@anby/cli 0.1.1 → 0.8.0

package/dist/commands/codegen.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `anby app codegen [--watch]` — PLAN-app-bootstrap-phase2 PR5.
+ *
+ * Reads `anby-app.manifest.json` and writes `.anby/types.d.ts` with
+ * TypeScript declaration merging that extends `@anby/platform-sdk`'s
+ * `AppProvidedEvents` and `AppRequiredEvents` interfaces. After this
+ * runs, calls to `publishEvent({ type: 'org.node.created', ... })` get
+ * compile-time autocomplete and typo-detection on the event name.
+ *
+ * For Vite users, prefer the `@anby/platform-sdk/vite` plugin which runs
+ * the same logic automatically as part of the dev server. This CLI
+ * exists for non-Vite runtimes (NestJS, plain Node, ESBuild, etc).
+ *
+ * `--watch` re-runs whenever the manifest file changes. Useful as a
+ * background process during dev: `anby app codegen --watch &`.
+ */
+interface CodegenOptions {
+    manifest: string;
+    out: string;
+    watch?: boolean;
+}
+export declare function codegenCommand(options: CodegenOptions): Promise<void>;
+export {};

package/dist/commands/codegen.js

@@ -0,0 +1,77 @@
+import { readFileSync, writeFileSync, mkdirSync, watch, existsSync } from 'node:fs';
+import { dirname, resolve, isAbsolute } from 'node:path';
+import kleur from 'kleur';
+function renderTypes(provides, requires) {
+    const sections = [];
+    sections.push('// Generated by @anby/cli — DO NOT EDIT.');
+    sections.push('// Re-runs whenever anby-app.manifest.json changes.');
+    sections.push('');
+    sections.push("declare module '@anby/platform-sdk' {");
+    if (provides.length > 0) {
+        sections.push('  interface AppProvidedEvents {');
+        for (const name of provides) {
+            sections.push(`    ${JSON.stringify(name)}: Record<string, unknown>;`);
+        }
+        sections.push('  }');
+    }
+    else {
+        sections.push('  interface AppProvidedEvents {}');
+    }
+    if (requires.length > 0) {
+        sections.push('  interface AppRequiredEvents {');
+        for (const name of requires) {
+            sections.push(`    ${JSON.stringify(name)}: Record<string, unknown>;`);
+        }
+        sections.push('  }');
+    }
+    else {
+        sections.push('  interface AppRequiredEvents {}');
+    }
+    sections.push('}');
+    sections.push('');
+    sections.push('export {};');
+    sections.push('');
+    return sections.join('\n');
+}
+function generate(manifestAbs, outAbs) {
+    if (!existsSync(manifestAbs)) {
+        console.error(kleur.red(`✖ Manifest not found at ${manifestAbs}`));
+        process.exit(1);
+    }
+    const raw = readFileSync(manifestAbs, 'utf-8');
+    const parsed = JSON.parse(raw);
+    const provides = Array.isArray(parsed.provides?.events) ? parsed.provides.events : [];
+    const requires = Array.isArray(parsed.requires?.events) ? parsed.requires.events : [];
+    const content = renderTypes(provides, requires);
+    mkdirSync(dirname(outAbs), { recursive: true });
+    writeFileSync(outAbs, content);
+    console.log(kleur.green(`✔ Wrote ${outAbs} (${provides.length} provided, ${requires.length} required)`));
+}
+export async function codegenCommand(options) {
+    const manifestAbs = isAbsolute(options.manifest)
+        ? options.manifest
+        : resolve(process.cwd(), options.manifest);
+    const outAbs = isAbsolute(options.out)
+        ? options.out
+        : resolve(process.cwd(), options.out);
+    generate(manifestAbs, outAbs);
+    if (options.watch) {
+        console.log(kleur.dim(`Watching ${manifestAbs} for changes... (Ctrl+C to exit)`));
+        let debounce = null;
+        watch(manifestAbs, () => {
+            if (debounce)
+                clearTimeout(debounce);
+            debounce = setTimeout(() => {
+                try {
+                    generate(manifestAbs, outAbs);
+                }
+                catch (err) {
+                    console.error(kleur.red(`✖ Codegen failed: ${err.message}`));
+                }
+            }, 100);
+        });
+        // Keep process alive
+        await new Promise(() => { });
+    }
+}
+//# sourceMappingURL=codegen.js.map

package/dist/commands/codegen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codegen.js","sourceRoot":"","sources":["../../src/commands/codegen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,MAAM,OAAO,CAAC;AA8B1B,SAAS,WAAW,CAAC,QAAkB,EAAE,QAAkB;IACzD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC1D,QAAQ,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACrE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACzE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACzE,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACpD,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,WAAmB,EAAE,MAAc;IACnD,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,WAAW,EAAE,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAS,CAAC,MAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAS,CAAC,MAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChD,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,WAAW,MAAM,KAAK,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,MAAM,YAAY,CAC/E,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC9C,CAAC,CAAC,OAAO,CAAC,QAAQ;QAClB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;QACpC,CAAC,CAAC,OAAO,CAAC,GAAG;QACb,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAExC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAE9B,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,WAAW,kCAAkC,CAAC,CAAC,CAAC;QAClF,IAAI,QAAQ,GAA0B,IAAI,CAAC;QAC3C,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE;YACtB,IAAI,QAAQ;gBAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;YACrC,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;gBACzB,IAAI,CAAC;oBACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;gBAChC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAsB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;QACH,qBAAqB;QACrB,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/commands/index.d.ts

@@ -3,5 +3,9 @@ import type { Command } from 'commander';
  * All app-lifecycle commands live under `anby app <verb>` so we can add
  * other command namespaces later (`anby tenant`, `anby events`, etc.)
  * without reshuffling.
+ *
+ * `init` is also exposed as a top-level `anby init` alias because that's
+ * the command publishers reach for first and the namespace prefix would
+ * be a needless papercut on the very first interaction with the CLI.
  */
 export declare function registerAppCommands(program: Command): void;

