@1claw/cli 0.32.2 → 0.34.1

package/README.md

@@ -1,4 +1,4 @@
-# @1claw/cli (v0.32.1)
+# @1claw/cli (v0.34.1)
 
 Command-line interface for [1Claw](https://1claw.xyz) — HSM-backed secret management for AI agents and humans.
 
@@ -8,6 +8,14 @@ Designed for CI/CD pipelines, DevOps workflows, and server environments.
 
 ## Installation
 
+### Homebrew (macOS / Linux)
+
+```bash
+brew install 1clawAI/tap/1claw
+```
+
+### npm
+
 ```bash
 npm install -g @1claw/cli
 ```
@@ -46,8 +54,45 @@ export ONECLAW_TOKEN="your-jwt"
 export ONECLAW_API_KEY="1ck_..."
 ```
 
+## Quick Start
+
+```bash
+1claw login                # Authenticate via browser
+1claw setup                # Auto-configure Claude, Cursor, VS Code, etc.
+1claw import .env          # Import secrets from a .env file into your vault
+```
+
 ## Commands
 
+### Setup (AI Client Auto-Configuration)
+
+Auto-detect and configure AI clients (Claude Desktop, Cursor, VS Code, Zed, Windsurf, Claude Code) to use the 1Claw MCP server for runtime secret access.
+
+```bash
+1claw setup                            # Interactive: detect clients, select, configure
+1claw setup --client cursor            # Configure only Cursor
+1claw setup --agent-key ocv_...        # Use a specific agent API key
+1claw setup --project                  # Write MCP config to current project instead of global
+1claw setup --skip-auth                # Skip authentication check
+```
+
+The command detects installed AI clients, prompts you to select which ones to configure, and writes the appropriate MCP server entry to each client's config file. It uses `npx @1claw/mcp` by default, or a globally installed `1claw-mcp` binary if available.
+
+### Import (.env File)
+
+Import secrets from a local `.env` file into a 1Claw vault.
+
+```bash
+1claw import .env                      # Import all keys from .env
+1claw import .env.production \
+  --prefix prod/                       # Add a path prefix to all keys
+1claw import .env --dry-run            # Preview what would be imported
+1claw import .env --force              # Overwrite existing secrets
+1claw import .env --vault <id>         # Import to a specific vault
+```
+
+Handles standard `.env` syntax: `KEY=value`, single/double-quoted values, `export` prefix, comments, and multiline values.
+
 ### Auth
 
 ```bash
@@ -117,8 +162,22 @@ echo "sk_live_..." | 1claw secret set <path> --stdin   # From stdin
 1claw env push .env                            # Push .env file to vault
 1claw env run -- npm start                     # Run with secrets injected
 1claw env run --prefix config/ -- ./deploy.sh  # Only inject matching secrets
+1claw env run --no-cache -- npm start          # Skip local cache, always fetch from API
 ```
 
+### Environment Cache (Offline Mode)
+
+Cache secrets locally in an AES-256-GCM encrypted file for offline `env run`. The encryption key is derived from your authentication token.
+
+```bash
+1claw env cache                                # Download and cache secrets locally
+1claw env cache --ttl 3600                     # Cache with 1-hour TTL (default: 300s)
+1claw env cache-status                         # Show cache age, vault ID, secret count
+1claw env cache-clear                          # Delete the local cache
+```
+
+When a valid cache exists, `env run` uses it automatically instead of calling the API. Use `--no-cache` on `env run` to bypass. Cache is stored at `~/.config/1claw/env-cache.enc` (mode `0600`).
+
 ### Agents
 
 ```bash
@@ -466,6 +525,23 @@ Config is stored in `~/.config/1claw/config.json`. Keys:
 | `output-format` | `table`                 | Default output: `table`, `json`, or `plain` |
 | `default-vault` | (none)                  | Default vault ID for commands               |
 
