#65 feat: member name resolution, receive_files, DRY OAuth, and provider-neutral tool descriptions

[Anonymous]

Originally created by: kumaakh

What's in this PR

Member name resolution (closes [#51])

All tools now accept member_name as an alternative to member_id. A resolveMember utility handles lookup by UUID (precedence) or friendly name. Validation rejects calls with neither.

New receive_files tool

Download files from a member to a local directory. Mirrors send_files — accepts multiple paths in a single call, enforces work_folder boundary.

Server version surfaced (closes [#50])

MCP server registered as apra fleet server <version>. All JSON-format tool outputs include a server_version field.

DRY OAuth for all providers (closes [#62])

ProviderAdapter interface extended with three methods: oauthCredentialFiles(), oauthSettingsMerge(), oauthEnvVarsToUnset(). provision_auth and remove_member are now fully provider-generic.

• Gemini: copies 3 credential files (oauth_creds.json, google_accounts.json, settings.json), deep-merges security.auth.selectedType = oauth-personal, unsets GEMINI_API_KEY
• Claude: copies existing credential file (unchanged behaviour)
• Codex / Copilot: no OAuth file copy (API key only)

New OS helpers: readRemoteJson, deepMergeJson (recursive JSON merge via remote node script), shellPath (preserves $HOME variable expansion when escaping remote paths).

list_members and member_detail show auth mode per member: oauth, api-key, or none.

Prompt delivery via file

Prompts written to a unique .fleet-task-<uuid>.md file in the member work folder and passed by reference. Eliminates shell quoting bugs on Windows with Gemini CLI.

Gemini provider improvements

Premium model tier maps to gemini-3-pro-preview. key_path consolidates cloud_ssh_key_path.

Model tier schema (closes [#53])

execute_prompt model parameter advertises cheap / standard / premium as primary input. Tier-to-model resolution is per-provider via modelTiers().

Provider-neutral tool descriptions

All tool descriptions rewritten from user perspective — no internal field names, env var names, file paths, or implementation details exposed.

Bug fixes

• remove_member: skips SSH key deletion when key is shared with another member
• send_files / receive_files: null-byte rejection in file path inputs
• Shell path escaping: $HOME now expands correctly in all remote shell commands
• deepMergeJson: fixed shell quoting conflict in inline node script

Removals

• reset_session removed — redundant with execute_prompt(resume=false)

Verified against v0.1.3_d10302

Issue	Observation
[#51]	member_detail(member_name="focus-dev2") → correct member. No params → validation error. Unknown name → "not found".
[#50]	fleet_status(format="json") → "version":"v0.1.3_d10302". member_detail(format="json") → "server_version":"v0.1.3_d10302".
[#62]	provision_auth(member_name="focus-dev2") → "✅ OAuth credentials for gemini deployed. Auth: verified with a successful gemini API call."
[#53]	execute_prompt(model="cheap") on Claude member → succeeded.

🤖 Generated with Claude Code

[Anonymous]

Ticket changed by: kumaakh

• status: open --> closed