@assemora/cli 0.1.0

package/dist/bin.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+/**
+ * The `assemora` executable.
+ *
+ * It does the one thing `run()` deliberately does not: end the process. Setting
+ * `process.exitCode` rather than calling `process.exit()` lets Node flush what was
+ * written first — `process.exit()` truncates a piped listing halfway through a line.
+ */
+import { run } from './index.js';
+process.exitCode = await run(process.argv.slice(2));
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAA;AAEhC,OAAO,CAAC,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA"}

package/dist/commands/agents.d.ts

@@ -0,0 +1,50 @@
+import { type ParsedArgs } from '../args.js';
+/** Where `--write-mcp-json` writes when it is given no path. */
+export declare const MCP_CONFIG_FILE = ".mcp.json";
+/** Where a project keeps its secrets, and where the token goes. */
+export declare const ENV_FILE = ".env";
+/**
+ * The permissions, from a comma-separated list.
+ *
+ * One flag rather than a repeated one, because the parser keeps the last value of a
+ * repeated flag and `--permissions a --permissions b` would silently mean `b` — a
+ * narrower agent than the person asked for, which is the direction that fails quietly.
+ *
+ * Empty entries are dropped rather than passed on: `--permissions "pages.read,"` is a
+ * trailing comma, not a request for a permission with no name.
+ */
+export declare const permissionsOf: (args: ParsedArgs) => readonly string[];
+/**
+ * The client configuration, as a client reads it — and with no credential in it.
+ *
+ * `pnpm assemora mcp` rather than a path: the executable is a dependency of the project
+ * rather than a global one, and the package manager that put it there is the one thing
+ * this file cannot know from the outside. `cwd` is written absolute, because a client
+ * starts the process from wherever it happens to be.
+ *
+ * No `env`, deliberately. The token would make this a secret file, and it is the file
+ * most likely to be committed: it is the project's client configuration, it is the same
+ * for everybody working on it, and it is the sort of thing somebody adds to a
+ * repository without thinking. So the token goes where this project already keeps its
+ * secrets — `.env`, which is gitignored and which the project reads as it is imported —
+ * and the process the client starts inherits it.
+ */
+export declare const mcpConfig: (project: string, name: string) => {
+    mcpServers: {
+        [x: string]: {
+            command: string;
+            args: string[];
+            cwd: string;
+        };
+    };
+};
+/**
+ * Writes `name=value` into a project's `.env`, replacing whatever that name said.
+ *
+ * Replacing rather than appending: a second agent for the same project is the ordinary
+ * case, and a file that grew a line each time would end up a column of dead
+ * credentials with no way to tell which one is live. Every other line is carried
+ * through untouched, so a `.env` written by hand keeps its comments and its order.
+ */
+export declare const remember: (file: string, name: string, value: string) => Promise<void>;
+//# sourceMappingURL=agents.d.ts.map

package/dist/commands/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/commands/agents.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAc,KAAK,UAAU,EAAE,MAAM,YAAY,CAAA;AASxD,gEAAgE;AAChE,eAAO,MAAM,eAAe,cAAc,CAAA;AAE1C,mEAAmE;AACnE,eAAO,MAAM,QAAQ,SAAS,CAAA;AAE9B;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,SAAU,UAAU,KAAG,SAAS,MAAM,EAI5B,CAAA;AAEpC;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,SAAS,YAAa,MAAM,QAAQ,MAAM;;;;;;;;CAQrD,CAAA;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,SAAgB,MAAM,QAAQ,MAAM,SAAS,MAAM,KAAG,OAAO,CAAC,IAAI,CActF,CAAA"}