+## DPoP (Proof-of-Possession)
+
+Enable [DPoP (RFC 9449)](https://datatracker.ietf.org/doc/html/rfc9449) to bind agent tokens to a persistent P-256 keypair. Stolen tokens are unusable without the matching private key.
+
+```bash
+export ONECLAW_DPOP=true
+1claw agent token <id>     # Token exchange includes DPoP proof + public JWK
+```
+
+When `ONECLAW_DPOP=true` is set, the CLI:
+
+1. Generates a P-256 ECDSA keypair on first use and persists it at `~/.config/1claw/dpop-key.json` (mode `0600`).
+2. Sends the public JWK during token exchange (`POST /v1/auth/agent-token`).
+3. Attaches a `DPoP` proof JWT header to every API request.
+
+The keypair is reused across sessions. To rotate it, delete `~/.config/1claw/dpop-key.json` — a new keypair is generated on the next request. Any tokens bound to the old key become invalid.
+
 ## CI/CD examples
 
 ### GitHub Actions

package/dist/src/ai-clients.d.ts

@@ -0,0 +1,19 @@
+export interface AiClient {
+    name: string;
+    slug: string;
+    configPath: string;
+    configFormat: "mcpServers" | "servers" | "zed" | "claude-code";
+    detected: boolean;
+}
+export declare function detectAiClients(): AiClient[];
+export interface McpServerEntry {
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+}
+export declare function buildMcpEntry(envVars: Record<string, string>): McpServerEntry;
+export declare function configureClient(client: AiClient, entry: McpServerEntry): {
+    success: boolean;
+    message: string;
+};
+//# sourceMappingURL=ai-clients.d.ts.map

package/dist/src/ai-clients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-clients.d.ts","sourceRoot":"","sources":["../../src/ai-clients.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,QAAQ;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,YAAY,GAAG,SAAS,GAAG,KAAK,GAAG,aAAa,CAAC;IAC/D,QAAQ,EAAE,OAAO,CAAC;CACrB;AAkBD,wBAAgB,eAAe,IAAI,QAAQ,EAAE,CAqF5C;AAED,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,cAAc,CAgB7E;AAED,wBAAgB,eAAe,CAC3B,MAAM,EAAE,QAAQ,EAChB,KAAK,EAAE,cAAc,GACtB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA4EvC"}

