@anvil-works/anvil-cli 0.8.0-canary.12 → 0.8.0-canary.14

package/dist/api.d.ts

@@ -7,13 +7,17 @@ export type { WatchDiagnosticEventName, WatchDiagnosticEventPayload, WatchSessio
 export { branchFromEnvironmentVersion, readEnvironmentPid, requireEnvironmentBranch, writeEnvironmentPid, } from "./environment";
 export type { AnvilEnvironmentBinding, AnvilEnvironmentVersion, EnvBranchChangeMode } from "./environment";
 export { AppIdCandidate, AppIdWithContext, CheckoutAppListItem, detectAppIdsByCommitLookup, detectAppIdsFromAllRemotes, filterCandidates, formatCandidateLabel, getGitFetchUrl, getGitPushUrl, getLatestVersion, getWebSocketUrl, listAppsForCheckout, lookupRemoteInfoForAppId, lookupByCommit, saveUpdates, ValidateAppIdResponse, validateAppId, } from "./services/anvil-api";
-export { ANVIL_SYNC_CLIENT_ID, getAccountsForUrl, getAvailableAnvilUrls, getValidAuthToken, hasTokensForUrl, verifyAndStoreTokens, LoginResult, LogoutResult, logout, TokenData, clearInMemoryTokens, setInMemoryTokens, verifyAuth, } from "./services/auth";
+export { ANVIL_SYNC_CLIENT_ID, getAccountsForUrl, getAvailableAnvilUrls, getValidAuthToken, GetValidAuthTokenOptions, hasTokensForUrl, REFRESH_REQUEST_TIMEOUT_MS, verifyAndStoreTokens, LoginResult, LogoutResult, logout, TokenData, clearInMemoryTokens, setInMemoryTokens, verifyAuth, } from "./services/auth";
 export { DeviceAuthorizationResponse, OAuthTokenResponse, pollDeviceAuthorization, requestDeviceAuthorization, } from "./services/oauth-login";
 export { CheckoutCloneOptions, CheckoutExecutionDeps, CheckoutOptions, CheckoutResult, executeCheckout, getDefaultDestinationDirectory, isDirectoryNonEmpty, isPathInsideGitRepo, parseCheckoutInput, ParsedCheckoutInput, sanitizeDirectoryName, validateCheckoutDestination, } from "./commands/checkout";
 export { createCheckoutPickerSource, type CheckoutPickerDeps, type CheckoutPickerSourceController, type CheckoutPickerSourceOptions, } from "./commands/checkout-picker";
 export { buildGitAuthDoctorReport, formatGitAuthDoctorReport, inspectCredentialHelperCommand, parseCredentialHelperCommand, } from "./commands/gitAuth";
 export type { CredentialFillResult, GitAuthDoctorAppReport, GitAuthDoctorFinding, GitAuthDoctorRemote, GitAuthDoctorReport, GitAuthDoctorStatus, GitCredentialHelperDetails, GitCredentialSimulation, InspectCredentialHelperOptions, } from "./commands/gitAuth";
 export { executeGitCredentialOperation } from "./commands/gitCredential";
+export { executeModelTokenOperation, getModelToken, MODEL_TOKEN_LOCK_TIMEOUT_MS } from "./commands/modelToken";
+export type { ModelTokenDeps, ModelTokenOptions } from "./commands/modelToken";
+export { AUTH_FILE_LOCK_DEFAULTS, getModelTokenHelperScript, installModelTokenHelperScript, MODEL_TOKEN_HELPER_FILENAME, withRepoAuthFileLock, } from "./services/git-auth";
+export type { AuthFileLockOptions } from "./services/git-auth";
 export { deleteConfig, getAllConfig, getConfig, getInstalledPreferredEditors, getPreferredEditorCommand, getSettableConfigKeys, isCommandAvailable, normalizeAnvilUrl, parseConfigSetValue, preferredEditors, PreferredEditor, resetConfig, resolveAnvilUrl, setAuthTokensForAccount, setConfig, SettableConfigKey, } from "./config";
 export { BranchSyncStatus, ValidateBranchSyncStatusOptions, validateAnvilApp, validateBranchSyncStatus, } from "./services/validation";
 export { AnvilYamlValidationResult, FormTemplateValidationResult, ValidatePathResult, ValidationTarget, ValidationIssue, formatValidationPath, validatePath, validateAnvilYaml, validateFormTemplate, } from "./validators";

package/dist/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAkB,QAAQ,EAAgB,MAAM,UAAU,CAAC;AAI7E,OAAO,EAA4B,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACzF,OAAO,EACH,uBAAuB,EACvB,mBAAmB,EAQtB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,YAAY,EAAE,CAAC;AACxB,YAAY,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAChH,OAAO,EACH,4BAA4B,EAC5B,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,GACtB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAG3G,OAAO,EACH,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,wBAAwB,EACxB,cAAc,EACd,WAAW,EACX,qBAAqB,EACrB,aAAa,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACH,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,WAAW,EACX,YAAY,EACZ,MAAM,EACN,SAAS,EACT,mBAAmB,EACnB,iBAAiB,EACjB,UAAU,GACb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACH,2BAA2B,EAC3B,kBAAkB,EAClB,uBAAuB,EACvB,0BAA0B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACH,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,eAAe,EACf,8BAA8B,EAC9B,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,2BAA2B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACH,0BAA0B,EAC1B,KAAK,kBAAkB,EACvB,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,GACnC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,wBAAwB,EACxB,yBAAyB,EACzB,8BAA8B,EAC9B,4BAA4B,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACR,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,8BAA8B,GACjC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EACH,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,eAAe,EACf,uBAAuB,EACvB,SAAS,EACT,iBAAiB,GACpB,MAAM,UAAU,CAAC;AAClB,OAAO,EACH,gBAAgB,EAChB,+BAA+B,EAC/B,gBAAgB,EAChB,wBAAwB,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACH,yBAAyB,EACzB,4BAA4B,EAC5B,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EACH,qBAAqB,EACrB,gCAAgC,EAChC,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,GAC3B,MAAM,qBAAqB,CAAC;AAQ7B,MAAM,WAAW,kBAAkB;IAC/B,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,sBAAsB,CAAC;AAEvE,MAAM,WAAW,mBAAmB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B;AAMD;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAsB3F;AAMD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BjH;AAMD;;;GAGG;AACH,wBAAsB,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CA8J9G"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,SAAS,EAAkB,QAAQ,EAAgB,MAAM,UAAU,CAAC;AAI7E,OAAO,EAA4B,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACzF,OAAO,EACH,uBAAuB,EACvB,mBAAmB,EAQtB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,YAAY,EAAE,CAAC;AACxB,YAAY,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAChH,OAAO,EACH,4BAA4B,EAC5B,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,GACtB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAG3G,OAAO,EACH,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC1B,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,wBAAwB,EACxB,cAAc,EACd,WAAW,EACX,qBAAqB,EACrB,aAAa,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACH,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,EACf,0BAA0B,EAC1B,oBAAoB,EACpB,WAAW,EACX,YAAY,EACZ,MAAM,EACN,SAAS,EACT,mBAAmB,EACnB,iBAAiB,EACjB,UAAU,GACb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACH,2BAA2B,EAC3B,kBAAkB,EAClB,uBAAuB,EACvB,0BAA0B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACH,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,eAAe,EACf,8BAA8B,EAC9B,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,2BAA2B,GAC9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACH,0BAA0B,EAC1B,KAAK,kBAAkB,EACvB,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,GACnC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACH,wBAAwB,EACxB,yBAAyB,EACzB,8BAA8B,EAC9B,4BAA4B,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACR,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,8BAA8B,GACjC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAC/G,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EACH,uBAAuB,EACvB,yBAAyB,EACzB,6BAA6B,EAC7B,2BAA2B,EAC3B,oBAAoB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EACH,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,eAAe,EACf,uBAAuB,EACvB,SAAS,EACT,iBAAiB,GACpB,MAAM,UAAU,CAAC;AAClB,OAAO,EACH,gBAAgB,EAChB,+BAA+B,EAC/B,gBAAgB,EAChB,wBAAwB,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACH,yBAAyB,EACzB,4BAA4B,EAC5B,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EACH,qBAAqB,EACrB,gCAAgC,EAChC,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,GAC3B,MAAM,qBAAqB,CAAC;AAQ7B,MAAM,WAAW,kBAAkB;IAC/B,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,sBAAsB,CAAC;AAEvE,MAAM,WAAW,mBAAmB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,eAAe,CAAC,EAAE,OAAO,CAAC;CAC7B;AAMD;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAsB3F;AAMD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BjH;AAMD;;;GAGG;AACH,wBAAsB,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CA8J9G"}

package/dist/cli.js

@@ -13384,9 +13384,10 @@ var __webpack_exports__ = {};
                 type: "auth_invalid",
                 message
             }),
-        refreshFailed: (message)=>({
+        refreshFailed: (message, status)=>({
                 type: "token_refresh_failed",
-                message
+                message,
+                status
             })
     };
     const createAppError = {
@@ -13600,6 +13601,19 @@ var __webpack_exports__ = {};
                 return "An unknown error occurred";
         }
     }
+    function getErrorCauseMessage(error) {
+        if ("object" != typeof error || null === error || !("cause" in error)) return null;
+        const cause = error.cause;
+        if (null == cause) return null;
+        const message = errors_getErrorMessage(cause);
+        const code = "object" == typeof cause && null !== cause && "code" in cause && "string" == typeof cause.code ? cause.code : null;
+        if (code && !message.includes(code)) return `${message} (${code})`;
+        return message;
+    }
+    function logErrorCause(error, ui) {
+        const causeMessage = getErrorCauseMessage(error);
+        if (causeMessage) ui.verbose(`Cause: ${causeMessage}`);
+    }
     const external_module_namespaceObject = require("module");
     const requireFromHere = (0, external_module_namespaceObject.createRequire)(__filename);
     const GIT_CREDENTIAL_HELPER_FILENAME = "anvil-credential-helper.cjs";
@@ -13820,6 +13834,76 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
     function getAuthFilePath(gitDir) {
         return external_path_default().join(gitDir, "anvil-auth.json");
     }
+    const AUTH_FILE_LOCK_DEFAULTS = {
+        staleMs: 30000,
+        timeoutMs: 60000,
+        retryDelayMs: 100,
+        heartbeatMs: 5000
+    };
+    function git_auth_delay(ms) {
+        return new Promise((resolve)=>setTimeout(resolve, ms));
+    }
+    async function acquireAuthFileLock(lockPath, options) {
+        const deadline = Date.now() + options.timeoutMs;
+        while(true){
+            try {
+                const handle = await external_fs_.promises.open(lockPath, "wx", 384);
+                try {
+                    await handle.writeFile(JSON.stringify({
+                        pid: process.pid,
+                        acquiredAt: new Date().toISOString()
+                    }));
+                } finally{
+                    await handle.close();
+                }
+                return;
+            } catch (e) {
+                if ("EEXIST" !== e.code) throw e;
+            }
+            try {
+                const lockStat = await external_fs_.promises.stat(lockPath);
+                if (Date.now() - lockStat.mtimeMs > options.staleMs) {
+                    await external_fs_.promises.rm(lockPath, {
+                        force: true
+                    });
+                    continue;
+                }
+            } catch  {
+                continue;
+            }
+            if (Date.now() >= deadline) throw new Error(`Timed out waiting for the Anvil auth file lock at ${lockPath}`);
+            await git_auth_delay(options.retryDelayMs);
+        }
+    }
+    async function withRepoAuthFileLock(repoPath, fn, options) {
+        const gitDir = await getRepositoryGitDir(repoPath);
+        const lockPath = `${getAuthFilePath(gitDir)}.lock`;
+        const lockOptions = {
