agentradar-cli 0.1.2 → 0.1.4

package/README.md

@@ -6,10 +6,12 @@ From the agent's project folder:
 
 ```sh
 npx -y agentradar-cli setup
+# Use the exact runner ID printed by setup:
+npx -y agentradar-cli runner start <runner-id>
 npx -y agentradar-cli skill install
 ```
 
-The setup command prints a short approval code. Approve that code in the AgentRadar vendor portal; the CLI then receives the AgentRadar bearer in the polling response body and writes the MCP entry to the project-local section of `$CLAUDE_CONFIG_DIR/.claude.json`, or `~/.claude.json` when that variable is unset, with mode `0600`. It prints the path it wrote. It never prints the bearer or puts it in a URL, command argument, environment variable, or repository file.
+The setup command prints a short approval code. Approve that code in the AgentRadar vendor portal; the CLI then receives the AgentRadar bearer in the polling response body and writes the project MCP entry plus the supported runner's private config under `~/.agentradar`, with secret-bearing files mode `0600`. It prints the paths and the exact runner start command. It never prints the bearer or puts it in a URL, command argument, or repository file. The supervisor stages credentials into private runtime files, scrubs its child environment, and gives Claude Code only the strict AgentRadar MCP config.
 
 Claude Code asks you to trust the folder on first launch. `setup` does not pre-accept that for you, and the onboarding lines above deliberately do not: the `hasTrustDialogAccepted` flag trusts everything already in the directory — existing hooks, `.claude/settings.json`, skills — not just the MCP entry setup added. Dismiss the prompt yourself.
 
@@ -17,4 +19,4 @@ There is a `--trust` flag for unattended runners, where a launch prompt would ha
 
 The skill command installs only the package-bundled `agentradar-vendor` markdown skill at `.claude/skills/agentradar-vendor/SKILL.md` in the current project. It does not fetch or require access to the private AgentRadar repository.
 
-Claude authentication stays separate: start Claude Code and use interactive `/login` with the vendor's claude.ai account. Do not set `ANTHROPIC_API_KEY` or `CLAUDE_CODE_OAUTH_TOKEN`.
+Claude authentication stays separate. Preferred: use interactive `/login` with the vendor's claude.ai account. A `CLAUDE_CODE_OAUTH_TOKEN` may be stored in the private runner env file when non-interactive Claude authentication is required; the supervisor stages it into a mode-`0600` runtime file before launch. `ANTHROPIC_API_KEY` is prohibited and the supervisor refuses to start when it is set.

package/dist/index.js

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { installVendorSkill } from "./skill-install.js";
+import { startVendorRunner } from "./runner.js";
 import { setupVendorAgent } from "./setup.js";
 async function main() {
     const args = process.argv.slice(2);
@@ -11,11 +12,20 @@ async function main() {
         await setupVendorAgent({ trust: true });
         return;
     }
+    if (args.length === 2 && args[0] === "runner" && args[1] === "start") {
+        console.error("Usage: agentradar runner start <runner-id>");
+        process.exitCode = 1;
+        return;
+    }
+    if (args.length === 3 && args[0] === "runner" && args[1] === "start") {
+        process.exitCode = await startVendorRunner(args[2]);
+        return;
+    }
     if (args.length === 2 && args[0] === "skill" && args[1] === "install") {
         await installVendorSkill();
         return;
     }
-    console.error("Usage: agentradar setup [--trust] | agentradar skill install");
+    console.error("Usage: agentradar setup [--trust] | agentradar runner start <runner-id> | agentradar skill install");
     process.exitCode = 1;
 }
 main().catch((error) => {

package/dist/runner.js

@@ -0,0 +1,17 @@
+import { spawn } from "node:child_process";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+export async function startVendorRunner(runnerId, home = homedir()) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/.test(runnerId)) {
+        throw new Error("Invalid runner ID");
+    }
+    const envPath = join(home, ".agentradar", "agents", `${runnerId}.env`);
+    const supervisor = join(dirname(fileURLToPath(import.meta.url)), "vendor-runner", "supervisor", "supervise-agent.sh");
+    return new Promise((resolve, reject) => {
+        const child = spawn("bash", [supervisor, envPath], { stdio: "inherit", env: process.env });
+        child.once("error", reject);
+        child.once("exit", (code, signal) => resolve(code ?? (signal ? 1 : 0)));
+    });
+}
+//# sourceMappingURL=runner.js.map