package/dist/commands/agents.js

@@ -0,0 +1,169 @@
+/**
+ * `assemora agents:create` — an agent identity and the token that is it (SPEC.md §72).
+ *
+ * Until this existed there was no documented way to get one. The command was on the
+ * bus and reachable through the generic `POST /api/commands/auth.agents.create`, which
+ * needs an administrator session first and is written down nowhere; Studio's Agents tab
+ * lists and enables; `assemora agents` lists. So the answer to "how do I connect an
+ * agent" was to read the source, and everybody who found `/api/mcp` instead met a 401
+ * with no route past it.
+ *
+ * It reimplements nothing: the identity is created by `auth.agents.create` on the
+ * Command Bus, so it is validated, authorized, audited and refused exactly as it is
+ * from anywhere else (ADR-0021). What this adds is the part a terminal is good at —
+ * showing the token once, and writing the file a client reads.
+ */
+import { chmod, readFile, writeFile } from 'node:fs/promises';
+import { relative, resolve } from 'node:path';
+import { bool, flag } from '../args.js';
+import { loadConfig } from '../config.js';
+import { detail, fail, line, ok, warn } from '../output.js';
+import { loadApplication } from '../project.js';
+import { defineCommand, register } from '../registry.js';
+import { TOKEN_VARIABLE } from './mcp.js';
+const CREATE = 'auth.agents.create';
+/** Where `--write-mcp-json` writes when it is given no path. */
+export const MCP_CONFIG_FILE = '.mcp.json';
+/** Where a project keeps its secrets, and where the token goes. */
+export const ENV_FILE = '.env';
+/**
+ * The permissions, from a comma-separated list.
+ *
+ * One flag rather than a repeated one, because the parser keeps the last value of a
+ * repeated flag and `--permissions a --permissions b` would silently mean `b` — a
+ * narrower agent than the person asked for, which is the direction that fails quietly.
+ *
+ * Empty entries are dropped rather than passed on: `--permissions "pages.read,"` is a
+ * trailing comma, not a request for a permission with no name.
+ */
+export const permissionsOf = (args) => (flag(args, 'permissions') ?? '')
+    .split(',')
+    .map((entry) => entry.trim())
+    .filter((entry) => entry !== '');
+/**
+ * The client configuration, as a client reads it — and with no credential in it.
+ *
+ * `pnpm assemora mcp` rather than a path: the executable is a dependency of the project
+ * rather than a global one, and the package manager that put it there is the one thing
+ * this file cannot know from the outside. `cwd` is written absolute, because a client
+ * starts the process from wherever it happens to be.
+ *
+ * No `env`, deliberately. The token would make this a secret file, and it is the file
+ * most likely to be committed: it is the project's client configuration, it is the same
+ * for everybody working on it, and it is the sort of thing somebody adds to a
+ * repository without thinking. So the token goes where this project already keeps its
+ * secrets — `.env`, which is gitignored and which the project reads as it is imported —
+ * and the process the client starts inherits it.
+ */
+export const mcpConfig = (project, name) => ({
+    mcpServers: {
+        [name]: {
+            command: 'pnpm',
+            args: ['assemora', 'mcp'],
+            cwd: project,
+        },
+    },
+});
+/**
+ * Writes `name=value` into a project's `.env`, replacing whatever that name said.
+ *
+ * Replacing rather than appending: a second agent for the same project is the ordinary
+ * case, and a file that grew a line each time would end up a column of dead
+ * credentials with no way to tell which one is live. Every other line is carried
+ * through untouched, so a `.env` written by hand keeps its comments and its order.
+ */
+export const remember = async (file, name, value) => {
+    const existing = await readFile(file, 'utf8').catch(() => '');
+    const kept = existing
+        .split('\n')
+        .filter((line) => !line.startsWith(`${name}=`))
+        .join('\n')
+        .trimEnd();
+    await writeFile(file, `${kept === '' ? '' : `${kept}\n`}${name}=${value}\n`, { mode: 0o600 });
+    // `writeFile`'s mode applies only to a file it creates, so an existing `.env` keeps
