@ai21/gateway 0.5.3

package/README.md

@@ -0,0 +1,91 @@
+# ai21-intelligent-gateway-cli
+
+One command to point a local coding agent at the AI21 Intelligent Gateway.
+Ships as the `@ai21/gateway` package.
+
+## Usage
+
+```bash
+npx @ai21/gateway install --agent-id <AGENT_ID>
+```
+
+Merges `.claude/settings.json` so Claude Code routes through the gateway, then
+sends one request to prove it works. The AI21 key is prompted for without echo —
+pass `--key` only for scripting, since a key in argv stays in your shell history.
+
+The dashboard prints this command for you (Add agent, or Reconnect on an existing
+agent) and offers the key as a separate copy.
+
+| Command     | Does                                             |
+| ----------- | ------------------------------------------------ |
+| `install`   | write the config and verify it (default command) |
+| `uninstall` | revert what this tool wrote                      |
+
+`configure` is accepted as an alias for `install`: it was the verb's name through
+0.3.x, so commands copied from an older dashboard keep working.
+
+There is a third verb, `login`, which signs in through the browser and then
+installs. It parses and runs but is **left out of `--help`**: it calls back to a
+loopback listener, which only works from a locally served dashboard — Chrome's
+Local Network Access gate makes a public page's request to `127.0.0.1` hang. Until
+that has a real answer it is a local-dev path, and advertising it would send
+readers into a dead end. `--app <url>` points it at a local webapp.
+
+The gateway defaults to `https://api.ai21.com/gateway`. `--gateway <url>` points
+somewhere else — staging is `https://api.ai21-stg.com/gateway`, and the dashboard
+puts it in the command it prints for you.
+
+`--print` renders the config instead of writing it, with the key masked. `--help`
+lists the rest.
+
+`--client <name>` picks which agent to configure. `claude-code` is the default and
+the only one supported so far — an unsupported name is refused rather than
+defaulted, so a `--client` we do not implement never writes Claude Code's file by
+mistake.
+
+> **Internal only.** The package is published to AI21's Artifact Registry, not
+> public npm, so a bare `npx` cannot reach it yet — see below.
+
+## Installing
+
+`@ai21/gateway` is published to public npm, so nothing needs configuring:
+
+```bash
+npx @ai21/gateway --version
+```
+
+Run it from any directory other than this repo — inside the repo, `npx` finds the
+local package and `ai21-gateway` is not on PATH.
+
+Releases go out from the **Release and Publish** workflow (Actions tab), which runs
+semantic-release: the version comes from the conventional-commit history since the
+last tag. `package.json` stays at `0.0.0`; the git tag is the record.
+
+`403` misleads: it reads as though the AI21 gateway rejected you, but it is npm
+failing to reach the registry — before the CLI has run at all.
+
+The last one catches people out: this project _is_ `@ai21/gateway`, so npx
+resolves the name to the working directory instead of the registry, finds no
+linked binary, and fails. The published artifact can never be exercised from its
+own source tree — use a scratch directory.
+
+## Development
+
+Requires Node 20+ (`engines`); `.nvmrc` pins 22, which is what CI builds and
+tests on. No runtime dependencies; TypeScript and `@types/node` are the only dev
+dependencies.
+
+```bash
+./scripts/init.sh   # pre-commit, nvm, registry auth, dependencies
+```
+
+Then day to day:
+
+```bash
+npm run lint       # eslint (--max-warnings 0); `lint:fix` to autofix
+npm run typecheck  # tsc --noEmit
+npm run format     # prettier --write (@ai21/prettier-config)
+npm run quality    # audit + lint + typecheck + format:check — what CI runs
+npm test           # build, then node --test
+npm run precommit  # what the pre-commit hook runs
+```

package/dist/args.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Baked-in endpoints. Shipping these means the happy path needs no URL, and the
+ * snippets we tell people to copy carry no hostname that can go stale.
+ */
+/** Production, and the only baked-in set. `--gateway` points elsewhere. */
+export declare const DEFAULT_URLS: {
+    readonly app: "https://app.ai21.com";
+    readonly gateway: "https://api.ai21.com/gateway";
+    readonly identity: "https://api.ai21.com";
+};
+export interface ResolvedUrls {
+    readonly app: string;
+    readonly gateway: string;
+    readonly identity: string;
+    readonly agents: string;
+}
+/**
+ * `--gateway` overrides only the gateway itself — the escape hatch for a local
+ * or dev backend. `agents` is always derived from whichever gateway won, so an
+ * override stays internally consistent.
