@aigne/afs-cli 1.11.0-beta.11 → 1.11.0-beta.13

package/dist/core/executor/index.mjs

@@ -2,6 +2,28 @@ import { commandFactories } from "../commands/index.mjs";
 import yargs from "yargs";
 
 //#region src/core/executor/index.ts
+/** Known command names and aliases for suggestion matching. */
+const KNOWN_COMMANDS = [
+	"ls",
+	"list",
+	"read",
+	"cat",
+	"write",
+	"delete",
+	"rm",
+	"stat",
+	"exec",
+	"explain",
+	"search",
+	"grep",
+	"find",
+	"mount",
+	"serve",
+	"explore",
+	"service",
+	"connect",
+	"vault"
+];
 /**
 * AFS Command Executor
 *
@@ -41,6 +63,8 @@ var AFSCommandExecutor = class {
 				commandResult = result;
 			}
 		};
+		let failMsg;
+		let failErr;
 		let parser = yargs(normalizedArgs).scriptName("afs").usage("$0 <command> [options]").option("json", {
 			type: "boolean",
 			description: "Output in JSON format",
@@ -64,34 +88,42 @@ var AFSCommandExecutor = class {
 			type: "boolean",
 			description: "Start interactive REPL mode",
 			global: false
-		}).help(true).alias("h", "help").version(this.options.version || "unknown").alias("v", "version").demandCommand().showHelpOnFail(true).exitProcess(false);
+		}).help(true).alias("h", "help").version(this.options.version || "unknown").alias("v", "version").demandCommand().strictCommands().exitProcess(false).fail((msg, err) => {
+			failErr = err || new Error(msg || "Unknown error");
+			failMsg = msg;
+		});
 		for (const factory of commandFactories) parser = parser.command(factory(factoryOptions));
 		try {
 			let output;
-			let error;
-			const parsed = await parser.parseAsync(normalizedArgs, {}, (e, _, o) => {
-				if (e) error = e;
+			await parser.parseAsync(normalizedArgs, {}, (_e, _, o) => {
 				output = o;
 			});
-			if (error) return {
-				success: false,
-				command: normalizedArgs[0] || "unknown",
-				result: void 0,
-				formatted: output,
-				error: { message: error.message }
-			};
-			if (parsed.help) return {
+			if (failErr) {
+				const formatted$1 = await this.formatFailure(normalizedArgs, failMsg, parser);
+				return {
+					success: false,
+					command: normalizedArgs[0] || "unknown",
+					result: void 0,
+					formatted: formatted$1,
+					error: { message: failMsg || failErr.message }
+				};
+			}
+			if (output) return {
 				success: true,
 				command: "help",
 				formatted: output
 			};
-			if (parsed.version) return {
-				success: true,
-				command: "version",
-				formatted: output
-			};
-			if (!commandResult) throw new Error("Command not found");
-			const view = outputOptions.json ? "json" : outputOptions.yaml ? "yaml" : outputOptions.view;
+			if (!commandResult) {
+				const formatted$1 = await this.formatFailure(normalizedArgs, void 0, parser);
+				return {
+					success: false,
+					command: normalizedArgs[0] || "unknown",
+					result: void 0,
+					formatted: formatted$1,
+					error: { message: `Unknown command: "${normalizedArgs[0] || ""}"` }
+				};
+			}
+			const view = outputOptions.json ? "json" : outputOptions.yaml ? "yaml" : commandResult.viewOverride ?? outputOptions.view;
 			const formatted = commandResult.format(commandResult.result, view, { path: this.extractPath(normalizedArgs) });
 			if (commandResult.error) return {
 				success: false,
@@ -118,6 +150,31 @@ var AFSCommandExecutor = class {
 		}
 	}
 	/**
+	* Format a friendly error message for unknown/invalid commands.
+	*/
+	async formatFailure(args, failMsg, parser) {
+		const cmd = args[0] || "";
+		const lines = [];
+		if (cmd && failMsg?.includes("Unknown command")) {
+			lines.push(`Unknown command: "${cmd}"`);
+			const suggestions = suggestCommands(cmd);
+			if (suggestions.length > 0) {
+				lines.push("");
+				lines.push(`Did you mean?`);
+				for (const s of suggestions) lines.push(`  afs ${s}`);
+			}
+		} else if (failMsg) lines.push(failMsg);
+		else lines.push(`Unknown command: "${cmd}"`);
+		lines.push("");
+		try {
+			const helpText = await parser.getHelp();
+			lines.push(helpText);
+		} catch {
+			lines.push("Run \"afs --help\" to see available commands.");
+		}
+		return lines.join("\n");
+	}
+	/**
 	* Normalize argv to an array of strings
 	*/
 	normalizeArgv(argv) {
@@ -189,6 +246,25 @@ var AFSCommandExecutor = class {
 		}
 	}
 };
+/** Levenshtein distance between two strings. */
+function levenshtein(a, b) {
+	const m = a.length;
+	const n = b.length;
+	const dp = Array.from({ length: m + 1 }, () => Array(n + 1).fill(0));
+	for (let i = 0; i <= m; i++) dp[i][0] = i;
+	for (let j = 0; j <= n; j++) dp[0][j] = j;
+	for (let i = 1; i <= m; i++) for (let j = 1; j <= n; j++) dp[i][j] = a[i - 1] === b[j - 1] ? dp[i - 1][j - 1] : 1 + Math.min(dp[i - 1][j], dp[i][j - 1], dp[i - 1][j - 1]);
+	return dp[m][n];
+}
+/** Suggest known commands similar to the given input. */
+function suggestCommands(input) {
+	const lower = input.toLowerCase();
+	return KNOWN_COMMANDS.map((cmd) => ({
+		cmd,
+		dist: levenshtein(lower, cmd),
+		maxLen: Math.max(lower.length, cmd.length)
+	})).filter((x) => x.dist > 0 && x.dist < x.maxLen * .5).sort((a, b) => a.dist - b.dist).map((x) => x.cmd).slice(0, 3);
+}
 
 //#endregion
 export { AFSCommandExecutor };

