commonswarm 0.1.37 → 0.1.38

package/cswarm.cjs

@@ -28940,6 +28940,21 @@ function parseMemberRow(value) {
     display_name: row.display_name
   };
 }
+function parseAgentIdentity(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("member read returned a malformed credential identity");
+  }
+  const row = value;
+  if (row.credential_valid !== true) {
+    throw new Error("member read returned a malformed credential validity");
+  }
+  return {
+    credential_valid: true,
+    owner_user_id: checkedUuid2(row.owner_user_id, "identity owner_user_id"),
+    principal_id: checkedUuid2(row.principal_id, "identity principal_id"),
+    workspace_id: checkedUuid2(row.workspace_id, "identity workspace_id")
+  };
+}
 async function readAgentSignalDirectory(target2, token, workspaceId2, fetcherOrOptions = fetch) {
   const options = normalizeReadOptions(fetcherOrOptions);
   let result;
@@ -28983,7 +28998,8 @@ async function readAgentSignalDirectory(target2, token, workspaceId2, fetcherOrO
   })();
   return {
     members: payload.members.map(parseMemberRow),
-    agents
+    agents,
+    ...payload.identity === void 0 ? {} : { identity: parseAgentIdentity(payload.identity) }
   };
 }
 function resolveSignalRecipient(selector, directory) {
@@ -38743,6 +38759,7 @@ async function runListenerHookCheck(options = {}) {
 var import_meta = {};
 var KNOWN_FLAGS = /* @__PURE__ */ new Set([
   "about",
+  "agent-token-file",
   "agent-token-stdin",
   "all-devices",
   "anon-key",
@@ -38832,8 +38849,8 @@ var ACCEPTED_AGENT_CREDENTIAL_MESSAGES = [
   AGENT_CREDENTIAL_MESSAGE_D088
 ];
 function packageVersion() {
-  if ("0.1.37".length > 0) {
-    return "0.1.37";
+  if ("0.1.38".length > 0) {
+    return "0.1.38";
   }
   try {
     const value = JSON.parse(
@@ -38922,7 +38939,7 @@ var Arguments = class {
 };
 var TARGET_FLAGS = ["url", "anon-key", "force-file-store"];
 var ROUTE_FLAGS = ["workspace-id", "repo-mapping-id"];
-var CREDENTIAL_FLAGS = ["agent-token-stdin"];
+var CREDENTIAL_FLAGS = ["agent-token-file", "agent-token-stdin"];
 var TASK_FLAGS = [
   "task-id",
   "slug",
@@ -38938,6 +38955,8 @@ var TASK_FLAGS = [
 var UsageError = class extends Error {
 };
 function usage() {
+  const agentCredential2 = "[--agent-token-file <path> | --agent-token-stdin]";
+  const requiredAgentCredential = "(--agent-token-file <path> | --agent-token-stdin)";
   return `cswarm ${CLI_BUILD_VERSION} (protocol ${CLIENT_PROTOCOL_VERSION})
 
 Usage:
@@ -38947,23 +38966,24 @@ Usage:
   cswarm target set --url <project-url> --anon-key <key> [--json]
   cswarm target clear [--json]
   cswarm status [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--json]
-  cswarm members [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--agent-token-stdin] [--json]
-  cswarm working-on "<what>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--about <ref>] [--until <dur>] [--json]
-  cswarm note "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--to <member|agent>] [--about <ref>] [--until <dur>] [--json]  # text: 1..8000 characters
-  cswarm ask "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--to <member|agent>] [--about <ref>] [--until <dur>] [--wait <seconds>] [--json]  # text: 1..8000 characters
-  cswarm reply <signal-id> "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--until <dur>] [--json]
-  cswarm receipt <signal-id> --agent-token-stdin [--url <url> --anon-key <key>] --workspace-id <uuid> [--json]
-  cswarm feed [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--about <ref>] [--kind <kind>] [--since <timestamp>] [--limit <n>] [--include-stale] [--json]
-  cswarm inbox [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--kind <kind>] [--about <ref>] [--since <timestamp>] [--limit <n>] [--include-stale] [--wait <seconds>] [--json]
-  cswarm inbox --notify --agent-token-stdin [--url <url> --anon-key <key>] --workspace-id <uuid> [--json]
-  cswarm inbox --follow --ndjson [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--kind <kind>] [--about <ref>] [--since <timestamp>] [--limit <n>] [--include-stale]
-  cswarm file put <local-path> [--name <name>] [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--agent-token-stdin] [--json]
-  cswarm file ls [--include-tombstoned] [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--agent-token-stdin] [--json]
-  cswarm file get <name|file-id> [--version <n>] [--out <local-path>] [--force] [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--agent-token-stdin] [--json]
-  cswarm file rm <name|file-id> [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--agent-token-stdin] [--json]
-  cswarm file restore <name|file-id> [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--agent-token-stdin] [--json]
-  cswarm feedback "<text>" --kind bug|idea|friction [--about <ref>] [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--agent-token-stdin] [--json]