+    // whatever permissions it had. Narrow it either way: it holds a credential now.
+    await chmod(file, 0o600);
+};
+/** `Content agent` becomes `content-agent`, which is what a client shows in a list. */
+const slug = (name) => name
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-+|-+$/g, '') || 'assemora';
+const refusalHint = (actorId) => actorId === undefined
+    ? 'Creating an agent is authorized like every other command, and no actor was named. ' +
+        'Pass --actor <user id> — a user who holds auth.agents.create.'
+    : `${actorId} may not create an agent, or may not grant one of those permissions: an ` +
+        'actor cannot hand an agent a permission it does not hold itself (SPEC.md §72).';
+const isRefusal = (error) => {
+    const status = error.status;
+    return typeof status === 'number' && status >= 400 && status < 500;
+};
+const agentsCreate = async ({ args, cwd }) => {
+    const name = args.positionals[0];
+    if (name === undefined || name.trim() === '') {
+        fail('An agent needs a name. It is what a person reads in the audit log.');
+        detail('assemora agents:create "Content agent" --permissions pages.read,blocks.update');
+        return 2;
+    }
+    const permissions = permissionsOf(args);
+    if (permissions.length === 0) {
+        fail('An agent with no permissions can reach every tool and do none of them.');
+        detail('Pass --permissions, comma-separated: --permissions pages.read,blocks.update');
+        return 2;
+    }
+    const app = await loadApplication(await loadConfig(cwd));
+    if (!app.commands.has(CREATE)) {
+        fail(`This application registers no "${CREATE}", so it has no agent identities to create. ` +
+            'They come with @assemora/auth (SPEC.md §72).');
+        return 1;
+    }
+    const named = flag(args, 'actor');
+    const actor = named === undefined ? undefined : { type: 'user', id: named };
+    const context = { source: 'cli', ...(actor === undefined ? {} : { actor }) };
+    const description = flag(args, 'description');
+    let created;
+    try {
+        created = (await app.run(context, () => app.commands.execute(CREATE, {
+            name: name.trim(),
+            permissions,
+            ...(description === undefined ? {} : { description }),
+        })));
+    }
+    catch (error) {
+        if (!isRefusal(error))
+            throw error;
+        fail(error instanceof Error ? error.message : String(error));
+        detail(refusalHint(named));
+        return 1;
+    }
+    ok(`Created ${name.trim()} — ${permissions.length} permission${permissions.length === 1 ? '' : 's'}.`);
+    line();
+    line(created.token);
+    line();
+    // Said plainly, because it is true and because the next thing somebody does is close
+    // the terminal. The row stores a SHA-256 digest of it and nothing else, so there is
+    // no second chance and no support call that can recover it.
+    warn('That token is shown once. It is stored hashed, so nothing can print it again.');
+    if (!bool(args, 'write-mcp-json')) {
+        detail(`Put it in .env as ${TOKEN_VARIABLE}, or pass --write-mcp-json next time.`);
+        return 0;
+    }
+    const target = resolve(cwd, flag(args, 'write-mcp-json') ?? MCP_CONFIG_FILE);
+    // Two files, and the split is the point: the credential goes where this project
+    // already keeps its secrets, and the client configuration — which is the same for
+    // everybody working here and is the sort of file that gets committed — holds none.
+    await remember(resolve(cwd, ENV_FILE), TOKEN_VARIABLE, created.token);
+    await writeFile(target, `${JSON.stringify(mcpConfig(cwd, slug(name)), null, 2)}\n`);
+    line();
+    ok(`Wrote ${ENV_FILE} and ${relative(cwd, target) || target}`);
+    detail(`${ENV_FILE} holds the token and is the one to keep out of git.`);
+    return 0;
+};
+register(defineCommand({
+    name: 'agents:create',
+    group: 'identity',
+    summary: 'create an agent identity and print its token once',
+    usage: 'assemora agents:create <name> --permissions <a,b> [--description <text>] [--actor <id>] [--write-mcp-json [path]]',
+    handler: agentsCreate,
+}));
+//# sourceMappingURL=agents.js.map