package/dist/src/ai-clients.js

@@ -0,0 +1,218 @@
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { homedir, platform } from "node:os";
+import { dirname } from "node:path";
+import { execSync } from "node:child_process";
+function expandHome(p) {
+    return p.replace(/^~/, homedir());
+}
+function resolveGlobalMcpBinary() {
+    try {
+        const resolved = execSync("which 1claw-mcp 2>/dev/null", {
+            encoding: "utf-8",
+        }).trim();
+        if (resolved)
+            return resolved;
+    }
+    catch {
+        // not found globally
+    }
+    return "";
+}
+export function detectAiClients() {
+    const isMac = platform() === "darwin";
+    const clients = [
+        {
+            name: "Claude Desktop",
+            slug: "claude-desktop",
+            configPath: isMac
+                ? "~/Library/Application Support/Claude/claude_desktop_config.json"
+                : "~/.config/claude/claude_desktop_config.json",
+            configFormat: "mcpServers",
+            detected: false,
+        },
+        {
+            name: "Claude Code",
+            slug: "claude-code",
+            configPath: "",
+            configFormat: "claude-code",
+            detected: false,
+        },
+        {
+            name: "Cursor",
+            slug: "cursor",
+            configPath: "~/.cursor/mcp.json",
+            configFormat: "mcpServers",
+            detected: false,
+        },
+        {
+            name: "Windsurf",
+            slug: "windsurf",
+            configPath: "~/.codeium/windsurf/mcp_config.json",
+            configFormat: "mcpServers",
+            detected: false,
+        },
+        {
+            name: "VS Code",
+            slug: "vscode",
+            configPath: "~/.vscode/mcp.json",
+            configFormat: "servers",
+            detected: false,
+        },
+        {
+            name: "Zed",
+            slug: "zed",
+            configPath: "~/.config/zed/settings.json",
+            configFormat: "zed",
+            detected: false,
+        },
+        {
+            name: "Continue.dev",
+            slug: "continue",
+            configPath: "~/.continue/config.json",
+            configFormat: "mcpServers",
+            detected: false,
+        },
+    ];
+    for (const client of clients) {
+        if (client.slug === "claude-code") {
+            try {
+                execSync("which claude 2>/dev/null", { encoding: "utf-8" });
+                client.detected = true;
+            }
+            catch {
+                client.detected = false;
+            }
+            continue;
+        }
+        const expanded = expandHome(client.configPath);
+        if (client.slug === "cursor") {
+            client.detected =
+                existsSync(expandHome("~/.cursor")) ||
+                    existsSync(expanded);
+        }
+        else if (client.slug === "vscode") {
+            client.detected =
+                existsSync(expandHome("~/.vscode")) ||
+                    existsSync(expanded);
+        }
+        else {
+            client.detected =
+                existsSync(expanded) ||
+                    existsSync(dirname(expanded));
+        }
+    }
+    return clients;
+}
+export function buildMcpEntry(envVars) {
+    const globalBin = resolveGlobalMcpBinary();
+    if (globalBin) {
+        return {
+            command: globalBin,
+            args: [],
+            env: envVars,
+        };
+    }
+    return {
+        command: "npx",
+        args: ["-y", "@1claw/mcp"],
+        env: envVars,
+    };
+}
+export function configureClient(client, entry) {
+    if (client.configFormat === "claude-code") {
+        return configureClaudeCode(entry);
+    }
+    const configPath = expandHome(client.configPath);
+    const dir = dirname(configPath);
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    let config = {};
+    if (existsSync(configPath)) {
+        try {
+            config = JSON.parse(readFileSync(configPath, "utf-8"));
+        }
+        catch {
+            return {
+                success: false,
+                message: `Failed to parse ${configPath}`,
+            };
+        }
+    }
+    const serverStanza = {
+        command: entry.command,
+        args: entry.args,
+        env: entry.env,
+    };
+    switch (client.configFormat) {
+        case "mcpServers": {
+            if (!config.mcpServers || typeof config.mcpServers !== "object") {
+                config.mcpServers = {};
+            }
+            config.mcpServers["1claw"] =
+                serverStanza;
+            break;
+        }
+        case "servers": {
+            if (!config.servers || typeof config.servers !== "object") {
+                config.servers = {};
+            }
+            config.servers["1claw"] =
+                serverStanza;
+            break;
+        }
+        case "zed": {
+            if (!config.context_servers ||
+                typeof config.context_servers !== "object") {
+                config.context_servers = {};
+            }
+            config.context_servers["1claw"] = {
+                command: {
+                    path: entry.command,
+                    args: entry.args,
+                    env: entry.env,
+                },
+                settings: {},
+            };
+            break;
+        }
+    }
+    const tmpPath = configPath + ".1claw-tmp";
+    writeFileSync(tmpPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
+    const { renameSync } = require("node:fs");
+    renameSync(tmpPath, configPath);
+    return {
+        success: true,
+        message: `Configured ${client.name} at ${configPath}`,
+    };
+}
+function configureClaudeCode(entry) {
+    const envArgs = Object.entries(entry.env)
+        .flatMap(([k, v]) => ["-e", `${k}=${v}`]);
+    const cmdParts = [
+        "claude", "mcp", "add",
+        "-s", "user",
+        ...envArgs,
+        "1claw",
+        "--",
+        entry.command,
+        ...entry.args,
+    ];
+    try {
+        execSync(cmdParts.join(" "), {
+            encoding: "utf-8",
+            stdio: "pipe",
+        });
+        return {
+            success: true,
+            message: "Configured Claude Code via `claude mcp add`",
+        };
+    }
+    catch (err) {
+        return {
+            success: false,
+            message: `Failed to configure Claude Code: ${err.message}`,
+        };
+    }
+}
+//# sourceMappingURL=ai-clients.js.map

