerms(value){let list=value.split(",").map((s)=>s.trim()).filter(Boolean),sane=sanitizePermissions(list);if(sane.length!==list.length)throw Error(`Invalid permission(s). Allowed: ${ALL_PEER_PERMISSIONS.join(",")}`);return sane}function redactPeer(p){let{apiKey:_apiKey,...rest}=p;return redactUnknownSecrets({...rest,apiKey:"[REDACTED]"})}function register19(program){let cmd=program.command("network").description("Manage the mesh of peer agents this agent talks to");cmd.command("list").description("List configured peer agents").option("--json","Emit JSON").option("--plain","Force plain text output").action(async function(opts){try{let merged={...program.opts(),...opts};await runMultimode({mode:pickOutputMode(merged),fetchData:()=>listPeers(),plain:(peers)=>{if(peers.length===0){info("No peers configured. Add one via `vibe deploy <ssh-target>` or `vibe network add`.");return}header("Peer agents"),formatTable(peers.map((p)=>({ID:p.id.substring(0,8),Label:p.label,Tunnel:p.tunnelUrl,Permissions:p.permissions.join(","),Last_Reachable:p.lastReachable??"never"})))},interactive:async(peers)=>{if(peers.length===0){header("Peer agents"),blank(),info("No peers configured. Add one via `vibe deploy <ssh-target>` or `vibe network add`.");return}let rows=peers.map((p)=>{let lines=[`${colors.bold(p.label)} ${p.id.substring(0,8)}`,"",` Tunnel: ${p.tunnelUrl}`,` Permissions: ${p.permissions.join(",")}`,` Added: ${p.addedAt}`,` Last reachable: ${p.lastReachable??"never"}`,` Workspace: ${p.workspaceId??"-"}`,` Agent record: ${p.agentRecordId??"-"}`];return{id:p.id,label:p.label,hint:p.lastReachable?"reachable":"never",detail:lines.join(`
214
214
  `)}});await interactiveTable({title:`vibe network \u2014 ${peers.length} peer(s)`,rows})},json:(peers)=>peers.map(redactPeer)})}catch(err){fail(err.message)}}),cmd.command("add <id>").description("Manually add a peer (use deploy for the SSH-install flow)").requiredOption("--label <label>","Friendly name").requiredOption("--tunnel-url <url>","Peer's tunnel URL").requiredOption("--api-key <key>","Scoped API key the peer minted for us").option("--permissions <list>",`Comma-separated permissions (default: tunnel:read). Allowed: ${ALL_PEER_PERMISSIONS.join(",")}`,"tunnel:read").option("--agent-record-id <id>","Platform-side agent ID for backend rotation lookup").option("--workspace-id <id>","Platform-side workspace ID").option("--json","Emit JSON result").action((id,opts)=>{try{let merged={...program.opts(),...opts},perms=parsePerms(opts.permissions);if(upsertPeer({id,label:opts.label,tunnelUrl:opts.tunnelUrl,apiKey:opts.apiKey,permissions:perms,addedAt:new Date().toISOString(),agentRecordId:opts.agentRecordId,workspaceId:opts.workspaceId}),maybePrintJson(merged,{ok:!0,id,label:opts.label,permissions:perms}))return;success(`Added peer ${id} (${opts.label})`)}catch(err){fail(err.message)}}),cmd.command("remove <id>").description("Remove a peer record (does not revoke the key on the peer)").option("--json","Emit JSON result").action((id,opts)=>{let merged={...program.opts(),...opts},ok=removePeer(id);if(maybePrintJson(merged,{ok,id}))return;if(ok)success(`Removed peer ${id}`);else fail(`No peer with id ${id}`)}),cmd.command("update <id>").description("Modify permissions or label of an existing peer").option("--label <label>","Update friendly name").option("--permissions <list>",`Comma-separated permissions. Allowed: ${ALL_PEER_PERMISSIONS.join(",")}`).option("--json","Emit JSON result").action((id,opts)=>{try{let merged={...program.opts(),...opts},patch={};if(opts.label)patch.label=opts.label;if(opts.permissions)patch.permissions=parsePerms(opts.permissions);let updated=updatePeer(id,patch);if(!updated){if(maybePrintJson(merged,{ok:!1,id,error:"not_found"}))return;fail(`No peer with id ${id}`);return}if(maybePrintJson(merged,{ok:!0,id,peer:redactPeer(updated)}))return;success(`Updated peer ${id}`)}catch(err){fail(err.message)}}),cmd.command("test <id>").description("Probe a peer (calls /api/agent/identity over its tunnel)").option("--json","Emit JSON").option("--plain","Force plain text output").action(async(id,opts)=>{let merged={...program.opts(),...opts},peer=getPeer(id);if(!peer){if(maybePrintJson(merged,{ok:!1,id,error:"not_found"}))return;fail(`No peer with id ${id}`);return}try{await runMultimode({mode:pickOutputMode(merged),fetchData:async()=>({peer,result:await callPeer(id,"/api/profiles/default/agent/identity",{operation:"network-test"})}),plain:({peer:p,result:r})=>{if(header(`Probing peer ${p.label} (${p.id})`),blank(),r.ok){if(success(`Peer is reachable${r.rotated?" (recovered via backend rotation lookup)":""}`),r.data)console.log(JSON.stringify(r.data,null,2))}else fail(`Peer call failed (${r.status}): ${r.error??"(no detail)"}`)},interactive:async({peer:p,result:r})=>{let lines=[` Peer: ${p.label} (${p.id})`,` Tunnel: ${p.tunnelUrl}`,` Status: ${r.ok?"reachable":`failed (${r.status})`}`,` Rotated: ${r.rotated?"yes":"no"}`,` Error: ${r.error??"-"}`,"",` Identity: ${r.data?JSON.stringify(r.data,null,2):"-"}`];await interactiveDetail({title:`Probe ${p.label}`,body:lines.join(`