+ */
+export declare function resolveUrls(gatewayOverride?: string, appOverride?: string): ResolvedUrls;
+/** The workspace dashboard, built from the baked-in origin rather than a given URL. */
+export declare function dashboardUrl(urls: ResolvedUrls, workspaceId: string): string;
+/** Which coding agent's config to write. Only Claude Code is implemented; the flag
+ *  exists so the choice is explicit at the boundary rather than assumed throughout. */
+export declare const CLIENTS: readonly ["claude-code"];
+export type Client = (typeof CLIENTS)[number];
+export declare const DEFAULT_CLIENT: Client;
+export declare const VERBS: readonly ["install", "login", "uninstall"];
+export type Verb = (typeof VERBS)[number];
+export declare const DOCUMENTED_VERBS: readonly Verb[];
+export type Target = "repo" | "user";
+export interface ParsedArgs {
+    readonly verb: Verb;
+    readonly urls: ResolvedUrls;
+    readonly target: Target;
+    /** Whose config gets written. Defaults to Claude Code. */
+    readonly client: Client;
+    readonly agentId?: string | undefined;
+    readonly key?: string | undefined;
+    readonly userId?: string | undefined;
+    readonly agentIdGuard?: string | undefined;
+    /** Anthropic credential for the direct verifying ping. Never written to disk. */
+    readonly anthropicKey?: string | undefined;
+    readonly noVerify: boolean;
+    readonly print: boolean;
+    readonly json: boolean;
+    readonly yes: boolean;
+    readonly fromBackup: boolean;
+}
+export type ParseOutcome = {
+    readonly kind: "args";
+    readonly args: ParsedArgs;
+} | {
+    readonly kind: "help";
+} | {
+    readonly kind: "version";
+} | {
+    readonly kind: "error";
+    readonly message: string;
+};
+/**
+ * Shared with the interactive prompt, which is a second way these values enter
+ * the program and must not be a second way the rule is skipped.
+ */
+export declare function containsControlCharacters(value: string): boolean;
+/**
+ * A plain-http gateway that is not on this machine. `--gateway` allows http for
+ * local dev, but every request through it carries the AI21 key, so off-box http
+ * means credentials on the wire in the clear.
+ */
+export declare function isInsecureGateway(gateway: string): boolean;
+export declare function parseCliArgs(argv: readonly string[]): ParseOutcome;

package/dist/args.js

@@ -0,0 +1,304 @@
+/**
+ * Argument parsing and per-verb validation.
+ *
+ * Everything here is pure: argv in, a resolved plan or an error message out. No
+ * I/O, no process access — that keeps the whole surface assertable without
+ * spawning anything.
+ */
+import { parseArgs } from "node:util";
+/**
+ * Baked-in endpoints. Shipping these means the happy path needs no URL, and the
+ * snippets we tell people to copy carry no hostname that can go stale.
+ */
+/** Production, and the only baked-in set. `--gateway` points elsewhere. */
+export const DEFAULT_URLS = {
+    app: "https://app.ai21.com",
+    gateway: "https://api.ai21.com/gateway",
+    identity: "https://api.ai21.com",
+};
+/**
+ * `--gateway` overrides only the gateway itself — the escape hatch for a local
+ * or dev backend. `agents` is always derived from whichever gateway won, so an
+ * override stays internally consistent.
+ */
+export function resolveUrls(gatewayOverride, appOverride) {
+    const base = DEFAULT_URLS;
+    // Trailing slashes are stripped so appending a path can't produce `//`, which
+    // some gateways treat as a different route than the one intended.