package/dist/commands/index.js

@@ -3,19 +3,40 @@ import { validateCommand } from './validate.js';
 import { publishCommand } from './publish.js';
 import { installCommand } from './install.js';
 import { listCommand } from './list.js';
+import { codegenCommand } from './codegen.js';
+import { loginCommand } from './login.js';
+import { logoutCommand } from './logout.js';
 /**
  * All app-lifecycle commands live under `anby app <verb>` so we can add
  * other command namespaces later (`anby tenant`, `anby events`, etc.)
  * without reshuffling.
+ *
+ * `init` is also exposed as a top-level `anby init` alias because that's
+ * the command publishers reach for first and the namespace prefix would
+ * be a needless papercut on the very first interaction with the CLI.
  */
 export function registerAppCommands(program) {
+    // ── Top-level auth commands ──────────────────────────────────────────
+    program
+        .command('login')
+        .description('Authenticate with the Anby platform via Google OAuth')
+        .option('--auth-url <url>', '[dev] Override auth service URL')
+        .action(loginCommand);
+    program
+        .command('logout')
+        .description('Remove stored CLI credentials')
+        .action(logoutCommand);
     const app = program.command('app').description('Manage Anby apps');
+    // Top-level alias: `anby init` → same as `anby app init`.
+    program
+        .command('init')
+        .description('Scaffold and register an Anby app (interactive)')
+        .option('--registry-url <url>', '[dev] Override registry URL')
+        .action(initCommand);
     app
         .command('init')
-        .description('Scaffold a new anby-app.manifest.json in the current directory')
-        .option('--id <id>', 'Reverse-domain app id, e.g. com.bravebits.hello')
-        .option('--name <name>', 'Human-readable app name')
-        .option('--port <port>', 'Runtime port', '3099')
+        .description('Scaffold and register an Anby app (interactive)')
+        .option('--registry-url <url>', '[dev] Override registry URL')
         .action(initCommand);
     app
         .command('validate')
@@ -30,6 +51,8 @@ export function registerAppCommands(program) {
         .option('--public-url <url>', 'Public URL where this service is reachable')
         .option('--changelog <text>', 'Optional changelog note attached to this version')
         .option('--featured', 'Flag the app as featured in the setup wizard')
+        .option('--save-to <path>', 'Write the assembled ANBY_APP_TOKEN to this file (e.g. .env.local)')
+        .option('--platform-url <url>', 'Override the platform base URL embedded in the token (defaults to registry URL with /registry stripped)')
         .action(publishCommand);
     app
         .command('install')
@@ -44,5 +67,12 @@ export function registerAppCommands(program) {
         .option('--tenant <tenantId>', 'Show installed apps for this tenant')
         .option('--registry <url>', 'Registry base URL', process.env.REGISTRY_URL || 'http://localhost:3003')
         .action(listCommand);
+    app
+        .command('codegen')
+        .description('Generate TypeScript types from anby-app.manifest.json (event names, etc)')
+        .option('--manifest <path>', 'Path to manifest file', './anby-app.manifest.json')
+        .option('--out <path>', 'Output path for generated types', './.anby/types.d.ts')
+        .option('--watch', 'Watch the manifest and regenerate on change')
+        .action(codegenCommand);
 }
 //# sourceMappingURL=index.js.map

package/dist/commands/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAEnE,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,gEAAgE,CAAC;SAC7E,MAAM,CAAC,WAAW,EAAE,iDAAiD,CAAC;SACtE,MAAM,CAAC,eAAe,EAAE,yBAAyB,CAAC;SAClD,MAAM,CAAC,eAAe,EAAE,cAAc,EAAE,MAAM,CAAC;SAC/C,MAAM,CAAC,WAAW,CAAC,CAAC;IAEvB,GAAG;SACA,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,0BAA0B,CAAC;SAChF,MAAM,CAAC,eAAe,CAAC,CAAC;IAE3B,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,0BAA0B,CAAC;SAChF,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;SACpG,MAAM,CAAC,oBAAoB,EAAE,4CAA4C,CAAC;SAC1E,MAAM,CAAC,oBAAoB,EAAE,kDAAkD,CAAC;SAChF,MAAM,CAAC,YAAY,EAAE,8CAA8C,CAAC;SACpE,MAAM,CAAC,cAAc,CAAC,CAAC;IAE1B,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,6BAA6B,CAAC;SAC1C,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,eAAe,EAAE,mBAAmB,CAAC;SACpD,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;SACpG,MAAM,CAAC,cAAc,CAAC,CAAC;IAE1B,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,6DAA6D,CAAC;SAC1E,MAAM,CAAC,qBAAqB,EAAE,qCAAqC,CAAC;SACpE,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;SACpG,MAAM,CAAC,WAAW,CAAC,CAAC;AACzB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,wEAAwE;IACxE,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CAAC,kBAAkB,EAAE,iCAAiC,CAAC;SAC7D,MAAM,CAAC,YAAY,CAAC,CAAC;IAExB,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,aAAa,CAAC,CAAC;IAEzB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;IAEnE,0DAA0D;IAC1D,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,iDAAiD,CAAC;SAC9D,MAAM,CAAC,sBAAsB,EAAE,6BAA6B,CAAC;SAC7D,MAAM,CAAC,WAAW,CAAC,CAAC;IAEvB,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,iDAAiD,CAAC;SAC9D,MAAM,CAAC,sBAAsB,EAAE,6BAA6B,CAAC;SAC7D,MAAM,CAAC,WAAW,CAAC,CAAC;IAEvB,GAAG;SACA,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,0BAA0B,CAAC;SAChF,MAAM,CAAC,eAAe,CAAC,CAAC;IAE3B,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,sDAAsD,CAAC;SACnE,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,0BAA0B,CAAC;SAChF,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;SACpG,MAAM,CAAC,oBAAoB,EAAE,4CAA4C,CAAC;SAC1E,MAAM,CAAC,oBAAoB,EAAE,kDAAkD,CAAC;SAChF,MAAM,CAAC,YAAY,EAAE,8CAA8C,CAAC;SACpE,MAAM,CAAC,kBAAkB,EAAE,mEAAmE,CAAC;SAC/F,MAAM,CAAC,sBAAsB,EAAE,yGAAyG,CAAC;SACzI,MAAM,CAAC,cAAc,CAAC,CAAC;IAE1B,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,6BAA6B,CAAC;SAC1C,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC;SAClD,cAAc,CAAC,eAAe,EAAE,mBAAmB,CAAC;SACpD,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;SACpG,MAAM,CAAC,cAAc,CAAC,CAAC;IAE1B,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,6DAA6D,CAAC;SAC1E,MAAM,CAAC,qBAAqB,EAAE,qCAAqC,CAAC;SACpE,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,CAAC;SACpG,MAAM,CAAC,WAAW,CAAC,CAAC;IAEvB,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,0EAA0E,CAAC;SACvF,MAAM,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,0BAA0B,CAAC;SAChF,MAAM,CAAC,cAAc,EAAE,iCAAiC,EAAE,oBAAoB,CAAC;SAC/E,MAAM,CAAC,SAAS,EAAE,6CAA6C,CAAC;SAChE,MAAM,CAAC,cAAc,CAAC,CAAC;AAC5B,CAAC"}

package/dist/commands/init.d.ts

@@ -1,12 +1,13 @@
 interface InitOptions {
-    id?: string;
-    name?: string;
-    port?: string;
+    /** Hidden override for platform devs */
+    registryUrl?: string;
 }
 /**
- * Writes an `anby-app.manifest.json` skeleton that passes the AJV
- * schema out of the box. Refuses to overwrite an existing file so a
- * developer can't accidentally clobber their real manifest.
+ * `anby init` — interactive scaffold + register.
+ *
+ * Prompts for app name and port, auto-generates a reverse-domain ID
+ * from the logged-in user's email domain, scaffolds all platform
+ * integration code, and registers with the registry.
  */
 export declare function initCommand(options: InitOptions): Promise<void>;
 export {};