215
215
  `)})},json:({peer:p,result:r})=>({peer:redactPeer(p),result:redactUnknownSecrets({ok:r.ok,status:r.status,rotated:r.rotated??!1,error:r.error??null,data:r.data??null})})})}catch(err){fail(err.message)}})}import{existsSync as existsSync14}from"fs";function profileExists(name){return existsSync14(getProfilePath(name))}function register20(program){let cmd=program.command("profile").description("Manage gateway-environment profiles");cmd.command("list").description("List all profiles and mark the active one").option("--json","Emit JSON").option("--plain","Force plain text output").action(async function(opts){try{let merged={...program.opts(),...opts},fetchData=()=>{let active=readActiveProfileName(),profiles=listProfileNames().map((name)=>{let cfg=readProfile(name);return{name,active:name===active,globalGatewayUrl:cfg.globalGatewayUrl??null,workspaceGatewayUrl:cfg.workspaceGatewayUrl??null}});return{active,profiles}};await runMultimode({mode:pickOutputMode(merged),fetchData,plain:(data)=>{if(data.profiles.length===0){info("No profiles yet. Run 'vibe profile seed' to create the default profile.");return}header("Profiles"),formatTable(data.profiles.map((p)=>({Name:p.name,Active:p.active?colors.green("\u25CF"):"","Global Gateway":p.globalGatewayUrl??colors.dim("(unset)"),"Workspace Gateway":p.workspaceGatewayUrl??colors.dim("(unset)")})))},interactive:async(data)=>{if(data.profiles.length===0){header("Profiles"),blank(),info("No profiles yet. Run 'vibe profile seed' to create the default profile.");return}let rows=data.profiles.map((p)=>{let lines=[`${colors.bold(p.name)}${p.active?" "+colors.green("\u25CF active"):""}`,"",` Global gateway: ${p.globalGatewayUrl??colors.dim("(unset)")}`,` Workspace gateway: ${p.workspaceGatewayUrl??colors.dim("(unset)")}`];return{id:p.name,label:p.name,hint:p.active?"active":"",detail:lines.join(`
@@ -1,5 +1,5 @@
1
1
  // @bun
2
- import{getPluginPackageRoot}from"./index-h6a1kkfk.js";import{getAgentApiKey,getIframeTokenFromRequest,getUiCookieFromRequest,isValidUiPluginName,issueUiCookieToken,verifyIframeToken,verifyUiCookieToken}from"./index-b4wy3jrt.js";import{Elysia}from"./index-rnk0kny8.js";class CliContributorRegistry{statusSections=[];doctorChecks=[];addStatusSection(section){this.statusSections.push(section)}addDoctorCheck(check){this.doctorChecks.push(check)}getStatusSections(){return this.statusSections}getDoctorChecks(){return this.doctorChecks}}var activeRegistry=null;function setActiveContributorRegistry(registry){activeRegistry=registry}function getActiveContributorRegistry(){if(!activeRegistry)activeRegistry=new CliContributorRegistry;return activeRegistry}import{extname,relative,resolve}from"path";import{realpath}from"fs/promises";var DEFAULT_FRAME_ANCESTORS=["'self'","http://localhost:*","http://127.0.0.1:*","https://localhost:*","https://127.0.0.1:*","https://*.local.burdenoff.com","https://vibecontrols.com","https://*.vibecontrols.com","https://burdenoff.com","https://app.burdenoff.com","https://alphaapp.burdenoff.com"],warnedAboutUnsafeOverride=!1;function frameAncestorsCsp(){let override=process.env.VIBE_UI_FRAME_ANCESTORS?.trim(),sources=override?override.split(/[\s,]+/).filter(Boolean):DEFAULT_FRAME_ANCESTORS;if(override&&!warnedAboutUnsafeOverride&&(sources.includes("*")||!sources.includes("'self'")))warnedAboutUnsafeOverride=!0,console.warn(`[ui-server] VIBE_UI_FRAME_ANCESTORS override does not include "'self'" or contains "*". This significantly weakens CSP frame-ancestors and is almost never intended. Override: ${override}`);return`frame-ancestors ${sources.join(" ")}`}var MIME_TYPES={".html":"text/html",".js":"application/javascript",".mjs":"application/javascript",".css":"text/css",".json":"application/json",".png":"image/png",".jpg":"image/jpeg",".jpeg":"image/jpeg",".gif":"image/gif",".svg":"image/svg+xml",".ico":"image/x-icon",".woff":"font/woff",".woff2":"font/woff2",".ttf":"font/ttf",".map":"application/json",".wasm":"application/wasm"};function getMimeType(filePath){return MIME_TYPES[extname(filePath).toLowerCase()]||"application/octet-stream"}var AUTH_BRIDGE_SCRIPT=`<script>
2
