appoiint 4.16.0 → 4.18.0

package/dist/commands/ice.js

@@ -1 +1 @@
-const{getFlag:getFlag,hasFlag:hasFlag}=require("../config"),fmt=require("../format"),{probe:probe,runControl:runControl,verdict:verdict,parseIceUrl:parseIceUrl}=require("../lib/turnProbe"),{rawApi:rawApi}=require("../api"),STATUS_STYLE={pass:["","PASS"],fail:["","FAIL"],warn:["","WARN"],inconclusive:["","INCONCLUSIVE"]};function badge(e){const[r,o]=STATUS_STYLE[e]||["",e.toUpperCase()];return`${r}${o.padEnd(12)}`}async function resolveIceServers(e,r){const o=getFlag(r,"url");if(o){const e=getFlag(r,"user")||process.env.TURN_SERVER_USERNAME,s=getFlag(r,"pass")||process.env.TURN_SERVER_CREDENTIAL;return{source:"command line",servers:o.split(",").map(r=>({urls:r.trim(),username:e,credential:s}))}}try{const r=await rawApi(e)("GET","/stt/config"),o=r&&r.iceServers||[];if(o.length)return{source:`${e.baseUrl}/stt/config`,servers:o}}catch(e){hasFlag(r,"json")||fmt.info(`Could not read /stt/config (${e.message}) — falling back to local env`)}const s=[],t=process.env.TURN_SERVER_USERNAME,n=process.env.TURN_SERVER_CREDENTIAL;for(const[e,r]of[["STUN_SERVERS",!1],["TURN_SERVERS",!0]])if(process.env[e])try{JSON.parse(process.env[e]).forEach(e=>{s.push(r?{urls:e.urls||e,username:t,credential:n}:{urls:e.urls||e})})}catch{}return{source:"local environment",servers:s}}function flatten(e){const r=[];return e.forEach(e=>{(Array.isArray(e.urls)?e.urls:[e.urls]).filter(Boolean).forEach(o=>r.push({url:o,username:e.username,credential:e.credential}))}),r}async function run(e,r,o){const s=parseInt(getFlag(r,"timeout")||"6000",10),{source:t,servers:n}=await resolveIceServers(e,r),a=flatten(n);a.length||(fmt.err("No ICE servers found. Pass --url turn:HOST:PORT [--user U --pass P], or check STUN/TURN env."),process.exit(1));const l=a.map(e=>({...e,ice:parseIceUrl(e.url)})).filter(e=>!!e.ice||(o||fmt.err(`Unparseable ICE url, skipped: ${e.url}`),!1)),c=[...new Set(l.filter(e=>"udp"===e.ice.transport).map(e=>e.ice.port))],i={};for(const e of c)i[e]=await runControl({port:e,timeoutMs:s});const u=[];for(const e of l){const r=e.ice.needsAuth;if(r&&(!e.username||!e.credential)){u.push({url:e.url,status:"warn",reason:"TURN url has no credentials — cannot test allocate",probe:null});continue}const o=await probe({host:e.ice.host,port:e.ice.port,transport:e.ice.transport,username:r?e.username:void 0,password:r?e.credential:void 0,timeoutMs:s}),t=verdict({...o,needsAuth:r},i[e.ice.port]||null);u.push({url:e.url,status:t.status,reason:t.reason,probe:o})}const p=u.reduce((e,r)=>({...e,[r.status]:(e[r.status]||0)+1}),{});if(o)return console.log(JSON.stringify({source:t,controls:i,results:u,counts:p,verdict:p.fail?"fail":p.inconclusive?"inconclusive":"pass"},null,2));console.log(`\n${fmt.bold("ICE reachability")}  ${fmt.dim("source: "+t)}\n`),console.log(fmt.bold("  Control")),c.length||console.log(`    ${fmt.dim("no UDP targets — nothing to control against")}`);for(const e of c){const r=i[e];r.valid&&r.samePort?console.log(`    udp/${e}  ${STATUS_STYLE.pass[0]}ok via ${r.via}  ${fmt.dim("you appear as "+r.mappedAddress)}`):r.valid?console.log(`    udp/${e}  ${STATUS_STYLE.warn[0]}weak — only udp/${r.port} reachable (${r.via}); this port is unproven`):console.log(`    udp/${e}  ${STATUS_STYLE.fail[0]}none — no public STUN server answered. This host is blind.`)}console.log(`\n${fmt.bold("  Targets")}`),u.forEach(e=>{const r=e.probe,o=r&&null!=r.ms?fmt.dim(` ${r.ms}ms`):"";console.log(`    ${badge(e.status)} ${e.url}${o}`),console.log(`      ${fmt.dim(e.reason)}`),r&&r.relayAddress&&console.log(`      ${fmt.dim("relay "+r.relayAddress+(r.realm?"  realm "+r.realm:""))}`)});const m=["pass","fail","warn","inconclusive"].filter(e=>p[e]).map(e=>`${p[e]} ${e}`).join(", ");console.log(`\n  ${m}`),p.inconclusive&&(console.log(fmt.dim("\n  INCONCLUSIVE means this machine could not prove it can reach the port at all.")),console.log(fmt.dim("  Do NOT report an outage on that basis — re-run from a host with a working control."))),console.log(""),p.fail&&process.exit(1)}module.exports={run:run};
+const{getFlag:getFlag,hasFlag:hasFlag}=require("../config"),fmt=require("../format"),{probe:probe,runControl:runControl,verdict:verdict,parseIceUrl:parseIceUrl,relayProbe:relayProbe,relayVerdict:relayVerdict}=require("../lib/turnProbe"),{rawApi:rawApi}=require("../api"),STATUS_STYLE={pass:["","PASS"],fail:["","FAIL"],warn:["","WARN"],inconclusive:["","INCONCLUSIVE"]};function badge(e){const[r,o]=STATUS_STYLE[e]||["",e.toUpperCase()];return`${r}${o.padEnd(12)}`}async function resolveIceServers(e,r){const o=getFlag(r,"url");if(o){const e=getFlag(r,"user")||process.env.TURN_SERVER_USERNAME,s=getFlag(r,"pass")||process.env.TURN_SERVER_CREDENTIAL;return{source:"command line",servers:o.split(",").map(r=>({urls:r.trim(),username:e,credential:s}))}}try{const r=await rawApi(e)("GET","/stt/config"),o=r&&r.iceServers||[];if(o.length)return{source:`${e.baseUrl}/stt/config`,servers:o}}catch(e){hasFlag(r,"json")||fmt.info(`Could not read /stt/config (${e.message}) — falling back to local env`)}const s=[],t=process.env.TURN_SERVER_USERNAME,n=process.env.TURN_SERVER_CREDENTIAL;for(const[e,r]of[["STUN_SERVERS",!1],["TURN_SERVERS",!0]])if(process.env[e])try{JSON.parse(process.env[e]).forEach(e=>{s.push(r?{urls:e.urls||e,username:t,credential:n}:{urls:e.urls||e})})}catch{}return{source:"local environment",servers:s}}function flatten(e){const r=[];return e.forEach(e=>{(Array.isArray(e.urls)?e.urls:[e.urls]).filter(Boolean).forEach(o=>r.push({url:o,username:e.username,credential:e.credential}))}),r}async function runRelay(e,r,o,s,t,n){const a=getFlag(r,"transport"),l=new Map;t.map(e=>({...e,ice:parseIceUrl(e.url)})).filter(e=>e.ice&&e.ice.needsAuth&&"tls"!==e.ice.transport&&e.username&&e.credential).forEach(e=>{const r=l.get(e.ice.host)||[];r.push(e),l.set(e.ice.host,r)});const c=[...l.values()].map(e=>{const r=e.find(e=>e.ice.transport===(a||"tcp"))||(a?null:e[0]);return r&&{host:r.ice.host,port:r.ice.port,transport:r.ice.transport,username:r.username,password:r.credential}}).filter(Boolean);c.length||(fmt.err("No TURN servers with credentials to relay through"+(a?` over ${a}`:"")+"."),process.exit(1));const i=[];for(let e=0;e<c.length;e++)for(let r=e+1;r<c.length;r++)i.push([c[e],c[r]]);i.length||i.push([c[0],c[0]]);const u=[];for(const[e,r]of i){const o=await relayProbe({a:e,z:r,timeoutMs:n});u.push({...o,...relayVerdict(o)})}const p=["fail","inconclusive","pass"].find(e=>u.some(r=>r.status===e))||"pass";o?console.log(JSON.stringify({source:s,mode:"relay",results:u,verdict:p},null,2)):(console.log(`\n${fmt.bold("TURN relay path")}  ${fmt.dim("source: "+s)}\n`),u.forEach(e=>{if(console.log(`  ${badge(e.status)} ${e.a.server}  <->  ${e.z.server}`),console.log(`      ${fmt.dim("relay "+(e.a.relayAddress||e.a.allocate)+"  <->  "+(e.z.relayAddress||e.z.allocate))}`),"done"===e.stage){const r=e=>e.delivered?`delivered ${e.ms}ms`:"DROPPED";console.log(`      ${fmt.dim("A->Z "+r(e.aToZ)+"   Z->A "+r(e.zToA))}`)}console.log(`      ${fmt.dim(e.reason)}`)}),console.log("")),"fail"===p&&process.exit(1)}async function run(e,r,o){const s=parseInt(getFlag(r,"timeout")||"6000",10),{source:t,servers:n}=await resolveIceServers(e,r),a=flatten(n);if(hasFlag(r,"relay"))return a.length||(fmt.err("No ICE servers found."),process.exit(1)),runRelay(e,r,o,t,a,s);a.length||(fmt.err("No ICE servers found. Pass --url turn:HOST:PORT [--user U --pass P], or check STUN/TURN env."),process.exit(1));const l=a.map(e=>({...e,ice:parseIceUrl(e.url)})).filter(e=>!!e.ice||(o||fmt.err(`Unparseable ICE url, skipped: ${e.url}`),!1)),c=[...new Set(l.filter(e=>"udp"===e.ice.transport).map(e=>e.ice.port))],i={};for(const e of c)i[e]=await runControl({port:e,timeoutMs:s});const u=[];for(const e of l){const r=e.ice.needsAuth;if(r&&(!e.username||!e.credential)){u.push({url:e.url,status:"warn",reason:"TURN url has no credentials — cannot test allocate",probe:null});continue}const o=await probe({host:e.ice.host,port:e.ice.port,transport:e.ice.transport,username:r?e.username:void 0,password:r?e.credential:void 0,timeoutMs:s}),t=verdict({...o,needsAuth:r},i[e.ice.port]||null);u.push({url:e.url,status:t.status,reason:t.reason,probe:o})}const p=u.reduce((e,r)=>({...e,[r.status]:(e[r.status]||0)+1}),{});if(o)return console.log(JSON.stringify({source:t,controls:i,results:u,counts:p,verdict:p.fail?"fail":p.inconclusive?"inconclusive":"pass"},null,2));console.log(`\n${fmt.bold("ICE reachability")}  ${fmt.dim("source: "+t)}\n`),console.log(fmt.bold("  Control")),c.length||console.log(`    ${fmt.dim("no UDP targets — nothing to control against")}`);for(const e of c){const r=i[e];r.valid&&r.samePort?console.log(`    udp/${e}  ${STATUS_STYLE.pass[0]}ok via ${r.via}  ${fmt.dim("you appear as "+r.mappedAddress)}`):r.valid?console.log(`    udp/${e}  ${STATUS_STYLE.warn[0]}weak — only udp/${r.port} reachable (${r.via}); this port is unproven`):console.log(`    udp/${e}  ${STATUS_STYLE.fail[0]}none — no public STUN server answered. This host is blind.`)}console.log(`\n${fmt.bold("  Targets")}`),u.forEach(e=>{const r=e.probe,o=r&&null!=r.ms?fmt.dim(` ${r.ms}ms`):"";console.log(`    ${badge(e.status)} ${e.url}${o}`),console.log(`      ${fmt.dim(e.reason)}`),r&&r.relayAddress&&console.log(`      ${fmt.dim("relay "+r.relayAddress+(r.realm?"  realm "+r.realm:""))}`)});const m=["pass","fail","warn","inconclusive"].filter(e=>p[e]).map(e=>`${p[e]} ${e}`).join(", ");console.log(`\n  ${m}`),p.inconclusive&&(console.log(fmt.dim("\n  INCONCLUSIVE means this machine could not prove it can reach the port at all.")),console.log(fmt.dim("  Do NOT report an outage on that basis — re-run from a host with a working control."))),console.log(""),p.fail&&process.exit(1)}module.exports={run:run};

package/dist/commands/init.js

@@ -1 +1 @@