package/dist/commands/init.js

@@ -1,41 +1,117 @@
-import { writeFile, access } from 'node:fs/promises';
+import { writeFile, readFile, access, mkdir } from 'node:fs/promises';
 import { resolve } from 'node:path';
+import { createInterface } from 'node:readline/promises';
 import kleur from 'kleur';
+import { getStoredAuth, getEmailDomain } from '../lib/auth-store.js';
+import { assembleToken } from '../lib/token.js';
+const DEFAULT_REGISTRY_URL = 'https://registry.anby.ai';
 /**
- * Writes an `anby-app.manifest.json` skeleton that passes the AJV
- * schema out of the box. Refuses to overwrite an existing file so a
- * developer can't accidentally clobber their real manifest.
+ * `anby init` — interactive scaffold + register.
+ *
+ * Prompts for app name and port, auto-generates a reverse-domain ID
+ * from the logged-in user's email domain, scaffolds all platform
+ * integration code, and registers with the registry.
  */
 export async function initCommand(options) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        // ── Collect inputs interactively ────────────────────────────────
+        const name = (await rl.question(kleur.bold('App name: '))).trim();
+        if (!name) {
+            console.log(kleur.red('✖ App name is required'));
+            return;
+        }
+        const portInput = (await rl.question(kleur.bold(`Port (default 3099): `))).trim();
+        const port = portInput ? Number.parseInt(portInput, 10) : 3099;
+        if (Number.isNaN(port)) {
+            console.log(kleur.red('✖ Invalid port'));
+            return;
+        }
+        // ── Auto-generate app ID ────────────────────────────────────────
+        const auth = await getStoredAuth();
+        const emailDomain = auth ? getEmailDomain(auth.email) : 'example.com';
+        // "bravebits.vn" → "vn.bravebits"
+        const reverseDomain = emailDomain.split('.').reverse().join('.');
+        // "Organization Chart" → "organization-chart"
+        const slug = name
+            .toLowerCase()
+            .replace(/[^a-z0-9]+/g, '-')
+            .replace(/^-|-$/g, '');
+        let id = `${reverseDomain}.${slug}`;
+        // Check if ID already exists in registry, append suffix if so
+        const registryBase = (options.registryUrl ||
+            process.env.ANBY_REGISTRY_URL ||
+            DEFAULT_REGISTRY_URL).replace(/\/+$/, '');
+        const existingId = await checkAppExists(registryBase, id);
+        if (existingId) {
+            // Append a short random suffix
+            const suffix = Math.random().toString(36).slice(2, 6);
+            id = `${reverseDomain}.${slug}-${suffix}`;
+            console.log(kleur.dim(`  App ID "${reverseDomain}.${slug}" already taken → using ${id}`));
+        }
+        console.log(kleur.dim(`  App ID: ${id}`));
+        console.log('');
+        // ── Scaffold ────────────────────────────────────────────────────
+        await writeManifest({ id, name, port });
+        await patchViteConfig();
+        await patchGitignore();
+        await scaffoldAuthServer();
+        await patchEntryServer(port);
+        await registerAndWriteToken({ id, name, port, registryBase, auth });
+        console.log('');
+        console.log(kleur.green('✔ Anby app bootstrap complete'));
+        console.log('');
+        console.log(kleur.bold('Next steps:'));
+        console.log(kleur.dim(`  1. Edit ${kleur.cyan('anby-app.manifest.json')} to declare provides/requires`));
+        console.log(kleur.dim(`     (entities your app shares with or consumes from other apps)`));
+        console.log(kleur.dim(`  2. ${kleur.cyan('npm run dev')} — app auto-publishes manifest to registry on boot`));
+        console.log(kleur.dim(`  3. Install via Marketplace UI at ${kleur.cyan(`http://localhost:${port}`)}`));
+    }
+    finally {
+        rl.close();
+    }
+}
+// ── Helpers ─────────────────────────────────────────────────────────────
+async function checkAppExists(registryBase, appId) {
+    try {
+        const res = await fetch(`${registryBase}/registry/apps/${appId}/manifest`, {
+            signal: AbortSignal.timeout(3000),
+        });
+        return res.ok;
+    }
+    catch {
+        // Registry unreachable — assume not taken
+        return false;
+    }
+}
+// ── Step 1: Manifest ──────────────────────────────────────────────────
+async function writeManifest(opts) {
     const target = resolve('anby-app.manifest.json');
     try {
         await access(target);
-        console.error(kleur.red(`✖ ${target} already exists — refusing to overwrite`));
-        process.exit(1);
+        console.log(kleur.dim(`• ${target} already exists — leaving it alone`));
+        return;
     }
     catch {
         // ok — file doesn't exist
     }
-    const id = options.id ?? 'com.example.my-app';
-    const name = options.name ?? 'My App';
-    const port = Number.parseInt(options.port ?? '3099', 10);
     const manifest = {
         $schema: 'https://anby.dev/schemas/app-manifest.v1.json',
-        id,
+        id: opts.id,
         version: '1.0.0',
-        name,
-        description: `${name} — submitted via @anby/cli`,
+        name: opts.name,
+        description: `${opts.name} — submitted via @anby/cli`,
         icon: '📦',
         color: '#E63426',
         runtime: {
             type: 'remix',
-            port,
+            port: opts.port,
             healthCheck: '/api/health',
             readyCheck: '/api/health',
         },
         frontend: {
             type: 'iframe',
-            routes: [{ path: '/', label: name, icon: '📦' }],
+            routes: [{ path: '/', label: opts.name, icon: '📦' }],
             navPosition: 'sidebar',
         },
         provides: { entities: [], events: [] },
@@ -49,7 +125,353 @@ export async function initCommand(options) {
         database: { type: 'postgresql' },
     };
     await writeFile(target, JSON.stringify(manifest, null, 2) + '\n', 'utf-8');
-    console.log(kleur.green(`✔ Wrote ${target}`));
-    console.log(kleur.dim(`  Next: anby app validate && anby app publish --public-url http://localhost:${port}`));
+    console.log(kleur.green(`✔ Wrote anby-app.manifest.json`));
+}