+ import{getPluginPackageRoot}from"./index-7qj1swrk.js";import{getAgentApiKey,getIframeTokenFromRequest,getUiCookieFromRequest,isValidUiPluginName,issueUiCookieToken,verifyIframeToken,verifyUiCookieToken}from"./index-b4wy3jrt.js";import{Elysia}from"./index-rnk0kny8.js";class CliContributorRegistry{statusSections=[];doctorChecks=[];addStatusSection(section){this.statusSections.push(section)}addDoctorCheck(check){this.doctorChecks.push(check)}getStatusSections(){return this.statusSections}getDoctorChecks(){return this.doctorChecks}}var activeRegistry=null;function setActiveContributorRegistry(registry){activeRegistry=registry}function getActiveContributorRegistry(){if(!activeRegistry)activeRegistry=new CliContributorRegistry;return activeRegistry}import{extname,relative,resolve}from"path";import{realpath}from"fs/promises";var DEFAULT_FRAME_ANCESTORS=["'self'","http://localhost:*","http://127.0.0.1:*","https://localhost:*","https://127.0.0.1:*","https://*.local.burdenoff.com","https://vibecontrols.com","https://*.vibecontrols.com","https://burdenoff.com","https://app.burdenoff.com","https://alphaapp.burdenoff.com"],warnedAboutUnsafeOverride=!1;function frameAncestorsCsp(){let override=process.env.VIBE_UI_FRAME_ANCESTORS?.trim(),sources=override?override.split(/[\s,]+/).filter(Boolean):DEFAULT_FRAME_ANCESTORS;if(override&&!warnedAboutUnsafeOverride&&(sources.includes("*")||!sources.includes("'self'")))warnedAboutUnsafeOverride=!0,console.warn(`[ui-server] VIBE_UI_FRAME_ANCESTORS override does not include "'self'" or contains "*". This significantly weakens CSP frame-ancestors and is almost never intended. Override: ${override}`);return`frame-ancestors ${sources.join(" ")}`}var MIME_TYPES={".html":"text/html",".js":"application/javascript",".mjs":"application/javascript",".css":"text/css",".json":"application/json",".png":"image/png",".jpg":"image/jpeg",".jpeg":"image/jpeg",".gif":"image/gif",".svg":"image/svg+xml",".ico":"image/x-icon",".woff":"font/woff",".woff2":"font/woff2",".ttf":"font/ttf",".map":"application/json",".wasm":"application/wasm"};function getMimeType(filePath){return MIME_TYPES[extname(filePath).toLowerCase()]||"application/octet-stream"}var AUTH_BRIDGE_SCRIPT=`<script>
3
3
  window.__VIBE_AUTH__={apiKey:null};
4
4
  (function(){
5
5
  var p=new URLSearchParams(window.location.search);
@@ -1,5 +1,5 @@
1
1
  // @bun
2
- import{denyNonLocalMutation,isLikelyLocalRequest}from"./index-49a60qjr.js";import{autoReportToBackend,stopProfileReconciler,stopTunnelSync}from"./index-g9h64dn9.js";import{runAliasCaptured}from"./index-9e1fgxea.js";import{checkDependencies,installDependencies}from"./index-fg47j98r.js";import{ServiceManager}from"./index-34syaqa8.js";import{redactUnknownSecrets}from"./index-y5q0m3cx.js";import{getActiveContributorRegistry}from"./index-n3y918j2.js";import"./index-h6a1kkfk.js";import"./index-srbb2214.js";import{validateEvent}from"./index-3jez1q8j.js";import"./index-brtw3j8x.js";import{getAgentApiKey}from"./index-b4wy3jrt.js";import"./index-d3mz9vws.js";import{Elysia,t}from"./index-rnk0kny8.js";import{register}from"./index-njg2sn7v.js";import"./index-qbvtba0e.js";import{apiGet,apiPost,getAgentUrl,maybePrintJson,pickOutputMode,resolveProfileName,runMultimode}from"./index-wvabz3xh.js";import{blank,colors,errMsg,fail,formatBytes,formatDuration,formatStatus,formatTable,header,icons,info,kv,success,timeAgo}from"./index-r0qezdp7.js";import{interactiveDetail}from"./index-campp0wv.js";import{writeAgentConfig}from"./index-2pqv0bya.js";import{currentProfileOrNull,gatewayClient,getDaemonProfile}from"./index-7pdmqbj8.js";import{getVibecontrolsDir,getVibecontrolsProfile,getVibecontrolsProfilesDir,isPathInside}from"./index-bysm7taq.js";import"./index-zs58d1hc.js";import{__require}from"./index-e9rt4m94.js";function createLifecycleHooks(spec){let{name,onInit,onShutdown,onNuke,telemetryEventName,skipPlatforms}=spec;return{onServerStart:async(_app,hostServices)=>{if(skipPlatforms&&skipPlatforms.includes(process.platform)){process.stderr.write(`[${name}] skipping init on unsupported platform '${process.platform}'
2