package/dist/src/ai-clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-clients.js","sourceRoot":"","sources":["../../src/ai-clients.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAQ,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAU9C,SAAS,UAAU,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,sBAAsB;IAC3B,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,6BAA6B,EAAE;YACrD,QAAQ,EAAE,OAAO;SACpB,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACL,qBAAqB;IACzB,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe;IAC3B,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,QAAQ,CAAC;IAEtC,MAAM,OAAO,GAAe;QACxB;YACI,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,KAAK;gBACb,CAAC,CAAC,iEAAiE;gBACnE,CAAC,CAAC,6CAA6C;YACnD,YAAY,EAAE,YAAY;YAC1B,QAAQ,EAAE,KAAK;SAClB;QACD;YACI,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,aAAa;YACnB,UAAU,EAAE,EAAE;YACd,YAAY,EAAE,aAAa;YAC3B,QAAQ,EAAE,KAAK;SAClB;QACD;YACI,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,oBAAoB;YAChC,YAAY,EAAE,YAAY;YAC1B,QAAQ,EAAE,KAAK;SAClB;QACD;YACI,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,qCAAqC;YACjD,YAAY,EAAE,YAAY;YAC1B,QAAQ,EAAE,KAAK;SAClB;QACD;YACI,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,oBAAoB;YAChC,YAAY,EAAE,SAAS;YACvB,QAAQ,EAAE,KAAK;SAClB;QACD;YACI,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,KAAK;YACX,UAAU,EAAE,6BAA6B;YACzC,YAAY,EAAE,KAAK;YACnB,QAAQ,EAAE,KAAK;SAClB;QACD;YACI,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,yBAAyB;YACrC,YAAY,EAAE,YAAY;YAC1B,QAAQ,EAAE,KAAK;SAClB;KACJ,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAChC,IAAI,CAAC;gBACD,QAAQ,CAAC,0BAA0B,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC5D,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;YAC5B,CAAC;YACD,SAAS;QACb,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,CAAC,QAAQ;gBACX,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;oBACnC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,CAAC,QAAQ;gBACX,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;oBACnC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,QAAQ;gBACX,UAAU,CAAC,QAAQ,CAAC;oBACpB,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAQD,MAAM,UAAU,aAAa,CAAC,OAA+B;IACzD,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAE3C,IAAI,SAAS,EAAE,CAAC;QACZ,OAAO;YACH,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,EAAE;YACR,GAAG,EAAE,OAAO;SACf,CAAC;IACN,CAAC;IAED,OAAO;QACH,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC;QAC1B,GAAG,EAAE,OAAO;KACf,CAAC;AACN,CAAC;AAED,MAAM,UAAU,eAAe,CAC3B,MAAgB,EAChB,KAAqB;IAErB,IAAI,MAAM,CAAC,YAAY,KAAK,aAAa,EAAE,CAAC;QACxC,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAEjD,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,mBAAmB,UAAU,EAAE;aAC3C,CAAC;QACN,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAAG;QACjB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;KACjB,CAAC;IAEF,QAAQ,MAAM,CAAC,YAAY,EAAE,CAAC;QAC1B,KAAK,YAAY,CAAC,CAAC,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC9D,MAAM,CAAC,UAAU,GAAG,EAAE,CAAC;YAC3B,CAAC;YACA,MAAM,CAAC,UAAsC,CAAC,OAAO,CAAC;gBACnD,YAAY,CAAC;YACjB,MAAM;QACV,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACxD,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;YACxB,CAAC;YACA,MAAM,CAAC,OAAmC,CAAC,OAAO,CAAC;gBAChD,YAAY,CAAC;YACjB,MAAM;QACV,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACT,IACI,CAAC,MAAM,CAAC,eAAe;gBACvB,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,EAC5C,CAAC;gBACC,MAAM,CAAC,eAAe,GAAG,EAAE,CAAC;YAChC,CAAC;YACA,MAAM,CAAC,eAA2C,CAAC,OAAO,CAAC,GAAG;gBAC3D,OAAO,EAAE;oBACL,IAAI,EAAE,KAAK,CAAC,OAAO;oBACnB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,GAAG,EAAE,KAAK,CAAC,GAAG;iBACjB;gBACD,QAAQ,EAAE,EAAE;aACf,CAAC;YACF,MAAM;QACV,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,GAAG,YAAY,CAAC;IAC1C,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAExE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1C,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAEhC,OAAO;QACH,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,cAAc,MAAM,CAAC,IAAI,OAAO,UAAU,EAAE;KACxD,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CACxB,KAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;SACpC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAG;QACb,QAAQ,EAAE,KAAK,EAAE,KAAK;QACtB,IAAI,EAAE,MAAM;QACZ,GAAG,OAAO;QACV,OAAO;QACP,IAAI;QACJ,KAAK,CAAC,OAAO;QACb,GAAG,KAAK,CAAC,IAAI;KAChB,CAAC;IAEF,IAAI,CAAC;QACD,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YACzB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO;YACH,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,6CAA6C;SACzD,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,OAAO;YACH,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,oCAAqC,GAAa,CAAC,OAAO,EAAE;SACxE,CAAC;IACN,CAAC;AACL,CAAC"}