package/dist/commands/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/commands/agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAI7C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAmB,MAAM,YAAY,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAuB,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AAEzC,MAAM,MAAM,GAAG,oBAAoB,CAAA;AAEnC,gEAAgE;AAChE,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAA;AAE1C,mEAAmE;AACnE,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAA;AAE9B;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAgB,EAAqB,EAAE,CACnE,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC;KAC9B,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;KAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAA;AAEpC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC;IAC3D,UAAU,EAAE;QACV,CAAC,IAAI,CAAC,EAAE;YACN,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;YACzB,GAAG,EAAE,OAAO;SACb;KACF;CACF,CAAC,CAAA;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAE,IAAY,EAAE,KAAa,EAAiB,EAAE;IACzF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IAE7D,MAAM,IAAI,GAAG,QAAQ;SAClB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;SAC9C,IAAI,CAAC,IAAI,CAAC;SACV,OAAO,EAAE,CAAA;IAEZ,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAE7F,oFAAoF;IACpF,gFAAgF;IAChF,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAC1B,CAAC,CAAA;AAED,uFAAuF;AACvF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CACpC,IAAI;KACD,WAAW,EAAE;KACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;KAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,UAAU,CAAA;AAE1C,MAAM,WAAW,GAAG,CAAC,OAA2B,EAAU,EAAE,CAC1D,OAAO,KAAK,SAAS;IACnB,CAAC,CAAC,oFAAoF;QACpF,+DAA+D;IACjE,CAAC,CAAC,GAAG,OAAO,0EAA0E;QACpF,gFAAgF,CAAA;AAEtF,MAAM,SAAS,GAAG,CAAC,KAAc,EAAW,EAAE;IAC5C,MAAM,MAAM,GAAI,KAA8B,CAAC,MAAM,CAAA;IAErD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAA;AACpE,CAAC,CAAA;AAED,MAAM,YAAY,GAAmB,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAA;IAEhC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,oEAAoE,CAAC,CAAA;QAC1E,MAAM,CAAC,+EAA+E,CAAC,CAAA;QAEvF,OAAO,CAAC,CAAA;IACV,CAAC;IAED,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IAEvC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,wEAAwE,CAAC,CAAA;QAC9E,MAAM,CAAC,6EAA6E,CAAC,CAAA;QAErF,OAAO,CAAC,CAAA;IACV,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;IAExD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,IAAI,CACF,kCAAkC,MAAM,8CAA8C;YACpF,8CAA8C,CACjD,CAAA;QAED,OAAO,CAAC,CAAA;IACV,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACjC,MAAM,KAAK,GAAsB,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAA;IAC9F,MAAM,OAAO,GAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;IACzF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IAE7C,IAAI,OAA6D,CAAA;IAEjE,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,CACrC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;YAC3B,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACjB,WAAW;YACX,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;SACtD,CAAC,CACH,CAAuC,CAAA;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAA;QAElC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QAC5D,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;QAE1B,OAAO,CAAC,CAAA;IACV,CAAC;IAED,EAAE,CACA,WAAW,IAAI,CAAC,IAAI,EAAE,MAAM,WAAW,CAAC,MAAM,cAAc,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CACnG,CAAA;IACD,IAAI,EAAE,CAAA;IACN,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACnB,IAAI,EAAE,CAAA;IAEN,qFAAqF;IACrF,oFAAoF;IACpF,4DAA4D;IAC5D,IAAI,CAAC,+EAA+E,CAAC,CAAA;IAErF,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,qBAAqB,cAAc,uCAAuC,CAAC,CAAA;QAElF,OAAO,CAAC,CAAA;IACV,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,IAAI,eAAe,CAAC,CAAA;IAE5E,gFAAgF;IAChF,kFAAkF;IAClF,mFAAmF;IACnF,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IACrE,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;IAEnF,IAAI,EAAE,CAAA;IACN,EAAE,CAAC,SAAS,QAAQ,QAAQ,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC,CAAA;IAC9D,MAAM,CAAC,GAAG,QAAQ,qDAAqD,CAAC,CAAA;IAExE,OAAO,CAAC,CAAA;AACV,CAAC,CAAA;AAED,QAAQ,CACN,aAAa,CAAC;IACZ,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,mDAAmD;IAC5D,KAAK,EACH,mHAAmH;IACrH,OAAO,EAAE,YAAY;CACtB,CAAC,CACH,CAAA"}

