@agenthippo-ai/agenthippo 1.110.9 → 1.110.19

package/out/cli/commands/deploy.js

@@ -1,263 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.copyPackToStaging = copyPackToStaging;
-exports.deployCommand = deployCommand;
-/**
- * Deploy Command — `agenthippo deploy init <pack> --target <t>`
- *
- * Generates platform-native deploy artifacts into <pack>/deploy/<target>/.
- * Generates only; never builds images or calls a cloud (serve-v3 §A4).
- */
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const yaml = __importStar(require("js-yaml"));
-const deploy_init_1 = require("../deploy-init");
-const registry_1 = require("../deploy/blueprints/registry");
-const utils_1 = require("../utils");
-const DEFAULT_PORT = 8080;
-/** Read pack id + version + engine + model from agent.yaml without the full loader (no workspace/sync needed). */
-function readManifest(packDir) {
-    const manifestPath = path.join(packDir, 'agent.yaml');
-    if (!fs.existsSync(manifestPath)) {
-        throw new Error(`No agent.yaml in ${packDir} — point deploy init at a pack directory.`);
-    }
-    const parsed = yaml.load(fs.readFileSync(manifestPath, 'utf8'));
-    const name = parsed?.metadata?.name?.trim();
-    if (!name) {
-        throw new Error(`agent.yaml is missing metadata.name in ${packDir}`);
-    }
-    const version = parsed?.metadata?.version?.trim();
-    if (!version) {
-        throw new Error(`agent.yaml is missing metadata.version in ${packDir}`);
-    }
-    const model = parsed?.spec?.model?.trim();
-    return {
-        name,
-        version,
-        engine: parsed?.spec?.engine?.trim() || 'claude',
-        ...(model ? { model } : {}),
-    };
-}
-/** Basenames never copied into staging (mirrors the generated `.dockerignore`): VCS, dev
- * caches, build output, IDE cruft. Keeping this in sync with `renderDockerignore()` means
- * the staging dir on disk is a faithful preview of what the image will contain. */
-const PACK_IGNORE_BASENAMES = new Set([
-    '.git', 'node_modules', '__pycache__', '.pytest_cache', '.mypy_cache', '.ruff_cache',
-    '.venv', 'venv', '.next', '.turbo', '.cache', 'dist', 'build', '.DS_Store', '.idea', '.vscode',
-]);
-/** Copy the pack into the staging root, filtered to drop VCS/dev caches + secrets. The
- * source pack's own `deploy/` and any nested `deploy-out/` are skipped (the generator
- * owns `staging/deploy/`, and a staging tree under the pack would otherwise recurse).
- *
- * `dereference: true` resolves symlinks to their real content so the staging dir (and thus
- * the Docker build context) is self-contained: an absolute symlink into a shared registry
- * becomes a real file, and `COPY . /app/pack/` can never chase a link outside the context.
- * Broken symlinks (e.g. a pack hydrated with self-referential dead links) are skipped and
- * returned so the caller can warn — silently staging dead links would ship an image with
- * empty skills. */
-function copyPackToStaging(packDir, stagingDir) {
-    const broken = [];
-    const stagingResolved = path.resolve(stagingDir);
-    fs.cpSync(packDir, stagingDir, {
-        recursive: true,
-        force: true,
-        dereference: true,
-        preserveTimestamps: true,
-        filter: (src) => {
-            const rel = path.relative(packDir, src);
-            if (!rel)
-                return true; // the pack root itself
-            if (src === stagingResolved || src.startsWith(stagingResolved + path.sep))
-                return false;
-            const base = path.basename(src);
-            if (rel === 'deploy' || rel.startsWith('deploy' + path.sep))
-                return false;
-            if (rel === 'deploy-out' || rel.startsWith('deploy-out' + path.sep))
-                return false;
-            if (PACK_IGNORE_BASENAMES.has(base))
-                return false;
-            if (base.startsWith('.nfs'))
-                return false; // stale NFS handles on macOS
-            // Broken symlink → skip + record (don't stage a dead link that would empty the image).
-            try {
-                const st = fs.lstatSync(src);
-                if (st.isSymbolicLink() && !fs.existsSync(src)) {
-                    broken.push(rel);
-                    return false;
-                }
-            }
-            catch {
-                return false; // unreadable entry
-            }
-            if (base === '.env' || base === '.env.local' || base === '.env.production')
-                return false;
-            if (base.endsWith('.log'))
-                return false;
-            if ((0, deploy_init_1.isSecretLikeBasename)(base))
-                return false;
-            return true;
-        },
-    });
-    return broken;
-}
-async function deployCommand(action, packArg, options) {
-    if (action !== 'init') {
-        console.error(`Unknown deploy action "${action}". Supported: init`);
-        process.exit(1);
-    }
-    // Blueprint resolution (PLAN/deploy.md §3) picks --target/--ingress for you; --platform
-    // selects which platform within the blueprint's supported set. Raw --target/--ingress stay
-    // fully usable when --blueprint is omitted — nothing here changes that path.