package/dist/setup.js

@@ -1,4 +1,4 @@
-import { lstat, readFile, realpath, rename, chmod, writeFile } from "node:fs/promises";
+import { chmod, lstat, mkdir, readFile, realpath, rename, writeFile } from "node:fs/promises";
 import { basename, join, resolve } from "node:path";
 import { homedir } from "node:os";
 import * as tls from "node:tls";
@@ -109,6 +109,58 @@ async function installProjectMcp(configPath, cwd, installation, trust) {
     await chmod(configPath, 0o600);
     return projectPath;
 }
+function shellValue(value) {
+    return `'${value.replaceAll("'", "'\\''")}'`;
+}
+async function writePrivateFile(path, contents) {
+    try {
+        if ((await lstat(path)).isSymbolicLink())
+            throw new Error(`Refusing to replace a symlinked ${path}`);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    const tempPath = `${path}.${process.pid}.tmp`;
+    await writeFile(tempPath, contents, { mode: 0o600 });
+    await rename(tempPath, path);
+    await chmod(path, 0o600);
+}
+async function installRunner(home, projectPath, approved) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/.test(approved.runnerId)) {
+        throw new Error("AgentRadar returned an invalid runner ID");
+    }
+    const endpoint = new URL(approved.installation.mcpEndpoint);
+    if (endpoint.protocol !== "https:" || !/^ar_[A-Za-z0-9_-]+$/.test(approved.installation.bearer)) {
+        throw new Error("AgentRadar returned an invalid setup payload");
+    }
+    const agentDir = join(home, ".agentradar", "agents");
+    const configDir = join(home, ".agentradar", "config", approved.runnerId);
+    await mkdir(agentDir, { recursive: true, mode: 0o700 });
+    await mkdir(configDir, { recursive: true, mode: 0o700 });
+    await chmod(agentDir, 0o700);
+    await chmod(configDir, 0o700);
+    const mcpConfig = join(configDir, "awp-only.json");
+    const envPath = join(agentDir, `${approved.runnerId}.env`);
+    await writePrivateFile(mcpConfig, `${JSON.stringify({
+        mcpServers: {
+            agentradar: {
+                type: "http",
+                url: endpoint.toString(),
+                headers: { Authorization: `Bearer ${approved.installation.bearer}` },
+            },
+        },
+    }, null, 2)}\n`);
+    await writePrivateFile(envPath, [
+        `AGENT_NAME=${shellValue(approved.runnerId)}`,
+        `AR_BASE=${shellValue(projectPath)}`,
+        `AWP_MCP_URL=${shellValue(endpoint.toString())}`,
+        `AWP_BEARER=${shellValue(approved.installation.bearer)}`,
+        `MCP_CONFIG=${shellValue(mcpConfig)}`,
+        "",
+    ].join("\n"));
+    return envPath;
+}
 export async function setupVendorAgent(deps = {}) {
     if (!deps.fetch && tls.getCACertificates && tls.setDefaultCACertificates) {
         tls.setDefaultCACertificates([...tls.getCACertificates("default"), ...tls.getCACertificates("system")]);
@@ -144,13 +196,16 @@ export async function setupVendorAgent(deps = {}) {
         const configPath = claudeConfigPath(home);
         const trust = deps.trust === true;
         const projectPath = await installProjectMcp(configPath, cwd, approved.installation, trust);
+        const runnerEnv = await installRunner(home, projectPath, approved);
         // Print the path, not just "installed". D3 was a silent write to the wrong file under a
         // relocated CLAUDE_CONFIG_DIR; naming the target turns that class of failure into a glance.
         log(`AgentRadar MCP installed for this project → ${configPath}`);
         log(trust
             ? `--trust: pre-accepted the trust dialog for ${projectPath}. Claude Code will run this folder's existing hooks and settings without asking.`
             : `Claude Code will ask you to trust ${projectPath} on first launch — approve it there. Not pre-accepted, because that would trust everything already in the folder, not just this MCP. Re-run with --trust for unattended onboarding.`);
-        log("Start Claude Code and use /login with your claude.ai account.");
+        log(`Runner installed → ${runnerEnv}`);
+        log(`Start it with: agentradar runner start ${approved.runnerId}`);
+        log("Claude Code will use your existing /login session. ANTHROPIC_API_KEY is prohibited; a securely stored CLAUDE_CODE_OAUTH_TOKEN is also supported.");
         return;
     }
     throw new Error("AgentRadar setup code expired; run setup again");