@artos-commerce/ucp-cli 0.1.0

package/dist/commands/purchase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purchase.js","sourceRoot":"","sources":["../../src/commands/purchase.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAqB7C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAkB,EAClB,IAAkB;IAElB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,EAAE,CAAC,KAAK,CACX,sEAAsE,CACvE,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAI,CAAC,KAAK;QACrB,UAAU,EAAE,IAAI,CAAC,EAAE;QACnB,aAAa,EAAE,IAAI,CAAC,GAAG;QACvB,gBAAgB,EAAE,IAAI,CAAC,OAAO;QAC9B,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3D,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,WAAW;YACd,OAAO,CAAC,CAAC;QACX,KAAK,qBAAqB,CAAC;QAC3B,KAAK,4BAA4B;YAC/B,OAAO,CAAC,CAAC;QACX,KAAK,OAAO;YACV,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Resolves the CLI's connection config from flags (highest priority), then the
+ * environment, then sensible defaults. Catalog discovery is anonymous-tier, so
+ * the platform key and agent profile fall back to placeholders that let
+ * read-only commands run; `doctor` flags when they are unset.
+ */
+export interface CliConfig {
+    /** Artos API base URL, no trailing slash. */
+    artosBaseUrl: string;
+    /** Platform (cross-store) UCP API key: `<clientId>.<secret>`. */
+    platformApiKey: string;
+    /** HTTPS URL of the agent's published UCP profile (sent in `UCP-Agent`). */
+    platformProfileUrl: string;
+}
+/** Global flags that can override the environment for any command. */
+export interface GlobalFlags {
+    api?: string;
+    key?: string;
+    profile?: string;
+}
+export declare const DEFAULT_API_URL = "https://api.artos.sh";
+export declare const PLACEHOLDER_KEY = "ck_demo.placeholder";
+export declare const PLACEHOLDER_PROFILE = "https://example.com/.well-known/ucp";
+export declare function resolveConfig(env: NodeJS.ProcessEnv, flags?: GlobalFlags): CliConfig;
+/** True when no real platform API key was supplied (running on the placeholder). */
+export declare function usesPlaceholderKey(cfg: CliConfig): boolean;
+/** True when no real agent profile URL was supplied. */
+export declare function usesPlaceholderProfile(cfg: CliConfig): boolean;

package/dist/config.js

@@ -0,0 +1,22 @@
+export const DEFAULT_API_URL = 'https://api.artos.sh';
+export const PLACEHOLDER_KEY = 'ck_demo.placeholder';
+export const PLACEHOLDER_PROFILE = 'https://example.com/.well-known/ucp';
+function stripTrailingSlash(url) {
+    return url.trim().replace(/\/+$/, '');
+}
+export function resolveConfig(env, flags = {}) {
+    return {
+        artosBaseUrl: stripTrailingSlash(flags.api ?? env.ARTOS_BASE_URL ?? DEFAULT_API_URL),
+        platformApiKey: flags.key ?? env.UCP_PLATFORM_API_KEY ?? PLACEHOLDER_KEY,
+        platformProfileUrl: flags.profile ?? env.PLATFORM_PROFILE_URL ?? PLACEHOLDER_PROFILE,
+    };
+}
+/** True when no real platform API key was supplied (running on the placeholder). */
+export function usesPlaceholderKey(cfg) {
+    return cfg.platformApiKey === PLACEHOLDER_KEY;
+}
+/** True when no real agent profile URL was supplied. */
+export function usesPlaceholderProfile(cfg) {
+    return cfg.platformProfileUrl === PLACEHOLDER_PROFILE;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAsBA,MAAM,CAAC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AACtD,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;AACrD,MAAM,CAAC,MAAM,mBAAmB,GAAG,qCAAqC,CAAC;AAEzE,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,GAAsB,EACtB,QAAqB,EAAE;IAEvB,OAAO;QACL,YAAY,EAAE,kBAAkB,CAC9B,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,IAAI,eAAe,CACnD;QACD,cAAc,EAAE,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,oBAAoB,IAAI,eAAe;QACxE,kBAAkB,EAChB,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,oBAAoB,IAAI,mBAAmB;KACnE,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,GAAc;IAC/C,OAAO,GAAG,CAAC,cAAc,KAAK,eAAe,CAAC;AAChD,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,sBAAsB,CAAC,GAAc;IACnD,OAAO,GAAG,CAAC,kBAAkB,KAAK,mBAAmB,CAAC;AACxD,CAAC"}