-    let resolvedTarget = options.target;
-    let resolvedIngress = options.ingress;
-    if (options.blueprint) {
-        if (!(0, registry_1.isBlueprintId)(options.blueprint)) {
-            console.error(`Unknown --blueprint "${options.blueprint}". Supported: ${Object.keys(registry_1.BLUEPRINTS).join(', ')}`);
-            process.exit(1);
-            return;
-        }
-        if (options.platform && !(0, deploy_init_1.isDeployTarget)(options.platform)) {
-            console.error(`Unknown --platform "${options.platform}". Supported: ${deploy_init_1.DEPLOY_TARGETS.join(', ')}`);
-            process.exit(1);
-            return;
-        }
-        try {
-            const resolved = (0, registry_1.resolveBlueprint)(options.blueprint, options.platform);
-            resolvedTarget = resolved.target;
-            resolvedIngress = resolved.ingress;
-        }
-        catch (err) {
-            console.error(`Error: ${err instanceof Error ? err.message : err}`);
-            process.exit(1);
-            return;
-        }
-    }
-    const packDir = path.resolve(options.packdir || packArg || process.cwd());
-    const targetsRequested = resolvedTarget === 'all' ? [...deploy_init_1.DEPLOY_TARGETS] : [resolvedTarget];
-    for (const t of targetsRequested) {
-        if (!(0, deploy_init_1.isDeployTarget)(t)) {
-            console.error(`Unknown --target "${t}". Supported: ${deploy_init_1.DEPLOY_TARGETS.join(', ')}, all`);
-            process.exit(1);
-        }
-    }
-    let manifest;
-    try {
-        manifest = readManifest(packDir);
-    }
-    catch (err) {
-        console.error(`Error: ${err instanceof Error ? err.message : err}`);
-        process.exit(1);
-        return;
-    }
-    const envVars = (0, deploy_init_1.scanEnvRefs)(packDir);
-    // Agent Anywhere adds its own secrets to the documented surface.
-    const gateway = options.gateway?.trim();
-    if (gateway) {
-        for (const v of ['OPENCLAW_GATEWAY_TOKEN', 'SLACK_BOT_TOKEN', 'SLACK_APP_TOKEN']) {
-            if (!envVars.includes(v)) {
-                envVars.push(v);
-            }
-        }
-    }
-    const modelRouting = options.modelRouting === 'gateway' ? 'gateway' : options.modelRouting === 'sidecar' ? 'sidecar' : undefined;
-    if (options.modelRouting && options.modelRouting !== 'gateway' && options.modelRouting !== 'sidecar') {
-        console.error(`Unknown --model-routing "${options.modelRouting}". Supported: sidecar, gateway`);
-        process.exit(1);
-    }
-    const ctx = {
-        packName: manifest.name,
-        packVersion: manifest.version,
-        image: options.image || (0, deploy_init_1.defaultRuntimeImage)(manifest.engine),
-        port: options.port || DEFAULT_PORT,
-        engine: manifest.engine,
-        model: manifest.model,
-        envVars,
-        gatewayChannels: gateway,
-        publicHostname: (0, deploy_init_1.resolveDeployPublicHostname)(options.hostname),
-        ingress: resolvedIngress,
-        idpUrl: options.idpUrl,
-        cookieDomain: options.cookieDomain,
-        colocate: options.colocate,
-        modelRouting,
-        edgeTurnConnector: options.edgeTurnConnector?.trim() || undefined,
-    };
-    for (const target of targetsRequested) {
-        const routingSuffix = modelRouting === 'gateway' ? '-gateway' : '';
-        const outDir = options.out
-            ? (targetsRequested.length > 1 ? path.join(path.resolve(options.out), target + routingSuffix) : path.resolve(options.out))
-            : path.join(process.cwd(), 'deploy-out', `${manifest.name}-${target}${routingSuffix}`);
-        fs.mkdirSync(outDir, { recursive: true });
-        // Copy the pack into the staging root (filtered: no VCS/caches/secrets, no source deploy/).