+ import{denyNonLocalMutation,isLikelyLocalRequest}from"./index-49a60qjr.js";import{autoReportToBackend,stopProfileReconciler,stopTunnelSync}from"./index-8xr7ewxg.js";import{runAliasCaptured}from"./index-9e1fgxea.js";import{checkDependencies,installDependencies}from"./index-fg47j98r.js";import{ServiceManager}from"./index-34syaqa8.js";import{redactUnknownSecrets}from"./index-y5q0m3cx.js";import{getActiveContributorRegistry}from"./index-1atc02se.js";import"./index-7qj1swrk.js";import"./index-srbb2214.js";import{validateEvent}from"./index-3jez1q8j.js";import"./index-brtw3j8x.js";import{getAgentApiKey}from"./index-b4wy3jrt.js";import"./index-d3mz9vws.js";import{Elysia,t}from"./index-rnk0kny8.js";import{register}from"./index-njg2sn7v.js";import"./index-qbvtba0e.js";import{apiGet,apiPost,getAgentUrl,maybePrintJson,pickOutputMode,resolveProfileName,runMultimode}from"./index-wvabz3xh.js";import{blank,colors,errMsg,fail,formatBytes,formatDuration,formatStatus,formatTable,header,icons,info,kv,success,timeAgo}from"./index-r0qezdp7.js";import{interactiveDetail}from"./index-campp0wv.js";import{writeAgentConfig}from"./index-2pqv0bya.js";import{currentProfileOrNull,gatewayClient,getDaemonProfile}from"./index-7pdmqbj8.js";import{getVibecontrolsDir,getVibecontrolsProfile,getVibecontrolsProfilesDir,isPathInside}from"./index-bysm7taq.js";import"./index-zs58d1hc.js";import{__require}from"./index-e9rt4m94.js";function createLifecycleHooks(spec){let{name,onInit,onShutdown,onNuke,telemetryEventName,skipPlatforms}=spec;return{onServerStart:async(_app,hostServices)=>{if(skipPlatforms&&skipPlatforms.includes(process.platform)){process.stderr.write(`[${name}] skipping init on unsupported platform '${process.platform}'
3
3
  `);return}if(onInit)await onInit(hostServices);if(telemetryEventName)hostServices.telemetry?.emit(telemetryEventName,{plugin:name})},onServerStop:async(hostServices)=>{if(onShutdown)await onShutdown(hostServices)},onNuke:async(hostServices,ctx)=>{if(onNuke)return onNuke(hostServices,ctx)}}}var BoundLogger=class{constructor(logger,source){this.logger=logger,this.source=source}logger;source;info(message,meta){this.logger?.info?.(this.source,message,meta)}warn(message,meta){this.logger?.warn?.(this.source,message,meta)}error(message,meta){this.logger?.error?.(this.source,message,meta)}debug(message,meta){this.logger?.debug?.(this.source,message,meta)}};import{existsSync,rmSync,statSync}from"fs";import{resolve}from"path";function wipeAgentDir(agentDir=getVibecontrolsDir()){let removed=[],safeAgentDir=resolve(agentDir),agentsDir=getVibecontrolsProfilesDir();if(!isPathInside(agentsDir,safeAgentDir))throw Error("Refusing to reset a path outside the agents directory");if(existsSync(safeAgentDir)&&statSync(safeAgentDir).isDirectory())rmSync(safeAgentDir,{recursive:!0,force:!0}),removed.push(safeAgentDir);return{removed,agentDir:safeAgentDir}}var ALIAS_PLUGIN_NAMESPACE="alias",ALIAS_NAME_RE=/^[a-zA-Z0-9_-]{1,64}$/,ALIAS_COMMAND_MAX=16384,ALIAS_DESCRIPTION_MAX=256,ALIAS_CWD_MAX=1024,RESERVED_ALIAS_NAMES=new Set(["help","start","stop","restart","kill","list","status","setup","update","completion","autostart","export","import","diagnostics","nuke","doctor","log-level","gc","deploy","network","profile","peer-bootstrap","gateway-auth","info","key","system","url","health","notify","tunnel","session","git","config","log","plugin","ai","audit","alias","run"]);class AliasValidationError extends Error{code;constructor(code,message){super(message);this.code=code,this.name="AliasValidationError"}}class AliasConflictError extends Error{constructor(name){super(`alias '${name}' already exists`);this.name="AliasConflictError"}}class AliasNotFoundError extends Error{constructor(name){super(`alias '${name}' not found`);this.name="AliasNotFoundError"}}function validateAliasName(name){if(typeof name!=="string"||!ALIAS_NAME_RE.test(name))throw new AliasValidationError("invalid_name",`alias name must match ${ALIAS_NAME_RE} (got '${name}')`);if(RESERVED_ALIAS_NAMES.has(name))throw new AliasValidationError("reserved_name",`alias name '${name}' is reserved`)}function validateAliasCommand(command){if(typeof command!=="string"||command.length===0)throw new AliasValidationError("invalid_command","alias command must be a non-empty string");if(command.length>ALIAS_COMMAND_MAX)throw new AliasValidationError("command_too_long",`alias command exceeds ${ALIAS_COMMAND_MAX} bytes`)}function validateAliasDescription(description){if(description===void 0)return;if(typeof description!=="string")throw new AliasValidationError("invalid_description","alias description must be a string");if(description.length>ALIAS_DESCRIPTION_MAX)throw new AliasValidationError("description_too_long",`alias description exceeds ${ALIAS_DESCRIPTION_MAX} chars`)}function validateAliasCwd(cwd){if(cwd===void 0||cwd===null||cwd==="")return;if(typeof cwd!