ysk-server-core 1.0.0

package/README.md

@@ -0,0 +1,16 @@
+# ysk-server-core
+
+Core business logic for **[YSK Server](https://www.npmjs.com/package/ysk-server)** — security, hosting, LLM, updates, email, and more.
+
+Most users should install the product only:
+
+```bash
+npm install -g ysk-server
+```
+
+| | |
+|--|--|
+| **Source** | [github.com/yanshekki/ysk-server](https://github.com/yanshekki/ysk-server) (`packages/core`) |
+| **License** | MIT |
+| **Product** | [ysk-server](https://www.npmjs.com/package/ysk-server) |
+| **Depends on** | [ysk-server-shared](https://www.npmjs.com/package/ysk-server-shared) |

package/dist/agents/comms.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Remote Agent outbound communication path (control-plane side).
+ */
+export interface AgentSession {
+    id: string;
+    agentId: string;
+    connectedAt: string;
+    lastSeenAt: string;
+    status: 'connected' | 'stale' | 'disconnected';
+}
+export interface AgentMessage {
+    id: string;
+    sessionId: string;
+    direction: 'inbound' | 'outbound';
+    type: 'heartbeat' | 'command' | 'result' | 'register';
+    payload: unknown;
+    createdAt: string;
+}
+/**
+ * In-memory agent registry for MVP control plane.
+ */
+export declare class AgentComms {
+    private readonly sessions;
+    private readonly messages;
+    register(agentId: string): AgentSession;
+    heartbeat(sessionId: string): AgentSession;
+    enqueueCommand(sessionId: string, command: unknown): AgentMessage;
+    listSessions(): AgentSession[];
+    listMessages(sessionId: string): AgentMessage[];
+    private require;
+    private push;
+}
+//# sourceMappingURL=comms.d.ts.map

package/dist/agents/comms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"comms.d.ts","sourceRoot":"","sources":["../../src/agents/comms.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,GAAG,OAAO,GAAG,cAAc,CAAC;CAChD;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,SAAS,GAAG,UAAU,CAAC;IAClC,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAC5D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsB;IAE/C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY;IAgBvC,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY;IAQ1C,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,YAAY;IAKjE,YAAY,IAAI,YAAY,EAAE;IAI9B,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE;IAI/C,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,IAAI;CAgBb"}

package/dist/agents/comms.js

@@ -0,0 +1,67 @@
+/**
+ * Remote Agent outbound communication path (control-plane side).
+ */
+import { ErrorCodes, YskError, tl } from 'ysk-server-shared';
+import { randomUUID } from 'node:crypto';
+/**
+ * In-memory agent registry for MVP control plane.
+ */
+export class AgentComms {
+    sessions = new Map();
+    messages = [];
+    register(agentId) {
+        if (!agentId?.trim()) {
+            throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n0027'), { httpStatus: 400 });
+        }
+        const now = new Date().toISOString();
+        const session = {
+            id: randomUUID(),
+            agentId: agentId.trim(),
+            connectedAt: now,
+            lastSeenAt: now,
+            status: 'connected'
+        };
+        this.sessions.set(session.id, session);
+        this.push(session.id, 'inbound', 'register', { agentId });
+        return { ...session };
+    }
+    heartbeat(sessionId) {
+        const s = this.require(sessionId);
+        s.lastSeenAt = new Date().toISOString();
+        s.status = 'connected';
+        this.push(sessionId, 'inbound', 'heartbeat', {});
+        return { ...s };
+    }
+    enqueueCommand(sessionId, command) {
+        this.require(sessionId);
+        return this.push(sessionId, 'outbound', 'command', command);
+    }
+    listSessions() {
+        return [...this.sessions.values()].map((s) => ({ ...s }));
+    }
+    listMessages(sessionId) {
+        return this.messages.filter((m) => m.sessionId === sessionId).map((m) => ({ ...m }));
+    }
+    require(sessionId) {
+        const s = this.sessions.get(sessionId);
+        if (!s) {
+            throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.auto.t0499', { v0: (sessionId) }), {
+                httpStatus: 404
+            });
+        }
+        return s;
+    }
+    push(sessionId, direction, type, payload) {
+        const msg = {
+            id: randomUUID(),
+            sessionId,
+            direction,
+            type,
+            payload,
+            createdAt: new Date().toISOString()
+        };
+        this.messages.push(msg);
+        return { ...msg };
+    }
+}
+//# sourceMappingURL=comms.js.map