-  cswarm listen start --agent-token-stdin [--url <url> --anon-key <key>] --workspace-id <uuid> --provider grok|opencode|claude|codex [--cwd <absolute-path>] [--model <model>] [--effort <level>] [--permissions deny|allow] [--grok-executable <path>] [--opencode-executable <path>] [--claude-executable <path>] [--codex-executable <path>] [--turn-budget <duration>] [--route worker|main|split] [--defer-over <chars>] [--foreground] [--json]
+  cswarm whoami ${requiredAgentCredential} [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--json]
+  cswarm members [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--json]
+  cswarm working-on "<what>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--about <ref>] [--until <dur>] [--json]
+  cswarm note "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--to <member|agent>] [--about <ref>] [--until <dur>] [--json]  # text: 1..8000 characters
+  cswarm ask "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--to <member|agent>] [--about <ref>] [--until <dur>] [--wait <seconds>] [--json]  # text: 1..8000 characters
+  cswarm reply <signal-id> "<text>" [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--until <dur>] [--json]
+  cswarm receipt <signal-id> ${requiredAgentCredential} [--url <url> --anon-key <key>] --workspace-id <uuid> [--json]
+  cswarm feed [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--about <ref>] [--kind <kind>] [--since <timestamp>] [--limit <n>] [--include-stale] [--json]
+  cswarm inbox [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--kind <kind>] [--about <ref>] [--since <timestamp>] [--limit <n>] [--include-stale] [--wait <seconds>] [--json]
+  cswarm inbox --notify ${requiredAgentCredential} [--url <url> --anon-key <key>] --workspace-id <uuid> [--json]
+  cswarm inbox --follow --ndjson [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--kind <kind>] [--about <ref>] [--since <timestamp>] [--limit <n>] [--include-stale]
+  cswarm file put <local-path> [--name <name>] [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--json]
+  cswarm file ls [--include-tombstoned] [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--json]
+  cswarm file get <name|file-id> [--version <n>] [--out <local-path>] [--force] [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--json]
+  cswarm file rm <name|file-id> [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--json]
+  cswarm file restore <name|file-id> [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--json]
+  cswarm feedback "<text>" --kind bug|idea|friction [--about <ref>] [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [--json]
+  cswarm listen start ${requiredAgentCredential} [--url <url> --anon-key <key>] --workspace-id <uuid> --provider grok|opencode|claude|codex [--cwd <absolute-path>] [--model <model>] [--effort <level>] [--permissions deny|allow] [--grok-executable <path>] [--opencode-executable <path>] [--claude-executable <path>] [--codex-executable <path>] [--turn-budget <duration>] [--route worker|main|split] [--defer-over <chars>] [--foreground] [--json]
   cswarm listen status [--url <url> --anon-key <key>] --workspace-id <uuid> --principal-id <uuid> [--json]
   cswarm listen stop [--url <url> --anon-key <key>] --workspace-id <uuid> --principal-id <uuid> [--json]
   cswarm hook check [--cooldown <seconds>]
@@ -38985,26 +39005,33 @@ Usage:
   cswarm principal revoke [--url <url> --anon-key <key>] [--workspace-id <uuid>] --principal-id <uuid>
   cswarm token mint [--url <url> --anon-key <key>] [--workspace-id <uuid>] --principal-id <uuid> --run-id <uuid> --task-id <uuid> --epoch <n> [--ttl-ms <ms>]
   cswarm token revoke [--url <url> --anon-key <key>] [--workspace-id <uuid>] --token-id <uuid>
-  cswarm token revoke --agent-token-stdin [--url <url> --anon-key <key>] --workspace-id <uuid> [--token-id <uuid>]
+  cswarm token revoke ${requiredAgentCredential} [--url <url> --anon-key <key>] --workspace-id <uuid> [--token-id <uuid>]
   cswarm link new [--url <url> --anon-key <key>] [--workspace-id <uuid>] --task-id <uuid> [--ttl-ms <ms>] [--site <origin>] [--json]
   cswarm link revoke [--url <url> --anon-key <key>] [--workspace-id <uuid>] --capability-id <uuid> [--json]
-  cswarm command <kind> [--url <url> --anon-key <key>] [--workspace-id <uuid>] [command fields]
-  cswarm dogfood [--url <url> --anon-key <key>] [--workspace-id <uuid>] --slug <slug> --branch <branch> --head-sha <sha> --evidence <ref>
+  cswarm command <kind> [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} [command fields]
+  cswarm dogfood [--url <url> --anon-key <key>] [--workspace-id <uuid>] ${agentCredential2} --slug <slug> --branch <branch> --head-sha <sha> --evidence <ref>
   cswarm seed-fixture --uid <auth-user-uuid> [--device-id <uuid>] [--workspace-id <uuid>]
 
 Credential selection for command/dogfood:
   default                 refresh the human login from secure storage
+  --agent-token-file      read the credential from an owned 0600 regular file in an owned
+                          0700 directory. The path may appear in argv; the secret never does.
