@aexol/spectral 0.9.169 → 0.9.171

package/dist/agent/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/agent/agents.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AACrD,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAC/C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAyDD,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAO3E;AACD;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,yEAAyE;IACzE,YAAY,EAAE,IAAI,CAAC;IACnB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG;IACF,YAAY,EAAE,KAAK,CAAC;IACpB,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA8FnC;AAkBD,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,UAAU,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,oBAAoB,CAkBtB;AACD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,KAAK,GAAE,UAAmB,EAC1B,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,GAAG,IAAI,CAepB;AACD;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACvC,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,GAAG,IAAI,CAgBpB;AACD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,YAAY,EAAE,IAAI,CAChB,WAAW,EACX,MAAM,GAAG,aAAa,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,CAC7D,GAAG,IAAI,GACP,MAAM,GAAG,SAAS,CAQpB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,IAAI,CACT,WAAW,EACX,MAAM,GAAG,aAAa,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,CAC7D,GAAG,IAAI,GACP,MAAM,CAcR"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/agent/agents.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AACrD,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAC/C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAyDD,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAO3E;AACD;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,yEAAyE;IACzE,YAAY,EAAE,IAAI,CAAC;IACnB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG;IACF,YAAY,EAAE,KAAK,CAAC;IACpB,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA2EnC;AAkBD,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,UAAU,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,oBAAoB,CAkBtB;AACD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,KAAK,GAAE,UAAmB,EAC1B,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,GAAG,IAAI,CAepB;AACD;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACvC,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,GAAG,IAAI,CAgBpB;AACD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,YAAY,EAAE,IAAI,CAChB,WAAW,EACX,MAAM,GAAG,aAAa,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,CAC7D,GAAG,IAAI,GACP,MAAM,GAAG,SAAS,CAQpB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,IAAI,CACT,WAAW,EACX,MAAM,GAAG,aAAa,GAAG,cAAc,GAAG,OAAO,GAAG,QAAQ,CAC7D,GAAG,IAAI,GACP,MAAM,CAcR"}

package/dist/agent/agents.js

@@ -2,6 +2,7 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import chalk from "chalk";
 import { getAgentDir, parseFrontmatter } from "../sdk/coding-agent/index.js";
+import { classifyGraphqlError, createBackendClient, graphqlErrorMessage, scalars, } from "../generated/graphql-client.js";
 function loadAgentsFromDir(dir, source) {
     const agents = [];
     if (!fs.existsSync(dir))
@@ -70,48 +71,25 @@ export async function refreshCloudAgents(opts) {
     let refresh;
     refresh = (async () => {
         try {
-            const response = await fetch(`${opts.backendUrl.replace(/\/$/, "")}/graphql`, {
-                method: "POST",
-                headers: {
-                    "content-type": "application/json",
-                    authorization: `Bearer ${opts.machineJwt}`,
-                    "x-team-id": teamId,
-                },
-                body: JSON.stringify({
-                    query: `query CloudAgents($teamId: ID!) { agents(teamId: $teamId) { name description systemPrompt model mode scope } }`,
-                    variables: { teamId },
-                }),
+            const client = createBackendClient({
+                backendUrl: opts.backendUrl,
+                machineJwt: opts.machineJwt,
+                teamId,
             });
-            // HTTP 401/403: the machine JWT was rejected outright (expired,
-            // revoked, or signed with a stale secret). Surface as auth-rejected so
-            // the caller can trigger a forced re-registration instead of looping
-            // on the same dead token.
-            if (response.status === 401 || response.status === 403) {
-                const reason = `Cloud agents: backend rejected machine JWT (HTTP ${response.status})`;
-                console.warn(reason);
-                return { authRejected: true, reason };
-            }
-            if (!response.ok) {
-                console.warn(`Cloud agents: backend returned HTTP ${response.status}`);
-                return { authRejected: false, count: 0 };
-            }
-            const payload = (await response.json());
-            // GraphQL commonly returns 200 with an `errors` array when auth fails
-            // (e.g. "Authentication required", "Not authorized for this team").
-            // Treat any auth-flavored error as auth-rejected so the caller can
-            // recover; other GraphQL errors are non-fatal (no agents loaded).
-            if (payload.errors && payload.errors.length > 0) {
-                const msg = payload.errors.map((e) => e.message ?? "").join("; ");
-                const looksLikeAuth = /authentication required|not authorized|unauthor/i.test(msg);
-                const reason = `Cloud agents: backend rejected machine JWT (${msg})`;
-                if (looksLikeAuth) {
-                    console.warn(reason);
-                    return { authRejected: true, reason };
-                }
-                console.warn(reason);
-                return { authRejected: false, count: 0 };
-            }
-            const fetched = payload.data?.agents ?? [];
+            const result = await client("query", { scalars })({
+                agents: [
+                    { teamId },
+                    {
+                        name: true,
+                        description: true,
+                        systemPrompt: true,
+                        model: true,
+                        mode: true,
+                        scope: true,
+                    },
+                ],
+            });
+            const fetched = result.agents ?? [];
             const agents = fetched
                 .filter((a) => typeof a.name === "string" &&
                 typeof a.description === "string" &&
@@ -133,8 +111,18 @@ export async function refreshCloudAgents(opts) {
             return { authRejected: false, count: agents.length };
         }
         catch (err) {
+            // Zeus surfaces a GraphQL `errors` array as `GraphQLError` (HTTP 200)
+            // and non-2xx responses as an error too. Treat auth-flavored failures
+            // as auth-rejected so the caller can trigger a forced re-registration
+            // instead of looping on the same dead token.
+            const classified = classifyGraphqlError(err);
+            if (classified.authRejected) {
+                const reason = `Cloud agents: backend rejected machine JWT (${classified.message})`;
+                console.warn(reason);
+                return { authRejected: true, reason };
+            }
             // Network errors are non-fatal — local agents remain available offline.
-            const msg = err instanceof Error ? err.message : String(err);
+            const msg = graphqlErrorMessage(err);
             console.warn(`Cloud agents: refresh failed (${msg})`);
             return { authRejected: false, count: 0 };
         }

