@arizeai/phoenix-cli 1.8.1 → 1.9.1

package/build/setup/deps/docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.js","sourceRoot":"","sources":["../../../src/setup/deps/docs.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,6EAA6E;AAC7E,6EAA6E;AAC7E,6CAA6C;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAqC7D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAA4B;IAE5B,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,cAAc,EAAE,EAAE,SAAS,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,kBAAkB,CAAC;IACrC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;QACxD,SAAS;QACT,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe;QAC3C,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC;IACH,OAAO;QACL,SAAS;QACT,SAAS;QACT,OAAO,EAAE,SAAS,CAAC,MAAM;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,gBAAgB,EAAE,OAAO;QACzB,cAAc,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;KAC3E,CAAC;AACJ,CAAC"}

package/build/setup/deps/index.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Dependency seam for setup.
+ *
+ * Every side effect setup performs — env access, network, subprocesses,
+ * clipboard, time — goes through `SetupDeps`. No other module under `setup/`
+ * may touch `process.env`, `fetch`, `child_process`, or the clipboard
+ * directly. This is what makes setup unit-testable with fakes.
+ *
+ * Each capability's contract (and, where it is a few lines of system glue,
+ * its real implementation) lives in its own module in this directory. This
+ * barrel re-exports the contracts so consumers address the seam as one
+ * module; it exports types only, so importing it can never form a runtime
+ * cycle. The wiring lives in `buildDefaultDeps.ts`.
+ */
+import type { ClipboardWriter } from "./clipboard.js";
+import type { Clock } from "./clock.js";
+import type { RunContext } from "./context.js";
+import type { DocsFetcher } from "./docs.js";
+import type { OAuthLogin } from "./oauthLogin.js";
+import type { PhoenixClientFactory } from "./phoenixClient.js";
+import type { ProcessRunner } from "./processes.js";
+import type { Prompter } from "./prompter.js";
+export interface SetupDeps {
+    /** Ambient facts of the run — data steps read, never call. */
+    context: RunContext;
+    /** Real: clack-backed ui/clackPrompter.ts; tests: scripted answers. */
+    prompter: Prompter;
+    processes: ProcessRunner;
+    clock: Clock;
+    writeClipboard: ClipboardWriter;
+    /** Typed Phoenix client; tests inject a fake transport beneath it. */
+    createClient: PhoenixClientFactory;
+    fetchDocs: DocsFetcher;
+    /** Browser OAuth login for minting an API key; tests script outcomes. */
+    oauthLogin: OAuthLogin;
+}
+export type { ClipboardWriter } from "./clipboard.js";
+export type { Clock } from "./clock.js";
+export type { RunContext } from "./context.js";
+export { unknownWorkflowWarning } from "./docs.js";
+export type { DocsFetcher, DocsPrefetchOptions, DocsPrefetchResult, } from "./docs.js";
+export type { OAuthLogin, OAuthLoginArgs, OAuthLoginOutcome, } from "./oauthLogin.js";
+export type { PhoenixClientArgs, PhoenixClientFactory } from "./phoenixClient.js";
+export type { CommandSpec, ExecResult, ProcessRunner } from "./processes.js";
+export type { Prompter, SelectOption } from "./prompter.js";
+//# sourceMappingURL=index.d.ts.map

package/build/setup/deps/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/setup/deps/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,WAAW,SAAS;IACxB,8DAA8D;IAC9D,OAAO,EAAE,UAAU,CAAC;IACpB,uEAAuE;IACvE,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,aAAa,CAAC;IACzB,KAAK,EAAE,KAAK,CAAC;IACb,cAAc,EAAE,eAAe,CAAC;IAChC,sEAAsE;IACtE,YAAY,EAAE,oBAAoB,CAAC;IACnC,SAAS,EAAE,WAAW,CAAC;IACvB,yEAAyE;IACzE,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AACrC,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,QAAQ,CAAC;AAChD,YAAY,EACV,WAAW,EACX,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,QAAQ,CAAC;AAChB,YAAY,EACV,UAAU,EACV,cAAc,EACd,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC/E,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC1E,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC"}

