@0xmaxma/claude-gateway 1.7.9 → 1.8.0

package/dist/cli/http-client.js

@@ -0,0 +1,332 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.expandHome = exports.DEFAULT_PORT = void 0;
+exports.loadCliConfig = loadCliConfig;
+exports.resolveUrlPlan = resolveUrlPlan;
+exports.resolveUrl = resolveUrl;
+exports.resolveLocalUrl = resolveLocalUrl;
+exports.resolveKey = resolveKey;
+exports.buildRequestUrl = buildRequestUrl;
+exports.request = request;
+exports.resolveReachableUrl = resolveReachableUrl;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const manager_1 = require("./manager");
+const paths_1 = require("../utils/paths");
+Object.defineProperty(exports, "expandHome", { enumerable: true, get: function () { return paths_1.expandHome; } });
+const health_1 = require("./health");
+/**
+ * CLI HTTP client — resolves where to talk to the gateway and which key to use,
+ * then makes the request. Kept deliberately light: it reads the config JSON
+ * directly rather than going through the server's loadConfig() (no validation,
+ * migration, or server-side side effects), so the CLI stays fast and works even
+ * when the gateway is misconfigured or down.
+ *
+ * Resolution never prints the API key.
+ */
+exports.DEFAULT_PORT = 10850;
+/** Read ~/.claude-gateway/config.json (or an override path) and extract the
+ *  fields the CLI needs. Returns an empty view if the file is missing/unreadable
+ *  so that flags/env can still drive resolution. */
+function loadCliConfig(configPath) {
+    const file = (0, paths_1.expandHome)(configPath ||
+        process.env.GATEWAY_CONFIG ||
+        path.join(os.homedir(), '.claude-gateway', 'config.json'));
+    try {
+        const raw = fs.readFileSync(file, 'utf8');
+        const json = JSON.parse(raw);
+        return {
+            bind: json.gateway?.bind,
+            publicUrl: json.gateway?.publicUrl,
+            keys: json.gateway?.api?.keys,
+            logDir: json.gateway?.logDir,
+        };
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Resolve where the CLI should talk to the gateway. Precedence:
+ *   --url  →  $CLAUDE_GATEWAY_URL  →  http://<bind>:<port> *when a gateway is
+ *   running on this host*  →  config.gateway.publicUrl  →  http://<bind>:<port>
+ *
+ * `config.gateway.publicUrl` describes *this* gateway as seen from outside,
+ * so when the gateway is running here, loopback and the public URL are the
+ * same server — the public one just adds a reverse-proxy hop. Preferring it
+ * from the gateway's own host makes every command depend on that proxy, and a
+ * proxy enforcing its own authentication (which the CLI has no credentials
+ * for) answers 401 to commands that work perfectly over loopback. So a live
+ * local gateway wins; `--url` and `$CLAUDE_GATEWAY_URL` still override, for
+ * deliberately exercising the proxy path or reaching another host.
+ *
+ * Liveness comes from a pidfile, which can lie: a gateway killed without
+ * cleanup leaves one behind, and the OS may reissue that pid to an unrelated
+ * process. The local address would then be preferred and nothing would answer
+ * it, so `publicUrl` is returned as `fallbackUrl` — the same gateway by its
+ * other name — for the caller to retry once. That cost is paid only when the
+ * local address is genuinely unreachable.
+ *
+ * A bind of 0.0.0.0 / :: is a listen address, not a dial address, so it is
+ * rewritten to loopback for the client. The port comes from the pidfile when a
+ * gateway is running (see readLocalGateway), else $PORT, else 10850. The
+ * returned URLs have no trailing slash.
+ */
+function resolveUrlPlan(i = {}) {
+    const env = i.env ?? process.env;
+    const cfg = i.config ?? {};
+    const explicit = i.flagUrl || env.CLAUDE_GATEWAY_URL;
+    // An address the caller named is the address used, with no second guess:
+    // silently retrying somewhere else would defeat the point of naming it.