package/dist/commands/artifacts.d.ts

@@ -0,0 +1,5 @@
+export declare const OpenApi: import("../registry.js").CliCommand;
+export declare const Sdk: import("../registry.js").CliCommand;
+/** In the order SPEC.md §77 lists them, which is the order the help prints them in. */
+export declare const artifactCommands: readonly [import("../registry.js").CliCommand, import("../registry.js").CliCommand];
+//# sourceMappingURL=artifacts.d.ts.map

package/dist/commands/artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../src/commands/artifacts.ts"],"names":[],"mappings":"AA2GA,eAAO,MAAM,OAAO,qCAoBlB,CAAA;AAEF,eAAO,MAAM,GAAG,qCA0Bd,CAAA;AAEF,uFAAuF;AACvF,eAAO,MAAM,gBAAgB,qFAA0B,CAAA"}

package/dist/commands/artifacts.js

@@ -0,0 +1,126 @@
+/**
+ * `assemora api:openapi` and `assemora sdk:generate` (SPEC.md §44, §48, §77).
+ *
+ * Both have the same shape: boot the project's application, hand its Schema Registry
+ * to a generator, and put the answer somewhere. Neither writes a line of the artifact
+ * itself — everything emitted is generated from what the application declared, which
+ * is what keeps a document current by construction rather than by discipline
+ * (SPEC.md §3.7). An application declaring nothing is not a special case; it produces
+ * a document and a client that describe nothing, which is the truth about it.
+ *
+ * The two generators are imported inside their handlers. `@assemora/openapi` also
+ * ships the routes that publish the document, so importing it reaches `@assemora/http`
+ * and the server library under that — a cost `assemora --help` should not pay.
+ */
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { dirname, isAbsolute, join, relative } from 'node:path';
+import { bool, flag } from '../args.js';
+import { loadConfig } from '../config.js';
+import { line, ok } from '../output.js';
+import { loadApplication } from '../project.js';
+import { defineCommand, register } from '../registry.js';
+/** The path as the reader would retype it: from where they are, unless that is worse. */
+const shortest = (path, cwd) => {
+    const near = relative(cwd, path);
+    return near === '' || near.startsWith('..') || isAbsolute(near) ? path : near;
+};
+/**
+ * Where a generated artifact goes.
+ *
+ * `--out` beats the config, the config beats the default, and `--stdout` beats all
+ * three by naming no file at all. Nothing else is written when it is piped: the
+ * "wrote it here" line answers "where did this go", and when the answer is "into your
+ * pipe" there is nothing left to say.
+ */
+const emit = async (input) => {
+    // Exactly one newline at the end, whatever the generator left: `generateSdk` ends
+    // with its own and `JSON.stringify` ends with none.
+    const body = input.contents.replace(/\n+$/, '');
+    if (bool(input.args, 'stdout')) {
+        line(body);
+        return 0;
+    }
+    const path = input.loaded.resolve(flag(input.args, 'out') ?? input.declared ?? input.fallback);
+    // A project that declares `src/generated/sdk.ts` should not have to create the
+    // directory before the command that fills it will run.
+    await mkdir(dirname(path), { recursive: true });
+    const bytes = `${body}\n`;
+    await writeFile(path, bytes, 'utf8');
+    ok(`Wrote ${shortest(path, input.cwd)} (${Buffer.byteLength(bytes)} bytes)`);
+    return 0;
+};
+const DEFAULT_OPENAPI_OUT = 'openapi.json';
+const UNNAMED_PROJECT = { title: 'Assemora application', version: '0.0.0' };
+const stringAt = (value, key) => {
+    const found = typeof value === 'object' && value !== null
+        ? value[key]
+        : undefined;
+    return typeof found === 'string' && found !== '' ? found : undefined;
+};
+/**
+ * What the document says it describes.
+ *
+ * The config decides; where it says nothing the project's own `package.json` does. A
+ * document titled after the project is right far more often than one titled after the
+ * framework, and nobody should have to write down what the package manifest already
+ * knows.
+ */
+const infoFor = async (loaded) => {
+    const declared = loaded.config.openapi?.info;
+    if (declared !== undefined)
+        return declared;
+    const manifest = await readFile(loaded.resolve('package.json'), 'utf8')
+        .then((contents) => JSON.parse(contents))
+        .catch(() => undefined);
+    return {
+        title: stringAt(manifest, 'name') ?? UNNAMED_PROJECT.title,
+        version: stringAt(manifest, 'version') ?? UNNAMED_PROJECT.version,
+    };
+};
+export const OpenApi = defineCommand({
+    name: 'api:openapi',
+    group: 'artifacts',
+    summary: 'write the OpenAPI 3.1 document this application describes itself with',
+    usage: 'assemora api:openapi [--out <file>] [--stdout]',
+    handler: async ({ args, cwd }) => {
+        const loaded = await loadConfig(cwd);
+        const app = await loadApplication(loaded);
+        const { buildOpenApiDocument } = await import('@assemora/openapi');
+        return emit({
+            args,
+            cwd,
+            loaded,
+            declared: loaded.config.openapi?.out,
+            fallback: DEFAULT_OPENAPI_OUT,
+            contents: JSON.stringify(buildOpenApiDocument(app.registry, await infoFor(loaded)), null, 2),
+        });
+    },
+});
+export const Sdk = defineCommand({
+    name: 'sdk:generate',
+    group: 'artifacts',
+    summary: 'write the typed client for this application',
+    usage: 'assemora sdk:generate [--out <file>] [--stdout]',
+    handler: async ({ args, cwd }) => {
+        const loaded = await loadConfig(cwd);
+        const app = await loadApplication(loaded);
+        const { generateSdk } = await import('@assemora/sdk');
+        const declared = loaded.config.sdk;
+        return emit({
+            args,
+            cwd,
+            loaded,
+            declared: declared?.out,
+            // Beside the project's own source rather than at its root: the client is
+            // imported by the application's code, and `paths.source` is where that lives.
+            fallback: join(loaded.paths.source, 'generated', 'sdk.ts'),
+            contents: generateSdk(app.registry.describe(), {
+                ...(declared?.clientModule === undefined ? {} : { clientModule: declared.clientModule }),
+            }),
+        });
+    },
+});
+/** In the order SPEC.md §77 lists them, which is the order the help prints them in. */
+export const artifactCommands = [OpenApi, Sdk];
+register(...artifactCommands);
+//# sourceMappingURL=artifacts.js.map

