broods 0.53.0 → 0.53.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/cli/index.js CHANGED
@@ -1,5 +1,5 @@
1
1
  #!/usr/bin/env node
2
- import{D,L,y,b,z,k,U,B,S,f,A,m,C,F,Z,g,T,M,K,E,te,v,h}from"../chunk-ybkav7qd.js";import{p,_}from"../chunk-1fn0c0fe.js";import{chmod as Vs,lstat as Ys,mkdir as Wn,readFile as co,readdir as zs,stat as Js,writeFile as ve}from"node:fs/promises";import{createHash as lo}from"node:crypto";import qs from"node:module";import{basename as Xs,join as Me,relative as Zs,resolve as G,sep as Qs}from"node:path";import{watch as ei}from"node:fs";import{spawn as uo}from"node:child_process";import{tmpdir as ni}from"node:os";import{performance as oo}from"node:perf_hooks";import{stripVTControlCharacters as Nn}from"node:util";import{fileURLToPath as Do,pathToFileURL as ht}from"node:url";import{createHash as No}from"node:crypto";import{existsSync as Uo,readFileSync as Lo}from"node:fs";import{mkdtemp as Mo,readdir as wt,readFile as Bo,rm as Go,writeFile as Wo}from"node:fs/promises";import st from"node:module";import{tmpdir as Fo}from"node:os";import{basename as Ko,extname as Ho,isAbsolute as Vo,join as Ke,relative as $e,resolve as He}from"node:path";import{build as Yo,transformSync as bt}from"esbuild";var Jn=/\$\{([A-Z][A-Z0-9_]*)\}/;var qn={alibaba:{label:"Alibaba Qwen",modelPlaceholder:"qwen3-max"},anthropic:{label:"Anthropic",modelPlaceholder:"claude-sonnet-4-5-20250929"},azure:{label:"Azure OpenAI",modelPlaceholder:"gpt-4.1-mini"},baseten:{label:"Baseten",modelPlaceholder:"deepseek-ai/DeepSeek-V3"},bedrock:{label:"Amazon Bedrock",modelPlaceholder:"anthropic.claude-sonnet-4-5-20250929-v1:0"},cerebras:{label:"Cerebras",modelPlaceholder:"llama3.1-8b"},chatgpt:{label:"ChatGPT plan",modelPlaceholder:"gpt-5.5"},cloudflare:{label:"Cloudflare",modelPlaceholder:"@cf/meta/llama-3.3-70b-instruct-fp8-fast"},cohere:{label:"Cohere",modelPlaceholder:"command-a-03-2025"},custom:{label:"Custom OpenAI-compatible",modelPlaceholder:"gpt-oss-120b"},deepinfra:{label:"DeepInfra",modelPlaceholder:"deepseek-ai/DeepSeek-V3"},deepseek:{label:"DeepSeek",modelPlaceholder:"deepseek-chat"},fireworks:{label:"Fireworks",modelPlaceholder:"accounts/fireworks/models/deepseek-v3"},google:{label:"Google",modelPlaceholder:"gemini-2.5-flash"},groq:{label:"Groq",modelPlaceholder:"llama-3.3-70b-versatile"},huggingface:{label:"Hugging Face",modelPlaceholder:"meta-llama/Llama-3.3-70B-Instruct"},llmgateway:{label:"LLM Gateway",modelPlaceholder:"openai/gpt-4.1-mini"},minimax:{label:"MiniMax",modelPlaceholder:"MiniMax-M2.7"},mistral:{label:"Mistral",modelPlaceholder:"mistral-large-latest"},moonshotai:{label:"Moonshot AI Kimi",modelPlaceholder:"kimi-k2.6"},ollama:{label:"Ollama",modelPlaceholder:"gpt-oss:120b"},openai:{label:"OpenAI",modelPlaceholder:"gpt-4.1-mini"},openrouter:{label:"OpenRouter",modelPlaceholder:"anthropic/claude-sonnet-4.5"},perplexity:{label:"Perplexity",modelPlaceholder:"low"},togetherai:{label:"Together.ai",modelPlaceholder:"deepseek-ai/DeepSeek-V3"},v0:{label:"Vercel v0",modelPlaceholder:"v0-1.0-md"},vercel:{label:"Vercel AI Gateway",modelPlaceholder:"openai/gpt-4.1-mini"},vertex:{label:"Google Vertex AI",modelPlaceholder:"gemini-2.5-flash"},xai:{label:"xAI Grok",modelPlaceholder:"grok-4"},zai:{label:"Z.ai GLM",modelPlaceholder:"glm-4.7"}},Xn=Object.keys(qn);function Zn(e){return Object.hasOwn(qn,e)}var Po=/(?:^|[\n;])\s*import\s+(?:[^;"'`]*?\s+from\s*)?["'](?!\.{1,2}\/|\/|node:)[^"']+["']|import\s*\(\s*["'](?!\.{1,2}\/|\/|node:)[^"']+["']\s*\)/,To=/(?:import\s+(?:[^;"'`]*?\s+from\s*)?["']node:|import\s*\(\s*["']node:)/,_o=/(?<![.\w$])(?:process|Buffer)\s*(?:\?\.|\.|\[)/,Io=[/\b(?:__)?require\s*\(/,/(?<![.\w$])setImmediate\s*\(/,To,_o,/\b__dirname\b/,Po],jo=/(?<![.\w$])eval\s*\(|\bnew\s+Function\s*\(/;function Qn(e){return![...Io,jo].some((n)=>n.test(e))}var et=new Set(["lambda","sandbox","vercel"]),nt=new Set(["daytona"]);var tt=`${[...et].join("/")}, or ${[...nt].join(" or ")} with options.mountAwsS3Buckets: true`;function ot(e,n){if(et.has(e))return!0;return nt.has(e)&&n?.mountAwsS3Buckets===!0}var dn=32;var un=["conversation","agent"];function rt(e){return un.some((n)=>n===e)}var xe="*",zo=new RegExp(Jn.source,"g"),Jo=`const passthrough = (input) => input;
2
+ import{D,L,y,b,z,k,U,F,S,f,A,m,C,B,H,g,T,M,K,E,te,v,h}from"../chunk-b0pdqkyk.js";import{p,_}from"../chunk-1fn0c0fe.js";import{chmod as Vs,lstat as Ys,mkdir as Wn,readFile as co,readdir as zs,stat as Js,writeFile as ve}from"node:fs/promises";import{createHash as lo}from"node:crypto";import qs from"node:module";import{basename as Xs,join as Me,relative as Zs,resolve as G,sep as Qs}from"node:path";import{watch as ei}from"node:fs";import{spawn as uo}from"node:child_process";import{tmpdir as ni}from"node:os";import{performance as oo}from"node:perf_hooks";import{stripVTControlCharacters as Nn}from"node:util";import{fileURLToPath as Do,pathToFileURL as ht}from"node:url";import{createHash as No}from"node:crypto";import{existsSync as Uo,readFileSync as Lo}from"node:fs";import{mkdtemp as Mo,readdir as wt,readFile as Bo,rm as Go,writeFile as Wo}from"node:fs/promises";import st from"node:module";import{tmpdir as Fo}from"node:os";import{basename as Ko,extname as Ho,isAbsolute as Vo,join as Ke,relative as $e,resolve as He}from"node:path";import{build as Yo,transformSync as bt}from"esbuild";var Jn=/\$\{([A-Z][A-Z0-9_]*)\}/;var qn={alibaba:{label:"Alibaba Qwen",modelPlaceholder:"qwen3-max"},anthropic:{label:"Anthropic",modelPlaceholder:"claude-sonnet-4-5-20250929"},azure:{label:"Azure OpenAI",modelPlaceholder:"gpt-4.1-mini"},baseten:{label:"Baseten",modelPlaceholder:"deepseek-ai/DeepSeek-V3"},bedrock:{label:"Amazon Bedrock",modelPlaceholder:"anthropic.claude-sonnet-4-5-20250929-v1:0"},cerebras:{label:"Cerebras",modelPlaceholder:"llama3.1-8b"},chatgpt:{label:"ChatGPT plan",modelPlaceholder:"gpt-5.5"},cloudflare:{label:"Cloudflare",modelPlaceholder:"@cf/meta/llama-3.3-70b-instruct-fp8-fast"},cohere:{label:"Cohere",modelPlaceholder:"command-a-03-2025"},custom:{label:"Custom OpenAI-compatible",modelPlaceholder:"gpt-oss-120b"},deepinfra:{label:"DeepInfra",modelPlaceholder:"deepseek-ai/DeepSeek-V3"},deepseek:{label:"DeepSeek",modelPlaceholder:"deepseek-chat"},fireworks:{label:"Fireworks",modelPlaceholder:"accounts/fireworks/models/deepseek-v3"},google:{label:"Google",modelPlaceholder:"gemini-2.5-flash"},groq:{label:"Groq",modelPlaceholder:"llama-3.3-70b-versatile"},huggingface:{label:"Hugging Face",modelPlaceholder:"meta-llama/Llama-3.3-70B-Instruct"},llmgateway:{label:"LLM Gateway",modelPlaceholder:"openai/gpt-4.1-mini"},minimax:{label:"MiniMax",modelPlaceholder:"MiniMax-M2.7"},mistral:{label:"Mistral",modelPlaceholder:"mistral-large-latest"},moonshotai:{label:"Moonshot AI Kimi",modelPlaceholder:"kimi-k2.6"},ollama:{label:"Ollama",modelPlaceholder:"gpt-oss:120b"},openai:{label:"OpenAI",modelPlaceholder:"gpt-4.1-mini"},openrouter:{label:"OpenRouter",modelPlaceholder:"anthropic/claude-sonnet-4.5"},perplexity:{label:"Perplexity",modelPlaceholder:"low"},togetherai:{label:"Together.ai",modelPlaceholder:"deepseek-ai/DeepSeek-V3"},v0:{label:"Vercel v0",modelPlaceholder:"v0-1.0-md"},vercel:{label:"Vercel AI Gateway",modelPlaceholder:"openai/gpt-4.1-mini"},vertex:{label:"Google Vertex AI",modelPlaceholder:"gemini-2.5-flash"},xai:{label:"xAI Grok",modelPlaceholder:"grok-4"},zai:{label:"Z.ai GLM",modelPlaceholder:"glm-4.7"}},Xn=Object.keys(qn);function Zn(e){return Object.hasOwn(qn,e)}var Po=/(?:^|[\n;])\s*import\s+(?:[^;"'`]*?\s+from\s*)?["'](?!\.{1,2}\/|\/|node:)[^"']+["']|import\s*\(\s*["'](?!\.{1,2}\/|\/|node:)[^"']+["']\s*\)/,To=/(?:import\s+(?:[^;"'`]*?\s+from\s*)?["']node:|import\s*\(\s*["']node:)/,_o=/(?<![.\w$])(?:process|Buffer)\s*(?:\?\.|\.|\[)/,Io=[/\b(?:__)?require\s*\(/,/(?<![.\w$])setImmediate\s*\(/,To,_o,/\b__dirname\b/,Po],jo=/(?<![.\w$])eval\s*\(|\bnew\s+Function\s*\(/;function Qn(e){return![...Io,jo].some((n)=>n.test(e))}var et=new Set(["lambda","sandbox","vercel"]),nt=new Set(["daytona"]);var tt=`${[...et].join("/")}, or ${[...nt].join(" or ")} with options.mountAwsS3Buckets: true`;function ot(e,n){if(et.has(e))return!0;return nt.has(e)&&n?.mountAwsS3Buckets===!0}var dn=32;var un=["conversation","agent"];function rt(e){return un.some((n)=>n===e)}var xe="*",zo=new RegExp(Jn.source,"g"),Jo=`const passthrough = (input) => input;
3
3
  export const defineAgent = passthrough;
4
4
  export const defineBroods = passthrough;
5
5
  export const defineCron = passthrough;
@@ -81,13 +81,13 @@ export const manifest = ${JSON.stringify(e,null,2)} as const;
81
81
  `}function Ie(e,n,t){let o=Object.keys(n);if(o.length===0)return"{}";return`{
82
82
  ${o.map((s)=>` ${hn(t?.[s]??s)}: ids.${e}[${JSON.stringify(s)}],`).join(`
83
83
  `)}
84
- }`}function hn(e){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(e)?e:JSON.stringify(e)}function Ct(e,n){return`${e}…${n.slice(-4)}`}var wn=["ap-southeast-1","eu-west-1","us-east-1"],At=["eu-west-1"];var Pt=1,Tt=0,xt=60000,Je=15000;function Q(e,n){return new Promise((t)=>{if(n?.aborted)return t();let o=setTimeout(t,e);n?.addEventListener("abort",()=>{clearTimeout(o),t()},{once:!0})})}function se(){let e=globalThis.WebSocket;if(!e)throw Error("WebSocket is not available in this environment.");return e}class x extends Error{}async function*qe(e,n={}){let t=new Set,o=500,r=0,s=Date.now();while(!n.signal?.aborted){let i=!1,a="the log stream closed";try{for await(let c of Zr(e,n,()=>{i=!0})){let d=`${c.ts}|${c.eventType}|${c.message}`;if(t.has(d))continue;if(t.add(d),t.size>5000)t.delete(t.values().next().value);yield c}}catch(c){if(n.signal?.aborted)return;if(a=c instanceof Error?c.message:String(c),c instanceof x||/unauthorized|invalid websocket token|scope does not match/i.test(a))throw c}if(n.signal?.aborted)return;if(i)o=500,r=0,s=Date.now();if(!n.keepReconnecting&&Date.now()-s>=xt)throw Error(`Gave up reconnecting to the live logs after ${xt/1000} s. Last error: ${a}`);r+=1,n.onReconnect?.(r,a),await Q(o,n.signal),o=Math.min(o*2,5000)}}async function*Zr(e,n,t){let{backfill:o=0,minLevel:r,sandboxId:s,signal:i}=n,a=n.liveOnly??o<=0;if(i?.aborted)return;let c=[],d=null,l=!1,u=null,w=()=>{u?.(),u=null},{socket:O,url:I}=It(e,await e.credential()),P=setTimeout(()=>{d=Error(`The observability gateway did not answer within ${Je/1000} s.`),l=!0,w()},Je),j=()=>{if(clearTimeout(P),O.readyState===Pt||O.readyState===Tt)O.close(1000,"client closed");i?.removeEventListener("abort",me)},me=()=>{l=!0,w(),j()};i?.addEventListener("abort",me,{once:!0}),O.onopen=()=>{if(i?.aborted){j();return}let X={type:"subscribe",stream:"logs",...o>0?{backfill:o}:{},...a?{liveOnly:!0}:{},...r!==void 0?{minLevel:r}:{},...s!==void 0?{sandboxId:s}:{}};O.send(JSON.stringify(X))},O.onmessage=(X)=>{let he=Dt(X.data);if(!he)return;if(clearTimeout(P),he.type!=="error")t();switch(he.type){case"backfill":if(he.stream==="logs"){for(let xo of he.entries)c.push(xo);w()}break;case"log":c.push(he.entry),w();break;case"error":d=Error(`Observability gateway error: ${he.error}`),l=!0,w();break;case"ready":break;default:break}},O.onerror=()=>{d=Error(`Cannot connect to the observability gateway at ${I}.`),l=!0,w()},O.onclose=(X)=>{if(!l){if(X.code!==1000)d=jt(X);l=!0,w()}};try{while(!0){if(c.length>0){yield c.shift();continue}if(d)throw d;if(l)return;await new Promise((X)=>{u=X})}}finally{j()}}async function _t(e,n){let{socket:t,url:o}=It(e,await e.credential());return new Promise((r,s)=>{let i=!1,a=(l)=>{if(i)return;if(i=!0,clearTimeout(d),t.readyState===Pt||t.readyState===Tt)t.close(1000,"client closed");l()},c=(l)=>a(()=>s(l)),d=setTimeout(()=>{c(Error(`The observability gateway did not answer within ${Je/1000} s.`))},Je);t.onopen=()=>{let l={type:"fetchTrace",traceId:n};t.send(JSON.stringify(l))},t.onmessage=(l)=>{let u=Dt(l.data);if(u?.type==="error")c(Error(`Observability gateway error: ${u.error}`));else if(u?.type==="backfill"&&u.stream==="traces"){let w=u.entries;if(u.error)c(Error(u.error));else a(()=>r(w))}},t.onerror=()=>{c(Error(`Cannot connect to the observability gateway at ${o}.`))},t.onclose=(l)=>c(jt(l))})}function It(e,n){let t=Qr(e.baseUrl,e.project,e.stage);return{socket:new(se())(t,E(n)),url:t}}function jt(e){return Error(e.reason?`Observability WebSocket closed: ${e.reason}`:`Observability WebSocket closed with code ${e.code}.`)}function Qr(e,n,t){return`${K(e)}/v1/projects/${encodeURIComponent(n)}/stages/${encodeURIComponent(t)}/observability/ws`}function Dt(e){if(typeof e!=="string")return null;try{let n=JSON.parse(e);return typeof n==="object"&&n!==null&&typeof n.type==="string"?n:null}catch{return null}}var es=new Set(["bundle","bundleStorageId","contentBase64"]),ns=new Set(["hook","mcp","skill"]),ts=30000;class Ze extends Error{}class Qe extends Error{}class J{baseUrl;token;fetchImpl;constructor(e){this.baseUrl=f(e.baseUrl),this.token=e.token,this.fetchImpl=e.fetch??fetch}async getManifest(e,n){let t=await this.request(e,n,"/manifest",{method:"GET"});if(t.status===404)return null;return await V(t,"Fetch manifest failed"),await t.json()}async putManifest(e,n,t=!1,o){let r=await this.externalizeLargeMcpBundles(e),s=await this.request(e.project,e.stage,"/manifest",{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({manifest:r,prune:n,rotateRuntimeKey:t,...o!==void 0?{revision:o}:{}})},null);return await V(s,"Sync manifest failed"),await s.json()}async externalizeLargeMcpBundles(e){if(e.resources.every((t)=>Lt(t)===null))return e;let n=await Promise.all(e.resources.map(async(t)=>{let o=Lt(t);if(o===null)return t;let{bundle:r,...s}=t.config,i=await this.uploadMcpBundle(e.project,e.stage,o);return{...t,config:{...s,bundleStorageId:i,sha256:Te(o)}}}));return{...e,resources:n}}async uploadMcpBundle(e,n,t){let o=await this.request(e,n,"/mcp-bundle-uploads",{method:"POST"});await V(o,"Mint bundle upload URL failed");let{uploadUrl:r}=await o.json();if(!r)throw Error("Mint bundle upload URL failed: response omitted uploadUrl");let s=await this.send(r,{method:"POST",headers:{"Content-Type":"application/javascript"},body:t},null);await V(s,"Bundle upload failed");let{storageId:i}=await s.json();if(!i)throw Error("Bundle upload failed: response omitted storageId");return i}async getRuntimeKey(e,n){let t=await this.request(e,n,"/runtime-key",{method:"GET"});if(t.status===404)return null;await V(t,"Fetch runtime key failed");let o=await t.json();if(!o.apiKey)throw Error("Fetch runtime key failed: response omitted apiKey");return{apiKey:o.apiKey,keyHint:o.keyHint??"",...o.endpointId?{endpointId:o.endpointId}:{},...o.projectSlug?{projectSlug:o.projectSlug}:{},...o.stageSlug?{stageSlug:o.stageSlug}:{}}}async rotateUserTokenSecret(e,n){let t=await this.request(e,n,"/user-token-secret",{method:"POST"});if(t.status===404)return null;await V(t,"Rotate user token signing secret failed");let o=await t.json();if(!o.secret||!o.hint)throw Error("Rotate user token signing secret failed: response omitted the secret");return{secret:o.secret,hint:o.hint}}async setEnv(e,n,t,o){let r=await this.request(e,n,`/env/${encodeURIComponent(t)}`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({value:o})});await V(r,"Set environment variable failed")}async listEnv(e,n){let t=await this.request(e,n,"/env",{method:"GET"});return await V(t,"List environment variables failed"),(await t.json()).variables??[]}async getEnv(e,n,t){let o=await this.request(e,n,`/env/${encodeURIComponent(t)}`,{method:"GET"});if(o.status===404)return null;return await V(o,"Read environment variable failed"),(await o.json()).value??null}async removeEnv(e,n,t){let o=await this.request(e,n,`/env/${encodeURIComponent(t)}`,{method:"DELETE"});await V(o,"Remove environment variable failed")}async getOnboarding(){let e=await this.send(`${this.baseUrl}/v1/account/onboarding`,{method:"GET",headers:{Authorization:`Bearer ${this.token}`}});return Re(e,"/v1/account/onboarding","broods org"),await V(e,"Fetch CLI onboarding context failed"),await e.json()}async selectOnboardingOrg(e){let n=await this.send(`${this.baseUrl}/v1/account/onboarding`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({orgId:e})});return await V(n,"Select CLI org failed"),await n.json()}async listStages(e){let n=await this.send(`${this.baseUrl}/v1/account/stages?project=${encodeURIComponent(e)}`,{method:"GET",headers:{Authorization:`Bearer ${this.token}`}});return Re(n,"/v1/account/stages","broods stage"),await V(n,"List stages failed"),(await n.json()).stages??[]}async createStage(e,n,t){let o=await this.send(`${this.baseUrl}/v1/account/stages`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({project:e,name:n,...t?{from:t}:{}})});return Re(o,"/v1/account/stages","broods stage"),await V(o,"Create stage failed"),await o.json()}async mintStageSession(e,n){let t=await this.send(`${this.baseUrl}/v1/account/stage-session`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({project:e,stage:n})});Re(t,"/v1/account/stage-session","broods logs");try{await V(t,"Open stage session failed")}catch(o){if(t.status===401||t.status===404)throw new x(o instanceof Error?o.message:String(o));throw o}return await t.json()}async listProjects(){let e=await this.send(`${this.baseUrl}/v1/account/projects`,{method:"GET",headers:{Authorization:`Bearer ${this.token}`}});return Re(e,"/v1/account/projects","broods project"),await V(e,"List projects failed"),(await e.json()).projects??[]}async deleteProject(e){let n=await this.send(`${this.baseUrl}/v1/account/projects?projectId=${encodeURIComponent(e)}`,{method:"DELETE",headers:{Authorization:`Bearer ${this.token}`}});if(Re(n,"/v1/account/projects","broods project"),n.status===404)return null;return await V(n,"Delete project failed"),(await n.json()).deleted??null}async createOnboardingOrg(e){let n=await this.send(`${this.baseUrl}/v1/account/onboarding`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({createOrgName:e})});return await V(n,"Create CLI org failed"),await n.json()}async request(e,n,t,o,r){let s=`${this.baseUrl}/v1/account/projects/${encodeURIComponent(e)}/stages/${encodeURIComponent(n)}${t}`;return await this.send(s,{...o,headers:{Authorization:`Bearer ${this.token}`,...o.headers}},r)}async send(e,n,t){return await en(e,n,{fetch:this.fetchImpl,timeoutMs:t})}}async function en(e,n,t={}){let o=t.fetch??fetch,r=t.timeoutMs===void 0?ts:t.timeoutMs;try{return await o(e,r===null?n:{...n,signal:AbortSignal.timeout(r)})}catch(s){throw Error(`Cannot reach ${new URL(e).origin}: ${ss(s,r)}`,{cause:s})}}function En(e,n){let t=new Map((n?.resources??[]).map((d)=>[`${d.kind}:${d.name}`,d])),o=new Map(e.resources.map((d)=>[`${d.kind}:${d.name}`,d])),r=[],s=[],i=[];for(let[d,l]of o){let u=t.get(d);if(!u)s.push({key:d,resource:l});else if(Xe(yn(u))!==Xe(yn(l)))r.push({operation:"update",kind:l.kind,name:l.name})}for(let[d,l]of t)if(!o.has(d))i.push({key:d,resource:l});let a=new Set,c=new Set;for(let d of s){let l=i.find((u)=>!a.has(u.key)&&os(d.resource.kind)&&d.resource.kind===u.resource.kind&&Xe(Ut(d.resource))===Xe(Ut(u.resource)));if(!l)continue;c.add(d.key),a.add(l.key),r.push({operation:"rename",kind:d.resource.kind,name:d.resource.name,previousName:l.resource.name})}for(let{key:d,resource:l}of s)if(!c.has(d))r.push({operation:"create",kind:l.kind,name:l.name});for(let{key:d,resource:l}of i)if(!a.has(d))r.push({operation:"delete",kind:l.kind,name:l.name});return r.sort((d,l)=>Nt(d).localeCompare(Nt(l)))}function Nt(e){return`${{create:0,rename:1,update:2,delete:3}[e.operation]}:${e.kind}:${e.previousName??""}:${e.name}`}function os(e){return e==="agent"||e==="workspace"||e==="sandbox"||e==="policy"}function bn(e){if(Array.isArray(e))return e.map(bn);if(e&&typeof e==="object"){let n=e;if(n.__beeblastEnv===!0&&typeof n.name==="string")return`\${${n.name}}`;return Object.fromEntries(Object.entries(n).map(([t,o])=>[t,bn(o)]))}return e}function Ut(e){let n=yn(e),{name:t,...o}=n;return o}function yn(e){let n=bn(e);if(!ns.has(e.kind))return n;return{...n,config:Sn(n.config)}}function vn(e){if(Array.isArray(e))return e.map(vn);if(e&&typeof e==="object")return Object.fromEntries(Object.entries(e).sort(([n],[t])=>n.localeCompare(t)).map(([n,t])=>[n,vn(t)]));return e}function Xe(e){return JSON.stringify(vn(e))}function Sn(e){if(Array.isArray(e))return e.map(Sn);if(e&&typeof e==="object")return Object.fromEntries(Object.entries(e).flatMap(([n,t])=>{if(es.has(n))return[];return[[n,Sn(t)]]}));return e}async function V(e,n){if(e.ok)return;let t=await e.text(),{message:o=t,code:r}=rs(t);if(r==="manifest_conflict")throw new Ze(o);let s=e.status===401?"\nRun `broods login` to sign in again.":"";throw Error(`${n}: ${e.status} ${o}${s}`)}function rs(e){let n;try{n=JSON.parse(e)}catch{return{}}let t=typeof n==="object"&&n!==null&&"error"in n?n.error:void 0;if(typeof t!=="object"||t===null)return{};return{..."message"in t&&typeof t.message==="string"?{message:t.message}:{},..."code"in t&&typeof t.code==="string"?{code:t.code}:{}}}function Re(e,n,t){if(e.status!==404)return;if((e.headers.get("Content-Type")??"").includes("application/json"))return;throw new Qe(`This broods server is older than your CLI and does not support \`${t}\` yet (no ${n} route).`)}function ss(e,n){if(!(e instanceof Error))return String(e);if(e.name==="TimeoutError"&&n!==null)return`no answer within ${n/1000} s`;let t=e.cause;if(!(t instanceof Error))return e.message;if(t.message)return t.message;return"code"in t&&typeof t.code==="string"?t.code:e.message}function Lt(e){if(e.kind!=="mcp")return null;let n=e.config?.bundle;if(typeof n!=="string")return null;return Buffer.byteLength(n)>mn?n:null}var nn=["chatgpt"];var we={chatgpt:{label:"ChatGPT plan",description:"Run agents on model.provider chatgpt with your ChatGPT plan",authorizeUrl:"https://auth.openai.com/api/accounts/authorize",tokenUrl:"https://auth.openai.com/api/accounts/oauth/token",revokeUrl:"https://auth.openai.com/api/accounts/oauth/revoke",jwksUrl:"https://auth.openai.com/.well-known/jwks.json",issuer:"https://auth.openai.com",scopes:["openid","profile","email","offline_access","resource.invoke","chatgpt.tokens.use.direct"],resource:"https://api.openai.com/v1",requiredScope:"chatgpt.tokens.use.direct",selfHostedOnly:"ChatGPT plan usage is only available on self-hosted Broods for now. Use an OpenAI API key with the `openai` provider instead.",managedOptIn:"CHATGPT_PLAN_ENABLED",modelsUrl:"https://api.openai.com/v1/models",usageUrl:"https://chatgpt.com/settings/usage"}};function kn(e){return nn.some((n)=>n===e)}import{createHash as Rs,randomBytes as Os,randomUUID as Jt}from"node:crypto";import{createServer as ps}from"node:http";import{createHash as fs,randomBytes as ms,randomUUID as hs}from"node:crypto";import{spawn as ws}from"node:child_process";import{createInterface as De}from"node:readline/promises";import{stdin as ce,stdout as ae}from"node:process";import{Writable as bs}from"node:stream";function Oe(e,n,t={}){let o=`${n?"*":" "} ${e}`;return n?W(o,"\x1B[1m\x1B[36m",ne(t)):o}function Mt(e,n={}){let t=ne(n),o=(i)=>W(i.padEnd(9),"\x1B[2m",t),r=!e.loggedIn?W("not logged in","\x1B[33m",t):e.org??W("unknown, run broods whoami","\x1B[2m",t),s=e.project??`none ${W(`(${e.projectGuess} from folder name)`,"\x1B[2m",t)}`;return[` ${o("org")}${r}`,` ${o("project")}${s}`,` ${o("stage")}${Kt(e.stage,t)}`,` ${o("server")}${e.server}`]}function is(e,n={}){let t=ne(n),o=Ht(e.stage),r=o==="Development",s=W("▌",r?"\x1B[32m":"\x1B[33m",t),i=t?`${r?"\x1B[42m\x1B[30m\x1B[1m":"\x1B[43m\x1B[30m\x1B[1m"} ${o} \x1B[0m`:`[${o}]`,a=t?W("dashboard","\x1B[4m",t):"dashboard",c=`${e.dashboardUrl}?project=${encodeURIComponent(e.project)}&stage=${encodeURIComponent(e.stage)}`,d=W(c,"\x1B[2m\x1B[4m",t);return[`${s} Syncing ${o}: ${W(e.project,"",t)}`,`${s} ${i} ${e.stage} (${a})`,`${s} ${W("└─","\x1B[2m",t)} ${d}`].join(`