+    if (explicit)
+        return { baseUrl: stripSlash(explicit) };
+    const publicUrl = cfg.publicUrl ? stripSlash(cfg.publicUrl) : undefined;
+    const local = (i.localGateway ?? manager_1.readLocalGateway)();
+    if (!local)
+        return { baseUrl: publicUrl ?? bindUrl(cfg, env) };
+    const baseUrl = bindUrl(cfg, env, local.port);
+    return publicUrl && publicUrl !== baseUrl ? { baseUrl, fallbackUrl: publicUrl } : { baseUrl };
+}
+/** The base URL alone — see resolveUrlPlan() for the precedence and why. */
+function resolveUrl(i = {}) {
+    return resolveUrlPlan(i).baseUrl;
+}
+function stripSlash(url) {
+    return url.replace(/\/+$/, '');
+}
+/** `http://<bind>:<port>` — where a gateway on THIS host actually listens.
+ *  `knownPort` is the port a running gateway reported through its pidfile; it
+ *  wins over `$PORT`, which describes the CLI's own shell and may have nothing
+ *  to do with the shell the server was started from. */
+function bindUrl(cfg, env, knownPort) {
+    // Same precedence the server resolves its own bind with (resolveBindHost in
+    // api/gateway-router): $GATEWAY_BIND → gateway.bind → loopback. The variable
+    // is visible here because the entry point loads ~/.claude-gateway/.env into
+    // process.env on every invocation, CLI runs included. Reading only the config
+    // file made the CLI dial 127.0.0.1 while the gateway listened on the address
+    // from .env, so `gateway status` and `service install`'s health check called
+    // a perfectly healthy gateway down.
+    let host = (env.GATEWAY_BIND || '').trim() || (cfg.bind || '').trim() || '127.0.0.1';
+    // A wildcard bind is not a dialable address; the loopback the server also
+    // listens on is.
+    if (host === '0.0.0.0' || host === '::' || host === '[::]')
+        host = '127.0.0.1';
+    const port = knownPort ?? (parseInt(env.PORT || String(exports.DEFAULT_PORT), 10) || exports.DEFAULT_PORT);
+    return `http://${hostForUrl(host)}:${port}`;
+}
+/** An IPv6 literal has to be bracketed inside a URL authority, or the colons
+ *  read as a port separator: `http://::1:10850` is rejected by `fetch()` as an
+ *  invalid URL, and every command then failed with a parse error naming a URL
+ *  the user never typed. Only `::`/`[::]` were handled before, so any other
+ *  literal (`::1`, `fd00::1`) was interpolated bare. Already-bracketed and
+ *  zone-suffixed forms are left as they are. */
+function hostForUrl(host) {
+    if (host.startsWith('['))
+        return host;
+    return host.includes(':') ? `[${host}]` : host;
+}
+/**
+ * Resolve the URL for probing the gateway *process on this host* — used by
+ * `gateway status` and by `service install`'s post-install health check.
+ * Precedence:
+ *   --url  →  http://<bind>:<port>
+ *
+ * Deliberately NOT resolveUrl(): `config.gateway.publicUrl` (and
+ * `$CLAUDE_GATEWAY_URL`) usually point at a reverse proxy, which may be
+ * unreachable from the box itself — or, worse, still answering from a
+ * different instance, so a dead local service would be reported healthy.
+ * An explicit `--url` still wins, for deliberately checking another host.
+ */
+function resolveLocalUrl(i = {}) {
+    const env = i.env ?? process.env;
+    if (i.flagUrl)
+        return stripSlash(i.flagUrl);
+    const local = (i.localGateway ?? manager_1.readLocalGateway)();
+    return stripSlash(bindUrl(i.config ?? {}, env, local?.port));
+}
+/**
+ * Resolve the API key. Precedence:
+ *   --key  →  $CLAUDE_GATEWAY_API_KEY  →  first admin key in config  →  first key in config
+ *
+ * Returns undefined if none is available. The key is never logged.