package/dist/commands/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../src/commands/artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAI/D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAmB,MAAM,YAAY,CAAA;AACxD,OAAO,EAAqB,UAAU,EAAE,MAAM,cAAc,CAAA;AAC5D,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAExD,yFAAyF;AACzF,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,GAAW,EAAU,EAAE;IACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAEhC,OAAO,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;AAC/E,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,IAAI,GAAG,KAAK,EAAE,KAOnB,EAAmB,EAAE;IACpB,kFAAkF;IAClF,oDAAoD;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAE/C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,CAAA;QACV,OAAO,CAAC,CAAA;IACV,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAA;IAE9F,+EAA+E;IAC/E,uDAAuD;IACvD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE/C,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,CAAA;IACzB,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;IAEpC,EAAE,CAAC,SAAS,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAE5E,OAAO,CAAC,CAAA;AACV,CAAC,CAAA;AAED,MAAM,mBAAmB,GAAG,cAAc,CAAA;AAE1C,MAAM,eAAe,GAAgB,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;AAExF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,GAAW,EAAsB,EAAE;IACnE,MAAM,KAAK,GACT,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QACzC,CAAC,CAAE,KAAiC,CAAC,GAAG,CAAC;QACzC,CAAC,CAAC,SAAS,CAAA;IAEf,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACtE,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,GAAG,KAAK,EAAE,MAAoB,EAAwB,EAAE;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAA;IAE5C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IAE3C,MAAM,QAAQ,GAAY,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;SAC7E,IAAI,CAAC,CAAC,QAAQ,EAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;SACjD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAEzB,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,eAAe,CAAC,KAAK;QAC1D,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,eAAe,CAAC,OAAO;KAClE,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC;IACnC,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,WAAW;IAClB,OAAO,EAAE,uEAAuE;IAChF,KAAK,EAAE,gDAAgD;IACvD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QACpC,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAA;QAEzC,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAA;QAElE,OAAO,IAAI,CAAC;YACV,IAAI;YACJ,GAAG;YACH,MAAM;YACN,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG;YACpC,QAAQ,EAAE,mBAAmB;YAC7B,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;SAC7F,CAAC,CAAA;IACJ,CAAC;CACF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,GAAG,GAAG,aAAa,CAAC;IAC/B,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,WAAW;IAClB,OAAO,EAAE,6CAA6C;IACtD,KAAK,EAAE,iDAAiD;IACxD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;QAC/B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QACpC,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAA;QAEzC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAA;QAErD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA;QAElC,OAAO,IAAI,CAAC;YACV,IAAI;YACJ,GAAG;YACH,MAAM;YACN,QAAQ,EAAE,QAAQ,EAAE,GAAG;YACvB,yEAAyE;YACzE,8EAA8E;YAC9E,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC;YAC1D,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE;gBAC7C,GAAG,CAAC,QAAQ,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;aACzF,CAAC;SACH,CAAC,CAAA;IACJ,CAAC;CACF,CAAC,CAAA;AAEF,uFAAuF;AACvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,GAAG,CAAU,CAAA;AAEvD,QAAQ,CAAC,GAAG,gBAAgB,CAAC,CAAA"}

package/dist/commands/console.d.ts

@@ -0,0 +1,25 @@
+import type { Application } from '@assemora/core';
+/**
+ * What the console needs of an application, which is less than all of it.
+ *
+ * Naming the four members here is what lets a test hand over something small, and it
+ * says plainly that the console reaches for nothing else.
+ */
+export type ConsoleApplication = Pick<Application, 'commands' | 'queries' | 'registry' | 'run' | 'shutdown'>;
+export type ConsoleSession = {
+    /** Defaults to `process.stdin`. */
+    readonly input?: NodeJS.ReadableStream;
+    /** Defaults to `process.stdout`. */
+    readonly output?: NodeJS.WritableStream;
+    /** Defaults to whether stdin is a terminal. */
+    readonly terminal?: boolean;
+};
+/**
+ * Opens the REPL and resolves once it has closed and the application has stopped.
+ *
+ * The application is a parameter rather than something this function loads, so the
+ * whole of the console's behaviour — what is in scope, what `.exit` does, whether it
+ * returns at all — is drivable from a test with two streams.
+ */
+export declare const openConsole: (app: ConsoleApplication, session?: ConsoleSession) => Promise<void>;
+//# sourceMappingURL=console.d.ts.map

package/dist/commands/console.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"console.d.ts","sourceRoot":"","sources":["../../src/commands/console.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAOjD;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,WAAW,EACX,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,KAAK,GAAG,UAAU,CACzD,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,mCAAmC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAA;IACtC,oCAAoC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAA;IACvC,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC5B,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,QACjB,kBAAkB,YACd,cAAc,KACtB,OAAO,CAAC,IAAI,CAqEd,CAAA"}