package/dist/agents/comms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comms.js","sourceRoot":"","sources":["../../src/agents/comms.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmBzC;;GAEG;AACH,MAAM,OAAO,UAAU;IACJ,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC3C,QAAQ,GAAmB,EAAE,CAAC;IAE/C,QAAQ,CAAC,OAAe;QACtB,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,OAAO,GAAiB;YAC5B,EAAE,EAAE,UAAU,EAAE;YAChB,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;YACvB,WAAW,EAAE,GAAG;YAChB,UAAU,EAAE,GAAG;YACf,MAAM,EAAE,WAAW;SAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,CAAC,CAAC,MAAM,GAAG,WAAW,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IAClB,CAAC;IAED,cAAc,CAAC,SAAiB,EAAE,OAAgB;QAChD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,YAAY;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IAEO,OAAO,CAAC,SAAiB;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE;gBACpF,UAAU,EAAE,GAAG;aAAE,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,IAAI,CACV,SAAiB,EACjB,SAAoC,EACpC,IAA0B,EAC1B,OAAgB;QAEhB,MAAM,GAAG,GAAiB;YACxB,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS;YACT,SAAS;YACT,IAAI;YACJ,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;IACpB,CAAC;CACF"}

package/dist/agents/fleet.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Persistent fleet agent registry (backed by JsonStore arrays).
+ * Panel register ≠ live agent: only heartbeat promotes to connected.
+ */
+import type { YskDatabase } from '../db/database.js';
+export type FleetAgentStatus = 'registered' | 'connected' | 'stale' | 'disconnected';
+export interface FleetAgent {
+    id: string;
+    agent_id: string;
+    group?: string;
+    status: FleetAgentStatus;
+    connected_at: string;
+    last_seen_at: string;
+    meta?: Record<string, unknown>;
+    /** SHA-256 of agent secret (never returned to clients) */
+    token_hash?: string;
+}
+/** Register result includes one-time plaintext token (shown once). */
+export type FleetRegisterResult = Omit<FleetAgent, 'token_hash'> & {
+    token: string;
+};
+export interface FleetCommand {
+    id: string;
+    agent_session_id: string;
+    payload: unknown;
+    status: 'queued' | 'acked' | 'done' | 'error';
+    created_at: string;
+    result?: unknown;
+    finished_at?: string;
+}
+export declare class FleetService {
+    private readonly db;
+    constructor(db: YskDatabase);
+    /**
+     * Control-plane registration only. Does not mean the edge process is online.
+     * Real agents call heartbeat after register (or re-register themselves).
+     */
+    register(agentId: string, group?: string, meta?: Record<string, unknown>): FleetRegisterResult;
+    /**
+     * Verify agent secret for heartbeat / pull / ack.
+     * Fail-closed: missing or wrong token → 401.
+     */
+    assertAgentAuth(sessionId: string, token: string | undefined): FleetAgent;
+    /** Resolve command → session for ack auth. */
+    getCommandSessionId(commandId: string): string | null;
+    heartbeat(sessionId: string): FleetAgent;
+    list(group?: string): FleetAgent[];
+    get(sessionId: string): FleetAgent;
+    remove(sessionId: string): {
+        ok: true;
+        id: string;
+    };
+    enqueue(sessionId: string, payload: unknown): FleetCommand;
+    /** Queued commands only — for edge agent pull. */
+    pullCommands(sessionId: string): FleetCommand[];
+    /** Full command history for panel (queued / done / error). */
+    listCommands(sessionId: string): FleetCommand[];
+    ack(commandId: string, result?: unknown, error?: boolean): FleetCommand | null;
+}
+//# sourceMappingURL=fleet.d.ts.map