package/dist/conformance.d.ts

@@ -0,0 +1,35 @@
+import { type CliConfig } from './config.js';
+import type { DoctorCheck } from './doctor.js';
+export interface ConformanceReport {
+    ok: boolean;
+    checks: DoctorCheck[];
+}
+export interface ConformanceDeps {
+    cfg: CliConfig;
+    fetch: typeof fetch;
+    /**
+     * Runs a minimal cross-store catalog search, resolving on success and
+     * rejecting on any transport / UCP error. Injected so the check exercises the
+     * real SDK request shape (headers + envelope) without this module importing
+     * the client.
+     */
+    search: () => Promise<unknown>;
+    /** Expected UCP spec version (defaults to the CLI's {@link UCP_VERSION}). */
+    expectedVersion?: string;
+}
+export interface ConformanceArgs {
+    /** When set, also verifies the store publishes signing keys for AP2. */
+    store?: string;
+}
+/**
+ * Runs a battery of live UCP conformance checks against a deployment: the
+ * platform discovery profile and its declared version, the OAuth Authorization
+ * Server metadata (endpoints, PKCE, scopes) buyers sign in against, the
+ * cross-store catalog search, the buyer-bound 401 + `WWW-Authenticate` relay
+ * contract, and (when a store is given) that the store publishes signing keys
+ * for AP2 verification. Every probe is reported as pass/warn/fail — network
+ * failures become `fail`, never thrown — so the full report always renders.
+ */
+export declare function runConformance(deps: ConformanceDeps, args?: ConformanceArgs): Promise<ConformanceReport>;
+/** Renders a conformance report as plain text for the terminal. */
+export declare function formatConformance(report: ConformanceReport): string;