+// ── Step 2: Vite config ───────────────────────────────────────────────
+async function patchViteConfig() {
+    const candidates = [
+        'vite.config.ts',
+        'vite.config.mts',
+        'vite.config.js',
+        'vite.config.mjs',
+    ];
+    let target = null;
+    for (const name of candidates) {
+        try {
+            await access(resolve(name));
+            target = name;
+            break;
+        }
+        catch {
+            // try next
+        }
+    }
+    if (!target) {
+        console.log(kleur.dim('• No vite.config.* found — skipping plugin wiring. Add `anbyVitePlugin()` from `@anby/platform-sdk/vite` to your bundler manually.'));
+        return;
+    }
+    const path = resolve(target);
+    const original = await readFile(path, 'utf-8');
+    if (original.includes('anbyVitePlugin')) {
+        console.log(kleur.dim(`• ${target} already wires anbyVitePlugin — no patch needed`));
+        return;
+    }
+    const importLine = "import { anbyVitePlugin } from '@anby/platform-sdk/vite';";
+    const importRegex = /^import .+ from .+;?\s*$/gm;
+    let lastImportEnd = -1;
+    for (const match of original.matchAll(importRegex)) {
+        if (match.index !== undefined) {
+            lastImportEnd = match.index + match[0].length;
+        }
+    }
+    let withImport;
+    if (lastImportEnd >= 0) {
+        withImport =
+            original.slice(0, lastImportEnd) +
+                '\n' +
+                importLine +
+                original.slice(lastImportEnd);
+    }
+    else {
+        withImport = importLine + '\n' + original;
+    }
+    const pluginsArrayRegex = /(plugins\s*:\s*\[)(\s*)/;
+    if (!pluginsArrayRegex.test(withImport)) {
+        console.log(kleur.yellow(`! Could not find a \`plugins: [...]\` array in ${target}. ` +
+            `Add ${kleur.cyan('anbyVitePlugin()')} to your plugins manually.`));
+        return;
+    }
+    const patched = withImport.replace(pluginsArrayRegex, (_, head, ws) => `${head}${ws}anbyVitePlugin(),${ws}`);
+    await writeFile(path, patched, 'utf-8');
+    console.log(kleur.green(`✔ Patched ${target} to load anbyVitePlugin`));
+}
+// ── Step 3: .gitignore ────────────────────────────────────────────────
+async function patchGitignore() {
+    const path = resolve('.gitignore');
+    let existing = '';
+    try {
+        existing = await readFile(path, 'utf-8');
+    }
+    catch {
+        // file doesn't exist — we'll create it below
+    }
+    const lines = existing.split(/\r?\n/).map((l) => l.trim());
+    const needsPublicAnby = !lines.some((l) => l === 'public/_anby/' || l === 'public/_anby');
+    const needsDotAnby = !lines.some((l) => l === '.anby/' || l === '.anby');
+    if (!needsPublicAnby && !needsDotAnby) {
+        console.log(kleur.dim('• .gitignore already covers Anby paths — no change'));
+        return;
+    }
+    let block = '';
+    if (needsPublicAnby || needsDotAnby) {
+        block +=
+            (existing.length === 0 || existing.endsWith('\n') ? '' : '\n') +
+                '\n# Anby — auto-generated files (do not commit)\n';
+        if (needsPublicAnby)
+            block += 'public/_anby/\n';
+        if (needsDotAnby)
+            block += '.anby/\n';
+    }
+    await writeFile(path, existing + block, 'utf-8');
+    console.log(kleur.green('✔ Updated .gitignore for Anby paths'));
+}
+// ── Step 4: auth.server.ts scaffold ───────────────────────────────────
+const AUTH_SERVER_TEMPLATE = `/**
+ * Auth utilities — auto-generated by \`anby init\`.
+ *
+ * Uses @anby/platform-sdk for authentication.
+ * Supports RS256 JWT (browser/Bearer/cookie) + HMAC (service-to-service).
+ * Extracts tenantId from JWT payload.
+ */
+
+import {
+  bootstrapFromToken,
+  authenticateRequest as sdkAuthenticate,
+  requireAuth as sdkRequireAuth,
+  type AuthUser,
+} from '@anby/platform-sdk';
+
+const ANBY_APP_TOKEN = process.env.ANBY_APP_TOKEN || '';
+
+if (!ANBY_APP_TOKEN) {
+  throw new Error(
+    'ANBY_APP_TOKEN is required. Run \\\`anby login && anby init\\\` to generate one.',
+  );
+}
+
+let _bootstrapPromise: Promise<void> | null = null;
+
+/**
+ * Initialize the SDK by bootstrapping from ANBY_APP_TOKEN. Returns a
+ * promise that resolves when discovery + auth public key are fetched
+ * and the SDK is ready to verify tokens. Idempotent.
+ */
+export function initAuth(): Promise<void> {
+  if (_bootstrapPromise) return _bootstrapPromise;
+  _bootstrapPromise = bootstrapFromToken({ appToken: ANBY_APP_TOKEN }).catch(
+    (err) => {
+      _bootstrapPromise = null;
+      throw err;
+    },
+  );
+  return _bootstrapPromise;
+}
+
+// Kick off bootstrap at module load.
+initAuth().catch((err) => {
+  console.error('[anby] bootstrap failed at module load:', err);
+});
+
+export type { AuthUser };
+
+/**
+ * Authenticate a request via JWT or HMAC.
+ * Returns the authenticated user with tenantId or null.
+ */
+export function authenticateRequest(request: Request): AuthUser | null {
+  return sdkAuthenticate(request);
+}
+
+/**
+ * Require authentication — throws 401 if not authenticated.
+ */
+export function requireAuth(request: Request): AuthUser {
+  return sdkRequireAuth(request);
+}
+
+/**
+ * Extract tenantId from the authenticated user.
+ * Falls back to 'default' if not present.
+ */
+export function getTenantId(request: Request): string {
+  const user = authenticateRequest(request);
+  return user?.tenantId || 'default';
+}
+`;
+async function scaffoldAuthServer() {
+    const appDir = resolve('app');
+    try {
+        await access(appDir);
+    }
+    catch {
+        console.log(kleur.dim('• No app/ directory found (not a Remix project?) — skipping auth.server.ts scaffold'));
+        return;
+    }
+    const libDir = resolve('app/lib');
+    const target = resolve('app/lib/auth.server.ts');
+    try {
+        await access(target);
+        console.log(kleur.dim(`• app/lib/auth.server.ts already exists — leaving it alone`));
+        return;
+    }
+    catch {
+        // ok — file doesn't exist, we'll create it
+    }
+    await mkdir(libDir, { recursive: true });
+    await writeFile(target, AUTH_SERVER_TEMPLATE, 'utf-8');
+    console.log(kleur.green('✔ Scaffolded app/lib/auth.server.ts'));