package/dist/src/auth/dpop.d.ts

@@ -0,0 +1,5 @@
+export declare function getOrCreateDPoPKey(): Promise<CryptoKeyPair>;
+export declare function getPublicJwk(): Promise<JsonWebKey>;
+export declare function generateDPoPProof(method: string, url: string): Promise<string>;
+export declare function isDPoPEnabled(): boolean;
+//# sourceMappingURL=dpop.d.ts.map

package/dist/src/auth/dpop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dpop.d.ts","sourceRoot":"","sources":["../../../src/auth/dpop.ts"],"names":[],"mappings":"AAgBA,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,aAAa,CAAC,CAiDjE;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,CAKxD;AAED,wBAAsB,iBAAiB,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAiCjB;AAED,wBAAgB,aAAa,IAAI,OAAO,CAEvC"}

package/dist/src/auth/dpop.js

@@ -0,0 +1,81 @@
+import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+const configDir = process.env.ONECLAW_CONFIG_DIR || join(homedir(), ".config", "1claw");
+const DPOP_KEY_PATH = join(configDir, "dpop-key.json");
+let cachedKeyPair = null;
+let cachedPublicJwk = null;
+export async function getOrCreateDPoPKey() {
+    if (cachedKeyPair)
+        return cachedKeyPair;
+    try {
+        const stored = JSON.parse(readFileSync(DPOP_KEY_PATH, "utf8"));
+        const privateKey = await crypto.subtle.importKey("jwk", stored.private, { name: "ECDSA", namedCurve: "P-256" }, true, ["sign"]);
+        const publicKey = await crypto.subtle.importKey("jwk", stored.public, { name: "ECDSA", namedCurve: "P-256" }, true, ["verify"]);
+        cachedKeyPair = { privateKey, publicKey };
+        cachedPublicJwk = stored.public;
+        return cachedKeyPair;
+    }
+    catch {
+        // Generate new keypair
+        const keyPair = await crypto.subtle.generateKey({ name: "ECDSA", namedCurve: "P-256" }, true, ["sign", "verify"]);
+        const privateJwk = await crypto.subtle.exportKey("jwk", keyPair.privateKey);
+        const publicJwk = await crypto.subtle.exportKey("jwk", keyPair.publicKey);
+        mkdirSync(configDir, { recursive: true });
+        writeFileSync(DPOP_KEY_PATH, JSON.stringify({ private: privateJwk, public: publicJwk }), { mode: 0o600 });
+        cachedKeyPair = keyPair;
+        cachedPublicJwk = publicJwk;
+        return keyPair;
+    }
+}
+export async function getPublicJwk() {
+    if (cachedPublicJwk)
+        return cachedPublicJwk;
+    const kp = await getOrCreateDPoPKey();
+    cachedPublicJwk = await crypto.subtle.exportKey("jwk", kp.publicKey);
+    return cachedPublicJwk;
+}
+export async function generateDPoPProof(method, url) {
+    const keyPair = await getOrCreateDPoPKey();
+    const publicJwk = await getPublicJwk();
+    const header = {
+        typ: "dpop+jwt",
+        alg: "ES256",
+        jwk: {
+            kty: publicJwk.kty,
+            crv: publicJwk.crv,
+            x: publicJwk.x,
+            y: publicJwk.y,
+        },
+    };
+    const payload = {
+        jti: crypto.randomUUID(),
+        htm: method.toUpperCase(),
+        htu: stripQuery(url),
+        iat: Math.floor(Date.now() / 1000),
+    };
+    const headerB64 = base64url(JSON.stringify(header));
+    const payloadB64 = base64url(JSON.stringify(payload));
+    const signingInput = `${headerB64}.${payloadB64}`;
+    const signature = await crypto.subtle.sign({ name: "ECDSA", hash: "SHA-256" }, keyPair.privateKey, new TextEncoder().encode(signingInput));
+    return `${signingInput}.${base64urlFromBuffer(signature)}`;
+}
+export function isDPoPEnabled() {
+    return process.env.ONECLAW_DPOP === "true";
+}
+function stripQuery(url) {
+    try {
+        const u = new URL(url);
+        return `${u.protocol}//${u.host}${u.pathname}`;
+    }
+    catch {
+        return url.split("?")[0];
+    }
+}
+function base64url(str) {
+    return Buffer.from(str, "utf8").toString("base64url");
+}
+function base64urlFromBuffer(buf) {
+    return Buffer.from(new Uint8Array(buf)).toString("base64url");
+}
+//# sourceMappingURL=dpop.js.map