package/build/setup/deps/index.js

@@ -0,0 +1,16 @@
+/**
+ * Dependency seam for setup.
+ *
+ * Every side effect setup performs — env access, network, subprocesses,
+ * clipboard, time — goes through `SetupDeps`. No other module under `setup/`
+ * may touch `process.env`, `fetch`, `child_process`, or the clipboard
+ * directly. This is what makes setup unit-testable with fakes.
+ *
+ * Each capability's contract (and, where it is a few lines of system glue,
+ * its real implementation) lives in its own module in this directory. This
+ * barrel re-exports the contracts so consumers address the seam as one
+ * module; it exports types only, so importing it can never form a runtime
+ * cycle. The wiring lives in `buildDefaultDeps.ts`.
+ */
+export { unknownWorkflowWarning } from "./docs.js";
+//# sourceMappingURL=index.js.map

package/build/setup/deps/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/setup/deps/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA6BH,OAAO,EAAE,sBAAsB,EAAE,MAAM,QAAQ,CAAC"}

package/build/setup/deps/oauthLogin.d.ts

@@ -0,0 +1,64 @@
+/**
+ * The browser-login capability: an ephemeral OAuth2 Authorization Code +
+ * PKCE flow, used by setup to obtain a short-lived access token so it can
+ * mint an API key on the user's behalf instead of asking them to paste one.
+ *
+ * Contract plus the real, system-backed implementation (the flow is system
+ * glue: an HTTP callback server, a browser launch, and token exchange —
+ * exactly the effects the seam exists to keep out of steps). Tests script
+ * outcomes through a fake.
+ */
+export interface OAuthLoginArgs {
+    /** Normalized origin, no trailing slash. */
+    endpoint: string;
+    /**
+     * Called with the authorization URL before the browser opens, so the user
+     * can complete the login by hand when the launch fails or goes unnoticed.
+     */
+    onAuthorizationUrl: (url: string) => void;
+    /**
+     * The browser could not be launched (no `xdg-open`, a headless container).
+     * The URL was already narrated, so this is a nudge, not a failure.
+     */
+    onBrowserOpenFailed: (detail: string) => void;
+    /** Abandons an unanswered login, yielding a `cancelled` outcome. */
+    signal?: AbortSignal;
+}
+export type OAuthLoginOutcome = {
+    status: "success";
+    accessToken: string;
+    /**
+     * End the grant this login just created, once its token has served its
+     * purpose. Scoped to that grant alone — an existing `px auth login`
+     * session is a separate grant and survives. Best-effort: the tokens
+     * expire on their own regardless.
+     */
+    revoke: () => Promise<void>;
+}
+/** The user declined the consent screen — a choice, not a failure. */
+ | {
+    status: "cancelled";
+} | {
+    status: "error";
+    detail: string;
+};
+export interface OAuthLogin {
+    /**
+     * Whether the instance runs the OAuth2 authorization server. False on any
+     * failure — an unreachable or older server simply keeps the paste lane.
+     */
+    isSupported(endpoint: string): Promise<boolean>;
+    login(args: OAuthLoginArgs): Promise<OAuthLoginOutcome>;
+}
+/**
+ * `apiUrl` is the hidden `--api-url` dev override. It must reach every hop of
+ * the flow: the token this mints is spent against the same override by the
+ * client factory, so an authorization server at a different host would issue a
+ * token the key-minting server rejects. `fetchImpl` is the same transport seam
+ * the Phoenix client takes, so the probe is injectable rather than global.
+ */
+export declare function createSystemOAuthLogin({ apiUrl, fetchImpl, }?: {
+    apiUrl?: string;
+    fetchImpl?: typeof fetch;
+}): OAuthLogin;
+//# sourceMappingURL=oauthLogin.d.ts.map

package/build/setup/deps/oauthLogin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthLogin.d.ts","sourceRoot":"","sources":["../../../src/setup/deps/oauthLogin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,MAAM,WAAW,cAAc;IAC7B,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C;;;OAGG;IACH,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,oEAAoE;IACpE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AACH,sEAAsE;GACpE;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC,MAAM,WAAW,UAAU;IACzB;;;OAGG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACzD;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,MAAM,EACN,SAAiB,GAClB,GAAE;IACD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CACrB,GAAG,UAAU,CAsElB"}

