@astrale-os/cli 1.0.0-beta.9 → 1.0.0-npm-deprecated.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -166
- package/package.json +10 -102
- package/.check-workspace.cjs +0 -40
- package/LICENSE +0 -202
- package/THIRD-PARTY-NOTICES.md +0 -27
- package/dist/astrale.js +0 -93344
- package/dist/public/connect-core.js +0 -29187
- package/dist/public/keys/index.js +0 -5651
- package/dist/public/paths/index.js +0 -4282
- package/dist/types/admin/binding.d.ts +0 -19
- package/dist/types/admin/instance/client.d.ts +0 -22
- package/dist/types/admin/instance/index.d.ts +0 -2
- package/dist/types/admin/instance/model.d.ts +0 -33
- package/dist/types/connect-core.d.ts +0 -22
- package/dist/types/connection/auth.d.ts +0 -39
- package/dist/types/connection/call.d.ts +0 -3
- package/dist/types/connection/command.d.ts +0 -27
- package/dist/types/connection/credential.d.ts +0 -14
- package/dist/types/connection/errors.d.ts +0 -1
- package/dist/types/connection/exchange.d.ts +0 -9
- package/dist/types/connection/failure/classify.d.ts +0 -2
- package/dist/types/connection/failure/index.d.ts +0 -5
- package/dist/types/connection/failure/model.d.ts +0 -25
- package/dist/types/connection/failure/render.d.ts +0 -3
- package/dist/types/connection/index.d.ts +0 -8
- package/dist/types/connection/reasons.d.ts +0 -37
- package/dist/types/connection/self.d.ts +0 -37
- package/dist/types/connection/session.d.ts +0 -31
- package/dist/types/connection/target.d.ts +0 -38
- package/dist/types/errors.d.ts +0 -23
- package/dist/types/identity/registry.d.ts +0 -25
- package/dist/types/keys/algorithm.d.ts +0 -6
- package/dist/types/keys/credential.d.ts +0 -21
- package/dist/types/keys/index.d.ts +0 -4
- package/dist/types/keys/pair.d.ts +0 -34
- package/dist/types/lib/admin-instance.d.ts +0 -17
- package/dist/types/lib/admin-target.d.ts +0 -78
- package/dist/types/lib/ca-fetch.d.ts +0 -2
- package/dist/types/lib/config.d.ts +0 -71
- package/dist/types/lib/failure-debug.d.ts +0 -1
- package/dist/types/lib/format.d.ts +0 -1
- package/dist/types/lib/idp-session.d.ts +0 -33
- package/dist/types/lib/idp.d.ts +0 -404
- package/dist/types/lib/instance-target.d.ts +0 -38
- package/dist/types/lib/instance.d.ts +0 -202
- package/dist/types/lib/invocation.d.ts +0 -3
- package/dist/types/lib/log.d.ts +0 -33
- package/dist/types/lib/login-flow.d.ts +0 -49
- package/dist/types/lib/meta.d.ts +0 -36
- package/dist/types/lib/output.d.ts +0 -87
- package/dist/types/lib/proc.d.ts +0 -43
- package/dist/types/lib/self.d.ts +0 -9
- package/dist/types/lib/table.d.ts +0 -18
- package/dist/types/lib/update.d.ts +0 -131
- package/dist/types/lib/validation.d.ts +0 -11
- package/dist/types/paths/index.d.ts +0 -2
- package/dist/types/state/exchange-credentials.d.ts +0 -25
- package/dist/types/state/files.d.ts +0 -9
- package/dist/types/state/identities.d.ts +0 -42
- package/dist/types/state/index.d.ts +0 -8
- package/dist/types/state/paths.d.ts +0 -32
- package/src/__tests__/fixtures/publication.ts +0 -20
- package/src/admin/.spec/api.d.ts +0 -3
- package/src/admin/.spec/architecture.md +0 -15
- package/src/admin/.spec/icon.svg +0 -3
- package/src/admin/.spec/layout.ts +0 -6
- package/src/admin/__tests__/binding.test.ts +0 -31
- package/src/admin/__tests__/fixture.ts +0 -101
- package/src/admin/binding.ts +0 -98
- package/src/admin/catalog/.spec/api.d.ts +0 -65
- package/src/admin/catalog/.spec/architecture.md +0 -6
- package/src/admin/catalog/.spec/icon.svg +0 -3
- package/src/admin/catalog/.spec/layout.ts +0 -6
- package/src/admin/catalog/__tests__/client.test.ts +0 -142