package/dist/generated/graphql-client.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Thin wrapper over the generated Zeus client for the CLI's backend
+ * GraphQL calls.
+ *
+ * Zeus is generated from `backend/schema.graphql` into
+ * `./zeus/index.ts` (see `backend/axolotl.json`). The generated files are
+ * codegen artifacts — never hand-edit them. This module centralizes auth
+ * headers (machine JWT + optional team id) so call sites never rebuild the
+ * `Authorization` / `X-Team-Id` contract by hand.
+ */
+import { Chain, type GraphQLResponse } from "./zeus/index.js";
+import { scalars } from "./scalars.js";
+export type { GraphQLResponse };
+/** Create an authenticated backend GraphQL client (Zeus `Chain`). */
+export declare function createBackendClient(opts: {
+    backendUrl: string;
+    machineJwt: string;
+    teamId?: string;
+}): ReturnType<typeof Chain>;
+/** Shared scalar codecs (ID / DateTime / Long). */
+export { scalars };
+/** True when an error message looks like an auth rejection. */
+export declare function isAuthErrorMessage(message: string): boolean;
+/**
+ * The error message from a caught Zeus `GraphQLError`, or the raw error
+ * string when the thrown value is not a GraphQL response error.
+ */
+export declare function graphqlErrorMessage(err: unknown): string;
+/**
+ * Classify a caught Zeus error as an auth rejection. Zeus throws
+ * `GraphQLError` for HTTP 200 responses with a GraphQL `errors` array, but
+ * non-2xx HTTP responses (e.g. 401/403) are rejected with the parsed JSON
+ * body object. Handle both without losing the original message.
+ */
+export declare function classifyGraphqlError(err: unknown): {
+    authRejected: boolean;
+    message: string;
+};
+//# sourceMappingURL=graphql-client.d.ts.map

package/dist/generated/graphql-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql-client.d.ts","sourceRoot":"","sources":["../../src/generated/graphql-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,KAAK,EAEL,KAAK,eAAe,EAErB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,YAAY,EAAE,eAAe,EAAE,CAAC;AAEhC,qEAAqE;AACrE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,UAAU,CAAC,OAAO,KAAK,CAAC,CAY3B;AAED,mDAAmD;AACnD,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnB,+DAA+D;AAC/D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAI3D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAQxD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG;IAClD,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB,CA4BA"}