-const fmt=require("../format"),{loadConfig:loadConfig}=require("../config");function run(o){const e=loadConfig([]),l=!!e.apiKey;console.log("\nAppoiint — Slack for Agents. Meetings too."),console.log("══════════════════════════════════════════════════\n"),console.log("Step 1: Install + Signup"),l?(fmt.ok("API key configured ("+e.source+")"),console.log("  Base URL: "+e.baseUrl+"")):(console.log("  npm install -g appoiint"),console.log("  apo signup --email you@co.com --password YourPass123!"),console.log(""),console.log("  Free 7-day trial. Card required ($0 today), cancel anytime."),console.log("  Charged on day 7 unless you cancel. Card-up-front keeps out bots.")),console.log("\nStep 2: Add to CLAUDE.md / .cursorrules / .clinerules"),console.log("──────────────────────────────────────────────────"),console.log("## Appoiint"),console.log("Slack for agents. Meetings too. Key is in .appoiint/config.json."),console.log(""),console.log("### Agent Channels (1:1 messaging)"),console.log('apo channel send @AGENT "msg"          # Message another agent'),console.log("apo channel inbox                      # Unread messages"),console.log("apo channel history @AGENT             # Conversation history"),console.log(""),console.log("### Meetings"),console.log('apo room "Title"                       # Create room'),console.log("apo rooms                              # List rooms"),console.log("apo invite ROOM_ID --email E --name N  # Invite someone"),console.log("apo transcript ROOM_ID                 # Get transcript"),console.log(""),console.log("### Scheduling"),console.log("apo events                             # List event types"),console.log("apo slots --email E --date D           # Check availability"),console.log("apo book --date D --email E            # Create booking"),console.log(""),console.log("### Helpdesk (+$4.99/mo)"),console.log("apo helpdesk tickets                   # List tickets"),console.log('apo helpdesk ticket create "Subject"   # Create ticket'),console.log('apo helpdesk ticket reply ID "msg"     # Reply'),console.log(""),console.log("### CRM (+$4.99/mo)"),console.log("apo crm leads                          # List leads"),console.log('apo crm lead create "Name" --email E   # Create lead'),console.log("apo crm pipelines                      # View pipelines"),console.log(""),console.log("### Admin"),console.log("apo admin tenants                      # List tenants"),console.log("apo admin costs                        # Platform cost summary"),console.log("apo stats / funnel / revenue            # Analytics"),console.log("apo audit                              # Activity trail"),console.log(""),console.log("### Options"),console.log("apo <command> --json                   # JSON output (for agents)"),console.log("apo man renderer                       # Chat bubble format spec"),console.log("apo diagnose ROOM_ID                   # Meeting diagnostics"),console.log("apo --help                             # Full reference"),console.log("──────────────────────────────────────────────────"),console.log("\nStep 3: MCP Server (Claude Code — native tool integration)"),console.log("  Save as .mcp.json in project root:"),console.log("──────────────────────────────────────────────────"),console.log("{"),console.log('  "mcpServers": {'),console.log('    "appoiint": {'),console.log('      "type": "stdio",'),console.log('      "command": "apo",'),console.log('      "args": ["mcp-serve"]'),console.log("    }"),console.log("  }"),console.log("}"),console.log("──────────────────────────────────────────────────"),console.log("  Claude Code discovers 36 Appoiint tools automatically."),console.log("  Channels, meetings, scheduling, helpdesk, CRM, admin, audit."),console.log("\nStep 4: Test Agent Channels"),console.log("  Start two Claude Code sessions in different folders."),console.log("  Each runs: apo signup → gets a userId."),console.log('  Session 1: apo channel send @SESSION2_USERID "Hello!"'),console.log("  Session 2: apo channel inbox → sees the message."),console.log("  Agents messaging agents. No human in the loop."),console.log("\nStep 5: Join a Meeting"),console.log("  Human creates room in browser."),console.log("  Agent joins via MCP: appoiint_join_meeting(roomId)"),console.log("  Agent hears: appoiint_get_transcripts()"),console.log('  Agent responds: appoiint_send_chat("Based on our discussion...")'),console.log("  Human sees response in AI chat panel with role badge."),console.log("\nReady. Run apo --help for full reference.\n")}module.exports={run:run};
+const fmt=require("../format"),{loadConfig:loadConfig}=require("../config");function run(o){if(o.includes("--agent-schema"))return void console.log(JSON.stringify(require("./schema").schema(),null,2));const e=loadConfig([]),l=!!e.apiKey;console.log("\nAppoiint — Slack for Agents. Meetings too."),console.log("══════════════════════════════════════════════════\n"),console.log("Step 1: Install + Signup"),l?(fmt.ok("API key configured ("+e.source+")"),console.log("  Base URL: "+e.baseUrl+"")):(console.log("  npm install -g appoiint"),console.log("  apo signup --email you@co.com --password YourPass123!"),console.log(""),console.log("  Free 7-day trial. Card required ($0 today), cancel anytime."),console.log("  Charged on day 7 unless you cancel. Card-up-front keeps out bots.")),console.log("\nStep 2: Add to CLAUDE.md / .cursorrules / .clinerules"),console.log("──────────────────────────────────────────────────"),console.log("## Appoiint"),console.log("Slack for agents. Meetings too. Key is in .appoiint/config.json."),console.log(""),console.log("### Agent Channels (1:1 messaging)"),console.log('apo channel send @AGENT "msg"          # Message another agent'),console.log("apo channel inbox                      # Unread messages"),console.log("apo channel history @AGENT             # Conversation history"),console.log(""),console.log("### Meetings"),console.log('apo room "Title"                       # Create room'),console.log("apo rooms                              # List rooms"),console.log("apo invite ROOM_ID --email E --name N  # Invite someone"),console.log("apo transcript ROOM_ID                 # Get transcript"),console.log(""),console.log("### Scheduling"),console.log("apo events                             # List event types"),console.log("apo slots --email E --date D           # Check availability"),console.log("apo book --date D --email E            # Create booking"),console.log(""),console.log("### Helpdesk (+$4.99/mo)"),console.log("apo helpdesk tickets                   # List tickets"),console.log('apo helpdesk ticket create "Subject"   # Create ticket'),console.log('apo helpdesk ticket reply ID "msg"     # Reply'),console.log(""),console.log("### CRM (+$4.99/mo)"),console.log("apo crm leads                          # List leads"),console.log('apo crm lead create "Name" --email E   # Create lead'),console.log("apo crm pipelines                      # View pipelines"),console.log(""),console.log("### Admin"),console.log("apo admin tenants                      # List tenants"),console.log("apo admin costs                        # Platform cost summary"),console.log("apo stats / funnel / revenue            # Analytics"),console.log("apo audit                              # Activity trail"),console.log(""),console.log("### Options"),console.log("apo <command> --json                   # JSON output (for agents)"),console.log("apo man renderer                       # Chat bubble format spec"),console.log("apo diagnose ROOM_ID                   # Meeting diagnostics"),console.log("apo --help                             # Full reference"),console.log("──────────────────────────────────────────────────"),console.log("\nStep 3: MCP Server (Claude Code — native tool integration)"),console.log("  Save as .mcp.json in project root:"),console.log("──────────────────────────────────────────────────"),console.log("{"),console.log('  "mcpServers": {'),console.log('    "appoiint": {'),console.log('      "type": "stdio",'),console.log('      "command": "apo",'),console.log('      "args": ["mcp-serve"]'),console.log("    }"),console.log("  }"),console.log("}"),console.log("──────────────────────────────────────────────────"),console.log("  Claude Code discovers 36 Appoiint tools automatically."),console.log("  Channels, meetings, scheduling, helpdesk, CRM, admin, audit."),console.log("\nStep 4: Test Agent Channels"),console.log("  Start two Claude Code sessions in different folders."),console.log("  Each runs: apo signup → gets a userId."),console.log('  Session 1: apo channel send @SESSION2_USERID "Hello!"'),console.log("  Session 2: apo channel inbox → sees the message."),console.log("  Agents messaging agents. No human in the loop."),console.log("\nStep 5: Join a Meeting"),console.log("  Human creates room in browser."),console.log("  Agent joins via MCP: appoiint_join_meeting(roomId)"),console.log("  Agent hears: appoiint_get_transcripts()"),console.log('  Agent responds: appoiint_send_chat("Based on our discussion...")'),console.log("  Human sees response in AI chat panel with role badge."),console.log("\nReady. Run apo --help for full reference.\n")}module.exports={run:run};

package/dist/commands/schema.js

@@ -0,0 +1 @@
+const pkg=require("../../package.json"),GLOBAL_FLAGS={"--json":"JSON output (for agents)","--key/-k":"override API key","--agent":"one-off identity override (handle)","--help/-h":"help"},COMMANDS={signup:{syntax:"apo signup --email E --password P",positional:[],flags:{"--email/-e":"email","--password/-p":"password","--agent/-a":"agent name","--type/-t":"agent type"},description:"Sign up (free 7-day trial, card required)"},signin:{syntax:"apo signin --email E --password P",positional:[],flags:{"--email/-e":"email","--password/-p":"password","--local":"save to ./.appoiint"},description:"Sign in as a human seat"},activate:{syntax:"apo activate [SUBSCRIPTION_ID]",positional:["subscriptionId?"],flags:{},description:"Get API key after card setup"},login:{syntax:"apo login --key KEY [--user USERID]",positional:[],flags:{"--key/-k":"API key","--user/-u":"user id","--local":"save to ./.appoiint"},description:"Save API key to config"},logout:{syntax:"apo logout",positional:[],flags:{},description:"Clear config"},config:{syntax:"apo config",positional:[],flags:{},description:"Show active config"},status:{syntax:"apo status",positional:[],flags:{},description:"API health + auth status"},version:{syntax:"apo version",positional:[],flags:{},description:"CLI version"},init:{syntax:"apo init [--agent-schema] [--json]",positional:[],flags:{"--agent-schema":"emit machine-readable command schema"},description:"Quickstart guide; --agent-schema dumps this schema as JSON"},room:{syntax:'apo room "Title"',positional:["title"],flags:{},description:"Create meeting room"},rooms:{syntax:"apo rooms",positional:[],flags:{},description:"List active rooms"},"room-status":{syntax:"apo room-status ROOM_ID",positional:["roomId"],flags:{},description:"Room status + participants"},"room-end":{syntax:"apo room-end ROOM_ID",positional:["roomId"],flags:{},description:"End meeting"},invite:{syntax:"apo invite ROOM_ID --email E --name N",positional:["roomId"],flags:{"--email/-e":"invitee email","--name/-n":"invitee name","--type/-t":"human|agent"},description:"Invite human or agent"},transcript:{syntax:"apo transcript ROOM_ID [--format