-        const brokenLinks = copyPackToStaging(packDir, outDir);
-        if (brokenLinks.length > 0) {
-            const sample = brokenLinks.slice(0, 3).join(', ');
-            console.log(`    ${utils_1.COLORS.yellow}⚠ ${brokenLinks.length} broken symlink(s) skipped (not staged — the image would have no content for these). Sample: ${sample}${brokenLinks.length > 3 ? ', …' : ''}${utils_1.COLORS.reset}`);
-        }
-        // Generated artifacts → <staging>/deploy/; .dockerignore → <staging>/ (build-context root,
-        // the only location Docker reads it from).
-        fs.mkdirSync(path.join(outDir, 'deploy'), { recursive: true });
-        const files = (0, deploy_init_1.renderTarget)(target, ctx);
-        const written = [];
-        const skipped = [];
-        for (const [rel, content] of Object.entries(files)) {
-            const dest = rel === '.dockerignore'
-                ? path.join(outDir, '.dockerignore')
-                : path.join(outDir, 'deploy', rel);
-            if (fs.existsSync(dest) && !options.force) {
-                skipped.push(rel);
-                continue;
-            }
-            fs.mkdirSync(path.dirname(dest), { recursive: true });
-            fs.writeFileSync(dest, content);
-            written.push(rel);
-        }
-        console.log(`${utils_1.COLORS.green}✓${utils_1.COLORS.reset} ${target} → ${path.relative(process.cwd(), outDir) || '.'}`);
-        for (const f of written) {
-            console.log(`    ${utils_1.COLORS.dim}+ ${f}${utils_1.COLORS.reset}`);
-        }
-        for (const f of skipped) {
-            console.log(`    ${utils_1.COLORS.yellow}• ${f} (exists; --force to overwrite)${utils_1.COLORS.reset}`);
-        }
-    }
-    if (envVars.length > 0) {
-        console.log(`\n${utils_1.COLORS.dim}Scanned pack secrets into .env.example: ${envVars.join(', ')}${utils_1.COLORS.reset}`);
-    }
-    console.log(`\nNext: cd into the staging dir above, \`cp deploy/.env.example deploy/.env\`, then run the command in deploy/README.md (scripts anchor themselves to the staging root).`);
-    console.log(`${utils_1.COLORS.dim}Tip: run deploy init from the pack's parent directory — not from inside the pack (default deploy-out/ inside the pack copies into itself and fails).${utils_1.COLORS.reset}`);
-}

package/out/cli/commands/gateway.js

@@ -1,218 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.gatewaySendCommand = gatewaySendCommand;
-exports.gatewayListCommand = gatewayListCommand;
-const promises_1 = require("fs/promises");
-const path = __importStar(require("path"));
-const outboundHandles_js_1 = require("../../gateway/outboundHandles.js");
-const outboundSend_js_1 = require("../../gateway/outboundSend.js");
-const utils_js_1 = require("../utils.js");
-function resolveOutboundPath(outbound) {
-    const trimmed = outbound.trim();
-    if (!trimmed) {
-        console.error('Error: --outbound is required');
-        process.exit(1);
-    }
-    return path.resolve(trimmed);
-}
-async function ensureStoreFileExists(storePath) {
-    try {
-        await (0, promises_1.access)(storePath);
-    }
-    catch {
-        console.error(`Error: gateway outbound file not found: ${storePath}`);
-        process.exit(1);
-    }
-}
-/**
- * Broker-mediated send (secure-obo-design §7.6): under `agenthippo serve` with the egress
- * broker active, the agent's env carries AGENTHIPPO_EGRESS_URL + AGENTHIPPO_TURN_NONCE but NOT
- * the gateway token. Route the send through the broker, which resolves the destination
- * server-side from THIS turn's bound handles and delivers with the broker-held token.
- * `--outbound`/`--agent` are ignored here — the broker derives both from the verified nonce.