package/dist/generated/graphql-client.js

@@ -0,0 +1,74 @@
+/**
+ * Thin wrapper over the generated Zeus client for the CLI's backend
+ * GraphQL calls.
+ *
+ * Zeus is generated from `backend/schema.graphql` into
+ * `./zeus/index.ts` (see `backend/axolotl.json`). The generated files are
+ * codegen artifacts — never hand-edit them. This module centralizes auth
+ * headers (machine JWT + optional team id) so call sites never rebuild the
+ * `Authorization` / `X-Team-Id` contract by hand.
+ */
+import { Chain, GraphQLError, } from "./zeus/index.js";
+import { scalars } from "./scalars.js";
+/** Create an authenticated backend GraphQL client (Zeus `Chain`). */
+export function createBackendClient(opts) {
+    const headers = {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${opts.machineJwt}`,
+    };
+    if (opts.teamId)
+        headers["X-Team-Id"] = opts.teamId;
+    const endpoint = [
+        `${opts.backendUrl.replace(/\/$/, "")}/graphql`,
+        { headers },
+    ];
+    return Chain(...endpoint);
+}
+/** Shared scalar codecs (ID / DateTime / Long). */
+export { scalars };
+/** True when an error message looks like an auth rejection. */
+export function isAuthErrorMessage(message) {
+    return /authentication required|not authorized|unauthor|forbidden|invalid token|token expired/i.test(message);
+}
+/**
+ * The error message from a caught Zeus `GraphQLError`, or the raw error
+ * string when the thrown value is not a GraphQL response error.
+ */
+export function graphqlErrorMessage(err) {
+    if (err instanceof GraphQLError) {
+        return (err.response.errors?.map((e) => e.message).join("; ") ?? "GraphQL error");
+    }
+    if (err instanceof Error)
+        return err.message;
+    return String(err);
+}
+/**
+ * Classify a caught Zeus error as an auth rejection. Zeus throws
+ * `GraphQLError` for HTTP 200 responses with a GraphQL `errors` array, but
+ * non-2xx HTTP responses (e.g. 401/403) are rejected with the parsed JSON
+ * body object. Handle both without losing the original message.
+ */
+export function classifyGraphqlError(err) {
+    if (err instanceof GraphQLError) {
+        const message = graphqlErrorMessage(err);
+        return { authRejected: isAuthErrorMessage(message), message };
+    }
+    let message = "Unknown error";
+    if (err instanceof Error) {
+        message = err.message;
+    }
+    else if (typeof err === "string") {
+        message = err;
+    }
+    else if (err && typeof err === "object") {
+        const body = err;
+        if (Array.isArray(body.errors) && body.errors.length > 0) {
+            message = body.errors.map((e) => e.message ?? "unknown").join("; ");
+        }
+        if (typeof body.status === "number" &&
+            (body.status === 401 || body.status === 403)) {
+            return { authRejected: true, message };
+        }
+    }
+    return { authRejected: isAuthErrorMessage(message), message };
+}

package/dist/generated/scalars.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Scalar codecs for the generated Zeus GraphQL client.
+ *
+ * Mirrors `landing/lib/scalars.ts`. The CLI only issues `query`/`mutation`
+ * operations against the backend's `availableAgentModels` and `agents`
+ * fields, neither of which carries a custom scalar today. The codecs are
+ * still defined here so any future CLI-side query that does touch `ID`,
+ * `DateTime`, `Long`, or `JSON` decodes consistently with the landing app.
+ */
+export declare const scalars: {
+    ID: {
+        decode: (e: unknown) => string;
+        encode: (e: unknown) => string;
+    };
+    DateTime: {
+        decode: (e: unknown) => Date;
+        encode: (e: unknown) => string;
+    };
+    Long: {
+        decode: (e: unknown) => number;
+        encode: (e: unknown) => string;
+    };
+};
+//# sourceMappingURL=scalars.d.ts.map

package/dist/generated/scalars.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scalars.d.ts","sourceRoot":"","sources":["../../src/generated/scalars.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,eAAO,MAAM,OAAO;;oBAEJ,OAAO,KAAU,MAAM;oBACvB,OAAO;;;oBAGP,OAAO;oBACP,OAAO;;;oBAYP,OAAO,KAAU,MAAM;oBACvB,OAAO;;CAErB,CAAC"}

package/dist/generated/scalars.js

@@ -0,0 +1,30 @@
+/**
+ * Scalar codecs for the generated Zeus GraphQL client.
+ *
+ * Mirrors `landing/lib/scalars.ts`. The CLI only issues `query`/`mutation`
+ * operations against the backend's `availableAgentModels` and `agents`
+ * fields, neither of which carries a custom scalar today. The codecs are
+ * still defined here so any future CLI-side query that does touch `ID`,
+ * `DateTime`, `Long`, or `JSON` decodes consistently with the landing app.
+ */
+import { ZeusScalars } from "./zeus/index.js";
+export const scalars = ZeusScalars({
+    ID: {
+        decode: (e) => e,
+        encode: (e) => JSON.stringify(e),
+    },
+    DateTime: {
+        decode: (e) => new Date(e),
+        encode: (e) => {
+            const date = e instanceof Date ? e : typeof e === "string" ? new Date(e) : null;
+            if (!date || Number.isNaN(date.getTime())) {
+                throw new TypeError(`DateTime scalar cannot encode an invalid date value: ${String(e)}`);
+            }
+            return JSON.stringify(date.toISOString());
+        },
+    },
+    Long: {
+        decode: (e) => e,
+        encode: (e) => JSON.stringify(e),
+    },
+});

package/dist/generated/zeus/const.d.ts

@@ -0,0 +1,8 @@
+export declare const AllTypesProps: Record<string, any>;
+export declare const ReturnTypes: Record<string, any>;
+export declare const Ops: {
+    query: "Query";
+    mutation: "Mutation";
+    subscription: "Subscription";
+};
+//# sourceMappingURL=const.d.ts.map

package/dist/generated/zeus/const.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"const.d.ts","sourceRoot":"","sources":["../../../src/generated/zeus/const.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAC,GAAG,CA8xB5C,CAAA;AAED,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAC,GAAG,CA8lC1C,CAAA;AAED,eAAO,MAAM,GAAG;;;;CAIf,CAAA"}