+            ...AUTH_FILE_LOCK_DEFAULTS,
+            ...options
+        };
+        await external_fs_.promises.mkdir(external_path_default().dirname(lockPath), {
+            recursive: true
+        });
+        await acquireAuthFileLock(lockPath, lockOptions);
+        const heartbeat = startAuthFileLockHeartbeat(lockPath, lockOptions.heartbeatMs);
+        try {
+            return await fn();
+        } finally{
+            clearInterval(heartbeat);
+            await external_fs_.promises.rm(lockPath, {
+                force: true
+            });
+        }
+    }
+    function startAuthFileLockHeartbeat(lockPath, heartbeatMs) {
+        const heartbeat = setInterval(()=>{
+            const now = new Date();
+            external_fs_.promises.utimes(lockPath, now, now).catch(()=>{});
+        }, heartbeatMs);
+        heartbeat.unref();
+        return heartbeat;
+    }
     function decodeKey(b64key) {
         const key = Buffer.from(b64key, "base64");
         if (32 !== key.length) throw new Error("Encryption key must be a base64-encoded 32-byte key");
@@ -13864,10 +13948,19 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
             recursive: true
         });
         const authJson = JSON.stringify(auth, null, 2);
-        await external_fs_.promises.writeFile(authFilePath, encrypt(authJson, encryptionKey), {
-            mode: 384
-        });
-        await external_fs_.promises.chmod(authFilePath, 448);
+        const tempFilePath = `${authFilePath}.tmp-${external_node_crypto_default().randomBytes(6).toString("hex")}`;
+        try {
+            await external_fs_.promises.writeFile(tempFilePath, encrypt(authJson, encryptionKey), {
+                mode: 384
+            });
+            await external_fs_.promises.chmod(tempFilePath, 448);
+            await external_fs_.promises.rename(tempFilePath, authFilePath);
+        } catch (e) {
+            await external_fs_.promises.rm(tempFilePath, {
+                force: true
+            });
+            throw e;
+        }
         await git.raw([
             "config",
             "--local",
@@ -13876,7 +13969,7 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
         ]);
         return authFilePath;
     }
-    const readAuthFromRepo = async (repoPath)=>{
+    const git_auth_readAuthFromRepo = async (repoPath)=>{
         const git = esm_default(repoPath);
         const gitDir = await getRepositoryGitDir(repoPath, git);
         const authFilePath = getAuthFilePath(gitDir);
@@ -13889,12 +13982,13 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
         return resolveAnvilUrl();
     }
     const ANVIL_SYNC_CLIENT_ID = "anvil-sync";
+    const REFRESH_REQUEST_TIMEOUT_MS = 12000;
     let inMemoryAuth = null;
     function authMatches(auth, anvilUrl, username) {
         return auth.anvilUrl === normalizeAnvilUrl(anvilUrl) && (!username || auth.username === username);
     }
     let repoContext = null;
-    function setRepoContext(repoPath) {
+    function auth_setRepoContext(repoPath) {
         repoContext = repoPath;
     }
     const inFlightRefreshes = new Map();
@@ -13917,7 +14011,7 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
             throw errors_createAuthError.invalid(`Network error: ${e.message}`);
         }
     }
-    async function refreshAccessToken(refreshToken, anvilUrl = getDefaultAnvilUrl(), clientId = ANVIL_SYNC_CLIENT_ID) {
+    async function refreshAccessToken(refreshToken, anvilUrl = getDefaultAnvilUrl(), clientId = ANVIL_SYNC_CLIENT_ID, options) {
         try {
             const tokenResponse = await fetch(`${anvilUrl}/oauth/token`, {
                 method: "POST",
@@ -13928,11 +14022,12 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
                     grant_type: "refresh_token",
                     refresh_token: refreshToken,
                     client_id: clientId
-                })
+                }),
+                signal: AbortSignal.timeout(options?.timeoutMs ?? REFRESH_REQUEST_TIMEOUT_MS)
             });
             if (!tokenResponse.ok) {
                 const errorText = await tokenResponse.text();
-                throw errors_createAuthError.refreshFailed(`Failed to refresh token: ${tokenResponse.status} ${errorText}`);
+                throw errors_createAuthError.refreshFailed(`Failed to refresh token: ${tokenResponse.status} ${errorText}`, tokenResponse.status);
             }
             const tokenData = await tokenResponse.json();
             return tokenData;
@@ -13944,22 +14039,21 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
     async function hasTokensForUrl(anvilUrl, username) {
         if (inMemoryAuth) return authMatches(inMemoryAuth, anvilUrl, username);
         {
-            const repoAuth = repoContext ? await readAuthFromRepo(repoContext) : void 0;
+            const repoAuth = repoContext ? await git_auth_readAuthFromRepo(repoContext) : void 0;
             if (repoAuth && authMatches(repoAuth, anvilUrl, username)) return true;
             return hasTokens(anvilUrl, username);
         }
     }
-    async function auth_getValidAuthToken(anvilUrl = getDefaultAnvilUrl(), username) {
+    async function auth_getValidAuthToken(anvilUrl = getDefaultAnvilUrl(), username, options) {
         const normalized = normalizeAnvilUrl(anvilUrl);
         const source = await resolveTokenSource(normalized, username);
         const tokens = getSourceTokens(source);
         if (!tokens.authToken && !tokens.refreshToken) throw errors_createAuthError.required("Not logged in. Please log in first.");
-        const isExpired = null !== tokens.authTokenExpiresAt && tokens.authTokenExpiresAt <= Math.floor(Date.now() / 1000) + 60;
-        if (tokens.refreshToken && isExpired) {
+        if (tokens.refreshToken && isAccessTokenExpired(tokens)) {
             const refreshKey = getRefreshKey(normalized, username, source, tokens.refreshToken);