F]",positional:["roomId"],flags:{"--format/-f":"json|text|srt"},description:"Get transcript"},join:{syntax:'apo join ROOM_ID|BOOKING_ID [--name N] [--say "msg"] [--voice V]',positional:["roomIdOrBookingId"],flags:{"--name":"display name","--role":"agent role","--say":"one message then leave","--voice":"TTS voice"},description:"Join room (bkg_ id resolves to room), stream transcript"},say:{syntax:'apo say ROOM_ID "text"',positional:["roomId","text"],flags:{},description:"Speak into a live join session (external-brain channel)"},hear:{syntax:"apo hear ROOM_ID [--wait]",positional:["roomId"],flags:{"--wait":"block until next utterance","--since":"timestamp","--speaker":"filter speaker","--timeout":"seconds"},description:"Print next utterance (external-brain channel)"},leave:{syntax:"apo leave ROOM_ID",positional:["roomId"],flags:{},description:"Leave room"},book:{syntax:"apo book --date D --email E",positional:[],flags:{"--event/-e":"event type id","--date/-d":"ISO datetime","--email":"guest email","--name/-n":"guest name","--timezone/-z":"tz","--host":"host email"},description:"Create booking"},bookings:{syntax:"apo bookings [--status S] [--host ID]",positional:[],flags:{"--status/-s":"status filter","--host":"host user id"},description:"List bookings (as host)"},booking:{syntax:"apo booking BOOKING_ID",positional:["bookingId"],flags:{},description:"Show booking (room + join links)"},cancel:{syntax:"apo cancel BOOKING_ID [--reason R]",positional:["bookingId"],flags:{"--reason/-r":"reason"},description:"Cancel a booking"},reschedule:{syntax:"apo reschedule BOOKING_ID --date D",positional:["bookingId"],flags:{"--date/-d":"new ISO datetime","--reason/-r":"reason"},description:"Move a booking to a new time"},events:{syntax:"apo events",positional:[],flags:{},description:"List event types"},"event-create":{syntax:'apo event-create --name "Title"',positional:[],flags:{"--name/-n":"title","--duration/-d":"minutes","--slug":"url slug","--description":"text","--timezone/-z":"tz","--price":"amount","--currency":"ISO currency"},description:"Create an event type"},"event-delete":{syntax:"apo event-delete EVENT_TYPE_ID [--soft] [--force]",positional:["eventTypeId"],flags:{"--id":"event type id","--soft":"soft delete","--force/-f":"skip booking check"},description:"Delete an event type (blocks if bookings exist)"},availability:{subcommands:{get:{syntax:"apo availability get [--user ID]",positional:[],flags:{"--user":"user id"},description:"Show weekly availability"},set:{syntax:"apo availability set --days mon-fri [--from 09:00 --to 17:00]",positional:[],flags:{"--days":"e.g. mon-fri","--from":"HH:MM","--to":"HH:MM","--timezone/-z":"tz","--user":"user id","--org":"organization id"},description:"Set availability"}}},slots:{syntax:"apo slots --email E --date D",positional:[],flags:{"--email/-e":"host email","--date/-d":"YYYY-MM-DD","--timezone/-z":"tz"},description:"Check availability"},domains:{syntax:"apo domains",positional:[],flags:{},description:"List your custom domains"},domain:{subcommands:{add:{syntax:"apo domain add HOSTNAME",positional:["hostname"],flags:{},description:"Link a domain (returns CNAME)"},verify:{syntax:"apo domain verify HOSTNAME",positional:["hostname"],flags:{},description:"Trigger DNS verification"},status:{syntax:"apo domain status HOSTNAME",positional:["hostname"],flags:{},description:"DNS + SSL status"},show:{syntax:"apo domain show HOSTNAME",positional:["hostname"],flags:{},description:"Domain details"},remove:{syntax:"apo domain remove HOSTNAME --yes",positional:["hostname"],flags:{"--yes":"confirm deletion"},description:"Unlink a domain"}}},page:{subcommands:{show:{syntax:"apo page",positional:[],flags:{},description:"Show your meetings-page profile"},set:{syntax:"apo page set --title T --company C",positional:[],flags:{"--first":"first name","--last":"last name","--company":"company","--title":"title","--phone":"phone","--website":"url"},description:"Update page fields"},cover:{syntax:"apo page cover <URL|file> [--type cover|avatar]",positional:["source"],flags:{"--type":"cover|avatar"},description:"Set meetings-page cover image"},check:{syntax:"apo page check [HOSTNAME]",positional:["hostname?"],flags:{},description:"Audit live page: routing, OG tags, image, profile"}}},tts:{syntax:'apo tts "text" --voice V',positional:["text"],flags:{"--voice/-v":"voice id","--role/-r":"role voice"},description:"Synthesize speech"},voices:{syntax:"apo voices",positional:[],flags:{},description:"List available voices"},admin:{subcommands:{tenants:{syntax:"apo admin tenants",positional:[],flags:{},description:"List all tenants"},"tenant-view":{syntax:"apo admin tenant-view SLUG",positional:["slug"],flags:{},description:"Full tenant detail"},"tenant-create":{syntax:"apo admin tenant-create SLUG",positional:["slug"],flags:{"--plan":"plan","--email":"owner email"},description:"Create tenant"},"tenant-suspend":{syntax:"apo admin tenant-suspend SLUG",positional:["slug"],flags:{},description:"Suspend tenant"},"tenant-activate":{syntax:"apo admin tenant-activate SLUG",positional:["slug"],flags:{"--plan":"plan"},description:"Reactivate tenant"},"tenant-delete":{syntax:"apo admin tenant-delete SLUG",positional:["slug"],flags:{},description:"Delete tenant"},users:{syntax:"apo admin users",positional:[],flags:{},description:"List all users"},"user-create":{syntax:"apo admin user-create --email E -p PASS",positional:[],flags:{"--email":"email","--password/-p":"password","--tenant":"tenant","--role":"role"},description:"Create user"},"user-reset":{syntax:"apo admin user-reset EMAIL -p PASS",positional:["email"],flags:{"--password/-p":"new password"},description:"Reset user password"},"profile-cover":{syntax:"apo admin profile-cover [EMAIL] <SRC> -p PASS [--tenants a@x,b@y]",positional:["emailOrSource","source?"],flags:{"--type":"cover|avatar","--password/-p":"password","--tenants":"comma list","--tenants-file":"file of tenants"},description:"Set tenant cover image (bulk = gated snapshot→apply→verify→rollback→ledger)"},"profile-avatar":{syntax:"apo admin profile-avatar [EMAIL] <SRC> -p PASS [--tenants a@x,b@y]",positional:["emailOrSource","source?"],flags:{"--password/-p":"password","--tenants":"comma list","--tenants-file":"file of tenants"},description:"Set tenant avatar (bulk gated)"},"profile-website":{syntax:"apo admin profile-website [EMAIL URL] -p PASS [--tenants a@x=url,b@y=url]",positional:["email?","url?"],flags:{"--password/-p":"password","--tenants":"a@x=url pairs","--tenants-file":"file of pairs"},description:"Set vCard VISIT CTA (bulk gated)"},billing:{syntax:"apo admin billing",positional:[],flags:{"--plan":"plan","--months":"n"},description:"MRR, ARR, revenue"},costs:{syntax:"apo admin costs [ROOM_ID]",positional:["roomId?"],flags:{},description:"Platform or per-meeting cost breakdown"},models:{syntax:"apo admin models",positional:[],flags:{},description:"Spend by provider/model + tokens"},usage:{syntax:"apo admin usage",positional:[],flags:{},description:"Spend by user"},timeseries:{syntax:"apo admin timeseries [--bucket day]",positional:[],flags:{"--bucket":"hour|day"},description:"Spend over time"},pricing:{syntax:"apo admin pricing",positional:[],flags:{},description:"Provider pricing table"},ice:{syntax:"apo admin ice [--relay [--transport tcp|udp]] [--url turn:IP:3478 --user U --pass P]",positional:[],flags:{"--relay":"relay datagrams between TURN hosts' relay ports (tests the relay port range; result independent of this host's network)","--transport":"control-channel transport for --relay (default tcp)","--url":"stun:/turn: url","--user":"turn user","--pass":"turn credential","--timeout":"ms"},description:"Probe live STUN/TURN (control-gated; INCONCLUSIVE ≠ fault)"},profile:{syntax:"apo admin profile EMAIL -p PASS",positional:["email"],flags:{"--password/-p":"password"},description:"Superadmin-orchestrated profile view"}}},stats:{syntax:"apo stats",positional:[],flags:{},description:"Platform overview"},funnel:{syntax:"apo funnel",positional:[],flags:{},description:"Signup funnel"},signups:{syntax:"apo signups [--days 7]",positional:[],flags:{"--days":"window"},description:"Recent signups"},revenue:{syntax:"apo revenue",positional:[],flags:{},description:"Revenue breakdown"},tickets:{syntax:"apo tickets [--status open]",positional:[],flags:{"--status":"filter"},description:"List support tickets"},ticket:{subcommands:{show:{syntax:"apo ticket show NUMBER",positional:["number"],flags:{},description:"Ticket detail"},reply:{syntax:"apo ticket reply NUMBER MESSAGE",positional:["number","message"],flags:{},description:"Reply to ticket"},close:{syntax:"apo ticket close NUMBER",positional:["number"],flags:{},description:"Close ticket"}}},audit:{syntax:"apo audit [export] [--action X] [--limit N] [--format csv]",positional:["export?"],flags:{"--action":"filter","--limit":"n","--format":"json|csv (export)"},description:"Activity trail / export"},helpdesk:{subcommands:{tickets:{syntax:"apo helpdesk tickets [--status S]",positional:[],flags:{"--status":"filter"},description:"List tickets"},ticket:{subcommands:{show:{syntax:"apo helpdesk ticket show ID",positional:["id"],flags:{},description:"Ticket detail + messages"},create:{syntax:'apo helpdesk ticket create "Subject"',positional:["subject"],flags:{"--subject":"subject","--priority":"low|medium|high","--category":"category"},description:"Create ticket"},reply:{syntax:'apo helpdesk ticket reply ID "msg"',positional:["id","message"],flags:{"--message":"body"},description:"Reply to ticket"},close:{syntax:"apo helpdesk ticket close ID",positional:["id"],flags:{},description:"Close ticket"},assign:{syntax:"apo helpdesk ticket assign ID --agent X",positional:["id"],flags:{"--agent":"agent"},description:"Assign ticket"}}},kb:{syntax:"apo helpdesk kb",positional:[],flags:{},description:"List KB articles"},stats:{syntax:"apo helpdesk stats",positional:[],flags:{},description:"Helpdesk statistics"}}},crm:{subcommands:{leads:{syntax:"apo crm leads [--status S]",positional:[],flags:{"--status":"filter"},description:"List leads"},lead:{subcommands:{show:{syntax:"apo crm lead show ID",positional:["id"],flags:{},description:"Lead detail"},create:{syntax:'apo crm lead create "Name" --email X',positional:["name"],flags:{"--name":"name","--email":"email","--source":"source"},description:"Create lead"},convert:{syntax:"apo crm lead convert ID",positional:["id"],flags:{},description:"Convert lead → opportunity"}}},opps:{syntax:"apo crm opps [--stage S]",positional:[],flags:{"--stage":"filter"},description:"List opportunities"},opp:{subcommands:{show:{syntax:"apo crm opp show ID",positional:["id"],flags:{},description:"Opportunity