85
- `)}function as(e,n={}){let t=ne(n);return e.map((o)=>{let r=gs(o.operation,t);if(o.operation==="rename"&&o.previousName)return` ${r} ${o.kind}:${o.previousName} -> ${o.name}`;return` ${r} ${o.kind}:${o.name}`})}function cs(e,n={}){let t=ne(n),o=W("▌","\x1B[32m",t),r=W("↑","\x1B[32m",t);return`${o} ${r} Synced ${e.length} env var(s) from .env.local: ${e.join(", ")}`}function ls(e,n={}){return`${W("✖","\x1B[31m",ne(n))} ${e}`}function Bt(e,n={}){let t=ne(n),o=Math.max(...e.map(([r])=>r.length))+2;return e.map(([r,s])=>` ${r.padEnd(o)}${W(s,"\x1B[2m",t)}`)}function ds(e,n={}){let t=(n.now??new Date).toTimeString().slice(0,8);return`${W("✔","\x1B[32m",ne(n))} ${t} Resources ready! (${On(e)})`}function us(e,n={}){return`${W("✔","\x1B[32m",ne(n))} ${e}`}function $n(e,n,t={}){let o=ne(t),r=t.note?` ${W(`(${t.note})`,"\x1B[2m",o)}`:"";return` ${W("now","\x1B[2m",o)} ${e} → ${Kt(n,o)}${r}`}function je(e,n={}){return W(`! ${e}`,"\x1B[33m",ne(n))}function Gt(e){console.error(is(e))}function tn(e){for(let n of as(e))console.log(n)}function Rn(e){console.error(cs(e))}function Wt(e){console.error(ls(e,{stream:"stderr"}))}function Ft(e){console.error(ds(e))}function q(e){console.log(us(e,{stream:"stdout"}))}function N(e){console.log(je(e,{stream:"stdout"}))}function gs(e,n){if(e==="create")return`[${W("+","\x1B[32m",n)}]`;if(e==="rename")return`[${W("~","\x1B[33m",n)}]`;if(e==="update")return`[${W("*","\x1B[36m",n)}]`;return`[${W("-","\x1B[31m",n)}]`}function On(e){if(e>=1000)return`${(e/1000).toFixed(2)}s`;return`${Math.max(e,0).toFixed(1)}ms`}function W(e,n,t){return t?`${n}${e}\x1B[0m`:e}function Kt(e,n){let t=Ht(e)==="Development";return W(e,t?"\x1B[32m":"\x1B[33m",n)}function ne(e){if(e.color!==void 0)return e.color;if(Object.hasOwn(process.env,"NO_COLOR"))return!1;if(process.env.FORCE_COLOR&&process.env.FORCE_COLOR!=="0")return!0;return(e.stream==="stdout"?process.stdout:process.stderr).isTTY&&process.env.TERM!=="dumb"}function Ht(e){let n=e.trim().toLowerCase();if(n==="development")return"Development";if(n==="production")return"Production";return e.trim()}var ys=180000,vs=`Timed out waiting for browser login to complete.
84
+ }`}function hn(e){return/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(e)?e:JSON.stringify(e)}function Ct(e,n){return`${e}…${n.slice(-4)}`}var wn=["ap-southeast-1","eu-west-1","us-east-1"],At=["eu-west-1"];var Pt=1,Tt=0,xt=60000,Je=15000;function Q(e,n){return new Promise((t)=>{if(n?.aborted)return t();let o=setTimeout(t,e);n?.addEventListener("abort",()=>{clearTimeout(o),t()},{once:!0})})}function se(){let e=globalThis.WebSocket;if(!e)throw Error("WebSocket is not available in this environment.");return e}class x extends Error{}async function*qe(e,n={}){let t=new Set,o=500,r=0,s=Date.now();while(!n.signal?.aborted){let i=!1,a="the log stream closed";try{for await(let c of Zr(e,n,()=>{i=!0})){let d=`${c.ts}|${c.eventType}|${c.message}`;if(t.has(d))continue;if(t.add(d),t.size>5000)t.delete(t.values().next().value);yield c}}catch(c){if(n.signal?.aborted)return;if(a=c instanceof Error?c.message:String(c),c instanceof x||/unauthorized|invalid websocket token|scope does not match/i.test(a))throw c}if(n.signal?.aborted)return;if(i)o=500,r=0,s=Date.now();if(!n.keepReconnecting&&Date.now()-s>=xt)throw Error(`Gave up reconnecting to the live logs after ${xt/1000} s. Last error: ${a}`);r+=1,n.onReconnect?.(r,a),await Q(o,n.signal),o=Math.min(o*2,5000)}}async function*Zr(e,n,t){let{backfill:o=0,minLevel:r,sandboxId:s,signal:i}=n,a=n.liveOnly??o<=0;if(i?.aborted)return;let c=[],d=null,l=!1,u=null,w=()=>{u?.(),u=null},{socket:O,url:I}=It(e,await e.credential()),P=setTimeout(()=>{d=Error(`The observability gateway did not answer within ${Je/1000} s.`),l=!0,w()},Je),j=()=>{if(clearTimeout(P),O.readyState===Pt||O.readyState===Tt)O.close(1000,"client closed");i?.removeEventListener("abort",me)},me=()=>{l=!0,w(),j()};i?.addEventListener("abort",me,{once:!0}),O.onopen=()=>{if(i?.aborted){j();return}let Z={type:"subscribe",stream:"logs",...o>0?{backfill:o}:{},...a?{liveOnly:!0}:{},...r!==void 0?{minLevel:r}:{},...s!==void 0?{sandboxId:s}:{}};O.send(JSON.stringify(Z))},O.onmessage=(Z)=>{let he=Dt(Z.data);if(!he)return;if(clearTimeout(P),he.type!=="error")t();switch(he.type){case"backfill":if(he.stream==="logs"){for(let xo of he.entries)c.push(xo);w()}break;case"log":c.push(he.entry),w();break;case"error":d=Error(`Observability gateway error: ${he.error}`),l=!0,w();break;case"ready":break;default:break}},O.onerror=()=>{d=Error(`Cannot connect to the observability gateway at ${I}.`),l=!0,w()},O.onclose=(Z)=>{if(!l){if(Z.code!==1000)d=jt(Z);l=!0,w()}};try{while(!0){if(c.length>0){yield c.shift();continue}if(d)throw d;if(l)return;await new Promise((Z)=>{u=Z})}}finally{j()}}async function _t(e,n){let{socket:t,url:o}=It(e,await e.credential());return new Promise((r,s)=>{let i=!1,a=(l)=>{if(i)return;if(i=!0,clearTimeout(d),t.readyState===Pt||t.readyState===Tt)t.close(1000,"client closed");l()},c=(l)=>a(()=>s(l)),d=setTimeout(()=>{c(Error(`The observability gateway did not answer within ${Je/1000} s.`))},Je);t.onopen=()=>{let l={type:"fetchTrace",traceId:n};t.send(JSON.stringify(l))},t.onmessage=(l)=>{let u=Dt(l.data);if(u?.type==="error")c(Error(`Observability gateway error: ${u.error}`));else if(u?.type==="backfill"&&u.stream==="traces"){let w=u.entries;if(u.error)c(Error(u.error));else a(()=>r(w))}},t.onerror=()=>{c(Error(`Cannot connect to the observability gateway at ${o}.`))},t.onclose=(l)=>c(jt(l))})}function It(e,n){let t=Qr(e.baseUrl,e.project,e.stage);return{socket:new(se())(t,E(n)),url:t}}function jt(e){return Error(e.reason?`Observability WebSocket closed: ${e.reason}`:`Observability WebSocket closed with code ${e.code}.`)}function Qr(e,n,t){return`${K(e)}/v1/projects/${encodeURIComponent(n)}/stages/${encodeURIComponent(t)}/observability/ws`}function Dt(e){if(typeof e!=="string")return null;try{let n=JSON.parse(e);return typeof n==="object"&&n!==null&&typeof n.type==="string"?n:null}catch{return null}}var es=new Set(["bundle","bundleStorageId","contentBase64"]),ns=new Set(["hook","mcp","skill"]),ts=30000;class Ze extends Error{}class Qe extends Error{}class q{baseUrl;token;fetchImpl;constructor(e){this.baseUrl=f(e.baseUrl),this.token=e.token,this.fetchImpl=e.fetch??fetch}async getManifest(e,n){let t=await this.request(e,n,"/manifest",{method:"GET"});if(t.status===404)return null;return await Y(t,"Fetch manifest failed"),await t.json()}async putManifest(e,n,t=!1,o){let r=await this.externalizeLargeMcpBundles(e),s=await this.request(e.project,e.stage,"/manifest",{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({manifest:r,prune:n,rotateRuntimeKey:t,...o!==void 0?{revision:o}:{}})},null);return await Y(s,"Sync manifest failed"),await s.json()}async externalizeLargeMcpBundles(e){if(e.resources.every((t)=>Lt(t)===null))return e;let n=await Promise.all(e.resources.map(async(t)=>{let o=Lt(t);if(o===null)return t;let{bundle:r,...s}=t.config,i=await this.uploadMcpBundle(e.project,e.stage,o);return{...t,config:{...s,bundleStorageId:i,sha256:Te(o)}}}));return{...e,resources:n}}async uploadMcpBundle(e,n,t){let o=await this.request(e,n,"/mcp-bundle-uploads",{method:"POST"});await Y(o,"Mint bundle upload URL failed");let{uploadUrl:r}=await o.json();if(!r)throw Error("Mint bundle upload URL failed: response omitted uploadUrl");let s=await this.send(r,{method:"POST",headers:{"Content-Type":"application/javascript"},body:t},null);await Y(s,"Bundle upload failed");let{storageId:i}=await s.json();if(!i)throw Error("Bundle upload failed: response omitted storageId");return i}async getRuntimeKey(e,n){let t=await this.request(e,n,"/runtime-key",{method:"GET"});if(t.status===404)return null;await Y(t,"Fetch runtime key failed");let o=await t.json();if(!o.apiKey)throw Error("Fetch runtime key failed: response omitted apiKey");return{apiKey:o.apiKey,keyHint:o.keyHint??"",...o.endpointId?{endpointId:o.endpointId}:{},...o.projectSlug?{projectSlug:o.projectSlug}:{},...o.stageSlug?{stageSlug:o.stageSlug}:{}}}async rotateUserTokenSecret(e,n){let t=await this.request(e,n,"/user-token-secret",{method:"POST"});if(t.status===404)return null;await Y(t,"Rotate user token signing secret failed");let o=await t.json();if(!o.secret||!o.hint)throw Error("Rotate user token signing secret failed: response omitted the secret");return{secret:o.secret,hint:o.hint}}async setEnv(e,n,t,o){let r=await this.request(e,n,`/env/${encodeURIComponent(t)}`,{method:"PUT",headers:{"Content-Type":"application/json"},body:JSON.stringify({value:o})});await Y(r,"Set environment variable failed")}async listEnv(e,n){let t=await this.request(e,n,"/env",{method:"GET"});return await Y(t,"List environment variables failed"),(await t.json()).variables??[]}async getEnv(e,n,t){let o=await this.request(e,n,`/env/${encodeURIComponent(t)}`,{method:"GET"});if(o.status===404)return null;return await Y(o,"Read environment variable failed"),(await o.json()).value??null}async removeEnv(e,n,t){let o=await this.request(e,n,`/env/${encodeURIComponent(t)}`,{method:"DELETE"});await Y(o,"Remove environment variable failed")}async getOnboarding(){let e=await this.send(`${this.baseUrl}/v1/account/onboarding`,{method:"GET",headers:{Authorization:`Bearer ${this.token}`}});return Re(e,"/v1/account/onboarding","broods org"),await Y(e,"Fetch CLI onboarding context failed"),await e.json()}async selectOnboardingOrg(e){let n=await this.send(`${this.baseUrl}/v1/account/onboarding`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({orgId:e})});return await Y(n,"Select CLI org failed"),await n.json()}async listStages(e){let n=await this.send(`${this.baseUrl}/v1/account/stages?project=${encodeURIComponent(e)}`,{method:"GET",headers:{Authorization:`Bearer ${this.token}`}});return Re(n,"/v1/account/stages","broods stage"),await Y(n,"List stages failed"),(await n.json()).stages??[]}async createStage(e,n,t){let o=await this.send(`${this.baseUrl}/v1/account/stages`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({project:e,name:n,...t?{from:t}:{}})});return Re(o,"/v1/account/stages","broods stage"),await Y(o,"Create stage failed"),await o.json()}async mintStageSession(e,n){let t=await this.send(`${this.baseUrl}/v1/account/stage-session`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({project:e,stage:n})});Re(t,"/v1/account/stage-session","broods logs");try{await Y(t,"Open stage session failed")}catch(o){if(t.status===401||t.status===404)throw new x(o instanceof Error?o.message:String(o));throw o}return await t.json()}async listProjects(){let e=await this.send(`${this.baseUrl}/v1/account/projects`,{method:"GET",headers:{Authorization:`Bearer ${this.token}`}});return Re(e,"/v1/account/projects","broods project"),await Y(e,"List projects failed"),(await e.json()).projects??[]}async deleteProject(e){let n=await this.send(`${this.baseUrl}/v1/account/projects?projectId=${encodeURIComponent(e)}`,{method:"DELETE",headers:{Authorization:`Bearer ${this.token}`}});if(Re(n,"/v1/account/projects","broods project"),n.status===404)return null;return await Y(n,"Delete project failed"),(await n.json()).deleted??null}async createOnboardingOrg(e){let n=await this.send(`${this.baseUrl}/v1/account/onboarding`,{method:"POST",headers:{Authorization:`Bearer ${this.token}`,"Content-Type":"application/json"},body:JSON.stringify({createOrgName:e})});return await Y(n,"Create CLI org failed"),await n.json()}async request(e,n,t,o,r){let s=`${this.baseUrl}/v1/account/projects/${encodeURIComponent(e)}/stages/${encodeURIComponent(n)}${t}`;return await this.send(s,{...o,headers:{Authorization:`Bearer ${this.token}`,...o.headers}},r)}async send(e,n,t){return await en(e,n,{fetch:this.fetchImpl,timeoutMs:t})}}async function en(e,n,t={}){let o=t.fetch??fetch,r=t.timeoutMs===void 0?ts:t.timeoutMs;try{return await o(e,r===null?n:{...n,signal:AbortSignal.timeout(r)})}catch(s){throw Error(`Cannot reach ${new URL(e).origin}: ${ss(s,r)}`,{cause:s})}}function En(e,n){let t=new Map((n?.resources??[]).map((d)=>[`${d.kind}:${d.name}`,d])),o=new Map(e.resources.map((d)=>[`${d.kind}:${d.name}`,d])),r=[],s=[],i=[];for(let[d,l]of o){let u=t.get(d);if(!u)s.push({key:d,resource:l});else if(Xe(yn(u))!==Xe(yn(l)))r.push({operation:"update",kind:l.kind,name:l.name})}for(let[d,l]of t)if(!o.has(d))i.push({key:d,resource:l});let a=new Set,c=new Set;for(let d of s){let l=i.find((u)=>!a.has(u.key)&&os(d.resource.kind)&&d.resource.kind===u.resource.kind&&Xe(Ut(d.resource))===Xe(Ut(u.resource)));if(!l)continue;c.add(d.key),a.add(l.key),r.push({operation:"rename",kind:d.resource.kind,name:d.resource.name,previousName:l.resource.name})}for(let{key:d,resource:l}of s)if(!c.has(d))r.push({operation:"create",kind:l.kind,name:l.name});for(let{key:d,resource:l}of i)if(!a.has(d))r.push({operation:"delete",kind:l.kind,name:l.name});return r.sort((d,l)=>Nt(d).localeCompare(Nt(l)))}function Nt(e){return`${{create:0,rename:1,update:2,delete:3}[e.operation]}:${e.kind}:${e.previousName??""}:${e.name}`}function os(e){return e==="agent"||e==="workspace"||e==="sandbox"||e==="policy"}function bn(e){if(Array.isArray(e))return e.map(bn);if(e&&typeof e==="object"){let n=e;if(n.__beeblastEnv===!0&&typeof n.name==="string")return`\${${n.name}}`;return Object.fromEntries(Object.entries(n).map(([t,o])=>[t,bn(o)]))}return e}function Ut(e){let n=yn(e),{name:t,...o}=n;return o}function yn(e){let n=bn(e);if(!ns.has(e.kind))return n;return{...n,config:Sn(n.config)}}function vn(e){if(Array.isArray(e))return e.map(vn);if(e&&typeof e==="object")return Object.fromEntries(Object.entries(e).sort(([n],[t])=>n.localeCompare(t)).map(([n,t])=>[n,vn(t)]));return e}function Xe(e){return JSON.stringify(vn(e))}function Sn(e){if(Array.isArray(e))return e.map(Sn);if(e&&typeof e==="object")return Object.fromEntries(Object.entries(e).flatMap(([n,t])=>{if(es.has(n))return[];return[[n,Sn(t)]]}));return e}async function Y(e,n){if(e.ok)return;let t=await e.text(),{message:o=t,code:r}=rs(t);if(r==="manifest_conflict")throw new Ze(o);let s=e.status===401?"\nRun `broods login` to sign in again.":"";throw Error(`${n}: ${e.status} ${o}${s}`)}function rs(e){let n;try{n=JSON.parse(e)}catch{return{}}let t=typeof n==="object"&&n!==null&&"error"in n?n.error:void 0;if(typeof t!=="object"||t===null)return{};return{..."message"in t&&typeof t.message==="string"?{message:t.message}:{},..."code"in t&&typeof t.code==="string"?{code:t.code}:{}}}function Re(e,n,t){if(e.status!==404)return;if((e.headers.get("Content-Type")??"").includes("application/json"))return;throw new Qe(`This broods server is older than your CLI and does not support \`${t}\` yet (no ${n} route).`)}function ss(e,n){if(!(e instanceof Error))return String(e);if(e.name==="TimeoutError"&&n!==null)return`no answer within ${n/1000} s`;let t=e.cause;if(!(t instanceof Error))return e.message;if(t.message)return t.message;return"code"in t&&typeof t.code==="string"?t.code:e.message}function Lt(e){if(e.kind!=="mcp")return null;let n=e.config?.bundle;if(typeof n!=="string")return null;return Buffer.byteLength(n)>mn?n:null}var nn=["chatgpt"];var we={chatgpt:{label:"ChatGPT plan",description:"Run agents on model.provider chatgpt with your ChatGPT plan",authorizeUrl:"https://auth.openai.com/api/accounts/authorize",tokenUrl:"https://auth.openai.com/api/accounts/oauth/token",revokeUrl:"https://auth.openai.com/api/accounts/oauth/revoke",jwksUrl:"https://auth.openai.com/.well-known/jwks.json",issuer:"https://auth.openai.com",scopes:["openid","profile","email","offline_access","resource.invoke","chatgpt.tokens.use.direct"],resource:"https://api.openai.com/v1",requiredScope:"chatgpt.tokens.use.direct",selfHostedOnly:"ChatGPT plan usage is only available on self-hosted Broods for now. Use an OpenAI API key with the `openai` provider instead.",managedOptIn:"CHATGPT_PLAN_ENABLED",modelsUrl:"https://api.openai.com/v1/models",usageUrl:"https://chatgpt.com/settings/usage"}};function kn(e){return nn.some((n)=>n===e)}import{createHash as Rs,randomBytes as Os,randomUUID as Jt}from"node:crypto";import{createServer as ps}from"node:http";import{createHash as fs,randomBytes as ms,randomUUID as hs}from"node:crypto";import{spawn as ws}from"node:child_process";import{createInterface as De}from"node:readline/promises";import{stdin as ce,stdout as ae}from"node:process";import{Writable as bs}from"node:stream";function Oe(e,n,t={}){let o=`${n?"*":" "} ${e}`;return n?W(o,"\x1B[1m\x1B[36m",ne(t)):o}function Mt(e,n={}){let t=ne(n),o=(i)=>W(i.padEnd(9),"\x1B[2m",t),r=!e.loggedIn?W("not logged in","\x1B[33m",t):e.org??W("unknown, run broods whoami","\x1B[2m",t),s=e.project??`none ${W(`(${e.projectGuess} from folder name)`,"\x1B[2m",t)}`;return[` ${o("org")}${r}`,` ${o("project")}${s}`,` ${o("stage")}${Kt(e.stage,t)}`,` ${o("server")}${e.server}`]}function is(e,n={}){let t=ne(n),o=Ht(e.stage),r=o==="Development",s=W("▌",r?"\x1B[32m":"\x1B[33m",t),i=t?`${r?"\x1B[42m\x1B[30m\x1B[1m":"\x1B[43m\x1B[30m\x1B[1m"} ${o} \x1B[0m`:`[${o}]`,a=t?W("dashboard","\x1B[4m",t):"dashboard",c=`${e.dashboardUrl}?project=${encodeURIComponent(e.project)}&stage=${encodeURIComponent(e.stage)}`,d=W(c,"\x1B[2m\x1B[4m",t);return[`${s} Syncing ${o}: ${W(e.project,"",t)}`,`${s} ${i} ${e.stage} (${a})`,`${s} ${W("└─","\x1B[2m",t)} ${d}`].join(`
85
+ `)}function as(e,n={}){let t=ne(n);return e.map((o)=>{let r=gs(o.operation,t);if(o.operation==="rename"&&o.previousName)return` ${r} ${o.kind}:${o.previousName} -> ${o.name}`;return` ${r} ${o.kind}:${o.name}`})}function cs(e,n={}){let t=ne(n),o=W("▌","\x1B[32m",t),r=W("↑","\x1B[32m",t);return`${o} ${r} Synced ${e.length} env var(s) from .env.local: ${e.join(", ")}`}function ls(e,n={}){return`${W("✖","\x1B[31m",ne(n))} ${e}`}function Bt(e,n={}){let t=ne(n),o=Math.max(...e.map(([r])=>r.length))+2;return e.map(([r,s])=>` ${r.padEnd(o)}${W(s,"\x1B[2m",t)}`)}function ds(e,n={}){let t=(n.now??new Date).toTimeString().slice(0,8);return`${W("✔","\x1B[32m",ne(n))} ${t} Resources ready! (${On(e)})`}function us(e,n={}){return`${W("✔","\x1B[32m",ne(n))} ${e}`}function $n(e,n,t={}){let o=ne(t),r=t.note?` ${W(`(${t.note})`,"\x1B[2m",o)}`:"";return` ${W("now","\x1B[2m",o)} ${e} → ${Kt(n,o)}${r}`}function je(e,n={}){return W(`! ${e}`,"\x1B[33m",ne(n))}function Gt(e){console.error(is(e))}function tn(e){for(let n of as(e))console.log(n)}function Rn(e){console.error(cs(e))}function Wt(e){console.error(ls(e,{stream:"stderr"}))}function Ft(e){console.error(ds(e))}function X(e){console.log(us(e,{stream:"stdout"}))}function N(e){console.log(je(e,{stream:"stdout"}))}function gs(e,n){if(e==="create")return`[${W("+","\x1B[32m",n)}]`;if(e==="rename")return`[${W("~","\x1B[33m",n)}]`;if(e==="update")return`[${W("*","\x1B[36m",n)}]`;return`[${W("-","\x1B[31m",n)}]`}function On(e){if(e>=1000)return`${(e/1000).toFixed(2)}s`;return`${Math.max(e,0).toFixed(1)}ms`}function W(e,n,t){return t?`${n}${e}\x1B[0m`:e}function Kt(e,n){let t=Ht(e)==="Development";return W(e,t?"\x1B[32m":"\x1B[33m",n)}function ne(e){if(e.color!==void 0)return e.color;if(Object.hasOwn(process.env,"NO_COLOR"))return!1;if(process.env.FORCE_COLOR&&process.env.FORCE_COLOR!=="0")return!0;return(e.stream==="stdout"?process.stdout:process.stderr).isTTY&&process.env.TERM!=="dumb"}function Ht(e){let n=e.trim().toLowerCase();if(n==="development")return"Development";if(n==="production")return"Production";return e.trim()}var ys=180000,vs=`Timed out waiting for browser login to complete.
86
86
  Check the browser tab and the dashboard logs for an error. If the browser shows
87
87
  404 on /cli-auth/start, deploy the dashboard build that includes CLI auth or pass
88
88
  --dashboard-url for the environment you deployed. Other common causes are missing
89