             const existingRefresh = inFlightRefreshes.get(refreshKey);
             if (existingRefresh) return existingRefresh;
-            const refreshPromise = refreshAndStoreAccessToken(normalized, username, source, tokens.refreshToken).finally(()=>{
+            const refreshPromise = refreshAndStoreAccessToken(normalized, username, source, tokens.refreshToken, options).finally(()=>{
                 inFlightRefreshes.delete(refreshKey);
             });
             inFlightRefreshes.set(refreshKey, refreshPromise);
@@ -13973,7 +14067,7 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
             type: "memory",
             auth: inMemoryAuth
         };
-        const repoAuth = repoContext ? await readAuthFromRepo(repoContext) : void 0;
+        const repoAuth = repoContext ? await git_auth_readAuthFromRepo(repoContext) : void 0;
         if (repoAuth && authMatches(repoAuth, normalizedUrl, username)) return {
             type: "repo",
             auth: repoAuth,
@@ -13989,6 +14083,9 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
     function getSourceTokens(source) {
         return "store" === source.type ? source.tokens : source.auth.tokens;
     }
+    function isAccessTokenExpired(tokens) {
+        return null !== tokens.authTokenExpiresAt && tokens.authTokenExpiresAt <= Math.floor(Date.now() / 1000) + 60;
+    }
     function getStoreAccountUsername(normalizedUrl, username, refreshToken) {
         if (username) return username;
         const urlTokens = getUrlTokens(normalizedUrl);
@@ -14007,11 +14104,43 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
                 return `store:${normalizedUrl}:${source.accountUsername ?? username ?? refreshToken}`;
         }
     }
-    async function refreshAndStoreAccessToken(normalizedUrl, username, source, refreshToken) {
+    async function refreshAndStoreAccessToken(normalizedUrl, username, source, refreshToken, options) {
+        if ("repo" === source.type) return refreshRepoAuthTokens(source.repoPath, {
+            anvilUrl: normalizedUrl,
+            username,
+            auth: source.auth,
+            refreshToken,
+            lock: options?.lock,
+            requestTimeoutMs: options?.requestTimeoutMs
+        });
+        return performTokenRefresh(normalizedUrl, username, source, refreshToken, options?.requestTimeoutMs);
+    }
+    async function refreshRepoAuthTokens(repoPath, options) {
+        const normalizedUrl = normalizeAnvilUrl(options.anvilUrl);
+        return withRepoAuthFileLock(repoPath, async ()=>{
+            let auth = options.auth;
+            let refreshToken = options.refreshToken;
+            const current = await git_auth_readAuthFromRepo(repoPath);
+            if (current && authMatches(current, normalizedUrl, options.username)) {
+                if (current.tokens.authToken && !isAccessTokenExpired(current.tokens)) return current.tokens.authToken;
+                auth = current;
+                refreshToken = current.tokens.refreshToken ?? refreshToken;
+            }
+            if (!auth || !refreshToken) throw errors_createAuthError.required("No repo auth tokens available to refresh.");
+            return performTokenRefresh(normalizedUrl, options.username, {
+                type: "repo",
+                auth,
+                repoPath
+            }, refreshToken, options.requestTimeoutMs);
+        }, options.lock);
+    }
+    async function performTokenRefresh(normalizedUrl, username, source, refreshToken, requestTimeoutMs) {
         try {
             const tokens = getSourceTokens(source);
             const clientId = tokens.clientId ?? ANVIL_SYNC_CLIENT_ID;
-            const tokenData = await refreshAccessToken(refreshToken, normalizedUrl, clientId);
+            const tokenData = await refreshAccessToken(refreshToken, normalizedUrl, clientId, {
+                timeoutMs: requestTimeoutMs
+            });
             const newTokens = {
                 authToken: tokenData.access_token,
                 refreshToken: tokenData.refresh_token,
@@ -14033,12 +14162,28 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
             }
             return tokenData.access_token;
         } catch (e) {
+            if ("repo" === source.type && isRefreshTokenRejection(e)) await clearRepoAuthTokens(source.repoPath, source.auth).catch(()=>{});
             await clearTokensForAccount(normalizedUrl, username, refreshToken);
             throw e;
         }
     }
+    function isRefreshTokenRejection(e) {
+        const error = e;
+        return error?.type === "token_refresh_failed" && (400 === error.status || 401 === error.status);
+    }
+    async function clearRepoAuthTokens(repoPath, auth) {
+        const encryptionKey = process.env["ANVIL_AUTH_FILE_ENCRYPTION_KEY"];
+        if (!encryptionKey) return;
+        auth.tokens = {
+            authToken: null,
+            refreshToken: null,
+            authTokenExpiresAt: null,
+            clientId: auth.tokens.clientId
+        };
+        await writeAuthToFile(repoPath, auth, encryptionKey);
+    }
     async function clearTokensForAccount(url, username, refreshToken) {
-        if (inMemoryAuth || repoContext && await readAuthFromRepo(repoContext)) return;
+        if (inMemoryAuth || repoContext && await git_auth_readAuthFromRepo(repoContext)) return;
         {
             const normalized = normalizeAnvilUrl(url);
             if (username) deleteAccountTokens(normalized, username);
@@ -14068,7 +14213,7 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
             loggedOut: false,
             message: "Cannot log out when using in-memory auth tokens"
         };
-        if (repoContext && await readAuthFromRepo(repoContext)) return {
+        if (repoContext && await git_auth_readAuthFromRepo(repoContext)) return {
             loggedOut: false,
             message: "Cannot log out when using auth tokens stored in the local git config."