+}
+// ── Step 5: Patch entry.server.tsx ────────────────────────────────────
+async function patchEntryServer(port) {
+    const target = resolve('app/entry.server.tsx');
+    let original;
+    try {
+        original = await readFile(target, 'utf-8');
+    }
+    catch {
+        console.log(kleur.dim('• No app/entry.server.tsx found — skipping entry patch.'));
+        return;
+    }
+    if (original.includes('initAuth')) {
+        console.log(kleur.dim('• app/entry.server.tsx already has initAuth — no patch needed'));
+        return;
+    }
+    const sdkImport = "import { autoPublishOnBoot } from '@anby/platform-sdk';";
+    const authImport = "import { initAuth } from './lib/auth.server';";
+    const importRegex = /^import .+ from .+;?\s*$/gm;
+    let lastImportEnd = -1;
+    for (const match of original.matchAll(importRegex)) {
+        if (match.index !== undefined) {
+            lastImportEnd = match.index + match[0].length;
+        }
+    }
+    let withImports;
+    if (lastImportEnd >= 0) {
+        withImports =
+            original.slice(0, lastImportEnd) +
+                '\n' +
+                sdkImport +
+                '\n' +
+                authImport +
+                original.slice(lastImportEnd);
+    }
+    else {
+        withImports = sdkImport + '\n' + authImport + '\n' + original;
+    }
+    const bootstrapBlock = `
+// Anby platform bootstrap — auto-generated by \`anby init\`.
+// Ensures auth + discovery are ready before the first request.
+await initAuth();
+autoPublishOnBoot({
+  publicUrl: process.env.APP_PUBLIC_URL || \`http://localhost:\${process.env.PORT || ${port}}\`,
+});
+`;
+    const exportRegex = /^export\s+(default|function|async\s+function)/m;
+    const exportMatch = withImports.match(exportRegex);
+    let patched;
+    if (exportMatch && exportMatch.index !== undefined) {
+        patched =
+            withImports.slice(0, exportMatch.index) +
+                bootstrapBlock +
+                '\n' +
+                withImports.slice(exportMatch.index);
+    }
+    else {
+        patched = withImports + '\n' + bootstrapBlock;
+    }
+    await writeFile(target, patched, 'utf-8');
+    console.log(kleur.green('✔ Patched app/entry.server.tsx (initAuth + autoPublishOnBoot)'));
+}
+// ── Step 6: Self-register with registry ───────────────────────────────
+async function registerAndWriteToken(opts) {
+    if (!opts.auth) {
+        console.log(kleur.yellow('! Not logged in — run `anby login` first, then `anby init` again'));
+        return;
+    }
+    // Check if .env.local already has ANBY_APP_TOKEN
+    const envLocalPath = resolve('.env.local');
+    try {
+        const envContent = await readFile(envLocalPath, 'utf-8');
+        if (envContent.includes('ANBY_APP_TOKEN=')) {
+            console.log(kleur.dim('• .env.local already contains ANBY_APP_TOKEN — skipping registration'));
+            return;
+        }
+    }
+    catch {
+        // .env.local doesn't exist — fine
+    }
+    // Load the manifest we just wrote
+    let manifest;
+    try {
+        const raw = await readFile(resolve('anby-app.manifest.json'), 'utf-8');
+        manifest = JSON.parse(raw);
+    }
+    catch {
+        console.log(kleur.yellow('! Could not read anby-app.manifest.json — skipping registration'));
+        return;
+    }
+    const publicUrl = `http://localhost:${opts.port}`;
+    const registryUrl = `${opts.registryBase}/registry/apps`;
+    // Register with a minimal manifest (just metadata, no entities).
+    // Entity declarations are published later by autoPublishOnBoot when
+    // the developer runs `npm run dev` — by then they've had time to
+    // edit the manifest with the correct provides/requires.
+    const registrationManifest = {
+        ...manifest,
+        provides: { entities: [], events: [] },
+        requires: { ...manifest.requires, entities: [], events: [] },
+    };
+    const body = {
+        id: manifest.id,
+        name: manifest.name,
+        description: manifest.description,
+        icon: manifest.icon,
+        color: manifest.color,
+        publisherId: manifest.id.split('.').slice(0, 2).join('.'),
+        version: manifest.version,
+        publicUrl,
+        submittedBy: `cli:${opts.auth.email}`,
+        manifest: registrationManifest,
+    };
+    let res;
+    try {
+        res = await fetch(registryUrl, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Authorization: `Bearer ${opts.auth.token}`,
+            },
+            body: JSON.stringify(body),
+            signal: AbortSignal.timeout(10_000),
+        });
+    }
+    catch (err) {
+        console.log(kleur.yellow(`! Could not reach registry at ${registryUrl}: ${err.message}`));
+        return;
+    }
+    if (!res.ok) {
+        const errBody = await res.text();
+        console.log(kleur.yellow(`! Registry rejected publish (${res.status}): ${errBody}`));
+        return;
+    }
+    const result = await res.json();
+    if (!result.privateKey) {
+        console.log(kleur.dim('• App already registered (no new private key). Run `anby app rotate-token` for a new token.'));
+        return;
+    }
+    // Assemble token — platformUrl is the registry base (used by SDK discovery)
+    const token = assembleToken({
+        appId: manifest.id,
+        platformUrl: opts.registryBase,
+        privateKey: result.privateKey,
+    });
+    // Write to .env.local
+    let envContent = '';
+    try {
+        envContent = await readFile(envLocalPath, 'utf-8');
+    }
+    catch {
+        // File doesn't exist
+    }
+    const newLines = [
+        ...(envContent ? [] : ['# Auto-generated by anby init']),
+        `ANBY_APP_TOKEN=${token}`,
+        `APP_PUBLIC_URL=http://localhost:${opts.port}`,
+    ];
+    const separator = envContent.length === 0 || envContent.endsWith('\n') ? '' : '\n';
+    const appended = envContent + separator + newLines.join('\n') + '\n';
+    await writeFile(envLocalPath, appended, { mode: 0o600 });
+    console.log(kleur.green('✔ Registered app with registry'));
+    console.log(kleur.green('✔ Wrote ANBY_APP_TOKEN to .env.local'));
 }
 //# sourceMappingURL=init.js.map