+ */
+function resolveKey(i = {}) {
+    const env = i.env ?? process.env;
+    const cfg = i.config ?? {};
+    if (i.flagKey)
+        return i.flagKey;
+    if (env.CLAUDE_GATEWAY_API_KEY)
+        return env.CLAUDE_GATEWAY_API_KEY;
+    const keys = cfg.keys ?? [];
+    const admin = keys.find((k) => k.admin);
+    if (admin)
+        return admin.key;
+    return keys[0]?.key;
+}
+/** A request that never reached a server (DNS, refused, timeout) — as opposed
+ *  to one the gateway answered with an error status. Only the former is worth
+ *  retrying at a different address. */
+class TransportError extends Error {
+    constructor() {
+        super(...arguments);
+        this.transport = true;
+    }
+}
+/** Build the full request URL: `${baseUrl}/api${path}` plus any query string. */
+function buildRequestUrl(baseUrl, apiPath, query) {
+    const base = baseUrl.replace(/\/+$/, '');
+    const p = apiPath.startsWith('/') ? apiPath : `/${apiPath}`;
+    let url = `${base}/api${p}`;
+    if (query) {
+        const qs = new URLSearchParams();
+        for (const [k, v] of Object.entries(query)) {
+            if (v !== undefined && v !== '')
+                qs.append(k, v);
+        }
+        const s = qs.toString();
+        if (s)
+            url += `?${s}`;
+    }
+    return url;
+}
+/**
+ * Make an authenticated request to the gateway. Throws a clear Error (with the
+ * server's message when present) on a non-2xx response or a transport failure,
+ * so command wrappers can surface it and exit non-zero.
+ */
+async function request(opts) {
+    try {
+        return await attempt(opts.baseUrl, opts);
+    }
+    catch (err) {
+        if (!opts.fallbackBaseUrl || !(err instanceof TransportError))
+            throw err;
+        const notify = opts.onFallback ??
+            ((from, to, reason) => process.stderr.write(`Cannot reach the gateway at ${from} (${reason}); retrying at ${to}.\n`));
+        notify(opts.baseUrl, opts.fallbackBaseUrl, err.message);
+        return attempt(opts.fallbackBaseUrl, opts);
+    }
+}
+/** One request against one base URL. Throws TransportError when nothing
+ *  answered, a plain Error when the gateway answered with a non-2xx. */
+async function attempt(baseUrl, opts) {
+    const url = buildRequestUrl(baseUrl, opts.path, opts.query);
+    const headers = {};
+    if (opts.key)
+        headers['Authorization'] = `Bearer ${opts.key}`;
+    const hasBody = opts.body !== undefined && opts.method.toUpperCase() !== 'GET';
+    if (hasBody)
+        headers['Content-Type'] = 'application/json';
+    const controller = new AbortController();
+    const timeoutMs = opts.timeoutMs ?? 30000;
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    let res;
+    let text;
+    try {
+        try {
+            res = await fetch(url, {
+                method: opts.method.toUpperCase(),
+                headers,
+                body: hasBody ? JSON.stringify(opts.body) : undefined,
+                signal: controller.signal,
+            });
+        }
+        catch (err) {
+            const reason = err?.name === 'AbortError' ? `timed out after ${timeoutMs}ms` : err.message;
+            throw new TransportError(`Cannot reach gateway at ${baseUrl}: ${reason}`);
+        }
+        try {
+            // Inside the same deadline: `fetch` resolves once the headers arrive, so
+            // a gateway that wedges mid-body would otherwise hang the CLI forever.
+            text = await res.text();
+        }
+        catch (err) {
+            // Not a TransportError — the gateway answered, so falling back to another
+            // address would only re-ask the same wedged process through a proxy.
+            const reason = err?.name === 'AbortError' ? `timed out after ${timeoutMs}ms` : err.message;
+            throw new Error(`Gateway at ${baseUrl} answered but the response body failed: ${reason}`);
+        }
+    }
+    finally {
+        // In `finally`: a rejected fetch or body read would otherwise leave a live
+        // timer holding the event loop open.
+        clearTimeout(timer);
+    }
+    let data = text;
+    const ctype = res.headers.get('content-type') || '';
+    if (ctype.includes('application/json') || (text.startsWith('{') || text.startsWith('['))) {
+        try {
+            data = JSON.parse(text);
+        }
+        catch {
+            data = text;
+        }
+    }
+    if (!res.ok) {
+        const serverMsg = data && typeof data === 'object' && 'error' in data
+            ? String(data.error)
+            : typeof data === 'string' && data
+                ? data
+                : res.statusText;
+        throw new Error(`HTTP ${res.status} ${opts.method.toUpperCase()} ${opts.path}: ${serverMsg}`);
+    }
+    return { status: res.status, ok: res.ok, data };
+}
+/**
+ * Resolve a plan down to one base URL that something is actually answering on.