- package/src/admin/catalog/client.ts +0 -218
- package/src/admin/catalog/index.ts +0 -13
- package/src/admin/catalog/model.ts +0 -41
- package/src/admin/catalog/tsconfig.json +0 -8
- package/src/admin/graph/.spec/api.d.ts +0 -22
- package/src/admin/graph/.spec/architecture.md +0 -5
- package/src/admin/graph/.spec/icon.svg +0 -3
- package/src/admin/graph/.spec/layout.ts +0 -3
- package/src/admin/graph/index.ts +0 -6
- package/src/admin/graph/nodes.ts +0 -56
- package/src/admin/index.ts +0 -2
- package/src/admin/instance/.spec/api.d.ts +0 -66
- package/src/admin/instance/.spec/architecture.md +0 -10
- package/src/admin/instance/.spec/icon.svg +0 -3
- package/src/admin/instance/.spec/layout.ts +0 -6
- package/src/admin/instance/__tests__/client.test.ts +0 -166
- package/src/admin/instance/client.ts +0 -196
- package/src/admin/instance/index.ts +0 -15
- package/src/admin/instance/model.ts +0 -56
- package/src/admin/instance/tsconfig.json +0 -8
- package/src/commands/__tests__/admin-instance.test.ts +0 -91
- package/src/commands/__tests__/auth-login.test.ts +0 -231
- package/src/commands/__tests__/auth-token.test.ts +0 -223
- package/src/commands/__tests__/call-describe.test.ts +0 -80
- package/src/commands/__tests__/call.test.ts +0 -29
- package/src/commands/__tests__/domain-install-operation.test.ts +0 -126
- package/src/commands/__tests__/domain-install-owned.test.ts +0 -191
- package/src/commands/__tests__/domain-list.test.ts +0 -133
- package/src/commands/__tests__/domain-uninstall.test.ts +0 -53
- package/src/commands/__tests__/install-direct.test.ts +0 -21
- package/src/commands/__tests__/install-identity-override.test.ts +0 -76
- package/src/commands/__tests__/instance-bookmark.test.ts +0 -166
- package/src/commands/__tests__/instance-list-admin.test.ts +0 -26
- package/src/commands/__tests__/instance-list-rows.test.ts +0 -64
- package/src/commands/__tests__/instance-use.test.ts +0 -67
- package/src/commands/__tests__/introspect-parse.test.ts +0 -21
- package/src/commands/__tests__/logs.test.ts +0 -97
- package/src/commands/__tests__/read-commands.test.ts +0 -294
- package/src/commands/__tests__/setup-plan.test.ts +0 -61
- package/src/commands/__tests__/studio-descriptor.test.ts +0 -22
- package/src/commands/__tests__/token-ttl.test.ts +0 -21
- package/src/commands/__tests__/update.test.ts +0 -95
- package/src/commands/__tests__/view-build.test.ts +0 -58
- package/src/commands/__tests__/view.test.ts +0 -149
- package/src/commands/admin/status.ts +0 -61
- package/src/commands/admin/use.ts +0 -100
- package/src/commands/auth/login.ts +0 -82
- package/src/commands/auth/logout.ts +0 -52
- package/src/commands/auth/status.ts +0 -86
- package/src/commands/auth/token.ts +0 -174
- package/src/commands/browser.ts +0 -207
- package/src/commands/call-describe.ts +0 -123
- package/src/commands/call.ts +0 -205
- package/src/commands/domain/install.ts +0 -548
- package/src/commands/domain/list.ts +0 -155
- package/src/commands/domain/publish.ts +0 -136
- package/src/commands/domain/uninstall.ts +0 -128
- package/src/commands/get.ts +0 -69
- package/src/commands/identity/__tests__/register.test.ts +0 -93
- package/src/commands/identity/create.ts +0 -35
- package/src/commands/identity/delete.ts +0 -24
- package/src/commands/identity/export.ts +0 -46
- package/src/commands/identity/import.ts +0 -61
- package/src/commands/identity/list.ts +0 -56
- package/src/commands/identity/register.ts +0 -196
- package/src/commands/identity/sync.ts +0 -38
- package/src/commands/identity/unsync.ts +0 -34