- cliAuth Convex functions or no active API account (Organization settings -> API access).`,Vt=new Set(["--base-url","--cwd","--dashboard-url","--stage","--from","--level","--limit","--mcp","--project","--region","--sandbox","-n"]);function Ss(e,n=process.platform){if(n==="darwin")return{command:"open",args:[e]};if(n==="win32")return{command:"rundll32",args:["url.dll,FileProtocolHandler",e]};return{command:"xdg-open",args:[e]}}function H(e,n){let t=Vt.has(n)?`${n}=`:null;return e.some((o)=>o===n||t!==null&&o.startsWith(t))}function be(e){return typeof e==="object"&&e!==null&&!Array.isArray(e)}function R(e,n){for(let t=0;t<e.length;t+=1){let o=e[t];if(o===n)return e[t+1];if(o?.startsWith(`${n}=`))return o.slice(n.length+1)||void 0}return}function oe(e){let n=[];for(let t=0;t<e.length;t+=1){let o=e[t];if(o===void 0)continue;if(Vt.has(o)){t+=1;continue}if(o.startsWith("-"))continue;n.push(o)}return n}async function Cn(e){let n=hs(),t=ms(32).toString("base64url"),o=fs("sha256").update(t).digest("base64url"),{code:r,close:s}=await xn(n,{port:ks(),fixedPort:Boolean(process.env.BROODS_LOGIN_PORT),path:"/callback",read:$s,done:"broods CLI login complete. You can close this tab."});try{let i=r.callbackUrl,a=`${f(e)}/cli-auth/start?`+new URLSearchParams({callback:i,state:n,code_challenge:o});await Es(a),console.log(`Opening ${a}`),An(a);let c=await Pn(r.promise),d=await en(`${c.baseUrl}/v1/account/auth/exchange`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({code:c.code,code_verifier:t})});if(!d.ok)throw Error(`Login exchange failed: ${d.status} ${await d.text()}`);let l=await d.json(),u={baseUrl:c.baseUrl,dashboardUrl:f(e),token:l.token,createdAt:new Date().toISOString(),...l.user?{user:l.user}:{},...l.org?{org:l.org}:{},...l.account?{account:l.account}:{}};return await U(u),u}finally{s()}}async function re(e){m();let n=k(e);if(!n){let t=process.env.BROODS_DASHBOARD_URL,o=e??process.env.BROODS_BASE_URL??(t?A(t):void 0);throw Error(o?`Not logged in to ${f(o)}. Run \`broods login\`.`:"Run `broods login` first, or set BROODS_TOKEN and BROODS_BASE_URL.")}return n}async function on(e){if(!ce.isTTY)return!1;let n=De({input:ce,output:ae});try{let t=(await n.question(`${e} [y/N] `)).trim().toLowerCase();return t==="y"||t==="yes"}finally{n.close()}}async function Yt(e){ae.write(`${e}: `);let n=new bs({write:(o,r,s)=>s()}),t=De({input:ce,output:n,terminal:ce.isTTY===!0});try{let o=await t.question("");if(!o)throw Error(`${e} is required`);return o}finally{t.close(),ae.write(`
90
- `)}}async function Ne(e,n,t,o){if(n.length===0)throw Error(`${e}: no options available`);if(n.length===1)return n[0];let r=o!==void 0&&o>=0&&o<n.length?o:void 0;console.log(e),n.forEach((a,c)=>{console.log(Oe(`${c+1}. ${t(a)}`,c===r))});let s=r===void 0?`Choose 1-${n.length}: `:`Choose 1-${n.length} [${r+1}]: `,i=De({input:ce,output:ae});try{for(;;){let a=(await i.question(s)).trim();if(a===""&&r!==void 0)return n[r];let c=Number(a);if(Number.isInteger(c)&&c>=1&&c<=n.length)return n[c-1];console.log(`Enter a number from 1 to ${n.length}.`)}}finally{i.close()}}async function zt(e,n,t,o){console.log(e),n.forEach((i,a)=>{console.log(` ${a+1}. ${t(i)}`)});let r=n.length>0?`Choose 1-${n.length}, or `:"",s=De({input:ce,output:ae});try{let i=(await s.question(`${r}${o.hint} [${o.defaultValue}]: `)).trim();if(i==="")return o.defaultValue;let a=Number(i);if(Number.isInteger(a)&&a>=1&&a<=n.length)return n[a-1];return i}finally{s.close()}}async function ye(e,n){if(!ce.isTTY)return n??"";let t=De({input:ce,output:ae});try{let o=t.question(`${e}: `);if(n){if(ce.isTTY&&ae.isTTY)ae.write("\x1B[90m");if(t.write(n),ce.isTTY&&ae.isTTY)ae.write("\x1B[0m")}return(await o).trim()||n||""}finally{t.close()}}function An(e){let{command:n,args:t}=Ss(e),o=ws(n,t,{stdio:"ignore",detached:!0});o.on("error",(r)=>{console.error(je(`Could not open a browser (${r.message}). Open the URL above to continue.`,{stream:"stderr"}))}),o.unref()}function xn(e,n){return new Promise((t,o)=>{let r=ps((c,d)=>{let l=new URL(c.url??"/","http://127.0.0.1");if(l.pathname!==n.path||l.searchParams.get("state")!==e){d.writeHead(400).end("Invalid callback.");return}try{let u=n.read(l.searchParams);d.writeHead(200,{"Content-Type":"text/plain"}).end(n.done),s(u)}catch(u){d.writeHead(400,{"Content-Type":"text/plain"}).end(u instanceof Error?u.message:String(u)),i(u)}}),s,i,a=new Promise((c,d)=>{s=c,i=d});r.on("error",(c)=>{if(!n.fixedPort&&n.port!==0&&c.code==="EADDRINUSE"){r.listen(0,"127.0.0.1");return}o(c)}),r.listen(n.port,"127.0.0.1",()=>{let c=r.address();if(!c||typeof c==="string"){o(Error("Failed to allocate callback port"));return}t({code:{callbackUrl:`http://127.0.0.1:${c.port}${n.path}`,promise:a},close:()=>r.close()})})})}async function Pn(e,n=vs){let t,o=new Promise((r,s)=>{t=setTimeout(()=>s(Error(n)),ys)});try{return await Promise.race([e,o])}finally{if(t)clearTimeout(t)}}async function Es(e){let n=await en(e,{method:"GET",redirect:"manual"});if(n.status===404){let t=new URL(e);throw Error(`${t.origin} has no broods login page. Check that --dashboard-url points at your broods dashboard.`)}if(n.status>=500)throw Error(`The broods login page failed: ${n.status} ${await n.text()}`)}function ks(){let e=process.env.BROODS_LOGIN_PORT;if(e){let n=Number(e);if(Number.isInteger(n)&&n>0&&n<65536)return n;throw Error("BROODS_LOGIN_PORT must be a TCP port number")}return 18987}function $s(e){let n=e.get("error");if(n)throw Error(`Login failed: ${n}`);let t=e.get("code");if(!t)throw Error("Login callback carried no code.");let o=e.get("base_url");if(!o)throw Error("Login callback did not advertise the API base URL (base_url). Deploy a dashboard build that includes the Convex-direct CLI auth flow.");return{code:t,baseUrl:f(o)}}var Cs=1455,As="/auth/callback";async function qt(e,n,t=An){let o=we[n].label,r=Jt(),s=Jt(),i=Os(32).toString("base64url"),{code:a,close:c}=await xn(r,{port:Cs,fixedPort:!1,path:As,read:xs,done:`${o} is connected to broods. You can close this tab.`});try{let d=a.callbackUrl,l=await e.startConnection(n,{redirectUri:d,codeChallenge:Rs("sha256").update(i).digest("base64url"),state:r,nonce:s});t(l.authorizeUrl),console.log(`Opening ${l.authorizeUrl}`);let u=await Pn(a.promise,`Timed out waiting for the ${o} sign-in to finish in the browser.`);return await e.connect(n,{code:u.code,codeVerifier:i,redirectUri:d,nonce:s,clientId:u.clientId??l.clientId,hostId:l.hostId})}finally{c()}}function xs(e){let n=e.get("error");if(n)throw Error(`Sign-in failed: ${e.get("error_description")??n}`);let t=e.get("code");if(!t)throw Error("Sign-in callback carried no code.");return{code:t,clientId:e.get("client_id")??void 0}}import{existsSync as Zt}from"node:fs";import{mkdir as Ts,readFile as _s,writeFile as Is}from"node:fs/promises";import{dirname as Qt,join as In,resolve as js,sep as fe}from"node:path";import{fileURLToPath as Ds}from"node:url";var Ue={name:"broods",version:"0.53.0",description:"CLI + TypeScript SDK for the broods agent platform.",keywords:["agents","ai","broods","cli","sdk"],homepage:"https://github.com/beeblastco/broods#readme",bugs:{url:"https://github.com/beeblastco/broods/issues"},license:"MIT",repository:{type:"git",url:"git+https://github.com/beeblastco/broods.git",directory:"packages/broods"},bin:{broods:"dist/cli/index.js"},files:["dist","README.md","LICENSE.md"],type:"module",main:"./dist/index.js",types:"./dist/index.d.ts",typesVersions:{"*":{account:["./dist/account.d.ts"]}},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./account":{types:"./dist/account.d.ts",import:"./dist/account.js"}},scripts:{build:"bun scripts/build.ts && rollup -c rollup.dts.config.mjs && rm -rf .dts-temp",check:"tsc --noEmit && tsc --noEmit -p tsconfig.scripts.json","pack:check":"bun run build && publint && attw --pack .",prepublishOnly:"bun run build",test:"bun test","test:desktop":"BROODS_TEST_DESKTOP=1 bun test tests/cli-desktop.test.ts"},dependencies:{"@modelcontextprotocol/client":"^2.3.1",esbuild:"^0.28.2"},devDependencies:{"@ai-sdk/tui":"1.0.154","@arethetypeswrong/cli":"^0.18.5","@chat-adapter/discord":"^4.43.0","@chat-adapter/github":"^4.43.0","@chat-adapter/slack":"^4.43.0","@chat-adapter/telegram":"^4.43.0","@modelcontextprotocol/server":"2.3.1","@types/bun":"^1.4.3","@typescript/typescript6":"6.0.2",ai:"^7.0.153",publint:"^0.3.25",rollup:"^4.65.0","rollup-plugin-dts":"^6.5.1",typescript:"^7.0.2",zod:"^4.6.7"},peerDependencies:{ai:"^7.0.153"},engines:{node:">=22.15"}};var Tn=In(Qt(z),"update-check.json"),Ns=86400000,Us="https://registry.npmjs.org/broods/latest",Ls=2000,Ms=[["bun.lock","bun"],["bun.lockb","bun"],["pnpm-lock.yaml","pnpm"],["yarn.lock","yarn"]];function jn(e,n){let t=_n(e),o=_n(n);for(let r=0;r<3;r+=1){let s=t[r]??0,i=o[r]??0;if(s!==i)return s>i}return!Xt(e)&&Xt(n)}async function Dn(e={}){let n=await Gs(),t=e.maxAgeMs??Ns;if(n&&Date.now()-n.checkedAt<t)return n.latest;let o=await Bs();if(o===null)return n?.latest??null;return await Fs({checkedAt:Date.now(),latest:o}),o}function Le(e){return _n(e)[0]??0}function eo(e=js(process.cwd()),n=Ds(import.meta.url),t=Ue.version){let o=`${fe}node_modules${fe}`,r=n.indexOf(o),s=r===-1?null:n.slice(0,r),i=s===null?n.startsWith(`${e}${fe}`):e===s||e.startsWith(`${s}${fe}`),a=n.includes(`${fe}.bun${fe}install${fe}global${fe}`),c=s??e,d=i?Ws(c):a?"bun":"npm",l=d==="npm"?"install":"add",u=d==="pnpm"&&Zt(In(c,"pnpm-workspace.yaml"))?["-w"]:[],w=`broods@${Le(t)}`;return{manager:d,global:!i,command:d,cwd:i?c:e,args:i?[l,...u,w]:[l,"-g",w]}}async function Bs(){try{let e=await fetch(Us,{signal:AbortSignal.timeout(Ls),headers:{accept:"application/json"}});if(!e.ok)return null;let n=await e.json();return typeof n.version==="string"?n.version:null}catch{return null}}function Xt(e){return e.includes("-")}async function Gs(){try{let e=JSON.parse(await _s(Tn,"utf8"));if(typeof e.latest!=="string")return null;if(typeof e.checkedAt!=="number")return null;return{checkedAt:e.checkedAt,latest:e.latest}}catch{return null}}function Ws(e){return Ms.find(([t])=>Zt(In(e,t)))?.[1]??"npm"}function _n(e){let[n]=e.trim().replace(/^v/,"").split("-");return(n??"").split(".").slice(0,3).map((t)=>Number.parseInt(t,10)||0)}async function Fs(e){try{await Ts(Qt(Tn),{recursive:!0}),await Is(Tn,`${JSON.stringify(e)}
89
+ cliAuth Convex functions or no active API account (Organization settings -> API access).`,Vt=new Set(["--base-url","--cwd","--dashboard-url","--stage","--from","--level","--limit","--mcp","--project","--region","--sandbox","-n"]);function Ss(e,n=process.platform){if(n==="darwin")return{command:"open",args:[e]};if(n==="win32")return{command:"rundll32",args:["url.dll,FileProtocolHandler",e]};return{command:"xdg-open",args:[e]}}function V(e,n){let t=Vt.has(n)?`${n}=`:null;return e.some((o)=>o===n||t!==null&&o.startsWith(t))}function be(e){return typeof e==="object"&&e!==null&&!Array.isArray(e)}function R(e,n){for(let t=0;t<e.length;t+=1){let o=e[t];if(o===n)return e[t+1];if(o?.startsWith(`${n}=`))return o.slice(n.length+1)||void 0}return}function oe(e){let n=[];for(let t=0;t<e.length;t+=1){let o=e[t];if(o===void 0)continue;if(Vt.has(o)){t+=1;continue}if(o.startsWith("-"))continue;n.push(o)}return n}async function Cn(e){let n=hs(),t=ms(32).toString("base64url"),o=fs("sha256").update(t).digest("base64url"),{code:r,close:s}=await xn(n,{port:ks(),fixedPort:Boolean(process.env.BROODS_LOGIN_PORT),path:"/callback",read:$s,done:"broods CLI login complete. You can close this tab."});try{let i=r.callbackUrl,a=`${f(e)}/cli-auth/start?`+new URLSearchParams({callback:i,state:n,code_challenge:o});await Es(a),console.log(`Opening ${a}`),An(a);let c=await Pn(r.promise),d=await en(`${c.baseUrl}/v1/account/auth/exchange`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({code:c.code,code_verifier:t})});if(!d.ok)throw Error(`Login exchange failed: ${d.status} ${await d.text()}`);let l=await d.json(),u={baseUrl:c.baseUrl,dashboardUrl:f(e),token:l.token,createdAt:new Date().toISOString(),...l.user?{user:l.user}:{},...l.org?{org:l.org}:{},...l.account?{account:l.account}:{}};return await U(u),u}finally{s()}}async function re(e){m();let n=k(e);if(!n){let t=process.env.BROODS_DASHBOARD_URL,o=e??process.env.BROODS_BASE_URL??(t?A(t):void 0);throw Error(o?`Not logged in to ${f(o)}. Run \`broods login\`.`:"Run `broods login` first, or set BROODS_TOKEN and BROODS_BASE_URL.")}return n}async function on(e){if(!ce.isTTY)return!1;let n=De({input:ce,output:ae});try{let t=(await n.question(`${e} [y/N] `)).trim().toLowerCase();return t==="y"||t==="yes"}finally{n.close()}}async function Yt(e){ae.write(`${e}: `);let n=new bs({write:(o,r,s)=>s()}),t=De({input:ce,output:n,terminal:ce.isTTY===!0});try{let o=await t.question("");if(!o)throw Error(`${e} is required`);return o}finally{t.close(),ae.write(`
90
+ `)}}async function Ne(e,n,t,o){if(n.length===0)throw Error(`${e}: no options available`);if(n.length===1)return n[0];let r=o!==void 0&&o>=0&&o<n.length?o:void 0;console.log(e),n.forEach((a,c)=>{console.log(Oe(`${c+1}. ${t(a)}`,c===r))});let s=r===void 0?`Choose 1-${n.length}: `:`Choose 1-${n.length} [${r+1}]: `,i=De({input:ce,output:ae});try{for(;;){let a=(await i.question(s)).trim();if(a===""&&r!==void 0)return n[r];let c=Number(a);if(Number.isInteger(c)&&c>=1&&c<=n.length)return n[c-1];console.log(`Enter a number from 1 to ${n.length}.`)}}finally{i.close()}}async function zt(e,n,t,o){console.log(e),n.forEach((i,a)=>{console.log(` ${a+1}. ${t(i)}`)});let r=n.length>0?`Choose 1-${n.length}, or `:"",s=De({input:ce,output:ae});try{let i=(await s.question(`${r}${o.hint} [${o.defaultValue}]: `)).trim();if(i==="")return o.defaultValue;let a=Number(i);if(Number.isInteger(a)&&a>=1&&a<=n.length)return n[a-1];return i}finally{s.close()}}async function ye(e,n){if(!ce.isTTY)return n??"";let t=De({input:ce,output:ae});try{let o=t.question(`${e}: `);if(n){if(ce.isTTY&&ae.isTTY)ae.write("\x1B[90m");if(t.write(n),ce.isTTY&&ae.isTTY)ae.write("\x1B[0m")}return(await o).trim()||n||""}finally{t.close()}}function An(e){let{command:n,args:t}=Ss(e),o=ws(n,t,{stdio:"ignore",detached:!0});o.on("error",(r)=>{console.error(je(`Could not open a browser (${r.message}). Open the URL above to continue.`,{stream:"stderr"}))}),o.unref()}function xn(e,n){return new Promise((t,o)=>{let r=ps((c,d)=>{let l=new URL(c.url??"/","http://127.0.0.1");if(l.pathname!==n.path||l.searchParams.get("state")!==e){d.writeHead(400).end("Invalid callback.");return}try{let u=n.read(l.searchParams);d.writeHead(200,{"Content-Type":"text/plain"}).end(n.done),s(u)}catch(u){d.writeHead(400,{"Content-Type":"text/plain"}).end(u instanceof Error?u.message:String(u)),i(u)}}),s,i,a=new Promise((c,d)=>{s=c,i=d});r.on("error",(c)=>{if(!n.fixedPort&&n.port!==0&&c.code==="EADDRINUSE"){r.listen(0,"127.0.0.1");return}o(c)}),r.listen(n.port,"127.0.0.1",()=>{let c=r.address();if(!c||typeof c==="string"){o(Error("Failed to allocate callback port"));return}t({code:{callbackUrl:`http://127.0.0.1:${c.port}${n.path}`,promise:a},close:()=>r.close()})})})}async function Pn(e,n=vs){let t,o=new Promise((r,s)=>{t=setTimeout(()=>s(Error(n)),ys)});try{return await Promise.race([e,o])}finally{if(t)clearTimeout(t)}}async function Es(e){let n=await en(e,{method:"GET",redirect:"manual"});if(n.status===404){let t=new URL(e);throw Error(`${t.origin} has no broods login page. Check that --dashboard-url points at your broods dashboard.`)}if(n.status>=500)throw Error(`The broods login page failed: ${n.status} ${await n.text()}`)}function ks(){let e=process.env.BROODS_LOGIN_PORT;if(e){let n=Number(e);if(Number.isInteger(n)&&n>0&&n<65536)return n;throw Error("BROODS_LOGIN_PORT must be a TCP port number")}return 18987}function $s(e){let n=e.get("error");if(n)throw Error(`Login failed: ${n}`);let t=e.get("code");if(!t)throw Error("Login callback carried no code.");let o=e.get("base_url");if(!o)throw Error("Login callback did not advertise the API base URL (base_url). Deploy a dashboard build that includes the Convex-direct CLI auth flow.");return{code:t,baseUrl:f(o)}}var Cs=1455,As="/auth/callback";async function qt(e,n,t=An){let o=we[n].label,r=Jt(),s=Jt(),i=Os(32).toString("base64url"),{code:a,close:c}=await xn(r,{port:Cs,fixedPort:!1,path:As,read:xs,done:`${o} is connected to broods. You can close this tab.`});try{let d=a.callbackUrl,l=await e.startConnection(n,{redirectUri:d,codeChallenge:Rs("sha256").update(i).digest("base64url"),state:r,nonce:s});t(l.authorizeUrl),console.log(`Opening ${l.authorizeUrl}`);let u=await Pn(a.promise,`Timed out waiting for the ${o} sign-in to finish in the browser.`);return await e.connect(n,{code:u.code,codeVerifier:i,redirectUri:d,nonce:s,clientId:u.clientId??l.clientId,hostId:l.hostId})}finally{c()}}function xs(e){let n=e.get("error");if(n)throw Error(`Sign-in failed: ${e.get("error_description")??n}`);let t=e.get("code");if(!t)throw Error("Sign-in callback carried no code.");return{code:t,clientId:e.get("client_id")??void 0}}import{existsSync as Zt}from"node:fs";import{mkdir as Ts,readFile as _s,writeFile as Is}from"node:fs/promises";import{dirname as Qt,join as In,resolve as js,sep as fe}from"node:path";import{fileURLToPath as Ds}from"node:url";var Ue={name:"broods",version:"0.53.1",description:"CLI + TypeScript SDK for the broods agent platform.",keywords:["agents","ai","broods","cli","sdk"],homepage:"https://github.com/beeblastco/broods#readme",bugs:{url:"https://github.com/beeblastco/broods/issues"},license:"MIT",repository:{type:"git",url:"git+https://github.com/beeblastco/broods.git",directory:"packages/broods"},bin:{broods:"dist/cli/index.js"},files:["dist","README.md","LICENSE.md"],type:"module",main:"./dist/index.js",types:"./dist/index.d.ts",typesVersions:{"*":{account:["./dist/account.d.ts"]}},exports:{".":{types:"./dist/index.d.ts",import:"./dist/index.js"},"./account":{types:"./dist/account.d.ts",import:"./dist/account.js"}},scripts:{build:"bun scripts/build.ts && rollup -c rollup.dts.config.mjs && rm -rf .dts-temp",check:"tsc --noEmit && tsc --noEmit -p tsconfig.scripts.json","pack:check":"bun run build && publint && attw --pack .",prepublishOnly:"bun run build",test:"bun test","test:desktop":"BROODS_TEST_DESKTOP=1 bun test tests/cli-desktop.test.ts"},dependencies:{"@modelcontextprotocol/client":"^2.3.1",esbuild:"^0.28.2"},devDependencies:{"@ai-sdk/tui":"1.0.155","@arethetypeswrong/cli":"^0.18.5","@chat-adapter/discord":"^4.43.0","@chat-adapter/github":"^4.43.0","@chat-adapter/slack":"^4.43.0","@chat-adapter/telegram":"^4.43.0","@modelcontextprotocol/server":"2.4.0","@types/bun":"^1.4.4","@typescript/typescript6":"6.0.2",ai:"^7.0.154",publint:"^0.3.25",rollup:"^4.65.0","rollup-plugin-dts":"^6.5.1",typescript:"^7.0.2",zod:"^4.6.7"},peerDependencies:{ai:"^7.0.154"},engines:{node:">=22.15"}};var Tn=In(Qt(z),"update-check.json"),Ns=86400000,Us="https://registry.npmjs.org/broods/latest",Ls=2000,Ms=[["bun.lock","bun"],["bun.lockb","bun"],["pnpm-lock.yaml","pnpm"],["yarn.lock","yarn"]];function jn(e,n){let t=_n(e),o=_n(n);for(let r=0;r<3;r+=1){let s=t[r]??0,i=o[r]??0;if(s!==i)return s>i}return!Xt(e)&&Xt(n)}async function Dn(e={}){let n=await Gs(),t=e.maxAgeMs??Ns;if(n&&Date.now()-n.checkedAt<t)return n.latest;let o=await Bs();if(o===null)return n?.latest??null;return await Fs({checkedAt:Date.now(),latest:o}),o}function Le(e){return _n(e)[0]??0}function eo(e=js(process.cwd()),n=Ds(import.meta.url),t=Ue.version){let o=`${fe}node_modules${fe}`,r=n.indexOf(o),s=r===-1?null:n.slice(0,r),i=s===null?n.startsWith(`${e}${fe}`):e===s||e.startsWith(`${s}${fe}`),a=n.includes(`${fe}.bun${fe}install${fe}global${fe}`),c=s??e,d=i?Ws(c):a?"bun":"npm",l=d==="npm"?"install":"add",u=d==="pnpm"&&Zt(In(c,"pnpm-workspace.yaml"))?["-w"]:[],w=`broods@${Le(t)}`;return{manager:d,global:!i,command:d,cwd:i?c:e,args:i?[l,...u,w]:[l,"-g",w]}}async function Bs(){try{let e=await fetch(Us,{signal:AbortSignal.timeout(Ls),headers:{accept:"application/json"}});if(!e.ok)return null;let n=await e.json();return typeof n.version==="string"?n.version:null}catch{return null}}function Xt(e){return e.includes("-")}async function Gs(){try{let e=JSON.parse(await _s(Tn,"utf8"));if(typeof e.latest!=="string")return null;if(typeof e.checkedAt!=="number")return null;return{checkedAt:e.checkedAt,latest:e.latest}}catch{return null}}function Ws(e){return Ms.find(([t])=>Zt(In(e,t)))?.[1]??"npm"}function _n(e){let[n]=e.trim().replace(/^v/,"").split("-");return(n??"").split(".").slice(0,3).map((t)=>Number.parseInt(t,10)||0)}async function Fs(e){try{await Ts(Qt(Tn),{recursive:!0}),await Is(Tn,`${JSON.stringify(e)}
91
91
  `,"utf8")}catch{}}var no=`---
92
92
  name: broods
93
93
  description: Work on a broods account alongside a developer from Claude Code or a development agent. Covers onboarding and sign-in, creating a broods project, defining and deploying agents and their resources with the CLI, and integrating a deployed agent into existing code with the SDK. Use when asked to set up broods, create or work on a broods project, create or manage agents or any account resource, or call a deployed agent from application code.
@@ -175,7 +175,7 @@ elif [ "$STATUS" -ne 0 ]; then
175
175
  # Not the expected signed-out state: surface the real failure.
176
176
  exit "$STATUS"
177
177
  fi
178
- `;var de=Ue.version,rn=Me(".agents","skills","broods"),le="https://dashboard.broods.app",ti=3,Ce="eu-west-1",oi=[{region:"eu-west-1",label:"eu-west-1 (Ireland)"},{region:"us-east-1",label:"us-east-1 (US East)"},{region:"ap-southeast-1",label:"ap-southeast-1 (Singapore)"}],Y=`Global options:
178
+ `;var de=Ue.version,rn=Me(".agents","skills","broods"),le="https://dashboard.broods.app",ti=3,Ce="eu-west-1",oi=[{region:"eu-west-1",label:"eu-west-1 (Ireland)"},{region:"us-east-1",label:"us-east-1 (US East)"},{region:"ap-southeast-1",label:"ap-southeast-1 (Singapore)"}],J=`Global options:
179
179
  --project <name> Project name override (default: package name or folder)
180
180
  --stage <name> Target stage override (BROODS_STAGE otherwise)
181
181
  --base-url <url> broods API base URL for sync/env calls (default: discovered at login)
@@ -191,7 +191,7 @@ Subcommands:
191
191
  list List the agents in the current project/stage scope
192
192
  get <name> Show an agent's model, sandboxes, workspaces, tools and channels
193
193
 