- */
-async function sendViaEgressBroker(egressUrl, nonce, options) {
-    const message = options.message.trim();
-    if (!message) {
-        console.error('Error: --message is required');
-        process.exit(1);
-    }
-    if (options.dryRun) {
-        console.log(`${utils_js_1.COLORS.dim}Dry run (egress broker):${utils_js_1.COLORS.reset} POST ${egressUrl} { to: ${options.target ?? '(reply-to-sender)'} }`);
-        process.exit(0);
-    }
-    let res;
-    try {
-        res = await fetch(egressUrl, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${nonce}` },
-            body: JSON.stringify({ message, to: options.target?.trim() || undefined, media: options.media?.trim() || undefined }),
-        });
-    }
-    catch (err) {
-        console.error(`${utils_js_1.COLORS.red}✗${utils_js_1.COLORS.reset} Egress broker unreachable: ${err instanceof Error ? err.message : String(err)}`);
-        process.exit(1);
-    }
-    const bodyText = await res.text();
-    let body = {};
-    try {
-        body = JSON.parse(bodyText);
-    }
-    catch { /* non-JSON error body */ }
-    if (options.json) {
-        console.log(JSON.stringify({ via: 'egress-broker', status: res.status, result: body }, null, 2));
-    }
-    else if (res.ok && body.ok) {
-        console.log(`${utils_js_1.COLORS.green}✓${utils_js_1.COLORS.reset} Sent (via egress broker${body.via ? `, ${body.via}` : ''})`);
-    }
-    else {
-        console.error(`${utils_js_1.COLORS.red}✗${utils_js_1.COLORS.reset} Egress send rejected (HTTP ${res.status}): ${body.error || bodyText || 'unknown error'}`);
-        process.exit(1);
-    }
-    process.exit(res.ok && body.ok ? 0 : 1);
-}
-async function gatewaySendCommand(options) {
-    // Prefer the broker whenever serve exposes it: the agent has no gateway token to send directly.
-    const egressUrl = process.env.AGENTHIPPO_EGRESS_URL?.trim();
-    const nonce = process.env.AGENTHIPPO_TURN_NONCE?.trim();
-    if (egressUrl && nonce) {
-        await sendViaEgressBroker(egressUrl, nonce, options);
-        return;
-    }
-    if (egressUrl) {
-        console.error('Error: egress broker is active but AGENTHIPPO_TURN_NONCE is missing — refusing direct gateway send');
-        process.exit(1);
-    }
-    const storePath = resolveOutboundPath(options.outbound);
-    await ensureStoreFileExists(storePath);
-    const agentId = options.agent.trim();
-    const message = options.message.trim();
-    if (!agentId) {
-        console.error('Error: --agent is required');
-        process.exit(1);
-    }
-    if (!message) {
-        console.error('Error: --message is required');
-        process.exit(1);
-    }
-    const handle = await (0, outboundHandles_js_1.resolveGatewayOutboundHandle)(storePath, agentId, {
-        target: options.target,
-        threadId: options.threadId,
-    });
-    if (!handle) {
-        console.error(`Error: No gateway outbound handle for agent "${agentId}" in ${storePath}.`);
-        if (options.target) {
-            console.error(`No stored route matching target "${options.target}".`);
-        }
-        console.error(`Run \`agenthippo gateway list --outbound "${storePath}" --agent ${agentId}\` to see known routes.`);
-        process.exit(1);
-    }
-    const result = await (0, outboundSend_js_1.sendGatewayOutboundMessage)(handle, {
-        message,
-        media: options.media,
-        dryRun: options.dryRun,
-    });
-    if (options.json) {
-        console.log(JSON.stringify({ file: storePath, handle, result }, null, 2));
-    }
-    else if (options.dryRun) {
-        console.log(`${utils_js_1.COLORS.dim}Dry run:${utils_js_1.COLORS.reset} ${result.command.join(' ')}`);
-    }
-    else if (result.ok) {
-        const via = result.via === 'hippoclaw' ? ' (via hippoclaw CLI fallback)' : '';
-        console.log(`${utils_js_1.COLORS.green}✓${utils_js_1.COLORS.reset} Sent via ${handle.channel}:${handle.target}${via}`);
-        if (result.stdout) {
-            console.log(result.stdout);
-        }
-    }
-    else {
-        console.error(`${utils_js_1.COLORS.red}✗${utils_js_1.COLORS.reset} Gateway send failed (exit ${result.exitCode ?? 'unknown'})`);
-        if (result.stderr) {
-            console.error(result.stderr);
-        }
-        if (result.stdout) {
-            console.error(result.stdout);
-        }
-        process.exit(1);
-    }
-    // One-shot CLI: RPC WebSocket must not keep the event loop alive after success.