package/dist/core/executor/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../src/core/executor/index.ts"],"sourcesContent":["/**\n * AFS Command Executor\n *\n * Unified command execution interface using yargs and CommandFactory pattern.\n */\n\nimport type { AFS } from \"@aigne/afs\";\nimport yargs from \"yargs\";\nimport {\n  type CommandFactoryOptions,\n  type CommandOutput,\n  commandFactories,\n} from \"../commands/index.js\";\nimport type { ViewType } from \"../types.js\";\n\n/**\n * Result from executing a command\n */\nexport interface ExecuteResult {\n  /** Whether the command executed successfully */\n  success: boolean;\n  /** The command that was executed (ls, read, write, etc.) */\n  command: string;\n  /** The raw result data from AFS */\n  result?: unknown;\n  /** Formatted output string */\n  formatted: string;\n  /** Error info if the command failed */\n  error?: {\n    /** Exit code (from ExitCode enum) */\n    code?: number;\n    /** Error message */\n    message: string;\n  };\n}\n\n/**\n * Options for the executor\n */\nexport interface ExecutorOptions {\n  /** Whether the output is for a TTY (enables colors) */\n  tty?: boolean;\n  /** Current working directory (for explore command) */\n  cwd?: string;\n  /** Version of the AFS CLI */\n  version?: string;\n}\n\n/**\n * AFS Command Executor\n *\n * Provides a unified interface for executing AFS commands using yargs.\n *\n * @example\n * ```typescript\n * const executor = new AFSCommandExecutor(afs, { tty: false });\n * const result = await executor.execute(\"afs ls /path --depth=2\");\n * console.log(result.formatted);\n * ```\n */\nexport class AFSCommandExecutor {\n  private afs?: AFS;\n  private options: ExecutorOptions;\n\n  constructor(afs?: AFS, options?: ExecutorOptions) {\n    this.afs = afs;\n    this.options = options ?? {};\n  }\n\n  /**\n   * Execute an AFS command\n   *\n   * @param argv - Command string or array of arguments\n   *   - String: \"afs ls /path --depth=2\" or \"ls /path --depth=2\"\n   *   - Array: [\"ls\", \"/path\", \"--depth=2\"]\n   * @returns Execution result with formatted output\n   */\n  async execute(argv: string | string[]): Promise<ExecuteResult> {\n    const normalizedArgs = this.normalizeArgv(argv);\n\n    // Capture command result\n    let commandResult: CommandOutput | undefined;\n\n    // Determine output format from args\n    const outputOptions = this.extractOutputOptions(normalizedArgs);\n\n    // Create factory options\n    const factoryOptions: CommandFactoryOptions = {\n      afs: this.afs,\n      argv: normalizedArgs,\n      cwd: this.options.cwd,\n      onResult: (result) => {\n        commandResult = result;\n      },\n    };\n\n    // Build yargs parser with all commands\n    let parser = yargs(normalizedArgs)\n      .scriptName(\"afs\")\n      .usage(\"$0 <command> [options]\")\n      .option(\"json\", {\n        type: \"boolean\",\n        description: \"Output in JSON format\",\n        global: true,\n      })\n      .option(\"yaml\", {\n        type: \"boolean\",\n        description: \"Output in YAML format\",\n        global: true,\n      })\n      .option(\"view\", {\n        type: \"string\",\n        choices: [\"default\", \"llm\", \"human\"],\n        default: \"default\",\n        description: \"Output view format\",\n        global: true,\n      })\n      .option(\"interactive\", {\n        alias: \"i\",\n        type: \"boolean\",\n        description: \"Start interactive REPL mode\",\n        global: false,\n      })\n      .help(true)\n      .alias(\"h\", \"help\")\n      .version(this.options.version || \"unknown\")\n      .alias(\"v\", \"version\")\n      .demandCommand()\n      .showHelpOnFail(true)\n      .exitProcess(false);\n\n    // Register all commands from factories\n    for (const factory of commandFactories) {\n      parser = parser.command(factory(factoryOptions));\n    }\n\n    // Parse and execute\n    try {\n      let output: string | undefined;\n      let error: Error | undefined;\n\n      const parsed = await parser.parseAsync(normalizedArgs, {}, (e, _, o) => {\n        if (e) error = e;\n        output = o;\n      });\n\n      if (error) {\n        return {\n          success: false,\n          command: normalizedArgs[0] || \"unknown\",\n          result: undefined,\n          formatted: output!,\n          error: { message: error.message },\n        };\n      }\n\n      if (parsed.help) {\n        return {\n          success: true,\n          command: \"help\",\n          formatted: output!,\n        };\n      }\n      if (parsed.version) {\n        return {\n          success: true,\n          command: \"version\",\n          formatted: output!,\n        };\n      }\n\n      if (!commandResult) {\n        throw new Error(\"Command not found\");\n      }\n\n      // Always use the formatter - it handles json/llm/human views\n      const view: ViewType = outputOptions.json\n        ? \"json\"\n        : outputOptions.yaml\n          ? \"yaml\"\n          : outputOptions.view;\n      const formatted = commandResult.format(commandResult.result, view, {\n        path: this.extractPath(normalizedArgs),\n      });\n\n      // Check if command indicated failure\n      if (commandResult.error) {\n        return {\n          success: false,\n          command: commandResult.command,\n          result: commandResult.result,\n          formatted,\n          error: commandResult.error,\n        };\n      }\n\n      return {\n        success: true,\n        command: commandResult.command,\n        result: commandResult.result,\n        formatted,\n      };\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error);\n\n      return {\n        success: false,\n        command: normalizedArgs[0] || \"unknown\",\n        result: undefined,\n        formatted: `ERROR: ${errorMessage}`,\n        error: { message: errorMessage },\n      };\n    }\n  }\n\n  /**\n   * Normalize argv to an array of strings\n   */\n  private normalizeArgv(argv: string | string[]): string[] {\n    if (typeof argv === \"string\") {\n      // Parse quoted strings properly\n      return this.tokenize(argv);\n    }\n\n    // Filter array input\n    const filtered: string[] = [];\n    let foundCommand = false;\n\n    for (const arg of argv) {\n      // Skip node and script paths (for process.argv format)\n      if (\n        !foundCommand &&\n        (arg.includes(\"node\") || arg.includes(\"bun\") || arg.endsWith(\".js\") || arg.endsWith(\".ts\"))\n      ) {\n        continue;\n      }\n\n      // Skip \"afs\" prefix\n      if (!foundCommand && arg === \"afs\") {\n        continue;\n      }\n\n      filtered.push(arg);\n      if (!arg.startsWith(\"-\")) {\n        foundCommand = true;\n      }\n    }\n\n    return filtered;\n  }\n\n  /**\n   * Tokenize a command string, respecting quotes\n   */\n  private tokenize(input: string): string[] {\n    const tokens: string[] = [];\n    let current = \"\";\n    let inQuote = false;\n    let quoteChar = \"\";\n\n    for (let i = 0; i < input.length; i++) {\n      const char = input[i]!;\n\n      if (inQuote) {\n        if (char === quoteChar) {\n          inQuote = false;\n        } else {\n          current += char;\n        }\n      } else if (char === '\"' || char === \"'\") {\n        inQuote = true;\n        quoteChar = char;\n      } else if (char === \" \" || char === \"\\t\") {\n        if (current) {\n          tokens.push(current);\n          current = \"\";\n        }\n      } else {\n        current += char;\n      }\n    }\n\n    if (current) {\n      tokens.push(current);\n    }\n\n    // Filter out \"afs\" prefix if present\n    if (tokens[0] === \"afs\") {\n      tokens.shift();\n    }\n\n    return tokens;\n  }\n\n  /**\n   * Extract output options from args\n   */\n  private extractOutputOptions(args: string[]): {\n    json: boolean;\n    yaml: boolean;\n    view: ViewType;\n  } {\n    let json = false;\n    let yaml = false;\n    let view: ViewType | undefined;\n\n    for (let i = 0; i < args.length; i++) {\n      const arg = args[i]!;\n      if (arg === \"--json\") json = true;\n      if (arg === \"--yaml\") yaml = true;\n      if (arg.startsWith(\"--view=\")) {\n        view = arg.slice(7) as ViewType;\n      } else if (arg === \"--view\" && args[i + 1] && !args[i + 1]!.startsWith(\"-\")) {\n        view = args[i + 1] as ViewType;\n      }\n    }\n\n    // Default to human view in TTY, default otherwise\n    if (!view) {\n      view = this.options.tty ? \"human\" : \"default\";\n    }\n\n    return { json, yaml, view };\n  }\n\n  /**\n   * Extract path from args (first non-option argument after command)\n   */\n  private extractPath(args: string[]): string | undefined {\n    for (let i = 1; i < args.length; i++) {\n      const arg = args[i]!;\n      if (!arg.startsWith(\"-\")) {\n        return arg;\n      }\n    }\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA4DA,IAAa,qBAAb,MAAgC;CAC9B,AAAQ;CACR,AAAQ;CAER,YAAY,KAAW,SAA2B;AAChD,OAAK,MAAM;AACX,OAAK,UAAU,WAAW,EAAE;;;;;;;;;;CAW9B,MAAM,QAAQ,MAAiD;EAC7D,MAAM,iBAAiB,KAAK,cAAc,KAAK;EAG/C,IAAI;EAGJ,MAAM,gBAAgB,KAAK,qBAAqB,eAAe;EAG/D,MAAM,iBAAwC;GAC5C,KAAK,KAAK;GACV,MAAM;GACN,KAAK,KAAK,QAAQ;GAClB,WAAW,WAAW;AACpB,oBAAgB;;GAEnB;EAGD,IAAI,SAAS,MAAM,eAAe,CAC/B,WAAW,MAAM,CACjB,MAAM,yBAAyB,CAC/B,OAAO,QAAQ;GACd,MAAM;GACN,aAAa;GACb,QAAQ;GACT,CAAC,CACD,OAAO,QAAQ;GACd,MAAM;GACN,aAAa;GACb,QAAQ;GACT,CAAC,CACD,OAAO,QAAQ;GACd,MAAM;GACN,SAAS;IAAC;IAAW;IAAO;IAAQ;GACpC,SAAS;GACT,aAAa;GACb,QAAQ;GACT,CAAC,CACD,OAAO,eAAe;GACrB,OAAO;GACP,MAAM;GACN,aAAa;GACb,QAAQ;GACT,CAAC,CACD,KAAK,KAAK,CACV,MAAM,KAAK,OAAO,CAClB,QAAQ,KAAK,QAAQ,WAAW,UAAU,CAC1C,MAAM,KAAK,UAAU,CACrB,eAAe,CACf,eAAe,KAAK,CACpB,YAAY,MAAM;AAGrB,OAAK,MAAM,WAAW,iBACpB,UAAS,OAAO,QAAQ,QAAQ,eAAe,CAAC;AAIlD,MAAI;GACF,IAAI;GACJ,IAAI;GAEJ,MAAM,SAAS,MAAM,OAAO,WAAW,gBAAgB,EAAE,GAAG,GAAG,GAAG,MAAM;AACtE,QAAI,EAAG,SAAQ;AACf,aAAS;KACT;AAEF,OAAI,MACF,QAAO;IACL,SAAS;IACT,SAAS,eAAe,MAAM;IAC9B,QAAQ;IACR,WAAW;IACX,OAAO,EAAE,SAAS,MAAM,SAAS;IAClC;AAGH,OAAI,OAAO,KACT,QAAO;IACL,SAAS;IACT,SAAS;IACT,WAAW;IACZ;AAEH,OAAI,OAAO,QACT,QAAO;IACL,SAAS;IACT,SAAS;IACT,WAAW;IACZ;AAGH,OAAI,CAAC,cACH,OAAM,IAAI,MAAM,oBAAoB;GAItC,MAAM,OAAiB,cAAc,OACjC,SACA,cAAc,OACZ,SACA,cAAc;GACpB,MAAM,YAAY,cAAc,OAAO,cAAc,QAAQ,MAAM,EACjE,MAAM,KAAK,YAAY,eAAe,EACvC,CAAC;AAGF,OAAI,cAAc,MAChB,QAAO;IACL,SAAS;IACT,SAAS,cAAc;IACvB,QAAQ,cAAc;IACtB;IACA,OAAO,cAAc;IACtB;AAGH,UAAO;IACL,SAAS;IACT,SAAS,cAAc;IACvB,QAAQ,cAAc;IACtB;IACD;WACM,OAAO;GACd,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAE3E,UAAO;IACL,SAAS;IACT,SAAS,eAAe,MAAM;IAC9B,QAAQ;IACR,WAAW,UAAU;IACrB,OAAO,EAAE,SAAS,cAAc;IACjC;;;;;;CAOL,AAAQ,cAAc,MAAmC;AACvD,MAAI,OAAO,SAAS,SAElB,QAAO,KAAK,SAAS,KAAK;EAI5B,MAAM,WAAqB,EAAE;EAC7B,IAAI,eAAe;AAEnB,OAAK,MAAM,OAAO,MAAM;AAEtB,OACE,CAAC,iBACA,IAAI,SAAS,OAAO,IAAI,IAAI,SAAS,MAAM,IAAI,IAAI,SAAS,MAAM,IAAI,IAAI,SAAS,MAAM,EAE1F;AAIF,OAAI,CAAC,gBAAgB,QAAQ,MAC3B;AAGF,YAAS,KAAK,IAAI;AAClB,OAAI,CAAC,IAAI,WAAW,IAAI,CACtB,gBAAe;;AAInB,SAAO;;;;;CAMT,AAAQ,SAAS,OAAyB;EACxC,MAAM,SAAmB,EAAE;EAC3B,IAAI,UAAU;EACd,IAAI,UAAU;EACd,IAAI,YAAY;AAEhB,OAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;GACrC,MAAM,OAAO,MAAM;AAEnB,OAAI,QACF,KAAI,SAAS,UACX,WAAU;OAEV,YAAW;YAEJ,SAAS,QAAO,SAAS,KAAK;AACvC,cAAU;AACV,gBAAY;cACH,SAAS,OAAO,SAAS,KAClC;QAAI,SAAS;AACX,YAAO,KAAK,QAAQ;AACpB,eAAU;;SAGZ,YAAW;;AAIf,MAAI,QACF,QAAO,KAAK,QAAQ;AAItB,MAAI,OAAO,OAAO,MAChB,QAAO,OAAO;AAGhB,SAAO;;;;;CAMT,AAAQ,qBAAqB,MAI3B;EACA,IAAI,OAAO;EACX,IAAI,OAAO;EACX,IAAI;AAEJ,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;GACpC,MAAM,MAAM,KAAK;AACjB,OAAI,QAAQ,SAAU,QAAO;AAC7B,OAAI,QAAQ,SAAU,QAAO;AAC7B,OAAI,IAAI,WAAW,UAAU,CAC3B,QAAO,IAAI,MAAM,EAAE;YACV,QAAQ,YAAY,KAAK,IAAI,MAAM,CAAC,KAAK,IAAI,GAAI,WAAW,IAAI,CACzE,QAAO,KAAK,IAAI;;AAKpB,MAAI,CAAC,KACH,QAAO,KAAK,QAAQ,MAAM,UAAU;AAGtC,SAAO;GAAE;GAAM;GAAM;GAAM;;;;;CAM7B,AAAQ,YAAY,MAAoC;AACtD,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;GACpC,MAAM,MAAM,KAAK;AACjB,OAAI,CAAC,IAAI,WAAW,IAAI,CACtB,QAAO"}
+{"version":3,"file":"index.mjs","names":["formatted"],"sources":["../../../src/core/executor/index.ts"],"sourcesContent":["/**\n * AFS Command Executor\n *\n * Unified command execution interface using yargs and CommandFactory pattern.\n */\n\nimport type { AFS } from \"@aigne/afs\";\nimport yargs from \"yargs\";\nimport {\n  type CommandFactoryOptions,\n  type CommandOutput,\n  commandFactories,\n} from \"../commands/index.js\";\nimport type { ViewType } from \"../types.js\";\n\n/**\n * Result from executing a command\n */\nexport interface ExecuteResult {\n  /** Whether the command executed successfully */\n  success: boolean;\n  /** The command that was executed (ls, read, write, etc.) */\n  command: string;\n  /** The raw result data from AFS */\n  result?: unknown;\n  /** Formatted output string */\n  formatted: string;\n  /** Error info if the command failed */\n  error?: {\n    /** Exit code (from ExitCode enum) */\n    code?: number;\n    /** Error message */\n    message: string;\n  };\n}\n\n/**\n * Options for the executor\n */\nexport interface ExecutorOptions {\n  /** Whether the output is for a TTY (enables colors) */\n  tty?: boolean;\n  /** Current working directory (for explore command) */\n  cwd?: string;\n  /** Version of the AFS CLI */\n  version?: string;\n}\n\n/** Known command names and aliases for suggestion matching. */\nconst KNOWN_COMMANDS = [\n  \"ls\",\n  \"list\",\n  \"read\",\n  \"cat\",\n  \"write\",\n  \"delete\",\n  \"rm\",\n  \"stat\",\n  \"exec\",\n  \"explain\",\n  \"search\",\n  \"grep\",\n  \"find\",\n  \"mount\",\n  \"serve\",\n  \"explore\",\n  \"service\",\n  \"connect\",\n  \"vault\",\n];\n\n/**\n * AFS Command Executor\n *\n * Provides a unified interface for executing AFS commands using yargs.