         };
@@ -14099,7 +14244,7 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
             inMemoryAuth.username
         ] : [];
         {
-            const repoAuth = repoContext ? await readAuthFromRepo(repoContext) : void 0;
+            const repoAuth = repoContext ? await git_auth_readAuthFromRepo(repoContext) : void 0;
             if (repoAuth && authMatches(repoAuth, url)) return [
                 repoAuth.username
             ];
@@ -14111,7 +14256,7 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
             inMemoryAuth.anvilUrl
         ];
         {
-            const repoAuth = repoContext ? await readAuthFromRepo(repoContext) : void 0;
+            const repoAuth = repoContext ? await git_auth_readAuthFromRepo(repoContext) : void 0;
             if (repoAuth) return [
                 repoAuth.anvilUrl
             ];
@@ -16440,6 +16585,45 @@ Promise.resolve(executeGitCredentialOperation(process.argv[2] || "get", {
         };
     }
     const validatePython_requireFromHere = (0, external_module_namespaceObject.createRequire)(__filename);
+    const DEFAULT_PYRIGHT_MAX_OLD_SPACE_MB = 768;
+    const DEFAULT_PYRIGHT_TIMEOUT_MS = 300000;
+    function parsePositiveIntegerEnv(env, name, defaultValue) {
+        const rawValue = env[name];
+        if (void 0 === rawValue || "" === rawValue) return {
+            value: defaultValue
+        };
+        if (!/^\d+$/.test(rawValue) || Number(rawValue) <= 0 || !Number.isSafeInteger(Number(rawValue))) return {
+            error: `${name} must be a positive integer`
+        };
+        return {
+            value: Number(rawValue)
+        };
+    }
+    function pyrightChildNodeOptions(nodeOptions, maxOldSpaceMb) {
+        const maxOldSpaceFlag = "--max[-_]old[-_]space[-_]size";
+        const withoutEqualsForm = (nodeOptions ?? "").replace(new RegExp(`(^|\\s)${maxOldSpaceFlag}=\\S+`, "g"), "$1");
+        const withoutSeparateForm = withoutEqualsForm.replace(new RegExp(`(^|\\s)${maxOldSpaceFlag}\\s+\\S+`, "g"), "$1");
+        return [
+            withoutSeparateForm.trim(),
+            `--max-old-space-size=${maxOldSpaceMb}`
+        ].filter(Boolean).join(" ");
+    }
+    function semanticProcessFailure(message) {
+        return {
+            ok: false,
+            message: "Python semantic validation could not be run",
+            issues: [
+                {
+                    path: "root",
+                    message,
+                    severity: "error"
+                }
+            ]
+        };
+    }
+    function isV8HeapOutOfMemory(stderr) {
+        return /(?:JavaScript heap out of memory|Reached heap limit|Ineffective mark-compacts near heap limit)/i.test(stderr);
+    }
     function resolveBundledAnvilPyright() {
         try {
             return {
@@ -16707,8 +16891,13 @@ print(json.dumps({"issues": issues}))
         };
     }
     function validatePythonWithPyright(appRoot, options = {}) {
+        const env = options.env ?? process.env;
+        const maxOldSpace = parsePositiveIntegerEnv(env, "ANVIL_PYRIGHT_MAX_OLD_SPACE_MB", DEFAULT_PYRIGHT_MAX_OLD_SPACE_MB);
+        if ("error" in maxOldSpace) return semanticProcessFailure(maxOldSpace.error);
+        const timeout = parsePositiveIntegerEnv(env, "ANVIL_PYRIGHT_TIMEOUT_MS", DEFAULT_PYRIGHT_TIMEOUT_MS);
+        if ("error" in timeout) return semanticProcessFailure(timeout.error);
         const pyright = void 0 === options.pyright ? findAnvilPyright({
-            env: options.env
+            env
         }) : options.pyright;
         if (!pyright) return {
             ok: false,
@@ -16731,30 +16920,19 @@ print(json.dumps({"issues": issues}))
             ...options.files ?? []
         ], {
             encoding: "utf8",
-            maxBuffer: 10485760
+            env: {
+                ...env,
+                NODE_OPTIONS: pyrightChildNodeOptions(env.NODE_OPTIONS, maxOldSpace.value)
+            },
+            maxBuffer: 10485760,
+            timeout: timeout.value
         });
-        if (result.error) return {
-            ok: false,
-            message: "Python semantic validation could not be run",
-            issues: [
-                {
-                    path: "root",
-                    message: result.error.message,
-                    severity: "error"
-                }
-            ]
-        };
-        if (0 !== result.status && 1 !== result.status) return {
-            ok: false,
-            message: "Python semantic validation could not be run",
-            issues: [
-                {
-                    path: "root",
-                    message: result.stderr.trim() || `anvil-pyright exited with status ${result.status}`,