-    process.exit(0);
-}
-function formatHandleLine(handle, isLast) {
-    const label = handle.label ? ` (${handle.label})` : '';
-    const thread = handle.threadId ? ` thread=${handle.threadId}` : '';
-    const count = handle.inboundCount > 1 ? ` ×${handle.inboundCount}` : '';
-    const lastMark = isLast ? `${utils_js_1.COLORS.green}*${utils_js_1.COLORS.reset} ` : '  ';
-    return `${lastMark}${handle.agentId}${label}: ${handle.channel} → ${handle.target}${thread}${count}`;
-}
-async function gatewayListCommand(options) {
-    const storePath = resolveOutboundPath(options.outbound);
-    await ensureStoreFileExists(storePath);
-    const snapshot = await (0, outboundHandles_js_1.getGatewayOutboundStoreSnapshot)(storePath);
-    if (options.json) {
-        console.log(JSON.stringify({ file: storePath, ...snapshot }, null, 2));
-        return;
-    }
-    const agentFilter = options.agent?.trim();
-    const agentIds = agentFilter
-        ? [agentFilter]
-        : [...new Set([...Object.keys(snapshot.targetsByAgent), ...Object.keys(snapshot.lastByAgent)])];
-    if (agentIds.length === 0) {
-        console.log(`No gateway outbound routes in ${storePath}.`);
-        return;
-    }
-    console.log(`${utils_js_1.COLORS.dim}${storePath}${utils_js_1.COLORS.reset}`);
-    for (const agentId of agentIds.sort()) {
-        const routes = snapshot.targetsByAgent[agentId] ?? [];
-        const last = snapshot.lastByAgent[agentId];
-        const lastKey = last ? (0, outboundHandles_js_1.buildGatewayOutboundHandleKey)(last.target, last.threadId) : undefined;
-        if (routes.length === 0 && last) {
-            console.log(formatHandleLine(last, true));
-            continue;
-        }
-        console.log(`${utils_js_1.COLORS.dim}${agentId}:${utils_js_1.COLORS.reset}`);
-        for (const handle of routes) {
-            const key = (0, outboundHandles_js_1.buildGatewayOutboundHandleKey)(handle.target, handle.threadId);
-            console.log(formatHandleLine(handle, key === lastKey));
-        }
-        if (routes.length > 1 && last) {
-            console.log(`${utils_js_1.COLORS.dim}  * = last inbound (default for gateway send without --target)${utils_js_1.COLORS.reset}`);
-        }
-    }
-}

package/out/cli/commands/idp.js

@@ -1,85 +0,0 @@
-"use strict";
-/*---------------------------------------------------------------------------------------------
- *  Copyright (c) AgentHippo.ai. All rights reserved.
- *--------------------------------------------------------------------------------------------*/
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.idpCommand = idpCommand;
-/**
- * IdP Command — `agenthippo idp init --out <path> --hostname <host>`
- *
- * Generates the central IdP stack (PLAN/deploy.md) into a self-contained directory. Generates
- * only; never builds images or calls a cloud — same rule as `deploy init`.
- */
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const idp_init_1 = require("../idp-init");
-const utils_1 = require("../utils");
-async function idpCommand(action, options) {
-    if (action !== 'init') {
-        console.error(`Unknown idp action "${action}". Supported: init`);
-        process.exit(1);
-        return;
-    }
-    if (!options.hostname?.trim()) {
-        console.error('idp init requires --hostname <public-hostname> (e.g. auth.corp.example)');
-        process.exit(1);
-        return;
-    }
-    const outDir = path.resolve(options.out || './enterprise-deploy/idp');
-    fs.mkdirSync(outDir, { recursive: true });
-    const ctx = { hostname: options.hostname.trim(), cookieDomain: options.cookieDomain };
-    const files = (0, idp_init_1.renderIdpArtifacts)(ctx);
-    const written = [];
-    const skipped = [];
-    for (const [rel, content] of Object.entries(files)) {
-        const dest = path.join(outDir, rel);
-        if (fs.existsSync(dest) && !options.force) {
-            skipped.push(rel);
-            continue;
-        }
-        fs.mkdirSync(path.dirname(dest), { recursive: true });
-        fs.writeFileSync(dest, content);
-        written.push(rel);
-    }
-    console.log(`${utils_1.COLORS.green}✓${utils_1.COLORS.reset} idp → ${path.relative(process.cwd(), outDir) || '.'}`);
-    for (const f of written) {
-        console.log(`    ${utils_1.COLORS.dim}+ ${f}${utils_1.COLORS.reset}`);
-    }
-    for (const f of skipped) {
-        console.log(`    ${utils_1.COLORS.yellow}• ${f} (exists; --force to overwrite)${utils_1.COLORS.reset}`);
-    }
-    console.log(`Next: cd ${path.relative(process.cwd(), outDir) || '.'}, cp .env.example ~/.agent-hippo/.env, cp .env.auth.example ~/.agent-hippo/.env.auth (fill in), then ./run.sh`);
-}