package/dist/src/auth/dpop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dpop.js","sourceRoot":"","sources":["../../../src/auth/dpop.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,MAAM,SAAS,GACX,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAC1E,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AAOvD,IAAI,aAAa,GAAyB,IAAI,CAAC;AAC/C,IAAI,eAAe,GAAsB,IAAI,CAAC;AAE9C,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACpC,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IAExC,IAAI,CAAC;QACD,MAAM,MAAM,GAAkB,IAAI,CAAC,KAAK,CACpC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CACtC,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5C,KAAK,EACL,MAAM,CAAC,OAAO,EACd,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,MAAM,CAAC,CACX,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC3C,KAAK,EACL,MAAM,CAAC,MAAM,EACb,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,QAAQ,CAAC,CACb,CAAC;QACF,aAAa,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QAC1C,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;QAChC,OAAO,aAAa,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACL,uBAAuB;QACvB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAC3C,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,CAAC,CACrB,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5C,KAAK,EACL,OAAO,CAAC,UAAU,CACrB,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC3C,KAAK,EACL,OAAO,CAAC,SAAS,CACpB,CAAC;QACF,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,aAAa,CACT,aAAa,EACb,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAC1D,EAAE,IAAI,EAAE,KAAK,EAAE,CAClB,CAAC;QACF,aAAa,GAAG,OAAO,CAAC;QACxB,eAAe,GAAG,SAAS,CAAC;QAC5B,OAAO,OAAO,CAAC;IACnB,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAC9B,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAC5C,MAAM,EAAE,GAAG,MAAM,kBAAkB,EAAE,CAAC;IACtC,eAAe,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;IACrE,OAAO,eAAe,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,MAAc,EACd,GAAW;IAEX,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE,CAAC;IAEvC,MAAM,MAAM,GAAG;QACX,GAAG,EAAE,UAAU;QACf,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE;YACD,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,CAAC,EAAE,SAAS,CAAC,CAAC;YACd,CAAC,EAAE,SAAS,CAAC,CAAC;SACjB;KACJ,CAAC;IAEF,MAAM,OAAO,GAAG;QACZ,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE;QACxB,GAAG,EAAE,MAAM,CAAC,WAAW,EAAE;QACzB,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC;QACpB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;KACrC,CAAC;IAEF,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAElD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACtC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,OAAO,CAAC,UAAU,EAClB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CACzC,CAAC;IAEF,OAAO,GAAG,YAAY,IAAI,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,aAAa;IACzB,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC;AAC/C,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC3B,IAAI,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAgB;IACzC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClE,CAAC"}