=="string")throw new AliasValidationError("invalid_cwd","alias cwd must be a string");if(cwd.length>ALIAS_CWD_MAX)throw new AliasValidationError("cwd_too_long",`alias cwd exceeds ${ALIAS_CWD_MAX} chars`);if(cwd.includes("\x00"))throw new AliasValidationError("invalid_cwd","alias cwd must not contain NUL bytes")}function safeParse(value){if(!value)return;try{return JSON.parse(value)}catch{return}}async function listAliases(db){let rows=await db.getAllPluginState(ALIAS_PLUGIN_NAMESPACE),out=[];for(let row of rows){let parsed=safeParse(row.value);if(parsed)out.push(parsed)}return out.sort((a,b)=>a.name.localeCompare(b.name)),out}async function getAliasByName(db,name){return(await listAliases(db)).find((a)=>a.name===name)}function normalizeCwd(cwd){if(cwd===void 0||cwd===null)return null;let trimmed=cwd.trim();return trimmed===""?null:trimmed}async function createAlias(db,input){if(validateAliasName(input.name),validateAliasCommand(input.command),validateAliasDescription(input.description),validateAliasCwd(input.cwd),await getAliasByName(db,input.name))throw new AliasConflictError(input.name);let now=new Date().toISOString(),row={id:crypto.randomUUID(),name:input.name,command:input.command,description:input.description,cwd:normalizeCwd(input.cwd),profile:getVibecontrolsProfile(),createdAt:now,updatedAt:now};return await db.setPluginState(ALIAS_PLUGIN_NAMESPACE,row.id,JSON.stringify(row)),row}async function updateAlias(db,name,patch){let current=await getAliasByName(db,name);if(!current)throw new AliasNotFoundError(name);if(patch.command!==void 0)validateAliasCommand(patch.command);if(patch.description!==void 0)validateAliasDescription(patch.description);if(patch.cwd!==void 0)validateAliasCwd(patch.cwd);let next={...current,command:patch.command??current.command,description:patch.description!==void 0?patch.description:current.description,cwd:patch.cwd!==void 0?normalizeCwd(patch.cwd):current.cwd,updatedAt:new Date().toISOString()};return await db.setPluginState(ALIAS_PLUGIN_NAMESPACE,next.id,JSON.stringify(next)),next}async function deleteAlias(db,name){let current=await getAliasByName(db,name);if(!current)throw new AliasNotFoundError(name);await db.deletePluginState(ALIAS_PLUGIN_NAMESPACE,current.id)}function activeProfileConfigOpts(){let ctx=currentProfileOrNull()??getDaemonProfile();return{dir:ctx.dataDir,scope:ctx.name}}function createRoutes(deps){let{serviceRegistry,db}=deps;return new Elysia().get("/api-key",()=>({apiKey:getAgentApiKey()})).get("/audit",({query})=>{let q=query,limit=q.limit?Math.min(5000,Math.max(1,Number.parseInt(q.limit,10)||100)):100,events=getDaemonProfile().audit.listEvents({since:q.since,limit,event:q.event});return{events,count:events.length}},{query:t.Object({since:t.Optional(t.String()),limit:t.Optional(t.String()),event:t.Optional(t.String())})}).get("/setup/check",()=>{let deps2=checkDependencies();return{ready:deps2.filter((d)=>d.required).every((d)=>d.installed),dependencies:deps2}}).post("/setup/install",async({request,server,set})=>{let denied=denyNonLocalMutation(request,"VIBECONTROLS_ALLOW_REMOTE_SETUP_INSTALL",server);if(denied)return set.status=403,{error:"Forbidden",message:denied};return await installDependencies()}).get("/url",async()=>{let tunnelProvider=serviceRegistry.getProvider("tunnel"),tunnelUrl=tunnelProvider&&tunnelProvider.getActiveTunnelUrl?await tunnelProvider.getActiveTunnelUrl():null,localUrl=`http://localhost:${process.env.PORT||3005}`;return{url:tunnelUrl||localUrl,tunnelUrl,localUrl,source:tunnelUrl?"tunnel":"local"}}).get("/lifecycle/state",()=>{return{state:serviceRegistry.getService("agent","lifecycle")?.getState()??"running"}}).post("/lifecycle/stop",async({set})=>{let lifecycle=serviceRegistry.getService("agent","lifecycle");if(!lifecycle)return set.status=500,{error:"Lifecycle manager not initialized"};return await lifecycle.stop(),{state:"stopped"}}).post("/lifecycle/start",async({set})=>{let lifecycle=serviceRegistry.getService("agent","lifecycle");if(!lifecycle)return set.status=500,{error:"Lifecycle manager not initialized"};return await lifecycle.start(),{state:"running"}}).post("/lifecycle/kill",async({set})=>{let lifecycle=serviceRegistry.getService("agent","lifecycle");if(!lifecycle)return set.status=500,{error:"Lifecycle manager not initialized"};return setTimeout(()=>lifecycle.kill(),100),{state:"killing"}}).post("/log-level",async({body,request,server,set})=>{let denied=denyNonLocalMutation(request,"VIBECONTROLS_ALLOW_REMOTE_LOG_LEVEL",server);if(denied)return set.status=403,{error:"Forbidden",message:denied};let next=String(body.level??"").toLowerCase();if(!["debug","info","warn","error"].includes(next))return set.status=400,{error:"Invalid level",message:"level must be debug | info | warn | error"};return getDaemonProfile().logger.setLevel(next),getDaemonProfile().logger.info("agent",`Log level set to ${next} via API`),{ok:!0,level:next}},{body:t.Object({level:t.String()})}).post("/reset",async({body,request,server,set})=>{if(!body.confirm)return set.status=400,{error:"Reset confirmation required",message:"Send { confirm: true } to reset local agent state."