+ *
+ * `request()` carries the stale-pidfile fallback per call, which suits the
+ * one-shot commands. The interactive flows (`agents`, `channels`) thread a
+ * single base URL through many helpers and many requests, so they settle the
+ * question once up front instead: if the local address answers nothing, the
+ * whole session runs against `publicUrl`.
+ *
+ * Costs one extra `/health` round trip, and only when a fallback exists at all
+ * — that is, only when a pidfile pointed at a gateway on this host.
+ */
+async function resolveReachableUrl(plan) {
+    if (!plan.fallbackUrl)
+        return plan.baseUrl;
+    const probe = await (0, health_1.probeHealth)(plan.baseUrl);
+    // `answered` rather than `ok`: a 401 or 500 means the gateway is there, and
+    // asking a different address would only hide its answer.
+    if (probe.answered)
+        return plan.baseUrl;
+    process.stderr.write(`Cannot reach the gateway at ${plan.baseUrl} (${probe.detail}); using ${plan.fallbackUrl}.\n`);
+    return plan.fallbackUrl;
+}
+//# sourceMappingURL=http-client.js.map

package/dist/cli/http-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.js","sourceRoot":"","sources":["../../src/cli/http-client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,sCAkBC;AAkDD,wCAcC;AAGD,gCAEC;AAiDD,0CAKC;AAQD,gCASC;AAoCD,0CAaC;AAOD,0BAYC;AA+ED,kDAUC;AA7VD,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAE7B,uCAA2D;AAC3D,0CAA4C;AAenC,2FAfA,kBAAU,OAeA;AAdnB,qCAAuC;AAEvC;;;;;;;;GAQG;AAEU,QAAA,YAAY,GAAG,KAAK,CAAC;AAalC;;oDAEoD;AACpD,SAAgB,aAAa,CAAC,UAAmB;IAC/C,MAAM,IAAI,GAAG,IAAA,kBAAU,EACrB,UAAU;QACR,OAAO,CAAC,GAAG,CAAC,cAAc;QAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAC5D,CAAC;IACF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoG,CAAC;QAChI,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI;YACxB,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS;YAClC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI;YAC7B,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM;SAC7B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAwBD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,SAAgB,cAAc,CAAC,IAAmB,EAAE;IAClD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACjC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,kBAAkB,CAAC;IACrD,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;IAEvD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,0BAAgB,CAAC,EAAE,CAAC;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;IAE/D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;AAChG,CAAC;AAED,4EAA4E;AAC5E,SAAgB,UAAU,CAAC,IAAmB,EAAE;IAC9C,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;wDAGwD;AACxD,SAAS,OAAO,CAAC,GAAkB,EAAE,GAAsB,EAAE,SAAkB;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,6EAA6E;IAC7E,oCAAoC;IACpC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,WAAW,CAAC;IACrF,0EAA0E;IAC1E,iBAAiB;IACjB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,MAAM;QAAE,IAAI,GAAG,WAAW,CAAC;IAC/E,MAAM,IAAI,GAAG,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,oBAAY,CAAC,EAAE,EAAE,CAAC,IAAI,oBAAY,CAAC,CAAC;IAC3F,OAAO,UAAU,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;gDAKgD;AAChD,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,eAAe,CAAC,IAAmB,EAAE;IACnD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACjC,IAAI,CAAC,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,0BAAgB,CAAC,EAAE,CAAC;IACrD,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,SAAgB,UAAU,CAAC,IAAmB,EAAE;IAC9C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACjC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IAChC,IAAI,GAAG,CAAC,sBAAsB;QAAE,OAAO,GAAG,CAAC,sBAAsB,CAAC;IAClE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC;IAC5B,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AACtB,CAAC;AAqBD;;uCAEuC;AACvC,MAAM,cAAe,SAAQ,KAAK;IAAlC;;QACW,cAAS,GAAG,IAAI,CAAC;IAC5B,CAAC;CAAA;AASD,iFAAiF;AACjF,SAAgB,eAAe,CAAC,OAAe,EAAE,OAAe,EAAE,KAA0C;IAC1G,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;IAC5D,IAAI,GAAG,GAAG,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE;gBAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QACxB,IAAI,CAAC;YAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,OAAO,CAAC,IAAoB;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,YAAY,cAAc,CAAC;YAAE,MAAM,GAAG