\n *\n * @example\n * ```typescript\n * const executor = new AFSCommandExecutor(afs, { tty: false });\n * const result = await executor.execute(\"afs ls /path --depth=2\");\n * console.log(result.formatted);\n * ```\n */\nexport class AFSCommandExecutor {\n  private afs?: AFS;\n  private options: ExecutorOptions;\n\n  constructor(afs?: AFS, options?: ExecutorOptions) {\n    this.afs = afs;\n    this.options = options ?? {};\n  }\n\n  /**\n   * Execute an AFS command\n   *\n   * @param argv - Command string or array of arguments\n   *   - String: \"afs ls /path --depth=2\" or \"ls /path --depth=2\"\n   *   - Array: [\"ls\", \"/path\", \"--depth=2\"]\n   * @returns Execution result with formatted output\n   */\n  async execute(argv: string | string[]): Promise<ExecuteResult> {\n    const normalizedArgs = this.normalizeArgv(argv);\n\n    // Capture command result\n    let commandResult: CommandOutput | undefined;\n\n    // Determine output format from args\n    const outputOptions = this.extractOutputOptions(normalizedArgs);\n\n    // Create factory options\n    const factoryOptions: CommandFactoryOptions = {\n      afs: this.afs,\n      argv: normalizedArgs,\n      cwd: this.options.cwd,\n      onResult: (result) => {\n        commandResult = result;\n      },\n    };\n\n    // Capture fail() info so we can format errors ourselves\n    let failMsg: string | undefined;\n    let failErr: Error | undefined;\n\n    // Build yargs parser with all commands\n    let parser = yargs(normalizedArgs)\n      .scriptName(\"afs\")\n      .usage(\"$0 <command> [options]\")\n      .option(\"json\", {\n        type: \"boolean\",\n        description: \"Output in JSON format\",\n        global: true,\n      })\n      .option(\"yaml\", {\n        type: \"boolean\",\n        description: \"Output in YAML format\",\n        global: true,\n      })\n      .option(\"view\", {\n        type: \"string\",\n        choices: [\"default\", \"llm\", \"human\"],\n        default: \"default\",\n        description: \"Output view format\",\n        global: true,\n      })\n      .option(\"interactive\", {\n        alias: \"i\",\n        type: \"boolean\",\n        description: \"Start interactive REPL mode\",\n        global: false,\n      })\n      .help(true)\n      .alias(\"h\", \"help\")\n      .version(this.options.version || \"unknown\")\n      .alias(\"v\", \"version\")\n      .demandCommand()\n      .strictCommands()\n      .exitProcess(false)\n      .fail((msg, err) => {\n        // Prevent yargs from writing to stderr; we handle output ourselves.\n        failErr = err || new Error(msg || \"Unknown error\");\n        failMsg = msg;\n      });\n\n    // Register all commands from factories\n    for (const factory of commandFactories) {\n      parser = parser.command(factory(factoryOptions));\n    }\n\n    // Parse and execute\n    try {\n      let output: string | undefined;\n\n      await parser.parseAsync(normalizedArgs, {}, (_e, _, o) => {\n        output = o;\n      });\n\n      if (failErr) {\n        const formatted = await this.formatFailure(normalizedArgs, failMsg, parser);\n        return {\n          success: false,\n          command: normalizedArgs[0] || \"unknown\",\n          result: undefined,\n          formatted,\n          error: { message: failMsg || failErr.message },\n        };\n      }\n\n      if (output) {\n        // --help or --version produced output\n        return {\n          success: true,\n          command: \"help\",\n          formatted: output,\n        };\n      }\n\n      if (!commandResult) {\n        const formatted = await this.formatFailure(normalizedArgs, undefined, parser);\n        return {\n          success: false,\n          command: normalizedArgs[0] || \"unknown\",\n          result: undefined,\n          formatted,\n          error: { message: `Unknown command: \"${normalizedArgs[0] || \"\"}\"` },\n        };\n      }\n\n      // Always use the formatter - it handles json/llm/human views\n      // Explicit format flags (--json, --yaml, --view) take precedence over command viewOverride (e.g. -l)\n      const view: ViewType = outputOptions.json\n        ? \"json\"\n        : outputOptions.yaml\n          ? \"yaml\"\n          : (commandResult.viewOverride ?? outputOptions.view);\n      const formatted = commandResult.format(commandResult.result, view, {\n        path: this.extractPath(normalizedArgs),\n      });\n\n      // Check if command indicated failure\n      if (commandResult.error) {\n        return {\n          success: false,\n          command: commandResult.command,\n          result: commandResult.result,\n          formatted,\n          error: commandResult.error,\n        };\n      }\n\n      return {\n        success: true,\n        command: commandResult.command,\n        result: commandResult.result,\n        formatted,\n      };\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error);\n\n      return {\n        success: false,\n        command: normalizedArgs[0] || \"unknown\",\n        result: undefined,\n        formatted: `ERROR: ${errorMessage}`,\n        error: { message: errorMessage },\n      };\n    }\n  }\n\n  /**\n   * Format a friendly error message for unknown/invalid commands.\n   */\n  private async formatFailure(\n    args: string[],\n    failMsg: string | undefined,\n    parser: ReturnType<typeof yargs>,\n  ): Promise<string> {\n    const cmd = args[0] || \"\";\n    const lines: string[] = [];\n\n    // Show what went wrong\n    if (cmd && failMsg?.includes(\"Unknown command\")) {\n      lines.push(`Unknown command: \"${cmd}\"`);\n      const suggestions = suggestCommands(cmd);\n      if (suggestions.length > 0) {\n        lines.push(\"\");\n        lines.push(`Did you mean?`);\n        for (const s of suggestions) {\n          lines.push(`  afs ${s}`);\n        }\n      }\n    } else if (failMsg) {\n      lines.push(failMsg);\n    } else {\n      lines.push(`Unknown command: \"${cmd}\"`);\n    }\n\n    // Append help text\n    lines.push(\"\");\n    try {\n      const helpText = await parser.getHelp();\n      lines.push(helpText);\n    } catch {\n      lines.push('Run \"afs --help\" to see available commands.');\n    }\n\n    return lines.join(\"\\n\");\n  }\n\n  /**\n   * Normalize argv to an array of strings\n   */\n  private normalizeArgv(argv: string | string[]): string[] {\n    if (typeof argv === \"string\") {\n      // Parse quoted strings properly\n      return this.tokenize(argv);\n    }\n\n    // Filter array input\n    const filtered: string[] = [];\n    let foundCommand = false;\n\n    for (const arg of argv) {\n      // Skip node and script paths (for process.argv format)\n      if (\n        !foundCommand &&\n        (arg.includes(\"node\") || arg.includes(\"bun\") || arg.endsWith(\".js\") || arg.endsWith(\".ts\"))\n      ) {\n        continue;\n      }\n\n      // Skip \"afs\" prefix\n      if (!foundCommand && arg === \"afs\") {\n        continue;\n      }\n\n      filtered.push(arg);\n      if (!arg.startsWith(\"-\")) {\n        foundCommand = true;\n      }\n    }\n\n    return filtered;\n  }\n\n  /**\n   * Tokenize a command string, respecting quotes\n   */\n  private tokenize(input: string): string[] {\n    const tokens: string[] = [];\n    let current = \"\";\n    let inQuote = false;\n    let quoteChar = \"\";\n\n    for (let i = 0; i < input.length; i++) {\n      const char = input[i]!;\n\n      if (inQuote) {\n        if (char === quoteChar) {\n          inQuote = false;\n        } else {\n          current += char;\n        }\n      } else if (char === '\"' || char === \"'\") {\n        inQuote = true;\n        quoteChar = char;\n      } else if (char === \" \" || char === \"\\t\") {\n        if (current) {\n          tokens.push(current);\n          current = \"\";\n        }\n      } else {\n        current += char;\n      }\n    }\n\n    if (current) {\n      tokens.push(current);\n    }\n\n    // Filter out \"afs\" prefix if present\n    if (tokens[0] === \"afs\") {\n      tokens.shift();\n    }\n\n    return tokens;\n  }\n\n  /**\n   * Extract output options from args\n   */\n  private extractOutputOptions(args: string[]): {\n    json: boolean;\n    yaml: boolean;\n    view: ViewType;\n  } {\n    let json = false;\n    let yaml = false;\n    let view: ViewType | undefined;\n\n    for (let i = 0; i < args.length; i++) {\n      const arg = args[i]!;\n      if (arg === \"--json\") json = true;\n      if (arg === \"--yaml\") yaml = true;\n      if (arg.startsWith(\"--view=\")) {\n        view = arg.slice(7) as ViewType;\n      } else if (arg === \"--view\" && args[i + 1] && !args[i + 1]!.startsWith(\"-\")) {\n        view = args[i + 1] as ViewType;\n      }\n    }\n\n    // Default to human view in TTY, default otherwise\n    if (!view) {\n      view = this.options.tty ? \"human\" : \"default\";\n    }\n\n    return { json, yaml, view };\n  }\n\n  /**\n   * Extract path from args (first non-option argument after command)\n   */\n  private extractPath(args: string[]): string | undefined {\n    for (let i = 1; i < args.length; i++) {\n      const arg = args[i]!;\n      if (!arg.startsWith(\"-\")) {\n        return arg;\n      }\n    }\n    return undefined;\n  }\n}\n\n/** Levenshtein distance between two strings. */\nfunction levenshtein(a: string, b: string): number {\n  const m = a.length;\n  const n = b.length;\n  const dp: number[][] = Array.from({ length: m + 1 }, () => Array(n + 1).fill(0) as number[]);\n  for (let i = 0; i <= m; i++) dp[i]![0] = i;\n  for (let j = 0; j <= n; j++) dp[0]![j] = j;\n  for (let i = 1; i <= m; i++) {\n    for (let j = 1; j <= n; j++) {\n      dp[i]![j] =\n        a[i - 1] === b[j - 1]\n          ? dp[i - 1]![j - 1]!\n          : 1 + Math.min(dp[i - 1]![j]!, dp[i]![j - 1]!, dp[i - 1]![j - 1]!);\n    }\n  }\n  return dp[m]![n]!;\n}\n\n/** Suggest known commands similar to the given input. */\nfunction suggestCommands(input: string): string[] {\n  const lower = input.toLowerCase();\n  const scored = KNOWN_COMMANDS.map((cmd) => ({\n    cmd,\n    dist: levenshtein(lower, cmd),\n    maxLen: Math.max(lower.length, cmd.length),\n  }))\n    // Only suggest when edit distance < 50% of the longer string\n    .filter((x) => x.dist > 0 && x.dist < x.maxLen * 0.5)\n    .sort((a, b) => a.dist - b.dist);\n  return scored.map((x) => x.cmd).slice(0, 3);\n}\n"],"mappings":";;;;;AAiDA,MAAM,iBAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;;;;;;;;AAcD,IAAa,qBAAb,MAAgC;CAC9B,AAAQ;CACR,AAAQ;CAER,YAAY,KAAW,SAA2B;AAChD,OAAK,MAAM;AACX,OAAK,UAAU,WAAW,EAAE;;;;;;;;;;CAW9B,MAAM,QAAQ,MAAiD;EAC7D,MAAM,iBAAiB,KAAK,cAAc,KAAK;EAG/C,IAAI;EAGJ,MAAM,gBAAgB,KAAK,qBAAqB,eAAe;EAG/D,MAAM,iBAAwC;GAC5C,KAAK,KAAK;GACV,MAAM;GACN,KAAK,KAAK,QAAQ;GAClB,WAAW,WAAW;AACpB,oBAAgB;;GAEnB;EAGD,IAAI;EACJ,IAAI;EAGJ,IAAI,SAAS,MAAM,eAAe,CAC/B,WAAW,MAAM,CACjB,MAAM,yBAAyB,CAC/B,OAAO,QAAQ;GACd,MAAM;GACN,aAAa;GACb,QAAQ;GACT,CAAC,CACD,OAAO,QAAQ;GACd,MAAM;GACN,aAAa;GACb,QAAQ;GACT,CAAC,CACD,OAAO,QAAQ;GACd,MAAM;GACN,SAAS;IAAC;IAAW;IAAO;IAAQ;GACpC,SAAS;GACT,aAAa;GACb,QAAQ;GACT,CAAC,CACD,OAAO,eAAe;GACrB,OAAO;GACP,MAAM;GACN,aAAa;GACb,QAAQ;GACT,CAAC,CACD,KAAK,KAAK,CACV,MAAM,KAAK,OAAO,CAClB,QAAQ,KAAK,QAAQ,WAAW,UAAU,CAC1C,MAAM,KAAK,UAAU,CACrB,eAAe,CACf,gBAAgB,CAChB,YAAY,MAAM,CAClB,MAAM,KAAK,QAAQ;AAElB,aAAU,OAAO,IAAI,MAAM,OAAO,gBAAgB;AAClD,aAAU;IACV;AAGJ,OAAK,MAAM,WAAW,iBACpB,UAAS,OAAO,QAAQ,QAAQ,eAAe,CAAC;AAIlD,MAAI;GACF,IAAI;AAEJ,SAAM,OAAO,WAAW,gBAAgB,EAAE,GAAG,IAAI,GAAG,MAAM;AACxD,aAAS;KACT;AAEF,OAAI,SAAS;IACX,MAAMA,cAAY,MAAM,KAAK,cAAc,gBAAgB,SAAS,OAAO;AAC3E,WAAO;KACL,SAAS;KACT,SAAS,eAAe,MAAM;KAC9B,QAAQ;KACR;KACA,OAAO,EAAE,SAAS,WAAW,QAAQ,SAAS;KAC/C;;AAGH,OAAI,OAEF,QAAO;IACL,SAAS;IACT,SAAS;IACT,WAAW;IACZ;AAGH,OAAI,CAAC,eAAe;IAClB,MAAMA,cAAY,MAAM,KAAK,cAAc,gBAAgB,QAAW,OAAO;AAC7E,WAAO;KACL,SAAS;KACT,SAAS,eAAe,MAAM;KAC9B,QAAQ;KACR;KACA,OAAO,EAAE,SAAS,qBAAqB,eAAe,MAAM,GAAG,IAAI;KACpE;;GAKH,MAAM,OAAiB,cAAc,OACjC,SACA,cAAc,OACZ,SACC,cAAc,gBAAgB,cAAc;GACnD,MAAM,YAAY,cAAc,OAAO,cAAc,QAAQ,MAAM,EACjE,MAAM,KAAK,YAAY,eAAe,EACvC,CAAC;AAGF,OAAI,cAAc,MAChB,QAAO;IACL,SAAS;IACT,SAAS,cAAc;IACvB,QAAQ,cAAc;IACtB;IACA,OAAO,cAAc;IACtB;AAGH,UAAO;IACL,SAAS;IACT,SAAS,cAAc;IACvB,QAAQ,cAAc;IACtB;IACD;WACM,OAAO;GACd,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAE3E,UAAO;IACL,SAAS;IACT,SAAS,eAAe,MAAM;IAC9B,QAAQ;IACR,WAAW,UAAU;IACrB,OAAO,EAAE,SAAS,cAAc;IACjC;;;;;;CAOL,MAAc,cACZ,MACA,SACA,QACiB;EACjB,MAAM,MAAM,KAAK,MAAM;EACvB,MAAM,QAAkB,EAAE;AAG1B,MAAI,OAAO,SAAS,SAAS,kBAAkB,EAAE;AAC/C,SAAM,KAAK,qBAAqB,IAAI,GAAG;GACvC,MAAM,cAAc,gBAAgB,IAAI;AACxC,OAAI,YAAY,SAAS,GAAG;AAC1B,UAAM,KAAK,GAAG;AACd,UAAM,KAAK,gBAAgB;AAC3B,SAAK,MAAM,KAAK,YACd,OAAM,KAAK,SAAS,IAAI;;aAGnB,QACT,OAAM,KAAK,QAAQ;MAEnB,OAAM,KAAK,qBAAqB,IAAI,GAAG;AAIzC,QAAM,KAAK,GAAG;AACd,MAAI;GACF,MAAM,WAAW,MAAM,OAAO,SAAS;AACvC,SAAM,KAAK,SAAS;UACd;AACN,SAAM,KAAK,gDAA8C;;AAG3D,SAAO,MAAM,KAAK,KAAK;;;;;CAMzB,AAAQ,cAAc,MAAmC;AACvD,MAAI,OAAO,SAAS,SAElB,QAAO,KAAK,SAAS,KAAK;EAI5B,MAAM,WAAqB,EAAE;EAC7B,IAAI,eAAe;AAEnB,OAAK,MAAM,OAAO,MAAM;AAEtB,OACE,CAAC,iBACA,IAAI,SAAS,OAAO,IAAI,IAAI,SAAS,MAAM,IAAI,IAAI,SAAS,MAAM,IAAI,IAAI,SAAS,MAAM,EAE1F;AAIF,OAAI,CAAC,gBAAgB,QAAQ,MAC3B;AAGF,YAAS,KAAK,IAAI;AAClB,OAAI,CAAC,IAAI,WAAW,IAAI,CACtB,gBAAe;;AAInB,SAAO;;;;;CAMT,AAAQ,SAAS,OAAyB;EACxC,MAAM,SAAmB,EAAE;EAC3B,IAAI,UAAU;EACd,IAAI,UAAU;EACd,IAAI,YAAY;AAEhB,OAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;GACrC,MAAM,OAAO,MAAM;AAEnB,OAAI,QACF,KAAI,SAAS,UACX,WAAU;OAEV,YAAW;YAEJ,SAAS,QAAO,SAAS,KAAK;AACvC,cAAU;AACV,gBAAY;cACH,SAAS,OAAO,SAAS,KAClC;QAAI,SAAS;AACX,YAAO,KAAK,QAAQ;AACpB,eAAU;;SAGZ,YAAW;;AAIf,MAAI,QACF,QAAO,KAAK,QAAQ;AAItB,MAAI,OAAO,OAAO,MAChB,QAAO,OAAO;AAGhB,SAAO;;;;;CAMT,AAAQ,qBAAqB,MAI3B;EACA,IAAI,OAAO;EACX,IAAI,OAAO;EACX,IAAI;AAEJ,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;GACpC,MAAM,MAAM,KAAK;AACjB,OAAI,QAAQ,SAAU,QAAO;AAC7B,OAAI,QAAQ,SAAU,QAAO;AAC7B,OAAI,IAAI,WAAW,UAAU,CAC3B,QAAO,IAAI,MAAM,EAAE;YACV,QAAQ,YAAY,KAAK,IAAI,MAAM,CAAC,KAAK,IAAI,GAAI,WAAW,IAAI,CACzE,QAAO,KAAK,IAAI;;AAKpB,MAAI,CAAC,KACH,QAAO,KAAK,QAAQ,MAAM,UAAU;AAGtC,SAAO;GAAE;GAAM;GAAM;GAAM;;;;;CAM7B,AAAQ,YAAY,MAAoC;AACtD,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;GACpC,MAAM,MAAM,KAAK;AACjB,OAAI,CAAC,IAAI,WAAW,IAAI,CACtB,QAAO;;;;;AAQf,SAAS,YAAY,GAAW,GAAmB;CACjD,MAAM,IAAI,EAAE;CACZ,MAAM,IAAI,EAAE;CACZ,MAAM,KAAiB,MAAM,KAAK,EAAE,QAAQ,IAAI,GAAG,QAAQ,MAAM,IAAI,EAAE,CAAC,KAAK,EAAE,CAAa;AAC5F,MAAK,IAAI,IAAI,GAAG,KAAK,GAAG,IAAK,IAAG,GAAI,KAAK;AACzC,MAAK,IAAI,IAAI,GAAG,KAAK,GAAG,IAAK,IAAG,GAAI,KAAK;AACzC,MAAK,IAAI,IAAI,GAAG,KAAK,GAAG,IACtB,MAAK,IAAI,IAAI,GAAG,KAAK,GAAG,IACtB,IAAG,GAAI,KACL,EAAE,IAAI,OAAO,EAAE,IAAI,KACf,GAAG,IAAI,GAAI,IAAI,KACf,IAAI,KAAK,IAAI,GAAG,IAAI,GAAI,IAAK,GAAG,GAAI,IAAI,IAAK,GAAG,IAAI,GAAI,IAAI,GAAI;AAG1E,QAAO,GAAG,GAAI;;;AAIhB,SAAS,gBAAgB,OAAyB;CAChD,MAAM,QAAQ,MAAM,aAAa;AASjC,QARe,eAAe,KAAK,SAAS;EAC1C;EACA,MAAM,YAAY,OAAO,IAAI;EAC7B,QAAQ,KAAK,IAAI,MAAM,QAAQ,IAAI,OAAO;EAC3C,EAAE,CAEA,QAAQ,MAAM,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,GAAI,CACpD,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,CACpB,KAAK,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,EAAE"}