detail"},create:{syntax:'apo crm opp create "Deal" --value X',positional:["name"],flags:{"--name":"name","--value":"amount","--stage":"stage"},description:"Create opportunity"}}},pipelines:{syntax:"apo crm pipelines",positional:[],flags:{},description:"List pipelines"},stats:{syntax:"apo crm stats",positional:[],flags:{},description:"CRM statistics"}}},agent:{subcommands:{create:{syntax:"apo agent create HANDLE",positional:["handle"],flags:{"--type":"agent type","--global":"save to ~/.appoiint"},description:"Create named agent"},list:{syntax:"apo agent list",positional:[],flags:{},description:"List your agents"},use:{syntax:"apo agent use HANDLE | --account",positional:["handle?"],flags:{"--account":"switch back to account identity","--global":"save to ~/.appoiint"},description:"Act as @HANDLE"},whoami:{syntax:"apo agent whoami",positional:[],flags:{},description:"Show active identity"},revoke:{syntax:"apo agent revoke HANDLE",positional:["handle"],flags:{"--global":"save to ~/.appoiint"},description:"Revoke agent key"}}},wall:{syntax:"apo wall",positional:[],flags:{},description:"All threads (DMs + channels) w/ unread badges"},dm:{syntax:'apo dm @AGENT ["msg"] [--watch]',positional:["handle","message?"],flags:{"--message/-m":"body","--watch/-w":"live stream","--limit":"history size"},description:"Read/send a DM"},notifications:{syntax:"apo notifications",positional:[],flags:{},description:"Unread digest across all threads"},channel:{subcommands:{create:{syntax:"apo channel create NAME [--topic T]",positional:["name"],flags:{"--topic":"topic"},description:"Create a named channel"},join:{syntax:"apo channel join NAME",positional:["name"],flags:{},description:"Join a channel"},leave:{syntax:"apo channel leave NAME",positional:["name"],flags:{},description:"Leave a channel"},list:{syntax:"apo channel list",positional:[],flags:{},description:"List channels"},post:{syntax:'apo channel post NAME "msg"',positional:["name","message"],flags:{"--message/-m":"body"},description:"Post to a channel"},history:{syntax:"apo channel history <NAME|@AGENT>",positional:["target"],flags:{"--limit":"n"},description:"Channel or DM history (reading = ack)"},send:{syntax:'apo channel send @AGENT "msg"',positional:["handle","message"],flags:{"--message/-m":"body","--action/-a":"action","--payload":"json payload"},description:"Send 1:1 message"},inbox:{syntax:"apo channel inbox",positional:[],flags:{},description:"Unread messages"},agents:{syntax:"apo channel agents",positional:[],flags:{},description:"List agent contacts"}}},diagnose:{syntax:"apo diagnose ROOM_ID",positional:["roomId"],flags:{},description:"Full room diagnostic"},man:{syntax:"apo man renderer",positional:["page"],flags:{},description:"Manual pages (renderer)"},renderer:{syntax:"apo renderer",positional:[],flags:{},description:"Chat bubble renderer spec"},"mcp-serve":{syntax:"apo mcp-serve",positional:[],flags:{},description:"Run stdio MCP server (95 tools)"},help:{syntax:"apo help",positional:[],flags:{},description:"Full reference"}};function schema(){return{$schema:"appoiint-cli-commands",version:pkg.version,description:"apo CLI command schema. Load this into agent context BEFORE using any command. If a command, subcommand or flag is not listed here, DO NOT USE it — it does not exist. Never invent verbs or flags from memory; re-run `apo init --agent-schema --json` to refresh.",globalFlags:GLOBAL_FLAGS,commands:COMMANDS}}module.exports={schema:schema};

package/dist/lib/turnProbe.js

@@ -1 +1 @@
-"use strict";const dgram=require("dgram"),net=require("net"),tls=require("tls"),crypto=require("crypto"),MAGIC_COOKIE=554869826,BINDING_REQUEST=1,BINDING_SUCCESS=257,ALLOCATE_REQUEST=3,ALLOCATE_SUCCESS=259,ATTR_MAPPED_ADDRESS=1,ATTR_USERNAME=6,ATTR_MESSAGE_INTEGRITY=8,ATTR_ERROR_CODE=9,ATTR_REALM=20,ATTR_NONCE=21,ATTR_XOR_RELAYED_ADDRESS=22,ATTR_REQUESTED_TRANSPORT=25,ATTR_XOR_MAPPED_ADDRESS=32,UDP_CONTROLS=[{host:"stun.cloudflare.com",port:3478},{host:"stun.nextcloud.com",port:3478},{host:"stun.sipgate.net",port:3478},{host:"stun.l.google.com",port:19302},{host:"stun1.l.google.com",port:19302}];function buildHeader(e,t,r){const n=Buffer.alloc(20);return n.writeUInt16BE(e,0),n.writeUInt16BE(t,2),n.writeUInt32BE(554869826,4),r.copy(n,8),n}function buildAttr(e,t){const r=(4-t.length%4)%4,n=Buffer.alloc(4+t.length+r);return n.writeUInt16BE(e,0),n.writeUInt16BE(t.length,2),t.copy(n,4),n}function buildBindingRequest(e){return buildHeader(1,0,e)}function buildAllocateRequest(e,t){const r=[buildAttr(25,Buffer.from([17,0,0,0]))];if(!t){const t=Buffer.concat(r);return Buffer.concat([buildHeader(3,t.length,e),t])}r.push(buildAttr(6,Buffer.from(t.username,"utf8"))),r.push(buildAttr(20,t.realm)),r.push(buildAttr(21,t.nonce));const n=Buffer.concat(r),o=crypto.createHash("md5").update(`${t.username}:${t.realm.toString("utf8")}:${t.password}`).digest(),s=buildHeader(3,n.length+24,e),a=crypto.createHmac("sha1",o).update(Buffer.concat([s,n])).digest(),l=Buffer.concat([n,buildAttr(8,a)]);return Buffer.concat([buildHeader(3,l.length,e),l])}function parseMessage(e){if(e.length<20)return null;const t={type:e.readUInt16BE(0),attrs:{}},r=Math.min(20+e.readUInt16BE(2),e.length);let n=20;for(;n+4<=r;){const r=e.readUInt16BE(n),o=e.readUInt16BE(n+2);if(n+4+o>e.length)break;t.attrs[r]=e.slice(n+4,n+4+o),n+=4+o+(4-o%4)%4}return t}function decodeAddress(e,t){if(!e||e.length<8)return null;if(1!==e.readUInt8(1))return"(ipv6)";const r=t?8466^e.readUInt16BE(2):e.readUInt16BE(2),n=e.slice(4,8);let o;if(t){const e=Buffer.alloc(4);e.writeUInt32BE(554869826,0),o=Array.from(n).map((t,r)=>t^e[r]).join(".")}else o=Array.from(n).join(".");return`${o}:${r}`}function decodeError(e){return!e||e.length<4?null:{code:100*e.readUInt8(2)+e.readUInt8(3),reason:e.slice(4).toString("utf8")}}function createTransport(e,t,r,n){if("udp"===e){const e=dgram.createSocket("udp4");return{send:n=>e.send(n,r,t),onMessage:t=>e.on("message",t),onError:t=>e.on("error",t),close:()=>{try{e.close()}catch{}},connect:e=>e()}}const o=0!==net.isIP(t),s="tls"===e?tls.connect({host:t,port:r,...o?{}:{servername:t},rejectUnauthorized:!1}):new net.Socket;let a=Buffer.alloc(0),l=()=>{};return s.setTimeout(n),s.on("data",e=>{for(a=Buffer.concat([a,e]);a.length>=20;){const e=20+a.readUInt16BE(2);if(a.length<e)return;const t=a.slice(0,e);a=a.slice(e),l(t)}}),{send:e=>s.write(e),onMessage:e=>{l=e},onError:e=>{s.on("error",t=>e(t)),s.on("timeout",()=>e(Object.assign(new Error("timeout"),{code:"ETIMEDOUT"})))},close:()=>{try{s.destroy()}catch{}},connect:n=>{"tls"===e?s.on("secureConnect",n):s.connect(r,t,n)},peerCert:()=>{if("tls"!==e)return null;try{const e=s.getPeerCertificate();return e&&e.subject?{subject:e.subject.CN||null,issuer:e.issuer&&e.issuer.CN,validTo:e.valid_to}:null}catch{return null}}}}function probe({host:e,port:t,transport:r="udp",username:n,password:o,timeoutMs:s=5e3}){return new Promise(a=>{const l={host:e,port:t,transport:r,reachable:!1,binding:null,mappedAddress:null,realm:null,allocate:null,relayAddress:null,tlsCert:null,error:null,ms:null},c=Date.now();let u,i="binding",d=crypto.randomBytes(12),p=!1;try{u=createTransport(r,e,t,s)}catch(e){return l.ms=Date.now()-c,l.error=e.code||e.message,a(l)}const f=e=>{p||(p=!0,clearTimeout(h),u.peerCert&&(l.tlsCert=u.peerCert()),u.close(),l.ms=Date.now()-c,a(Object.assign(l,e||{})))},h=setTimeout(()=>f({error:l.reachable?`timeout during ${i}`:"timeout (no response)"}),s);u.onError(e=>f({error:e.code||e.message})),u.onMessage(e=>{const t=parseMessage(e);if(t){if(l.reachable=!0,"binding"===i)return 257!==t.type?f({binding:"unexpected response"}):(l.binding="ok",l.mappedAddress=decodeAddress(t.attrs[32],!0)||decodeAddress(t.attrs[1],!1),n?(i="allocate-challenge",d=crypto.randomBytes(12),u.send(buildAllocateRequest(d,null))):f());if("allocate-challenge"===i){const e=decodeError(t.attrs[9]);return l.realm=t.attrs[20]?t.attrs[20].toString("utf8"):null,e&&(401===e.code||438===e.code)&&t.attrs[20]&&t.attrs[21]?(i="allocate-auth",d=crypto.randomBytes(12),u.send(buildAllocateRequest(d,{username:n,password:o,realm:t.attrs[20],nonce:t.attrs[21]}))):259===t.type?f({allocate:"ok (no auth required)",relayAddress:decodeAddress(t.attrs[22],!0)}):f({allocate:e?`error ${e.code} ${e.reason}`:"unexpected response"})}if("allocate-auth"===i){if(259===t.type)return f({allocate:"ok",relayAddress:decodeAddress(t.attrs[22],!0)});const e=decodeError(t.attrs[9]);return f({allocate:e?`error ${e.code} ${e.reason}`:"unexpected response"})}}}),u.connect(()=>u.send(buildBindingRequest(d)))})}async function runControl({port:e=null,timeoutMs:t=5e3}={}){const r=e?[...UDP_CONTROLS.filter(t=>t.port===e),...UDP_CONTROLS.filter(t=>t.port!==e)]:UDP_CONTROLS,n=[];for(const o of r){const r=await probe({host:o.host,port:o.port,transport:"udp",timeoutMs:t});if(n.push({target:`${o.host}:${o.port}`,ok:"ok"===r.binding,detail:r.error||r.binding}),"ok"===r.binding)return{valid:!0,samePort:e?o.port===e:null,via:`${o.host}:${o.port}`,port:o.port,mappedAddress:r.mappedAddress,attempts:n}}return{valid:!1,samePort:!1,via:null,port:null,attempts:n}}function parseIceUrl(e){const t=/^(stun|stuns|turn|turns):([^:?]+)(?::(\d+))?(?:\?transport=(\w+))?$/i.exec(String(e).trim());if(!t)return null;const r=t[1].toLowerCase(),n="turns"===r||"stuns"===r;let o=(t[4]||"").toLowerCase();return o||(o="udp"),n&&(o="tls"),{scheme:r,host:t[2],port:parseInt(t[3],10)||(n?5349:3478),transport:o,needsAuth:"turn"===r||"turns"===r,raw:e}}function verdict(e,t){const r=Boolean(e.username||e.needsAuth);return"ok"!==e.binding||r&&"ok"!==e.allocate?e.reachable&&e.allocate&&/error 401|error 403/.test(e.allocate)?{status:"fail",reason:`credentials rejected (${e.allocate})`}:e.reachable&&e.allocate?{status:"warn",reason:`allocate: ${e.allocate}`}:e.reachable?{status:"warn",reason:e.binding||e.error||"unexpected response"}:e.tlsCert?{status:"fail",reason:`TLS answered by a non-STUN service (cert CN=${e.tlsCert.subject||"?"}) — ingress is holding this port`}:/ECONNREFUSED/.test(e.error||"")?{status:"fail",reason:"connection refused — nothing listening on this port"}:"udp"!==e.transport?{status:"inconclusive",reason:`no response over ${e.transport} and there is no public STUN-over-${e.transport} control to prove this host can do it at all`}:t&&t.valid?!1===t.samePort?{status:"inconclusive",reason:`control only passed on udp/${t.port}, not udp/${e.port} — this port may be filtered locally`}:{status:"fail",reason:`no response, yet udp/${e.port} works to ${t.via}`}:{status:"inconclusive",reason:"no public STUN server is reachable from here — this host is blind, not the target"}:{status:"pass",reason:r?"binding + authenticated allocate":"binding ok"}}module.exports={probe:probe,runControl:runControl,verdict:verdict,parseIceUrl:parseIceUrl,UDP_CONTROLS:UDP_CONTROLS};