package/dist/commands/init.js.map

@@ -1 +1 @@
-{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAQ1B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAoB;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,yCAAyC,CAAC,CAChE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,oBAAoB,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,+CAA+C;QACxD,EAAE;QACF,OAAO,EAAE,OAAO;QAChB,IAAI;QACJ,WAAW,EAAE,GAAG,IAAI,4BAA4B;QAChD,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE;YACP,IAAI,EAAE,OAAO;YACb,IAAI;YACJ,WAAW,EAAE,aAAa;YAC1B,UAAU,EAAE,aAAa;SAC1B;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAChD,WAAW,EAAE,SAAS;SACvB;QACD,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,QAAQ,EAAE;YACR,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;SACvC;QACD,WAAW,EAAE,CAAC,gBAAgB,CAAC;QAC/B,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;KACjC,CAAC;IAEF,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,+EAA+E,IAAI,EAAE,CAAC,CAAC,CAAC;AAChH,CAAC"}
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAOxD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAoB;IACpD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE7E,IAAI,CAAC;QACH,mEAAmE;QACnE,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,mEAAmE;QACnE,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;QAEtE,kCAAkC;QAClC,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjE,8CAA8C;QAC9C,MAAM,IAAI,GAAG,IAAI;aACd,WAAW,EAAE;aACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;aAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAEzB,IAAI,EAAE,GAAG,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC;QAEpC,8DAA8D;QAC9D,MAAM,YAAY,GAAG,CACnB,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,GAAG,CAAC,iBAAiB;YAC7B,oBAAoB,CACrB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAEtB,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,UAAU,EAAE,CAAC;YACf,+BAA+B;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACtD,EAAE,GAAG,GAAG,aAAa,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,aAAa,aAAa,IAAI,IAAI,2BAA2B,EAAE,EAAE,CAAC,CAC7E,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,mEAAmE;QACnE,MAAM,aAAa,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,eAAe,EAAE,CAAC;QACxB,MAAM,cAAc,EAAE,CAAC;QACvB,MAAM,kBAAkB,EAAE,CAAC;QAC3B,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,qBAAqB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,+BAA+B,CAAC,CAAC,CAAC;QACzG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,oDAAoD,CAAC,CAAC,CAAC;QAC9G,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,sCAAsC,KAAK,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACzG,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,2EAA2E;AAE3E,KAAK,UAAU,cAAc,CAAC,YAAoB,EAAE,KAAa;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,kBAAkB,KAAK,WAAW,EAAE;YACzE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,KAAK,UAAU,aAAa,CAAC,IAI5B;IACC,MAAM,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,oCAAoC,CAAC,CAC3D,CAAC;QACF,OAAO;IACT,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,+CAA+C;QACxD,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,GAAG,IAAI,CAAC,IAAI,4BAA4B;QACrD,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE;YACP,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,aAAa;YAC1B,UAAU,EAAE,aAAa;SAC1B;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACrD,WAAW,EAAE,SAAS;SACvB;QACD,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,QAAQ,EAAE;YACR,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,QAAQ,EAAE,EAAE;YACZ,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;SACvC;QACD,WAAW,EAAE,CAAC,gBAAgB,CAAC;QAC/B,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;KACjC,CAAC;IAEF,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,yEAAyE;AAEzE,KAAK,UAAU,eAAe;IAC5B,MAAM,UAAU,GAAG;QACjB,gBAAgB;QAChB,iBAAiB;QACjB,gBAAgB;QAChB,iBAAiB;KAClB,CAAC;IACF,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5B,MAAM,GAAG,IAAI,CAAC;YACd,MAAM;QACR,CAAC;QAAC,MAAM,CAAC;YACP,WAAW;QACb,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,oIAAoI,CACrI,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE/C,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,iDAAiD,CAAC,CACxE,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GACd,2DAA2D,CAAC;IAE9D,MAAM,WAAW,GAAG,4BAA4B,CAAC;IACjD,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,aAAa,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,UAAkB,CAAC;IACvB,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QACvB,UAAU;YACR,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;gBAChC,IAAI;gBACJ,UAAU;gBACV,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,UAAU,GAAG,IAAI,GAAG,QAAQ,CAAC;IAC5C,CAAC;IAED,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;IACpD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,kDAAkD,MAAM,IAAI;YAC1D,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,4BAA4B,CACpE,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAChC,iBAAiB,EACjB,CAAC,CAAC,EAAE,IAAY,EAAE,EAAU,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,EAAE,EAAE,CACtE,CAAC;IAEF,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,MAAM,yBAAyB,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,yEAAyE;AAEzE,KAAK,UAAU,cAAc;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACnC,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,CAAC,KAAK,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,eAAe,IAAI,CAAC,KAAK,cAAc,CACrD,CAAC;IACF,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,OAAO,CACvC,CAAC;IAEF,IAAI,CAAC,eAAe,IAAI,CAAC,YAAY,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAChE,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,eAAe,IAAI,YAAY,EAAE,CAAC;QACpC,KAAK;YACH,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9D,mDAAmD,CAAC;QACtD,IAAI,eAAe;YAAE,KAAK,IAAI,iBAAiB,CAAC;QAChD,IAAI,YAAY;YAAE,KAAK,IAAI,UAAU,CAAC;IACxC,CAAC;IAED,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,yEAAyE;AAEzE,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuE5B,CAAC;AAEF,KAAK,UAAU,kBAAkB;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,qFAAqF,CACtF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,4DAA4D,CAAC,CACxE,CAAC;QACF,OAAO;IACT,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IAED,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,SAAS,CAAC,MAAM,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,yEAAyE;AAEzE,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/C,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,yDAAyD,CAC1D,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAC3E,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,yDAAyD,CAAC;IAC5E,MAAM,UAAU,GAAG,+CAA+C,CAAC;IAEnE,MAAM,WAAW,GAAG,4BAA4B,CAAC;IACjD,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,aAAa,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,WAAmB,CAAC;IACxB,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QACvB,WAAW;YACT,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;gBAChC,IAAI;gBACJ,SAAS;gBACT,IAAI;gBACJ,UAAU;gBACV,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,SAAS,GAAG,IAAI,GAAG,UAAU,GAAG,IAAI,GAAG,QAAQ,CAAC;IAChE,CAAC;IAED,MAAM,cAAc,GAAG;;;;;uFAK8D,IAAI;;CAE1F,CAAC;IAEA,MAAM,WAAW,GAAG,gDAAgD,CAAC;IACrE,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACnD,IAAI,OAAe,CAAC;IACpB,IAAI,WAAW,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACnD,OAAO;YACL,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC;gBACvC,cAAc;gBACd,IAAI;gBACJ,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,WAAW,GAAG,IAAI,GAAG,cAAc,CAAC;IAChD,CAAC;IAED,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,yEAAyE;AAEzE,KAAK,UAAU,qBAAqB,CAAC,IAMpC;IACC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,kEAAkE,CACnE,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,iDAAiD;IACjD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,sEAAsE,CAAC,CAClF,CAAC;YACF,OAAO;QACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;IAED,kCAAkC;IAClC,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CAAC,iEAAiE,CAAC,CAChF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,YAAY,gBAAgB,CAAC;IAEzD,iEAAiE;IACjE,oEAAoE;IACpE,iEAAiE;IACjE,wDAAwD;IACxD,MAAM,oBAAoB,GAAG;QAC3B,GAAG,QAAQ;QACX,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACtC,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;KAC7D,CAAC;IAEF,MAAM,IAAI,GAAG;QACX,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACzD,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS;QACT,WAAW,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;QACrC,QAAQ,EAAE,oBAAoB;KAC/B,CAAC;IAEF,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;aAC3C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CACV,iCAAiC,WAAW,KAAM,GAAa,CAAC,OAAO,EAAE,CAC1E,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,MAAM,CAAC,gCAAgC,GAAG,CAAC,MAAM,MAAM,OAAO,EAAE,CAAC,CACxE,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAEhC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,6FAA6F,CAC9F,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,4EAA4E;IAC5E,MAAM,KAAK,GAAG,aAAa,CAAC;QAC1B,KAAK,EAAE,QAAQ,CAAC,EAAE;QAClB,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;IAEH,sBAAsB;IACtB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,qBAAqB;IACvB,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;QACxD,kBAAkB,KAAK,EAAE;QACzB,mCAAmC,IAAI,CAAC,IAAI,EAAE;KAC/C,CAAC;IAEF,MAAM,SAAS,GACb,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAErE,MAAM,SAAS,CAAC,YAAY,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;AACnE,CAAC"}

package/dist/commands/login.d.ts

@@ -0,0 +1,12 @@
+interface LoginOptions {
+    /** Hidden override for platform devs (--auth-url) */
+    authUrl?: string;
+}
+/**
+ * `anby login` — authenticate with the Anby platform via Google OAuth.
+ *
+ * Default auth URL: https://auth.anby.ai
+ * Platform devs can override with: anby login --auth-url http://localhost:3000
+ */
+export declare function loginCommand(options: LoginOptions): Promise<void>;
+export {};