- package/src/commands/identity/use.ts +0 -24
- package/src/commands/identity/whoami.ts +0 -34
- package/src/commands/idp/add.ts +0 -150
- package/src/commands/idp/list.ts +0 -57
- package/src/commands/idp/refresh.ts +0 -38
- package/src/commands/idp/remove.ts +0 -36
- package/src/commands/idp/show.ts +0 -29
- package/src/commands/instance/active.ts +0 -73
- package/src/commands/instance/bookmark.ts +0 -101
- package/src/commands/instance/create.ts +0 -61
- package/src/commands/instance/delete.ts +0 -69
- package/src/commands/instance/forget.ts +0 -26
- package/src/commands/instance/list.ts +0 -197
- package/src/commands/instance/status.ts +0 -38
- package/src/commands/instance/use.ts +0 -263
- package/src/commands/introspect.ts +0 -110
- package/src/commands/logs.ts +0 -283
- package/src/commands/mutate.ts +0 -122
- package/src/commands/query.ts +0 -136
- package/src/commands/session/analyze.ts +0 -50
- package/src/commands/session/list.ts +0 -36
- package/src/commands/setup.ts +0 -54
- package/src/commands/status.ts +0 -60
- package/src/commands/studio.ts +0 -434
- package/src/commands/token.ts +0 -107
- package/src/commands/update.ts +0 -334
- package/src/commands/use.ts +0 -86
- package/src/commands/view-serve.ts +0 -26
- package/src/commands/view.ts +0 -614
- package/src/connect-core.test.ts +0 -38
- package/src/connect-core.ts +0 -42
- package/src/connection/.spec/api.d.ts +0 -110
- package/src/connection/.spec/architecture.md +0 -47
- package/src/connection/.spec/capabilities/connection.ts +0 -13
- package/src/connection/.spec/examples/call.ts +0 -7
- package/src/connection/.spec/flows/command.ts +0 -20
- package/src/connection/.spec/flows/session.ts +0 -61
- package/src/connection/.spec/laws/connection.ts +0 -205
- package/src/connection/.spec/layout.ts +0 -21
- package/src/connection/__tests__/auth.test.ts +0 -128
- package/src/connection/__tests__/ca-fetch.test.ts +0 -60
- package/src/connection/__tests__/call.test.ts +0 -17
- package/src/connection/__tests__/credential.test.ts +0 -138
- package/src/connection/__tests__/errors.test.ts +0 -577
- package/src/connection/__tests__/exchange.test.ts +0 -295
- package/src/connection/__tests__/failure-fixtures.ts +0 -39
- package/src/connection/__tests__/failure-safety.test.ts +0 -75
- package/src/connection/__tests__/fixtures/localhost-cert.pem +0 -19
- package/src/connection/__tests__/fixtures/localhost-key.base64 +0 -1
- package/src/connection/__tests__/managed.test.ts +0 -39
- package/src/connection/__tests__/reasons.test.ts +0 -78
- package/src/connection/__tests__/self.test.ts +0 -71
- package/src/connection/__tests__/session.test.ts +0 -140
- package/src/connection/__tests__/target.test.ts +0 -94
- package/src/connection/auth.ts +0 -249
- package/src/connection/call.ts +0 -7
- package/src/connection/command.ts +0 -67
- package/src/connection/credential.ts +0 -117
- package/src/connection/errors.ts +0 -1
- package/src/connection/exchange.ts +0 -311
- package/src/connection/failure/classify.ts +0 -110
- package/src/connection/failure/index.ts +0 -18
- package/src/connection/failure/model.ts +0 -28
- package/src/connection/failure/render.ts +0 -116
- package/src/connection/index.ts +0 -8
- package/src/connection/reasons.ts +0 -209
- package/src/connection/self.ts +0 -138
- package/src/connection/session.ts +0 -196
- package/src/connection/target.ts +0 -112
- package/src/connection/tsconfig.json +0 -6
- package/src/errors.ts +0 -66
- package/src/graph/.spec/api.d.ts +0 -41
- package/src/graph/.spec/laws/documents.ts +0 -24
- package/src/graph/.spec/laws/projection.ts +0 -13