-                    severity: "error"
-                }
-            ]
-        };
+        if (result.error) {
+            if ("ETIMEDOUT" === result.error.code) return semanticProcessFailure(`anvil-pyright exceeded the ${timeout.value} ms timeout. Increase ANVIL_PYRIGHT_TIMEOUT_MS or validate a smaller target.`);
+            return semanticProcessFailure(result.error.message);
+        }
+        if (isV8HeapOutOfMemory(result.stderr)) return semanticProcessFailure(`anvil-pyright ran out of memory with a ${maxOldSpace.value} MB heap. Increase ANVIL_PYRIGHT_MAX_OLD_SPACE_MB or validate a smaller target.`);
+        if (0 !== result.status && 1 !== result.status) return semanticProcessFailure(result.stderr.trim() || `anvil-pyright exited with status ${result.status}`);
         let parsed;
         try {
             parsed = JSON.parse(result.stdout.trim());
@@ -21577,7 +21755,7 @@ print(json.dumps({"issues": issues}))
         ])).trim();
         const resolvedGitCommonDir = external_path_default().isAbsolute(rawGitCommonDir) ? rawGitCommonDir : external_path_default().resolve(inputPath, rawGitCommonDir);
         const gitCommonDir = external_fs_default().realpathSync(resolvedGitCommonDir);
-        setRepoContext(repoPath);
+        auth_setRepoContext(repoPath);
         const remotes = (await git.getRemotes(true)).map(detectAnvilRemote);
         const anvilRemotes = remotes.filter((remote)=>remote.appId && remote.anvilUrl && "https" === remote.transport);
         const findings = [];
@@ -21703,7 +21881,7 @@ print(json.dumps({"issues": issues}))
         const repoPath = options.repoPath ?? deps.cwd();
         if ("get" !== operation) return null;
         if (!request.protocol || !request.host) return null;
-        setRepoContext(repoPath);
+        auth_setRepoContext(repoPath);
         const appId = parseAppIdFromGitPath(request.path);
         if (!appId) return null;
         const requestUrl = normalizeAnvilUrl(`${request.protocol}://${request.host}`);
@@ -21785,7 +21963,7 @@ print(json.dumps({"issues": issues}))
     async function watch(repoPath, appId, options = {}) {
         const { anvilUrl = DEFAULT_ANVIL_URL, gitUrl = anvilUrl, stagedOnly = false, username } = options;
         repoPath = external_path_default().resolve(repoPath);
-        setRepoContext(repoPath);
+        auth_setRepoContext(repoPath);
         const storedEnvPid = options.environment?.envPid ? void 0 : await readEnvironmentPid(repoPath);
         const environment = options.environment ?? (storedEnvPid ? {
             envPid: storedEnvPid
@@ -22573,7 +22751,7 @@ print(json.dumps({"issues": issues}))
             process.exit(1);
         }
         const { path: repoPath = process.cwd(), appid: explicitAppId, useFirst = false, stagedOnly = false, dependencyWatch = true, autoMode = false, url: explicitUrl, user: explicitUsername, open: openAfterValidation = false } = options;
-        setRepoContext(repoPath);
+        auth_setRepoContext(repoPath);
         try {
             const validationResult = await validateAnvilApp(repoPath);
             if (validationResult.appName) logger_logger.info(external_chalk_default().green("Anvil app: ") + external_chalk_default().bold(validationResult.appName));
@@ -22780,6 +22958,7 @@ print(json.dumps({"issues": issues}))
                 logger_logger.success("Logged in as " + external_chalk_default().bold(result.email));
             } catch (e) {
                 logger_logger.error("Error: " + e.message);
+                logErrorCause(e, logger_logger);
                 process.exit(1);
             }
         });
@@ -23358,6 +23537,7 @@ print(json.dumps({"issues": issues}))
                 await runConfigureFlow(version, configure_defaultDeps);
             } catch (e) {
                 logger_logger.error("Error: " + errors_getErrorMessage(e));
+                logErrorCause(e, logger_logger);
                 process.exit(1);
             }
         });

package/dist/commands/configure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"configure.d.ts","sourceRoot":"","sources":["../../src/commands/configure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAKnC,MAAM,WAAW,sBAAsB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;CAC9B;AAcD,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAC1E,eAAO,MAAM,oBAAoB,8BAA8B,CAAC;AAShE,wBAAsB,wBAAwB,CAC1C,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,SAAS,MAAM,EAAE,EACnC,EAAE,EAAE,IAAI,CAAC,OAAO,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC,GAC3E,OAAO,CAAC,MAAM,CAAC,CAkEjB;AAED,wBAAsB,yBAAyB,CAC3C,cAAc,EAAE,MAAM,EACtB,mBAAmB,GAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAoB,GACrE,OAAO,CAAC,sBAAsB,CAAC,CAuBjC;AAoGD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAYhF"}