package/dist/conformance.js

@@ -0,0 +1,240 @@
+import { usesPlaceholderKey } from './config.js';
+import { UCP_VERSION } from './profile.js';
+const TIMEOUT_MS = 8000;
+async function fetchJson(fetchFn, url, init) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+    try {
+        const res = await fetchFn(url, {
+            ...init,
+            signal: controller.signal,
+            headers: { accept: 'application/json', ...init?.headers },
+        });
+        let body = {};
+        try {
+            body = (await res.json());
+        }
+        catch {
+            body = {};
+        }
+        return {
+            status: res.status,
+            wwwAuthenticate: res.headers?.get('www-authenticate') ?? null,
+            body,
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+function asArray(value) {
+    return Array.isArray(value) ? value : [];
+}
+/**
+ * Runs a battery of live UCP conformance checks against a deployment: the
+ * platform discovery profile and its declared version, the OAuth Authorization
+ * Server metadata (endpoints, PKCE, scopes) buyers sign in against, the
+ * cross-store catalog search, the buyer-bound 401 + `WWW-Authenticate` relay
+ * contract, and (when a store is given) that the store publishes signing keys
+ * for AP2 verification. Every probe is reported as pass/warn/fail — network
+ * failures become `fail`, never thrown — so the full report always renders.
+ */
+export async function runConformance(deps, args = {}) {
+    const { cfg, fetch: fetchFn } = deps;
+    const expected = deps.expectedVersion ?? UCP_VERSION;
+    const checks = [];
+    // 1. Platform discovery profile + declared UCP version.
+    const discoveryUrl = `${cfg.artosBaseUrl}/.well-known/ucp`;
+    try {
+        const { body } = await fetchJson(fetchFn, discoveryUrl);
+        const ucp = body.ucp;
+        const version = ucp?.version;
+        if (!version)
+            throw new Error('missing ucp.version');
+        checks.push(version === expected
+            ? {
+                name: 'discovery',
+                status: 'pass',
+                detail: `UCP ${version} (matches client ${expected}).`,
+            }
+            : {
+                name: 'discovery',
+                status: 'warn',
+                detail: `server UCP ${version} differs from client ${expected} — check for a version mismatch.`,
+            });
+        const handlers = body.payment_handlers;
+        const hasHandlers = typeof handlers === 'object' &&
+            handlers !== null &&
+            !Array.isArray(handlers);
+        const hasCaps = typeof ucp?.capabilities === 'object' && ucp.capabilities !== null;
+        checks.push(hasHandlers && hasCaps
+            ? {
+                name: 'platform-profile',
+                status: 'pass',
+                detail: 'Declares payment_handlers and capabilities.',
+            }
+            : {
+                name: 'platform-profile',
+                status: 'warn',
+                detail: `Missing ${!hasHandlers ? 'payment_handlers' : 'capabilities'} in the discovery profile.`,
+            });
+    }
+    catch (err) {
+        checks.push({
+            name: 'discovery',
+            status: 'fail',
+            detail: `${discoveryUrl}: ${err.message}`,
+        });
+    }
+    // 2. OAuth Authorization Server metadata (endpoints, PKCE, scopes).
+    const asUrl = `${cfg.artosBaseUrl}/.well-known/oauth-authorization-server`;
+    try {
+        const { body } = await fetchJson(fetchFn, asUrl);
+        checks.push(body.authorization_endpoint && body.token_endpoint
+            ? {
+                name: 'oauth-endpoints',
+                status: 'pass',
+                detail: 'authorization_endpoint and token_endpoint present.',
+            }
+            : {
+                name: 'oauth-endpoints',
+                status: 'fail',
+                detail: `${asUrl}: missing authorization_endpoint or token_endpoint.`,
+            });
+        const pkce = asArray(body.code_challenge_methods_supported);
+        checks.push(pkce.includes('S256')
+            ? {
+                name: 'oauth-pkce',
+                status: 'pass',
+                detail: 'Advertises PKCE S256.',
+            }
+            : {
+                name: 'oauth-pkce',
+                status: 'fail',
+                detail: 'code_challenge_methods_supported does not include "S256" — Build-track OAuth requires it.',