};let denied=denyNonLocalMutation(request,"VIBECONTROLS_ALLOW_REMOTE_RESET",server);if(denied)return set.status=403,{error:"Forbidden",message:denied};let lifecycle=serviceRegistry.getService("agent","lifecycle");try{if(lifecycle)await lifecycle.prepareForReset()}catch(err){getDaemonProfile().logger.warn("agent","prepareForReset failed during reset \u2014 proceeding to wipe anyway",{error:String(err)})}try{gatewayClient.configure({globalGatewayUrl:"",workspaceGatewayUrl:void 0,clientId:"",clientSecret:"",workspaceId:void 0})}catch{}await db.close();let{removed,agentDir}=wipeAgentDir();getDaemonProfile().logger.info("agent","Reset wiped local agent state",{agentDir,removed});let bytes=new Uint8Array(32);crypto.getRandomValues(bytes);let newApiKey=`vcak_${Buffer.from(bytes).toString("base64url")}`;return writeAgentConfig({"static-api-key":newApiKey},activeProfileConfigOpts()),getDaemonProfile().setBootState("awaiting-config"),set.status=200,{success:!0,state:"awaiting-config",...isLikelyLocalRequest(request,server)||process.env.VIBECONTROLS_RETURN_RESET_API_KEY==="1"?{newApiKey}:{},agentDir,removed}},{body:t.Object({confirm:t.Boolean()})}).post("/sessions/:sessionId/share",async({params,body,server,request,set})=>{if(!isLikelyLocalRequest(request,server)&&process.env.VIBECONTROLS_ALLOW_REMOTE_SESSION_SHARE!=="1")return set.status=403,{error:"Forbidden",message:"Session-share mint must come from a local request unless VIBECONTROLS_ALLOW_REMOTE_SESSION_SHARE=1."};let ttlMs=parseTtl(body?.expiresIn)??1800000,id=crypto.randomUUID(),bytes=new Uint8Array(32);crypto.getRandomValues(bytes);let key=`vcak_${Buffer.from(bytes).toString("base64url")}`,expiresAt=new Date(Date.now()+ttlMs).toISOString(),apiKeys=[...(await import("./agent-config-y63ddxgy.js")).readAgentConfig({dir:activeProfileConfigOpts().dir}).apiKeys??[],{id,name:`session-share:${params.sessionId}:${body?.label??"viewer"}`,key,scopes:["read"],expiresAt,createdAt:new Date().toISOString()}];(await import("./agent-config-y63ddxgy.js")).writeAgentConfig({apiKeys},activeProfileConfigOpts());let tunnelProvider=serviceRegistry.getProvider("tunnel"),joinUrl=`${((tunnelProvider&&tunnelProvider.getActiveTunnelUrl?await tunnelProvider.getActiveTunnelUrl():null)??`http://localhost:${process.env.PORT||3005}`).replace(/\/$/,"")}/ws/terminal?sessionId=${encodeURIComponent(params.sessionId)}&apiKey=${encodeURIComponent(key)}`;return getDaemonProfile().logger.info("session-share","Minted share credential",{sessionId:params.sessionId,keyId:id,expiresAt}),{ok:!0,keyId:id,apiKey:key,joinUrl,sessionId:params.sessionId,expiresAt}},{params:t.Object({sessionId:t.String()}),body:t.Optional(t.Object({permissions:t.Optional(t.Array(t.String())),expiresIn:t.Optional(t.String()),label:t.Optional(t.String())}))}).get("/aliases",async()=>{return{aliases:await listAliases(db)}}).get("/aliases/:name",async({params,set})=>{let alias=await getAliasByName(db,params.name);if(!alias)return set.status=404,{error:"Alias not found"};return alias},{params:t.Object({name:t.String()})}).post("/aliases",async({body,set})=>{try{let alias=await createAlias(db,body);return set.status=201,alias}catch(err){if(err instanceof AliasConflictError)return set.status=409,{error:"Alias already exists",message:err.message};if(err instanceof AliasValidationError)return set.status=400,{error:err.code,message:err.message};throw err}},{body:t.Object({name:t.String(),command:t.String(),description:t.Optional(t.String()),cwd:t.Optional(t.Union([t.String(),t.Null()]))})}).put("/aliases/:name",async({params,body,set})=>{try{return await updateAlias(db,params.name,body)}catch(err){if(err instanceof AliasNotFoundError)return set.status=404,{error:"Alias not found"};if(err instanceof AliasValidationError)return set.status=400,{error:err.code,message:err.message};throw err}},{params:t.Object({name:t.String()}),body:t.Object({command:t.Optional(t.String()),description:t.Optional(t.String()),cwd:t.Optional(t.Union([t.String(),t.Null()]))})}).delete("/aliases/:name",async({params,set})=>{try{return await deleteAlias(db,params.name),set.status=204,null}catch(err){if(err instanceof AliasNotFoundError)return set.status=404,{error:"Alias not found"};throw err}},{params:t.Object({name:t.String()})}).post("/aliases/:name/execute",async({params,body,set})=>{let alias=await getAliasByName(db,params.name);if(!alias)return set.status=404,{error:"Alias not found"};let args=body?.args??