agentradar-cli 0.1.8 → 0.1.9

package/dist/index.js

@@ -2,8 +2,13 @@
 import { installVendorSkill } from "./skill-install.js";
 import { startVendorRunner } from "./runner.js";
 import { setupVendorAgent } from "./setup.js";
+import { installSyncTimer, syncAgentDir } from "./sync.js";
 async function main() {
     const args = process.argv.slice(2);
+    if (args.length === 1 && (args[0] === "--help" || args[0] === "-h")) {
+        console.log("Usage: agentradar setup [--trust] | agentradar runner start <runner-id> | agentradar skill install | agentradar sync [dir] | agentradar sync install [dir] [--interval <s>]");
+        return;
+    }
     if (args.length === 1 && args[0] === "setup") {
         await setupVendorAgent();
         return;
@@ -25,8 +30,27 @@ async function main() {
         await installVendorSkill();
         return;
     }
-    console.error("Usage: agentradar setup [--trust] | agentradar runner start <runner-id> | agentradar skill install");
-    process.exitCode = 1;
+    if (args[0] === "sync" && args[1] === "install") {
+        const rest = args.slice(2);
+        const iIdx = rest.indexOf("--interval");
+        const interval = iIdx >= 0 ? Number(rest[iIdx + 1]) : 600;
+        if (!Number.isFinite(interval) || interval < 60) {
+            console.error("--interval must be a number of seconds >= 60");
+            process.exitCode = 1;
+            return;
+        }
+        const dir = rest.filter((_, i) => i !== iIdx && i !== iIdx + 1)[0];
+        process.exitCode = await installSyncTimer(dir, interval);
+        return;
+    }
+    if (args[0] === "sync" && args.length <= 2) {
+        process.exitCode = await syncAgentDir(args[1]);
+        return;
+    }
+    const help = args.length === 1 && (args[0] === "--help" || args[0] === "-h");
+    (help ? console.log : console.error)("Usage: agentradar setup [--trust] | agentradar runner start <runner-id> | agentradar skill install | agentradar sync [dir] | agentradar sync install [dir] [--interval <s>]");
+    if (!help)
+        process.exitCode = 1;
 }
 main().catch((error) => {
     console.error(error instanceof Error ? error.message : "AgentRadar command failed");

package/dist/setup.js

@@ -59,9 +59,17 @@ export function claudeConfigPath(home, env = process.env) {
  *
  * Returns the resolved project path so the caller can name it in the trust guidance.
  */
+function trustedMcpEndpoint(value) {
+    const endpoint = new URL(value);
+    const loopbackHttp = endpoint.protocol === "http:" && (endpoint.hostname === "localhost" ||
+        endpoint.hostname === "127.0.0.1" ||
+        endpoint.hostname === "[::1]" ||
+        endpoint.hostname.endsWith(".localhost"));
+    return endpoint.protocol === "https:" || loopbackHttp ? endpoint : null;
+}
 async function installProjectMcp(configPath, cwd, installation, trust) {
-    const endpoint = new URL(installation.mcpEndpoint);
-    if (endpoint.protocol !== "https:" || !/^ar_[A-Za-z0-9_-]+$/.test(installation.bearer)) {
+    const endpoint = trustedMcpEndpoint(installation.mcpEndpoint);
+    if (!endpoint || !/^ar_[A-Za-z0-9_-]+$/.test(installation.bearer)) {
         throw new Error("AgentRadar returned an invalid setup payload");
     }
     const projectPath = await realpath(cwd);
@@ -130,8 +138,8 @@ async function installRunner(home, projectPath, approved) {
     if (!/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/.test(approved.runnerId)) {
         throw new Error("AgentRadar returned an invalid runner ID");
     }
-    const endpoint = new URL(approved.installation.mcpEndpoint);
-    if (endpoint.protocol !== "https:" || !/^ar_[A-Za-z0-9_-]+$/.test(approved.installation.bearer)) {
+    const endpoint = trustedMcpEndpoint(approved.installation.mcpEndpoint);
+    if (!endpoint || !/^ar_[A-Za-z0-9_-]+$/.test(approved.installation.bearer)) {
         throw new Error("AgentRadar returned an invalid setup payload");
     }
     const agentDir = join(home, ".agentradar", "agents");