package/dist/agents/fleet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.d.ts","sourceRoot":"","sources":["../../src/agents/fleet.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,GAAG,cAAc,CAAC;AAErF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,gBAAgB,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,sEAAsE;AACtE,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAErF,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAiBD,qBAAa,YAAY;IACX,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,WAAW;IAE5C;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,mBAAmB;IA+B9F;;;OAGG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU;IAyCzE,8CAA8C;IAC9C,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAKrD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU;IAmBxC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,EAAE;IAmBlC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU;IASlC,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE;IAgBnD,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,YAAY;IAwB1D,kDAAkD;IAClD,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE;IAiB/C,8DAA8D;IAC9D,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE;IAwB/C,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI;CAgB/E"}

package/dist/agents/fleet.js

@@ -0,0 +1,260 @@
+/**
+ * Persistent fleet agent registry (backed by JsonStore arrays).
+ * Panel register ≠ live agent: only heartbeat promotes to connected.
+ */
+import { createHash, randomBytes, randomUUID, timingSafeEqual } from 'node:crypto';
+import { ErrorCodes, YskError, tl } from 'ysk-server-shared';
+function agents(db) {
+    return db.snapshot.agent_sessions;
+}
+function messages(db) {
+    return db.snapshot.agent_messages;
+}
+function normalizeStatus(raw) {
+    if (raw === 'connected' || raw === 'stale' || raw === 'disconnected' || raw === 'registered') {
+        return raw;
+    }
+    return 'registered';
+}
+export class FleetService {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /**
+     * Control-plane registration only. Does not mean the edge process is online.
+     * Real agents call heartbeat after register (or re-register themselves).
+     */
+    register(agentId, group, meta) {
+        if (!agentId?.trim()) {
+            throw new YskError(ErrorCodes.VALIDATION, tl('notes.auto.n0027'), { httpStatus: 400 });
+        }
+        const now = new Date().toISOString();
+        const fromEdge = Boolean(meta && meta.source === 'edge');
+        const plainToken = `ysk_agent_${randomBytes(24).toString('base64url')}`;
+        const token_hash = hashAgentToken(plainToken);
+        const row = {
+            id: randomUUID(),
+            agent_id: agentId.trim(),
+            group: group?.trim() || 'default',
+            status: fromEdge ? 'connected' : 'registered',
+            connected_at: now,
+            last_seen_at: now,
+            meta,
+            token_hash,
+        };
+        agents(this.db).unshift(row);
+        messages(this.db).push({
+            id: randomUUID(),
+            session_id: row.id,
+            direction: 'inbound',
+            type: 'register',
+            payload: { agentId, group: row.group, source: fromEdge ? 'edge' : 'panel' },
+            created_at: now
+        });
+        this.db.persist();
+        const { token_hash: _h, ...publicRow } = row;
+        return { ...publicRow, token: plainToken };
+    }
+    /**
+     * Verify agent secret for heartbeat / pull / ack.
+     * Fail-closed: missing or wrong token → 401.
+     */
+    assertAgentAuth(sessionId, token) {
+        const a = agents(this.db).find((x) => x.id === sessionId);
+        if (!a) {
+            throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.agents.sessionNotFound', { sessionId }), {
+                httpStatus: 404,
+            });
+        }
+        if (!token?.trim()) {
+            throw new YskError(ErrorCodes.UNAUTHORIZED, tl('notes.auto.n0027'), {
+                httpStatus: 401,
+                details: { reason: 'agent_token_required' },
+            });
+        }
+        const stored = String(a.token_hash ?? '');
+        if (!stored) {
+            // Legacy session without token — refuse (force re-register)
+            throw new YskError(ErrorCodes.UNAUTHORIZED, tl('notes.auto.n0027'), {
+                httpStatus: 401,
+                details: { reason: 'agent_reregister_required' },
+            });
+        }
+        const h = hashAgentToken(token.trim());
+        try {
+            const ba = Buffer.from(h, 'hex');
+            const bb = Buffer.from(stored, 'hex');
+            if (ba.length !== bb.length || !timingSafeEqual(ba, bb)) {
+                throw new YskError(ErrorCodes.UNAUTHORIZED, tl('notes.auto.n0027'), {
+                    httpStatus: 401,
+                    details: { reason: 'agent_token_invalid' },
+                });
+            }
+        }
+        catch (e) {
+            if (e instanceof YskError)
+                throw e;
+            throw new YskError(ErrorCodes.UNAUTHORIZED, tl('notes.auto.n0027'), {
+                httpStatus: 401,
+                details: { reason: 'agent_token_invalid' },
+            });
+        }
+        return { ...a, token_hash: undefined };
+    }
+    /** Resolve command → session for ack auth. */
+    getCommandSessionId(commandId) {
+        const m = messages(this.db).find((x) => x.id === commandId);
+        return m?.session_id ? String(m.session_id) : null;