+{"version":3,"file":"configure.d.ts","sourceRoot":"","sources":["../../src/commands/configure.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYpC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAKnC,MAAM,WAAW,sBAAsB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,OAAO,GAAG,IAAI,CAAC;CAC9B;AAcD,eAAO,MAAM,+BAA+B,6BAA6B,CAAC;AAC1E,eAAO,MAAM,oBAAoB,8BAA8B,CAAC;AAShE,wBAAsB,wBAAwB,CAC1C,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,SAAS,MAAM,EAAE,EACnC,EAAE,EAAE,IAAI,CAAC,OAAO,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC,GAC3E,OAAO,CAAC,MAAM,CAAC,CAkEjB;AAED,wBAAsB,yBAAyB,CAC3C,cAAc,EAAE,MAAM,EACtB,mBAAmB,GAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAoB,GACrE,OAAO,CAAC,sBAAsB,CAAC,CAuBjC;AAoGD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAahF"}

package/dist/commands/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsC3D"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuC3D"}

package/dist/commands/modelToken.d.ts

@@ -0,0 +1,33 @@
+import { getValidAuthToken } from "../services/auth";
+import { readAuthFromRepo } from "../services/git-auth";
+export interface ModelTokenDeps {
+    getValidAuthToken: typeof getValidAuthToken;
+    readAuthFromRepo: typeof readAuthFromRepo;
+    cwd: () => string;
+}
+export interface ModelTokenOptions {
+    deps?: ModelTokenDeps;
+    repoPath?: string;
+    /** How long to wait for the cross-process auth file lock; defaults to MODEL_TOKEN_LOCK_TIMEOUT_MS. */
+    lockTimeoutMs?: number;
+}
+/**
+ * Codex waits a bounded time for a command-based auth provider (the agent-host
+ * configures timeout_ms = 30000), so the helper must give up on the auth file
+ * lock well before then and fail loudly rather than be killed mid-wait.
+ */
+export declare const MODEL_TOKEN_LOCK_TIMEOUT_MS = 12000;
+/**
+ * Resolve a valid access token for the repo-local auth session. Refreshes a
+ * stale access token (persisting the rotated refresh token) under the
+ * cross-process auth file lock.
+ */
+export declare function getModelToken(options?: ModelTokenOptions): Promise<string>;
+/**
+ * Model-token helper entry point, invoked by the generated
+ * anvil-model-token-helper.cjs script: print a valid access token (and nothing
+ * else) to stdout. Any failure propagates so the helper script can exit
+ * non-zero with a message on stderr.
+ */
+export declare function executeModelTokenOperation(options?: ModelTokenOptions): Promise<void>;
+//# sourceMappingURL=modelToken.d.ts.map

package/dist/commands/modelToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelToken.d.ts","sourceRoot":"","sources":["../../src/commands/modelToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAkB,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,MAAM,WAAW,cAAc;IAC3B,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,GAAG,EAAE,MAAM,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAC9B,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sGAAsG;IACtG,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AAIH,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAQlD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBpF;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/F"}

package/dist/errors.d.ts

@@ -2,6 +2,7 @@
  * Typed error definitions for anvil-cli.
  * Uses discriminated unions for type-safe error handling.
  */
+import type { Logger } from "./logger";
 export type AuthError = {
     type: "auth_required";
     message?: string;
@@ -14,6 +15,7 @@ export type AuthError = {
 } | {
     type: "token_refresh_failed";
     message?: string;
+    status?: number;
 };
 export type AppError = {
     type: "app_not_found";
@@ -102,7 +104,7 @@ export declare const createAuthError: {
     required: (message?: string) => AuthError;
     expired: (message?: string) => AuthError;
     invalid: (message?: string) => AuthError;
-    refreshFailed: (message?: string) => AuthError;
+    refreshFailed: (message?: string, status?: number) => AuthError;
 };
 export declare const createAppError: {
     notFound: (appId: string) => AppError;
@@ -148,4 +150,12 @@ export declare function isNetworkError(error: AnvilError): error is NetworkError
 export declare function isValidationError(error: AnvilError): error is ValidationError;
 export declare function isSaveError(error: AnvilError): error is SaveError;
 export declare function getErrorMessage(error: unknown): string;
+/**
+ * Return the immediate underlying cause of an error in a form suitable for
+ * verbose CLI output. Native fetch errors use `cause` for the useful network
+ * or TLS failure while exposing only "fetch failed" as their main message.