   --agent-token-stdin     read a mint/seed credential artifact, or a bare swm_agt_ token, from
                           stdin. WHICH FORMS ARE ACCEPTED DEPENDS ON WHAT THE SUBCOMMAND DOES
                           WITH THE CREDENTIAL. A subcommand that only reads takes either form.
                           One that persists or references the credential needs the complete
                           JSON artifact, because it needs a field a bare secret does not carry:
+                            whoami        reads server-proven identity -- complete or bare form
                             members       reads only          -- either form
+                            working-on, note, ask, reply, feed, inbox
+                                          signal command/read only         -- either form
                             receipt       reads only          -- either form
                             inbox --notify persists a per-agent cursor -- needs principal_id
                             file put, file ls, file get, file rm, file restore
                                           read and command, nothing persisted -- either form
                             feedback      command only, nothing persisted     -- either form
+                            command, dogfood
+                                          task protocol commands              -- either form
                             listen start  persists durable state, rotates -- needs expires_at
                             hook check    reads the listener's owned 0600 credential state;
                                           never accepts or prints a credential
@@ -39044,7 +39071,7 @@ hook install claude prints the UserPromptSubmit JSON by default and changes the
 project's .claude/settings.json only with --write; uninstall also requires --write.
 
 Invite, legacy token accept, principal create/revoke, human token mint/revoke, link, new, and workspace close require a
-stored human login. Agent self-surrender of a token uses --agent-token-stdin and never takes the secret on argv. Invite-link accept signs in when needed, then accepts and
+stored human login. Agent self-surrender of a token uses --agent-token-file or --agent-token-stdin and never takes the secret on argv. Invite-link accept signs in when needed, then accepts and
 registers one principal. Invitation links, agent credentials, and capability links
 appear only in fresh success responses.
 
@@ -39087,7 +39114,7 @@ workspace only for callers who already hold that full-database credential; it
 grants no new authority and is not a governed product workspace-creation path.`;
 }
 async function target(args) {
-  const mode3 = args.has("agent-token-stdin") ? "agent" : "human";
+  const mode3 = hasAgentCredential(args) ? "agent" : "human";
   try {
     return await resolveCloudTarget({
       explicitUrl: args.optional("url"),
@@ -39211,6 +39238,51 @@ async function stdinCredential() {
   const credential = value.trim();
   return parsedAgentCredential(credential);
 }
+var AgentTokenFileError = class extends Error {
+  constructor(code, message) {
+    super(`[${code}] ${message}`);
+    this.code = code;
+  }
+  code;
+  name = "AgentTokenFileError";
+};
+function hasAgentCredential(args) {
+  return CREDENTIAL_FLAGS.some((flag) => args.has(flag));
+}
+async function agentCredential(args, options = {}) {
+  const fromFile = args.optional("agent-token-file");
+  const fromStdin = args.has("agent-token-stdin");
+  if (fromFile !== void 0 && fromStdin) {
+    throw new Error(
+      "use exactly one agent credential source: --agent-token-file or --agent-token-stdin"
+    );
+  }
+  if (fromFile !== void 0) {
+    let value;
+    try {
+      value = await readSecureJsonFile(fromFile, 4096);
+    } catch (error) {
+      const detail = error instanceof Error ? error.message : "unknown read failure";
+      throw new AgentTokenFileError(
+        "agent_token_file_unreadable",
+        `could not read --agent-token-file securely: ${detail}`
+      );
+    }
+    if (value === null) {
+      throw new AgentTokenFileError(
+        "agent_token_file_missing",
+        `--agent-token-file does not exist: ${fromFile}`
+      );
+    }
+    return parsedAgentCredential(value.trim());
+  }
+  if (fromStdin || options.implicitStdin === true) {
+    return await stdinCredential();
+  }
+  throw new Error(
+    "provide the agent credential with --agent-token-file <path> or --agent-token-stdin"