package/build/setup/deps/oauthLogin.js

@@ -0,0 +1,82 @@
+/**
+ * The browser-login capability: an ephemeral OAuth2 Authorization Code +
+ * PKCE flow, used by setup to obtain a short-lived access token so it can
+ * mint an API key on the user's behalf instead of asking them to paste one.
+ *
+ * Contract plus the real, system-backed implementation (the flow is system
+ * glue: an HTTP callback server, a browser launch, and token exchange —
+ * exactly the effects the seam exists to keep out of steps). Tests script
+ * outcomes through a fake.
+ */
+import { OAuthAuthorizationServerMetadataSchema, normalizeEndpoint, revokeOAuthToken, runBrowserLoginFlow, } from "../../oauth.js";
+const SUPPORT_PROBE_TIMEOUT_MS = 5_000;
+/**
+ * `apiUrl` is the hidden `--api-url` dev override. It must reach every hop of
+ * the flow: the token this mints is spent against the same override by the
+ * client factory, so an authorization server at a different host would issue a
+ * token the key-minting server rejects. `fetchImpl` is the same transport seam
+ * the Phoenix client takes, so the probe is injectable rather than global.
+ */
+export function createSystemOAuthLogin({ apiUrl, fetchImpl = fetch, } = {}) {
+    // Resolved once: the probe and the flow must agree on which host they talk
+    // to, and two `??` expressions are two chances to disagree.
+    const apiOrigin = (endpoint) => apiUrl ?? endpoint;
+    return {
+        async isSupported(endpoint) {
+            try {
+                const response = await fetchImpl(new URL(".well-known/oauth-authorization-server", normalizeEndpoint(apiOrigin(endpoint))), { signal: AbortSignal.timeout(SUPPORT_PROBE_TIMEOUT_MS) });
+                if (!response.ok) {
+                    return false;
+                }
+                const document = await response.json();
+                return OAuthAuthorizationServerMetadataSchema.safeParse(document)
+                    .success;
+            }
+            catch {
+                return false;
+            }
+        },
+        async login({ endpoint, onAuthorizationUrl, onBrowserOpenFailed, signal }) {
+            const origin = apiOrigin(endpoint);
+            try {
+                const result = await runBrowserLoginFlow({
+                    endpoint: origin,
+                    onAuthorizationUrl,
+                    onBrowserOpenFailed: (error) => onBrowserOpenFailed(error instanceof Error ? error.message : String(error)),
+                    // No pasted-redirect lane here, unlike `px auth login`. It reads a
+                    // raw readline off stdin, which would both land unannounced in the
+                    // middle of the clack wizard and — because readline in terminal mode
+                    // intercepts Ctrl-C itself — kill the interrupt this login promises
+                    // as its way out. Setup's fallback is pasting an API key, which the
+                    // prompter asks for properly.
+                    allowPastedRedirect: false,
+                    signal,
+                });
+                if (result.status === "cancelled") {
+                    return { status: "cancelled" };
+                }
+                if (result.status === "invalid") {
+                    return { status: "error", detail: result.message };
+                }
+                return {
+                    status: "success",
+                    accessToken: result.tokens.access_token,
+                    revoke: () => revokeOAuthToken({
+                        endpoint: origin,
+                        refreshToken: result.tokens.refresh_token,
+                    }),
+                };
+            }
+            catch (error) {
+                // Every failure — a loopback port that will not bind, a token endpoint
+                // that never answers — is an outcome the wizard falls back from, never
+                // an exception that ends setup.
+                return {
+                    status: "error",
+                    detail: error instanceof Error ? error.message : String(error),
+                };
+            }
+        },
+    };
+}
+//# sourceMappingURL=oauthLogin.js.map

