very-happy-cli 0.2.124 → 0.2.126

package/dist/teams-Cuqsk7Ty.mjs

@@ -0,0 +1,189 @@
+import { homedir } from 'node:os';
+import { unlink, rmdir, mkdir, lstat, readFile, writeFile, rename } from 'node:fs/promises';
+import { z } from 'zod';
+import { createHash, randomUUID } from 'node:crypto';
+import { t as teamRequest, c as createTeamsClient } from './agentGuidance-BR0OFumQ.mjs';
+import { i as readCredentialsForConfiguredRelay } from './limits-DlbYYtOw.mjs';
+import { join, resolve, dirname } from 'node:path';
+import { T as TEAM_SKILL } from './resources-D-mn7ptO.mjs';
+import 'node:fs';
+import 'tweetnacl';
+import 'chalk';
+import 'node:util';
+
+const legacyTask = z.object({
+  id: z.string().regex(/^T-\d{3,}$/),
+  goal: z.string().min(1),
+  cwd: z.string().min(1),
+  acceptance: z.array(z.string().min(1)).min(1),
+  status: z.enum(["queued", "running", "waiting", "review", "done", "stopped", "escalated"]),
+  sessionId: z.string().nullable().optional(),
+  agent: z.string().optional()
+});
+const ledger = z.object({ version: z.literal(1), tasks: z.array(legacyTask) });
+function previewLegacyTeamsMigration(input) {
+  const parsed = ledger.parse(input);
+  if (new Set(parsed.tasks.map((t) => t.id)).size !== parsed.tasks.length) throw new Error("Duplicate legacy task ids");
+  return {
+    mode: "preview-only",
+    precondition: "Stop and verify the old dispatcher before creating any replacement assignment. Preserve the original ledger as an audit archive.",
+    tasks: parsed.tasks.map((task) => {
+      const assistant = task.agent === "pi" ? "pi-acp" : task.agent ?? "claude";
+      const supported = ["claude", "codex", "pi-acp"].includes(assistant);
+      const closed = ["done", "stopped"].includes(task.status);
+      return {
+        legacyId: task.id,
+        goal: task.goal,
+        legacyStatus: task.status,
+        sessionId: task.sessionId ?? null,
+        disposition: closed ? "retain-history" : task.sessionId ? "reconcile-existing-session" : supported ? "ready-after-dispatcher-stopped" : "unsupported-runner",
+        ...closed || task.sessionId || !supported ? {} : { proposedAction: { type: "delegate", goal: task.goal, acceptance: task.acceptance, directory: task.cwd, assistant } }
+      };
+    })
+  };
+}
+
+async function setTeamPermissionMode(teamId, mode, requestId) {
+  if (process.env.VH_TEAM_SCOPE_FILE || process.env.HAPPY_SESSION_ID) {
+    throw new Error("Change team execution mode from the owner Web UI or an independent CLI terminal");
+  }
+  if (!teamId?.trim() || !requestId?.trim()) throw new Error("Team and request ID are required");
+  if (mode !== "default" && mode !== "bypassPermissions") throw new Error("Mode must be default or bypassPermissions");
+  const credentials = await readCredentialsForConfiguredRelay();
+  if (!credentials) throw new Error("Sign in before changing team execution mode");
+  const result = await teamRequest(
+    `/v1/teams/${encodeURIComponent(teamId)}/actions`,
+    "POST",
+    credentials.token,
+    false,
+    { requestId, action: { type: "set-permission-mode", permissionMode: mode } }
+  );
+  const { credential: _credential, ...safe } = result;
+  return safe;
+}
+
+async function assertPrivateDestination(directory) {
+  for (let path = directory; ; path = dirname(path)) {
+    try {
+      const stat = await lstat(path);
+      if (stat.isSymbolicLink() || !stat.isDirectory()) throw new Error("Refusing symlink or non-directory in managed skill destination: " + path);
+    } catch (error) {
+      if (error.code !== "ENOENT") throw error;
+    }
+    if (dirname(path) === path) break;
+  }
+}
+const digest = (text) => createHash("sha256").update(text).digest("hex");
+async function read(path) {
+  try {
+    const stat = await lstat(path);
+    if (!stat.isFile() || stat.isSymbolicLink()) throw new Error("Refusing non-regular managed file");
+    return await readFile(path, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT") return null;
+    throw error;
+  }
+}
+async function publish(path, content) {
+  const temporary = `${path}.${randomUUID()}.new`;
+  try {
+    await writeFile(temporary, content, { flag: "wx", mode: 384 });