[],result=await runAliasCaptured(alias,args);getDaemonProfile().audit.emit("agent","alias.executed",{exit_code:result.exit_code});let telemetry=validateEvent("alias.executed",{exit_code:result.exit_code});if(!telemetry.ok)getDaemonProfile().logger.debug("alias",`telemetry validate failed: ${telemetry.reason}`);if(result.timed_out)set.status=408;return{exit_code:result.exit_code,stdout:result.stdout,stderr:result.stderr,duration_ms:result.duration_ms,truncated:result.truncated,cwd:result.cwd}},{params:t.Object({name:t.String()}),body:t.Optional(t.Object({args:t.Optional(t.Array(t.String()))}))}).post("/sessions/share/:keyId/revoke",async({params,server,request,set})=>{if(!isLikelyLocalRequest(request,server)&&process.env.VIBECONTROLS_ALLOW_REMOTE_SESSION_SHARE!=="1")return set.status=403,{error:"Forbidden"};let cfgMod=await import("./agent-config-y63ddxgy.js"),cfgOpts=activeProfileConfigOpts(),cfg=cfgMod.readAgentConfig({dir:cfgOpts.dir}),before=(cfg.apiKeys??[]).length,apiKeys=(cfg.apiKeys??[]).filter((k)=>k.id!==params.keyId);if(apiKeys.length===before)return set.status=404,{error:"No such share key"};return cfgMod.writeAgentConfig({apiKeys},cfgOpts),{ok:!0,revoked:params.keyId}},{params:t.Object({keyId:t.String()})})}function parseTtl(input){if(!input)return null;let m=/^(\d+)([smhdw]?)$/.exec(input.trim());if(!m)return null;let n=Number(m[1]),unit=m[2]||"m";return unit==="s"?n*1000:unit==="m"?n*60000:unit==="h"?n*3600000:unit==="d"?n*86400000:n*7*86400000}var DEFAULT_AGENT_URL="http://localhost:3005";function register2(program){program.command("health").description("Check health of a VibeControls agent instance").option("-n, --name <name>","Agent instance name").option("--agent-url <url>","Agent URL",DEFAULT_AGENT_URL).option("--json","Emit JSON").option("--plain","Force plain text output").action(async function(opts){try{let merged={...program.opts(),...opts};await runMultimode({mode:pickOutputMode(merged),fetchData:async()=>{if(merged.name){let result=await new ServiceManager().checkHealth(merged.name);return{mode:"named",agentUrl:getAgentUrl(merged),name:merged.name,healthy:result.healthy,details:result.details??{}}}let agentUrl=getAgentUrl(merged);try{let data=await apiGet(agentUrl,"/health");return{mode:"url",agentUrl,healthy:!0,details:data}}catch(err){return{mode:"url",agentUrl,healthy:!1,details:{status:"unhealthy",...err instanceof Error?{error:errMsg(err)}:{}}}}},plain:(data)=>{if(header("Agent Health"),blank(),data.mode==="named"){if(!data.healthy){fail(`Agent instance ${colors.bold(data.name??"")} is not responding.`);return}let details=data.details;if(kv("Instance",data.name??""),kv("Status",formatStatus(details.status??"healthy")),details.uptime!==void 0)kv("Uptime",`${details.uptime}s`);if(details.checks){blank(),info(`${icons.info} Health checks:`);for(let[name,check]of Object.entries(details.checks)){let icon=check.status==="healthy"?icons.success:icons.error;kv(` ${icon} ${name}`,formatStatus(check.status))}}}else{if(kv("URL",data.agentUrl),kv("Status",formatStatus(data.details.status??"unhealthy")),data.details.version)kv("Version",data.details.version);if(data.details.uptime!==void 0)kv("Uptime",`${data.details.uptime}s`);if(data.details.timestamp)kv("Timestamp",data.details.timestamp);if(data.details.checks){blank(),info(`${icons.info} Health checks:`);for(let[name,check]of Object.entries(data.details.checks)){let icon=check.status==="healthy"?icons.success:icons.error;kv(` ${icon} ${name}`,formatStatus(check.status))}}}if(blank(),data.healthy)success(`${icons.success} Agent is healthy.`)},interactive:async(data)=>{let lines=[];if(data.mode==="named")lines.push(`Instance: ${data.name??""}`);else lines.push(`URL: ${data.agentUrl}`);if(lines.push(`Status: ${formatStatus(data.details.status??(data.healthy?"healthy":"unhealthy"))}`),data.details.version)lines.push(`Version: ${data.details.version}`);if(data.details.uptime!==void 0)lines.push(`Uptime: ${data.details.uptime}s`);if(data.details.timestamp)lines.push(`Time: ${data.details.timestamp}`);if(data.details.checks){lines.push(""),lines.push("Checks:");for(let[name,check]of Object.entries(data.details.checks))lines.push(` ${name}: ${check.status}`)}await interactiveDetail({title:"Agent Health",body:lines.join(`
4
4