package/build/setup/deps/oauthLogin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthLogin.js","sourceRoot":"","sources":["../../../src/setup/deps/oauthLogin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,sCAAsC,EACtC,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAErB,MAAM,wBAAwB,GAAG,KAAK,CAAC;AA4CvC;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,EACrC,MAAM,EACN,SAAS,GAAG,KAAK,GAClB,GAGG,EAAE;IACJ,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,MAAM,IAAI,QAAQ,CAAC;IAC3D,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,QAAQ;YACxB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,IAAI,GAAG,CACL,wCAAwC,EACxC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CACvC,EACD,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAC1D,CAAC;gBACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,MAAM,QAAQ,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAChD,OAAO,sCAAsC,CAAC,SAAS,CAAC,QAAQ,CAAC;qBAC9D,OAAO,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,EAAE;YACvE,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;oBACvC,QAAQ,EAAE,MAAM;oBAChB,kBAAkB;oBAClB,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC7B,mBAAmB,CACjB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD;oBACH,mEAAmE;oBACnE,mEAAmE;oBACnE,qEAAqE;oBACrE,oEAAoE;oBACpE,oEAAoE;oBACpE,8BAA8B;oBAC9B,mBAAmB,EAAE,KAAK;oBAC1B,MAAM;iBACP,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;oBAClC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;gBACjC,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAChC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrD,CAAC;gBACD,OAAO;oBACL,MAAM,EAAE,SAAS;oBACjB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY;oBACvC,MAAM,EAAE,GAAG,EAAE,CACX,gBAAgB,CAAC;wBACf,QAAQ,EAAE,MAAM;wBAChB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa;qBAC1C,CAAC;iBACL,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,uEAAuE;gBACvE,uEAAuE;gBACvE,gCAAgC;gBAChC,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC/D,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/build/setup/deps/phoenixClient.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The Phoenix API capability: a factory for typed clients, so steps never
+ * construct one from ambient config. Tests inject a fake transport beneath
+ * the same real client.
+ */
+import type { PhoenixClient } from "@arizeai/phoenix-client";
+export interface PhoenixClientArgs {
+    /** Normalized origin, no trailing slash. */
+    endpoint: string;
+    /** Omitted for the unauthenticated auth probe. */
+    apiKey?: string;
+}
+export type PhoenixClientFactory = (args: PhoenixClientArgs) => PhoenixClient;
+/**
+ * `apiUrl` is the hidden `--api-url` dev override: it reroutes setup's own
+ * API traffic while user-facing values — hand-off files, px profile, traces
+ * URLs — keep the endpoint the user chose.
+ */
+export declare function createPhoenixClientFactory({ apiUrl, }?: {
+    apiUrl?: string;
+}): PhoenixClientFactory;
+//# sourceMappingURL=phoenixClient.d.ts.map

package/build/setup/deps/phoenixClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phoenixClient.d.ts","sourceRoot":"","sources":["../../../src/setup/deps/phoenixClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAI7D,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,iBAAiB,KAAK,aAAa,CAAC;AAE9E;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,MAAM,GACP,GAAE;IACD,MAAM,CAAC,EAAE,MAAM,CAAC;CACZ,GAAG,oBAAoB,CAK5B"}

package/build/setup/deps/phoenixClient.js

@@ -0,0 +1,17 @@
+/**
+ * The Phoenix API capability: a factory for typed clients, so steps never
+ * construct one from ambient config. Tests inject a fake transport beneath
+ * the same real client.
+ */
+import { createPhoenixClient } from "../../client.js";
+/**
+ * `apiUrl` is the hidden `--api-url` dev override: it reroutes setup's own
+ * API traffic while user-facing values — hand-off files, px profile, traces
+ * URLs — keep the endpoint the user chose.
+ */
+export function createPhoenixClientFactory({ apiUrl, } = {}) {
+    return ({ endpoint, apiKey }) => createPhoenixClient({
+        config: { endpoint: apiUrl ?? endpoint, apiKey },
+    });
+}
+//# sourceMappingURL=phoenixClient.js.map

package/build/setup/deps/phoenixClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phoenixClient.js","sourceRoot":"","sources":["../../../src/setup/deps/phoenixClient.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAWnD;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,EACzC,MAAM,GACP,GAEG,EAAE;IACJ,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAC9B,mBAAmB,CAAC;QAClB,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,IAAI,QAAQ,EAAE,MAAM,EAAE;KACjD,CAAC,CAAC;AACP,CAAC"}

package/build/setup/deps/processes.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The subprocess capability: one-shot probes (git checks, agent detection)
+ * and the interactive agent hand-off share these contracts and this runner.
+ */
+export interface CommandSpec {
+    command: string;
+    args: string[];
+    stdin?: string;
+    env?: Record<string, string>;
+    cwd?: string;
+    /** Kill the child and resolve non-zero once this many ms elapse. */
+    timeoutMs?: number;
+}
+export interface ExecResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+export interface ProcessRunner {
+    /** One-shot subprocess (git, probes). Never throws on non-zero exit. */
+    exec(spec: CommandSpec): Promise<ExecResult>;
+    /** Interactive subprocess with inherited stdio (agent hand-off). */
+    spawnInteractive(spec: CommandSpec): Promise<{
+        exitCode: number;
+    }>;
+}
+export declare function createSystemProcessRunner(): ProcessRunner;
+//# sourceMappingURL=processes.d.ts.map