,CAAC;QACzE,MAAM,MAAM,GACV,IAAI,CAAC,UAAU;YACf,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,IAAI,KAAK,MAAM,kBAAkB,EAAE,KAAK,CAAC,CAAC,CAAC;QACnG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACnE,OAAO,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;wEACwE;AACxE,KAAK,UAAU,OAAO,CAAC,OAAe,EAAE,IAAoB;IAC1D,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IAC/E,IAAI,OAAO;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAE1D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAM,CAAC;IAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,GAAa,CAAC;IAClB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBACrB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;gBACjC,OAAO;gBACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrD,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAI,GAAa,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,mBAAmB,SAAS,IAAI,CAAC,CAAC,CAAE,GAAa,CAAC,OAAO,CAAC;YACjH,MAAM,IAAI,cAAc,CAAC,2BAA2B,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC;YACH,yEAAyE;YACzE,uEAAuE;YACvE,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0EAA0E;YAC1E,qEAAqE;YACrE,MAAM,MAAM,GAAI,GAAa,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,mBAAmB,SAAS,IAAI,CAAC,CAAC,CAAE,GAAa,CAAC,OAAO,CAAC;YACjH,MAAM,IAAI,KAAK,CAAC,cAAc,OAAO,2CAA2C,MAAM,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;YAAS,CAAC;QACT,2EAA2E;QAC3E,qCAAqC;QACrC,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,IAAI,GAAY,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzF,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,SAAS,GACb,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAK,IAAgC;YAC9E,CAAC,CAAC,MAAM,CAAE,IAAgC,CAAC,KAAK,CAAC;YACjD,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI;gBAChC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,mBAAmB,CAAC,IAAa;IACrD,IAAI,CAAC,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,IAAA,oBAAW,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,4EAA4E;IAC5E,yDAAyD;IACzD,IAAI,KAAK,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+BAA+B,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,YAAY,IAAI,CAAC,WAAW,KAAK,CAC9F,CAAC;IACF,OAAO,IAAI,CAAC,WAAW,CAAC;AAC1B,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,27 @@
+import { Paint } from './colors';
+/**
+ * CLI entry point. Returns a process exit code. Never boots the server — the
+ * boot entry (src/index.ts) only calls this when argv[2] is a CLI command.
+ *
+ * Convention: stdout carries the command's result (JSON, pretty by default or
+ * compact with `--json`); human-facing help and errors go to stderr, so result
+ * output is never polluted.
+ */
+export declare function runCli(argv: string[]): Promise<number>;
+/** Two-column rows in the general help. The name column is padded to
+ *  NAME_W; a name wider than that puts its description on the next line.
+ *  Wide enough for the longest name (`service install|status|uninstall`, 32)
+ *  plus a readable gap, so no core command wraps. Exported for the test that
+ *  holds this table and the dispatcher to the same set of commands. */
+export declare const NAME_W = 36;
+/** Usage strings in a resource noun's help (`crons list --limit <v>`) run much
+ *  longer than a core command name, so that listing gets its own width. */
+export declare const NOUN_NAME_W = 48;
+export declare const CORE_HELP: ReadonlyArray<readonly [string, string]>;
+/** Render one `  name   description` row, padding before colouring so ANSI
+ *  escapes never count toward the column width. A name at or past `width` puts
+ *  its description on the next line, aligned with the others, rather than
+ *  pushing it out of the column — which is what the two-line form is for.
+ *  Shared by every help listing so they cannot drift apart. */
+export declare function helpRow(name: string, desc: string, paint: Paint, width?: number): string[];
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAc,KAAK,EAAE,MAAM,UAAU,CAAC;AA2B7C;;;;;;;GAOG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAwD5D;AA8KD;;;;uEAIuE;AACvE,eAAO,MAAM,MAAM,KAAK,CAAC;AAEzB;2EAC2E;AAC3E,eAAO,MAAM,WAAW,KAAK,CAAC;AAE9B,eAAO,MAAM,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAW9D,CAAC;AAEF;;;;+DAI+D;AAC/D,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,SAAS,GAAG,MAAM,EAAE,CAG1F"}