194
- ${Y}`,connect:`Usage: broods connect [type]
194
+ ${J}`,connect:`Usage: broods connect [type]
195
195
 
196
196
  Signs an external account in through the browser and keeps it on your
197
197
  deployment, so agents act through it. Without a type, lists the account's
@@ -202,7 +202,7 @@ Types:
202
202
  ${nn.map((e)=>` ${e.padEnd(11)} ${we[e].description}`).join(`
203
203
  `)}
204
204
 
205
- ${Y}`,deploy:`Usage: broods deploy [options]
205
+ ${J}`,deploy:`Usage: broods deploy [options]
206
206
 
207
207
  Syncs Production once and writes BROODS_API_KEY to .env.local, plus
208
208
  BROODS_USER_TOKEN_SECRET when the stage has no signing secret yet. Ignores
@@ -214,7 +214,7 @@ Options:
214
214
  --region <region> Production's region, pinned by its first deploy
215
215
  (default: ${Ce})
216
216
 
217
- ${Y}`,dev:`Usage: broods dev [--once] [options]
217
+ ${J}`,dev:`Usage: broods dev [--once] [options]
218
218
 
219
219
  Watches broods/, syncs the current stage (BROODS_STAGE, default Development)
220
220
  and live-tails agent logs. Confirms before deleting, and auto-pushes
@@ -226,16 +226,16 @@ Options:
226
226
  --all Tail INFO and up (DEBUG is dashboard-only)
227
227
  --region <region> Service region for a new project (default: ${Ce})
228
228
 
229
- ${Y}`,diff:`Usage: broods diff [options]
229
+ ${J}`,diff:`Usage: broods diff [options]
230
230
 
231
231
  Shows local desired state against the remote state of the current stage, and
232
232
  warns when the stage's value for an env("NAME") ref no longer matches .env.local.
233
233
 
234
- ${Y}`,disconnect:`Usage: broods disconnect <type>
234
+ ${J}`,disconnect:`Usage: broods disconnect <type>
235
235
 
236
236
  Forgets the account's connection of that type and revokes it at the provider.
237
237
 
238
- ${Y}`,env:`Usage: broods env <set|get|list|rm|sync> [name]
238
+ ${J}`,env:`Usage: broods env <set|get|list|rm|sync> [name]
239
239
 
240
240
  Subcommands:
241
241
  set <name> Store an encrypted environment variable (value read from the prompt or stdin)
@@ -251,7 +251,7 @@ Subcommands:
251
251
  those the stage does not already hold the local value for. \`dev\` runs the same
252
252
  push on every sync; \`deploy\` never does, so Production stays explicit.
253
253
 
254
- ${Y}`,init:`Usage: broods init [options]
254
+ ${J}`,init:`Usage: broods init [options]
255
255
 
256
256
  Creates the broods/ project shell and .env.local defaults.
257
257
 
@@ -259,7 +259,7 @@ Options:
259
259
  --region <region> Broods service region preference (default: ${Ce})
260
260
  --force Overwrite existing starter files
261
261
 
262
- ${Y}`,login:`Usage: broods login [options]
262
+ ${J}`,login:`Usage: broods login [options]
263
263
 
264
264
  Authenticates through the dashboard and stores the token in
265
265
  ~/.broods/config.json.
@@ -267,7 +267,7 @@ Authenticates through the dashboard and stores the token in
267
267
  Options:
268
268
  --region <region> Broods service region preference (default: ${Ce})
269
269
 
270
- ${Y}`,logs:`Usage: broods logs [options]
270
+ ${J}`,logs:`Usage: broods logs [options]
271
271
 
272
272
  Backfills recent logs then live-tails. Warnings and errors, 100 lines by default.
273
273
 
@@ -280,7 +280,7 @@ Options:
280
280
  is the last segment of the instance's log stream
281
281
  (dashboard Instances sheet).
282
282
 
283
- ${Y}`,machine:`Usage: broods machine <sandbox> [options]
283
+ ${J}`,machine:`Usage: broods machine <sandbox> [options]
284
284
 
285
285
  Connects this computer to a sandbox record whose provider is "machine". Agents
286
286
  on that sandbox run their bash tool here, as you, with your PATH and
@@ -304,7 +304,7 @@ Options:
304
304
  --force Take the record over from another daemon, even one on this computer
305
305
  --doctor [--request] Check the macOS permissions computer use needs; --request prompts for them
306
306
 
307
- ${Y}`,org:`Usage: broods org <list|use|create> [name]
307
+ ${J}`,org:`Usage: broods org <list|use|create> [name]
308
308
 
309
309
  Subcommands:
310
310
  list List the organizations this login can act on
@@ -313,13 +313,13 @@ Subcommands:
313
313
 
314
314
  Only orgs where you are owner or admin can be selected from the CLI.
315
315
 
316
- ${Y}`,run:`Usage: broods run <agent> [prompt]
316
+ ${J}`,run:`Usage: broods run <agent> [prompt]
317
317
 
318
318
  Chats with an agent in a terminal UI (reasoning, tool cards, y/n approvals).
319
319
  A prompt is sent as the first turn; redirected output streams plain text and
320
320
  therefore requires a prompt.
321
321
 
322
- ${Y}`,project:`Usage: broods project <list|delete> [name]
322
+ ${J}`,project:`Usage: broods project <list|delete> [name]
323
323
 
324
324
  Subcommands:
325
325
  list List the org's projects and what each one still holds
@@ -332,7 +332,7 @@ admin role. There is no undo.
332
332
  Options:
333
333
  --yes Skip the confirmation prompt
334
334
 
335
- ${Y}`,stage:`Usage: broods stage <list|use|create> [name]
335
+ ${J}`,stage:`Usage: broods stage <list|use|create> [name]
336
336
 
337
337
  Subcommands:
338
338
  list List the project's stages
@@ -343,7 +343,7 @@ Options:
343
343
  --from <stage> Clone the source stage's architecture and env vars
344
344
  --use Switch to the stage \`stage create\` just made
345
345
 
346
- ${Y}`,stream:`Usage: broods stream [options]
346
+ ${J}`,stream:`Usage: broods stream [options]
347
347
 
348
348
  Streams live logs for the whole project/stage until Ctrl+C. No backfill.
349
349
 
@@ -351,7 +351,7 @@ Options:
351
351
  --level <lvl> Minimum log level DEBUG|INFO|WARN|ERROR (default: WARN)
352
352
  --all Stream INFO and up (DEBUG is dashboard-only)
353
353
 
354
- ${Y}`,trace:`Usage: broods trace <trace-id> [--json]
354
+ ${J}`,trace:`Usage: broods trace <trace-id> [--json]
355
355
 
356
356
  Prints one run's trace: every model step and tool call with its status,
357
357
  duration and error. --json prints every span with its full attributes (system
@@ -363,7 +363,7 @@ Authenticates with your \`broods login\`, like \`broods logs\`.
363
363
  Options:
364
364
  --json Print the spans as a JSON array
365
365
 
366
- ${Y}`,mcp:`Usage: broods mcp
366
+ ${J}`,mcp:`Usage: broods mcp
367
367
 
368
368
  Serves the account config plane to a development agent over MCP on stdio, so
369
369
  Claude Code and friends drive broods through typed tools instead of curl. It
@@ -391,45 +391,45 @@ project the dependency is upgraded instead. A new major is only announced.`,whoa
391
391
 
392
392
  Shows the login, server, org, plan, project and stage the next command uses.
393
393
 
394
- ${Y}`};async function ii(){aa();let[,,e,...n]=process.argv;switch(e){case void 0:case"--help":case"-h":console.log(Ln(n,Un));return;case"--version":case"-v":console.log(de);return}if(ca(e,n),po[e]&&(H(n,"--help")||H(n,"-h"))){console.log(Ee(e,n));return}switch(e){case"init":await ci(n);return;case"login":await li(n);return;case"connect":await ui(n);return;case"disconnect":await gi(n);return;case"whoami":await mi(n);return;case"org":await wi(n);return;case"project":await bi(n);return;case"stage":await yi(n);return;case"diff":await vi(n);return;case"deploy":await Si(n);return;case"dev":await ki(n);return;case"env":await Vi(n);return;case"stream":await Ji(n);return;case"logs":await Zi(n);return;case"trace":await Qi(n);return;case"machine":await qi(n);return;case"agent":await na(n);return;case"run":await ra(n);return;case"mcp":await la();return;case"update":await Ei();return;default:throw Error(`Unknown command: ${e}
394
+ ${J}`};async function ii(){aa();let[,,e,...n]=process.argv;switch(e){case void 0:case"--help":case"-h":console.log(Ln(n,Un));return;case"--version":case"-v":console.log(de);return}if(ca(e,n),po[e]&&(V(n,"--help")||V(n,"-h"))){console.log(Ee(e,n));return}switch(e){case"init":await ci(n);return;case"login":await li(n);return;case"connect":await ui(n);return;case"disconnect":await gi(n);return;case"whoami":await mi(n);return;case"org":await wi(n);return;case"project":await bi(n);return;case"stage":await yi(n);return;case"diff":await vi(n);return;case"deploy":await Si(n);return;case"dev":await ki(n);return;case"env":await Vi(n);return;case"stream":await Ji(n);return;case"logs":await Zi(n);return;case"trace":await Qi(n);return;case"machine":await qi(n);return;case"agent":await na(n);return;case"run":await ra(n);return;case"mcp":await la();return;case"update":await Ei();return;default:throw Error(`Unknown command: ${e}
395
395
 