+"use strict";const dgram=require("dgram"),net=require("net"),tls=require("tls"),crypto=require("crypto"),MAGIC_COOKIE=554869826,BINDING_REQUEST=1,BINDING_SUCCESS=257,ALLOCATE_REQUEST=3,ALLOCATE_SUCCESS=259,REFRESH_REQUEST=4,CREATE_PERMISSION_REQUEST=8,CREATE_PERMISSION_SUCCESS=264,SEND_INDICATION=22,DATA_INDICATION=23,ATTR_MAPPED_ADDRESS=1,ATTR_USERNAME=6,ATTR_MESSAGE_INTEGRITY=8,ATTR_ERROR_CODE=9,ATTR_LIFETIME=13,ATTR_XOR_PEER_ADDRESS=18,ATTR_DATA=19,ATTR_REALM=20,ATTR_NONCE=21,ATTR_XOR_RELAYED_ADDRESS=22,ATTR_REQUESTED_TRANSPORT=25,ATTR_XOR_MAPPED_ADDRESS=32,UDP_CONTROLS=[{host:"stun.cloudflare.com",port:3478},{host:"stun.nextcloud.com",port:3478},{host:"stun.sipgate.net",port:3478},{host:"stun.l.google.com",port:19302},{host:"stun1.l.google.com",port:19302}];function buildHeader(e,r,t){const s=Buffer.alloc(20);return s.writeUInt16BE(e,0),s.writeUInt16BE(r,2),s.writeUInt32BE(554869826,4),t.copy(s,8),s}function buildAttr(e,r){const t=(4-r.length%4)%4,s=Buffer.alloc(4+r.length+t);return s.writeUInt16BE(e,0),s.writeUInt16BE(r.length,2),r.copy(s,4),s}function buildBindingRequest(e){return buildHeader(1,0,e)}function signedMessage(e,r,t,s){const o=Buffer.concat([...t,buildAttr(6,Buffer.from(s.username,"utf8")),buildAttr(20,s.realm),buildAttr(21,s.nonce)]),n=crypto.createHash("md5").update(`${s.username}:${s.realm.toString("utf8")}:${s.password}`).digest(),a=buildHeader(e,o.length+24,r),l=crypto.createHmac("sha1",n).update(Buffer.concat([a,o])).digest(),i=Buffer.concat([o,buildAttr(8,l)]);return Buffer.concat([buildHeader(e,i.length,r),i])}function unsignedMessage(e,r,t){const s=Buffer.concat(t);return Buffer.concat([buildHeader(e,s.length,r),s])}function buildAllocateRequest(e,r){const t=[buildAttr(25,Buffer.from([17,0,0,0]))];return r?signedMessage(3,e,t,r):unsignedMessage(3,e,t)}function encodeXorAddress(e,r){const t=Buffer.alloc(8);t.writeUInt8(1,1),t.writeUInt16BE(8466^r,2);const s=Buffer.alloc(4);return s.writeUInt32BE(554869826,0),e.split(".").forEach((e,r)=>t.writeUInt8(parseInt(e,10)^s[r],4+r)),t}function parseMessage(e){if(e.length<20)return null;const r={type:e.readUInt16BE(0),txId:e.slice(8,20),attrs:{}},t=Math.min(20+e.readUInt16BE(2),e.length);let s=20;for(;s+4<=t;){const t=e.readUInt16BE(s),o=e.readUInt16BE(s+2);if(s+4+o>e.length)break;r.attrs[t]=e.slice(s+4,s+4+o),s+=4+o+(4-o%4)%4}return r}function decodeAddress(e,r){if(!e||e.length<8)return null;if(1!==e.readUInt8(1))return"(ipv6)";const t=r?8466^e.readUInt16BE(2):e.readUInt16BE(2),s=e.slice(4,8);let o;if(r){const e=Buffer.alloc(4);e.writeUInt32BE(554869826,0),o=Array.from(s).map((r,t)=>r^e[t]).join(".")}else o=Array.from(s).join(".");return`${o}:${t}`}function decodeError(e){return!e||e.length<4?null:{code:100*e.readUInt8(2)+e.readUInt8(3),reason:e.slice(4).toString("utf8")}}function createTransport(e,r,t,s){if("udp"===e){const e=dgram.createSocket("udp4");return{send:s=>e.send(s,t,r),onMessage:r=>e.on("message",r),onError:r=>e.on("error",r),close:()=>{try{e.close()}catch{}},connect:e=>e()}}const o=0!==net.isIP(r),n="tls"===e?tls.connect({host:r,port:t,...o?{}:{servername:r},rejectUnauthorized:!1}):new net.Socket;let a=Buffer.alloc(0),l=()=>{};return n.setTimeout(s),n.on("data",e=>{for(a=Buffer.concat([a,e]);a.length>=20;){const e=20+a.readUInt16BE(2);if(a.length<e)return;const r=a.slice(0,e);a=a.slice(e),l(r)}}),{send:e=>n.write(e),onMessage:e=>{l=e},onError:e=>{n.on("error",r=>e(r)),n.on("timeout",()=>e(Object.assign(new Error("timeout"),{code:"ETIMEDOUT"})))},close:()=>{try{n.destroy()}catch{}},connect:s=>{"tls"===e?n.on("secureConnect",s):n.connect(t,r,s)},peerCert:()=>{if("tls"!==e)return null;try{const e=n.getPeerCertificate();return e&&e.subject?{subject:e.subject.CN||null,issuer:e.issuer&&e.issuer.CN,validTo:e.valid_to}:null}catch{return null}}}}function probe({host:e,port:r,transport:t="udp",username:s,password:o,timeoutMs:n=5e3}){return new Promise(a=>{const l={host:e,port:r,transport:t,reachable:!1,binding:null,mappedAddress:null,realm:null,allocate:null,relayAddress:null,tlsCert:null,error:null,ms:null},i=Date.now();let d,c="binding",u=crypto.randomBytes(12),p=!1;try{d=createTransport(t,e,r,n)}catch(e){return l.ms=Date.now()-i,l.error=e.code||e.message,a(l)}const f=e=>{p||(p=!0,clearTimeout(m),d.peerCert&&(l.tlsCert=d.peerCert()),d.close(),l.ms=Date.now()-i,a(Object.assign(l,e||{})))},m=setTimeout(()=>f({error:l.reachable?`timeout during ${c}`:"timeout (no response)"}),n);d.onError(e=>f({error:e.code||e.message})),d.onMessage(e=>{const r=parseMessage(e);if(r){if(l.reachable=!0,"binding"===c)return 257!==r.type?f({binding:"unexpected response"}):(l.binding="ok",l.mappedAddress=decodeAddress(r.attrs[32],!0)||decodeAddress(r.attrs[1],!1),s?(c="allocate-challenge",u=crypto.randomBytes(12),d.send(buildAllocateRequest(u,null))):f());if("allocate-challenge"===c){const e=decodeError(r.attrs[9]);return l.realm=r.attrs[20]?r.attrs[20].toString("utf8"):null,e&&(401===e.code||438===e.code)&&r.attrs[20]&&r.attrs[21]?(c="allocate-auth",u=crypto.randomBytes(12),d.send(buildAllocateRequest(u,{username:s,password:o,realm:r.attrs[20],nonce:r.attrs[21]}))):259===r.type?f({allocate:"ok (no auth required)",relayAddress:decodeAddress(r.attrs[22],!0)}):f({allocate:e?`error ${e.code} ${e.reason}`:"unexpected response"})}if("allocate-auth"===c){if(259===r.type)return f({allocate:"ok",relayAddress:decodeAddress(r.attrs[22],!0)});const e=decodeError(r.attrs[9]);return f({allocate:e?`error ${e.code} ${e.reason}`:"unexpected response"})}}}),d.connect(()=>d.send(buildBindingRequest(u)))})}async function runControl({port:e=null,timeoutMs:r=5e3}={}){const t=e?[...UDP_CONTROLS.filter(r=>r.port===e),...UDP_CONTROLS.filter(r=>r.port!==e)]:UDP_CONTROLS,s=[];for(const o of t){const t=await probe({host:o.host,port:o.port,transport:"udp",timeoutMs:r});if(s.push({target:`${o.host}:${o.port}`,ok:"ok"===t.binding,detail:t.error||t.binding}),"ok"===t.binding)return{valid:!0,samePort:e?o.port===e:null,via:`${o.host}:${o.port}`,port:o.port,mappedAddress:t.mappedAddress,attempts:s}}return{valid:!1,samePort:!1,via:null,port:null,attempts:s}}function openTurnSession({host:e,port:r,transport:t="udp",username:s,password:o,timeoutMs:n=5e3}){return new Promise(a=>{let l;try{l=createTransport(t,e,r,n)}catch(e){return a({ok:!1,error:e.code||e.message})}const i=new Map;let d=()=>{},c=null,u=null;l.onError(e=>{u=e.code||e.message,i.forEach(e=>e.done(null))}),l.onMessage(e=>{const r=parseMessage(e);if(!r)return;if(23===r.type)return d(decodeAddress(r.attrs[18],!0),r.attrs[19]||Buffer.alloc(0));const t=i.get(r.txId.toString("hex"));t&&t.done(r)});const p=(e,r=n)=>new Promise(s=>{if(u)return s(null);const o=crypto.randomBytes(12),n=o.toString("hex"),a=e(o),d=e=>{clearTimeout(c),clearInterval(p),i.delete(n),s(e)},c=setTimeout(()=>d(null),r),p="udp"===t?setInterval(()=>l.send(a),500):null;i.set(n,{done:d}),l.send(a)}),f=async(e,r)=>{let t=await p(t=>signedMessage(e,t,r,c));const s=t&&decodeError(t.attrs[9]);return s&&438===s.code&&t.attrs[21]&&(c={...c,nonce:t.attrs[21]},t=await p(t=>signedMessage(e,t,r,c))),t},m=e=>{if(!e)return u||"timeout (no response)";const r=decodeError(e.attrs[9]);return r?`error ${r.code} ${r.reason}`:"unexpected response"},h={relayAddress:null,onData:e=>{d=e},async createPermission(e){const r=await f(8,[buildAttr(18,encodeXorAddress(e,0))]);return r&&264===r.type?"ok":m(r)},send(e,r,t){l.send(unsignedMessage(22,crypto.randomBytes(12),[buildAttr(18,encodeXorAddress(e,r)),buildAttr(19,t)]))},async close(){if(c&&!u){const e=Buffer.alloc(4);await f(4,[buildAttr(13,e)]).catch(()=>{})}l.close()}};l.connect(async()=>{const e=await p(e=>buildAllocateRequest(e,null)),r=e&&decodeError(e.attrs[9]);if(!r||401!==r.code&&438!==r.code||!e.attrs[20]||!e.attrs[21])return l.close(),a({ok:!1,reachable:Boolean(e),error:m(e)});c={username:s,password:o,realm:e.attrs[20],nonce:e.attrs[21]};const t=await f(3,[buildAttr(25,Buffer.from([17,0,0,0]))]);if(!t||259!==t.type)return l.close(),a({ok:!1,reachable:!0,error:`allocate ${m(t)}`});h.relayAddress=decodeAddress(t.attrs[22],!0),a({ok:!0,session:h,relayAddress:h.relayAddress})})})}function splitAddress(e){const r=String(e).lastIndexOf(":");return{ip:e.slice(0,r),port:parseInt(e.slice(r+1),10)}}function isPrivateIp(e){return/^(10\.|127\.|192\.168\.|169\.254\.|172\.(1[6-9]|2\d|3[01])\.|100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\.)/.test(e)}async function relayProbe({a:e,z:r,timeoutMs:t=6e3}){const s={a:{server:`${e.host}:${e.port}/${e.transport}`,host:e.host},z:{server:`${r.host}:${r.port}/${r.transport}`,host:r.host},sameHost:e.host===r.host,aToZ:{delivered:!1,ms:null},zToA:{delivered:!1,ms:null},stage:"allocate"},[o,n]=await Promise.all([openTurnSession({...e,timeoutMs:t}),openTurnSession({...r,timeoutMs:t})]);s.a.allocate=o.ok?"ok":o.error,s.z.allocate=n.ok?"ok":n.error,s.a.reachable=o.ok||Boolean(o.reachable),s.z.reachable=n.ok||Boolean(n.reachable),s.a.relayAddress=o.relayAddress||null,s.z.relayAddress=n.relayAddress||null;const a=()=>Promise.all([o,n].filter(e=>e.ok).map(e=>e.session.close()));if(!o.ok||!n.ok)return await a(),s;const l=splitAddress(o.relayAddress),i=splitAddress(n.relayAddress);s.stage="permission";const[d,c]=await Promise.all([o.session.createPermission(i.ip),n.session.createPermission(l.ip)]);if(s.a.permission=d,s.z.permission=c,"ok"!==d||"ok"!==c)return await a(),s;s.stage="relay";const u=crypto.randomBytes(8).toString("hex"),p=Date.now();for(n.session.onData((e,r)=>{s.aToZ.delivered||r.toString()!==`a2z-${u}`||(s.aToZ={delivered:!0,ms:Date.now()-p,from:e})}),o.session.onData((e,r)=>{s.zToA.delivered||r.toString()!==`z2a-${u}`||(s.zToA={delivered:!0,ms:Date.now()-p,from:e})});Date.now()-p<t&&(!s.aToZ.delivered||!s.zToA.delivered);)s.aToZ.delivered||o.session.send(i.ip,i.port,Buffer.from(`a2z-${u}`)),s.zToA.delivered||n.session.send(l.ip,l.port,Buffer.from(`z2a-${u}`)),await new Promise(e=>setTimeout(e,250));return s.stage="done",await a(),s}function relayVerdict(e){for(const r of[e.a,e.z])if("ok"!==r.allocate)return/error 401|error 403/.test(r.allocate||"")?{status:"fail",reason:`${r.server}: credentials rejected (${r.allocate})`}:r.reachable?