package/dist/core/formatters/index.d.mts

@@ -1,6 +1,7 @@
 import { formatDeleteOutput } from "./delete.mjs";
 import { formatExecOutput } from "./exec.mjs";
 import { formatExplainOutput } from "./explain.mjs";
+import "./install.mjs";
 import { formatLsOutput } from "./ls.mjs";
 import { formatMountListOutput } from "./mount.mjs";
 import { formatReadOutput } from "./read.mjs";

package/dist/core/formatters/install.cjs

@@ -0,0 +1,40 @@
+
+//#region src/core/formatters/install.ts
+function formatInstallAddOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	return `Installed "${result.programName}" (${result.programId}) at ${result.mountPath}`;
+}
+function formatInstallListOutput(programs, view) {
+	if (view === "json") return JSON.stringify(programs, null, 2);
+	if (programs.length === 0) return "No programs installed";
+	return ["Installed programs:", ...programs.map((p) => `  ${p.id}  ${p.name}  ${p.entrypoint}  ${p.mountPath}`)].join("\n");
+}
+function formatInstallRemoveOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	const suffix = result.purgedData ? " (data purged)" : "";
+	return `Removed program "${result.programId}"${suffix}`;
+}
+function formatConfigureListOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	if (result.mounts.length === 0) return `Program "${result.programId}" has no mounts`;
+	const lines = result.mounts.map((m) => {
+		const uri = m.configuredUri || m.uri;
+		const req = m.required ? "required" : "optional";
+		const status = m.hasCredentials || m.configuredUri || m.hasOptions ? "configured" : "not configured";
+		return `  ${m.path.padEnd(14)} ${uri.padEnd(24)} (${req})  ${status}`;
+	});
+	return [`Mounts for "${result.programId}":`, ...lines].join("\n");
+}
+function formatConfigureOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	if (result.configuredMounts.length === 0) return `Program "${result.programId}" has no mounts to configure`;
+	const lines = result.configuredMounts.map((m) => `  ${m.target} → ${m.uri}`);
+	return [`Configured ${result.configuredMounts.length} mount(s) for "${result.programId}":`, ...lines].join("\n");
+}
+
+//#endregion
+exports.formatConfigureListOutput = formatConfigureListOutput;
+exports.formatConfigureOutput = formatConfigureOutput;
+exports.formatInstallAddOutput = formatInstallAddOutput;
+exports.formatInstallListOutput = formatInstallListOutput;
+exports.formatInstallRemoveOutput = formatInstallRemoveOutput;

package/dist/core/formatters/install.d.mts

@@ -0,0 +1 @@
+import "../../config/program-install.mjs";

package/dist/core/formatters/install.mjs

@@ -0,0 +1,36 @@
+//#region src/core/formatters/install.ts
+function formatInstallAddOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	return `Installed "${result.programName}" (${result.programId}) at ${result.mountPath}`;
+}
+function formatInstallListOutput(programs, view) {
+	if (view === "json") return JSON.stringify(programs, null, 2);
+	if (programs.length === 0) return "No programs installed";
+	return ["Installed programs:", ...programs.map((p) => `  ${p.id}  ${p.name}  ${p.entrypoint}  ${p.mountPath}`)].join("\n");
+}
+function formatInstallRemoveOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	const suffix = result.purgedData ? " (data purged)" : "";
+	return `Removed program "${result.programId}"${suffix}`;
+}
+function formatConfigureListOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	if (result.mounts.length === 0) return `Program "${result.programId}" has no mounts`;
+	const lines = result.mounts.map((m) => {
+		const uri = m.configuredUri || m.uri;
+		const req = m.required ? "required" : "optional";
+		const status = m.hasCredentials || m.configuredUri || m.hasOptions ? "configured" : "not configured";
+		return `  ${m.path.padEnd(14)} ${uri.padEnd(24)} (${req})  ${status}`;
+	});
+	return [`Mounts for "${result.programId}":`, ...lines].join("\n");
+}
+function formatConfigureOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	if (result.configuredMounts.length === 0) return `Program "${result.programId}" has no mounts to configure`;
+	const lines = result.configuredMounts.map((m) => `  ${m.target} → ${m.uri}`);
+	return [`Configured ${result.configuredMounts.length} mount(s) for "${result.programId}":`, ...lines].join("\n");
+}
+
+//#endregion
+export { formatConfigureListOutput, formatConfigureOutput, formatInstallAddOutput, formatInstallListOutput, formatInstallRemoveOutput };
+//# sourceMappingURL=install.mjs.map

package/dist/core/formatters/install.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.mjs","names":[],"sources":["../../../src/core/formatters/install.ts"],"sourcesContent":["/**\n * Install Command Formatters\n */\n\nimport type {\n  ConfigureResult,\n  InstalledProgram,\n  InstallResult,\n  MountStatus,\n  RemoveResult,\n} from \"../../config/program-install.js\";\nimport type { ViewType } from \"../types.js\";\n\nexport function formatInstallAddOutput(result: InstallResult, view?: ViewType): string {\n  if (view === \"json\") {\n    return JSON.stringify(result, null, 2);\n  }\n  return `Installed \"${result.programName}\" (${result.programId}) at ${result.mountPath}`;\n}\n\nexport function formatInstallListOutput(programs: InstalledProgram[], view?: ViewType): string {\n  if (view === \"json\") {\n    return JSON.stringify(programs, null, 2);\n  }\n  if (programs.length === 0) {\n    return \"No programs installed\";\n  }\n  const lines = programs.map((p) => `  ${p.id}  ${p.name}  ${p.entrypoint}  ${p.mountPath}`);\n  return [\"Installed programs:\", ...lines].join(\"\\n\");\n}\n\nexport function formatInstallRemoveOutput(result: RemoveResult, view?: ViewType): string {\n  if (view === \"json\") {\n    return JSON.stringify(result, null, 2);\n  }\n  const suffix = result.purgedData ? \" (data purged)\" : \"\";\n  return `Removed program \"${result.programId}\"${suffix}`;\n}\n\nexport function formatConfigureListOutput(\n  result: { programId: string; mounts: MountStatus[] },\n  view?: ViewType,\n): string {\n  if (view === \"json\") {\n    return JSON.stringify(result, null, 2);\n  }\n  if (result.mounts.length === 0) {\n    return `Program \"${result.programId}\" has no mounts`;\n  }\n  const lines = result.mounts.map((m) => {\n    const uri = m.configuredUri || m.uri;\n    const req = m.required ? \"required\" : \"optional\";\n    const status =\n      m.hasCredentials || m.configuredUri || m.hasOptions ? \"configured\" : \"not configured\";\n    return `  ${m.path.padEnd(14)} ${uri.padEnd(24)} (${req})  ${status}`;\n  });\n  return [`Mounts for \"${result.programId}\":`, ...lines].join(\"\\n\");\n}\n\nexport function formatConfigureOutput(result: ConfigureResult, view?: ViewType): string {\n  if (view === \"json\") {\n    return JSON.stringify(result, null, 2);\n  }\n  if (result.configuredMounts.length === 0) {\n    return `Program \"${result.programId}\" has no mounts to configure`;\n  }\n  const lines = result.configuredMounts.map((m) => `  ${m.target} → ${m.uri}`);\n  return [\n    `Configured ${result.configuredMounts.length} mount(s) for \"${result.programId}\":`,\n    ...lines,\n  ].join(\"\\n\");\n}\n"],"mappings":";AAaA,SAAgB,uBAAuB,QAAuB,MAAyB;AACrF,KAAI,SAAS,OACX,QAAO,KAAK,UAAU,QAAQ,MAAM,EAAE;AAExC,QAAO,cAAc,OAAO,YAAY,KAAK,OAAO,UAAU,OAAO,OAAO;;AAG9E,SAAgB,wBAAwB,UAA8B,MAAyB;AAC7F,KAAI,SAAS,OACX,QAAO,KAAK,UAAU,UAAU,MAAM,EAAE;AAE1C,KAAI,SAAS,WAAW,EACtB,QAAO;AAGT,QAAO,CAAC,uBAAuB,GADjB,SAAS,KAAK,MAAM,KAAK,EAAE,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,WAAW,IAAI,EAAE,YAAY,CAClD,CAAC,KAAK,KAAK;;AAGrD,SAAgB,0BAA0B,QAAsB,MAAyB;AACvF,KAAI,SAAS,OACX,QAAO,KAAK,UAAU,QAAQ,MAAM,EAAE;CAExC,MAAM,SAAS,OAAO,aAAa,mBAAmB;AACtD,QAAO,oBAAoB,OAAO,UAAU,GAAG;;AAGjD,SAAgB,0BACd,QACA,MACQ;AACR,KAAI,SAAS,OACX,QAAO,KAAK,UAAU,QAAQ,MAAM,EAAE;AAExC,KAAI,OAAO,OAAO,WAAW,EAC3B,QAAO,YAAY,OAAO,UAAU;CAEtC,MAAM,QAAQ,OAAO,OAAO,KAAK,MAAM;EACrC,MAAM,MAAM,EAAE,iBAAiB,EAAE;EACjC,MAAM,MAAM,EAAE,WAAW,aAAa;EACtC,MAAM,SACJ,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,eAAe;AACvE,SAAO,KAAK,EAAE,KAAK,OAAO,GAAG,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,IAAI,KAAK;GAC7D;AACF,QAAO,CAAC,eAAe,OAAO,UAAU,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK;;AAGnE,SAAgB,sBAAsB,QAAyB,MAAyB;AACtF,KAAI,SAAS,OACX,QAAO,KAAK,UAAU,QAAQ,MAAM,EAAE;AAExC,KAAI,OAAO,iBAAiB,WAAW,EACrC,QAAO,YAAY,OAAO,UAAU;CAEtC,MAAM,QAAQ,OAAO,iBAAiB,KAAK,MAAM,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM;AAC5E,QAAO,CACL,cAAc,OAAO,iBAAiB,OAAO,iBAAiB,OAAO,UAAU,KAC/E,GAAG,MACJ,CAAC,KAAK,KAAK"}

package/dist/core/formatters/vault.cjs

@@ -0,0 +1,36 @@
+
+//#region src/core/formatters/vault.ts
+function formatVaultInitOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	const lines = [`Vault initialized at ${result.vaultPath}`];
+	if (result.migrated && result.migrated > 0) lines.push(`Migrated ${result.migrated} credential(s) from credentials.toml`);
+	return lines.join("\n");
+}
+function formatVaultGetOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	return result.value;
+}
+function formatVaultSetOutput(result, view) {
+	if (view === "json") return JSON.stringify({
+		...result,
+		success: true
+	}, null, 2);
+	return `OK ${result.group}/${result.name}`;
+}
+function formatVaultDeleteOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	const target = result.name ? `${result.group}/${result.name}` : result.group;
+	return result.deleted ? `Deleted ${target}` : `Not found: ${target}`;
+}
+function formatVaultListOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	if (result.secrets.length === 0) return result.group ? `No secrets in group: ${result.group}` : "Vault is empty";
+	return result.secrets.join("\n");
+}
+
+//#endregion
+exports.formatVaultDeleteOutput = formatVaultDeleteOutput;
+exports.formatVaultGetOutput = formatVaultGetOutput;
+exports.formatVaultInitOutput = formatVaultInitOutput;
+exports.formatVaultListOutput = formatVaultListOutput;
+exports.formatVaultSetOutput = formatVaultSetOutput;