package/dist/src/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAEA,qBAAa,QAAS,SAAQ,KAAK;IAEpB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,MAAM;IACd,IAAI,CAAC,EAAE,MAAM;gBAFb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,YAAA;CAK3B;AAgBD,wBAAsB,GAAG,CAAC,CAAC,GAAG,OAAO,EACjC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B,GACP,OAAO,CAAC,CAAC,CAAC,CAgCZ;AAED,wBAAsB,SAAS,CAAC,CAAC,GAAG,OAAO,EACvC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;CAC5D,GACP,OAAO,CAAC,CAAC,CAAC,CAEZ"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAGA,qBAAa,QAAS,SAAQ,KAAK;IAEpB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,MAAM;IACd,IAAI,CAAC,EAAE,MAAM;gBAFb,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,YAAA;CAK3B;AAgBD,wBAAsB,GAAG,CAAC,CAAC,GAAG,OAAO,EACjC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B,GACP,OAAO,CAAC,CAAC,CAAC,CAqCZ;AAED,wBAAsB,SAAS,CAAC,CAAC,GAAG,OAAO,EACvC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;CAC5D,GACP,OAAO,CAAC,CAAC,CAAC,CAEZ"}

package/dist/src/client.js

@@ -1,4 +1,5 @@
 import { getApiUrl, getToken } from "./config.js";
+import { isDPoPEnabled, generateDPoPProof } from "./auth/dpop.js";
 export class ApiError extends Error {
     status;
     detail;
@@ -33,6 +34,7 @@ export async function api(path, options = {}) {
                 url.searchParams.set(k, String(v));
         }
     }
+    const method = options.method ?? "GET";
     const headers = {
         "Content-Type": "application/json",
         "User-Agent": "@1claw/cli",
@@ -40,8 +42,11 @@ export async function api(path, options = {}) {
     };
     if (token)
         headers["Authorization"] = `Bearer ${token}`;
+    if (isDPoPEnabled()) {
+        headers["DPoP"] = await generateDPoPProof(method, url.toString());
+    }
     const res = await fetch(url.toString(), {
-        method: options.method ?? "GET",
+        method,
         headers,
         body: options.body ? JSON.stringify(options.body) : undefined,
     });

package/dist/src/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEpB;IACA;IACA;IAHX,YACW,MAAc,EACd,MAAc,EACd,IAAa;QAEpB,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QAJvB,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QAGpB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IAC3B,CAAC;CACJ;AAED,KAAK,UAAU,cAAc,CACzB,GAAa;IAEb,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2B,CAAC;QAC1D,OAAO;YACH,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU;YACnE,IAAI,EAAE,IAAI,CAAC,IAAI;SAClB,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IACtC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CACrB,IAAY,EACZ,UAMI,EAAE;IAEN,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAE3C,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAA2B;QACpC,cAAc,EAAE,kBAAkB;QAClC,YAAY,EAAE,YAAY;QAC1B,GAAG,OAAO,CAAC,OAAO;KACrB,CAAC;IACF,IAAI,KAAK;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;IAExD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,OAAO;QACP,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAChE,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAc,CAAC;IAE9C,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC3B,IAAY,EACZ,UAII,EAAE;IAEN,OAAO,GAAG,CAAI,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAgB,MAAM,gBAAgB,CAAC;AAEhF,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEpB;IACA;IACA;IAHX,YACW,MAAc,EACd,MAAc,EACd,IAAa;QAEpB,KAAK,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;QAJvB,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QAGpB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IAC3B,CAAC;CACJ;AAED,KAAK,UAAU,cAAc,CACzB,GAAa;IAEb,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2B,CAAC;QAC1D,OAAO;YACH,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU;YACnE,IAAI,EAAE,IAAI,CAAC,IAAI;SAClB,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IACtC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CACrB,IAAY,EACZ,UAMI,EAAE;IAEN,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAE3C,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,MAAM,OAAO,GAA2B;QACpC,cAAc,EAAE,kBAAkB;QAClC,YAAY,EAAE,YAAY;QAC1B,GAAG,OAAO,CAAC,OAAO;KACrB,CAAC;IACF,IAAI,KAAK;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;IAExD,IAAI,aAAa,EAAE,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM;QACN,OAAO;QACP,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAChE,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAc,CAAC;IAE9C,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC3B,IAAY,EACZ,UAII,EAAE;IAEN,OAAO,GAAG,CAAI,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC"}

package/dist/src/commands/env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/commands/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAepC,eAAO,MAAM,UAAU,SAEtB,CAAC"}
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../../src/commands/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBpC,eAAO,MAAM,UAAU,SAEtB,CAAC"}