+    }
+    heartbeat(sessionId) {
+        const a = agents(this.db).find((x) => x.id === sessionId);
+        if (!a) {
+            throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.agents.sessionNotFound', { sessionId }), {
+                httpStatus: 404
+            });
+        }
+        a.last_seen_at = new Date().toISOString();
+        a.status = 'connected';
+        messages(this.db).push({
+            id: randomUUID(),
+            session_id: sessionId,
+            direction: 'inbound',
+            type: 'heartbeat',
+            payload: {},
+            created_at: a.last_seen_at
+        });
+        this.db.persist();
+        return { ...a, status: 'connected' };
+    }
+    list(group) {
+        const now = Date.now();
+        const all = agents(this.db).map((a) => {
+            a.status = normalizeStatus(a.status);
+            const age = now - new Date(a.last_seen_at).getTime();
+            if (a.status === 'connected' && age > 60_000) {
+                a.status = 'stale';
+            }
+            // panel-only register never heartbeated → stay registered (or stale if old)
+            if (a.status === 'registered' && age > 300_000) {
+                a.status = 'stale';
+            }
+            const { token_hash: _th, ...pub } = a;
+            return { ...pub };
+        });
+        this.db.persist();
+        return group ? all.filter((a) => a.group === group) : all;
+    }
+    get(sessionId) {
+        const a = this.list().find((x) => x.id === sessionId);
+        if (!a) {
+            throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.agents.sessionNotFound', { sessionId }), {
+                httpStatus: 404
+            });
+        }
+        return a;
+    }
+    remove(sessionId) {
+        const list = agents(this.db);
+        const idx = list.findIndex((x) => x.id === sessionId);
+        if (idx < 0) {
+            throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.agents.sessionNotFound', { sessionId }), {
+                httpStatus: 404
+            });
+        }
+        list.splice(idx, 1);
+        const msgs = messages(this.db);
+        for (let i = msgs.length - 1; i >= 0; i--) {
+            if (msgs[i]?.session_id === sessionId)
+                msgs.splice(i, 1);
+        }
+        this.db.persist();
+        return { ok: true, id: sessionId };
+    }
+    enqueue(sessionId, payload) {
+        const a = agents(this.db).find((x) => x.id === sessionId);
+        if (!a) {
+            throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.agents.sessionNotFound', { sessionId }), {
+                httpStatus: 404
+            });
+        }
+        const cmd = {
+            id: randomUUID(),
+            agent_session_id: sessionId,
+            payload,
+            status: 'queued',
+            created_at: new Date().toISOString()
+        };
+        messages(this.db).push({
+            id: cmd.id,
+            session_id: sessionId,
+            direction: 'outbound',
+            type: 'command',
+            payload,
+            status: 'queued',
+            created_at: cmd.created_at
+        });
+        this.db.persist();
+        return cmd;
+    }
+    /** Queued commands only — for edge agent pull. */
+    pullCommands(sessionId) {
+        return messages(this.db)
+            .filter((m) => m.session_id === sessionId &&
+            m.direction === 'outbound' &&
+            m.type === 'command' &&
+            (m.status === 'queued' || !m.status))
+            .map((m) => ({
+            id: String(m.id),
+            agent_session_id: sessionId,
+            payload: m.payload,
+            status: 'queued',
+            created_at: String(m.created_at)
+        }));
+    }
+    /** Full command history for panel (queued / done / error). */
+    listCommands(sessionId) {
+        const a = agents(this.db).find((x) => x.id === sessionId);
+        if (!a) {
+            throw new YskError(ErrorCodes.NOT_FOUND, tl('notes.agents.sessionNotFound', { sessionId }), {
+                httpStatus: 404
+            });
+        }
+        return messages(this.db)
+            .filter((m) => m.session_id === sessionId &&
+            m.direction === 'outbound' &&
+            m.type === 'command')
+            .map((m) => ({
+            id: String(m.id),
+            agent_session_id: sessionId,
+            payload: m.payload,
+            status: String(m.status || 'queued'),
+            created_at: String(m.created_at),
+            result: m.result,
+            finished_at: m.finished_at ? String(m.finished_at) : undefined
+        }))
+            .sort((x, y) => (x.created_at < y.created_at ? 1 : -1));
+    }
+    ack(commandId, result, error) {
+        const m = messages(this.db).find((x) => x.id === commandId);
+        if (!m)
+            return null;
+        m.status = error ? 'error' : 'done';
+        m.result = result;
+        m.finished_at = new Date().toISOString();
+        this.db.persist();
+        return {
+            id: String(m.id),
+            agent_session_id: String(m.session_id),
+            payload: m.payload,
+            status: m.status,
+            created_at: String(m.created_at),
+            result: m.result,
+            finished_at: String(m.finished_at)
+        };
+    }
+}
+function hashAgentToken(token) {
+    return createHash('sha256').update(token).digest('hex');
+}
+//# sourceMappingURL=fleet.js.map