package/dist/core/formatters/vault.mjs

@@ -0,0 +1,32 @@
+//#region src/core/formatters/vault.ts
+function formatVaultInitOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	const lines = [`Vault initialized at ${result.vaultPath}`];
+	if (result.migrated && result.migrated > 0) lines.push(`Migrated ${result.migrated} credential(s) from credentials.toml`);
+	return lines.join("\n");
+}
+function formatVaultGetOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	return result.value;
+}
+function formatVaultSetOutput(result, view) {
+	if (view === "json") return JSON.stringify({
+		...result,
+		success: true
+	}, null, 2);
+	return `OK ${result.group}/${result.name}`;
+}
+function formatVaultDeleteOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	const target = result.name ? `${result.group}/${result.name}` : result.group;
+	return result.deleted ? `Deleted ${target}` : `Not found: ${target}`;
+}
+function formatVaultListOutput(result, view) {
+	if (view === "json") return JSON.stringify(result, null, 2);
+	if (result.secrets.length === 0) return result.group ? `No secrets in group: ${result.group}` : "Vault is empty";
+	return result.secrets.join("\n");
+}
+
+//#endregion
+export { formatVaultDeleteOutput, formatVaultGetOutput, formatVaultInitOutput, formatVaultListOutput, formatVaultSetOutput };
+//# sourceMappingURL=vault.mjs.map

package/dist/core/formatters/vault.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.mjs","names":[],"sources":["../../../src/core/formatters/vault.ts"],"sourcesContent":["/**\n * vault Formatter - Core Implementation\n *\n * Formats vault command output without colors.\n */\n\nimport type { ViewType } from \"../types.js\";\n\nexport interface VaultInitResult {\n  success: boolean;\n  vaultPath: string;\n  migrated?: number;\n}\n\nexport interface VaultGetResult {\n  group: string;\n  name: string;\n  value: string;\n}\n\nexport interface VaultSetResult {\n  group: string;\n  name: string;\n}\n\nexport interface VaultDeleteResult {\n  group: string;\n  name?: string;\n  deleted: boolean;\n}\n\nexport interface VaultListResult {\n  group?: string;\n  secrets: string[];\n}\n\nexport function formatVaultInitOutput(result: VaultInitResult, view: ViewType): string {\n  if (view === \"json\") return JSON.stringify(result, null, 2);\n  const lines = [`Vault initialized at ${result.vaultPath}`];\n  if (result.migrated && result.migrated > 0) {\n    lines.push(`Migrated ${result.migrated} credential(s) from credentials.toml`);\n  }\n  return lines.join(\"\\n\");\n}\n\nexport function formatVaultGetOutput(result: VaultGetResult, view: ViewType): string {\n  if (view === \"json\") return JSON.stringify(result, null, 2);\n  return result.value;\n}\n\nexport function formatVaultSetOutput(result: VaultSetResult, view: ViewType): string {\n  if (view === \"json\") return JSON.stringify({ ...result, success: true }, null, 2);\n  return `OK ${result.group}/${result.name}`;\n}\n\nexport function formatVaultDeleteOutput(result: VaultDeleteResult, view: ViewType): string {\n  if (view === \"json\") return JSON.stringify(result, null, 2);\n  const target = result.name ? `${result.group}/${result.name}` : result.group;\n  return result.deleted ? `Deleted ${target}` : `Not found: ${target}`;\n}\n\nexport function formatVaultListOutput(result: VaultListResult, view: ViewType): string {\n  if (view === \"json\") return JSON.stringify(result, null, 2);\n  if (result.secrets.length === 0) {\n    return result.group ? `No secrets in group: ${result.group}` : \"Vault is empty\";\n  }\n  return result.secrets.join(\"\\n\");\n}\n"],"mappings":";AAoCA,SAAgB,sBAAsB,QAAyB,MAAwB;AACrF,KAAI,SAAS,OAAQ,QAAO,KAAK,UAAU,QAAQ,MAAM,EAAE;CAC3D,MAAM,QAAQ,CAAC,wBAAwB,OAAO,YAAY;AAC1D,KAAI,OAAO,YAAY,OAAO,WAAW,EACvC,OAAM,KAAK,YAAY,OAAO,SAAS,sCAAsC;AAE/E,QAAO,MAAM,KAAK,KAAK;;AAGzB,SAAgB,qBAAqB,QAAwB,MAAwB;AACnF,KAAI,SAAS,OAAQ,QAAO,KAAK,UAAU,QAAQ,MAAM,EAAE;AAC3D,QAAO,OAAO;;AAGhB,SAAgB,qBAAqB,QAAwB,MAAwB;AACnF,KAAI,SAAS,OAAQ,QAAO,KAAK,UAAU;EAAE,GAAG;EAAQ,SAAS;EAAM,EAAE,MAAM,EAAE;AACjF,QAAO,MAAM,OAAO,MAAM,GAAG,OAAO;;AAGtC,SAAgB,wBAAwB,QAA2B,MAAwB;AACzF,KAAI,SAAS,OAAQ,QAAO,KAAK,UAAU,QAAQ,MAAM,EAAE;CAC3D,MAAM,SAAS,OAAO,OAAO,GAAG,OAAO,MAAM,GAAG,OAAO,SAAS,OAAO;AACvE,QAAO,OAAO,UAAU,WAAW,WAAW,cAAc;;AAG9D,SAAgB,sBAAsB,QAAyB,MAAwB;AACrF,KAAI,SAAS,OAAQ,QAAO,KAAK,UAAU,QAAQ,MAAM,EAAE;AAC3D,KAAI,OAAO,QAAQ,WAAW,EAC5B,QAAO,OAAO,QAAQ,wBAAwB,OAAO,UAAU;AAEjE,QAAO,OAAO,QAAQ,KAAK,KAAK"}

package/dist/credential/auth-server.cjs

@@ -200,9 +200,26 @@ function renderFormHTML(schema, title, nonce) {
 		const label = prop.description || key;
 		const isSensitive = prop.sensitive === true;
 		const isRequired = required.has(key);
-		const inputType = isSensitive ? "password" : "text";
-		const defaultValue = prop.default != null ? String(prop.default) : "";
-		fields += `
+		const defaultValue = prop.default != null ? prop.default : "";
+		if (prop.type === "boolean") {
+			const checked = defaultValue === true || defaultValue === "true";
+			fields += `
+      <div style="margin-bottom: 12px;">
+        <label style="display: flex; align-items: center; gap: 8px; font-weight: 600; cursor: pointer;">
+          <input type="hidden" name="${escapeHTML(key)}" value="false" />
+          <input
+            type="checkbox"
+            name="${escapeHTML(key)}"
+            value="true"
+            ${checked ? "checked" : ""}
+            style="width: 18px; height: 18px;"
+          />
+          ${escapeHTML(label)}
+        </label>
+      </div>`;
+		} else {
+			const inputType = isSensitive ? "password" : "text";
+			fields += `
       <div style="margin-bottom: 12px;">
         <label for="${escapeHTML(key)}" style="display: block; font-weight: 600; margin-bottom: 4px;">
           ${escapeHTML(label)}${isRequired ? " *" : ""}
@@ -211,12 +228,13 @@ function renderFormHTML(schema, title, nonce) {
           type="${inputType}"
           id="${escapeHTML(key)}"
           name="${escapeHTML(key)}"
-          value="${escapeHTML(defaultValue)}"
+          value="${escapeHTML(String(defaultValue))}"
           ${isRequired ? "required" : ""}
           style="width: 100%; padding: 8px; border: 1px solid #ccc; border-radius: 4px; font-size: 14px;"
           autocomplete="off"
         />
       </div>`;
+		}
 	}
 	return `<!DOCTYPE html>
 <html>

package/dist/credential/auth-server.mjs

@@ -199,9 +199,26 @@ function renderFormHTML(schema, title, nonce) {
 		const label = prop.description || key;
 		const isSensitive = prop.sensitive === true;
 		const isRequired = required.has(key);
-		const inputType = isSensitive ? "password" : "text";
-		const defaultValue = prop.default != null ? String(prop.default) : "";
-		fields += `
+		const defaultValue = prop.default != null ? prop.default : "";
+		if (prop.type === "boolean") {
+			const checked = defaultValue === true || defaultValue === "true";
+			fields += `
+      <div style="margin-bottom: 12px;">
+        <label style="display: flex; align-items: center; gap: 8px; font-weight: 600; cursor: pointer;">
+          <input type="hidden" name="${escapeHTML(key)}" value="false" />
+          <input
+            type="checkbox"
+            name="${escapeHTML(key)}"
+            value="true"
+            ${checked ? "checked" : ""}
+            style="width: 18px; height: 18px;"
+          />
+          ${escapeHTML(label)}
+        </label>
+      </div>`;
+		} else {
+			const inputType = isSensitive ? "password" : "text";
+			fields += `
       <div style="margin-bottom: 12px;">
         <label for="${escapeHTML(key)}" style="display: block; font-weight: 600; margin-bottom: 4px;">
           ${escapeHTML(label)}${isRequired ? " *" : ""}
@@ -210,12 +227,13 @@ function renderFormHTML(schema, title, nonce) {
           type="${inputType}"
           id="${escapeHTML(key)}"
           name="${escapeHTML(key)}"
-          value="${escapeHTML(defaultValue)}"
+          value="${escapeHTML(String(defaultValue))}"
           ${isRequired ? "required" : ""}
           style="width: 100%; padding: 8px; border: 1px solid #ccc; border-radius: 4px; font-size: 14px;"
           autocomplete="off"
         />
       </div>`;
+		}
 	}
 	return `<!DOCTYPE html>
 <html>