+            });
+        const scopes = asArray(body.scopes_supported);
+        const missing = ['offline_access', 'purchase:complete'].filter((s) => !scopes.includes(s));
+        checks.push(missing.length === 0
+            ? {
+                name: 'oauth-scopes',
+                status: 'pass',
+                detail: 'Advertises offline_access and purchase:complete.',
+            }
+            : {
+                name: 'oauth-scopes',
+                status: 'warn',
+                detail: `scopes_supported missing: ${missing.join(', ')}.`,
+            });
+    }
+    catch (err) {
+        checks.push({
+            name: 'oauth-metadata',
+            status: 'fail',
+            detail: `${asUrl}: ${err.message}`,
+        });
+    }
+    // 3. Cross-store catalog search.
+    if (usesPlaceholderKey(cfg)) {
+        checks.push({
+            name: 'catalog-search',
+            status: 'warn',
+            detail: 'Skipped — no platform API key configured (set UCP_PLATFORM_API_KEY).',
+        });
+    }
+    else {
+        try {
+            await deps.search();
+            checks.push({
+                name: 'catalog-search',
+                status: 'pass',
+                detail: 'POST /catalog/search returned a success envelope.',
+            });
+        }
+        catch (err) {
+            checks.push({
+                name: 'catalog-search',
+                status: 'fail',
+                detail: `catalog search failed: ${err.message}`,
+            });
+        }
+    }
+    // 4. Buyer-bound 401 + WWW-Authenticate relay contract.
+    const mcpUrl = `${cfg.artosBaseUrl}/account/mcp`;
+    try {
+        const { status, wwwAuthenticate } = await fetchJson(fetchFn, mcpUrl, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ jsonrpc: '2.0', id: '1', method: 'tools/list' }),
+        });
+        if (status === 401 && wwwAuthenticate) {
+            checks.push({
+                name: 'auth-challenge',
+                status: 'pass',
+                detail: '401 + WWW-Authenticate on an unauthenticated buyer call.',
+            });
+        }
+        else if (status === 401) {
+            checks.push({
+                name: 'auth-challenge',
+                status: 'warn',
+                detail: '401 without a WWW-Authenticate header — silent refresh may break.',
+            });
+        }
+        else {
+            checks.push({
+                name: 'auth-challenge',
+                status: 'warn',
+                detail: `expected 401 on an unauthenticated buyer call, got ${status}.`,
+            });
+        }
+    }
+    catch (err) {
+        checks.push({
+            name: 'auth-challenge',
+            status: 'warn',
+            detail: `could not probe ${mcpUrl}: ${err.message}`,
+        });
+    }
+    // 5. Store signing keys (AP2) — only when a store is given.
+    if (args.store) {
+        const storeUrl = `${cfg.artosBaseUrl}/s/${args.store}/.well-known/ucp`;
+        try {
+            const { body } = await fetchJson(fetchFn, storeUrl);
+            const keys = asArray(body.signing_keys);
+            checks.push(keys.length > 0
+                ? {
+                    name: 'store-signing-keys',
+                    status: 'pass',
+                    detail: `${args.store} publishes ${keys.length} signing key(s).`,
+                }
+                : {
+                    name: 'store-signing-keys',
+                    status: 'fail',
+                    detail: `${args.store} publishes no signing_keys — merchant_authorization cannot be verified.`,
+                });
+        }
+        catch (err) {
+            checks.push({
+                name: 'store-signing-keys',
+                status: 'fail',
+                detail: `${storeUrl}: ${err.message}`,
+            });
+        }
+    }
+    return { ok: checks.every((c) => c.status !== 'fail'), checks };
+}
+const ICON = {
+    pass: 'OK  ',
+    warn: 'WARN',
+    fail: 'FAIL',
+};
+/** Renders a conformance report as plain text for the terminal. */
+export function formatConformance(report) {
+    const lines = report.checks.map((c) => `[${ICON[c.status]}] ${c.name} — ${c.detail}`);
+    lines.push(report.ok
+        ? 'conformance: all required checks passed.'
+        : 'conformance: one or more checks FAILED.');
+    return lines.join('\n');
+}
+//# sourceMappingURL=conformance.js.map