- package/src/graph/.spec/layout.ts +0 -14
- package/src/graph/__tests__/mutation.test.ts +0 -51
- package/src/graph/__tests__/projection.test.ts +0 -22
- package/src/graph/__tests__/query.test.ts +0 -173
- package/src/graph/class.ts +0 -30
- package/src/graph/index.ts +0 -4
- package/src/graph/mutation.ts +0 -46
- package/src/graph/projection.ts +0 -21
- package/src/graph/query.ts +0 -97
- package/src/graph/tsconfig.json +0 -6
- package/src/identity/.history/ard/bootstrap-root-transfer.md +0 -57
- package/src/identity/.history/ard/domain-mediated-registration.md +0 -36
- package/src/identity/.spec/api.d.ts +0 -124
- package/src/identity/.spec/architecture.md +0 -33
- package/src/identity/.spec/capabilities/identity.ts +0 -7
- package/src/identity/.spec/flows/bootstrap-root.ts +0 -79
- package/src/identity/.spec/flows/domain-mediated-registration.ts +0 -51
- package/src/identity/.spec/flows/import.ts +0 -29
- package/src/identity/.spec/laws/identity.ts +0 -56
- package/src/identity/.spec/layout.ts +0 -13
- package/src/identity/.spec/schemas/identity-export-v1.schema.json +0 -25
- package/src/identity/__tests__/fixtures/registry-journey.ts +0 -53
- package/src/identity/__tests__/registration.test.ts +0 -64
- package/src/identity/__tests__/registry.test.ts +0 -70
- package/src/identity/__tests__/transfer.test.ts +0 -198
- package/src/identity/index.ts +0 -23
- package/src/identity/registration.ts +0 -72
- package/src/identity/registry.ts +0 -179
- package/src/identity/transfer.ts +0 -187
- package/src/identity/tsconfig.json +0 -6
- package/src/index.ts +0 -1
- package/src/keys/.spec/api.d.ts +0 -74
- package/src/keys/.spec/architecture.md +0 -13
- package/src/keys/.spec/laws/keys.ts +0 -43
- package/src/keys/.spec/layout.ts +0 -6
- package/src/keys/__tests__/algorithm.test.ts +0 -39
- package/src/keys/__tests__/keys.test.ts +0 -168
- package/src/keys/algorithm.ts +0 -33
- package/src/keys/credential.ts +0 -112
- package/src/keys/index.ts +0 -14
- package/src/keys/pair.ts +0 -219
- package/src/keys/tsconfig.json +0 -6
- package/src/lib/__tests__/admin-target.test.ts +0 -184
- package/src/lib/__tests__/binary.test.ts +0 -55
- package/src/lib/__tests__/command-dx.test.ts +0 -102
- package/src/lib/__tests__/concurrency.test.ts +0 -62
- package/src/lib/__tests__/config.test.ts +0 -54
- package/src/lib/__tests__/design.test.ts +0 -99
- package/src/lib/__tests__/domain-publication.test.ts +0 -138
- package/src/lib/__tests__/format.test.ts +0 -22
- package/src/lib/__tests__/idp-session.driver.ts +0 -53
- package/src/lib/__tests__/idp-session.test.ts +0 -379
- package/src/lib/__tests__/idp.test.ts +0 -415
- package/src/lib/__tests__/instance-candidates.test.ts +0 -146
- package/src/lib/__tests__/instance-target.test.ts +0 -213
- package/src/lib/__tests__/instance.test.ts +0 -192
- package/src/lib/__tests__/local-status.test.ts +0 -202
- package/src/lib/__tests__/log-errors.test.ts +0 -64
- package/src/lib/__tests__/log.test.ts +0 -31
- package/src/lib/__tests__/meta.test.ts +0 -55
- package/src/lib/__tests__/output.test.ts +0 -162
- package/src/lib/__tests__/panel.test.ts +0 -40
- package/src/lib/__tests__/port.test.ts +0 -44
- package/src/lib/__tests__/prompt.test.ts +0 -25
- package/src/lib/__tests__/sdk-deps.test.ts +0 -68
- package/src/lib/__tests__/self.test.ts +0 -50
- package/src/lib/__tests__/studio-server-deps.test.ts +0 -111
- package/src/lib/__tests__/table.test.ts +0 -53
- package/src/lib/__tests__/update.test.ts +0 -351
- package/src/lib/__tests__/use-target.test.ts +0 -56
- package/src/lib/__tests__/validation.test.ts +0 -34