package/dist/credential/auth-server.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"auth-server.mjs","names":[],"sources":["../../src/credential/auth-server.ts"],"sourcesContent":["/**\n * Temporary HTTP Server for credential collection.\n *\n * Supports two modes:\n * 1. Form collection: GET /auth renders a form from JSON Schema, POST /auth returns submitted data\n * 2. OAuth callback: GET /callback captures query params for waitForCallback()\n *\n * Security:\n * - Binds to 127.0.0.1 only (no external connections)\n * - One-time nonce per request to prevent CSRF\n * - Auto-closes after 5 minutes\n * - POST data is never logged\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createServer, type IncomingMessage, type Server, type ServerResponse } from \"node:http\";\n\nconst DEFAULT_TIMEOUT = 5 * 60 * 1000; // 5 minutes\nconst MAX_PORT_RETRIES = 3;\n\nexport interface AuthServer {\n  /** Base URL of the server, e.g. http://127.0.0.1:12345 */\n  baseURL: string;\n\n  /** Callback URL for OAuth redirects: baseURL + /callback */\n  callbackURL: string;\n\n  /** Wait for a callback request at /callback. Returns query params or null on timeout/close. */\n  waitForCallback(options?: { timeout?: number }): Promise<Record<string, string> | null>;\n\n  /**\n   * Serve a form for collecting fields, wait for submission.\n   * Returns submitted values or null on timeout/close.\n   *\n   * @param schema - JSON Schema describing fields to collect\n   * @param options - Optional title and timeout\n   */\n  waitForForm(\n    schema: Record<string, any>,\n    options?: { title?: string; timeout?: number },\n  ): Promise<Record<string, unknown> | null>;\n\n  /** Close the server. Idempotent. */\n  close(): void;\n\n  /** The one-time nonce for this server session */\n  readonly nonce: string;\n\n  /** The port the server is listening on */\n  readonly port: number;\n}\n\nexport interface CreateAuthServerOptions {\n  /** Timeout in ms before auto-close. Default: 5 minutes. */\n  timeout?: number;\n}\n\n/**\n * Create a temporary auth server bound to 127.0.0.1 with a random port.\n */\nexport async function createAuthServer(options?: CreateAuthServerOptions): Promise<AuthServer> {\n  const timeout = options?.timeout ?? DEFAULT_TIMEOUT;\n  const nonce = randomBytes(16).toString(\"hex\");\n\n  let closed = false;\n  let callbackResolve: ((value: Record<string, string> | null) => void) | null = null;\n  let formResolve: ((value: Record<string, unknown> | null) => void) | null = null;\n  let formSchema: Record<string, any> | null = null;\n  let formTitle = \"AFS Credential Collection\";\n\n  const server = createServer((req, res) => {\n    const url = new URL(req.url || \"/\", `http://127.0.0.1`);\n    const pathname = url.pathname;\n\n    // CORS headers for local browser forms\n    res.setHeader(\"Access-Control-Allow-Origin\", \"*\");\n    res.setHeader(\"Access-Control-Allow-Methods\", \"GET, POST, OPTIONS\");\n    res.setHeader(\"Access-Control-Allow-Headers\", \"Content-Type\");\n\n    if (req.method === \"OPTIONS\") {\n      res.writeHead(204);\n      res.end();\n      return;\n    }\n\n    if (pathname === \"/callback\") {\n      handleCallback(url, req, res, nonce);\n    } else if (pathname === \"/auth\" && req.method === \"GET\") {\n      handleFormGet(url, res, nonce);\n    } else if (pathname === \"/auth\" && req.method === \"POST\") {\n      handleFormPost(req, res, nonce, url);\n    } else {\n      res.writeHead(404, { \"Content-Type\": \"text/plain\" });\n      res.end(\"Not Found\");\n    }\n  });\n\n  function handleCallback(\n    url: URL,\n    _req: IncomingMessage,\n    res: ServerResponse,\n    expectedNonce: string,\n  ): void {\n    const reqNonce = url.searchParams.get(\"nonce\");\n    if (reqNonce !== expectedNonce) {\n      res.writeHead(403, { \"Content-Type\": \"text/plain\" });\n      res.end(\"Forbidden: invalid nonce\");\n      return;\n    }\n\n    const params: Record<string, string> = {};\n    for (const [key, value] of url.searchParams.entries()) {\n      if (key !== \"nonce\") {\n        params[key] = value;\n      }\n    }\n\n    res.writeHead(200, { \"Content-Type\": \"text/html\" });\n    res.end(\n      \"<html><body><h2>Authorization complete.</h2><p>You can close this tab.</p></body></html>\",\n    );\n\n    if (callbackResolve) {\n      callbackResolve(params);\n      callbackResolve = null;\n    }\n  }\n\n  function handleFormGet(url: URL, res: ServerResponse, expectedNonce: string): void {\n    const reqNonce = url.searchParams.get(\"nonce\");\n    if (reqNonce !== expectedNonce) {\n      res.writeHead(403, { \"Content-Type\": \"text/plain\" });\n      res.end(\"Forbidden: invalid nonce\");\n      return;\n    }\n\n    if (!formSchema) {\n      res.writeHead(400, { \"Content-Type\": \"text/plain\" });\n      res.end(\"No form schema available\");\n      return;\n    }\n\n    const html = renderFormHTML(formSchema, formTitle, expectedNonce);\n    res.writeHead(200, { \"Content-Type\": \"text/html; charset=utf-8\" });\n    res.end(html);\n  }\n\n  function handleFormPost(\n    req: IncomingMessage,\n    res: ServerResponse,\n    expectedNonce: string,\n    url: URL,\n  ): void {\n    const reqNonce = url.searchParams.get(\"nonce\");\n    if (reqNonce !== expectedNonce) {\n      res.writeHead(403, { \"Content-Type\": \"text/plain\" });\n      res.end(\"Forbidden: invalid nonce\");\n      return;\n    }\n\n    let body = \"\";\n    req.on(\"data\", (chunk: Buffer) => {\n      body += chunk.toString();\n    });\n    req.on(\"end\", () => {\n      let data: Record<string, unknown>;\n      const contentType = req.headers[\"content-type\"] || \"\";\n\n      if (contentType.includes(\"application/json\")) {\n        try {\n          data = JSON.parse(body);\n        } catch {\n          res.writeHead(400, { \"Content-Type\": \"text/plain\" });\n          res.end(\"Invalid JSON\");\n          return;\n        }\n      } else {\n        // URL-encoded form data\n        const params = new URLSearchParams(body);\n        data = {};\n        for (const [key, value] of params.entries()) {\n          if (key !== \"nonce\") {\n            data[key] = value;\n          }\n        }\n        // Coerce string values to match schema types (HTML forms always submit strings)\n        if (formSchema?.properties) {\n          for (const [key, value] of Object.entries(data)) {\n            const prop = (formSchema.properties as Record<string, any>)[key];\n            if (!prop) continue;\n            const strValue = String(value);\n            if (prop.type === \"number\" || prop.type === \"integer\") {\n              const num = Number(strValue);\n              if (!Number.isNaN(num) && strValue !== \"\") data[key] = num;\n            } else if (prop.type === \"boolean\") {\n              if (strValue === \"true\" || strValue === \"1\") data[key] = true;\n              else if (strValue === \"false\" || strValue === \"0\" || strValue === \"\")\n                data[key] = false;\n            }\n            // Remove empty strings for non-string optional fields (let defaults apply)\n            if (strValue === \"\" && prop.type !== \"string\") {\n              delete data[key];\n            }\n          }\n        }\n      }\n\n      res.writeHead(200, { \"Content-Type\": \"text/html; charset=utf-8\" });\n      res.end(\n        \"<html><body><h2>Credentials received.</h2><p>You can close this tab.</p></body></html>\",\n      );\n\n      if (formResolve) {\n        formResolve(data);\n        formResolve = null;\n      }\n    });\n  }\n\n  // Start server with port retry\n  const port = await startServer(server, MAX_PORT_RETRIES);\n\n  // Auto-close timeout\n  const autoCloseTimer = setTimeout(() => {\n    closeServer();\n  }, timeout);\n\n  function closeServer(): void {\n    if (closed) return;\n    closed = true;\n    clearTimeout(autoCloseTimer);\n    server.close();\n\n    // Resolve any pending waiters with null\n    if (callbackResolve) {\n      callbackResolve(null);\n      callbackResolve = null;\n    }\n    if (formResolve) {\n      formResolve(null);\n      formResolve = null;\n    }\n  }\n\n  const baseURL = `http://127.0.0.1:${port}`;\n\n  return {\n    baseURL,\n    callbackURL: `${baseURL}/callback?nonce=${nonce}`,\n    nonce,\n    port,\n\n    waitForCallback(opts?: { timeout?: number }): Promise<Record<string, string> | null> {\n      if (closed) return Promise.resolve(null);\n\n      return new Promise((resolve) => {\n        callbackResolve = resolve;\n\n        if (opts?.timeout) {\n          setTimeout(() => {\n            if (callbackResolve === resolve) {\n              callbackResolve = null;\n              resolve(null);\n            }\n          }, opts.timeout);\n        }\n      });\n    },\n\n    waitForForm(\n      schema: Record<string, any>,\n      opts?: { title?: string; timeout?: number },\n    ): Promise<Record<string, unknown> | null> {\n      if (closed) return Promise.resolve(null);\n\n      formSchema = schema;\n      if (opts?.title) formTitle = opts.title;\n\n      return new Promise((resolve) => {\n        formResolve = resolve;\n\n        if (opts?.timeout) {\n          setTimeout(() => {\n            if (formResolve === resolve) {\n              formResolve = null;\n              resolve(null);\n            }\n          }, opts.timeout);\n        }\n      });\n    },\n\n    close: closeServer,\n  };\n}\n\nasync function startServer(server: Server, maxRetries: number): Promise<number> {\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\n    try {\n      return await new Promise<number>((resolve, reject) => {\n        server.listen(0, \"127.0.0.1\", () => {\n          const addr = server.address();\n          if (addr && typeof addr === \"object\") {\n            resolve(addr.port);\n          } else {\n            reject(new Error(\"Failed to get server address\"));\n          }\n        });\n        server.on(\"error\", reject);\n      });\n    } catch (err: any) {\n      if (attempt === maxRetries) {\n        throw new Error(\n          `Failed to start auth server after ${maxRetries + 1} attempts: ${err.message}`,\n        );\n      }\n      // Close and retry\n      server.close();\n    }\n  }\n  throw new Error(\"Failed to start auth server\");\n}\n\nfunction renderFormHTML(schema: Record<string, any>, title: string, nonce: string): string {\n  const properties = schema.properties || {};\n  const required = new Set(schema.required || []);\n\n  let fields = \"\";\n  for (const [key, prop] of Object.entries(properties) as [string, any][]) {\n    const label = prop.description || key;\n    const isSensitive = prop.sensitive === true;\n    const isRequired = required.has(key);\n    const inputType = isSensitive ? \"password\" : \"text\";\n    const defaultValue = prop.default != null ? String(prop.default) : \"\";\n\n    fields += `\n      <div style=\"margin-bottom: 12px;\">\n        <label for=\"${escapeHTML(key)}\" style=\"display: block; font-weight: 600; margin-bottom: 4px;\">\n          ${escapeHTML(label)}${isRequired ? \" *\" : \"\"}\n        </label>\n        <input\n          type=\"${inputType}\"\n          id=\"${escapeHTML(key)}\"\n          name=\"${escapeHTML(key)}\"\n          value=\"${escapeHTML(defaultValue)}\"\n          ${isRequired ? \"required\" : \"\"}\n          style=\"width: 100%; padding: 8px; border: 1px solid #ccc; border-radius: 4px; font-size: 14px;\"\n          autocomplete=\"off\"\n        />\n      </div>`;\n  }\n\n  return `<!DOCTYPE html>\n<html>\n<head>\n  <meta charset=\"utf-8\">\n  <title>${escapeHTML(title)}</title>\n  <style>\n    body { font-family: -apple-system, BlinkMacSystemFont, sans-serif; max-width: 480px; margin: 40px auto; padding: 0 20px; }\n    h2 { color: #333; }\n    button { background: #2563eb; color: white; border: none; padding: 10px 24px; border-radius: 4px; font-size: 14px; cursor: pointer; }\n    button:hover { background: #1d4ed8; }\n  </style>\n</head>\n<body>\n  <h2>${escapeHTML(title)}</h2>\n  <form method=\"POST\" action=\"/auth?nonce=${escapeHTML(nonce)}\">\n    ${fields}\n    <button type=\"submit\">Submit</button>\n  </form>\n</body>\n</html>`;\n}\n\nfunction escapeHTML(str: string): string {\n  return str\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAiBA,MAAM,kBAAkB,MAAS;AACjC,MAAM,mBAAmB;;;;AA0CzB,eAAsB,iBAAiB,SAAwD;CAC7F,MAAM,UAAU,SAAS,WAAW;CACpC,MAAM,QAAQ,YAAY,GAAG,CAAC,SAAS,MAAM;CAE7C,IAAI,SAAS;CACb,IAAI,kBAA2E;CAC/E,IAAI,cAAwE;CAC5E,IAAI,aAAyC;CAC7C,IAAI,YAAY;CAEhB,MAAM,SAAS,cAAc,KAAK,QAAQ;EACxC,MAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,mBAAmB;EACvD,MAAM,WAAW,IAAI;AAGrB,MAAI,UAAU,+BAA+B,IAAI;AACjD,MAAI,UAAU,gCAAgC,qBAAqB;AACnE,MAAI,UAAU,gCAAgC,eAAe;AAE7D,MAAI,IAAI,WAAW,WAAW;AAC5B,OAAI,UAAU,IAAI;AAClB,OAAI,KAAK;AACT;;AAGF,MAAI,aAAa,YACf,gBAAe,KAAK,KAAK,KAAK,MAAM;WAC3B,aAAa,WAAW,IAAI,WAAW,MAChD,eAAc,KAAK,KAAK,MAAM;WACrB,aAAa,WAAW,IAAI,WAAW,OAChD,gBAAe,KAAK,KAAK,OAAO,IAAI;OAC/B;AACL,OAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,OAAI,IAAI,YAAY;;GAEtB;CAEF,SAAS,eACP,KACA,MACA,KACA,eACM;AAEN,MADiB,IAAI,aAAa,IAAI,QAAQ,KAC7B,eAAe;AAC9B,OAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,OAAI,IAAI,2BAA2B;AACnC;;EAGF,MAAM,SAAiC,EAAE;AACzC,OAAK,MAAM,CAAC,KAAK,UAAU,IAAI,aAAa,SAAS,CACnD,KAAI,QAAQ,QACV,QAAO,OAAO;AAIlB,MAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;AACnD,MAAI,IACF,2FACD;AAED,MAAI,iBAAiB;AACnB,mBAAgB,OAAO;AACvB,qBAAkB;;;CAItB,SAAS,cAAc,KAAU,KAAqB,eAA6B;AAEjF,MADiB,IAAI,aAAa,IAAI,QAAQ,KAC7B,eAAe;AAC9B,OAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,OAAI,IAAI,2BAA2B;AACnC;;AAGF,MAAI,CAAC,YAAY;AACf,OAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,OAAI,IAAI,2BAA2B;AACnC;;EAGF,MAAM,OAAO,eAAe,YAAY,WAAW,cAAc;AACjE,MAAI,UAAU,KAAK,EAAE,gBAAgB,4BAA4B,CAAC;AAClE,MAAI,IAAI,KAAK;;CAGf,SAAS,eACP,KACA,KACA,eACA,KACM;AAEN,MADiB,IAAI,aAAa,IAAI,QAAQ,KAC7B,eAAe;AAC9B,OAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,OAAI,IAAI,2BAA2B;AACnC;;EAGF,IAAI,OAAO;AACX,MAAI,GAAG,SAAS,UAAkB;AAChC,WAAQ,MAAM,UAAU;IACxB;AACF,MAAI,GAAG,aAAa;GAClB,IAAI;AAGJ,QAFoB,IAAI,QAAQ,mBAAmB,IAEnC,SAAS,mBAAmB,CAC1C,KAAI;AACF,WAAO,KAAK,MAAM,KAAK;WACjB;AACN,QAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,QAAI,IAAI,eAAe;AACvB;;QAEG;IAEL,MAAM,SAAS,IAAI,gBAAgB,KAAK;AACxC,WAAO,EAAE;AACT,SAAK,MAAM,CAAC,KAAK,UAAU,OAAO,SAAS,CACzC,KAAI,QAAQ,QACV,MAAK,OAAO;AAIhB,QAAI,YAAY,WACd,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,EAAE;KAC/C,MAAM,OAAQ,WAAW,WAAmC;AAC5D,SAAI,CAAC,KAAM;KACX,MAAM,WAAW,OAAO,MAAM;AAC9B,SAAI,KAAK,SAAS,YAAY,KAAK,SAAS,WAAW;MACrD,MAAM,MAAM,OAAO,SAAS;AAC5B,UAAI,CAAC,OAAO,MAAM,IAAI,IAAI,aAAa,GAAI,MAAK,OAAO;gBAC9C,KAAK,SAAS,WACvB;UAAI,aAAa,UAAU,aAAa,IAAK,MAAK,OAAO;eAChD,aAAa,WAAW,aAAa,OAAO,aAAa,GAChE,MAAK,OAAO;;AAGhB,SAAI,aAAa,MAAM,KAAK,SAAS,SACnC,QAAO,KAAK;;;AAMpB,OAAI,UAAU,KAAK,EAAE,gBAAgB,4BAA4B,CAAC;AAClE,OAAI,IACF,yFACD;AAED,OAAI,aAAa;AACf,gBAAY,KAAK;AACjB,kBAAc;;IAEhB;;CAIJ,MAAM,OAAO,MAAM,YAAY,QAAQ,iBAAiB;CAGxD,MAAM,iBAAiB,iBAAiB;AACtC,eAAa;IACZ,QAAQ;CAEX,SAAS,cAAoB;AAC3B,MAAI,OAAQ;AACZ,WAAS;AACT,eAAa,eAAe;AAC5B,SAAO,OAAO;AAGd,MAAI,iBAAiB;AACnB,mBAAgB,KAAK;AACrB,qBAAkB;;AAEpB,MAAI,aAAa;AACf,eAAY,KAAK;AACjB,iBAAc;;;CAIlB,MAAM,UAAU,oBAAoB;AAEpC,QAAO;EACL;EACA,aAAa,GAAG,QAAQ,kBAAkB;EAC1C;EACA;EAEA,gBAAgB,MAAqE;AACnF,OAAI,OAAQ,QAAO,QAAQ,QAAQ,KAAK;AAExC,UAAO,IAAI,SAAS,YAAY;AAC9B,sBAAkB;AAElB,QAAI,MAAM,QACR,kBAAiB;AACf,SAAI,oBAAoB,SAAS;AAC/B,wBAAkB;AAClB,cAAQ,KAAK;;OAEd,KAAK,QAAQ;KAElB;;EAGJ,YACE,QACA,MACyC;AACzC,OAAI,OAAQ,QAAO,QAAQ,QAAQ,KAAK;AAExC,gBAAa;AACb,OAAI,MAAM,MAAO,aAAY,KAAK;AAElC,UAAO,IAAI,SAAS,YAAY;AAC9B,kBAAc;AAEd,QAAI,MAAM,QACR,kBAAiB;AACf,SAAI,gBAAgB,SAAS;AAC3B,oBAAc;AACd,cAAQ,KAAK;;OAEd,KAAK,QAAQ;KAElB;;EAGJ,OAAO;EACR;;AAGH,eAAe,YAAY,QAAgB,YAAqC;AAC9E,MAAK,IAAI,UAAU,GAAG,WAAW,YAAY,UAC3C,KAAI;AACF,SAAO,MAAM,IAAI,SAAiB,SAAS,WAAW;AACpD,UAAO,OAAO,GAAG,mBAAmB;IAClC,MAAM,OAAO,OAAO,SAAS;AAC7B,QAAI,QAAQ,OAAO,SAAS,SAC1B,SAAQ,KAAK,KAAK;QAElB,wBAAO,IAAI,MAAM,+BAA+B,CAAC;KAEnD;AACF,UAAO,GAAG,SAAS,OAAO;IAC1B;UACK,KAAU;AACjB,MAAI,YAAY,WACd,OAAM,IAAI,MACR,qCAAqC,aAAa,EAAE,aAAa,IAAI,UACtE;AAGH,SAAO,OAAO;;AAGlB,OAAM,IAAI,MAAM,8BAA8B;;AAGhD,SAAS,eAAe,QAA6B,OAAe,OAAuB;CACzF,MAAM,aAAa,OAAO,cAAc,EAAE;CAC1C,MAAM,WAAW,IAAI,IAAI,OAAO,YAAY,EAAE,CAAC;CAE/C,IAAI,SAAS;AACb,MAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,WAAW,EAAqB;EACvE,MAAM,QAAQ,KAAK,eAAe;EAClC,MAAM,cAAc,KAAK,cAAc;EACvC,MAAM,aAAa,SAAS,IAAI,IAAI;EACpC,MAAM,YAAY,cAAc,aAAa;EAC7C,MAAM,eAAe,KAAK,WAAW,OAAO,OAAO,KAAK,QAAQ,GAAG;AAEnE,YAAU;;sBAEQ,WAAW,IAAI,CAAC;YAC1B,WAAW,MAAM,GAAG,aAAa,OAAO,GAAG;;;kBAGrC,UAAU;gBACZ,WAAW,IAAI,CAAC;kBACd,WAAW,IAAI,CAAC;mBACf,WAAW,aAAa,CAAC;YAChC,aAAa,aAAa,GAAG;;;;;;AAOvC,QAAO;;;;WAIE,WAAW,MAAM,CAAC;;;;;;;;;QASrB,WAAW,MAAM,CAAC;4CACkB,WAAW,MAAM,CAAC;MACxD,OAAO;;;;;;AAOb,SAAS,WAAW,KAAqB;AACvC,QAAO,IACJ,QAAQ,MAAM,QAAQ,CACtB,QAAQ,MAAM,OAAO,CACrB,QAAQ,MAAM,OAAO,CACrB,QAAQ,MAAM,SAAS,CACvB,QAAQ,MAAM,QAAQ"}
+{"version":3,"file":"auth-server.mjs","names":[],"sources":["../../src/credential/auth-server.ts"],"sourcesContent":["/**\n * Temporary HTTP Server for credential collection.\n *\n * Supports two modes:\n * 1. Form collection: GET /auth renders a form from JSON Schema, POST /auth returns submitted data\n * 2. OAuth callback: GET /callback captures query params for waitForCallback()\n *\n * Security:\n * - Binds to 127.0.0.1 only (no external connections)\n * - One-time nonce per request to prevent CSRF\n * - Auto-closes after 5 minutes\n * - POST data is never logged\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createServer, type IncomingMessage, type Server, type ServerResponse } from \"node:http\";\n\nconst DEFAULT_TIMEOUT = 5 * 60 * 1000; // 5 minutes\nconst MAX_PORT_RETRIES = 3;\n\nexport interface AuthServer {\n  /** Base URL of the server, e.g. http://127.0.0.1:12345 */\n  baseURL: string;\n\n  /** Callback URL for OAuth redirects: baseURL + /callback */\n  callbackURL: string;\n\n  /** Wait for a callback request at /callback. Returns query params or null on timeout/close. */\n  waitForCallback(options?: { timeout?: number }): Promise<Record<string, string> | null>;\n\n  /**\n   * Serve a form for collecting fields, wait for submission.\n   * Returns submitted values or null on timeout/close.\n   *\n   * @param schema - JSON Schema describing fields to collect\n   * @param options - Optional title and timeout\n   */\n  waitForForm(\n    schema: Record<string, any>,\n    options?: { title?: string; timeout?: number },\n  ): Promise<Record<string, unknown> | null>;\n\n  /** Close the server. Idempotent. */\n  close(): void;\n\n  /** The one-time nonce for this server session */\n  readonly nonce: string;\n\n  /** The port the server is listening on */\n  readonly port: number;\n}\n\nexport interface CreateAuthServerOptions {\n  /** Timeout in ms before auto-close. Default: 5 minutes. */\n  timeout?: number;\n}\n\n/**\n * Create a temporary auth server bound to 127.0.0.1 with a random port.\n */\nexport async function createAuthServer(options?: CreateAuthServerOptions): Promise<AuthServer> {\n  const timeout = options?.timeout ?? DEFAULT_TIMEOUT;\n  const nonce = randomBytes(16).toString(\"hex\");\n\n  let closed = false;\n  let callbackResolve: ((value: Record<string, string> | null) => void) | null = null;\n  let formResolve: ((value: Record<string, unknown> | null) => void) | null = null;\n  let formSchema: Record<string, any> | null = null;\n  let formTitle = \"AFS Credential Collection\";\n\n  const server = createServer((req, res) => {\n    const url = new URL(req.url || \"/\", `http://127.0.0.1`);\n    const pathname = url.pathname;\n\n    // CORS headers for local browser forms\n    res.setHeader(\"Access-Control-Allow-Origin\", \"*\");\n    res.setHeader(\"Access-Control-Allow-Methods\", \"GET, POST, OPTIONS\");\n    res.setHeader(\"Access-Control-Allow-Headers\", \"Content-Type\");\n\n    if (req.method === \"OPTIONS\") {\n      res.writeHead(204);\n      res.end();\n      return;\n    }\n\n    if (pathname === \"/callback\") {\n      handleCallback(url, req, res, nonce);\n    } else if (pathname === \"/auth\" && req.method === \"GET\") {\n      handleFormGet(url, res, nonce);\n    } else if (pathname === \"/auth\" && req.method === \"POST\") {\n      handleFormPost(req, res, nonce, url);\n    } else {\n      res.writeHead(404, { \"Content-Type\": \"text/plain\" });\n      res.end(\"Not Found\");\n    }\n  });\n\n  function handleCallback(\n    url: URL,\n    _req: IncomingMessage,\n    res: ServerResponse,\n    expectedNonce: string,\n  ): void {\n    const reqNonce = url.searchParams.get(\"nonce\");\n    if (reqNonce !== expectedNonce) {\n      res.writeHead(403, { \"Content-Type\": \"text/plain\" });\n      res.end(\"Forbidden: invalid nonce\");\n      return;\n    }\n\n    const params: Record<string, string> = {};\n    for (const [key, value] of url.searchParams.entries()) {\n      if (key !== \"nonce\") {\n        params[key] = value;\n      }\n    }\n\n    res.writeHead(200, { \"Content-Type\": \"text/html\" });\n    res.end(\n      \"<html><body><h2>Authorization complete.</h2><p>You can close this tab.</p></body></html>\",\n    );\n\n    if (callbackResolve) {\n      callbackResolve(params);\n      callbackResolve = null;\n    }\n  }\n\n  function handleFormGet(url: URL, res: ServerResponse, expectedNonce: string): void {\n    const reqNonce = url.searchParams.get(\"nonce\");\n    if (reqNonce !== expectedNonce) {\n      res.writeHead(403, { \"Content-Type\": \"text/plain\" });\n      res.end(\"Forbidden: invalid nonce\");\n      return;\n    }\n\n    if (!formSchema) {\n      res.writeHead(400, { \"Content-Type\": \"text/plain\" });\n      res.end(\"No form schema available\");\n      return;\n    }\n\n    const html = renderFormHTML(formSchema, formTitle, expectedNonce);\n    res.writeHead(200, { \"Content-Type\": \"text/html; charset=utf-8\" });\n    res.end(html);\n  }\n\n  function handleFormPost(\n    req: IncomingMessage,\n    res: ServerResponse,\n    expectedNonce: string,\n    url: URL,\n  ): void {\n    const reqNonce = url.searchParams.get(\"nonce\");\n    if (reqNonce !== expectedNonce) {\n      res.writeHead(403, { \"Content-Type\": \"text/plain\" });\n      res.end(\"Forbidden: invalid nonce\");\n      return;\n    }\n\n    let body = \"\";\n    req.on(\"data\", (chunk: Buffer) => {\n      body += chunk.toString();\n    });\n    req.on(\"end\", () => {\n      let data: Record<string, unknown>;\n      const contentType = req.headers[\"content-type\"] || \"\";\n\n      if (contentType.includes(\"application/json\")) {\n        try {\n          data = JSON.parse(body);\n        } catch {\n          res.writeHead(400, { \"Content-Type\": \"text/plain\" });\n          res.end(\"Invalid JSON\");\n          return;\n        }\n      } else {\n        // URL-encoded form data\n        const params = new URLSearchParams(body);\n        data = {};\n        for (const [key, value] of params.entries()) {\n          if (key !== \"nonce\") {\n            data[key] = value;\n          }\n        }\n        // Coerce string values to match schema types (HTML forms always submit strings)\n        if (formSchema?.properties) {\n          for (const [key, value] of Object.entries(data)) {\n            const prop = (formSchema.properties as Record<string, any>)[key];\n            if (!prop) continue;\n            const strValue = String(value);\n            if (prop.type === \"number\" || prop.type === \"integer\") {\n              const num = Number(strValue);\n              if (!Number.isNaN(num) && strValue !