+    const gateway = (gatewayOverride ?? base.gateway).replace(/\/+$/, "");
+    return {
+        app: (appOverride ?? base.app).replace(/\/+$/, ""),
+        gateway,
+        identity: base.identity,
+        agents: `${gateway}/settings/agents`,
+    };
+}
+/** The workspace dashboard, built from the baked-in origin rather than a given URL. */
+export function dashboardUrl(urls, workspaceId) {
+    return `${urls.app}/w/${encodeURIComponent(workspaceId)}`;
+}
+/** Which coding agent's config to write. Only Claude Code is implemented; the flag
+ *  exists so the choice is explicit at the boundary rather than assumed throughout. */
+export const CLIENTS = ["claude-code"];
+export const DEFAULT_CLIENT = "claude-code";
+export const VERBS = ["install", "login", "uninstall"];
+/* What --help and the usage errors name. `login` is accepted but not advertised: it
+ * needs a webapp that answers its loopback callback, which is a local-dev-only setup
+ * today, so offering it to everyone reading --help only invites a dead end. */
+export const DOCUMENTED_VERBS = ["install", "uninstall"];
+/** `configure` was this verb's name through 0.3.x, and the dashboard printed it. Still
+ *  accepted so a copied command keeps working; deliberately absent from help. (`setup`
+ *  was never released, so it needs no alias.) */
+const VERB_ALIASES = { configure: "install" };
+/** Flags each verb accepts, beyond the global `--help` / `--version`. */
+const ALLOWED_FLAGS = {
+    install: [
+        "app",
+        "agent-id",
+        "client",
+        "key",
+        "user-id",
+        "gateway",
+        "repo",
+        "user",
+        "print",
+        "json",
+        "yes",
+        "anthropic-key",
+        "no-verify",
+    ],
+    // `login` ends in the same write-then-verify as `install`, so it takes the
+    // same verification flags.
+    // `--app` is the webapp counterpart of `--gateway`: the escape hatch for running
+    // `login` against a locally served webapp, which is the only way to develop the
+    // cross-repo handshake end to end.
+    login: ["gateway", "app", "client", "repo", "user", "print", "json", "anthropic-key", "no-verify"],
+    // `uninstall` needs --repo/--user for the same reason `install` does: it has to
+    // revert whichever settings.json was written, and a --user config would
+    // otherwise be unrevertable. It takes no --env/--gateway, though — it reads an
+    // existing file rather than resolving an endpoint. It will need `--client` the
+    // moment there is a second one, for the same unrevertable reason.
+    uninstall: ["agent-id", "from-backup", "yes", "json", "repo", "user"],
+};
+const OPTION_SPEC = {
+    help: { type: "boolean", short: "h" },
+    version: { type: "boolean", short: "v" },
+    key: { type: "string" },
+    "user-id": { type: "string" },
+    client: { type: "string" },
+    gateway: { type: "string" },
+    repo: { type: "boolean" },
+    user: { type: "boolean" },
+    print: { type: "boolean" },
+    json: { type: "boolean" },
+    yes: { type: "boolean" },
+    "from-backup": { type: "boolean" },
+    "agent-id": { type: "string" },
+    "anthropic-key": { type: "string" },
+    app: { type: "string" },
+    "no-verify": { type: "boolean" },
+};
+function fail(message) {
+    return { kind: "error", message };
+}
+function quoted(values) {
+    return values.map((value) => `'${value}'`).join(", ");
+}
+function asClient(value) {
+    return CLIENTS.includes(value) ? value : undefined;
+}
+/**
+ * Flags whose values end up inside `ANTHROPIC_CUSTOM_HEADERS`, which is a
+ * `\n`-joined string. A newline in any of them forges an extra header that
+ * Claude Code would then send on every gateway request, so they are validated
+ * here at the boundary rather than in the snippet builders — those stay a
+ * faithful copy of the webapp's.
+ *
+ * This matters more than it looks: `login` will populate `key` and `agent-id`
+ * from a loopback HTTP callback, so these values stop being purely local input.
+ */
+const HEADER_VALUE_FLAGS = ["agent-id", "key", "user-id"];
+/**
+ * Same rule, different reason: `--anthropic-key` is never written to disk, but it
+ * becomes the `x-api-key` header, where a bad value surfaces as a confusing 401.
+ */
+const REQUEST_HEADER_VALUE_FLAGS = ["anthropic-key"];
+/** Flags that only mean something on a run that actually verifies. */
+const VERIFY_FLAGS = ["anthropic-key", "no-verify"];
+// C0 controls plus DEL — covers \n and \r, and leaves no exotic gaps.
+// eslint-disable-next-line no-control-regex
+const CONTROL_CHARS = /[\u0000-\u001F\u007F]/;
+/**
+ * Shared with the interactive prompt, which is a second way these values enter
+ * the program and must not be a second way the rule is skipped.
+ */
+export function containsControlCharacters(value) {
+    return CONTROL_CHARS.test(value);
+}
+function validateHeaderValue(flag, value) {
+    if (value.trim() === "") {
+        return `--${flag} must not be empty.`;
+    }
+    if (CONTROL_CHARS.test(value)) {
+        return `--${flag} must not contain control characters — they would forge an extra request header.`;
+    }
+    return undefined;
+}
+/** Loopback never leaves the machine, so plain http there carries no exposure. */
+function isLoopbackHost(hostname) {
+    return hostname === "127.0.0.1" || hostname === "localhost" || hostname === "::1" || hostname === "[::1]";
+}
+/**
+ * A plain-http gateway that is not on this machine. `--gateway` allows http for
+ * local dev, but every request through it carries the AI21 key, so off-box http
+ * means credentials on the wire in the clear.