396
396
  ${Ln(n,go)}`)}}function ee(e){return po[e]??Ln([],go)}function fo(e){let n=m(),t=R(e,"--base-url")??n.baseUrl,o=k(t),r=f(t??o?.baseUrl??T);return{loggedIn:o!==null,org:o?.org?.name,project:R(e,"--project")??n.project,projectGuess:Ae(process.cwd()),server:r.replace(/^https?:\/\//,""),stage:R(e,"--stage")??n.stage??"development"}}function ai(e){if(!e.loggedIn)return[["broods login","sign in through the dashboard"]];if(!e.project)return[["broods dev","create a project and sync on save"]];return[["broods dev","sync on save, tail logs"],["broods run <agent>","chat with an agent"]]}function Ee(e,n){let t=ee(e);if(!si.has(e))return t;let o=fo(n),r=o.project??o.projectGuess;if(e!=="deploy"||R(n,"--stage")!==void 0)return`${$n(r,o.stage,Un)}
397
397
 
398
398
  ${t}`;let s=S(),i=s&&s!=="production"?`ignores stage ${s}`:void 0;return`${$n(r,"production",{...Un,note:i})}
399
399
 
400
400
  ${t}`}function Ln(e,n){let t=fo(e);return[`broods v${de}`,"",...Mt(t,n),"","Next",...Bt(ai(t),n),"",ri,"","Usage: broods <command> [options] -h, --help -v, --version","Run `broods <command> --help` for a command's flags."].join(`
401
- `)}async function ci(e){let n=H(e,"--force"),t=G(process.cwd(),y);await Wn(G(t,b),{recursive:!0}),await an(G(t,"index.ts"),Ao(),n),await an(G(t,".gitignore"),`_generated
401
+ `)}async function ci(e){let n=V(e,"--force"),t=G(process.cwd(),y);await Wn(G(t,b),{recursive:!0}),await an(G(t,"index.ts"),Ao(),n),await an(G(t,".gitignore"),`_generated
402
402
  .cache
403
- `,n),await bo(n);let o=R(e,"--dashboard-url")??le;await Yn({dashboardUrl:o,baseUrl:A(o),project:R(e,"--project")??Ae(process.cwd()),stage:R(e,"--stage")??"development",region:R(e,"--region")??Ce,force:n}),q(`Created ${y}/`)}async function li(e){let n=m(),t=R(e,"--dashboard-url")??n.dashboardUrl??le,o=await Cn(t);await Yn({dashboardUrl:o.dashboardUrl??t,baseUrl:o.baseUrl,project:R(e,"--project"),stage:R(e,"--stage"),region:R(e,"--region"),force:!1});let r=o.user?.email||o.user?.name||o.user?.authId,s=o.org?`${o.org.name} (${o.org.slug})`:void 0,i=o.account?.username;if(q(`Logged in to ${o.dashboardUrl}`),r)console.log(`User: ${r}`);if(s)console.log(`Org: ${s}`);if(i)console.log(`Account: ${i}`);let a=R(e,"--project")??process.env.BROODS_PROJECT;if(!a)return;let c=R(e,"--stage")??S()??"development";await fi(o.baseUrl,o.token,a,c)}function di(e){if(!(e instanceof p))return e instanceof Error?e.message:String(e);try{return JSON.parse(e.body).error?.message??e.message}catch{return e.message}}async function ui(e){let[n]=oe(e),t=await mo(e);if(n===void 0){await pi(t);return}if(!kn(n))throw Error(`Unknown connection type ${n}.
403
+ `,n),await bo(n);let o=R(e,"--dashboard-url")??le;await Yn({dashboardUrl:o,baseUrl:A(o),project:R(e,"--project")??Ae(process.cwd()),stage:R(e,"--stage")??"development",region:R(e,"--region")??Ce,force:n}),X(`Created ${y}/`)}async function li(e){let n=m(),t=R(e,"--dashboard-url")??n.dashboardUrl??le,o=await Cn(t);await Yn({dashboardUrl:o.dashboardUrl??t,baseUrl:o.baseUrl,project:R(e,"--project"),stage:R(e,"--stage"),region:R(e,"--region"),force:!1});let r=o.user?.email||o.user?.name||o.user?.authId,s=o.org?`${o.org.name} (${o.org.slug})`:void 0,i=o.account?.username;if(X(`Logged in to ${o.dashboardUrl}`),r)console.log(`User: ${r}`);if(s)console.log(`Org: ${s}`);if(i)console.log(`Account: ${i}`);let a=R(e,"--project")??process.env.BROODS_PROJECT;if(!a)return;let c=R(e,"--stage")??S()??"development";await fi(o.baseUrl,o.token,a,c)}function di(e){if(!(e instanceof p))return e instanceof Error?e.message:String(e);try{return JSON.parse(e.body).error?.message??e.message}catch{return e.message}}async function ui(e){let[n]=oe(e),t=await mo(e);if(n===void 0){await pi(t);return}if(!kn(n))throw Error(`Unknown connection type ${n}.
404
404
 
405
- ${ee("connect")}`);let o=we[n],r=await qt(t,n).catch((s)=>{throw Error(di(s))});if(q(`Connected ${o.label}${r.email?` as ${r.email}`:""}.`),console.log(`Agents on model.provider "${n}" now run on it.`),o.usageUrl)console.log(`Manage usage: ${o.usageUrl}`);if(!r.models?.length)return;console.log("Models (use the id as model.modelId):");for(let s of r.models)console.log(` ${s}`)}async function mo(e){m();let n=R(e,"--base-url"),t=process.env.BROODS_ACCOUNT_SECRET;if(t)return new _({accountSecret:t,...n?{baseUrl:n}:{}});let o=await re(n);return new _({accountSecret:o.token,baseUrl:n??o.baseUrl})}async function gi(e){let[n]=oe(e);if(!n||!kn(n))throw Error(ee("disconnect"));if(await(await mo(e)).disconnect(n)){q(`Disconnected ${we[n].label}`);return}console.log(`No ${n} connection.`)}async function pi(e){let n=await e.listConnections();if(n.length===0)console.log("No connections yet.");else console.log(`${"TYPE".padEnd(16)} ACCOUNT`);for(let t of n)console.log(`${we[t.type].label.padEnd(16)} ${t.email??t.clientId}`);console.log(`
406
- Connect one: broods connect <${nn.join("|")}>`)}async function fi(e,n,t,o){try{let s=await new J({baseUrl:e,token:n}).getRuntimeKey(t,o);if(s?.apiKey)await Se("BROODS_API_KEY",s.apiKey),q(`Wrote BROODS_API_KEY (${s.keyHint}) to .env.local`)}catch{}}async function mi(e){let n=m(),t=ln(e),o=R(e,"--dashboard-url")??n.dashboardUrl??le,r=Boolean(R(e,"--project")??n.project);console.log(`broods v${de}`),console.log(`Dashboard: ${o}`),console.log(`Project: ${r?t.project:`none (${t.project} from folder name)`}`),console.log(`Stage: ${t.stage}`);let s;try{s=await re(R(e,"--base-url"))}catch(l){N(l instanceof Error?l.message:String(l));return}console.log(`Server: ${s.baseUrl}`);let i=new J({baseUrl:s.baseUrl,token:s.token}),a=await i.getOnboarding(),c=a.orgs.find((l)=>l.id===a.currentOrgId);if(a.user)console.log(`User: ${a.user.email}`);if(console.log(`Org: ${c?Ge(c):a.currentOrgId}`),a.account)console.log(`Account: ${a.account.username} (${a.account.status})`);if(!r){N("No project set. `broods dev` picks one.");return}await hi(i,t,c?.name);let d=a.projects.map((l)=>l.name);if(!d.includes(t.project))N(`This org has no project named ${t.project}. It has: ${d.length>0?d.join(", "):"none"}.`)}async function hi(e,n,t){let o=process.env.BROODS_API_KEY,r=C("BROODS_API_KEY")?"your shell":".env.local",s=null,i=null;try{s=await e.getRuntimeKey(n.project,n.stage)}catch(a){i=a instanceof Error?a.message:String(a)}if(i)console.log("Runtime key: unavailable"),N(`Could not read the runtime key: ${i}`);else if(!s?.apiKey)console.log("Runtime key: none for this scope"),N(`${n.project}/${n.stage} does not exist in ${t??"this org"} yet. \`broods dev\` will create it.`);else if(!o)console.log(`Runtime key: ${s.keyHint} (not in .env.local)`),N("BROODS_API_KEY is not set locally. Run `broods dev`.");else if(o===s.apiKey)console.log(`Runtime key: ${s.keyHint} (matches this org and stage)`);else console.log(`Runtime key: ${s.keyHint} expected`),N(`BROODS_API_KEY from ${r} belongs to a different org or stage. Run \`broods stage use ${n.stage}\` to repoint it.`)}async function wi(e){let[n,t]=oe(e);if(!n){console.log(Ee("org",e));return}let o=n==="list"||n==="ls",r=n==="use"||n==="select";if(!o&&!r&&!(n==="create"||n==="new"))throw Error(`Unknown org subcommand: ${n}
405
+ ${ee("connect")}`);let o=we[n],r=await qt(t,n).catch((s)=>{throw Error(di(s))});if(X(`Connected ${o.label}${r.email?` as ${r.email}`:""}.`),console.log(`Agents on model.provider "${n}" now run on it.`),o.usageUrl)console.log(`Manage usage: ${o.usageUrl}`);if(!r.models?.length)return;console.log("Models (use the id as model.modelId):");for(let s of r.models)console.log(` ${s}`)}async function mo(e){m();let n=R(e,"--base-url"),t=process.env.BROODS_ACCOUNT_SECRET;if(t)return new _({accountSecret:t,...n?{baseUrl:n}:{}});let o=await re(n);return new _({accountSecret:o.token,baseUrl:n??o.baseUrl})}async function gi(e){let[n]=oe(e);if(!n||!kn(n))throw Error(ee("disconnect"));if(await(await mo(e)).disconnect(n)){X(`Disconnected ${we[n].label}`);return}console.log(`No ${n} connection.`)}async function pi(e){let n=await e.listConnections();if(n.length===0)console.log("No connections yet.");else console.log(`${"TYPE".padEnd(16)} ACCOUNT`);for(let t of n)console.log(`${we[t.type].label.padEnd(16)} ${t.email??t.clientId}`);console.log(`
406
+ Connect one: broods connect <${nn.join("|")}>`)}async function fi(e,n,t,o){try{let s=await new q({baseUrl:e,token:n}).getRuntimeKey(t,o);if(s?.apiKey)await Se("BROODS_API_KEY",s.apiKey),X(`Wrote BROODS_API_KEY (${s.keyHint}) to .env.local`)}catch{}}async function mi(e){let n=m(),t=ln(e),o=R(e,"--dashboard-url")??n.dashboardUrl??le,r=Boolean(R(e,"--project")??n.project);console.log(`broods v${de}`),console.log(`Dashboard: ${o}`),console.log(`Project: ${r?t.project:`none (${t.project} from folder name)`}`),console.log(`Stage: ${t.stage}`);let s;try{s=await re(R(e,"--base-url"))}catch(l){N(l instanceof Error?l.message:String(l));return}console.log(`Server: ${s.baseUrl}`);let i=new q({baseUrl:s.baseUrl,token:s.token}),a=await i.getOnboarding(),c=a.orgs.find((l)=>l.id===a.currentOrgId);if(a.user)console.log(`User: ${a.user.email}`);if(console.log(`Org: ${c?Ge(c):a.currentOrgId}`),a.account)console.log(`Account: ${a.account.username} (${a.account.status})`);if(!r){N("No project set. `broods dev` picks one.");return}await hi(i,t,c?.name);let d=a.projects.map((l)=>l.name);if(!d.includes(t.project))N(`This org has no project named ${t.project}. It has: ${d.length>0?d.join(", "):"none"}.`)}async function hi(e,n,t){let o=process.env.BROODS_API_KEY,r=C("BROODS_API_KEY")?"your shell":".env.local",s=null,i=null;try{s=await e.getRuntimeKey(n.project,n.stage)}catch(a){i=a instanceof Error?a.message:String(a)}if(i)console.log("Runtime key: unavailable"),N(`Could not read the runtime key: ${i}`);else if(!s?.apiKey)console.log("Runtime key: none for this scope"),N(`${n.project}/${n.stage} does not exist in ${t??"this org"} yet. \`broods dev\` will create it.`);else if(!o)console.log(`Runtime key: ${s.keyHint} (not in .env.local)`),N("BROODS_API_KEY is not set locally. Run `broods dev`.");else if(o===s.apiKey)console.log(`Runtime key: ${s.keyHint} (matches this org and stage)`);else console.log(`Runtime key: ${s.keyHint} expected`),N(`BROODS_API_KEY from ${r} belongs to a different org or stage. Run \`broods stage use ${n.stage}\` to repoint it.`)}async function wi(e){let[n,t]=oe(e);if(!n){console.log(Ee("org",e));return}let o=n==="list"||n==="ls",r=n==="use"||n==="select";if(!o&&!r&&!(n==="create"||n==="new"))throw Error(`Unknown org subcommand: ${n}
407
407
 
408
- ${ee("org")}`);let i=m(),a=R(e,"--dashboard-url")??i.dashboardUrl??le,c=await We(a,R(e,"--base-url")),d=new J({baseUrl:c.baseUrl,token:c.token}),l=await d.getOnboarding();if(o){for(let w of l.orgs){let O=w.accountStatus==="active"?"":` [${w.accountStatus} account]`;console.log(Oe(`${Ge(w)}${O}`,w.id===l.currentOrgId))}console.log(`
408
+ ${ee("org")}`);let i=m(),a=R(e,"--dashboard-url")??i.dashboardUrl??le,c=await We(a,R(e,"--base-url")),d=new q({baseUrl:c.baseUrl,token:c.token}),l=await d.getOnboarding();if(o){for(let w of l.orgs){let O=w.accountStatus==="active"?"":` [${w.accountStatus} account]`;console.log(Oe(`${Ge(w)}${O}`,w.id===l.currentOrgId))}console.log(`
409
409
  Only orgs where you are owner or admin can be selected from the CLI.`);return}if(r){let w=l.orgs.filter((I)=>I.accountStatus==="active"),O=t?w.find((I)=>I.slug===t||I.name===t||I.id===t):await Ne("Select organization",w,Ge,w.findIndex((I)=>I.id===l.currentOrgId));if(!O)throw Error(`No selectable organization matches "${t}". Run \`broods org list\`.`);await io(d,c,await d.selectOnboardingOrg(O.id),e);return}let u=t??await ye("Organization name",Ae(process.cwd()));if(!u.trim())throw Error("Organization name is required.");await io(d,c,await d.createOnboardingOrg(u),e)}async function bi(e){let[n,t]=oe(e);if(!n){console.log(Ee("project",e));return}let o=n==="list"||n==="ls";if(!o&&!(n==="delete"||n==="rm"))throw Error(`Unknown project subcommand: ${n}
410
410
 
411
- ${ee("project")}`);let s=m(),i=R(e,"--dashboard-url")??s.dashboardUrl??le,a=ln(e),c=await We(i,R(e,"--base-url")),d=new J({baseUrl:c.baseUrl,token:c.token});if(o){let I=await d.listProjects();if(I.length===0){console.log("This org has no projects yet. `broods dev` creates one.");return}console.log("Projects:");for(let j of I)console.log(Ti(j,a.project));let P=I.filter((j)=>j.empty);if(P.length>0)console.log(`
412
- ${P.length} empty project(s). Delete one with \`broods project delete <name>\`.`);return}let l=t??await ye("Project to delete","");if(!l.trim())throw Error("Project name is required.");let u=await d.listProjects(),w=u.find((I)=>I.name===l||I.slug===l);if(!w)throw Error(`No project named "${l}". Existing: ${u.map((I)=>I.name).join(", ")}.`);if(!H(e,"--yes")){if(console.log(`Deleting ${w.name} removes ${Bn(w)}.`),!await on(`Permanently delete project ${w.name}?`)){console.log("Left it alone. Pass --yes to skip this prompt.");return}}let O=await d.deleteProject(w.id);if(!O)throw Error(`Project ${w.name} was not found.`);if(q(`Deleted project ${O.name} (${Bn(O)})`),O.name===a.project||O.slug===a.project)console.log("That was the project this directory points at. Update BROODS_PROJECT in .env.local.")}async function yi(e){let[n,t]=oe(e);if(!n){console.log(Ee("stage",e));return}let o=n==="list"||n==="ls",r=n==="use"||n==="select";if(!o&&!r&&!(n==="create"||n==="new"))throw Error(`Unknown stage subcommand: ${n}
411
+ ${ee("project")}`);let s=m(),i=R(e,"--dashboard-url")??s.dashboardUrl??le,a=ln(e),c=await We(i,R(e,"--base-url")),d=new q({baseUrl:c.baseUrl,token:c.token});if(o){let I=await d.listProjects();if(I.length===0){console.log("This org has no projects yet. `broods dev` creates one.");return}console.log("Projects:");for(let j of I)console.log(Ti(j,a.project));let P=I.filter((j)=>j.empty);if(P.length>0)console.log(`
412
+ ${P.length} empty project(s). Delete one with \`broods project delete <name>\`.`);return}let l=t??await ye("Project to delete","");if(!l.trim())throw Error("Project name is required.");let u=await d.listProjects(),w=u.find((I)=>I.name===l||I.slug===l);if(!w)throw Error(`No project named "${l}". Existing: ${u.map((I)=>I.name).join(", ")}.`);if(!V(e,"--yes")){if(console.log(`Deleting ${w.name} removes ${Bn(w)}.`),!await on(`Permanently delete project ${w.name}?`)){console.log("Left it alone. Pass --yes to skip this prompt.");return}}let O=await d.deleteProject(w.id);if(!O)throw Error(`Project ${w.name} was not found.`);if(X(`Deleted project ${O.name} (${Bn(O)})`),O.name===a.project||O.slug===a.project)console.log("That was the project this directory points at. Update BROODS_PROJECT in .env.local.")}async function yi(e){let[n,t]=oe(e);if(!n){console.log(Ee("stage",e));return}let o=n==="list"||n==="ls",r=n==="use"||n==="select";if(!o&&!r&&!(n==="create"||n==="new"))throw Error(`Unknown stage subcommand: ${n}
413
413
 