+  );
+}
 async function invitationCredential(args) {
   if (args.has("invitation-token-stdin")) {
     args.assertShape([...TARGET_FLAGS, "invitation-token-stdin"], 1);
@@ -40059,13 +40131,13 @@ async function runToken(args) {
   }));
 }
 async function runTokenRevoke(args) {
-  if (args.has("agent-token-stdin")) {
+  if (hasAgentCredential(args)) {
     args.assertShape(
-      [...TARGET_FLAGS, "workspace-id", "token-id", "agent-token-stdin", "json"],
+      [...TARGET_FLAGS, "workspace-id", "token-id", ...CREDENTIAL_FLAGS, "json"],
       2
     );
     const cloud2 = await target(args);
-    const agent = await stdinCredential();
+    const agent = await agentCredential(args);
     const override = workspaceOverride(
       args.optional("workspace-id"),
       process.env.SWARM_CLOUD_WORKSPACE_ID
@@ -40077,13 +40149,13 @@ async function runTokenRevoke(args) {
     }
     if (agent.tokenId === null) {
       throw new Error(
-        "agent credential on stdin has no token_id; pipe the JSON artifact from token mint, not a bare secret"
+        "agent credential has no token_id; use the JSON artifact from token mint, not a bare secret"
       );
     }
     const requested = args.optional("token-id");
     if (requested !== void 0 && requested.toLowerCase() !== agent.tokenId) {
       throw new Error(
-        "token-id does not match the credential on stdin; no request was sent"
+        "token-id does not match the credential; no request was sent"
       );
     }
     const tokenId2 = agent.tokenId;
@@ -40399,13 +40471,13 @@ async function commandWorkspaceAndCredential(args, cloud, options = {}) {
     args.optional("workspace-id"),
     process.env.SWARM_CLOUD_WORKSPACE_ID
   );
-  if (args.has("agent-token-stdin")) {
+  if (hasAgentCredential(args)) {
     if (override === null) {
       throw new Error(
         "not logged in; agent credentials require --workspace-id or SWARM_CLOUD_WORKSPACE_ID because they never infer a human's workspace selection"
       );
     }
-    const agent = await stdinCredential();
+    const agent = await agentCredential(args);
     const session = await agentSession(cloud, override, agent);
     return {
       selectedWorkspace: override,
@@ -40963,6 +41035,80 @@ async function runMembers(args) {
   }
   process.stdout.write(renderRoster(directory, memberNames));
 }
+async function runWhoami(args) {
+  args.assertShape([
+    ...TARGET_FLAGS,
+    "workspace-id",
+    ...CREDENTIAL_FLAGS,
+    "json"
+  ], 1);
+  if (!hasAgentCredential(args)) {
+    throw new UsageError(
+      "cswarm whoami needs --agent-token-file <path> or --agent-token-stdin"
+    );
+  }
+  const cloud = await target(args);
+  const selected = await commandWorkspaceAndCredential(args, cloud, {
+    validateHumanWorkspace: true
+  });
+  const directory = await readAgentSignalDirectory(
+    cloud,
+    selected.bearer,
+    selected.selectedWorkspace
+  );
+  const identity = directory.identity;
+  if (identity === void 0) {
+    throw new Error(
+      "this deployment authenticated the credential but did not return its identity; update the read service before using cswarm whoami"
+    );
+  }
+  const principal = directory.agents.find(
+    (agent) => agent.principal_id === identity.principal_id
+  );
+  if (principal === void 0 || principal.owner_user_id !== identity.owner_user_id) {
+    throw new Error(
+      "the read service authenticated this credential but returned no matching live principal; identity was not shown"
+    );
+  }
+  const owner = directory.members.find(
+    (member) => member.user_id === identity.owner_user_id
+  );
+  if (owner === void 0) {
+    throw new Error(
+      "the read service authenticated this credential but returned no matching owner; identity was not shown"
+    );
+  }
+  const displayName = sanitizeDisplayLabel(principal.name, "Unnamed agent");
+  const ownerName = sanitizeDisplayLabel(owner.display_name, "Unnamed member");
+  const artifactPrincipalId = selected.agent?.principalId ?? null;
+  const artifactMatches = artifactPrincipalId === null || artifactPrincipalId === identity.principal_id;
+  if (!artifactMatches) {
+    process.stderr.write(
+      `WARNING: the credential authenticated as ${displayName} (${identity.principal_id}), but its JSON metadata names ${artifactPrincipalId}. Trust the authenticated identity shown here and replace the inconsistent artifact.