{status:"fail",reason:`${r.server}: ${r.allocate}`}:{status:"inconclusive",reason:`${r.server} did not answer from here (${r.allocate}) — this host may not reach it; try --transport tcp or another network`};for(const r of[e.a,e.z]){const e=splitAddress(r.relayAddress).ip;if(!isPrivateIp(r.host)&&isPrivateIp(e))return{status:"fail",reason:`${r.server} hands out a private relay address ${r.relayAddress} — coturn external-ip is not set`}}if(e.sameHost&&[e.a,e.z].some(e=>/error 403/.test(e.permission||"")))return{status:"fail",reason:`${e.a.server} refuses its own relay address as a peer (${"ok"!==e.a.permission?e.a.permission:e.z.permission}). With only this TURN host advertised, two relay-only participants can never connect. Re-run with --url listing a second TURN host to test the cross-box relay path`};for(const r of[e.a,e.z])if(r.permission&&"ok"!==r.permission)return{status:"fail",reason:`${r.server}: CreatePermission ${r.permission} (coturn denied-peer-ip / peer policy)`};const r=e.sameHost?" (same host: traffic may not cross the external firewall)":"";if(e.aToZ.delivered&&e.zToA.delivered)return{status:"pass",reason:`relayed both ways via ${e.a.relayAddress} <-> ${e.z.relayAddress}${r}`};if(!e.aToZ.delivered&&!e.zToA.delivered)return{status:"fail",reason:`allocate + permission OK on both, but relayed data was dropped in BOTH directions${r}. The datagrams travel server-to-server, so this host is not on that path: check the relay port range (min-port..max-port, default 49152-65535/udp) on both server firewalls, then coturn denied-peer-ip`};const[t,s]=e.aToZ.delivered?[e.z,e.a]:[e.a,e.z];return{status:"fail",reason:`one-way: ${t.relayAddress} -> ${s.relayAddress} dropped while the reverse works — inbound relay ports on ${s.host} (or egress from ${t.host}) are filtered${r}`}}function parseIceUrl(e){const r=/^(stun|stuns|turn|turns):([^:?]+)(?::(\d+))?(?:\?transport=(\w+))?$/i.exec(String(e).trim());if(!r)return null;const t=r[1].toLowerCase(),s="turns"===t||"stuns"===t;let o=(r[4]||"").toLowerCase();return o||(o="udp"),s&&(o="tls"),{scheme:t,host:r[2],port:parseInt(r[3],10)||(s?5349:3478),transport:o,needsAuth:"turn"===t||"turns"===t,raw:e}}function verdict(e,r){const t=Boolean(e.username||e.needsAuth);return"ok"!==e.binding||t&&"ok"!==e.allocate?e.reachable&&e.allocate&&/error 401|error 403/.test(e.allocate)?{status:"fail",reason:`credentials rejected (${e.allocate})`}:e.reachable&&e.allocate?{status:"warn",reason:`allocate: ${e.allocate}`}:e.reachable?{status:"warn",reason:e.binding||e.error||"unexpected response"}:e.tlsCert?{status:"fail",reason:`TLS answered by a non-STUN service (cert CN=${e.tlsCert.subject||"?"}) — ingress is holding this port`}:/ECONNREFUSED/.test(e.error||"")?{status:"fail",reason:"connection refused — nothing listening on this port"}:"udp"!==e.transport?{status:"inconclusive",reason:`no response over ${e.transport} and there is no public STUN-over-${e.transport} control to prove this host can do it at all`}:r&&r.valid?!1===r.samePort?{status:"inconclusive",reason:`control only passed on udp/${r.port}, not udp/${e.port} — this port may be filtered locally`}:{status:"fail",reason:`no response, yet udp/${e.port} works to ${r.via}`}:{status:"inconclusive",reason:"no public STUN server is reachable from here — this host is blind, not the target"}:{status:"pass",reason:t?"binding + authenticated allocate":"binding ok"}}module.exports={probe:probe,runControl:runControl,verdict:verdict,parseIceUrl:parseIceUrl,relayProbe:relayProbe,relayVerdict:relayVerdict,openTurnSession:openTurnSession,UDP_CONTROLS:UDP_CONTROLS};

package/dist/main.js

@@ -1 +1 @@
-const{loadConfig:loadConfig,hasFlag:hasFlag,getFlag:getFlag}=require("./config"),{api:api,rawApi:rawApi}=require("./api"),fmt=require("./format"),args=process.argv.slice(2),command=args[0],subArgs=args.slice(1),jsonMode=hasFlag(args,"json"),NO_AUTH=["signup","signin","activate","login","logout","config","help","--help","-h","status","version","--version","-v","mcp-serve","man","renderer","init"],config=loadConfig(args);NO_AUTH.includes(command)||config.apiKey||(fmt.err("No API key. Run: apo signup --email you@co.com --password Pass123!"),fmt.err("Or: apo login --key YOUR_KEY --user YOUR_USERID"),fmt.err("Or set APO_API_KEY environment variable."),process.exit(1));const client=config.apiKey?api(config):null,raw=config.apiKey?rawApi(config):null,HELP='\nAppoiint CLI — Agent-first meeting platform\n\nAuth:\n  apo signup --email E --password P     Sign up (free 7-day trial, card required)\n  apo signin --email E --password P     Sign in as a human seat (email/password)\n  apo activate [SUBSCRIPTION_ID]        Get API key after card setup\n  apo login --key KEY [--user USERID]   Save API key to config\n  apo logout                            Clear config\n  apo config                            Show active config\n\nRooms:\n  apo room "Title"                      Create meeting room\n  apo rooms                             List active rooms\n  apo room-status ROOM_ID               Room status + participants\n  apo room-end ROOM_ID                  End meeting\n  apo invite ROOM_ID --email E --name N Invite human or agent\n  apo transcript ROOM_ID [--format F]   Get transcript (json|text|srt)\n\nMeetings:\n  apo join ROOM_ID|BOOKING_ID [--name N] Join room (or bkg_ id → resolves room), streams transcript, Ctrl-C to leave\n  apo join ROOM_ID --say "msg"          Join, send one message, leave\n  apo join ROOM_ID --say "msg" --voice cfo  Speak out loud (assistant.bz TTS) + leave\n  apo say ROOM_ID "text"                Speak into a live join session (external-brain channel)\n  apo hear ROOM_ID --wait               Block until next utterance, print it (external-brain channel)\n  apo leave ROOM_ID                     Leave room\n\nScheduling:\n  apo book --date D --email E           Create booking\n  apo bookings [--status S] [--host ID] List bookings (as host)\n  apo booking BOOKING_ID                Show booking (room + join links)\n  apo cancel BOOKING_ID [--reason R]    Cancel a booking\n  apo reschedule BOOKING_ID --date D    Move a booking to a new time\n  apo events                            List event types\n  apo event-create --name "Title"       Create an event type (--duration --slug --price)\n  apo event-delete EVENT_TYPE_ID        Delete an event type (blocks if bookings exist; --soft --force)\n  apo availability get                  Show weekly availability\n  apo availability set --days mon-fri   Set availability (--from 09:00 --to 17:00 --timezone TZ)\n  apo slots --email E --date D          Check availability\n\nMeetings Page (custom domain):\n  apo domains                           List your custom domains\n  apo domain add meetings.you.com       Link a domain (returns CNAME to add)\n  apo domain verify HOSTNAME            Trigger DNS verification\n  apo domain status HOSTNAME            DNS + SSL status\n  apo domain show HOSTNAME              Domain details\n  apo domain remove HOSTNAME --yes      Unlink a domain\n  apo page                              Show your meetings-page profile\n  apo page set --title T --company C    Update page fields (--first --last --phone)\n  apo page cover <URL|file>             Set your meetings-page cover image (--type cover|avatar)\n  apo page check [HOSTNAME]             Audit live page: routing, OG tags, image, profile\n\nTTS:\n  apo tts "text" --voice cfo            Synthesize speech\n  apo voices                            List available voices\n\nAdmin:\n  apo admin tenants                     List all tenants\n  apo admin tenant-view SLUG            Full tenant detail\n  apo admin tenant-create SLUG          Create tenant\n  apo admin tenant-suspend SLUG         Suspend tenant\n  apo admin tenant-activate SLUG        Reactivate tenant\n  apo admin tenant-delete SLUG          Delete tenant\n  apo admin users                       List all users\n  apo admin user-reset EMAIL -p PASS    Reset user password\n  apo admin profile-cover EMAIL <SRC> -p PASS   Set one tenant\'s cover image (--type cover|avatar)\n  apo admin profile-cover <SRC> --tenants a@x,b@y -p PASS   Gated bulk rollout (snapshot→apply→verify→rollback→ledger)\n  apo admin profile-website EMAIL https://site.com -p PASS  Set the vCard "VISIT <SITE>" CTA (profile.website)\n  apo admin profile-website --tenants a@x=https://x.com,b@y=https://y.com -p PASS   Gated bulk CTA rollout\n  apo admin billing                     MRR, ARR, revenue\n  apo admin costs                       Platform cost summary (STT/TTS/LLM)\n  apo admin costs ROOM_ID               Per-meeting cost breakdown\n  apo admin models                      Spend by provider/model + tokens\n  apo admin usage                       Spend by user\n  apo admin timeseries [--bucket day]   Spend over time (hour|day)\n  apo admin pricing                     Current provider pricing table\n  apo admin ice                         Probe live STUN/TURN (control-gated)\n  apo admin ice --url turn:IP:3478      Probe one server ad-hoc (--user --pass)\n\nAnalytics:\n  apo stats                             Platform overview\n  apo revenue                           Revenue breakdown\n  apo funnel                            Signup funnel\n  apo signups [--days 7]                Recent signups\n\nSupport:\n  apo tickets [--status open]           List support tickets\n  apo ticket show NUMBER                Ticket detail\n  apo ticket reply NUMBER MESSAGE       Reply to ticket\n  apo ticket close NUMBER               Close ticket\n\nAudit:\n  apo audit [--action X] [--limit N]    Activity trail\n  apo audit export [--format csv]       Export audit log\n\nHelpdesk (+$4.99/mo):\n  apo helpdesk tickets                  List tickets\n  apo helpdesk ticket show ID           Ticket detail + messages\n  apo helpdesk ticket create "Subject"  Create ticket\n  apo helpdesk ticket reply ID "msg"    Reply to ticket\n  apo helpdesk ticket close ID          Close ticket\n  apo helpdesk ticket assign ID --agent X  Assign ticket\n  apo helpdesk kb                       List KB articles\n  apo helpdesk stats                    Helpdesk statistics\n\nCRM (+$4.99/mo):\n  apo crm leads                         List leads\n  apo crm lead show ID                  Lead detail\n  apo crm lead create "Name" --email X  Create lead\n  apo crm lead convert ID               Convert lead → opportunity\n  apo crm opps                          List opportunities\n  apo crm opp show ID                   Opportunity detail\n  apo crm opp create "Deal" --value X   Create opportunity\n  apo crm pipelines                     List pipelines\n  apo crm stats                         CRM statistics\n\nAgents (multi-agent identities):\n  apo agent create ci-bot               Create named agent under your account\n  apo agent list                        List your agents (plan quota: 3/5/10/∞)\n  apo agent use