+ */
+export declare function getErrorCauseMessage(error: unknown): string | null;
+/** Log useful nested error details without adding noise to normal CLI output. */
+export declare function logErrorCause(error: unknown, ui: Pick<Logger, "verbose">): void;
 //# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,MAAM,MAAM,SAAS,GACf;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAGzD,MAAM,MAAM,QAAQ,GACd;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAG9D,MAAM,MAAM,SAAS,GACf;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAGvD,MAAM,MAAM,QAAQ,GACd;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAGpD,MAAM,MAAM,YAAY,GAClB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAG7C,MAAM,MAAM,eAAe,GACrB;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAG9D,MAAM,MAAM,SAAS,GACf;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,wBAAwB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,kBAAkB,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAGxD,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,GAAG,eAAe,GAAG,SAAS,CAAC;AAGlH,eAAO,MAAM,eAAe;yBACH,MAAM,KAAG,SAAS;wBACnB,MAAM,KAAG,SAAS;wBAClB,MAAM,KAAG,SAAS;8BACZ,MAAM,KAAG,SAAS;CAC/C,CAAC;AAEF,eAAO,MAAM,cAAc;sBACL,MAAM,KAAG,QAAQ;0BACb,MAAM,KAAG,QAAQ;qBACtB,MAAM,WAAW,MAAM,KAAG,QAAQ;CACtD,CAAC;AAEF,eAAO,MAAM,eAAe;6BACC,MAAM,KAAG,SAAS;6BAClB,MAAM,SAAS,MAAM,KAAG,SAAS;2BACnC,MAAM,KAAG,SAAS;yBACpB,MAAM,KAAG,SAAS;uBACpB,MAAM,SAAS,MAAM,KAAG,SAAS;wBAClC,SAAS;gCACC,MAAM,EAAE,KAAG,SAAS;CACnD,CAAC;AAEF,eAAO,MAAM,cAAc;2BACA,MAAM,KAAG,QAAQ;6BACf,MAAM,WAAW,MAAM,KAAG,QAAQ;2BACpC,MAAM,KAAG,QAAQ;CAC3C,CAAC;AAEF,eAAO,MAAM,kBAAkB;uBACR,MAAM,KAAG,YAAY;qBACvB,MAAM,WAAW,MAAM,KAAG,YAAY;yBAClC,MAAM,KAAG,YAAY;CAC7C,CAAC;AAEF,eAAO,MAAM,qBAAqB;uBACX,MAAM,WAAW,MAAM,KAAG,eAAe;wBACxC,MAAM,KAAG,eAAe;wBACxB,MAAM,WAAW,MAAM,KAAG,eAAe;CAChE,CAAC;AAEF,eAAO,MAAM,eAAe;+BACG,MAAM,cAAc,OAAO,KAAG,SAAS;+BAKvC,MAAM,iBAAiB,MAAM,KAAG,SAAS;0BAKhD,SAAS;kCACC,MAAM,KAAG,SAAS;CACnD,CAAC;AAsBF,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAMhE;AAGD,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,SAAS,CAEjE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,QAAQ,CAE/D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,SAAS,CAUjE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,QAAQ,CAE/D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,YAAY,CAEvE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,eAAe,CAE7E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,SAAS,CAEjE;AAGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAyFtD"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAGvC,MAAM,MAAM,SAAS,GACf;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAG1E,MAAM,MAAM,QAAQ,GACd;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAG9D,MAAM,MAAM,SAAS,GACf;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAGvD,MAAM,MAAM,QAAQ,GACd;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAGpD,MAAM,MAAM,YAAY,GAClB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAG7C,MAAM,MAAM,eAAe,GACrB;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAG9D,MAAM,MAAM,SAAS,GACf;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,wBAAwB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,kBAAkB,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAGxD,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,GAAG,eAAe,GAAG,SAAS,CAAC;AAGlH,eAAO,MAAM,eAAe;yBACH,MAAM,KAAG,SAAS;wBACnB,MAAM,KAAG,SAAS;wBAClB,MAAM,KAAG,SAAS;8BACZ,MAAM,WAAW,MAAM,KAAG,SAAS;CAChE,CAAC;AAEF,eAAO,MAAM,cAAc;sBACL,MAAM,KAAG,QAAQ;0BACb,MAAM,KAAG,QAAQ;qBACtB,MAAM,WAAW,MAAM,KAAG,QAAQ;CACtD,CAAC;AAEF,eAAO,MAAM,eAAe;6BACC,MAAM,KAAG,SAAS;6BAClB,MAAM,SAAS,MAAM,KAAG,SAAS;2BACnC,MAAM,KAAG,SAAS;yBACpB,MAAM,KAAG,SAAS;uBACpB,MAAM,SAAS,MAAM,KAAG,SAAS;wBAClC,SAAS;gCACC,MAAM,EAAE,KAAG,SAAS;CACnD,CAAC;AAEF,eAAO,MAAM,cAAc;2BACA,MAAM,KAAG,QAAQ;6BACf,MAAM,WAAW,MAAM,KAAG,QAAQ;2BACpC,MAAM,KAAG,QAAQ;CAC3C,CAAC;AAEF,eAAO,MAAM,kBAAkB;uBACR,MAAM,KAAG,YAAY;qBACvB,MAAM,WAAW,MAAM,KAAG,YAAY;yBAClC,MAAM,KAAG,YAAY;CAC7C,CAAC;AAEF,eAAO,MAAM,qBAAqB;uBACX,MAAM,WAAW,MAAM,KAAG,eAAe;wBACxC,MAAM,KAAG,eAAe;wBACxB,MAAM,WAAW,MAAM,KAAG,eAAe;CAChE,CAAC;AAEF,eAAO,MAAM,eAAe;+BACG,MAAM,cAAc,OAAO,KAAG,SAAS;+BAKvC,MAAM,iBAAiB,MAAM,KAAG,SAAS;0BAKhD,SAAS;kCACC,MAAM,KAAG,SAAS;CACnD,CAAC;AAsBF,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAMhE;AAGD,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,SAAS,CAEjE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,QAAQ,CAE/D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,SAAS,CAUjE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,QAAQ,CAE/D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,YAAY,CAEvE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,eAAe,CAE7E;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,IAAI,SAAS,CAEjE;AAGD,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAyFtD;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAoBlE;AAED,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAI,CAK/E"}