+ */
+export function isInsecureGateway(gateway) {
+    try {
+        const { protocol, hostname } = new URL(gateway);
+        return protocol === "http:" && !isLoopbackHost(hostname);
+    }
+    catch {
+        return false;
+    }
+}
+/** Rejects anything that isn't an absolute http(s) URL. */
+function validateUrlFlag(flag, value) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        return `--${flag} must be an absolute URL, got '${value}'`;
+    }
+    if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+        return `--${flag} must be http(s), got '${parsed.protocol}//'`;
+    }
+    return undefined;
+}
+const validateGateway = (value) => validateUrlFlag("gateway", value);
+/**
+ * `--app` replaces an origin, so a path in it would be applied inconsistently: the
+ * sign-in URL is resolved against the origin and would drop it, while the dashboard
+ * link concatenates and would keep it.
+ */
+function validateOrigin(flag, value) {
+    const { pathname, search, hash } = new URL(value);
+    return pathname === "/" && search === "" && hash === ""
+        ? undefined
+        : `--${flag} must be an origin with no path, got '${value}'`;
+}
+export function parseCliArgs(argv) {
+    let values;
+    let positionals;
+    try {
+        ({ values, positionals } = parseArgs({
+            args: [...argv],
+            options: OPTION_SPEC,
+            strict: true,
+            allowPositionals: true,
+        }));
+    }
+    catch (err) {
+        return fail(err instanceof Error ? err.message : String(err));
+    }
+    // --help / --version win over everything, including an invalid verb.
+    if (values.help === true)
+        return { kind: "help" };
+    if (values.version === true)
+        return { kind: "version" };
+    const [first, ...restPositionals] = positionals;
+    let verb = "install";
+    if (first !== undefined) {
+        const resolved = VERB_ALIASES[first] ?? first;
+        if (!VERBS.includes(resolved)) {
+            return fail(`Unknown command '${first}'. Valid commands are ${quoted(DOCUMENTED_VERBS)}.`);
+        }
+        verb = resolved;
+    }
+    if (restPositionals.length > 0) {
+        return fail(`'${verb}' takes no positional arguments, got ${quoted(restPositionals)}.`);
+    }
+    const supplied = Object.keys(values).filter((flag) => values[flag] !== undefined);
+    const allowed = ALLOWED_FLAGS[verb];
+    const rejected = supplied.filter((flag) => flag !== "help" && flag !== "version" && !allowed.includes(flag));
+    if (rejected.length > 0) {
+        // Explicit rejection rather than silent ignore. `--key` on `uninstall`, say,
+        // reads as though it selects which config to revert; quietly dropping it
+        // would revert something the user did not name.
+        return fail(`${rejected.map((flag) => `--${flag}`).join(", ")} ${rejected.length === 1 ? "is" : "are"} not valid for '${verb}'. ` +
+            `Valid flags for '${verb}': ${allowed.map((flag) => `--${flag}`).join(", ")}.`);
+    }
+    for (const flag of [...HEADER_VALUE_FLAGS, ...REQUEST_HEADER_VALUE_FLAGS]) {
+        const value = values[flag];
+        if (typeof value !== "string")
+            continue;
+        const problem = validateHeaderValue(flag, value);
+        if (problem !== undefined)
+            return fail(problem);
+    }
+    const clientRaw = typeof values.client === "string" ? values.client : undefined;
+    let client = DEFAULT_CLIENT;
+    if (clientRaw !== undefined) {
+        const resolved = asClient(clientRaw);
+        if (resolved === undefined) {
+            // Named rather than silently defaulted: `--client codex` writing Claude Code's
+            // settings.json would configure a client the user did not ask for.