package/dist/conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.js","sourceRoot":"","sources":["../src/conformance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAkB,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AA2B3C,MAAM,UAAU,GAAG,IAAI,CAAC;AAQxB,KAAK,UAAU,SAAS,CACtB,OAAqB,EACrB,GAAW,EACX,IAAkB;IAElB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAC7B,GAAG,IAAI;YACP,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE;SAC1D,CAAC,CAAC;QACH,IAAI,IAAI,GAA4B,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,eAAe,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,kBAAkB,CAAC,IAAI,IAAI;YAC7D,IAAI;SACL,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAqB,EACrB,OAAwB,EAAE;IAE1B,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,WAAW,CAAC;IACrD,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,wDAAwD;IACxD,MAAM,YAAY,GAAG,GAAG,GAAG,CAAC,YAAY,kBAAkB,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GACyC,CAAC;QAC3D,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CACT,OAAO,KAAK,QAAQ;YAClB,CAAC,CAAC;gBACE,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,OAAO,OAAO,oBAAoB,QAAQ,IAAI;aACvD;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,WAAW;gBACjB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,cAAc,OAAO,wBAAwB,QAAQ,kCAAkC;aAChG,CACN,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC;QACvC,MAAM,WAAW,GACf,OAAO,QAAQ,KAAK,QAAQ;YAC5B,QAAQ,KAAK,IAAI;YACjB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,OAAO,GACX,OAAO,GAAG,EAAE,YAAY,KAAK,QAAQ,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC;QACrE,MAAM,CAAC,IAAI,CACT,WAAW,IAAI,OAAO;YACpB,CAAC,CAAC;gBACE,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,6CAA6C;aACtD;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,kBAAkB;gBACxB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc,4BAA4B;aAClG,CACN,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,YAAY,KAAM,GAAa,CAAC,OAAO,EAAE;SACrD,CAAC,CAAC;IACL,CAAC;IAED,oEAAoE;IACpE,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,YAAY,yCAAyC,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC,cAAc;YAChD,CAAC,CAAC;gBACE,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,oDAAoD;aAC7D;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,GAAG,KAAK,qDAAqD;aACtE,CACN,CAAC;QACF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnB,CAAC,CAAC;gBACE,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,uBAAuB;aAChC;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,MAAM;gBACd,MAAM,EACJ,2FAA2F;aAC9F,CACN,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,MAAM,CAC5D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC3B,CAAC;QACF,MAAM,CAAC,IAAI,CACT,OAAO,CAAC,MAAM,KAAK,CAAC;YAClB,CAAC,CAAC;gBACE,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,kDAAkD;aAC3D;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aAC3D,CACN,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,KAAK,KAAM,GAAa,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,MAAM;YACd,MAAM,EACJ,sEAAsE;SACzE,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,mDAAmD;aAC5D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,0BAA2B,GAAa,CAAC,OAAO,EAAE;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,cAAc,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;SACxE,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,0DAA0D;aACnE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,MAAM;gBACd,MAAM,EACJ,mEAAmE;aACtE,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,sDAAsD,MAAM,GAAG;aACxE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,mBAAmB,MAAM,KAAM,GAAa,CAAC,OAAO,EAAE;SAC/D,CAAC,CAAC;IACL,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,YAAY,MAAM,IAAI,CAAC,KAAK,kBAAkB,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,MAAM,GAAG,CAAC;gBACb,CAAC,CAAC;oBACE,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,MAAM,kBAAkB;iBACjE;gBACH,CAAC,CAAC;oBACE,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,yEAAyE;iBAC/F,CACN,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,GAAG,QAAQ,KAAM,GAAa,CAAC,OAAO,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,IAAI,GAA0C;IAClD,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE,CACrD,CAAC;IACF,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,EAAE;QACP,CAAC,CAAC,0CAA0C;QAC5C,CAAC,CAAC,yCAAyC,CAC9C,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/doctor.d.ts