package/dist/commands/console.js

@@ -0,0 +1,99 @@
+/**
+ * `assemora console` — a REPL holding the project's application (SPEC.md §77).
+ *
+ * The console is not a back door. What it puts in scope is the Command Bus, the
+ * Query Bus and the Schema Registry — the same three doors Studio, REST and MCP go
+ * through — so a mutation typed here passes validation, authorization, revisions and
+ * audit exactly as one typed anywhere else does (ADR-0021). There is no database
+ * handle in scope, and this package could not obtain one.
+ *
+ * The one thing a console must get right is leaving. `.exit` closes the application
+ * so the pool it opened goes with it, and the command does not answer until the REPL
+ * has closed and released the input it was reading — a REPL that prints its goodbye
+ * and then holds the terminal is the failure this file is written against.
+ */
+import { start } from 'node:repl';
+import { loadConfig } from '../config.js';
+import { line } from '../output.js';
+import { loadApplication } from '../project.js';
+import { defineCommand, register } from '../registry.js';
+/**
+ * Opens the REPL and resolves once it has closed and the application has stopped.
+ *
+ * The application is a parameter rather than something this function loads, so the
+ * whole of the console's behaviour — what is in scope, what `.exit` does, whether it
+ * returns at all — is drivable from a test with two streams.
+ */
+export const openConsole = async (app, session = {}) => {
+    const input = session.input ?? process.stdin;
+    const output = session.output ?? process.stdout;
+    const terminal = session.terminal ?? process.stdin.isTTY === true;
+    /**
+     * Runs an operation as a user, inside a context the application can see.
+     *
+     * A read typed here is authorized exactly as a read from Studio is, so
+     * `queries.execute('auth.agents.list', {})` answers nothing until it is told who
+     * is asking. `as` is how the console says who that is (SPEC.md §12).
+     */
+    const as = (actorId, operation) => app.run({ source: 'cli', actor: { type: 'user', id: actorId } }, async () => operation());
+    const repl = start({
+        input,
+        output,
+        terminal,
+        useColors: terminal,
+        prompt: 'assemora > ',
+        // A context of its own rather than the CLI's globals: `commands` and `queries`
+        // are the names an operator reaches for first, and neither should be able to
+        // collide with something this process happens to have defined.
+        useGlobal: false,
+        ignoreUndefined: true,
+    });
+    const scope = {
+        app,
+        commands: app.commands,
+        queries: app.queries,
+        registry: app.registry,
+        as,
+    };
+    // Defined rather than assigned, so `app = null` typed by accident is an error
+    // instead of the rest of the session being useless. `.clear` builds a fresh
+    // context, which is why they are put back on every reset.
+    const define = () => {
+        for (const [name, value] of Object.entries(scope)) {
+            Object.defineProperty(repl.context, name, { value, enumerable: true, configurable: true });
+        }
+    };
+    define();
+    repl.on('reset', define);
+    line('Assemora console. The application is booted; everything below is in scope.');
+    line();
+    line('  app        the application itself');
+    line("  commands   await commands.execute('entries.create', { resource: 'posts', data: {} })");
+    line("  queries    await queries.execute('pages.list', {})");
+    line('  registry   registry.describe()');
+    line("  as         await as('user-id', () => queries.execute('auth.agents.list', {}))");
+    line();
+    line('.exit closes the application and leaves.');
+    await new Promise((resolve) => {
+        repl.once('exit', () => {
+            resolve();
+        });
+    });
+    // The REPL stops reading when it closes, but an input it was handed rather than
+    // one it created can still hold the event loop open, and stdin always does.
+    input.pause();
+    await app.shutdown();
+};
+const consoleCommand = async ({ cwd }) => {
+    const loaded = await loadConfig(cwd);
+    await openConsole(await loadApplication(loaded));
+    return 0;
+};
+register(defineCommand({
+    name: 'console',
+    group: 'console',
+    summary: 'open a REPL holding the booted application',
+    usage: 'assemora console',
+    handler: consoleCommand,
+}));
+//# sourceMappingURL=console.js.map

package/dist/commands/console.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"console.js","sourceRoot":"","sources":["../../src/commands/console.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAIjC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAA;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAuB,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AAsB7E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAC9B,GAAuB,EACvB,OAAO,GAAmB,EAAE,EACb,EAAE;IACjB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAA;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAA;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAA;IAEjE;;;;;;OAMG;IACH,MAAM,EAAE,GAAG,CAAI,OAAe,EAAE,SAA+B,EAAc,EAAE,CAC7E,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC,CAAA;IAE3F,MAAM,IAAI,GAAG,KAAK,CAAC;QACjB,KAAK;QACL,MAAM;QACN,QAAQ;QACR,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,aAAa;QACrB,+EAA+E;QAC/E,6EAA6E;QAC7E,+DAA+D;QAC/D,SAAS,EAAE,KAAK;QAChB,eAAe,EAAE,IAAI;KACtB,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG;QACZ,GAAG;QACH,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,EAAE;KACH,CAAA;IAED,8EAA8E;IAC9E,4EAA4E;IAC5E,0DAA0D;IAC1D,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5F,CAAC;IACH,CAAC,CAAA;IAED,MAAM,EAAE,CAAA;IACR,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAExB,IAAI,CAAC,4EAA4E,CAAC,CAAA;IAClF,IAAI,EAAE,CAAA;IACN,IAAI,CAAC,qCAAqC,CAAC,CAAA;IAC3C,IAAI,CAAC,wFAAwF,CAAC,CAAA;IAC9F,IAAI,CAAC,sDAAsD,CAAC,CAAA;IAC5D,IAAI,CAAC,kCAAkC,CAAC,CAAA;IACxC,IAAI,CAAC,iFAAiF,CAAC,CAAA;IACvF,IAAI,EAAE,CAAA;IACN,IAAI,CAAC,0CAA0C,CAAC,CAAA;IAEhD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YACrB,OAAO,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,gFAAgF;IAChF,4EAA4E;IAC5E,KAAK,CAAC,KAAK,EAAE,CAAA;IAEb,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAA;AACtB,CAAC,CAAA;AAED,MAAM,cAAc,GAAmB,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;IACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;IAEpC,MAAM,WAAW,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC,CAAA;IAEhD,OAAO,CAAC,CAAA;AACV,CAAC,CAAA;AAED,QAAQ,CACN,aAAa,CAAC;IACZ,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,4CAA4C;IACrD,KAAK,EAAE,kBAAkB;IACzB,OAAO,EAAE,cAAc;CACxB,CAAC,CACH,CAAA"}