package/dist/commands/login.js

@@ -0,0 +1,112 @@
+import { createServer } from 'node:http';
+import { URL } from 'node:url';
+import kleur from 'kleur';
+import { saveAuth, getStoredAuth } from '../lib/auth-store.js';
+const DEFAULT_AUTH_URL = 'https://auth.anby.ai';
+/**
+ * `anby login` — authenticate with the Anby platform via Google OAuth.
+ *
+ * Default auth URL: https://auth.anby.ai
+ * Platform devs can override with: anby login --auth-url http://localhost:3000
+ */
+export async function loginCommand(options) {
+    const existing = await getStoredAuth();
+    if (existing) {
+        console.log(kleur.dim(`Already logged in as ${existing.email}`));
+        console.log(kleur.dim('Run `anby logout` to sign out first.'));
+        return;
+    }
+    const authUrl = (options.authUrl ||
+        process.env.ANBY_AUTH_URL ||
+        DEFAULT_AUTH_URL).replace(/\/+$/, '');
+    const { token, email } = await runOAuthFlow(authUrl);
+    // JWT exp is 7 days from issuance.
+    const payload = JSON.parse(Buffer.from(token.split('.')[1], 'base64url').toString());
+    const expiresAt = new Date(payload.exp * 1000).toISOString();
+    await saveAuth({ token, email: email || payload.email || 'unknown', expiresAt });
+    console.log('');
+    console.log(kleur.green(`✔ Logged in as ${email || payload.email}`));
+    console.log(kleur.dim(`  Token expires: ${expiresAt}`));
+}
+function runOAuthFlow(authUrl) {
+    return new Promise((resolve, reject) => {
+        const server = createServer((req, res) => {
+            const url = new URL(req.url || '/', `http://localhost`);
+            if (url.pathname === '/callback') {
+                const token = url.searchParams.get('token');
+                const email = url.searchParams.get('email') || '';
+                const error = url.searchParams.get('error');
+                if (error || !token) {
+                    res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+                    res.end(errorPage(error || 'no_token'));
+                    server.close();
+                    reject(new Error(`Login failed: ${error || 'no token received'}`));
+                    return;
+                }
+                res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+                res.end(successPage());
+                server.close();
+                resolve({ token, email });
+                return;
+            }
+            res.writeHead(404);
+            res.end('Not found');
+        });
+        server.listen(0, '127.0.0.1', () => {
+            const addr = server.address();
+            if (!addr || typeof addr === 'string') {
+                reject(new Error('Failed to bind local server'));
+                return;
+            }
+            const callbackUrl = `http://localhost:${addr.port}/callback`;
+            const loginUrl = `${authUrl}/auth/google?returnUrl=${encodeURIComponent(callbackUrl)}&mode=cli`;
+            console.log(kleur.dim(`Opening browser for login...`));
+            console.log(kleur.dim(`If the browser doesn't open, visit:`));
+            console.log(kleur.cyan(loginUrl));
+            console.log('');
+            openBrowser(loginUrl).catch(() => {
+                // Browser didn't open — user can copy the URL above.
+            });
+        });
+        // Timeout after 3 minutes
+        setTimeout(() => {
+            server.close();
+            reject(new Error('Login timed out after 3 minutes'));
+        }, 180_000);
+    });
+}
+async function openBrowser(url) {
+    const { exec } = await import('node:child_process');
+    const { promisify } = await import('node:util');
+    const execAsync = promisify(exec);
+    const platform = process.platform;
+    if (platform === 'darwin') {
+        await execAsync(`open "${url}"`);
+    }
+    else if (platform === 'win32') {
+        await execAsync(`start "" "${url}"`);
+    }
+    else {
+        await execAsync(`xdg-open "${url}"`);
+    }
+}
+function successPage() {
+    return `<!DOCTYPE html>
+<html><head><meta charset="utf-8"><title>Anby CLI</title></head>
+<body style="font-family:system-ui;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#0a0a0a;color:#fafafa">
+<div style="text-align:center">
+<h1 style="color:#22c55e">✔ Logged in</h1>
+<p>You can close this tab and return to the terminal.</p>
+</div></body></html>`;
+}
+function errorPage(error) {
+    return `<!DOCTYPE html>
+<html><head><meta charset="utf-8"><title>Anby CLI</title></head>
+<body style="font-family:system-ui;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#0a0a0a;color:#fafafa">
+<div style="text-align:center">
+<h1 style="color:#ef4444">✖ Login failed</h1>
+<p>${error}</p>
+<p>Return to the terminal and try again.</p>
+</div></body></html>`;
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAOhD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAqB;IACtD,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;IACvC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,wBAAwB,QAAQ,CAAC,KAAK,EAAE,CAAC,CACpD,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,CACd,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,GAAG,CAAC,aAAa;QACzB,gBAAgB,CACjB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEtB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IAErD,mCAAmC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CACzD,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAE7D,MAAM,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,IAAI,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;IAEjF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,SAAS,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;YACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAExD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAE5C,IAAI,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;oBACpB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBACnE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,UAAU,CAAC,CAAC,CAAC;oBACxC,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,KAAK,IAAI,mBAAmB,EAAE,CAAC,CAAC,CAAC;oBACnE,OAAO;gBACT,CAAC;gBAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;gBACvB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1B,OAAO;YACT,CAAC;YAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,oBAAoB,IAAI,CAAC,IAAI,WAAW,CAAC;YAC7D,MAAM,QAAQ,GAAG,GAAG,OAAO,0BAA0B,kBAAkB,CAAC,WAAW,CAAC,WAAW,CAAC;YAEhG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhB,WAAW,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC/B,qDAAqD;YACvD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,0BAA0B;QAC1B,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACvD,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAElC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,SAAS,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;IACnC,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,SAAS,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;;;;;;qBAMY,CAAC;AACtB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO;;;;;KAKJ,KAAK;;qBAEW,CAAC;AACtB,CAAC"}

package/dist/commands/logout.d.ts

@@ -0,0 +1 @@
+export declare function logoutCommand(): Promise<void>;

package/dist/commands/logout.js

@@ -0,0 +1,7 @@
+import kleur from 'kleur';
+import { clearAuth } from '../lib/auth-store.js';
+export async function logoutCommand() {
+    await clearAuth();
+    console.log(kleur.green('✔ Logged out'));
+}
+//# sourceMappingURL=logout.js.map

package/dist/commands/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,SAAS,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/commands/publish.d.ts

@@ -4,6 +4,17 @@ interface PublishOptions {
     publicUrl?: string;
     changelog?: string;
     featured?: boolean;
+    /**
+     * If set, the CLI writes the assembled ANBY_APP_TOKEN to this path
+     * (e.g. ".env.local"). Without this flag the token is only printed
+     * to stdout — the dev is responsible for capturing it.
+     */
+    saveTo?: string;
+    /**
+     * Override the platform base URL embedded in the token. Defaults to
+     * the registry URL with the /registry suffix stripped.
+     */
+    platformUrl?: string;
 }
 export declare function publishCommand(options: PublishOptions): Promise<void>;
 export {};

package/dist/commands/publish.js

@@ -1,5 +1,7 @@
 import kleur from 'kleur';
+import { writeFile } from 'node:fs/promises';
 import { publishAppFromManifest } from '@anby/platform-sdk';
+import { assembleToken } from '../lib/token.js';
 export async function publishCommand(options) {
     const result = await publishAppFromManifest({
         manifestPath: options.manifest,
@@ -16,5 +18,39 @@ export async function publishCommand(options) {
     if (result.app.publicUrl) {
         console.log(kleur.dim(`  publicUrl: ${result.app.publicUrl}`));
     }
+    // PLAN-app-bootstrap PR3: assemble + print ANBY_APP_TOKEN if the registry
+    // returned a fresh private key (only happens on first publish for an app).
+    if (result.privateKey) {
+        const platformUrl = options.platformUrl ?? options.registry.replace(/\/registry\/?$/, '');
+        const token = assembleToken({
+            appId: result.app.id,
+            platformUrl,
+            privateKey: result.privateKey,
+        });
+        console.log('');
+        console.log(kleur.bold().yellow('━━━ ANBY_APP_TOKEN (shown ONCE — store it safely) ━━━'));
+        console.log('');
+        console.log(token);
+        console.log('');
+        console.log(kleur.dim('Paste this into your app environment as ANBY_APP_TOKEN.\n' +
+            'It contains your app signing key. Treat it as a secret.\n' +
+            'If you lose it, run `anby app rotate-token <appId>` to issue a new one.'));
+        console.log(kleur.bold().yellow('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+        if (options.saveTo) {
+            const envLine = `ANBY_APP_TOKEN=${token}\n`;
+            try {
+                await writeFile(options.saveTo, envLine, { mode: 0o600 });
+                console.log(kleur.green(`✔ Token written to ${options.saveTo}`));
+            }
+            catch (err) {
+                console.error(kleur.red(`✖ Failed to write token to ${options.saveTo}: ${err.message}`));
+                process.exit(1);
+            }
+        }
+    }
+    else {
+        console.log(kleur.dim('(No new ANBY_APP_TOKEN issued — this app already has a registered keypair.\n' +
+            ' To rotate, run `anby app rotate-token ' + result.app.id + '`.)'));
+    }
 }
 //# sourceMappingURL=publish.js.map