package/build/setup/deps/processes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processes.d.ts","sourceRoot":"","sources":["../../../src/setup/deps/processes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7C,oEAAoE;IACpE,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpE;AAiDD,wBAAgB,yBAAyB,IAAI,aAAa,CAKzD"}

package/build/setup/deps/processes.js

@@ -0,0 +1,58 @@
+/**
+ * The subprocess capability: one-shot probes (git checks, agent detection)
+ * and the interactive agent hand-off share these contracts and this runner.
+ */
+import * as process from "node:process";
+// cross-spawn resolves .cmd/.bat shims on Windows (npm, npx, agent CLIs),
+// where node's bare spawn fails with ENOENT unless given a shell.
+import spawn from "cross-spawn";
+function execOnce(spec) {
+    return new Promise((resolve) => {
+        const child = spawn(spec.command, spec.args, {
+            cwd: spec.cwd,
+            env: spec.env ? { ...process.env, ...spec.env } : process.env,
+            stdio: ["pipe", "pipe", "pipe"],
+            // Kills the child on expiry — a hung probe must not leave an orphaned
+            // subprocess behind. Surfaces as a non-zero exit via `close`.
+            timeout: spec.timeoutMs,
+        });
+        let stdout = "";
+        let stderr = "";
+        child.stdout?.on("data", (chunk) => {
+            stdout += chunk.toString("utf-8");
+        });
+        child.stderr?.on("data", (chunk) => {
+            stderr += chunk.toString("utf-8");
+        });
+        child.on("error", (error) => {
+            // Command not found and similar spawn failures surface as a non-zero
+            // exit with the message on stderr rather than a throw.
+            resolve({ exitCode: 127, stdout, stderr: String(error) });
+        });
+        child.on("close", (code) => {
+            resolve({ exitCode: code ?? 1, stdout, stderr });
+        });
+        if (spec.stdin !== undefined) {
+            child.stdin?.write(spec.stdin);
+        }
+        child.stdin?.end();
+    });
+}
+function spawnInteractiveChild(spec) {
+    return new Promise((resolve) => {
+        const child = spawn(spec.command, spec.args, {
+            cwd: spec.cwd,
+            env: spec.env ? { ...process.env, ...spec.env } : process.env,
+            stdio: "inherit",
+        });
+        child.on("error", () => resolve({ exitCode: 127 }));
+        child.on("close", (code) => resolve({ exitCode: code ?? 1 }));
+    });
+}
+export function createSystemProcessRunner() {
+    return {
+        exec: execOnce,
+        spawnInteractive: spawnInteractiveChild,
+    };
+}
+//# sourceMappingURL=processes.js.map

package/build/setup/deps/processes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processes.js","sourceRoot":"","sources":["../../../src/setup/deps/processes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,OAAO,MAAM,cAAc,CAAC;AACxC,0EAA0E;AAC1E,kEAAkE;AAClE,OAAO,KAAK,MAAM,aAAa,CAAC;AAyBhC,SAAS,QAAQ,CAAC,IAAiB;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;YAC7D,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,sEAAsE;YACtE,8DAA8D;YAC9D,OAAO,EAAE,IAAI,CAAC,SAAS;SACxB,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,qEAAqE;YACrE,uDAAuD;YACvD,OAAO,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAiB;IAG9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;YAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;YAC7D,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACpD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,gBAAgB,EAAE,qBAAqB;KACxC,CAAC;AACJ,CAAC"}