package/dist/commands/db.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Everything a migration is, in either direction.
+ *
+ * The generator produces one and the file writer consumes one; the parser turns a
+ * file back into one. Having a single type for all three is what makes the round trip
+ * something a test can state in one line.
+ */
+export type MigrationContent = {
+    readonly up: readonly string[];
+    readonly down: readonly string[];
+    /** One sentence per `up` statement that changes or destroys stored data. */
+    readonly destructive: readonly string[];
+};
+/**
+ * Reads a migration file back into the statements it holds.
+ *
+ * A file with no `-- +migration` marker at all is read as an `up` migration, which is
+ * what somebody who dropped a plain `.sql` file into the directory meant. `file` is
+ * only ever used to name the file in a complaint.
+ */
+export declare const parseMigration: (text: string, file: string) => MigrationContent;
+/** The text of a migration file, from what the generator produced. */
+export declare const migrationFileText: (name: string, generated: MigrationContent) => string;
+export type MigrationFile = {
+    /** `0002_add-sku` — what the runner records as applied, and what sorts. */
+    readonly name: string;
+    readonly path: string;
+    readonly number: number;
+    readonly up: readonly string[];
+    readonly down: readonly string[];
+    readonly destructive: readonly string[];
+};
+/** Every migration in the directory, in the order they must run. */
+export declare const readMigrations: (directory: string) => Promise<readonly MigrationFile[]>;
+/** One past the highest number already there, always four digits. */
+export declare const nextMigrationNumber: (filenames: readonly string[]) => string;
+/**
+ * `Add products!` becomes `add-products`, which is how SPEC.md §34 writes one.
+ *
+ * Empty is a valid answer, and the caller is what refuses it: a name made entirely of
+ * punctuation is a mistake worth naming, not one to paper over with a default.
+ */
+export declare const migrationSlug: (name: string) => string;
+export declare const dbGenerate: import("../registry.js").CliCommand;
+export declare const dbMigrate: import("../registry.js").CliCommand;
+export declare const dbRollback: import("../registry.js").CliCommand;
+export declare const dbStatus: import("../registry.js").CliCommand;
+//# sourceMappingURL=db.d.ts.map

package/dist/commands/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/commands/db.ts"],"names":[],"mappings":"AAgCA;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,EAAE,EAAE,SAAS,MAAM,EAAE,CAAA;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;CACxC,CAAA;AAyID;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,SAAU,MAAM,QAAQ,MAAM,KAAG,gBA6F3D,CAAA;AAKD,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,SAAU,MAAM,aAAa,gBAAgB,KAAG,MAY9D,CAAA;AAUhB,MAAM,MAAM,aAAa,GAAG;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,EAAE,SAAS,MAAM,EAAE,CAAA;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;CACxC,CAAA;AAiCD,oEAAoE;AACpE,eAAO,MAAM,cAAc,cAAqB,MAAM,KAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CA6BxF,CAAA;AAeD,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,cAAe,SAAS,MAAM,EAAE,KAAG,MAQlE,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,aAAa,SAAU,MAAM,KAAG,MAIjB,CAAA;AAsK5B,eAAO,MAAM,UAAU,qCA4ErB,CAAA;AA8BF,eAAO,MAAM,SAAS,qCAsDpB,CAAA;AAEF,eAAO,MAAM,UAAU,qCA4CrB,CAAA;AAEF,eAAO,MAAM,QAAQ,qCAwCnB,CAAA"}