+    await rename(temporary, path);
+  } finally {
+    await unlink(temporary).catch(() => {
+    });
+  }
+}
+async function installTeamSkill(options) {
+  const directory = join(resolve(options.home), ".local", "share", "very-happy", "skills", "very-happy-teams");
+  await assertPrivateDestination(directory);
+  const file = join(directory, "SKILL.md");
+  const manifest = join(directory, ".very-happy-managed.json");
+  const current = await read(file);
+  const managed = await read(manifest);
+  const previous = managed ? JSON.parse(managed) : null;
+  if (previous && previous.owner !== "very-happy") throw new Error("Existing manifest is not owned by Very Happy");
+  if (current !== null && (!previous || previous.owner !== "very-happy" || previous.sha256 !== digest(current) && previous.pendingSha256 !== digest(current))) {
+    throw new Error("Existing skill is not owned by Very Happy or was edited; preserve it and resolve manually");
+  }
+  const action = options.uninstall ? current === null && managed === null ? "unchanged" : "remove" : current === TEAM_SKILL && !previous?.pendingSha256 ? "unchanged" : "write";
+  if (options.apply && action !== "unchanged") {
+    await assertPrivateDestination(directory);
+    if (options.uninstall) {
+      if (current !== null) await unlink(file);
+      if (managed !== null) await unlink(manifest);
+      await rmdir(directory).catch(() => {
+      });
+    } else {
+      await mkdir(directory, { recursive: true });
+      const nextHash = digest(TEAM_SKILL);
+      await publish(manifest, JSON.stringify({ owner: "very-happy", sha256: current === null ? null : digest(current), pendingSha256: nextHash, version: 1 }));
+      await publish(file, TEAM_SKILL);
+      await publish(manifest, JSON.stringify({ owner: "very-happy", sha256: nextHash, version: 1 }));
+    }
+  }
+  return { host: options.host, path: file, action, applied: !!options.apply, discovery: "No host skill directories are modified. Read this absolute skill path in a managed session.", managedSessions: "Team tools are injected by Very Happy. Standalone agents require a managed session connection." };
+}
+
+async function handleTeamsCommand(args) {
+  const command = args[0];
+  const value = (flag) => {
+    const index = args.indexOf(flag);
+    return index < 0 ? void 0 : args[index + 1];
+  };
+  if (!command || command === "--help") {
+    console.log("very-happy teams install|uninstall --host claude|codex|pi [--home PATH] [--apply]\nvery-happy teams doctor --host pi\nvery-happy teams migration-preview --file LEDGER_JSON\nvery-happy teams inspect\nvery-happy teams permissions --team-id ID --mode default|bypassPermissions --request-id ID\nvery-happy teams create|join --name NAME [--machine-id ID | --team-id ID] [--session-id ID] [--request-id ID]\nvery-happy teams action --json ACTION_JSON --request-id ID\nInstallation previews changes unless --apply is supplied. Managed sessions receive tools automatically.");
+    return;
+  }
+  if (command === "install" || command === "uninstall") {
+    const host = value("--host");
+    if (!host || !["claude", "codex", "pi"].includes(host)) throw new Error("--host must be claude, codex, or pi");
+    console.log(JSON.stringify(await installTeamSkill({ host, home: value("--home") ?? homedir(), apply: args.includes("--apply"), uninstall: command === "uninstall" })));
+    return;
+  }
+  if (command === "doctor") {
+    if (value("--host") !== "pi") throw new Error("doctor currently requires --host pi");
+    console.log(JSON.stringify({
+      host: "pi",
+      entry: "very-happy pi",
+      commandSource: process.env.PI_ACP_PI_COMMAND ? "PI_ACP_PI_COMMAND override (preserved)" : "pi from PATH",
+      delegatedCommandSource: process.env.VH_TEAM_PI_COMMAND ? "VH_TEAM_PI_COMMAND is set" : "not set",
+      officialBridge: "Injected by Very Happy managed pi sessions through HAPPY_MCP_URL",
+      permissions: "Official permission gate; user extensions may enforce additional rules",
+      check: "Run in the daemon environment. Audit pi settings extensions and any wrapper before removing private bindings. This diagnostic does not verify binary availability or a live connection.",