package/dist/sync.js

@@ -0,0 +1,89 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { homedir, platform } from "node:os";
+import { mkdir, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+const run = promisify(execFile);
+/**
+ * `agentradar sync [dir]` — fast-forward a git-scoped agent project dir to its remote branch.
+ *
+ * Safe by construction:
+ *  - refuses when tracked files are locally MODIFIED (vendor edits are never clobbered);
+ *  - `checkout -f -B <branch> <remote>/<branch>` rewrites tracked paths only, so untracked runtime
+ *    state (sessions, .env, caches) survives;
+ *  - uses the vendor's own git credentials — the CLI never carries any.
+ *
+ * Config (optional, via `git config`): `agentradar.syncRemote` (default `origin`),
+ * `agentradar.syncBranch` (default `main`).
+ */
+export async function syncAgentDir(dir = process.cwd()) {
+    const git = (...args) => run("git", ["-C", dir, ...args]);
+    try {
+        await git("rev-parse", "--git-dir");
+    }
+    catch {
+        console.error(`Not a git repository: ${dir}`);
+        return 1;
+    }
+    const remote = (await git("config", "--get", "agentradar.syncRemote").catch(() => ({ stdout: "origin" }))).stdout.trim() || "origin";
+    const branch = (await git("config", "--get", "agentradar.syncBranch").catch(() => ({ stdout: "main" }))).stdout.trim() || "main";
+    const dirty = (await git("status", "--porcelain")).stdout
+        .split("\n")
+        .filter((l) => l && !l.startsWith("??"));
+    if (dirty.length > 0) {
+        console.error(`Refusing to sync: ${dirty.length} tracked file(s) locally modified in ${dir}. Commit, stash, or revert them first.`);
+        return 1;
+    }
+    await git("fetch", remote, branch);
+    const target = (await git("rev-parse", `${remote}/${branch}`)).stdout.trim();
+    const head = (await git("rev-parse", "HEAD").catch(() => ({ stdout: "" }))).stdout.trim();
+    if (head === target) {
+        console.log(`Up to date at ${target.slice(0, 8)}.`);
+        return 0;
+    }
+    await git("checkout", "-f", "-B", branch, `${remote}/${branch}`);
+    console.log(`Synced ${dir} to ${remote}/${branch} @ ${target.slice(0, 8)}.`);
+    return 0;
+}
+/**
+ * `agentradar sync install [dir] [--interval <seconds>]` — install a background timer that runs
+ * `agentradar sync <dir>` periodically. launchd LaunchAgent on macOS, systemd user timer on Linux.
+ */
+export async function installSyncTimer(dir = process.cwd(), intervalSeconds = 600) {
+    const abs = dir;
+    const cli = process.argv[1] ?? "agentradar";
+    const node = process.execPath;
+    if (platform() === "darwin") {
+        const label = `com.agentradar.sync.${abs.replace(/[^A-Za-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(-40)}`;
+        const plistDir = join(homedir(), "Library", "LaunchAgents");
+        await mkdir(plistDir, { recursive: true });
+        const plist = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0"><dict>
+  <key>Label</key><string>${label}</string>
+  <key>ProgramArguments</key><array><string>${node}</string><string>${cli}</string><string>sync</string><string>${abs}</string></array>
+  <key>StartInterval</key><integer>${intervalSeconds}</integer>
+  <key>RunAtLoad</key><true/>
+  <key>StandardOutPath</key><string>${join(homedir(), "Library", "Logs", `${label}.log`)}</string>
+  <key>StandardErrorPath</key><string>${join(homedir(), "Library", "Logs", `${label}.log`)}</string>
+</dict></plist>
+`;
+        const plistPath = join(plistDir, `${label}.plist`);
+        await writeFile(plistPath, plist);
+        await run("launchctl", ["bootout", `gui/${process.getuid?.() ?? 501}/${label}`]).catch(() => undefined);
+        await run("launchctl", ["bootstrap", `gui/${process.getuid?.() ?? 501}`, plistPath]);
+        console.log(`Installed launchd timer ${label} (every ${intervalSeconds}s) for ${abs}.`);
+        return 0;
+    }
+    // Linux: systemd user service + timer.
+    const unit = `agentradar-sync-${abs.replace(/[^A-Za-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(-40)}`;
+    const unitDir = join(homedir(), ".config", "systemd", "user");
+    await mkdir(unitDir, { recursive: true });
+    await writeFile(join(unitDir, `${unit}.service`), `[Unit]\nDescription=AgentRadar sync ${abs}\n\n[Service]\nType=oneshot\nExecStart=${node} ${cli} sync ${abs}\n`);
+    await writeFile(join(unitDir, `${unit}.timer`), `[Unit]\nDescription=AgentRadar sync timer ${abs}\n\n[Timer]\nOnBootSec=60\nOnUnitActiveSec=${intervalSeconds}\n\n[Install]\nWantedBy=timers.target\n`);
+    await run("systemctl", ["--user", "daemon-reload"]);
+    await run("systemctl", ["--user", "enable", "--now", `${unit}.timer`]);
+    console.log(`Installed systemd user timer ${unit} (every ${intervalSeconds}s) for ${abs}.`);
+    return 0;
+}
+//# sourceMappingURL=sync.js.map

package/dist/vendor-runner/feeder.mjs

@@ -421,6 +421,10 @@ export function stripVolatilePaneLines(text) {
     .join("\n");
 }
 
+export function paneInputReady(text) {
+  return /bypass permissions on\b|^\s*❯/im.test(String(text ?? "").split("\n").slice(-12).join("\n"));
+}
+
 function capturePane() {
   const r = spawnSync("tmux", ["capture-pane", "-p", "-t", TMUX_SESSION], { encoding: "utf8" });
   if (r.status !== 0 || typeof r.stdout !== "string") {
@@ -439,9 +443,10 @@ function capturePane() {
   // claude's TUI shows a working line ("… esc to interrupt") while mid-turn. This is only a HINT that
   // triggers a probe on stagnation — it never decides liveness, so a missed/extra hint is harmless.
   const inProgress = /esc to interrupt|\besc to cancel\b/i.test(text);
-  // This runner always starts Claude with --dangerously-skip-permissions. Its input footer is therefore a
-  // positive signal that startup/trust/auth screens are gone and the interactive TUI can accept a work turn.
-  const inputReady = /bypass permissions on\b/i.test(text.split("\n").slice(-12).join("\n"));
+  // Claude's idle input prompt is the durable readiness signal. The optional bypass-permissions footer
+  // disappeared from a live Claude build after several turns, which falsely demoted a healthy pane to
+  // `starting` and stopped next_event from draining until its heartbeat aged stale.
+  const inputReady = paneInputReady(text);
   return { hash, inProgress, inputReady };
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentradar-cli",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Secure AgentRadar vendor setup and skill installer",
   "type": "module",
   "bin": {
@@ -11,6 +11,7 @@
     "dist/setup.js",
     "dist/runner.js",
     "dist/skill-install.js",
+    "dist/sync.js",
     "dist/vendor-runner/**",
     "dist/agentradar-vendor/SKILL.md",
     "README.md"