ci-bot                  Act as @ci-bot (channels route by handle)\n  apo agent use --account               Switch back to account identity\n  apo agent whoami                      Show active identity\n  apo agent revoke ci-bot               Revoke agent key\n  --agent HANDLE / APO_AGENT env        One-off identity override for any command\n\nMessaging (agent-to-agent):\n  apo wall                              All threads (DMs + channels) w/ unread badges\n  apo dm @AGENT ["msg"] [--watch]       Read/send a DM (--watch = live stream)\n  apo notifications                     Unread digest across all threads\n  apo channel create NAME [--topic T]   Create a named channel\n  apo channel join|leave NAME           Join / leave a channel\n  apo channel list                      List channels (membership + unread)\n  apo channel post NAME "msg"           Post to a channel\n  apo channel history <NAME|@AGENT>     Channel or DM history (reading = ack)\n  apo channel send @AGENT "msg"         Send 1:1 message (legacy form of apo dm)\n  apo channel inbox                     Unread messages\n  apo channel agents                    List agent contacts\n\nDiagnostics:\n  apo diagnose ROOM_ID                  Full room diagnostic (peers, events, relay)\n\nManual:\n  apo man renderer                      Chat bubble renderer capabilities + formats\n  apo renderer                          Same as above (shorthand)\n\nOptions:\n  --json                                Output JSON (for agents)\n  --key KEY                             Override API key\n  --help                                Show this help\n\nhttps://appoiint.com/docs/quickstart.html\n';async function run(){switch(command){case"signup":return require("./commands/auth").signup(subArgs,config.baseUrl);case"signin":return require("./commands/auth").signin(subArgs,config.baseUrl);case"activate":return require("./commands/auth").activate(subArgs,config);case"login":return require("./commands/auth").login(subArgs);case"logout":return require("./commands/auth").logout(subArgs);case"config":return require("./commands/auth").showConfig(config);case"room":return require("./commands/rooms").create(client,subArgs,jsonMode,config);case"rooms":return require("./commands/rooms").list(client,subArgs,jsonMode);case"room-status":return require("./commands/rooms").status(client,subArgs,jsonMode);case"room-end":return require("./commands/rooms").end(client,subArgs,jsonMode);case"invite":return require("./commands/rooms").invite(client,subArgs,jsonMode);case"transcript":return require("./commands/rooms").transcript(client,subArgs,jsonMode);case"join":return require("./commands/meeting").join(client,subArgs,jsonMode,config);case"say":return require("./commands/meeting").say(client,subArgs,jsonMode,config);case"hear":return require("./commands/meeting").hear(client,subArgs,jsonMode,config);case"leave":return subArgs[0]||(fmt.err("Usage: apo leave ROOM_ID"),process.exit(1)),client.leaveMeeting({roomId:subArgs[0],agentId:"cli-agent"}).then(e=>jsonMode?console.log(JSON.stringify(e,null,2)):fmt.ok(`Left room ${subArgs[0]}`));case"book":return require("./commands/bookings").book(client,subArgs,jsonMode);case"bookings":return require("./commands/bookings").bookings(client,subArgs,jsonMode);case"booking":return require("./commands/bookings").bookingShow(client,subArgs,jsonMode);case"cancel":return require("./commands/bookings").cancel(client,subArgs,jsonMode);case"reschedule":return require("./commands/bookings").reschedule(client,subArgs,jsonMode);case"events":return require("./commands/bookings").events(client,subArgs,jsonMode);case"event-create":return require("./commands/bookings").eventCreate(client,subArgs,jsonMode);case"event-delete":return require("./commands/bookings").eventDelete(client,subArgs,jsonMode);case"availability":return require("./commands/bookings").availability(client,subArgs,jsonMode);case"slots":return require("./commands/bookings").slots(client,subArgs,jsonMode);case"domains":return require("./commands/domains").list(client,subArgs,jsonMode);case"domain":return require("./commands/domains").domainRun(client,subArgs,jsonMode);case"page":return require("./commands/domains").pageRun(client,subArgs,jsonMode);case"tts":return require("./commands/tts").synthesize(client,subArgs,jsonMode);case"voices":return require("./commands/tts").voices(client,subArgs,jsonMode);case"status":{const e=await api({baseUrl:config.baseUrl,apiKey:""}).status();return jsonMode?console.log(JSON.stringify(e,null,2)):void fmt.ok(`Appoiint ${e.version||"?"} — ${e.available?"online":"offline"}`)}case"version":case"--version":case"-v":return void console.log(require("../package.json").version);case"admin":return require("./commands/admin").run(client,subArgs,jsonMode,config);case"stats":return require("./commands/stats").run(client,jsonMode);case"funnel":return require("./commands/stats").funnel(client,jsonMode);case"signups":return require("./commands/stats").signups(client,subArgs,jsonMode);case"revenue":return require("./commands/stats").revenue(client,jsonMode);case"tickets":return require("./commands/tickets").list(client,subArgs,jsonMode);case"ticket":const e=subArgs[0];if("show"===e)return require("./commands/tickets").show(client,subArgs.slice(1),jsonMode);if("reply"===e)return require("./commands/tickets").reply(client,subArgs.slice(1),jsonMode);if("close"===e)return require("./commands/tickets").close(client,subArgs.slice(1),jsonMode);fmt.err("Usage: apo ticket [show|reply|close] NUMBER"),process.exit(1);case"audit":return require("./commands/audit").run(client,subArgs,jsonMode);case"helpdesk":return require("./commands/helpdesk").run(client,subArgs,jsonMode,raw);case"crm":return require("./commands/crm").run(client,subArgs,jsonMode,raw);case"agent":return require("./commands/agent").run(config,subArgs,jsonMode);case"channel":return require("./commands/channels").run(client,subArgs,jsonMode);case"wall":return require("./commands/wall").wall(client,subArgs,jsonMode);case"dm":return require("./commands/wall").dm(client,subArgs,jsonMode,config);case"notifications":return require("./commands/wall").notifications(client,subArgs,jsonMode);case"diagnose":return require("./commands/diagnose").run(client,subArgs,jsonMode,config);case"init":return require("./commands/init").run(subArgs);case"man":case"renderer":const n="man"===command?subArgs[0]:command;return"renderer"===n?require("./commands/renderer").run(subArgs.slice("man"===command?1:0),jsonMode):void fmt.err("Unknown manual page: "+(n||"(none)")+". Available: renderer");case"mcp-serve":return require("./mcp").serve();case"help":case"--help":case"-h":case void 0:return void console.log(HELP);default:fmt.err(`Unknown command: ${command}`),console.log(HELP),process.exit(1)}}run().catch(e=>{fmt.err(e.message),process.exit(1)});
+const{loadConfig:loadConfig,hasFlag:hasFlag,getFlag:getFlag}=require("./config"),{api:api,rawApi:rawApi}=require("./api"),fmt=require("./format"),args=process.argv.slice(2),command=args[0],subArgs=args.slice(1),jsonMode=hasFlag(args,"json"),NO_AUTH=["signup","signin","activate","login","logout","config","help","--help","-h","status","version","--version","-v","mcp-serve","man","renderer","init"],config=loadConfig(args);NO_AUTH.includes(command)||config.apiKey||(fmt.err("No API key. Run: apo signup --email you@co.com --password Pass123!"),fmt.err("Or: apo login --key YOUR_KEY --user YOUR_USERID"),fmt.err("Or set APO_API_KEY environment variable."),process.exit(1));const client=config.apiKey?api(config):null,raw=config.apiKey?rawApi(config):null,HELP='\nAppoiint CLI — Agent-first meeting platform\n\nAuth:\n  apo signup --email E --password P     Sign up (free 7-day trial, card required)\n  apo signin --email E --password P     Sign in as a human seat (email/password)\n  apo activate [SUBSCRIPTION_ID]        Get API key after card setup\n  apo login --key KEY [--user USERID]   Save API key to config\n  apo logout                            Clear config\n  apo config                            Show active config\n\nRooms:\n  apo room "Title"                      Create meeting room\n  apo rooms                             List active rooms\n  apo room-status ROOM_ID               Room status + participants\n  apo room-end ROOM_ID                  End meeting\n  apo invite ROOM_ID --email E --name N Invite human or agent\n  apo transcript ROOM_ID [--format F]   Get transcript (json|text|srt)\n\nMeetings:\n  apo join ROOM_ID|BOOKING_ID [--name N] Join room (or bkg_ id → resolves room), streams transcript, Ctrl-C to leave\n  apo join ROOM_ID --say "msg"          Join, send one message, leave\n  apo join ROOM_ID --say "msg" --voice cfo  Speak out loud (assistant.bz TTS) + leave\n  apo say ROOM_ID "text"                Speak into a live join session (external-brain channel)\n  apo hear ROOM_ID --wait               Block until next utterance, print it (external-brain channel)\n  apo leave ROOM_ID                     Leave room\n\nScheduling:\n  apo book --date D --email E           Create booking\n  apo bookings [--status S] [--host ID] List bookings (as host)\n  apo booking BOOKING_ID                Show booking (room + join links)\n  apo cancel BOOKING_ID [--reason R]    Cancel a booking\n  apo reschedule BOOKING_ID --date D    Move a booking to a new time\n  apo events                            List event types\n  apo event-create --name "Title"       Create an event type (--duration --slug --price)\n  apo event-delete EVENT_TYPE_ID        Delete an event type (blocks if bookings exist; --soft --force)\n  apo availability get                  Show weekly availability\n  apo availability set --days mon-fri   Set availability (--from 09:00 --to 17:00 --timezone TZ)\n  apo slots --email E --date D          Check availability\n\nMeetings Page (custom domain):\n  apo domains                           List your custom domains\n  apo domain add meetings.you.com       Link a domain (returns CNAME to add)\n  apo domain verify HOSTNAME            Trigger DNS verification\n  apo domain status HOSTNAME            DNS + SSL status\n  apo domain show HOSTNAME              Domain details\n  apo domain remove HOSTNAME --yes      Unlink a domain\n  apo page                              Show your meetings-page profile\n  apo page set --title T --company C    Update page fields (--first --last --phone)\n  apo page cover <URL|file>             Set your meetings-page cover image (--type cover|avatar)\n  apo page check [HOSTNAME]             Audit live page: routing, OG tags, image, profile\n\nTTS:\n  apo tts "text" --voice cfo            Synthesize speech\n  apo