package/build/setup/deps/prompter.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The prompting capability: every question setup asks — selects, text,
+ * masked secrets — and every line it narrates between them.
+ *
+ * Contract only. The real terminal implementation is `ui/clackPrompter.ts`
+ * (kept with the rest of the UI, since rendering rules live there); tests
+ * script answers through `scriptedPrompter`.
+ */
+export interface SelectOption<T> {
+    value: T;
+    label: string;
+    hint?: string;
+    /** Rendered unselectable with the reason appended to the label. */
+    disabled?: boolean;
+}
+export interface Prompter {
+    /** Throws SetupCancelledError on Ctrl-C / Escape. */
+    select<T>(args: {
+        message: string;
+        options: Array<SelectOption<T>>;
+    }): Promise<T>;
+    /** Throws SetupCancelledError on Ctrl-C / Escape. */
+    textInput(args: {
+        message: string;
+        defaultValue?: string;
+        validate?: (value: string) => string | undefined;
+    }): Promise<string>;
+    /** Masked input for secrets. Throws SetupCancelledError on Ctrl-C / Escape. */
+    passwordInput(args: {
+        message: string;
+        validate?: (value: string) => string | undefined;
+    }): Promise<string>;
+    /**
+     * Run `work` with a signal that aborts on Ctrl-C rather than raising
+     * SetupCancelledError. For the waits that have no prompt on screen to
+     * cancel — a browser login, say: this seam owns the terminal, so it owns the
+     * signal, and `work` decides what an interruption means.
+     */
+    runInterruptible<T>(work: (signal: AbortSignal) => Promise<T>): Promise<T>;
+    /** Non-interactive display of a block of text between prompts. */
+    note(message: string, title?: string): void;
+    /** One-line status/warning between prompts (stderr). */
+    line(message: string): void;
+    /** Open the setup session frame. */
+    intro(message: string): void;
+    /** Close the setup session frame. */
+    outro(message: string): void;
+}
+//# sourceMappingURL=prompter.d.ts.map

package/build/setup/deps/prompter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompter.d.ts","sourceRoot":"","sources":["../../../src/setup/deps/prompter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,QAAQ;IACvB,qDAAqD;IACrD,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;KACjC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACf,qDAAqD;IACrD,SAAS,CAAC,IAAI,EAAE;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;KAClD,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpB,+EAA+E;IAC/E,aAAa,CAAC,IAAI,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;KAClD,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpB;;;;;OAKG;IACH,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3E,kEAAkE;IAClE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,wDAAwD;IACxD,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,oCAAoC;IACpC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,qCAAqC;IACrC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B"}

package/build/setup/deps/prompter.js

@@ -0,0 +1,10 @@
+/**
+ * The prompting capability: every question setup asks — selects, text,
+ * masked secrets — and every line it narrates between them.
+ *
+ * Contract only. The real terminal implementation is `ui/clackPrompter.ts`
+ * (kept with the rest of the UI, since rendering rules live there); tests
+ * script answers through `scriptedPrompter`.
+ */
+export {};
+//# sourceMappingURL=prompter.js.map

package/build/setup/deps/prompter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompter.js","sourceRoot":"","sources":["../../../src/setup/deps/prompter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/build/setup/errors.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Typed errors for setup.
+ *
+ * `SetupCancelledError` is thrown by the prompter whenever the user cancels
+ * (Ctrl-C / Escape on any prompt) and unwinds the whole of setup to a single
+ * catch site in the command handler, which prints the support outro and
+ * exits with `ExitCode.CANCELLED`.
+ */
+export declare class SetupCancelledError extends Error {
+    constructor();
+}
+/**
+ * Thrown when input supplied via flags or environment variables is missing
+ * (headless mode) or invalid (any mode). Carries the exact remediation text
+ * so the command handler can print it and exit `INVALID_ARGUMENT`.
+ */
+export declare class HeadlessInputError extends Error {
+    constructor(message: string);
+}
+/**
+ * Thrown when a step fails in a way setup cannot recover from
+ * (e.g. headless dirty git tree). Exits `FAILURE`.
+ */
+export declare class SetupFatalError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/build/setup/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/setup/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,cAGC;CACF;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF"}

package/build/setup/errors.js

@@ -0,0 +1,36 @@
+/**
+ * Typed errors for setup.
+ *
+ * `SetupCancelledError` is thrown by the prompter whenever the user cancels
+ * (Ctrl-C / Escape on any prompt) and unwinds the whole of setup to a single
+ * catch site in the command handler, which prints the support outro and
+ * exits with `ExitCode.CANCELLED`.
+ */
+export class SetupCancelledError extends Error {
+    constructor() {
+        super("Setup cancelled by user");
+        this.name = "SetupCancelledError";
+    }
+}
+/**
+ * Thrown when input supplied via flags or environment variables is missing
+ * (headless mode) or invalid (any mode). Carries the exact remediation text
+ * so the command handler can print it and exit `INVALID_ARGUMENT`.
+ */
+export class HeadlessInputError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "HeadlessInputError";
+    }
+}
+/**
+ * Thrown when a step fails in a way setup cannot recover from
+ * (e.g. headless dirty git tree). Exits `FAILURE`.
+ */
+export class SetupFatalError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "SetupFatalError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/build/setup/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/setup/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C;QACE,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF"}