414
- ${ee("stage")}`);let i=m(),a=R(e,"--dashboard-url")??i.dashboardUrl??le,c=ln(e),d=await We(a,R(e,"--base-url")),l=new J({baseUrl:d.baseUrl,token:d.token});if(o){let P=await l.listStages(c.project);if(P.length===0){console.log(`${c.project} has no stages yet. \`broods dev\` creates Development.`);return}console.log(`Stages for ${c.project}:`);for(let j of P)console.log(_i(j,c.stage));return}if(r){let P=await l.listStages(c.project),j=t?P.find((X)=>Gn(X.name,t)):await Ne("Select stage",P,yo,P.findIndex((X)=>Gn(X.name,c.stage)));if(!j)throw Error(`${c.project} has no stage "${t}". Existing: ${P.map((X)=>X.name).join(", ")}. Create it with \`broods stage create ${t} --from ${c.stage}\`.`);let me=C("BROODS_STAGE");await Se("BROODS_STAGE",j.name),console.log(`Stage: ${j.name} (wrote BROODS_STAGE)`),Be("BROODS_STAGE",me),await Mn(l,{project:c.project,stage:j.name});return}let u=t??await ye("Stage name","staging");if(!u.trim())throw Error("Stage name is required.");let w=R(e,"--from"),O=await l.createStage(c.project,u,w);if(q(`Created stage ${O.stage.name} in ${c.project}${O.clonedFrom?` from ${O.clonedFrom}`:""}`),O.clonedFrom)console.log(` ${O.stage.agentCount} agent(s), ${O.stage.variableCount} env var(s) copied`);if(!H(e,"--use")){console.log(`Switch to it with \`broods stage use ${O.stage.name}\`.`);return}let I=C("BROODS_STAGE");await Se("BROODS_STAGE",O.stage.name),console.log(`Stage: ${O.stage.name} (wrote BROODS_STAGE)`),Be("BROODS_STAGE",I),await Mn(l,{project:c.project,stage:O.stage.name})}async function vi(e){let{manifest:n,config:t}=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"dev"}),o=await re(R(e,"--base-url")??t.baseUrl),r=new J({baseUrl:o.baseUrl,token:o.token}),s=await r.getManifest(n.project,n.stage);tn(En(n,s?.manifest??null)),Bi(await Fn(r,n),`${n.project}/${n.stage}`)}async function Si(e){let{manifest:n,config:t,resourceAliases:o,channels:r}=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"deploy",useRuntimeStage:!1}),s=await re(R(e,"--base-url")??t.baseUrl),i=new J({baseUrl:s.baseUrl,token:s.token}),a=R(e,"--region"),c=wn.find((l)=>l===a);if(H(e,"--region")&&!c)throw Error(`Unknown region ${a??"(empty)"}. Use one of: ${wn.join(", ")}`);let d=await i.putManifest(c?{...n,region:c}:n,H(e,"--prune"),H(e,"--rotate-key"));await ze(n,d.ids,process.cwd(),o,d.deployment,r),await Oo(),q(`Synced ${d.manifest.resources.length} resources to ${n.project}/${n.stage}`),await ho(i,n,d.deployment),vo(r,d),wo(d)}async function ho(e,n,t){if(!t)return;if(t.apiKey)await Se("BROODS_API_KEY",t.apiKey),q(`Wrote BROODS_API_KEY (${t.keyHint}) to .env.local`);let o=t.userTokenSecretHint,r=(c)=>c!==void 0&&Ct(Z,c)===o,s=F(await ke(G(process.cwd(),".env.local")))[g];if(o&&(r(process.env[g])||r(s))){Be(g,!r(process.env[g])&&C(g));return}if(o){N(`${n.project}/${n.stage} already has a user token signing secret (${o}), and ${g} here is unset or another one. Use the secret your backend signs with, or rotate it on the dashboard's Runtime key tab.`);return}let i=await e.rotateUserTokenSecret(n.project,n.stage).catch((c)=>(N(`${c instanceof Error?c.message:String(c)}. Set ${g} from the dashboard's Runtime key tab to sign user tokens.`),null));if(!i)return;let a=C(g);await Se(g,i.secret),q(`Wrote a new user token signing secret to ${g} in .env.local`),Be(g,a)}function wo(e){let n=e.warnings?.missingPolicies??[];if(n.length>0)N(`${n.length} policy ref(s) in agent config match no policy resource in this deploy. One that is not an existing policy id refuses every action at runtime: ${n.join(", ")}`);let t=e.warnings?.reservedResources??[];if(t.length>0)N(`Kept on prune, a reserved sandbox instance is still live: ${t.join(", ")}. Terminate it from the dashboard, then deploy again.`)}async function Ei(){let e=await Dn({maxAgeMs:0});if(e===null)throw Error("Could not reach the npm registry to check for a newer broods.");if(!jn(e,de)){console.log(`broods v${de} is already the newest release.`);return}let n=eo(),t=Le(de),o=Le(e)===t,r=o?e:`the newest ${t}.x`;if(console.log(`Updating broods ${de} → ${r} ${n.global?"globally":"in this project"}`),console.log(`$ ${[n.command,...n.args].join(" ")}`),await new Promise((s,i)=>{let a=uo(n.command,n.args,{cwd:n.cwd,stdio:"inherit",shell:process.platform==="win32"});a.on("error",i),a.on("exit",(c)=>{if(c===0){s();return}i(Error(`${n.command} exited with code ${c??"unknown"}`))})}),console.log(`broods ${o?e:`${t}.x`} installed.`),!o)N(`broods ${e} is a new major version. Install broods@${Le(e)} yourself to move to it.`)}async function ro(){let e=await Dn();if(e===null||!jn(e,de))return;N(`broods ${e} is out, you are on ${de}. Run \`broods update\`.`)}async function ki(e){if(await Ri(e),H(e,"--once")){if(!process.env.BROODS_SUPPRESS_DEV_TARGET)await ao(e),await ro();let w=oo.now();await Li(e),Ft(oo.now()-w);return}let n=Me(ni(),`broods-declined-${process.pid}.txt`),t={...process.env,BROODS_DECLINED_FILE:n,BROODS_SUPPRESS_DEV_TARGET:"1",BROODS_RELOAD_ENV:"1"};await ao(e),await ro();let o,r=!1,s=!1,i,a=async()=>{let w=await sa();if(w===i)return;await Ui(e,t),i=w},c=(w)=>console.error(w instanceof Error?w.message:String(w));await a().catch(c);let d=()=>{if(r){s=!0;return}r=!0,a().catch(c).finally(()=>{if(r=!1,s)s=!1,d()})},l=ei(G(process.cwd(),y),{recursive:!0},(w,O)=>{if(!O||ia(O))return;clearTimeout(o),o=setTimeout(d,150)}),u=new AbortController;$i(e,u.signal),process.on("SIGINT",()=>{u.abort(),l.close(),process.exit(0)})}async function $i(e,n){let t;try{t=await Fe(e)}catch(r){console.log(`· live logs off. ${r instanceof Error?r.message:String(r)}`);return}let o=Kn(e);try{for await(let r of qe(t,{backfill:0,keepReconnecting:!0,minLevel:o,signal:n,onReconnect:Hn}))console.log(Vn(r))}catch(r){if(!n.aborted)console.error(`live logs: ${r instanceof Error?r.message:String(r)}`)}}async function Ri(e){await Ci(),await bo(!1),await Ai(e)}async function bo(e){let n=process.cwd();if(!(await Promise.all([".agent",".agents",".claude","AGENTS.md","CLAUDE.md"].map((c)=>so(G(n,c))))).includes(!0))return;let r=G(n,rn);if(!e&&await so(G(r,"SKILL.md")))return;let s=Me(rn,"SKILL.md"),i=Me(rn,"scripts","onboard.sh");for(let c of[s,i])if(await Oi(n,c)){N(`Skipped the agent skill: ${c} crosses a symlink.`);return}await Wn(G(r,"scripts"),{recursive:!0}),await ve(G(r,"SKILL.md"),no);let a=G(r,"scripts","onboard.sh");await ve(a,to),await Vs(a,493),q(`Installed the broods agent skill at ${rn}/`)}async function Oi(e,n){let t=e;for(let o of n.split(Qs)){t=G(t,o);try{if((await Ys(t)).isSymbolicLink())return!0}catch{return!1}}return!1}async function so(e){try{return await Js(e),!0}catch{return!1}}async function Ci(){let e=G(process.cwd(),y);await Wn(G(e,b),{recursive:!0});let n=[];if(await zn(e,n),n.length>0)return;await an(G(e,"index.ts"),Ao(),!1),await an(G(e,".gitignore"),`_generated
414
+ ${ee("stage")}`);let i=m(),a=R(e,"--dashboard-url")??i.dashboardUrl??le,c=ln(e),d=await We(a,R(e,"--base-url")),l=new q({baseUrl:d.baseUrl,token:d.token});if(o){let P=await l.listStages(c.project);if(P.length===0){console.log(`${c.project} has no stages yet. \`broods dev\` creates Development.`);return}console.log(`Stages for ${c.project}:`);for(let j of P)console.log(_i(j,c.stage));return}if(r){let P=await l.listStages(c.project),j=t?P.find((Z)=>Gn(Z.name,t)):await Ne("Select stage",P,yo,P.findIndex((Z)=>Gn(Z.name,c.stage)));if(!j)throw Error(`${c.project} has no stage "${t}". Existing: ${P.map((Z)=>Z.name).join(", ")}. Create it with \`broods stage create ${t} --from ${c.stage}\`.`);let me=C("BROODS_STAGE");await Se("BROODS_STAGE",j.name),console.log(`Stage: ${j.name} (wrote BROODS_STAGE)`),Be("BROODS_STAGE",me),await Mn(l,{project:c.project,stage:j.name});return}let u=t??await ye("Stage name","staging");if(!u.trim())throw Error("Stage name is required.");let w=R(e,"--from"),O=await l.createStage(c.project,u,w);if(X(`Created stage ${O.stage.name} in ${c.project}${O.clonedFrom?` from ${O.clonedFrom}`:""}`),O.clonedFrom)console.log(` ${O.stage.agentCount} agent(s), ${O.stage.variableCount} env var(s) copied`);if(!V(e,"--use")){console.log(`Switch to it with \`broods stage use ${O.stage.name}\`.`);return}let I=C("BROODS_STAGE");await Se("BROODS_STAGE",O.stage.name),console.log(`Stage: ${O.stage.name} (wrote BROODS_STAGE)`),Be("BROODS_STAGE",I),await Mn(l,{project:c.project,stage:O.stage.name})}async function vi(e){let{manifest:n,config:t}=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"dev"}),o=await re(R(e,"--base-url")??t.baseUrl),r=new q({baseUrl:o.baseUrl,token:o.token}),s=await r.getManifest(n.project,n.stage);tn(En(n,s?.manifest??null)),Bi(await Fn(r,n),`${n.project}/${n.stage}`)}async function Si(e){let{manifest:n,config:t,resourceAliases:o,channels:r}=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"deploy",useRuntimeStage:!1}),s=await re(R(e,"--base-url")??t.baseUrl),i=new q({baseUrl:s.baseUrl,token:s.token}),a=R(e,"--region"),c=wn.find((l)=>l===a);if(V(e,"--region")&&!c)throw Error(`Unknown region ${a??"(empty)"}. Use one of: ${wn.join(", ")}`);let d=await i.putManifest(c?{...n,region:c}:n,V(e,"--prune"),V(e,"--rotate-key"));await ze(n,d.ids,process.cwd(),o,d.deployment,r),await Oo(),X(`Synced ${d.manifest.resources.length} resources to ${n.project}/${n.stage}`),await ho(i,n,d.deployment),vo(r,d),wo(d)}async function ho(e,n,t){if(!t)return;if(t.apiKey)await Se("BROODS_API_KEY",t.apiKey),X(`Wrote BROODS_API_KEY (${t.keyHint}) to .env.local`);let o=t.userTokenSecretHint,r=(c)=>c!==void 0&&Ct(H,c)===o,s=B(await ke(G(process.cwd(),".env.local")))[g];if(o&&(r(process.env[g])||r(s))){Be(g,!r(process.env[g])&&C(g));return}if(o){N(`${n.project}/${n.stage} already has a user token signing secret (${o}), and ${g} here is unset or another one. Use the secret your backend signs with, or rotate it on the dashboard's Runtime key tab.`);return}let i=await e.rotateUserTokenSecret(n.project,n.stage).catch((c)=>(N(`${c instanceof Error?c.message:String(c)}. Set ${g} from the dashboard's Runtime key tab to sign user tokens.`),null));if(!i)return;let a=C(g);await Se(g,i.secret),X(`Wrote a new user token signing secret to ${g} in .env.local`),Be(g,a)}function wo(e){let n=e.warnings?.missingPolicies??[];if(n.length>0)N(`${n.length} policy ref(s) in agent config match no policy resource in this deploy. One that is not an existing policy id refuses every action at runtime: ${n.join(", ")}`);let t=e.warnings?.reservedResources??[];if(t.length>0)N(`Kept on prune, a reserved sandbox instance is still live: ${t.join(", ")}. Terminate it from the dashboard, then deploy again.`)}async function Ei(){let e=await Dn({maxAgeMs:0});if(e===null)throw Error("Could not reach the npm registry to check for a newer broods.");if(!jn(e,de)){console.log(`broods v${de} is already the newest release.`);return}let n=eo(),t=Le(de),o=Le(e)===t,r=o?e:`the newest ${t}.x`;if(console.log(`Updating broods ${de} → ${r} ${n.global?"globally":"in this project"}`),console.log(`$ ${[n.command,...n.args].join(" ")}`),await new Promise((s,i)=>{let a=uo(n.command,n.args,{cwd:n.cwd,stdio:"inherit",shell:process.platform==="win32"});a.on("error",i),a.on("exit",(c)=>{if(c===0){s();return}i(Error(`${n.command} exited with code ${c??"unknown"}`))})}),console.log(`broods ${o?e:`${t}.x`} installed.`),!o)N(`broods ${e} is a new major version. Install broods@${Le(e)} yourself to move to it.`)}async function ro(){let e=await Dn();if(e===null||!jn(e,de))return;N(`broods ${e} is out, you are on ${de}. Run \`broods update\`.`)}async function ki(e){if(await Ri(e),V(e,"--once")){if(!process.env.BROODS_SUPPRESS_DEV_TARGET)await ao(e),await ro();let w=oo.now();await Li(e),Ft(oo.now()-w);return}let n=Me(ni(),`broods-declined-${process.pid}.txt`),t={...process.env,BROODS_DECLINED_FILE:n,BROODS_SUPPRESS_DEV_TARGET:"1",BROODS_RELOAD_ENV:"1"};await ao(e),await ro();let o,r=!1,s=!1,i,a=async()=>{let w=await sa();if(w===i)return;await Ui(e,t),i=w},c=(w)=>console.error(w instanceof Error?w.message:String(w));await a().catch(c);let d=()=>{if(r){s=!0;return}r=!0,a().catch(c).finally(()=>{if(r=!1,s)s=!1,d()})},l=ei(G(process.cwd(),y),{recursive:!0},(w,O)=>{if(!O||ia(O))return;clearTimeout(o),o=setTimeout(d,150)}),u=new AbortController;$i(e,u.signal),process.on("SIGINT",()=>{u.abort(),l.close(),process.exit(0)})}async function $i(e,n){let t;try{t=await Fe(e)}catch(r){console.log(`· live logs off. ${r instanceof Error?r.message:String(r)}`);return}let o=Kn(e);try{for await(let r of qe(t,{backfill:0,keepReconnecting:!0,minLevel:o,signal:n,onReconnect:Hn}))console.log(Vn(r))}catch(r){if(!n.aborted)console.error(`live logs: ${r instanceof Error?r.message:String(r)}`)}}async function Ri(e){await Ci(),await bo(!1),await Ai(e)}async function bo(e){let n=process.cwd();if(!(await Promise.all([".agent",".agents",".claude","AGENTS.md","CLAUDE.md"].map((c)=>so(G(n,c))))).includes(!0))return;let r=G(n,rn);if(!e&&await so(G(r,"SKILL.md")))return;let s=Me(rn,"SKILL.md"),i=Me(rn,"scripts","onboard.sh");for(let c of[s,i])if(await Oi(n,c)){N(`Skipped the agent skill: ${c} crosses a symlink.`);return}await Wn(G(r,"scripts"),{recursive:!0}),await ve(G(r,"SKILL.md"),no);let a=G(r,"scripts","onboard.sh");await ve(a,to),await Vs(a,493),X(`Installed the broods agent skill at ${rn}/`)}async function Oi(e,n){let t=e;for(let o of n.split(Qs)){t=G(t,o);try{if((await Ys(t)).isSymbolicLink())return!0}catch{return!1}}return!1}async function so(e){try{return await Js(e),!0}catch{return!1}}async function Ci(){let e=G(process.cwd(),y);await Wn(G(e,b),{recursive:!0});let n=[];if(await zn(e,n),n.length>0)return;await an(G(e,"index.ts"),Ao(),!1),await an(G(e,".gitignore"),`_generated
415
415
  .cache
416
- `,!1),q(`Created starter ${y}/`)}async function Ai(e){let n=G(process.cwd(),".env.local"),t=await ke(n),o=Co(t),r=o.BROODS_STAGE;if(["BROODS_DASHBOARD_URL","BROODS_BASE_URL","BROODS_PROJECT","BROODS_REGION"].filter((I)=>o[I]===void 0).length===0&&r!==void 0)return;let i=o.BROODS_PROJECT===void 0,a=r===void 0,c=o.BROODS_REGION===void 0,d=m(),l=R(e,"--dashboard-url")??d.dashboardUrl??le,u=R(e,"--project")??process.env.BROODS_PROJECT??Ae(process.cwd()),w=R(e,"--stage")??S()??"development",O=R(e,"--region")??process.env.BROODS_REGION??Ce;if(process.stdin.isTTY&&i){let I=await We(l,R(e,"--base-url")),P=new J({baseUrl:I.baseUrl,token:I.token}),j=await xi(P,I),me=await Ii(P,j);if(u=await Ni(me,u),!u.trim())throw Error("Project name is required.")}if(process.stdin.isTTY&&a){if(w=await ye("Stage",w),!w.trim())throw Error("Stage is required.")}if(process.stdin.isTTY&&c){let I=oi.filter((P)=>At.includes(P.region));O=await Ne("Select service region",I,(P)=>P.label,I.findIndex((P)=>P.region===O)).then((P)=>P.region)}await Yn({dashboardUrl:l,baseUrl:d.baseUrl??A(l),project:u,stage:w,region:O,force:!1})}async function We(e,n){try{return await re(n)}catch(t){if(!process.stdin.isTTY)throw t;return N(`${t instanceof Error?t.message:String(t)} Starting browser login.`),await Cn(e)}}async function xi(e,n){try{return await e.getOnboarding()}catch(t){if(!(t instanceof Qe)||!n.org)throw t;return N("This broods server cannot list your orgs yet; using the org from your login."),{currentOrgId:n.org.id,orgs:[{id:n.org.id,name:n.org.name,slug:n.org.slug,role:"admin",accountStatus:"active"}],projects:[]}}}async function io(e,n,t,o){let r=t.orgs.find((s)=>s.id===t.currentOrgId);if(!r)throw Error("Selected organization is not visible to this login");if(process.env.BROODS_TOKEN)N("BROODS_TOKEN is set, so the switch applies to this token only and was not stored.");else await U({...n,org:{id:r.id,name:r.name,slug:r.slug},...t.account?{account:{id:t.account.id,username:t.account.username}}:{}});console.log(`Org: ${Ge(r)}`),console.log(`Projects: ${t.projects.length>0?t.projects.map((s)=>s.name).join(", "):"none yet"}`),await Mn(e,ln(o))}async function Mn(e,n){let t;try{t=await e.getRuntimeKey(n.project,n.stage)}catch(r){N(`Could not read the runtime key for ${n.project}/${n.stage} (${r instanceof Error?r.message:String(r)}). BROODS_API_KEY still points at the previous scope. Run \`broods whoami\` to check it.`);return}if(!t?.apiKey){N(`${n.project}/${n.stage} is not synced here yet, so BROODS_API_KEY still points at the previous scope. Run \`broods dev\`.`);return}let o=C("BROODS_API_KEY");if(!o&&process.env.BROODS_API_KEY===t.apiKey)return;await Se("BROODS_API_KEY",t.apiKey),q(`Wrote BROODS_API_KEY (${t.keyHint}) to .env.local`),Be("BROODS_API_KEY",o)}function Be(e,n){if(!n)return;N(`${e} is exported in your shell, which wins over .env.local. Run \`unset ${e}\` or the next broods command keeps the old value.`)}function Ge(e){let n=e.role==="owner"||e.role==="admin"?e.role:"member",t=e.plan?`, ${e.plan} plan`:"";return`${e.name} (${e.slug}, ${n}${t})`}function Pi(e){return e.slug===e.name?e.name:`${e.name} (${e.slug})`}function Bn(e){return e.empty?"nothing (it is already empty)":`${e.stageCount} stage(s), ${e.agentCount} agent(s), ${e.variableCount} env var(s), ${e.deploymentCount} deployment(s), ${e.fileCount} workspace file(s)`}function Ti(e,n){let t=e.empty?"empty":Bn(e);return Oe(`${e.name}: ${t}`,e.name===n||e.slug===n)}function _i(e,n){return Oe(yo(e),Gn(e.name,n))}function yo(e){let n=e.deploymentRegion?`, ${e.deploymentRegion}`:"";return`${e.name} (${e.kind}${n}): ${e.agentCount} agent(s), ${e.variableCount} env var(s)`}function Gn(e,n){return e.trim().toLowerCase()===n.trim().toLowerCase()}function ln(e){return m(),{project:R(e,"--project")??process.env.BROODS_PROJECT??Ae(process.cwd()),stage:R(e,"--stage")??S()??"development"}}async function Ii(e,n){let t=n.orgs.filter((s)=>s.accountStatus==="active"),o={kind:"create",name:"New organization"},r=await Ne("Select organization",[...t,o],(s)=>("kind"in s)?"Create new organization":Ge(s),t.findIndex((s)=>s.id===n.currentOrgId));if("kind"in r){let s=await ye("Organization name",Ae(process.cwd()));if(!s.trim())throw Error("Organization name is required.");return await e.createOnboardingOrg(s)}return r.id===n.currentOrgId?n:await e.selectOnboardingOrg(r.id)}function ji(e,n){return e.projects.find((o)=>o.name===n||o.slug===n)?.name??n}function Di(e,n){return e.projects.find((t)=>t.name===n||t.slug===n)}async function Ni(e,n){let t=ji(e,n);if(e.projects.length===0)return ye("Project name",t);for(;;){let o=await zt("Select project",e.projects,Pi,{hint:"type a new project name",defaultValue:t}),r=typeof o==="string"?o:o.name,s=Di(e,r);if(!s)return r;if(await on(`Continue with the existing project ${s.name}?`))return s.name}}function Ui(e,n){return new Promise((t,o)=>{let r=process.argv[1]??"",s=uo(process.execPath,[r,"dev","--once",...e],{stdio:"inherit",env:n});s.on("error",o),s.on("exit",(i,a)=>{if(i===0){t();return}o(Error(a?`Sync child exited from signal ${a}`:`Sync child exited with code ${i??"unknown"}`))})})}async function Li(e){let n=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"dev"}),t=await re(R(e,"--base-url")??n.config.baseUrl),o=new J({baseUrl:t.baseUrl,token:t.token}),r=await So(o,n.manifest,await Fn(o,n.manifest));if(r.length>0)Rn(r);for(let s=1;;s+=1)try{return await Mi(o,n)}catch(i){if(!(i instanceof Ze)||s===ti)throw i;N("Stage changed in another session. Re-reading...")}}async function Mi(e,n){let{manifest:t,resourceAliases:o,channels:r}=n,s=await e.getManifest(t.project,t.stage),i=En(t,s?.manifest??null);tn(i.filter((w)=>w.operation!=="delete"));let a=await e.putManifest(t,!1,!1,s===null?0:s.revision);await ze(t,a.ids,process.cwd(),o,a.deployment,r),await Oo();let c=await Fi(),d=i.filter((w)=>w.operation==="delete"),l=d.filter((w)=>!c.has(`${w.kind}:${w.name}`)),u=!1;if(l.length>0)if(N("These remote resources are no longer declared locally:"),tn(l),await on(`Delete ${l.length} resource(s) from ${t.project}/${t.stage}?`))a=await e.putManifest(t,!0,!1,a.revision),await ze(t,a.ids,process.cwd(),o,a.deployment,r),await Hi(),u=!0;else await Ki(l.map((w)=>`${w.kind}:${w.name}`));if(!u&&d.length>0){let w=d.map((O)=>`${O.kind}:${O.name}`).join(", ");N(`${d.length} undeclared resource(s) kept remotely: ${w}. Re-declare in code or run \`deploy --prune\` to remove.`)}return await ho(e,t,a.deployment),vo(r,a),wo(a),a}function vo(e,n){let t=n.deployment;if(!t||e.length===0)return;let o=new M,r=new Map;for(let i of e){if(!n.ids.agents[i.agentName])continue;let a=r.get(i.type)??[];a.push(i.alias),r.set(i.type,a)}let s=t.stageKind===void 0||t.stageKind==="production";for(let[i,a]of r){let c=s?o.accountWebhookUrl(t.accountId,i):o.stageWebhookUrl(t.accountId,t.endpointId,i);console.log(`Channel ${a.join(", ")} (${i}): ${c}${i==="pancake"?"?secret=<PANCAKE_WEBHOOK_SECRET>":""}`)}}async function Fn(e,n){let t=yt(n).filter((r)=>!r.startsWith("BROODS_"));if(t.length===0)return[];let o=new Map((await e.listEnv(n.project,n.stage)).map((r)=>[r.name,r.valueDigest]));return t.map((r)=>({name:r,state:Gi(r,o)}))}async function So(e,n,t){let o=t.filter((r)=>r.state==="unset"||r.state==="drifted").map((r)=>r.name);if(o.length===0)return[];return await Promise.all(o.map((r)=>e.setEnv(n.project,n.stage,r,process.env[r]))),o}function Bi(e,n){let t=sn(e,"drifted");if(t.length>0)N(`.env.local and ${n} disagree on ${t.length} variable(s): ${t.join(", ")}. Run \`broods env sync\` to push the local values.`)}function Gi(e,n){let t=process.env[e],o=n.get(e);if(t===void 0||t==="")return o===void 0?"unresolved":"stage-only";if(o===void 0)return"unset";return o===Wi(t)?"synced":"drifted"}function Wi(e){return lo("sha256").update(e).digest("hex")}function sn(e,n){return e.filter((t)=>t.state===n).map((t)=>t.name)}async function ao(e){let n=m(),{manifest:t,config:o}=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"dev"}),r=await re(R(e,"--base-url")??o.baseUrl);Gt({project:t.project,stage:t.stage,dashboardUrl:R(e,"--dashboard-url")??n.dashboardUrl??r.dashboardUrl??o.dashboardUrl??le})}async function Fi(){let e=process.env.BROODS_DECLINED_FILE;if(!e)return new Set;let n=await ke(e);return new Set(n.split(/\r?\n/).map((t)=>t.trim()).filter(Boolean))}async function Ki(e){let n=process.env.BROODS_DECLINED_FILE;if(!n||e.length===0)return;await ve(n,`${e.join(`
416
+ `,!1),X(`Created starter ${y}/`)}async function Ai(e){let n=G(process.cwd(),".env.local"),t=await ke(n),o=Co(t),r=o.BROODS_STAGE;if(["BROODS_DASHBOARD_URL","BROODS_BASE_URL","BROODS_PROJECT","BROODS_REGION"].filter((I)=>o[I]===void 0).length===0&&r!==void 0)return;let i=o.BROODS_PROJECT===void 0,a=r===void 0,c=o.BROODS_REGION===void 0,d=m(),l=R(e,"--dashboard-url")??d.dashboardUrl??le,u=R(e,"--project")??process.env.BROODS_PROJECT??Ae(process.cwd()),w=R(e,"--stage")??S()??"development",O=R(e,"--region")??process.env.BROODS_REGION??Ce;if(process.stdin.isTTY&&i){let I=await We(l,R(e,"--base-url")),P=new q({baseUrl:I.baseUrl,token:I.token}),j=await xi(P,I),me=await Ii(P,j);if(u=await Ni(me,u),!u.trim())throw Error("Project name is required.")}if(process.stdin.isTTY&&a){if(w=await ye("Stage",w),!w.trim())throw Error("Stage is required.")}if(process.stdin.isTTY&&c){let I=oi.filter((P)=>At.includes(P.region));O=await Ne("Select service region",I,(P)=>P.label,I.findIndex((P)=>P.region===O)).then((P)=>P.region)}await Yn({dashboardUrl:l,baseUrl:d.baseUrl??A(l),project:u,stage:w,region:O,force:!1})}async function We(e,n){try{return await re(n)}catch(t){if(!process.stdin.isTTY)throw t;return N(`${t instanceof Error?t.message:String(t)} Starting browser login.`),await Cn(e)}}async function xi(e,n){try{return await e.getOnboarding()}catch(t){if(!(t instanceof Qe)||!n.org)throw t;return N("This broods server cannot list your orgs yet; using the org from your login."),{currentOrgId:n.org.id,orgs:[{id:n.org.id,name:n.org.name,slug:n.org.slug,role:"admin",accountStatus:"active"}],projects:[]}}}async function io(e,n,t,o){let r=t.orgs.find((s)=>s.id===t.currentOrgId);if(!r)throw Error("Selected organization is not visible to this login");if(process.env.BROODS_TOKEN)N("BROODS_TOKEN is set, so the switch applies to this token only and was not stored.");else await U({...n,org:{id:r.id,name:r.name,slug:r.slug},...t.account?{account:{id:t.account.id,username:t.account.username}}:{}});console.log(`Org: ${Ge(r)}`),console.log(`Projects: ${t.projects.length>0?t.projects.map((s)=>s.name).join(", "):"none yet"}`),await Mn(e,ln(o))}async function Mn(e,n){let t;try{t=await e.getRuntimeKey(n.project,n.stage)}catch(r){N(`Could not read the runtime key for ${n.project}/${n.stage} (${r instanceof Error?r.message:String(r)}). BROODS_API_KEY still points at the previous scope. Run \`broods whoami\` to check it.`);return}if(!t?.apiKey){N(`${n.project}/${n.stage} is not synced here yet, so BROODS_API_KEY still points at the previous scope. Run \`broods dev\`.`);return}let o=C("BROODS_API_KEY");if(!o&&process.env.BROODS_API_KEY===t.apiKey)return;await Se("BROODS_API_KEY",t.apiKey),X(`Wrote BROODS_API_KEY (${t.keyHint}) to .env.local`),Be("BROODS_API_KEY",o)}function Be(e,n){if(!n)return;N(`${e} is exported in your shell, which wins over .env.local. Run \`unset ${e}\` or the next broods command keeps the old value.`)}function Ge(e){let n=e.role==="owner"||e.role==="admin"?e.role:"member",t=e.plan?`, ${e.plan} plan`:"";return`${e.name} (${e.slug}, ${n}${t})`}function Pi(e){return e.slug===e.name?e.name:`${e.name} (${e.slug})`}function Bn(e){return e.empty?"nothing (it is already empty)":`${e.stageCount} stage(s), ${e.agentCount} agent(s), ${e.variableCount} env var(s), ${e.deploymentCount} deployment(s), ${e.fileCount} workspace file(s)`}function Ti(e,n){let t=e.empty?"empty":Bn(e);return Oe(`${e.name}: ${t}`,e.name===n||e.slug===n)}function _i(e,n){return Oe(yo(e),Gn(e.name,n))}function yo(e){let n=e.deploymentRegion?`, ${e.deploymentRegion}`:"";return`${e.name} (${e.kind}${n}): ${e.agentCount} agent(s), ${e.variableCount} env var(s)`}function Gn(e,n){return e.trim().toLowerCase()===n.trim().toLowerCase()}function ln(e){return m(),{project:R(e,"--project")??process.env.BROODS_PROJECT??Ae(process.cwd()),stage:R(e,"--stage")??S()??"development"}}async function Ii(e,n){let t=n.orgs.filter((s)=>s.accountStatus==="active"),o={kind:"create",name:"New organization"},r=await Ne("Select organization",[...t,o],(s)=>("kind"in s)?"Create new organization":Ge(s),t.findIndex((s)=>s.id===n.currentOrgId));if("kind"in r){let s=await ye("Organization name",Ae(process.cwd()));if(!s.trim())throw Error("Organization name is required.");return await e.createOnboardingOrg(s)}return r.id===n.currentOrgId?n:await e.selectOnboardingOrg(r.id)}function ji(e,n){return e.projects.find((o)=>o.name===n||o.slug===n)?.name??n}function Di(e,n){return e.projects.find((t)=>t.name===n||t.slug===n)}async function Ni(e,n){let t=ji(e,n);if(e.projects.length===0)return ye("Project name",t);for(;;){let o=await zt("Select project",e.projects,Pi,{hint:"type a new project name",defaultValue:t}),r=typeof o==="string"?o:o.name,s=Di(e,r);if(!s)return r;if(await on(`Continue with the existing project ${s.name}?`))return s.name}}function Ui(e,n){return new Promise((t,o)=>{let r=process.argv[1]??"",s=uo(process.execPath,[r,"dev","--once",...e],{stdio:"inherit",env:n});s.on("error",o),s.on("exit",(i,a)=>{if(i===0){t();return}o(Error(a?`Sync child exited from signal ${a}`:`Sync child exited with code ${i??"unknown"}`))})})}async function Li(e){let n=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"dev"}),t=await re(R(e,"--base-url")??n.config.baseUrl),o=new q({baseUrl:t.baseUrl,token:t.token}),r=await So(o,n.manifest,await Fn(o,n.manifest));if(r.length>0)Rn(r);for(let s=1;;s+=1)try{return await Mi(o,n)}catch(i){if(!(i instanceof Ze)||s===ti)throw i;N("Stage changed in another session. Re-reading...")}}async function Mi(e,n){let{manifest:t,resourceAliases:o,channels:r}=n,s=await e.getManifest(t.project,t.stage),i=En(t,s?.manifest??null);tn(i.filter((w)=>w.operation!=="delete"));let a=await e.putManifest(t,!1,!1,s===null?0:s.revision);await ze(t,a.ids,process.cwd(),o,a.deployment,r),await Oo();let c=await Fi(),d=i.filter((w)=>w.operation==="delete"),l=d.filter((w)=>!c.has(`${w.kind}:${w.name}`)),u=!1;if(l.length>0)if(N("These remote resources are no longer declared locally:"),tn(l),await on(`Delete ${l.length} resource(s) from ${t.project}/${t.stage}?`))a=await e.putManifest(t,!0,!1,a.revision),await ze(t,a.ids,process.cwd(),o,a.deployment,r),await Hi(),u=!0;else await Ki(l.map((w)=>`${w.kind}:${w.name}`));if(!u&&d.length>0){let w=d.map((O)=>`${O.kind}:${O.name}`).join(", ");N(`${d.length} undeclared resource(s) kept remotely: ${w}. Re-declare in code or run \`deploy --prune\` to remove.`)}return await ho(e,t,a.deployment),vo(r,a),wo(a),a}function vo(e,n){let t=n.deployment;if(!t||e.length===0)return;let o=new M,r=new Map;for(let i of e){if(!n.ids.agents[i.agentName])continue;let a=r.get(i.type)??[];a.push(i.alias),r.set(i.type,a)}let s=t.stageKind===void 0||t.stageKind==="production";for(let[i,a]of r){let c=s?o.accountWebhookUrl(t.accountId,i):o.stageWebhookUrl(t.accountId,t.endpointId,i);console.log(`Channel ${a.join(", ")} (${i}): ${c}${i==="pancake"?"?secret=<PANCAKE_WEBHOOK_SECRET>":""}`)}}async function Fn(e,n){let t=yt(n).filter((r)=>!r.startsWith("BROODS_"));if(t.length===0)return[];let o=new Map((await e.listEnv(n.project,n.stage)).map((r)=>[r.name,r.valueDigest]));return t.map((r)=>({name:r,state:Gi(r,o)}))}async function So(e,n,t){let o=t.filter((r)=>r.state==="unset"||r.state==="drifted").map((r)=>r.name);if(o.length===0)return[];return await Promise.all(o.map((r)=>e.setEnv(n.project,n.stage,r,process.env[r]))),o}function Bi(e,n){let t=sn(e,"drifted");if(t.length>0)N(`.env.local and ${n} disagree on ${t.length} variable(s): ${t.join(", ")}. Run \`broods env sync\` to push the local values.`)}function Gi(e,n){let t=process.env[e],o=n.get(e);if(t===void 0||t==="")return o===void 0?"unresolved":"stage-only";if(o===void 0)return"unset";return o===Wi(t)?"synced":"drifted"}function Wi(e){return lo("sha256").update(e).digest("hex")}function sn(e,n){return e.filter((t)=>t.state===n).map((t)=>t.name)}async function ao(e){let n=m(),{manifest:t,config:o}=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"dev"}),r=await re(R(e,"--base-url")??o.baseUrl);Gt({project:t.project,stage:t.stage,dashboardUrl:R(e,"--dashboard-url")??n.dashboardUrl??r.dashboardUrl??o.dashboardUrl??le})}async function Fi(){let e=process.env.BROODS_DECLINED_FILE;if(!e)return new Set;let n=await ke(e);return new Set(n.split(/\r?\n/).map((t)=>t.trim()).filter(Boolean))}async function Ki(e){let n=process.env.BROODS_DECLINED_FILE;if(!n||e.length===0)return;await ve(n,`${e.join(`
417
417
  `)}
418
418
  `,{flag:"a"})}async function Hi(){let e=process.env.BROODS_DECLINED_FILE;if(!e)return;await ve(e,"","utf8")}async function Vi(e){let[n,t]=oe(e);if(!n){console.log(Ee("env",e));return}let o=n==="list"||n==="ls",r=n==="rm"||n==="remove",s=n==="get",i=n==="sync",a=n==="set"||r||s;if(!o&&!i&&!a)throw Error(`Unknown env subcommand: ${n}
419
419
 