  `),footer:"press q to exit"})},json:(data)=>({mode:data.mode,agentUrl:data.agentUrl,name:data.name??null,healthy:data.healthy,details:data.details})})}catch(err){fail(`Health check failed: ${errMsg(err)}`)}})}import{platform,arch,release,hostname,cpus,totalmem}from"os";var DEFAULT_AGENT_URL2="http://localhost:3005";function register3(program){program.command("info").description("Show local and remote VibeControls agent information").option("--agent-url <url>","Agent URL",DEFAULT_AGENT_URL2).option("--json","Emit JSON").option("--plain","Force plain text output").action(async function(opts){try{let merged={...program.opts(),...opts},agentUrl=getAgentUrl(merged),profile=encodeURIComponent(resolveProfileName(merged));await runMultimode({mode:pickOutputMode(merged),fetchData:async()=>{let local={hostname:hostname(),platform:platform(),arch:arch(),release:release(),cpus:cpus().length,totalMemory:totalmem(),nodeVersion:process.version,bunVersion:process.versions.bun};try{let remote=await apiGet(agentUrl,`/api/profiles/${profile}/agent/version`);return{local,agentUrl,remote}}catch(err){return{local,agentUrl,remote:null,remoteError:err instanceof Error?errMsg(err):String(err)}}},plain:(data)=>{if(header("VibeControls Agent Info"),blank(),info(`${icons.info} Local System`),kv("Hostname",data.local.hostname),kv("Platform",`${data.local.platform} ${data.local.arch}`),kv("OS Release",data.local.release),kv("CPUs",String(data.local.cpus)),kv("Total Memory",formatBytes(data.local.totalMemory)),kv("Node.js",data.local.nodeVersion),data.local.bunVersion)kv("Bun",data.local.bunVersion);if(blank(),info(`${icons.info} Remote Agent`),kv("URL",data.agentUrl),data.remote){if(kv("Version",colors.bold(data.remote.version)),data.remote.build)kv("Build",data.remote.build);if(data.remote.commit)kv("Commit",data.remote.commit);if(data.remote.nodeVersion)kv("Node.js (remote)",data.remote.nodeVersion);if(data.remote.bunVersion)kv("Bun (remote)",data.remote.bunVersion)}else kv("Status",colors.dim("not reachable"));blank()},interactive:async(data)=>{let lines=[];if(lines.push("Local System"),lines.push(` Hostname: ${data.local.hostname}`),lines.push(` Platform: ${data.local.platform} ${data.local.arch}`),lines.push(` OS Release: ${data.local.release}`),lines.push(` CPUs: ${data.local.cpus}`),lines.push(` Total Memory: ${formatBytes(data.local.totalMemory)}`),lines.push(` Node.js: ${data.local.nodeVersion}`),data.local.bunVersion)lines.push(` Bun: ${data.local.bunVersion}`);if(lines.push(""),lines.push("Remote Agent"),lines.push(` URL: ${data.agentUrl}`),data.remote){if(lines.push(` Version: ${data.remote.version}`),data.remote.build)lines.push(` Build: ${data.remote.build}`);if(data.remote.commit)lines.push(` Commit: ${data.remote.commit}`);if(data.remote.nodeVersion)lines.push(` Node.js: ${data.remote.nodeVersion} (remote)`);if(data.remote.bunVersion)lines.push(` Bun: ${data.remote.bunVersion} (remote)`)}else lines.push(" Status: not reachable");await interactiveDetail({title:"VibeControls Agent Info",body:lines.join(`
5
5
  `),footer:"press q to exit"})},json:(data)=>({local:data.local,agentUrl:data.agentUrl,remote:data.remote,remoteError:data.remoteError??null})})}catch(err){fail(`Failed to get info: ${errMsg(err)}`)}})}var DEFAULT_AGENT_URL3="http://localhost:3005";function register4(program){program.command("system").description("Show system information for a running VibeControls agent").option("--agent-url <url>","Agent URL",DEFAULT_AGENT_URL3).option("--json","Emit JSON").option("--plain","Force plain text output").action(async function(opts){try{let merged={...program.opts(),...opts},agentUrl=getAgentUrl(merged),profile=encodeURIComponent(resolveProfileName(merged));await runMultimode({mode:pickOutputMode(merged),fetchData:()=>apiGet(agentUrl,`/api/profiles/${profile}/agent/system`),plain:(data)=>{if(header("Agent System Information"),blank(),info(`${icons.info} Agent`),kv("Version",colors.bold(data.agentVersion)),data.bunVersion)kv("Bun",data.bunVersion);if(data.environment)kv("Environment",data.environment);kv("Uptime",formatDuration(data.uptime)),blank(),info(`${icons.info} Platform`),kv("OS",`${data.platform} ${data.arch}`),kv("Hostname",data.hostname),kv("Release",data.release),blank(),info(`${icons.info} Resources`),kv("CPUs",String(data.cpus)),kv("Total Memory",formatBytes(data.totalMemory)),kv("Free Memory",formatBytes(data.freeMemory)),blank(),info(`${icons.info} Paths`),kv("Home",data.homeDir),kv("CWD",data.cwd),blank()},interactive:async(data)=>{let lines=["Agent",` Version: ${data.agentVersion}`,...data.bunVersion?[` Bun: ${data.bunVersion}`]:[],...data.environment?[` Environment: ${data.environment}`]:[],` Uptime: ${formatDuration(data.uptime)}`,"","Platform",` OS: ${data.platform} ${data.arch}`,` Hostname: ${data.hostname}`,` Release: ${data.release}`,"","Resources",` CPUs: ${data.cpus}`,` Total Mem: ${formatBytes(data.totalMemory)}`,` Free Mem: ${formatBytes(data.freeMemory)}`,"","Paths",` Home: ${data.homeDir}`,` CWD: ${data.cwd}`];await interactiveDetail({title:"Agent System Information",body:lines.join(`