package/dist/agents/fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.js","sourceRoot":"","sources":["../../src/agents/fleet.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAC,MAAM,mBAAmB,CAAC;AA8B5D,SAAS,MAAM,CAAC,EAAe;IAC7B,OAAO,EAAE,CAAC,QAAQ,CAAC,cAAyC,CAAC;AAC/D,CAAC;AAED,SAAS,QAAQ,CAAC,EAAe;IAC/B,OAAO,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,GAAuB;IAC9C,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,cAAc,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QAC7F,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,EAAe;QAAf,OAAE,GAAF,EAAE,CAAa;IAAG,CAAC;IAEhD;;;OAGG;IACH,QAAQ,CAAC,OAAe,EAAE,KAAc,EAAE,IAA8B;QACtE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAK,IAA4B,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,aAAa,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxE,MAAM,UAAU,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAe;YACtB,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE;YACxB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS;YACjC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY;YAC7C,YAAY,EAAE,GAAG;YACjB,YAAY,EAAE,GAAG;YACjB,IAAI;YACJ,UAAU;SACX,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;YACrB,EAAE,EAAE,UAAU,EAAE;YAChB,UAAU,EAAE,GAAG,CAAC,EAAE;YAClB,SAAS,EAAE,SAAS;YACpB,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE;YAC3E,UAAU,EAAE,GAAG;SAAE,CAAC,CAAC;QACrB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,SAAS,EAAE,GAAG,GAAG,CAAC;QAC7C,OAAO,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,SAAiB,EAAE,KAAyB;QAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;gBAC1F,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;gBAClE,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,4DAA4D;YAC5D,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;gBAClE,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACtC,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;oBAClE,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,MAAM,CAAC,CAAC;YACnC,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE;gBAClE,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;IAED,8CAA8C;IAC9C,mBAAmB,CAAC,SAAiB;QACnC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAC5D,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;gBAC1F,UAAU,EAAE,GAAG;aAAE,CAAC,CAAC;QACvB,CAAC;QACD,CAAC,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,CAAC,CAAC,MAAM,GAAG,WAAW,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;YACrB,EAAE,EAAE,UAAU,EAAE;YAChB,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,SAAS;YACpB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,CAAC,CAAC,YAAY;SAAE,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,KAAc;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpC,CAAC,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;YACrD,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;gBAC7C,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC;YACrB,CAAC;YACD,4EAA4E;YAC5E,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,GAAG,GAAG,OAAO,EAAE,CAAC;gBAC/C,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC;YACrB,CAAC;YACD,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;gBAC1F,UAAU,EAAE,GAAG;aAAE,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACtD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;gBAC1F,UAAU,EAAE,GAAG;aAAE,CAAC,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,KAAK,SAAS;gBAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;IACrC,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,OAAgB;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;gBAC1F,UAAU,EAAE,GAAG;aAAE,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,GAAG,GAAiB;YACxB,EAAE,EAAE,UAAU,EAAE;YAChB,gBAAgB,EAAE,SAAS;YAC3B,OAAO;YACP,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAAE,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;YACrB,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,UAAU;YACrB,IAAI,EAAE,SAAS;YACf,OAAO;YACP,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE,GAAG,CAAC,UAAU;SAAE,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,kDAAkD;IAClD,YAAY,CAAC,SAAiB;QAC5B,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;aACrB,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,UAAU,KAAK,SAAS;YAC1B,CAAC,CAAC,SAAS,KAAK,UAAU;YAC1B,CAAC,CAAC,IAAI,KAAK,SAAS;YACpB,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CACvC;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,gBAAgB,EAAE,SAAS;YAC3B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,QAAiB;YACzB,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;SAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,8DAA8D;IAC9D,YAAY,CAAC,SAAiB;QAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;gBAC1F,UAAU,EAAE,GAAG;aAAE,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;aACrB,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,UAAU,KAAK,SAAS;YAC1B,CAAC,CAAC,SAAS,KAAK,UAAU;YAC1B,CAAC,CAAC,IAAI,KAAK,SAAS,CACvB;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,gBAAgB,EAAE,SAAS;YAC3B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAG,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,QAAQ,CAA4B;YAChE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;YAChC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;SAAE,CAAC,CAAC;aACnE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,GAAG,CAAC,SAAiB,EAAE,MAAgB,EAAE,KAAe;QACtD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACpC,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;YACtC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAgC;YAC1C,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;YAChC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;SAAE,CAAC;IACzC,CAAC;CACF;AAGD,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC"}