420
420
  ${ee("env")}`);if(a&&!t)throw Error(`broods env ${n} needs a variable name.
421
421
 
422
- ${ee("env")}`);let{manifest:c,config:d}=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"dev"}),l=await re(R(e,"--base-url")??d.baseUrl),u=new J({baseUrl:l.baseUrl,token:l.token}),w=`${c.project}/${c.stage}`;if(i){await Yi(u,c,w);return}if(o){let I=await u.listEnv(c.project,c.stage);if(I.length===0){console.log(`No environment variables set for ${w}.`);return}console.log(`Environment variables for ${w} (values hidden):`);for(let P of I)console.log(` ${P.name}`);return}if(s){let I=await u.getEnv(c.project,c.stage,t);if(I===null){console.error(`${t} is not set for ${w}`),process.exitCode=1;return}console.log(I);return}if(r){await u.removeEnv(c.project,c.stage,t),q(`Removed ${t} from ${w}`);return}let O=await Yt(t);await u.setEnv(c.project,c.stage,t,O),q(`Stored ${t} for ${w}`)}async function Yi(e,n,t){let o=await Fn(e,n);if(o.length===0){console.log('No env("NAME") references in this project.');return}let r=await So(e,n,o);if(r.length>0)Rn(r);let s=sn(o,"synced").length;console.log(r.length>0?`${s} other referenced variable(s) already in step with ${t}.`:`${s} referenced variable(s) already in step with ${t}.`);let i=sn(o,"stage-only");if(i.length>0)console.log(`${i.length} referenced variable(s) live only on ${t}: ${i.join(", ")}`);let a=sn(o,"unresolved");if(a.length>0)N(`${a.length} referenced variable(s) with no value here or on ${t}: ${a.join(", ")}. Put them in .env.local, or run \`broods env set <NAME> --stage ${n.stage}\`.`)}function Kn(e){if(H(e,"--all"))return"DEBUG";let n=R(e,"--level");if(n===void 0&&H(e,"--level"))throw Error("Missing value for --level. Use DEBUG, INFO, WARN, or ERROR.");if(!n)return"WARN";let t=n.toUpperCase();if(t==="DEBUG")return"DEBUG";if(t==="INFO")return"INFO";if(t==="WARN"||t==="WARNING")return"WARN";if(t==="ERROR")return"ERROR";throw Error(`Unknown log level: ${n}. Use DEBUG, INFO, WARN, or ERROR.`)}async function zi(e){m();let n=R(e,"--project")??process.env.BROODS_PROJECT,t=R(e,"--stage")??S();if(!n)throw Error("Project name is required. Pass --project <name> or set BROODS_PROJECT in .env.local.");if(!t)throw Error("Stage name is required. Pass --stage <name> or set BROODS_STAGE in .env.local.");return{project:n,stage:t}}async function Fe(e){let n=await zi(e),t=m(),o=await We(R(e,"--dashboard-url")??t.dashboardUrl??le,R(e,"--base-url")),r=new J({baseUrl:o.baseUrl,token:o.token}),s=await r.mintStageSession(n.project,n.stage),i=s,a=async()=>{let c=i??await r.mintStageSession(n.project,n.stage);return i=void 0,c.token};return{baseUrl:o.baseUrl,credential:a,project:s.projectSlug,stage:s.stageSlug}}function Eo(e){return e==="WARN"?" (--all for INFO too)":""}function Hn(e,n){console.error(je(`Reconnecting to live logs (attempt ${e}): ${n}`,{stream:"stderr"}))}function Vn(e){let n=new Date(e.ts).toISOString().slice(11,23),t=e.level.padEnd(5),o=Nn(e.message);return`${n} ${t} ${e.eventType} ${o}`}async function Ji(e){let n=await Fe(e),{project:t,stage:o}=n,r=Kn(e),s=new AbortController,i=()=>s.abort();process.on("SIGINT",i),console.log(`Streaming live logs for ${t}/${o} [${r}+]`+Eo(r)+", Ctrl+C to stop");try{for await(let a of qe(n,{backfill:0,minLevel:r,signal:s.signal,onReconnect:Hn}))console.log(Vn(a))}catch(a){if(!s.signal.aborted)console.error(a instanceof Error?a.message:String(a)),process.exitCode=1}finally{process.off("SIGINT",i)}}async function qi(e){if(H(e,"--doctor")){await Xi(H(e,"--request"));return}let n=oe(e)[0];if(!n){console.log(Ee("machine",e));return}let{runMachineDaemon:t}=await import("../chunk-ghba1t00.js"),{baseUrl:o,credential:r}=await Fe(e),s=G(R(e,"--cwd")??process.cwd()),i=H(e,"--computer"),a=R(e,"--mcp"),c=H(e,"--force"),d=new AbortController,l=()=>d.abort();process.on("SIGINT",l),console.log(`Connecting ${n} to ${o} (cwd ${s}${i?", computer use on":""}), Ctrl+C to stop`);try{await t({baseUrl:o,computer:i,credential:r,cwd:s,force:c,log:(u)=>console.log(u),mcpFile:a?G(a):void 0,sandbox:n,signal:d.signal})}catch(u){console.error(u instanceof Error?u.message:String(u)),process.exitCode=1}finally{process.off("SIGINT",l)}}async function Xi(e){try{let{startDesktop:n}=await import("../chunk-5tnnqapc.js"),{display:t,driver:o,permissions:r}=await n(e);o.stop();let s=(i)=>i?"granted":"missing";if(console.log(`screenshot frame ${t.width}x${t.height} (scale ${t.scale.toFixed(2)})`),console.log(`screen recording ${s(r.screenRecording)}`),console.log(`accessibility ${s(r.accessibility)}`),!r.screenRecording||!r.accessibility)console.log(e?"Approve the prompts, or add this terminal under System Settings > Privacy & Security, then run again.":"Run `broods machine --doctor --request` to show the macOS prompts."),process.exitCode=1}catch(n){console.error(n instanceof Error?n.message:String(n)),process.exitCode=1}}async function Zi(e){let n=await Fe(e),{project:t,stage:o}=n,r=R(e,"--sandbox");if(H(e,"--sandbox")&&!D(r))throw Error("--sandbox needs the instance log id, the UUID shown in the dashboard Instances sheet.");let s=r?"DEBUG":Kn(e),i=Number(R(e,"--limit")??R(e,"-n")??100),a=H(e,"--json"),c=new AbortController,d=()=>c.abort();process.on("SIGINT",d),console.log(`Logs for ${t}/${o}`+(r?` sandbox ${r}`:"")+` [${s}+]`+Eo(s)+` (backfill ${i}), Ctrl+C to stop`);try{for await(let l of qe(n,{backfill:i,minLevel:s,...r?{sandboxId:r}:{},signal:c.signal,onReconnect:Hn}))if(a)console.log(JSON.stringify(l));else console.log(Vn(l))}catch(l){if(!c.signal.aborted)console.error(l instanceof Error?l.message:String(l)),process.exitCode=1}finally{process.off("SIGINT",d)}}async function Qi(e){let[n]=oe(e);if(!L(n))throw Error(`Missing or malformed trace id: 32 lowercase hex characters, as the dashboard copies it.
422
+ ${ee("env")}`);let{manifest:c,config:d}=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"dev"}),l=await re(R(e,"--base-url")??d.baseUrl),u=new q({baseUrl:l.baseUrl,token:l.token}),w=`${c.project}/${c.stage}`;if(i){await Yi(u,c,w);return}if(o){let I=await u.listEnv(c.project,c.stage);if(I.length===0){console.log(`No environment variables set for ${w}.`);return}console.log(`Environment variables for ${w} (values hidden):`);for(let P of I)console.log(` ${P.name}`);return}if(s){let I=await u.getEnv(c.project,c.stage,t);if(I===null){console.error(`${t} is not set for ${w}`),process.exitCode=1;return}console.log(I);return}if(r){await u.removeEnv(c.project,c.stage,t),X(`Removed ${t} from ${w}`);return}let O=await Yt(t);await u.setEnv(c.project,c.stage,t,O),X(`Stored ${t} for ${w}`)}async function Yi(e,n,t){let o=await Fn(e,n);if(o.length===0){console.log('No env("NAME") references in this project.');return}let r=await So(e,n,o);if(r.length>0)Rn(r);let s=sn(o,"synced").length;console.log(r.length>0?`${s} other referenced variable(s) already in step with ${t}.`:`${s} referenced variable(s) already in step with ${t}.`);let i=sn(o,"stage-only");if(i.length>0)console.log(`${i.length} referenced variable(s) live only on ${t}: ${i.join(", ")}`);let a=sn(o,"unresolved");if(a.length>0)N(`${a.length} referenced variable(s) with no value here or on ${t}: ${a.join(", ")}. Put them in .env.local, or run \`broods env set <NAME> --stage ${n.stage}\`.`)}function Kn(e){if(V(e,"--all"))return"DEBUG";let n=R(e,"--level");if(n===void 0&&V(e,"--level"))throw Error("Missing value for --level. Use DEBUG, INFO, WARN, or ERROR.");if(!n)return"WARN";let t=n.toUpperCase();if(t==="DEBUG")return"DEBUG";if(t==="INFO")return"INFO";if(t==="WARN"||t==="WARNING")return"WARN";if(t==="ERROR")return"ERROR";throw Error(`Unknown log level: ${n}. Use DEBUG, INFO, WARN, or ERROR.`)}async function zi(e){m();let n=R(e,"--project")??process.env.BROODS_PROJECT,t=R(e,"--stage")??S();if(!n)throw Error("Project name is required. Pass --project <name> or set BROODS_PROJECT in .env.local.");if(!t)throw Error("Stage name is required. Pass --stage <name> or set BROODS_STAGE in .env.local.");return{project:n,stage:t}}async function Fe(e){let n=await zi(e),t=m(),o=await We(R(e,"--dashboard-url")??t.dashboardUrl??le,R(e,"--base-url")),r=new q({baseUrl:o.baseUrl,token:o.token}),s=await r.mintStageSession(n.project,n.stage),i=s,a=async()=>{let c=i??await r.mintStageSession(n.project,n.stage);return i=void 0,c.token};return{baseUrl:o.baseUrl,credential:a,project:s.projectSlug,stage:s.stageSlug}}function Eo(e){return e==="WARN"?" (--all for INFO too)":""}function Hn(e,n){console.error(je(`Reconnecting to live logs (attempt ${e}): ${n}`,{stream:"stderr"}))}function Vn(e){let n=new Date(e.ts).toISOString().slice(11,23),t=e.level.padEnd(5),o=Nn(e.message);return`${n} ${t} ${e.eventType} ${o}`}async function Ji(e){let n=await Fe(e),{project:t,stage:o}=n,r=Kn(e),s=new AbortController,i=()=>s.abort();process.on("SIGINT",i),console.log(`Streaming live logs for ${t}/${o} [${r}+]`+Eo(r)+", Ctrl+C to stop");try{for await(let a of qe(n,{backfill:0,minLevel:r,signal:s.signal,onReconnect:Hn}))console.log(Vn(a))}catch(a){if(!s.signal.aborted)console.error(a instanceof Error?a.message:String(a)),process.exitCode=1}finally{process.off("SIGINT",i)}}async function qi(e){if(V(e,"--doctor")){await Xi(V(e,"--request"));return}let n=oe(e)[0];if(!n){console.log(Ee("machine",e));return}let{runMachineDaemon:t}=await import("../chunk-5ks36kqn.js"),{baseUrl:o,credential:r}=await Fe(e),s=G(R(e,"--cwd")??process.cwd()),i=V(e,"--computer"),a=R(e,"--mcp"),c=V(e,"--force"),d=new AbortController,l=()=>d.abort();process.on("SIGINT",l),console.log(`Connecting ${n} to ${o} (cwd ${s}${i?", computer use on":""}), Ctrl+C to stop`);try{await t({baseUrl:o,computer:i,credential:r,cwd:s,force:c,log:(u)=>console.log(u),mcpFile:a?G(a):void 0,sandbox:n,signal:d.signal})}catch(u){console.error(u instanceof Error?u.message:String(u)),process.exitCode=1}finally{process.off("SIGINT",l)}}async function Xi(e){try{let{startDesktop:n}=await import("../chunk-5tnnqapc.js"),{display:t,driver:o,permissions:r}=await n(e);o.stop();let s=(i)=>i?"granted":"missing";if(console.log(`screenshot frame ${t.width}x${t.height} (scale ${t.scale.toFixed(2)})`),console.log(`screen recording ${s(r.screenRecording)}`),console.log(`accessibility ${s(r.accessibility)}`),!r.screenRecording||!r.accessibility)console.log(e?"Approve the prompts, or add this terminal under System Settings > Privacy & Security, then run again.":"Run `broods machine --doctor --request` to show the macOS prompts."),process.exitCode=1}catch(n){console.error(n instanceof Error?n.message:String(n)),process.exitCode=1}}async function Zi(e){let n=await Fe(e),{project:t,stage:o}=n,r=R(e,"--sandbox");if(V(e,"--sandbox")&&!D(r))throw Error("--sandbox needs the instance log id, the UUID shown in the dashboard Instances sheet.");let s=r?"DEBUG":Kn(e),i=Number(R(e,"--limit")??R(e,"-n")??100),a=V(e,"--json"),c=new AbortController,d=()=>c.abort();process.on("SIGINT",d),console.log(`Logs for ${t}/${o}`+(r?` sandbox ${r}`:"")+` [${s}+]`+Eo(s)+` (backfill ${i}), Ctrl+C to stop`);try{for await(let l of qe(n,{backfill:i,minLevel:s,...r?{sandboxId:r}:{},signal:c.signal,onReconnect:Hn}))if(a)console.log(JSON.stringify(l));else console.log(Vn(l))}catch(l){if(!c.signal.aborted)console.error(l instanceof Error?l.message:String(l)),process.exitCode=1}finally{process.off("SIGINT",d)}}async function Qi(e){let[n]=oe(e);if(!L(n))throw Error(`Missing or malformed trace id: 32 lowercase hex characters, as the dashboard copies it.
423
423
 