+      standalone: "Bare pi skill loading does not establish Teams transport or wakeup"
+    }, null, 2));
+    return;
+  }
+  if (command === "migration-preview") {
+    const file = value("--file");
+    if (!file) throw new Error("--file is required");
+    console.log(JSON.stringify(previewLegacyTeamsMigration(JSON.parse(await readFile(file, "utf8"))), null, 2));
+    return;
+  }
+  if (command === "permissions") {
+    const teamId = value("--team-id"), mode = value("--mode"), requestId = value("--request-id");
+    if (!teamId || !mode || !requestId) throw new Error("--team-id, --mode and --request-id are required");
+    console.log(JSON.stringify(await setTeamPermissionMode(teamId, mode, requestId)));
+    return;
+  }
+  const client = createTeamsClient(value("--session-id"));
+  let result;
+  if (command === "inspect") result = await client.inspect();
+  else if (command === "create" || command === "join") {
+    const name = value("--name");
+    if (!name) throw new Error("--name is required");
+    if (command === "join" && !value("--team-id")) throw new Error("--team-id is required");
+    result = await client.initialize({ name, teamId: command === "join" ? value("--team-id") : void 0, machineId: value("--machine-id"), botId: value("--bot-id"), requestId: value("--request-id") ?? randomUUID() });
+  } else if (command === "action") {
+    const payload = value("--json");
+    const requestId = value("--request-id");
+    if (!payload || !requestId) throw new Error("--json and --request-id are required");
+    const action = JSON.parse(payload);
+    if (!["delegate", "message", "submit", "accept", "return", "cancel", "handoff", "schedule-create", "schedule-pause", "schedule-resume", "schedule-cancel"].includes(action.type)) throw new Error("Unsupported team action");
+    result = await client.action(action, requestId);
+  } else throw new Error("Unknown teams command; use teams --help");
+  console.log(JSON.stringify(result));
+}
+
+export { handleTeamsCommand };

package/dist/teams-MgWeyutG.cjs

@@ -0,0 +1,191 @@
+'use strict';
+
+var os = require('node:os');
+var promises = require('node:fs/promises');
+var z = require('zod');
+var node_crypto = require('node:crypto');
+var agentGuidance = require('./agentGuidance-Tm8Z5HYp.cjs');
+var persistence = require('./limits-DG1OQnCb.cjs');
+var path = require('node:path');
+var resources = require('./resources-CVl7NdOB.cjs');
+require('node:fs');
+require('tweetnacl');
+require('chalk');
+require('node:util');
+
+const legacyTask = z.z.object({
+  id: z.z.string().regex(/^T-\d{3,}$/),
+  goal: z.z.string().min(1),
+  cwd: z.z.string().min(1),
+  acceptance: z.z.array(z.z.string().min(1)).min(1),
+  status: z.z.enum(["queued", "running", "waiting", "review", "done", "stopped", "escalated"]),
+  sessionId: z.z.string().nullable().optional(),
+  agent: z.z.string().optional()
+});
+const ledger = z.z.object({ version: z.z.literal(1), tasks: z.z.array(legacyTask) });
+function previewLegacyTeamsMigration(input) {
+  const parsed = ledger.parse(input);
+  if (new Set(parsed.tasks.map((t) => t.id)).size !== parsed.tasks.length) throw new Error("Duplicate legacy task ids");
+  return {
+    mode: "preview-only",
+    precondition: "Stop and verify the old dispatcher before creating any replacement assignment. Preserve the original ledger as an audit archive.",
+    tasks: parsed.tasks.map((task) => {
+      const assistant = task.agent === "pi" ? "pi-acp" : task.agent ?? "claude";
+      const supported = ["claude", "codex", "pi-acp"].includes(assistant);
+      const closed = ["done", "stopped"].includes(task.status);
+      return {
+        legacyId: task.id,
+        goal: task.goal,
+        legacyStatus: task.status,
+        sessionId: task.sessionId ?? null,
+        disposition: closed ? "retain-history" : task.sessionId ? "reconcile-existing-session" : supported ? "ready-after-dispatcher-stopped" : "unsupported-runner",
+        ...closed || task.sessionId || !supported ? {} : { proposedAction: { type: "delegate", goal: task.goal, acceptance: task.acceptance, directory: task.cwd, assistant } }
+      };
+    })
+  };
+}
+