+            return fail(`Unsupported client '${clientRaw}'. Supported clients are ${quoted(CLIENTS)}.`);
+        }
+        client = resolved;
+    }
+    const gateway = typeof values.gateway === "string" ? values.gateway : undefined;
+    if (gateway !== undefined) {
+        const problem = validateGateway(gateway);
+        if (problem !== undefined)
+            return fail(problem);
+    }
+    const app = typeof values.app === "string" ? values.app : undefined;
+    if (app !== undefined) {
+        const problem = validateUrlFlag("app", app) ?? validateOrigin("app", app);
+        if (problem !== undefined)
+            return fail(problem);
+    }
+    if (values.repo === true && values.user === true) {
+        return fail("--repo and --user are mutually exclusive; pass at most one.");
+    }
+    // --print neither writes nor verifies. Rejected rather than ignored, per the rule
+    // the per-verb check above applies — and --anthropic-key carries a credential.
+    // `--app` sets the origin the loopback listener accepts, so it only means something
+    // for `login`, the one flow a browser takes part in.
+    if (values.app !== undefined && verb !== "login") {
+        return fail("--app only applies to 'login', the flow a browser takes part in.");
+    }
+    const strandedVerifyFlags = VERIFY_FLAGS.filter((flag) => values.print === true && values[flag] !== undefined);
+    if (strandedVerifyFlags.length > 0) {
+        return fail(`${strandedVerifyFlags.map((flag) => `--${flag}`).join(", ")} ` +
+            `${strandedVerifyFlags.length === 1 ? "has" : "have"} no effect with --print, which neither writes nor verifies.`);
+    }
+    /* The dashboard hands over by printing a command carrying the agent id, and the key
+     * is prompted for rather than pasted into a shell — so both arrive the ordinary way,
+     * and there is nothing for this to special-case. */
+    if (verb === "install" && typeof values["agent-id"] !== "string") {
+        return fail("--agent-id is required to install. Pass --agent-id <id>.");
+    }
+    return {
+        kind: "args",
+        args: {
+            verb,
+            urls: resolveUrls(gateway, app),
+            target: values.user === true ? "user" : "repo",
+            client,
+            agentId: verb === "install" && typeof values["agent-id"] === "string" ? values["agent-id"] : undefined,
+            key: typeof values.key === "string" ? values.key : undefined,
+            userId: typeof values["user-id"] === "string" ? values["user-id"] : undefined,
+            agentIdGuard: verb === "uninstall" && typeof values["agent-id"] === "string" ? values["agent-id"] : undefined,
+            anthropicKey: typeof values["anthropic-key"] === "string" ? values["anthropic-key"] : undefined,
+            noVerify: values["no-verify"] === true,
+            print: values.print === true,
+            json: values.json === true,
+            yes: values.yes === true,
+            fromBackup: values["from-backup"] === true,
+        },
+    };
+}
+//# sourceMappingURL=args.js.map

package/dist/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC;;;GAGG;AACH,2EAA2E;AAC3E,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,GAAG,EAAE,sBAAsB;IAC3B,OAAO,EAAE,8BAA8B;IACvC,QAAQ,EAAE,sBAAsB;CACxB,CAAC;AASX;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,eAAwB,EAAE,WAAoB;IACxE,MAAM,IAAI,GAAG,YAAY,CAAC;IAC1B,8EAA8E;IAC9E,kEAAkE;IAClE,MAAM,OAAO,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEtE,OAAO;QACL,GAAG,EAAE,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAClD,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,GAAG,OAAO,kBAAkB;KACrC,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,YAAY,CAAC,IAAkB,EAAE,WAAmB;IAClE,OAAO,GAAG,IAAI,CAAC,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED;uFACuF;AACvF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,aAAa,CAAU,CAAC;AAEhD,MAAM,CAAC,MAAM,cAAc,GAAW,aAAa,CAAC;AAEpD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAU,CAAC;AAGhE;;+EAE+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AAE1E;;iDAEiD;AACjD,MAAM,YAAY,GAAmC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAE9E,yEAAyE;AACzE,MAAM,aAAa,GAAoC;IACrD,OAAO,EAAE;QACP,KAAK;QACL,UAAU;QACV,QAAQ;QACR,KAAK;QACL,SAAS;QACT,SAAS;QACT,MAAM;QACN,MAAM;QACN,OAAO;QACP,MAAM;QACN,KAAK;QACL,eAAe;QACf,WAAW;KACZ;IACD,2EAA2E;IAC3E,2BAA2B;IAC3B,iFAAiF;IACjF,gFAAgF;IAChF,mCAAmC;IACnC,KAAK,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,CAAC;IAClG,gFAAgF;IAChF,wEAAwE;IACxE,+EAA+E;IAC/E,+EAA+E;IAC/E,kEAAkE;IAClE,SAAS,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;CACtE,CAAC;AAEF,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;IACrC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;IACxC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACvB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACzB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACzB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAC1B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACzB,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACxB,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IAClC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC9B,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACnC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACvB,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;CACxB,CAAC;AA6BX,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,MAAM,CAAC,MAAyB;IACvC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAQ,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;AACxF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,kBAAkB,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAU,CAAC;AAEnE;;;GAGG;AACH,MAAM,0BAA0B,GAAG,CAAC,eAAe,CAAU,CAAC;AAE9D,sEAAsE;AACtE,MAAM,YAAY,GAAG,CAAC,eAAe,EAAE,WAAW,CAAU,CAAC;AAE7D,sEAAsE;AACtE,4CAA4C;AAC5C,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,KAAa;IACtD,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxB,OAAO,KAAK,IAAI,qBAAqB,CAAC;IACxC,CAAC;IAED,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,IAAI,kFAAkF,CAAC;IACrG,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kFAAkF;AAClF,SAAS,cAAc,CAAC,QAAgB;IACtC,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO,CAAC;AAC5G,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAEhD,OAAO,QAAQ,KAAK,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,IAAI,kCAAkC,KAAK,GAAG,CAAC;IAC7D,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChE,OAAO,KAAK,IAAI,0BAA0B,MAAM,CAAC,QAAQ,KAAK,CAAC;IACjE,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,KAAa,EAAsB,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAEjG;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,KAAa;IACjD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAElD,OAAO,QAAQ,KAAK,GAAG,IAAI,MAAM,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE;QACrD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,KAAK,IAAI,yCAAyC,KAAK,GAAG,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAuB;IAClD,IAAI,MAAoD,CAAC;IACzD,IAAI,WAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;YACnC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,IAAI;YACZ,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,qEAAqE;IACrE,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAElD,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAExD,MAAM,CAAC,KAAK,EAAE,GAAG,eAAe,CAAC,GAAG,WAAW,CAAC;IAChD,IAAI,IAAI,GAAS,SAAS,CAAC;IAE3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;QAC9C,IAAI,CAAE,KAA2B,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC,oBAAoB,KAAK,yBAAyB,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC7F,CAAC;QAED,IAAI,GAAG,QAAgB,CAAC;IAC1B,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,IAAI,IAAI,wCAAwC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7G,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,6EAA6E;QAC7E,yEAAyE;QACzE,gDAAgD;QAChD,OAAO,IAAI,CACT,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,mBAAmB,IAAI,KAAK;YACnH,oBAAoB,IAAI,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,kBAAkB,EAAE,GAAG,0BAA0B,CAAC,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,SAAS;QAExC,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,IAAI,MAAM,GAAW,cAAc,CAAC;IACpC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,+EAA+E;YAC/E,mEAAmE;YACnE,OAAO,IAAI,CAAC,uBAAuB,SAAS,4BAA4B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1E,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAC7E,CAAC;IAED,kFAAkF;IAClF,+EAA+E;IAC/E,oFAAoF;IACpF,qDAAqD;IACrD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,mBAAmB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;IAC/G,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CACT,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAC7D,GAAG,mBAAmB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,6DAA6D,CACpH,CAAC;IACJ,CAAC;IAED;;wDAEoD;IACpD,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,0DAA0D,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE;YACJ,IAAI;YACJ,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC;YAC/B,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC9C,MAAM;YACN,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YACtG,GAAG,EAAE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YAC5D,MAAM,EAAE,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7E,YAAY,EAAE,IAAI,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7G,YAAY,EAAE,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/F,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI;YACtC,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,IAAI;YAC5B,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI;YAC1B,GAAG,EAAE,MAAM,CAAC,GAAG,KAAK,IAAI;YACxB,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,IAAI;SAC3C;KACF,CAAC;AACJ,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import { type RunResult } from "./result.js";
+export { EXIT, type RunResult } from "./result.js";