voices                            List available voices\n\nAdmin:\n  apo admin tenants                     List all tenants\n  apo admin tenant-view SLUG            Full tenant detail\n  apo admin tenant-create SLUG          Create tenant\n  apo admin tenant-suspend SLUG         Suspend tenant\n  apo admin tenant-activate SLUG        Reactivate tenant\n  apo admin tenant-delete SLUG          Delete tenant\n  apo admin users                       List all users\n  apo admin user-reset EMAIL -p PASS    Reset user password\n  apo admin profile-cover EMAIL <SRC> -p PASS   Set one tenant\'s cover image (--type cover|avatar)\n  apo admin profile-cover <SRC> --tenants a@x,b@y -p PASS   Gated bulk rollout (snapshot→apply→verify→rollback→ledger)\n  apo admin profile-website EMAIL https://site.com -p PASS  Set the vCard "VISIT <SITE>" CTA (profile.website)\n  apo admin profile-website --tenants a@x=https://x.com,b@y=https://y.com -p PASS   Gated bulk CTA rollout\n  apo admin billing                     MRR, ARR, revenue\n  apo admin costs                       Platform cost summary (STT/TTS/LLM)\n  apo admin costs ROOM_ID               Per-meeting cost breakdown\n  apo admin models                      Spend by provider/model + tokens\n  apo admin usage                       Spend by user\n  apo admin timeseries [--bucket day]   Spend over time (hour|day)\n  apo admin pricing                     Current provider pricing table\n  apo admin ice                         Probe live STUN/TURN (control-gated)\n  apo admin ice --url turn:IP:3478      Probe one server ad-hoc (--user --pass)\n  apo admin ice --relay                 Relay data between TURN boxes (tests relay port range)\n\nAnalytics:\n  apo stats                             Platform overview\n  apo revenue                           Revenue breakdown\n  apo funnel                            Signup funnel\n  apo signups [--days 7]                Recent signups\n\nSupport:\n  apo tickets [--status open]           List support tickets\n  apo ticket show NUMBER                Ticket detail\n  apo ticket reply NUMBER MESSAGE       Reply to ticket\n  apo ticket close NUMBER               Close ticket\n\nAudit:\n  apo audit [--action X] [--limit N]    Activity trail\n  apo audit export [--format csv]       Export audit log\n\nHelpdesk (+$4.99/mo):\n  apo helpdesk tickets                  List tickets\n  apo helpdesk ticket show ID           Ticket detail + messages\n  apo helpdesk ticket create "Subject"  Create ticket\n  apo helpdesk ticket reply ID "msg"    Reply to ticket\n  apo helpdesk ticket close ID          Close ticket\n  apo helpdesk ticket assign ID --agent X  Assign ticket\n  apo helpdesk kb                       List KB articles\n  apo helpdesk stats                    Helpdesk statistics\n\nCRM (+$4.99/mo):\n  apo crm leads                         List leads\n  apo crm lead show ID                  Lead detail\n  apo crm lead create "Name" --email X  Create lead\n  apo crm lead convert ID               Convert lead → opportunity\n  apo crm opps                          List opportunities\n  apo crm opp show ID                   Opportunity detail\n  apo crm opp create "Deal" --value X   Create opportunity\n  apo crm pipelines                     List pipelines\n  apo crm stats                         CRM statistics\n\nAgents (multi-agent identities):\n  apo agent create ci-bot               Create named agent under your account\n  apo agent list                        List your agents (plan quota: 3/5/10/∞)\n  apo agent use ci-bot                  Act as @ci-bot (channels route by handle)\n  apo agent use --account               Switch back to account identity\n  apo agent whoami                      Show active identity\n  apo agent revoke ci-bot               Revoke agent key\n  --agent HANDLE / APO_AGENT env        One-off identity override for any command\n\nMessaging (agent-to-agent):\n  apo wall                              All threads (DMs + channels) w/ unread badges\n  apo dm @AGENT ["msg"] [--watch]       Read/send a DM (--watch = live stream)\n  apo notifications                     Unread digest across all threads\n  apo channel create NAME [--topic T]   Create a named channel\n  apo channel join|leave NAME           Join / leave a channel\n  apo channel list                      List channels (membership + unread)\n  apo channel post NAME "msg"           Post to a channel\n  apo channel history <NAME|@AGENT>     Channel or DM history (reading = ack)\n  apo channel send @AGENT "msg"         Send 1:1 message (legacy form of apo dm)\n  apo channel inbox                     Unread messages\n  apo channel agents                    List agent contacts\n\nDiagnostics:\n  apo diagnose ROOM_ID                  Full room diagnostic (peers, events, relay)\n\nManual:\n  apo man renderer                      Chat bubble renderer capabilities + formats\n  apo renderer                          Same as above (shorthand)\n\nOptions:\n  --json                                Output JSON (for agents)\n  --key KEY                             Override API key\n  --help                                Show this help\n\nhttps://appoiint.com/docs/quickstart.html\n';async function run(){switch(command){case"signup":return require("./commands/auth").signup(subArgs,config.baseUrl);case"signin":return require("./commands/auth").signin(subArgs,config.baseUrl);case"activate":return require("./commands/auth").activate(subArgs,config);case"login":return require("./commands/auth").login(subArgs);case"logout":return require("./commands/auth").logout(subArgs);case"config":return require("./commands/auth").showConfig(config);case"room":return require("./commands/rooms").create(client,subArgs,jsonMode,config);case"rooms":return require("./commands/rooms").list(client,subArgs,jsonMode);case"room-status":return require("./commands/rooms").status(client,subArgs,jsonMode);case"room-end":return require("./commands/rooms").end(client,subArgs,jsonMode);case"invite":return require("./commands/rooms").invite(client,subArgs,jsonMode);case"transcript":return require("./commands/rooms").transcript(client,subArgs,jsonMode);case"join":return require("./commands/meeting").join(client,subArgs,jsonMode,config);case"say":return require("./commands/meeting").say(client,subArgs,jsonMode,config);case"hear":return require("./commands/meeting").hear(client,subArgs,jsonMode,config);case"leave":return subArgs[0]||(fmt.err("Usage: apo leave ROOM_ID"),process.exit(1)),client.leaveMeeting({roomId:subArgs[0],agentId:"cli-agent"}).then(e=>jsonMode?console.log(JSON.stringify(e,null,2)):fmt.ok(`Left room ${subArgs[0]}`));case"book":return require("./commands/bookings").book(client,subArgs,jsonMode);case"bookings":return require("./commands/bookings").bookings(client,subArgs,jsonMode);case"booking":return require("./commands/bookings").bookingShow(client,subArgs,jsonMode);case"cancel":return require("./commands/bookings").cancel(client,subArgs,jsonMode);case"reschedule":return require("./commands/bookings").reschedule(client,subArgs,jsonMode);case"events":return require("./commands/bookings").events(client,subArgs,jsonMode);case"event-create":return require("./commands/bookings").eventCreate(client,subArgs,jsonMode);case"event-delete":return require("./commands/bookings").eventDelete(client,subArgs,jsonMode);case"availability":return require("./commands/bookings").availability(client,subArgs,jsonMode);case"slots":return require("./commands/bookings").slots(client,subArgs,jsonMode);case"domains":return require("./commands/domains").list(client,subArgs,jsonMode);case"domain":return require("./commands/domains").domainRun(client,subArgs,jsonMode);case"page":return require("./commands/domains").pageRun(client,subArgs,jsonMode);case"tts":return require("./commands/tts").synthesize(client,subArgs,jsonMode);case"voices":return require("./commands/tts").voices(client,subArgs,jsonMode);case"status":{const e=await api({baseUrl:config.baseUrl,apiKey:""}).status();return jsonMode?console.log(JSON.stringify(e,null,2)):void fmt.ok(`Appoiint ${e.version||"?"} — ${e.available?"online":"offline"}`)}case"version":case"--version":case"-v":return void console.log(require("../package.json").version);case"admin":return require("./commands/admin").run(client,subArgs,jsonMode,config);case"stats":return require("./commands/stats").run(client,jsonMode);case"funnel":return require("./commands/stats").funnel(client,jsonMode);case"signups":return require("./commands/stats").signups(client,subArgs,jsonMode);case"revenue":return require("./commands/stats").revenue(client,jsonMode);case"tickets":return require("./commands/tickets").list(client,subArgs,jsonMode);case"ticket":const e=subArgs[0];if("show"===e)return require("./commands/tickets").show(client,subArgs.slice(1),jsonMode);if("reply"===e)return require("./commands/tickets").reply(client,subArgs.slice(1),jsonMode);if("close"===e)return require("./commands/tickets").close(client,subArgs.slice(1),jsonMode);fmt.err("Usage: apo ticket [show|reply|close] NUMBER"),process.exit(1);case"audit":return require("./commands/audit").run(client,subArgs,jsonMode);case"helpdesk":return require("./commands/helpdesk").run(client,subArgs,jsonMode,raw);case"crm":return require("./commands/crm").run(client,subArgs,jsonMode,raw);case"agent":return require("./commands/agent").run(config,subArgs,jsonMode);case"channel":return require("./commands/channels").run(client,subArgs,jsonMode);case"wall":return require("./commands/wall").wall(client,subArgs,jsonMode);case"dm":return require("./commands/wall").dm(client,subArgs,jsonMode,config);case"notifications":return require("./commands/wall").notifications(client,subArgs,jsonMode);case"diagnose":return require("./commands/diagnose").run(client,subArgs,jsonMode,config);case"init":return require("./commands/init").run(subArgs);case"man":case"renderer":const n="man"===command?subArgs[0]:command;return"renderer"===n?require("./commands/renderer").run(subArgs.slice("man"===command?1:0),jsonMode):void fmt.err("Unknown manual page: "+(n||"(none)")+". Available: renderer");case"mcp-serve":return require("./mcp").serve();case"help":case"--help":case"-h":case void 0:return void console.log(HELP);default:fmt.err(`Unknown command: ${command}`),console.log(HELP),process.exit(1)}}run().catch(e=>{fmt.err(e.message),process.exit(1)});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "appoiint",
-  "version": "4.16.0",
+  "version": "4.18.0",
   "description": "Appoiint CLI — schedule meetings, create rooms, join video calls. Agent-first meeting platform.",
   "bin": {
     "apo": "bin/cli.js"