+async function setTeamPermissionMode(teamId, mode, requestId) {
+  if (process.env.VH_TEAM_SCOPE_FILE || process.env.HAPPY_SESSION_ID) {
+    throw new Error("Change team execution mode from the owner Web UI or an independent CLI terminal");
+  }
+  if (!teamId?.trim() || !requestId?.trim()) throw new Error("Team and request ID are required");
+  if (mode !== "default" && mode !== "bypassPermissions") throw new Error("Mode must be default or bypassPermissions");
+  const credentials = await persistence.readCredentialsForConfiguredRelay();
+  if (!credentials) throw new Error("Sign in before changing team execution mode");
+  const result = await agentGuidance.teamRequest(
+    `/v1/teams/${encodeURIComponent(teamId)}/actions`,
+    "POST",
+    credentials.token,
+    false,
+    { requestId, action: { type: "set-permission-mode", permissionMode: mode } }
+  );
+  const { credential: _credential, ...safe } = result;
+  return safe;
+}
+
+async function assertPrivateDestination(directory) {
+  for (let path$1 = directory; ; path$1 = path.dirname(path$1)) {
+    try {
+      const stat = await promises.lstat(path$1);
+      if (stat.isSymbolicLink() || !stat.isDirectory()) throw new Error("Refusing symlink or non-directory in managed skill destination: " + path$1);
+    } catch (error) {
+      if (error.code !== "ENOENT") throw error;
+    }
+    if (path.dirname(path$1) === path$1) break;
+  }
+}
+const digest = (text) => node_crypto.createHash("sha256").update(text).digest("hex");
+async function read(path) {
+  try {
+    const stat = await promises.lstat(path);
+    if (!stat.isFile() || stat.isSymbolicLink()) throw new Error("Refusing non-regular managed file");
+    return await promises.readFile(path, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT") return null;
+    throw error;
+  }
+}
+async function publish(path, content) {
+  const temporary = `${path}.${node_crypto.randomUUID()}.new`;
+  try {
+    await promises.writeFile(temporary, content, { flag: "wx", mode: 384 });
+    await promises.rename(temporary, path);
+  } finally {
+    await promises.unlink(temporary).catch(() => {
+    });
+  }
+}
+async function installTeamSkill(options) {
+  const directory = path.join(path.resolve(options.home), ".local", "share", "very-happy", "skills", "very-happy-teams");
+  await assertPrivateDestination(directory);
+  const file = path.join(directory, "SKILL.md");
+  const manifest = path.join(directory, ".very-happy-managed.json");
+  const current = await read(file);
+  const managed = await read(manifest);
+  const previous = managed ? JSON.parse(managed) : null;
+  if (previous && previous.owner !== "very-happy") throw new Error("Existing manifest is not owned by Very Happy");
+  if (current !== null && (!previous || previous.owner !== "very-happy" || previous.sha256 !== digest(current) && previous.pendingSha256 !== digest(current))) {
+    throw new Error("Existing skill is not owned by Very Happy or was edited; preserve it and resolve manually");
+  }
+  const action = options.uninstall ? current === null && managed === null ? "unchanged" : "remove" : current === resources.TEAM_SKILL && !previous?.pendingSha256 ? "unchanged" : "write";
+  if (options.apply && action !== "unchanged") {
+    await assertPrivateDestination(directory);
+    if (options.uninstall) {
+      if (current !== null) await promises.unlink(file);
+      if (managed !== null) await promises.unlink(manifest);
+      await promises.rmdir(directory).catch(() => {
+      });
+    } else {
+      await promises.mkdir(directory, { recursive: true });
+      const nextHash = digest(resources.TEAM_SKILL);
+      await publish(manifest, JSON.stringify({ owner: "very-happy", sha256: current === null ? null : digest(current), pendingSha256: nextHash, version: 1 }));
+      await publish(file, resources.TEAM_SKILL);
+      await publish(manifest, JSON.stringify({ owner: "very-happy", sha256: nextHash, version: 1 }));
+    }
+  }
+  return { host: options.host, path: file, action, applied: !!options.apply, discovery: "No host skill directories are modified. Read this absolute skill path in a managed session.", managedSessions: "Team tools are injected by Very Happy. Standalone agents require a managed session connection." };