+export declare const USAGE = "ai21-gateway \u2014 point a local coding agent at the AI21 Intelligent Gateway\n\nUsage:\n  ai21-gateway install --agent-id <id>        configure a repo (default command)\n  ai21-gateway uninstall                      revert what this tool wrote\n  ai21-gateway --help\n  ai21-gateway --version\n\nInstall flags:\n  --agent-id <id>   agent to attribute requests to (required)\n  --key <key>       AI21 key; prompted for without echo when omitted. Prefer the\n                    prompt: a key passed here is kept in your shell history\n  --user-id <id>    adds the x-ai21-user-id attribution header\n  --client <name>   which agent to configure; 'claude-code' (default) is the only\n                    one supported so far\n  --gateway <url>   override the gateway URL outright\n  --repo | --user   write repo-local (default) or to the home directory\n  --yes             overwrite an existing conflicting value\n  --print           render the resolved configuration instead of writing it\n                    (the key is always masked)\n  --json            machine-readable output\n\nUninstall flags:\n  --agent-id <id>   guard: refuse unless the stored agent matches\n  --from-backup     restore settings.json.bak verbatim instead of removing\n                    only this tool's keys \u2014 discards later edits\n  --yes             proceed with a --from-backup restore that discards changes\n  --repo | --user   which settings.json to revert\n\nBy default 'uninstall' removes only the keys this tool wrote, leaving unrelated\nsettings and any later edits of your own intact.\n\nVerification flags:\n  --anthropic-key <key>  Anthropic credential for the verifying request; used\n                         only when 'claude' is not on PATH, never written to disk\n  --no-verify            write the configuration without verifying it\n\nAfter a successful write the CLI sends one request through the gateway to confirm\nthe configuration works: 'claude -p' when it is on PATH, otherwise a direct\nrequest if an Anthropic credential is available. With neither, verification is\nskipped with a warning \u2014 it never changes the exit code.\n\nRe-running the same command is a no-op. An existing settings.json is backed up\nto settings.json.bak before it is changed, and is left untouched if the CLI\nrefuses.";
+export declare function readVersion(): string;
+/**
+ * Pure entry point: argv in, streams-and-exit-code out. Keeping I/O at the edge
+ * is what lets the whole CLI be asserted without spawning a process.
+ */
+export declare function run(argv: readonly string[]): Promise<RunResult>;

package/dist/cli.js

@@ -0,0 +1,140 @@
+#!/usr/bin/env node
+import { readFileSync, realpathSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { parseCliArgs } from "./args.js";
+import { EXIT } from "./result.js";
+import { dispatch } from "./router.js";
+import { nodeVerifyDeps } from "./verify.js";
+import { nodeBrowserDeps, openBrowser } from "./login/browser.js";
+import { startLoopback } from "./login/loopback.js";
+export { EXIT } from "./result.js";
+export const USAGE = `ai21-gateway — point a local coding agent at the AI21 Intelligent Gateway
+
+Usage:
+  ai21-gateway install --agent-id <id>        configure a repo (default command)
+  ai21-gateway uninstall                      revert what this tool wrote
+  ai21-gateway --help
+  ai21-gateway --version
+
+Install flags:
+  --agent-id <id>   agent to attribute requests to (required)
+  --key <key>       AI21 key; prompted for without echo when omitted. Prefer the
+                    prompt: a key passed here is kept in your shell history
+  --user-id <id>    adds the x-ai21-user-id attribution header
+  --client <name>   which agent to configure; 'claude-code' (default) is the only
+                    one supported so far
+  --gateway <url>   override the gateway URL outright
+  --repo | --user   write repo-local (default) or to the home directory
+  --yes             overwrite an existing conflicting value
+  --print           render the resolved configuration instead of writing it
+                    (the key is always masked)
+  --json            machine-readable output
+
+Uninstall flags:
+  --agent-id <id>   guard: refuse unless the stored agent matches
+  --from-backup     restore settings.json.bak verbatim instead of removing
+                    only this tool's keys — discards later edits
+  --yes             proceed with a --from-backup restore that discards changes
+  --repo | --user   which settings.json to revert
+
+By default 'uninstall' removes only the keys this tool wrote, leaving unrelated
+settings and any later edits of your own intact.
+
+Verification flags:
+  --anthropic-key <key>  Anthropic credential for the verifying request; used
+                         only when 'claude' is not on PATH, never written to disk
+  --no-verify            write the configuration without verifying it
+
+After a successful write the CLI sends one request through the gateway to confirm
+the configuration works: 'claude -p' when it is on PATH, otherwise a direct
+request if an Anthropic credential is available. With neither, verification is
+skipped with a warning — it never changes the exit code.