package/dist/agents/index.d.ts

@@ -0,0 +1,7 @@
+export * from './runtime.js';
+export * from './comms.js';
+export * from './fleet.js';
+export * from './outbound-agent.js';
+export * from './probe.js';
+export * from './install.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/agents/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agents/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC"}

package/dist/agents/index.js

@@ -0,0 +1,7 @@
+export * from './runtime.js';
+export * from './comms.js';
+export * from './fleet.js';
+export * from './outbound-agent.js';
+export * from './probe.js';
+export * from './install.js';
+//# sourceMappingURL=index.js.map

package/dist/agents/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agents/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC"}

package/dist/agents/install.d.ts

@@ -0,0 +1,34 @@
+import type { AgentRuntimeKind } from 'ysk-server-shared';
+import type { HostExecutor } from '../host/executor.js';
+import { probeAgentRuntime } from './probe.js';
+export interface AgentInstallResult {
+    ok: boolean;
+    kind: AgentRuntimeKind;
+    written: string[];
+    commandResults: Array<{
+        argv: string[];
+        exitCode: number;
+        stderr: string;
+    }>;
+    notes: string[];
+    requiresExecute: boolean;
+    requiresRoot: boolean;
+    enabled: boolean;
+    binaryPath?: string;
+    probe?: Awaited<ReturnType<typeof probeAgentRuntime>>;
+}
+/**
+ * Write install dir + unit under dataDir; optionally run install commands + systemctl enable.
+ */
+export declare function applyAgentInstall(input: {
+    dataDir: string;
+    kind: AgentRuntimeKind | string;
+    host: HostExecutor;
+    /** Run plan.commands and enable unit (needs EXECUTE; root preferred for system paths) */
+    execute?: boolean;
+    enableUnit?: boolean;
+    nodePath?: string;
+}): Promise<AgentInstallResult>;
+/** Ensure install path marker file exists under dataDir for non-root demos */
+export declare function markAgentManaged(dataDir: string, kind: string): string;
+//# sourceMappingURL=install.d.ts.map

package/dist/agents/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/agents/install.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAA0B,iBAAiB,EAAsB,MAAM,YAAY,CAAC;AAE3F,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC;CACvD;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAAC;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,yFAAyF;IACzF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA+I9B;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAYtE"}