@@ -0,0 +1,23 @@
+import { type CliConfig } from './config.js';
+export interface DoctorCheck {
+    name: string;
+    status: 'pass' | 'warn' | 'fail';
+    detail: string;
+}
+export interface DoctorReport {
+    ok: boolean;
+    checks: DoctorCheck[];
+}
+export interface DoctorDeps {
+    cfg: CliConfig;
+    fetch: typeof fetch;
+}
+/**
+ * Checks the developer's connection to Artos: the platform key, the API's UCP
+ * discovery profile, the OAuth Authorization Server metadata buyers sign in
+ * against, and (when configured) the agent's own published profile. Network
+ * failures are reported as `fail`, not thrown, so every check is always listed.
+ */
+export declare function runDoctor(deps: DoctorDeps): Promise<DoctorReport>;
+/** Renders a report as plain text for the terminal. */
+export declare function formatReport(report: DoctorReport): string;

package/dist/doctor.js

@@ -0,0 +1,123 @@
+import { usesPlaceholderKey, usesPlaceholderProfile, } from './config.js';
+const TIMEOUT_MS = 5000;
+async function getJson(fetchFn, url) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+    try {
+        const res = await fetchFn(url, {
+            signal: controller.signal,
+            headers: { accept: 'application/json' },
+        });
+        if (!res.ok)
+            throw new Error(`HTTP ${res.status}`);
+        return (await res.json());
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Checks the developer's connection to Artos: the platform key, the API's UCP
+ * discovery profile, the OAuth Authorization Server metadata buyers sign in
+ * against, and (when configured) the agent's own published profile. Network
+ * failures are reported as `fail`, not thrown, so every check is always listed.
+ */
+export async function runDoctor(deps) {
+    const { cfg, fetch: fetchFn } = deps;
+    const checks = [];
+    checks.push(usesPlaceholderKey(cfg)
+        ? {
+            name: 'platform-key',
+            status: 'warn',
+            detail: 'No UCP_PLATFORM_API_KEY (or --key) — anonymous catalog only; cart/checkout need a real key.',
+        }
+        : {
+            name: 'platform-key',
+            status: 'pass',
+            detail: 'Platform API key configured.',
+        });
+    const apiUrl = `${cfg.artosBaseUrl}/.well-known/ucp`;
+    try {
+        const body = await getJson(fetchFn, apiUrl);
+        const ucp = body.ucp;
+        checks.push({
+            name: 'api-reachable',
+            status: 'pass',
+            detail: `${apiUrl} (UCP ${ucp?.version ?? 'unknown'})`,
+        });
+    }
+    catch (err) {
+        checks.push({
+            name: 'api-reachable',
+            status: 'fail',
+            detail: `${apiUrl}: ${err.message}`,
+        });
+    }
+    const asUrl = `${cfg.artosBaseUrl}/.well-known/oauth-authorization-server`;
+    try {
+        const body = await getJson(fetchFn, asUrl);
+        checks.push(body.token_endpoint
+            ? {
+                name: 'oauth-metadata',
+                status: 'pass',
+                detail: `${asUrl} (token_endpoint present)`,
+            }
+            : {
+                name: 'oauth-metadata',
+                status: 'fail',
+                detail: `${asUrl}: missing token_endpoint`,
+            });
+    }
+    catch (err) {
+        checks.push({
+            name: 'oauth-metadata',
+            status: 'fail',
+            detail: `${asUrl}: ${err.message}`,
+        });
+    }
+    if (usesPlaceholderProfile(cfg)) {
+        checks.push({
+            name: 'agent-profile',
+            status: 'warn',
+            detail: 'No PLATFORM_PROFILE_URL (or --profile) — run `artos profile init` and host the result.',
+        });
+    }
+    else {
+        try {
+            const body = await getJson(fetchFn, cfg.platformProfileUrl);
+            const ucp = body.ucp;
+            const keys = body.signing_keys;
+            if (!ucp?.version)
+                throw new Error('missing ucp.version');
+            checks.push({
+                name: 'agent-profile',
+                status: keys && keys.length > 0 ? 'pass' : 'warn',
+                detail: keys && keys.length > 0
+                    ? `${cfg.platformProfileUrl} (UCP ${ucp.version}, ${keys.length} signing key(s))`
+                    : `${cfg.platformProfileUrl} has no signing_keys — AP2 verification will fail.`,
+            });
+        }
+        catch (err) {
+            checks.push({
+                name: 'agent-profile',
+                status: 'fail',
+                detail: `${cfg.platformProfileUrl}: ${err.message}`,
+            });
+        }
+    }
+    return { ok: checks.every((c) => c.status !== 'fail'), checks };
+}
+const ICON = {
+    pass: 'OK  ',
+    warn: 'WARN',
+    fail: 'FAIL',
+};
+/** Renders a report as plain text for the terminal. */
+export function formatReport(report) {
+    const lines = report.checks.map((c) => `[${ICON[c.status]}] ${c.name} — ${c.detail}`);
+    lines.push(report.ok
+        ? 'doctor: all checks passed.'
+        : 'doctor: one or more checks FAILED.');
+    return lines.join('\n');
+}
+//# sourceMappingURL=doctor.js.map