+`
+    );
+  }
+  const output = {
+    credential_valid: identity.credential_valid,
+    principal_id: identity.principal_id,
+    display_name: displayName,
+    workspace_id: identity.workspace_id,
+    owner_user_id: identity.owner_user_id,
+    owner_display_name: ownerName,
+    credential_metadata_match: artifactMatches
+  };
+  if (args.has("json")) {
+    printJson(output);
+    return;
+  }
+  process.stdout.write(
+    `You are ${displayName} (${identity.principal_id}).
+Credential valid now: yes.
+Workspace: ${identity.workspace_id}.
+Owner: ${ownerName} (${identity.owner_user_id}).
+`
+  );
+}
 async function runSignalRead(args, inbox) {
   const notify = inbox && args.has("notify");
   args.assertShape(notify ? [
@@ -41073,9 +41219,9 @@ async function writeMonitorLine(line) {
   });
 }
 async function runInboxNotifyCommand(args) {
-  if (!args.has("agent-token-stdin")) {
+  if (!hasAgentCredential(args)) {
     throw new Error(
-      "inbox --notify is for one agent; provide its JSON credential with --agent-token-stdin"
+      "inbox --notify is for one agent; provide its JSON credential with --agent-token-file or --agent-token-stdin"
     );
   }
   const cloud = await target(args);
@@ -41157,9 +41303,9 @@ async function runReceipt(args) {
   if (!UUID_RE19.test(signalId)) {
     throw new Error("signal-id must be a UUID");
   }
-  if (!args.has("agent-token-stdin")) {
+  if (!hasAgentCredential(args)) {
     throw new Error(
-      "receipt reads signals sent by an agent; provide --agent-token-stdin and --workspace-id"
+      "receipt reads signals sent by an agent; provide --agent-token-file or --agent-token-stdin, and --workspace-id"
     );
   }
   const cloud = await target(args);
@@ -41882,7 +42028,7 @@ async function runListenStart(args) {
   args.assertShape([
     ...TARGET_FLAGS,
     "workspace-id",
-    "agent-token-stdin",
+    ...CREDENTIAL_FLAGS,
     "provider",
     "cwd",
     "model",
@@ -41899,9 +42045,9 @@ async function runListenStart(args) {
     "foreground",
     "json"
   ], 2);
-  if (!args.has("agent-token-stdin")) {
+  if (!hasAgentCredential(args)) {
     throw new Error(
-      "listen start requires --agent-token-stdin; credentials are never accepted on argv"
+      "listen start requires --agent-token-file or --agent-token-stdin; credentials are never accepted on argv"
     );
   }
   const provider = listenerProvider(args);
@@ -41916,7 +42062,7 @@ async function runListenStart(args) {
     args.optional("workspace-id") ?? process.env.SWARM_CLOUD_WORKSPACE_ID,
     "workspace-id"
   );
-  const agent = await stdinCredential();
+  const agent = await agentCredential(args);
   assertDurableListenerCredential(agent);
   const principalId = agent.principalId;
   const cwd = args.optional("cwd") ?? process.cwd();
@@ -42066,6 +42212,7 @@ The short credential rotates while this process remains alive and secure local s
 async function runListenSupervisor(args) {
   args.assertShape([
     ...TARGET_FLAGS,
+    ...CREDENTIAL_FLAGS,
     "workspace-id",
     "principal-id",
     "cwd",
@@ -42092,7 +42239,7 @@ async function runListenSupervisor(args) {
   const cloud = await target(args);
   const workspaceId2 = listenerUuid(args.optional("workspace-id"), "workspace-id");
   const principalId = listenerUuid(args.optional("principal-id"), "principal-id");
-  const agent = await stdinCredential();
+  const agent = await agentCredential(args, { implicitStdin: true });
   assertDurableListenerCredential(agent, principalId);
   const cwd = args.required("cwd");
   if (!(0, import_node_path20.isAbsolute)(cwd)) throw new Error("--cwd must be an absolute path");
@@ -42847,6 +42994,10 @@ async function main() {
     await runStatus(args);
     return;
   }
+  if (verb === "whoami") {
+    await runWhoami(args);
+    return;
+  }
   if (verb === "feedback") {
     await runFeedback(args);
     return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "commonswarm",
-  "version": "0.1.37",
+  "version": "0.1.38",
   "description": "CommonSwarm CLI — coordination for teams where people and AI agents work side by side.",
   "bin": {
     "cswarm": "cswarm.cjs"