+
+Re-running the same command is a no-op. An existing settings.json is backed up
+to settings.json.bak before it is changed, and is left untouched if the CLI
+refuses.`;
+/** Absolute path to the package root, resolved from this module's location. */
+function packageRoot() {
+    return join(dirname(fileURLToPath(import.meta.url)), "..");
+}
+export function readVersion() {
+    const raw = readFileSync(join(packageRoot(), "package.json"), "utf8");
+    const { version } = JSON.parse(raw);
+    if (typeof version !== "string") {
+        throw new Error('package.json is missing a string "version"');
+    }
+    return version;
+}
+function versionResult() {
+    try {
+        return { code: EXIT.OK, out: `${readVersion()}\n`, err: "" };
+    }
+    catch {
+        // Deliberately no error detail: the underlying failure is an fs error
+        // carrying an absolute install path, and user-facing errors must not leak
+        // internal paths or stack traces.
+        return {
+            code: EXIT.INTERNAL,
+            out: "",
+            err: "ai21-gateway: could not read its own package metadata — the installation looks corrupt. Try reinstalling.\n",
+        };
+    }
+}
+/**
+ * Pure entry point: argv in, streams-and-exit-code out. Keeping I/O at the edge
+ * is what lets the whole CLI be asserted without spawning a process.
+ */
+export async function run(argv) {
+    // Bare invocation is a request for orientation, not a failed `install`.
+    if (argv.length === 0)
+        return { code: EXIT.OK, out: `${USAGE}\n`, err: "" };
+    const outcome = parseCliArgs(argv);
+    switch (outcome.kind) {
+        case "help":
+            return { code: EXIT.OK, out: `${USAGE}\n`, err: "" };
+        case "version":
+            return versionResult();
+        case "error":
+            return { code: EXIT.USAGE, out: "", err: `${outcome.message}\n\n${USAGE}\n` };
+        case "args":
+            // Everything the CLI needs from the outside world is gathered here, at the
+            // edge, so every layer below stays pure and testable against a temp
+            // directory and a pair of fake streams.
+            return dispatch(outcome.args, {
+                paths: { cwd: process.cwd(), home: homedir() },
+                prompt: { input: process.stdin, output: process.stderr },
+                processEnv: process.env,
+                verify: nodeVerifyDeps(process.env),
+                login: {
+                    startListener: startLoopback,
+                    openBrowser: (url) => openBrowser(url, nodeBrowserDeps()),
+                },
+                // stderr, so `--json` on stdout stays a single parseable object even while
+                // login narrates its progress.
+                notify: (message) => process.stderr.write(`${message}\n`),
+            });
+    }
+}
+function isMain() {
+    const invoked = process.argv[1];
+    if (invoked === undefined)
+        return false;
+    try {
+        // realpath both sides: npm installs `bin` as a symlink into node_modules/.bin
+        return realpathSync(invoked) === realpathSync(fileURLToPath(import.meta.url));
+    }
+    catch {
+        return false;
+    }
+}
+if (isMain()) {
+    const { code, out, err } = await run(process.argv.slice(2));
+    if (out !== "")
+        process.stdout.write(out);
+    if (err !== "")
+        process.stderr.write(err);
+    process.exit(code);
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,IAAI,EAAkB,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,IAAI,EAAkB,MAAM,aAAa,CAAC;AAEnD,MAAM,CAAC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;SA4CZ,CAAC;AAEV,+EAA+E;AAC/E,SAAS,WAAW;IAClB,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;IAC7D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,0EAA0E;QAC1E,kCAAkC;QAClC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,QAAQ;YACnB,GAAG,EAAE,EAAE;YACP,GAAG,EAAE,6GAA6G;SACnH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAuB;IAC/C,wEAAwE;IACxE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAE5E,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAEnC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QACvD,KAAK,SAAS;YACZ,OAAO,aAAa,EAAE,CAAC;QACzB,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,OAAO,OAAO,KAAK,IAAI,EAAE,CAAC;QAChF,KAAK,MAAM;YACT,2EAA2E;YAC3E,oEAAoE;YACpE,wCAAwC;YACxC,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;gBAC5B,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;gBAC9C,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;gBACxD,UAAU,EAAE,OAAO,CAAC,GAAG;gBACvB,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC;gBACnC,KAAK,EAAE;oBACL,aAAa,EAAE,aAAa;oBAC5B,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC;iBAC1D;gBACD,2EAA2E;gBAC3E,+BAA+B;gBAC/B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC;aAC1D,CAAC,CAAC;IACP,CAAC;AACH,CAAC;AAED,SAAS,MAAM;IACb,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAExC,IAAI,CAAC;QACH,8EAA8E;QAC9E,OAAO,YAAY,CAAC,OAAO,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,MAAM,EAAE,EAAE,CAAC;IACb,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE1C,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE1C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}