package/dist/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,sBAAsB,GAEvB,MAAM,aAAa,CAAC;AAkBrB,MAAM,UAAU,GAAG,IAAI,CAAC;AAExB,KAAK,UAAU,OAAO,CACpB,OAAqB,EACrB,GAAW;IAEX,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IACvD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAgB;IAC9C,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACrC,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,MAAM,CAAC,IAAI,CACT,kBAAkB,CAAC,GAAG,CAAC;QACrB,CAAC,CAAC;YACE,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,MAAM;YACd,MAAM,EACJ,6FAA6F;SAChG;QACH,CAAC,CAAC;YACE,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,8BAA8B;SACvC,CACN,CAAC;IAEF,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,kBAAkB,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAuC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,MAAM,SAAS,GAAG,EAAE,OAAO,IAAI,SAAS,GAAG;SACvD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,MAAM,KAAM,GAAa,CAAC,OAAO,EAAE;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,YAAY,yCAAyC,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,cAAc;YACjB,CAAC,CAAC;gBACE,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,GAAG,KAAK,2BAA2B;aAC5C;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,GAAG,KAAK,0BAA0B;aAC3C,CACN,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG,KAAK,KAAM,GAAa,CAAC,OAAO,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,MAAM;YACd,MAAM,EACJ,wFAAwF;SAC3F,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAuC,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAqC,CAAC;YACxD,IAAI,CAAC,GAAG,EAAE,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBACjD,MAAM,EACJ,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBACrB,CAAC,CAAC,GAAG,GAAG,CAAC,kBAAkB,SAAS,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,kBAAkB;oBACjF,CAAC,CAAC,GAAG,GAAG,CAAC,kBAAkB,oDAAoD;aACpF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,GAAG,GAAG,CAAC,kBAAkB,KAAM,GAAa,CAAC,OAAO,EAAE;aAC/D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,IAAI,GAA0C;IAClD,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;CACb,CAAC;AAEF,uDAAuD;AACvD,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE,CACrD,CAAC;IACF,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,EAAE;QACP,CAAC,CAAC,4BAA4B;QAC9B,CAAC,CAAC,oCAAoC,CACzC,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
+import { run } from './cli.js';
+function withNewline(text) {
+    return text.endsWith('\n') ? text : `${text}\n`;
+}
+const io = {
+    write: (text) => process.stdout.write(withNewline(text)),
+    error: (text) => process.stderr.write(withNewline(text)),
+    env: process.env,
+    cwd: process.cwd(),
+    fetch: globalThis.fetch.bind(globalThis),
+    mkdir: (path) => mkdirSync(path, { recursive: true }),
+    writeFile: (path, contents) => writeFileSync(path, contents, 'utf8'),
+    exists: (path) => existsSync(path),
+};
+run(process.argv.slice(2), io)
+    .then((code) => {
+    process.exitCode = code;
+})
+    .catch((err) => {
+    process.stderr.write(`artos: ${err.message}\n`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAG/B,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;AAClD,CAAC;AAED,MAAM,EAAE,GAAO;IACb,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACxD,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACxD,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;IAClB,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;IACxC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrD,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC;IACpE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;CACnC,CAAC;AAEF,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;KAC3B,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;IACb,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,CAAC;KACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAW,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;IAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/io.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The side-effecting boundary the CLI runs against. Everything that touches the
+ * outside world (stdout/stderr, the environment, the filesystem, the network)
+ * goes through this seam so commands stay pure and unit-test with fakes. The
+ * real implementation is assembled in {@link import('./index.js')}.
+ */
+export interface Io {
+    /** Writes to stdout (machine-consumable output). */
+    write: (text: string) => void;
+    /** Writes to stderr (human/operational messages, errors, diagnostics). */
+    error: (text: string) => void;
+    /** Process environment (config resolution). */
+    env: NodeJS.ProcessEnv;
+    /** Current working directory (relative path resolution, e.g. `profile init`). */
+    cwd: string;
+    /** `fetch` implementation (injected so tests never hit the network). */
+    fetch: typeof fetch;
+    /** Creates a directory (recursive). */
+    mkdir: (path: string) => void;
+    /** Writes a UTF-8 file. */
+    writeFile: (path: string, contents: string) => void;
+    /** True when a path exists (guards `init` against clobbering a project). */
+    exists: (path: string) => boolean;
+}

package/dist/io.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=io.js.map

package/dist/io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"io.js","sourceRoot":"","sources":["../src/io.ts"],"names":[],"mappings":""}

package/dist/output.d.ts

@@ -0,0 +1,38 @@
+import type { AccountToolSpec, UcpResponse } from '@artos-commerce/ucp-client/ucp';
+import { type CheckoutOutcome } from '@artos-commerce/ucp-client/checkout';
+/** Formats integer minor units as a human-readable major-unit amount. */
+export declare function formatMinor(minor: number | undefined, currency: string | undefined): string;
+/** A flattened product row pulled from a UCP search response. */
+export interface ProductView {
+    title: string;
+    storeSlug?: string;
+    variantId?: string;
+    price?: number;
+    currency?: string;
+}
+/** Pulls product rows out of a UCP search envelope (REST or MCP-wrapped). */
+export declare function extractProducts(res: UcpResponse): ProductView[];
+/** Renders catalog search results as text, or raw JSON when `json` is set. */
+export declare function formatSearchResults(res: UcpResponse, opts?: {
+    json?: boolean;
+}): string;
+/** Renders a store's UCP profile as text, or raw JSON when `json` is set. */
+export declare function formatStoreProfile(slug: string, raw: Record<string, unknown>, opts?: {
+    json?: boolean;
+}): string;
+/** Renders a cart/checkout/order UCP body as text, or raw JSON when `json` is set. */
+export declare function formatEntity(label: string, body: UcpResponse, opts?: {
+    json?: boolean;
+}): string;
+/**
+ * Renders a `confirmPurchase` outcome, including the call-to-action a buyer needs
+ * for the non-terminal states (the hosted-pay / escalation URL, or the list of
+ * rails to re-run with `--pay`).
+ */
+export declare function formatOutcome(outcome: CheckoutOutcome, opts?: {
+    json?: boolean;
+}): string;
+/** Renders the buyer-account tool list, or raw JSON when `json` is set. */
+export declare function formatAccountTools(tools: AccountToolSpec[], opts?: {
+    json?: boolean;
+}): string;