package/dist/commands/publish.js.map

@@ -1 +1 @@
-{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAU5D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;QAC1C,YAAY,EAAE,OAAO,CAAC,QAAQ;QAC9B,WAAW,EAAE,OAAO,CAAC,QAAQ;QAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,eAAe,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,YAAY,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CACvF,CACF,CAAC;IACF,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;AACH,CAAC"}
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAqBhD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;QAC1C,YAAY,EAAE,OAAO,CAAC,QAAQ;QAC9B,WAAW,EAAE,OAAO,CAAC,QAAQ;QAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,KAAK,CACT,eAAe,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,YAAY,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CACvF,CACF,CAAC;IACF,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,aAAa,CAAC;YAC1B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE;YACpB,WAAW;YACX,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,uDAAuD,CAAC,CAAC,CAAC;QAC1F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,2DAA2D;YAC3D,2DAA2D;YAC3D,yEAAyE,CAC1E,CACF,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,uDAAuD,CAAC,CAAC,CAAC;QAE1F,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,kBAAkB,KAAK,IAAI,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,8BAA8B,OAAO,CAAC,MAAM,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CACrF,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CACP,8EAA8E;YAC9E,yCAAyC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAClE,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/lib/auth-store.d.ts

@@ -0,0 +1,23 @@
+export interface StoredAuth {
+    token: string;
+    email: string;
+    expiresAt: string;
+}
+/**
+ * Read stored CLI credentials from ~/.anby/auth.json.
+ * Returns null if the file doesn't exist or the token has expired.
+ */
+export declare function getStoredAuth(): Promise<StoredAuth | null>;
+/**
+ * Persist CLI credentials to ~/.anby/auth.json (0600).
+ */
+export declare function saveAuth(auth: StoredAuth): Promise<void>;
+/**
+ * Remove stored credentials.
+ */
+export declare function clearAuth(): Promise<void>;
+/**
+ * Extract email domain from stored auth.
+ * e.g. "user@bravebits.vn" → "bravebits.vn"
+ */
+export declare function getEmailDomain(email: string): string;

package/dist/lib/auth-store.js

@@ -0,0 +1,53 @@
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+const ANBY_DIR = join(homedir(), '.anby');
+const AUTH_FILE = join(ANBY_DIR, 'auth.json');
+/**
+ * Read stored CLI credentials from ~/.anby/auth.json.
+ * Returns null if the file doesn't exist or the token has expired.
+ */
+export async function getStoredAuth() {
+    try {
+        const raw = await readFile(AUTH_FILE, 'utf-8');
+        const data = JSON.parse(raw);
+        if (!data.token)
+            return null;
+        if (new Date(data.expiresAt) < new Date())
+            return null;
+        return data;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Persist CLI credentials to ~/.anby/auth.json (0600).
+ */
+export async function saveAuth(auth) {
+    await mkdir(ANBY_DIR, { recursive: true });
+    await writeFile(AUTH_FILE, JSON.stringify(auth, null, 2) + '\n', {
+        mode: 0o600,
+    });
+}
+/**
+ * Remove stored credentials.
+ */
+export async function clearAuth() {
+    try {
+        const { unlink } = await import('node:fs/promises');
+        await unlink(AUTH_FILE);
+    }
+    catch {
+        // Already gone — fine.
+    }
+}
+/**
+ * Extract email domain from stored auth.
+ * e.g. "user@bravebits.vn" → "bravebits.vn"
+ */
+export function getEmailDomain(email) {
+    const parts = email.split('@');
+    return parts[1] || 'example.com';
+}
+//# sourceMappingURL=auth-store.js.map

package/dist/lib/auth-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-store.js","sourceRoot":"","sources":["../../src/lib/auth-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AAQ9C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAgB;IAC7C,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAC/D,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACpD,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC;AACnC,CAAC"}

package/dist/lib/token.d.ts

@@ -0,0 +1,17 @@
+/**
+ * ANBY_APP_TOKEN assembly helper.
+ *
+ * Mirrors the parser in @anby/platform-sdk/src/bootstrap. Kept in the CLI
+ * (rather than imported from the SDK) so the CLI doesn't have to ship the
+ * SDK's whole runtime just for one base64 wrapper.
+ *
+ * Format: anby_v1_<base64url(json)>
+ *   json = { v: 1, appId, platformUrl, privateKey }
+ */
+export declare const ANBY_TOKEN_PREFIX = "anby_v1_";
+export interface AssembleTokenInput {
+    appId: string;
+    platformUrl: string;
+    privateKey: string;
+}
+export declare function assembleToken(input: AssembleTokenInput): string;

package/dist/lib/token.js

@@ -0,0 +1,27 @@
+/**
+ * ANBY_APP_TOKEN assembly helper.
+ *
+ * Mirrors the parser in @anby/platform-sdk/src/bootstrap. Kept in the CLI
+ * (rather than imported from the SDK) so the CLI doesn't have to ship the
+ * SDK's whole runtime just for one base64 wrapper.
+ *
+ * Format: anby_v1_<base64url(json)>
+ *   json = { v: 1, appId, platformUrl, privateKey }
+ */
+export const ANBY_TOKEN_PREFIX = 'anby_v1_';
+export function assembleToken(input) {
+    if (!input.appId || !input.platformUrl || !input.privateKey) {
+        throw new Error('assembleToken: appId, platformUrl, and privateKey are required');
+    }
+    if (!input.privateKey.includes('PRIVATE KEY')) {
+        throw new Error('assembleToken: privateKey must be a PEM');
+    }
+    const payload = {
+        v: 1,
+        appId: input.appId,
+        platformUrl: input.platformUrl.replace(/\/$/, ''),
+        privateKey: input.privateKey,
+    };
+    return ANBY_TOKEN_PREFIX + Buffer.from(JSON.stringify(payload)).toString('base64url');
+}
+//# sourceMappingURL=token.js.map

package/dist/lib/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../src/lib/token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAQ5C,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,OAAO,GAAG;QACd,CAAC,EAAE,CAAU;QACb,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACjD,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;IACF,OAAO,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACxF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anby/cli",
-  "version": "0.1.1",
+  "version": "0.8.0",
   "description": "Anby Platform CLI — scaffold, validate, publish, and install Anby apps",
   "keywords": [
     "anby",
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@anby/manifest-schema": "^0.1.1",
-    "@anby/platform-sdk": "^0.1.1",
+    "@anby/platform-sdk": "^0.8.0",
     "commander": "^12.1.0",
     "kleur": "^4.1.5"
   },