424
- ${ee("trace")}`);let t=await Fe(e),o=(await _t(t,n)).toSorted((a,c)=>a.startTimeMs-c.startTimeMs);if(H(e,"--json")){console.log(JSON.stringify(o,null,2));return}console.log(`Trace ${n} in ${t.project}/${t.stage}`);let r=new Set(o.map((a)=>a.spanId)),s=Map.groupBy(o,(a)=>a.parentSpanId&&a.parentSpanId!==a.spanId&&r.has(a.parentSpanId)?a.parentSpanId:""),i=(a,c)=>{for(let d of s.get(a)??[])console.log(ea(d,c)),i(d.spanId,c+1)};i("",0)}function ea(e,n){let t=new Date(e.startTimeMs).toISOString().slice(11,23),o=" ".repeat(n),r=e.attributes?.["tool.name"],s=typeof r==="string"?`${e.name} ${r}`:e.name,i=`${t} ${e.status.padEnd(11)} ${o}`,a=`${i}${s} ${On(e.durationMs)}`;if(!e.error)return Nn(a);let c=" ".repeat(i.length),d=e.error.replaceAll(/\r\n?|\n/g,`
424
+ ${ee("trace")}`);let t=await Fe(e),o=(await _t(t,n)).toSorted((a,c)=>a.startTimeMs-c.startTimeMs);if(V(e,"--json")){console.log(JSON.stringify(o,null,2));return}console.log(`Trace ${n} in ${t.project}/${t.stage}`);let r=new Set(o.map((a)=>a.spanId)),s=Map.groupBy(o,(a)=>a.parentSpanId&&a.parentSpanId!==a.spanId&&r.has(a.parentSpanId)?a.parentSpanId:""),i=(a,c)=>{for(let d of s.get(a)??[])console.log(ea(d,c)),i(d.spanId,c+1)};i("",0)}function ea(e,n){let t=new Date(e.startTimeMs).toISOString().slice(11,23),o=" ".repeat(n),r=e.attributes?.["tool.name"],s=typeof r==="string"?`${e.name} ${r}`:e.name,i=`${t} ${e.status.padEnd(11)} ${o}`,a=`${i}${s} ${On(e.durationMs)}`;if(!e.error)return Nn(a);let c=" ".repeat(i.length),d=e.error.replaceAll(/\r\n?|\n/g,`
425
425
  ${c} `);return Nn(`${a}
426
426
  ${c}error: ${d}`)}async function na(e){let[n,t]=oe(e);if(!n){console.log(Ee("agent",e));return}if(n==="list"||n==="ls"){await ta(e);return}if(n==="get"){await oa(t,e);return}throw Error(`Unknown agent subcommand: ${n}
427
427
 
428
- ${ee("agent")}`)}async function ko(e){let{manifest:n,config:t}=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"dev"}),o=await re(R(e,"--base-url")??t.baseUrl),r=await new J({baseUrl:o.baseUrl,token:o.token}).getManifest(n.project,n.stage),s=n.resources.filter((i)=>i.kind==="agent").map((i)=>({name:i.name,config:i.config??{},agentId:r?.ids.agents[i.name]}));return{manifest:n,agents:s}}async function ta(e){let{manifest:n,agents:t}=await ko(e);if(t.length===0){console.log(`No agents declared in ${n.project}/${n.stage}.`);return}console.log(`Agents in ${n.project}/${n.stage}:`);for(let o of t){let r=$o(o.config),s=o.config.publicAccess===!0?"public":"private",i=o.agentId?o.agentId:"not deployed";console.log(` ${o.name} [${s}] ${r} (${i})`)}}async function oa(e,n){if(!e)throw Error(`Missing agent name.
428
+ ${ee("agent")}`)}async function ko(e){let{manifest:n,config:t}=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"dev"}),o=await re(R(e,"--base-url")??t.baseUrl),r=await new q({baseUrl:o.baseUrl,token:o.token}).getManifest(n.project,n.stage),s=n.resources.filter((i)=>i.kind==="agent").map((i)=>({name:i.name,config:i.config??{},agentId:r?.ids.agents[i.name]}));return{manifest:n,agents:s}}async function ta(e){let{manifest:n,agents:t}=await ko(e);if(t.length===0){console.log(`No agents declared in ${n.project}/${n.stage}.`);return}console.log(`Agents in ${n.project}/${n.stage}:`);for(let o of t){let r=$o(o.config),s=o.config.publicAccess===!0?"public":"private",i=o.agentId?o.agentId:"not deployed";console.log(` ${o.name} [${s}] ${r} (${i})`)}}async function oa(e,n){if(!e)throw Error(`Missing agent name.
429
429
 
430
430
  ${ee("agent")}`);let{manifest:t,agents:o}=await ko(n),r=o.find((w)=>w.name===e);if(!r)throw Error(`Unknown local agent: ${e}`);let s=r.config,i=[s.sandboxes].flat().filter((w)=>typeof w==="string").map((w,O)=>O===0?`${w} (default)`:w),a=Array.isArray(s.workspaces)?s.workspaces.map((w)=>typeof w==="string"?w:w.name).filter(Boolean):[],c=be(s.tools)?Object.keys(s.tools):[],d=be(s.channels)?Object.keys(s.channels):[],l=be(s.subagent)&&Array.isArray(s.subagent.allowed)?s.subagent.allowed.map((w)=>typeof w==="string"?w:w.name).filter(Boolean):[],u=be(s.hooks)&&Array.isArray(s.hooks.webhooks)?s.hooks.webhooks.filter(be):[];if(console.log(`Agent: ${r.name}`),console.log(` Project/Stage: ${t.project}/${t.stage}`),console.log(` Deployed id: ${r.agentId??"not deployed"}`),console.log(` Public access: ${s.publicAccess===!0?"public (SSE/WebSocket enabled)":"private (secured by default)"}`),console.log(` Model: ${$o(s)}`),console.log(` Sandboxes: ${i.length>0?i.join(", "):"none"}`),console.log(` Workspaces: ${a.length>0?a.join(", "):"none"}`),console.log(` Tools: ${c.length>0?c.join(", "):"none"}`),console.log(` Subagents: ${l.length>0?l.join(", "):"none"}`),console.log(` Channels: ${d.length>0?d.join(", "):"none"}`),u.length>0)console.log(" Webhooks:"),u.forEach((w,O)=>{let I=Array.isArray(w.events)&&w.events.length>0?w.events.join(", "):"all events",P=w.enabled===!1?"disabled":"enabled",j=typeof w.url==="string"?w.url:"none";console.log(` [${O}] ${P} → ${j} (${I})`)})}function $o(e){let n=be(e.model)?e.model:{},t=typeof n.provider==="string"?n.provider:void 0,o=typeof n.modelId==="string"?n.modelId:void 0;if(t&&o)return`${t}/${o}`;return o??t??"unconfigured model"}async function ra(e){let[n,...t]=oe(e);if(!n)throw Error(`Missing agent name.
431
431
 
432
- ${ee("run")}`);let o=t.join(" "),r=Boolean(process.stdin.isTTY&&process.stdout.isTTY);if(!r&&!o)throw Error("A prompt is required when output is redirected: broods run <agent> <prompt>. Run it in a terminal to chat without one.");let{manifest:s,config:i}=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"dev"}),a=await re(R(e,"--base-url")??i.baseUrl),c=s.resources.find((j)=>j.kind==="agent"&&j.name===n);if(!c)throw Error(`Unknown local agent: ${n}`);let l=(await new J({baseUrl:a.baseUrl,token:a.token}).getManifest(s.project,s.stage))?.ids.agents[n];if(!l)throw Error(`Agent ${n} is not synced yet. Run broods dev --once or broods deploy first.`);let u=await new J({baseUrl:a.baseUrl,token:a.token}).getRuntimeKey(s.project,s.stage).catch(()=>null);if(u?.apiKey)await Se("BROODS_API_KEY",u.apiKey);if(c.config.publicAccess!==!0)N(`Agent "${n}" does not set publicAccess: true. The public endpoint is secured by default; if the deployed agent has not enabled it, this run will be refused.`);let w=new M({baseUrl:R(e,"--base-url")??process.env.BROODS_BASE_URL??process.env.BROODS_HOST??a.baseUrl,...u?.apiKey?{apiKey:u.apiKey}:{}}),O={kind:"agent",name:n,id:l,project:s.project,stage:s.stage,...u?.endpointId?{endpointId:u.endpointId}:{},...u?.projectSlug?{projectSlug:u.projectSlug}:{},...u?.stageSlug?{stageSlug:u.stageSlug}:{}},{runAgentTui:I,streamAgentText:P}=await import("../chunk-hkbecyy0.js");try{if(r){await I({client:w,agent:O,...o?{prompt:o}:{}});return}await P({client:w,agent:O,prompt:o})}catch(j){if((j instanceof Error?j.message:String(j)).includes("public_access_disabled"))throw Error(`Agent "${n}" is not publicly accessible (secured by default). Set publicAccess: true in its config and redeploy, or enable Public access in the dashboard.`);throw j}}async function an(e,n,t){try{await ve(e,n,{flag:t?"w":"wx"})}catch(o){if(o.code==="EEXIST")return;throw o}}async function Ro(){let e=G(process.cwd(),".gitignore"),n=await ke(e);if(n.split(/\r?\n/).some((r)=>[".env.local","/.env.local",".env*.local",".env.*",".env*"].includes(r.trim())))return;let o=n?`${n.trimEnd()}
432
+ ${ee("run")}`);let o=t.join(" "),r=Boolean(process.stdin.isTTY&&process.stdout.isTTY);if(!r&&!o)throw Error("A prompt is required when output is redirected: broods run <agent> <prompt>. Run it in a terminal to chat without one.");let{manifest:s,config:i}=await ue({project:R(e,"--project"),stage:R(e,"--stage"),command:"dev"}),a=await re(R(e,"--base-url")??i.baseUrl),c=s.resources.find((j)=>j.kind==="agent"&&j.name===n);if(!c)throw Error(`Unknown local agent: ${n}`);let l=(await new q({baseUrl:a.baseUrl,token:a.token}).getManifest(s.project,s.stage))?.ids.agents[n];if(!l)throw Error(`Agent ${n} is not synced yet. Run broods dev --once or broods deploy first.`);let u=await new q({baseUrl:a.baseUrl,token:a.token}).getRuntimeKey(s.project,s.stage).catch(()=>null);if(u?.apiKey)await Se("BROODS_API_KEY",u.apiKey);if(c.config.publicAccess!==!0)N(`Agent "${n}" does not set publicAccess: true. The public endpoint is secured by default; if the deployed agent has not enabled it, this run will be refused.`);let w=new M({baseUrl:R(e,"--base-url")??process.env.BROODS_BASE_URL??process.env.BROODS_HOST??a.baseUrl,...u?.apiKey?{apiKey:u.apiKey}:{}}),O={kind:"agent",name:n,id:l,project:s.project,stage:s.stage,...u?.endpointId?{endpointId:u.endpointId}:{},...u?.projectSlug?{projectSlug:u.projectSlug}:{},...u?.stageSlug?{stageSlug:u.stageSlug}:{}},{runAgentTui:I,streamAgentText:P}=await import("../chunk-qsx1j9kf.js");try{if(r){await I({client:w,agent:O,...o?{prompt:o}:{}});return}await P({client:w,agent:O,prompt:o})}catch(j){if((j instanceof Error?j.message:String(j)).includes("public_access_disabled"))throw Error(`Agent "${n}" is not publicly accessible (secured by default). Set publicAccess: true in its config and redeploy, or enable Public access in the dashboard.`);throw j}}async function an(e,n,t){try{await ve(e,n,{flag:t?"w":"wx"})}catch(o){if(o.code==="EEXIST")return;throw o}}async function Ro(){let e=G(process.cwd(),".gitignore"),n=await ke(e);if(n.split(/\r?\n/).some((r)=>[".env.local","/.env.local",".env*.local",".env.*",".env*"].includes(r.trim())))return;let o=n?`${n.trimEnd()}
433
433
  .env*.local
434
434
  `:`.env*.local
435
435
  `;await ve(e,o,"utf8")}async function Oo(){let e=G(process.cwd(),y,".gitignore"),n=await ke(e),o=["_generated",".cache"].filter((s)=>!n.split(/\r?\n/).some((i)=>i.trim()===s));if(o.length===0)return;let r=n?n.trimEnd()+`
@@ -440,10 +440,10 @@ ${ee("run")}`);let o=t.join(" "),r=Boolean(process.stdin.isTTY&&process.stdout.i
440
440
  `;await ve(e,r,"utf8")}async function Yn(e){let n=G(process.cwd(),".env.local"),t=await ke(n),o=Co(t),r={BROODS_DASHBOARD_URL:e.dashboardUrl,BROODS_BASE_URL:e.baseUrl,BROODS_PROJECT:e.project,BROODS_STAGE:e.stage,BROODS_REGION:e.region},s=t?t.replace(/\n?$/,`
441
441
  `).split(/\n/):["# Local broods CLI settings. Tokens are stored outside the repo."],i=!1;for(let[c,d]of Object.entries(r)){if(!d)continue;if(o[c]!==void 0&&!e.force)continue;let l=s.findIndex((u)=>u.trim().startsWith(`${c}=`));if(l>=0)s[l]=`${c}=${cn(d)}`;else s.push(`${c}=${cn(d)}`);if(process.env[c]===void 0)process.env[c]=d;i=!0}if(!i&&t)return;let a=`${s.filter((c,d,l)=>!(c===""&&d===l.length-1)).join(`
442
442
  `)}
443
- `;await B(n,a),await Ro()}async function Se(e,n){let t=G(process.cwd(),".env.local"),o=await ke(t),r=o?o.replace(/\n?$/,`
443
+ `;await F(n,a),await Ro()}async function Se(e,n){let t=G(process.cwd(),".env.local"),o=await ke(t),r=o?o.replace(/\n?$/,`
444
444
  `).split(/\n/):["# Local broods CLI settings. Tokens are stored outside the repo."],s=r.findIndex((a)=>a.trim().startsWith(`${e}=`));if(s>=0)r[s]=`${e}=${cn(n)}`;else r.push(`${e}=${cn(n)}`);process.env[e]=n;let i=`${r.filter((a,c,d)=>!(a===""&&c===d.length-1)).join(`
445
445
  `)}
446
- `;await B(t,i),await Ro()}async function ke(e){try{return await co(e,"utf8")}catch(n){if(n.code==="ENOENT")return"";throw n}}function Co(e){let n={};for(let t of e.split(/\r?\n/)){let o=t.trim();if(!o||o.startsWith("#"))continue;let r=o.indexOf("=");if(r<=0)continue;n[o.slice(0,r).trim()]=o.slice(r+1).trim()}return n}function cn(e){return JSON.stringify(e)}function Ae(e){return Xs(G(e)).replace(/^@/,"").replace(/\//g,"-").replace(/[^A-Za-z0-9_-]+/g,"-").replace(/^-+|-+$/g,"")||"broods-app"}async function sa(){let e=G(process.cwd(),y),n=[];await zn(e,n);let t=lo("sha256");for(let o of n.sort())t.update(Zs(e,o)),t.update("\x00"),t.update(await co(o)),t.update("\x00");return t.digest("hex")}async function zn(e,n){let t=await zs(e,{withFileTypes:!0});for(let o of t){let r=Me(e,o.name);if(o.isDirectory()){if(o.name===b||o.name==="generated"||o.name===".cache")continue;await zn(r,n);continue}if(o.isFile()&&(o.name.endsWith(".ts")||o.name.endsWith(".md")))n.push(r)}}function ia(e){return e.split(/[\\/]/).some((n)=>n===b||n==="generated"||n===".cache")}function Ao(){return`import { defineAgent, defineSandbox, env } from "broods";
446
+ `;await F(t,i),await Ro()}async function ke(e){try{return await co(e,"utf8")}catch(n){if(n.code==="ENOENT")return"";throw n}}function Co(e){let n={};for(let t of e.split(/\r?\n/)){let o=t.trim();if(!o||o.startsWith("#"))continue;let r=o.indexOf("=");if(r<=0)continue;n[o.slice(0,r).trim()]=o.slice(r+1).trim()}return n}function cn(e){return JSON.stringify(e)}function Ae(e){return Xs(G(e)).replace(/^@/,"").replace(/\//g,"-").replace(/[^A-Za-z0-9_-]+/g,"-").replace(/^-+|-+$/g,"")||"broods-app"}async function sa(){let e=G(process.cwd(),y),n=[];await zn(e,n);let t=lo("sha256");for(let o of n.sort())t.update(Zs(e,o)),t.update("\x00"),t.update(await co(o)),t.update("\x00");return t.digest("hex")}async function zn(e,n){let t=await zs(e,{withFileTypes:!0});for(let o of t){let r=Me(e,o.name);if(o.isDirectory()){if(o.name===b||o.name==="generated"||o.name===".cache")continue;await zn(r,n);continue}if(o.isFile()&&(o.name.endsWith(".ts")||o.name.endsWith(".md")))n.push(r)}}function ia(e){return e.split(/[\\/]/).some((n)=>n===b||n==="generated"||n===".cache")}function Ao(){return`import { defineAgent, defineSandbox, env } from "broods";
447
447
 
448
448
  // A Lambda sandbox: a fresh, ephemeral bash environment created per run.
449
449
  export const lambdaSandbox = defineSandbox({
@@ -472,4 +472,4 @@ export const myAgent = defineAgent({
472
472
  // only reachable via internal endpoints or channel webhooks.
473
473
  publicAccess: true,
474
474
  });
475
- `}function aa(){if("bun"in process.versions)return;if(typeof qs.registerHooks==="function")return;throw Error(`broods needs Node ${Ue.engines.node.replace(">=","")} or newer, or Bun. This is Node ${process.version}.`)}function ca(e,n){if(e==="status")throw Error("status was renamed to whoami. Run `broods whoami`.");if(H(n,"--env")||R(n,"--env")!==void 0)throw Error("--env was renamed to --stage. Pass --stage <name> instead.");m();let t=process.env.BROODS_ENVIRONMENT;if(t!==void 0&&process.env.BROODS_STAGE===void 0)throw Error(`BROODS_ENVIRONMENT was renamed to BROODS_STAGE. Rename the key in .env.local (it is currently set to "${t}").`)}async function la(){let e=m(),n=k(),{createBroodsMcpServer:t,serveBroodsMcp:o}=await import("../chunk-9ft10pkr.js"),r=n?new J({baseUrl:n.baseUrl,token:n.token}):null,s=t({allowDestructive:process.env.BROODS_MCP_ALLOW_DESTRUCTIVE==="1"&&C("BROODS_MCP_ALLOW_DESTRUCTIVE"),cli:r,scope:{project:e.project,stage:e.stage}});o(s),await new Promise((i)=>{process.stdin.on("close",i)})}ii().catch((e)=>{Wt(e instanceof Error?e.message:String(e)),process.exit(1)});export{Q,se,x};
475
+ `}function aa(){if("bun"in process.versions)return;if(typeof qs.registerHooks==="function")return;throw Error(`broods needs Node ${Ue.engines.node.replace(">=","")} or newer, or Bun. This is Node ${process.version}.`)}function ca(e,n){if(e==="status")throw Error("status was renamed to whoami. Run `broods whoami`.");if(V(n,"--env")||R(n,"--env")!==void 0)throw Error("--env was renamed to --stage. Pass --stage <name> instead.");m();let t=process.env.BROODS_ENVIRONMENT;if(t!==void 0&&process.env.BROODS_STAGE===void 0)throw Error(`BROODS_ENVIRONMENT was renamed to BROODS_STAGE. Rename the key in .env.local (it is currently set to "${t}").`)}async function la(){let e=m(),n=k(),{createBroodsMcpServer:t,serveBroodsMcp:o}=await import("../chunk-14wmsrrt.js"),r=n?new q({baseUrl:n.baseUrl,token:n.token}):null,s=t({allowDestructive:process.env.BROODS_MCP_ALLOW_DESTRUCTIVE==="1"&&C("BROODS_MCP_ALLOW_DESTRUCTIVE"),cli:r,scope:{project:e.project,stage:e.stage}});o(s),await new Promise((i)=>{process.stdin.on("close",i)})}ii().catch((e)=>{Wt(e instanceof Error?e.message:String(e)),process.exit(1)});export{Q,se,x};