+}
+
+async function handleTeamsCommand(args) {
+  const command = args[0];
+  const value = (flag) => {
+    const index = args.indexOf(flag);
+    return index < 0 ? void 0 : args[index + 1];
+  };
+  if (!command || command === "--help") {
+    console.log("very-happy teams install|uninstall --host claude|codex|pi [--home PATH] [--apply]\nvery-happy teams doctor --host pi\nvery-happy teams migration-preview --file LEDGER_JSON\nvery-happy teams inspect\nvery-happy teams permissions --team-id ID --mode default|bypassPermissions --request-id ID\nvery-happy teams create|join --name NAME [--machine-id ID | --team-id ID] [--session-id ID] [--request-id ID]\nvery-happy teams action --json ACTION_JSON --request-id ID\nInstallation previews changes unless --apply is supplied. Managed sessions receive tools automatically.");
+    return;
+  }
+  if (command === "install" || command === "uninstall") {
+    const host = value("--host");
+    if (!host || !["claude", "codex", "pi"].includes(host)) throw new Error("--host must be claude, codex, or pi");
+    console.log(JSON.stringify(await installTeamSkill({ host, home: value("--home") ?? os.homedir(), apply: args.includes("--apply"), uninstall: command === "uninstall" })));
+    return;
+  }
+  if (command === "doctor") {
+    if (value("--host") !== "pi") throw new Error("doctor currently requires --host pi");
+    console.log(JSON.stringify({
+      host: "pi",
+      entry: "very-happy pi",
+      commandSource: process.env.PI_ACP_PI_COMMAND ? "PI_ACP_PI_COMMAND override (preserved)" : "pi from PATH",
+      delegatedCommandSource: process.env.VH_TEAM_PI_COMMAND ? "VH_TEAM_PI_COMMAND is set" : "not set",
+      officialBridge: "Injected by Very Happy managed pi sessions through HAPPY_MCP_URL",
+      permissions: "Official permission gate; user extensions may enforce additional rules",
+      check: "Run in the daemon environment. Audit pi settings extensions and any wrapper before removing private bindings. This diagnostic does not verify binary availability or a live connection.",
+      standalone: "Bare pi skill loading does not establish Teams transport or wakeup"
+    }, null, 2));
+    return;
+  }
+  if (command === "migration-preview") {
+    const file = value("--file");
+    if (!file) throw new Error("--file is required");
+    console.log(JSON.stringify(previewLegacyTeamsMigration(JSON.parse(await promises.readFile(file, "utf8"))), null, 2));
+    return;
+  }
+  if (command === "permissions") {
+    const teamId = value("--team-id"), mode = value("--mode"), requestId = value("--request-id");
+    if (!teamId || !mode || !requestId) throw new Error("--team-id, --mode and --request-id are required");
+    console.log(JSON.stringify(await setTeamPermissionMode(teamId, mode, requestId)));
+    return;
+  }
+  const client = agentGuidance.createTeamsClient(value("--session-id"));
+  let result;
+  if (command === "inspect") result = await client.inspect();
+  else if (command === "create" || command === "join") {
+    const name = value("--name");
+    if (!name) throw new Error("--name is required");
+    if (command === "join" && !value("--team-id")) throw new Error("--team-id is required");
+    result = await client.initialize({ name, teamId: command === "join" ? value("--team-id") : void 0, machineId: value("--machine-id"), botId: value("--bot-id"), requestId: value("--request-id") ?? node_crypto.randomUUID() });
+  } else if (command === "action") {
+    const payload = value("--json");
+    const requestId = value("--request-id");
+    if (!payload || !requestId) throw new Error("--json and --request-id are required");
+    const action = JSON.parse(payload);
+    if (!["delegate", "message", "submit", "accept", "return", "cancel", "handoff", "schedule-create", "schedule-pause", "schedule-resume", "schedule-cancel"].includes(action.type)) throw new Error("Unsupported team action");
+    result = await client.action(action, requestId);
+  } else throw new Error("Unknown teams command; use teams --help");
+  console.log(JSON.stringify(result));
+}
+
+exports.handleTeamsCommand = handleTeamsCommand;