== \"\") data[key] = num;\n            } else if (prop.type === \"boolean\") {\n              if (strValue === \"true\" || strValue === \"1\") data[key] = true;\n              else if (strValue === \"false\" || strValue === \"0\" || strValue === \"\")\n                data[key] = false;\n            }\n            // Remove empty strings for non-string optional fields (let defaults apply)\n            if (strValue === \"\" && prop.type !== \"string\") {\n              delete data[key];\n            }\n          }\n        }\n      }\n\n      res.writeHead(200, { \"Content-Type\": \"text/html; charset=utf-8\" });\n      res.end(\n        \"<html><body><h2>Credentials received.</h2><p>You can close this tab.</p></body></html>\",\n      );\n\n      if (formResolve) {\n        formResolve(data);\n        formResolve = null;\n      }\n    });\n  }\n\n  // Start server with port retry\n  const port = await startServer(server, MAX_PORT_RETRIES);\n\n  // Auto-close timeout\n  const autoCloseTimer = setTimeout(() => {\n    closeServer();\n  }, timeout);\n\n  function closeServer(): void {\n    if (closed) return;\n    closed = true;\n    clearTimeout(autoCloseTimer);\n    server.close();\n\n    // Resolve any pending waiters with null\n    if (callbackResolve) {\n      callbackResolve(null);\n      callbackResolve = null;\n    }\n    if (formResolve) {\n      formResolve(null);\n      formResolve = null;\n    }\n  }\n\n  const baseURL = `http://127.0.0.1:${port}`;\n\n  return {\n    baseURL,\n    callbackURL: `${baseURL}/callback?nonce=${nonce}`,\n    nonce,\n    port,\n\n    waitForCallback(opts?: { timeout?: number }): Promise<Record<string, string> | null> {\n      if (closed) return Promise.resolve(null);\n\n      return new Promise((resolve) => {\n        callbackResolve = resolve;\n\n        if (opts?.timeout) {\n          setTimeout(() => {\n            if (callbackResolve === resolve) {\n              callbackResolve = null;\n              resolve(null);\n            }\n          }, opts.timeout);\n        }\n      });\n    },\n\n    waitForForm(\n      schema: Record<string, any>,\n      opts?: { title?: string; timeout?: number },\n    ): Promise<Record<string, unknown> | null> {\n      if (closed) return Promise.resolve(null);\n\n      formSchema = schema;\n      if (opts?.title) formTitle = opts.title;\n\n      return new Promise((resolve) => {\n        formResolve = resolve;\n\n        if (opts?.timeout) {\n          setTimeout(() => {\n            if (formResolve === resolve) {\n              formResolve = null;\n              resolve(null);\n            }\n          }, opts.timeout);\n        }\n      });\n    },\n\n    close: closeServer,\n  };\n}\n\nasync function startServer(server: Server, maxRetries: number): Promise<number> {\n  for (let attempt = 0; attempt <= maxRetries; attempt++) {\n    try {\n      return await new Promise<number>((resolve, reject) => {\n        server.listen(0, \"127.0.0.1\", () => {\n          const addr = server.address();\n          if (addr && typeof addr === \"object\") {\n            resolve(addr.port);\n          } else {\n            reject(new Error(\"Failed to get server address\"));\n          }\n        });\n        server.on(\"error\", reject);\n      });\n    } catch (err: any) {\n      if (attempt === maxRetries) {\n        throw new Error(\n          `Failed to start auth server after ${maxRetries + 1} attempts: ${err.message}`,\n        );\n      }\n      // Close and retry\n      server.close();\n    }\n  }\n  throw new Error(\"Failed to start auth server\");\n}\n\nfunction renderFormHTML(schema: Record<string, any>, title: string, nonce: string): string {\n  const properties = schema.properties || {};\n  const required = new Set(schema.required || []);\n\n  let fields = \"\";\n  for (const [key, prop] of Object.entries(properties) as [string, any][]) {\n    const label = prop.description || key;\n    const isSensitive = prop.sensitive === true;\n    const isRequired = required.has(key);\n    const defaultValue = prop.default != null ? prop.default : \"\";\n\n    if (prop.type === \"boolean\") {\n      const checked = defaultValue === true || defaultValue === \"true\";\n      fields += `\n      <div style=\"margin-bottom: 12px;\">\n        <label style=\"display: flex; align-items: center; gap: 8px; font-weight: 600; cursor: pointer;\">\n          <input type=\"hidden\" name=\"${escapeHTML(key)}\" value=\"false\" />\n          <input\n            type=\"checkbox\"\n            name=\"${escapeHTML(key)}\"\n            value=\"true\"\n            ${checked ? \"checked\" : \"\"}\n            style=\"width: 18px; height: 18px;\"\n          />\n          ${escapeHTML(label)}\n        </label>\n      </div>`;\n    } else {\n      const inputType = isSensitive ? \"password\" : \"text\";\n      fields += `\n      <div style=\"margin-bottom: 12px;\">\n        <label for=\"${escapeHTML(key)}\" style=\"display: block; font-weight: 600; margin-bottom: 4px;\">\n          ${escapeHTML(label)}${isRequired ? \" *\" : \"\"}\n        </label>\n        <input\n          type=\"${inputType}\"\n          id=\"${escapeHTML(key)}\"\n          name=\"${escapeHTML(key)}\"\n          value=\"${escapeHTML(String(defaultValue))}\"\n          ${isRequired ? \"required\" : \"\"}\n          style=\"width: 100%; padding: 8px; border: 1px solid #ccc; border-radius: 4px; font-size: 14px;\"\n          autocomplete=\"off\"\n        />\n      </div>`;\n    }\n  }\n\n  return `<!DOCTYPE html>\n<html>\n<head>\n  <meta charset=\"utf-8\">\n  <title>${escapeHTML(title)}</title>\n  <style>\n    body { font-family: -apple-system, BlinkMacSystemFont, sans-serif; max-width: 480px; margin: 40px auto; padding: 0 20px; }\n    h2 { color: #333; }\n    button { background: #2563eb; color: white; border: none; padding: 10px 24px; border-radius: 4px; font-size: 14px; cursor: pointer; }\n    button:hover { background: #1d4ed8; }\n  </style>\n</head>\n<body>\n  <h2>${escapeHTML(title)}</h2>\n  <form method=\"POST\" action=\"/auth?nonce=${escapeHTML(nonce)}\">\n    ${fields}\n    <button type=\"submit\">Submit</button>\n  </form>\n</body>\n</html>`;\n}\n\nfunction escapeHTML(str: string): string {\n  return str\n    .replace(/&/g, \"&amp;\")\n    .replace(/</g, \"&lt;\")\n    .replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\")\n    .replace(/'/g, \"&#39;\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAiBA,MAAM,kBAAkB,MAAS;AACjC,MAAM,mBAAmB;;;;AA0CzB,eAAsB,iBAAiB,SAAwD;CAC7F,MAAM,UAAU,SAAS,WAAW;CACpC,MAAM,QAAQ,YAAY,GAAG,CAAC,SAAS,MAAM;CAE7C,IAAI,SAAS;CACb,IAAI,kBAA2E;CAC/E,IAAI,cAAwE;CAC5E,IAAI,aAAyC;CAC7C,IAAI,YAAY;CAEhB,MAAM,SAAS,cAAc,KAAK,QAAQ;EACxC,MAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,mBAAmB;EACvD,MAAM,WAAW,IAAI;AAGrB,MAAI,UAAU,+BAA+B,IAAI;AACjD,MAAI,UAAU,gCAAgC,qBAAqB;AACnE,MAAI,UAAU,gCAAgC,eAAe;AAE7D,MAAI,IAAI,WAAW,WAAW;AAC5B,OAAI,UAAU,IAAI;AAClB,OAAI,KAAK;AACT;;AAGF,MAAI,aAAa,YACf,gBAAe,KAAK,KAAK,KAAK,MAAM;WAC3B,aAAa,WAAW,IAAI,WAAW,MAChD,eAAc,KAAK,KAAK,MAAM;WACrB,aAAa,WAAW,IAAI,WAAW,OAChD,gBAAe,KAAK,KAAK,OAAO,IAAI;OAC/B;AACL,OAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,OAAI,IAAI,YAAY;;GAEtB;CAEF,SAAS,eACP,KACA,MACA,KACA,eACM;AAEN,MADiB,IAAI,aAAa,IAAI,QAAQ,KAC7B,eAAe;AAC9B,OAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,OAAI,IAAI,2BAA2B;AACnC;;EAGF,MAAM,SAAiC,EAAE;AACzC,OAAK,MAAM,CAAC,KAAK,UAAU,IAAI,aAAa,SAAS,CACnD,KAAI,QAAQ,QACV,QAAO,OAAO;AAIlB,MAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;AACnD,MAAI,IACF,2FACD;AAED,MAAI,iBAAiB;AACnB,mBAAgB,OAAO;AACvB,qBAAkB;;;CAItB,SAAS,cAAc,KAAU,KAAqB,eAA6B;AAEjF,MADiB,IAAI,aAAa,IAAI,QAAQ,KAC7B,eAAe;AAC9B,OAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,OAAI,IAAI,2BAA2B;AACnC;;AAGF,MAAI,CAAC,YAAY;AACf,OAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,OAAI,IAAI,2BAA2B;AACnC;;EAGF,MAAM,OAAO,eAAe,YAAY,WAAW,cAAc;AACjE,MAAI,UAAU,KAAK,EAAE,gBAAgB,4BAA4B,CAAC;AAClE,MAAI,IAAI,KAAK;;CAGf,SAAS,eACP,KACA,KACA,eACA,KACM;AAEN,MADiB,IAAI,aAAa,IAAI,QAAQ,KAC7B,eAAe;AAC9B,OAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,OAAI,IAAI,2BAA2B;AACnC;;EAGF,IAAI,OAAO;AACX,MAAI,GAAG,SAAS,UAAkB;AAChC,WAAQ,MAAM,UAAU;IACxB;AACF,MAAI,GAAG,aAAa;GAClB,IAAI;AAGJ,QAFoB,IAAI,QAAQ,mBAAmB,IAEnC,SAAS,mBAAmB,CAC1C,KAAI;AACF,WAAO,KAAK,MAAM,KAAK;WACjB;AACN,QAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,QAAI,IAAI,eAAe;AACvB;;QAEG;IAEL,MAAM,SAAS,IAAI,gBAAgB,KAAK;AACxC,WAAO,EAAE;AACT,SAAK,MAAM,CAAC,KAAK,UAAU,OAAO,SAAS,CACzC,KAAI,QAAQ,QACV,MAAK,OAAO;AAIhB,QAAI,YAAY,WACd,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,EAAE;KAC/C,MAAM,OAAQ,WAAW,WAAmC;AAC5D,SAAI,CAAC,KAAM;KACX,MAAM,WAAW,OAAO,MAAM;AAC9B,SAAI,KAAK,SAAS,YAAY,KAAK,SAAS,WAAW;MACrD,MAAM,MAAM,OAAO,SAAS;AAC5B,UAAI,CAAC,OAAO,MAAM,IAAI,IAAI,aAAa,GAAI,MAAK,OAAO;gBAC9C,KAAK,SAAS,WACvB;UAAI,aAAa,UAAU,aAAa,IAAK,MAAK,OAAO;eAChD,aAAa,WAAW,aAAa,OAAO,aAAa,GAChE,MAAK,OAAO;;AAGhB,SAAI,aAAa,MAAM,KAAK,SAAS,SACnC,QAAO,KAAK;;;AAMpB,OAAI,UAAU,KAAK,EAAE,gBAAgB,4BAA4B,CAAC;AAClE,OAAI,IACF,yFACD;AAED,OAAI,aAAa;AACf,gBAAY,KAAK;AACjB,kBAAc;;IAEhB;;CAIJ,MAAM,OAAO,MAAM,YAAY,QAAQ,iBAAiB;CAGxD,MAAM,iBAAiB,iBAAiB;AACtC,eAAa;IACZ,QAAQ;CAEX,SAAS,cAAoB;AAC3B,MAAI,OAAQ;AACZ,WAAS;AACT,eAAa,eAAe;AAC5B,SAAO,OAAO;AAGd,MAAI,iBAAiB;AACnB,mBAAgB,KAAK;AACrB,qBAAkB;;AAEpB,MAAI,aAAa;AACf,eAAY,KAAK;AACjB,iBAAc;;;CAIlB,MAAM,UAAU,oBAAoB;AAEpC,QAAO;EACL;EACA,aAAa,GAAG,QAAQ,kBAAkB;EAC1C;EACA;EAEA,gBAAgB,MAAqE;AACnF,OAAI,OAAQ,QAAO,QAAQ,QAAQ,KAAK;AAExC,UAAO,IAAI,SAAS,YAAY;AAC9B,sBAAkB;AAElB,QAAI,MAAM,QACR,kBAAiB;AACf,SAAI,oBAAoB,SAAS;AAC/B,wBAAkB;AAClB,cAAQ,KAAK;;OAEd,KAAK,QAAQ;KAElB;;EAGJ,YACE,QACA,MACyC;AACzC,OAAI,OAAQ,QAAO,QAAQ,QAAQ,KAAK;AAExC,gBAAa;AACb,OAAI,MAAM,MAAO,aAAY,KAAK;AAElC,UAAO,IAAI,SAAS,YAAY;AAC9B,kBAAc;AAEd,QAAI,MAAM,QACR,kBAAiB;AACf,SAAI,gBAAgB,SAAS;AAC3B,oBAAc;AACd,cAAQ,KAAK;;OAEd,KAAK,QAAQ;KAElB;;EAGJ,OAAO;EACR;;AAGH,eAAe,YAAY,QAAgB,YAAqC;AAC9E,MAAK,IAAI,UAAU,GAAG,WAAW,YAAY,UAC3C,KAAI;AACF,SAAO,MAAM,IAAI,SAAiB,SAAS,WAAW;AACpD,UAAO,OAAO,GAAG,mBAAmB;IAClC,MAAM,OAAO,OAAO,SAAS;AAC7B,QAAI,QAAQ,OAAO,SAAS,SAC1B,SAAQ,KAAK,KAAK;QAElB,wBAAO,IAAI,MAAM,+BAA+B,CAAC;KAEnD;AACF,UAAO,GAAG,SAAS,OAAO;IAC1B;UACK,KAAU;AACjB,MAAI,YAAY,WACd,OAAM,IAAI,MACR,qCAAqC,aAAa,EAAE,aAAa,IAAI,UACtE;AAGH,SAAO,OAAO;;AAGlB,OAAM,IAAI,MAAM,8BAA8B;;AAGhD,SAAS,eAAe,QAA6B,OAAe,OAAuB;CACzF,MAAM,aAAa,OAAO,cAAc,EAAE;CAC1C,MAAM,WAAW,IAAI,IAAI,OAAO,YAAY,EAAE,CAAC;CAE/C,IAAI,SAAS;AACb,MAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,WAAW,EAAqB;EACvE,MAAM,QAAQ,KAAK,eAAe;EAClC,MAAM,cAAc,KAAK,cAAc;EACvC,MAAM,aAAa,SAAS,IAAI,IAAI;EACpC,MAAM,eAAe,KAAK,WAAW,OAAO,KAAK,UAAU;AAE3D,MAAI,KAAK,SAAS,WAAW;GAC3B,MAAM,UAAU,iBAAiB,QAAQ,iBAAiB;AAC1D,aAAU;;;uCAGuB,WAAW,IAAI,CAAC;;;oBAGnC,WAAW,IAAI,CAAC;;cAEtB,UAAU,YAAY,GAAG;;;YAG3B,WAAW,MAAM,CAAC;;;SAGnB;GACL,MAAM,YAAY,cAAc,aAAa;AAC7C,aAAU;;sBAEM,WAAW,IAAI,CAAC;YAC1B,WAAW,MAAM,GAAG,aAAa,OAAO,GAAG;;;kBAGrC,UAAU;gBACZ,WAAW,IAAI,CAAC;kBACd,WAAW,IAAI,CAAC;mBACf,WAAW,OAAO,aAAa,CAAC,CAAC;YACxC,aAAa,aAAa,GAAG;;;;;;;AAQvC,QAAO;;;;WAIE,WAAW,MAAM,CAAC;;;;;;;;;QASrB,WAAW,MAAM,CAAC;4CACkB,WAAW,MAAM,CAAC;MACxD,OAAO;;;;;;AAOb,SAAS,WAAW,KAAqB;AACvC,QAAO,IACJ,QAAQ,MAAM,QAAQ,CACtB,QAAQ,MAAM,OAAO,CACrB,QAAQ,MAAM,OAAO,CACrB,QAAQ,MAAM,SAAS,CACvB,QAAQ,MAAM,QAAQ"}

package/dist/credential/index.d.mts

@@ -1,4 +1,5 @@
 import "./cli-auth-context.mjs";
 import "./mcp-auth-context.mjs";
 import { CredentialStore, CredentialStoreOptions, Credentials, createCredentialStore } from "./store.mjs";
-import "./resolver.mjs";
+import "./resolver.mjs";
+import "./vault-store.mjs";