- package/src/lib/__tests__/view-assets.test.ts +0 -146
- package/src/lib/__tests__/view-open-intent.test.ts +0 -280
- package/src/lib/__tests__/view-port-allocation.test.ts +0 -82
- package/src/lib/__tests__/view-server.test.ts +0 -68
- package/src/lib/__tests__/view-session.test.ts +0 -99
- package/src/lib/__tests__/view-snapshot.test.ts +0 -77
- package/src/lib/admin-domain.ts +0 -43
- package/src/lib/admin-instance.ts +0 -56
- package/src/lib/admin-target.ts +0 -290
- package/src/lib/binary.ts +0 -110
- package/src/lib/browser.ts +0 -150
- package/src/lib/ca-fetch.ts +0 -133
- package/src/lib/command-dx.ts +0 -191
- package/src/lib/concurrency.ts +0 -31
- package/src/lib/config.ts +0 -46
- package/src/lib/domain-publication.ts +0 -104
- package/src/lib/failure-debug.ts +0 -26
- package/src/lib/format.ts +0 -4
- package/src/lib/idp-session.ts +0 -134
- package/src/lib/idp.ts +0 -906
- package/src/lib/instance-candidates.ts +0 -49
- package/src/lib/instance-target.ts +0 -197
- package/src/lib/instance.ts +0 -467
- package/src/lib/invocation.ts +0 -11
- package/src/lib/local-status.ts +0 -152
- package/src/lib/log.ts +0 -143
- package/src/lib/login-flow.ts +0 -201
- package/src/lib/meta.ts +0 -90
- package/src/lib/output.ts +0 -238
- package/src/lib/panel.ts +0 -61
- package/src/lib/port.ts +0 -41
- package/src/lib/proc.ts +0 -82
- package/src/lib/prompt.ts +0 -136
- package/src/lib/provision-instance.ts +0 -139
- package/src/lib/sdk-deps.ts +0 -104
- package/src/lib/self.ts +0 -22
- package/src/lib/skills.ts +0 -171
- package/src/lib/table.ts +0 -62
- package/src/lib/update.ts +0 -409
- package/src/lib/use-target.ts +0 -24
- package/src/lib/validation.ts +0 -59
- package/src/lib/view/assets.ts +0 -78
- package/src/lib/view/open-intent.ts +0 -67
- package/src/lib/view/port-allocation.ts +0 -19
- package/src/lib/view/resolve.ts +0 -111
- package/src/lib/view/server.ts +0 -244
- package/src/lib/view/session.ts +0 -152
- package/src/lib/view/snapshot.ts +0 -101
- package/src/paths/.spec/api.d.ts +0 -13
- package/src/paths/.spec/architecture.md +0 -5
- package/src/paths/.spec/layout.ts +0 -3
- package/src/paths/index.ts +0 -13
- package/src/program/.spec/api.d.ts +0 -42
- package/src/program/.spec/architecture.md +0 -18
- package/src/program/.spec/laws/program.ts +0 -29
- package/src/program/.spec/layout.ts +0 -14
- package/src/program/__tests__/program.test.ts +0 -378
- package/src/program/build.ts +0 -183
- package/src/program/command.ts +0 -42
- package/src/program/index.ts +0 -2
- package/src/program/options.ts +0 -41
- package/src/program/registry.ts +0 -63
- package/src/program/tsconfig.json +0 -6
- package/src/setup/__tests__/instance-step.test.ts +0 -256
- package/src/setup/__tests__/util.test.ts +0 -29
- package/src/setup/engine.ts +0 -83
- package/src/setup/render.ts +0 -107
- package/src/setup/steps/admin.ts +0 -93
- package/src/setup/steps/agent-browser.ts +0 -81
- package/src/setup/steps/auth.ts +0 -54
- package/src/setup/steps/domain.ts +0 -68
- package/src/setup/steps/index.ts +0 -18
- package/src/setup/steps/instance.ts +0 -206
- package/src/setup/steps/skills-bridge.ts +0 -70
- package/src/setup/steps/skills.ts +0 -59
- package/src/setup/types.ts +0 -61
- package/src/setup/util.ts +0 -34
- package/src/state/.spec/api.d.ts +0 -133
- package/src/state/.spec/architecture.md +0 -31
- package/src/state/.spec/capabilities/state.ts +0 -7
- package/src/state/.spec/flows/identity-update.ts +0 -22
- package/src/state/.spec/laws/state.ts +0 -73
- package/src/state/.spec/layout.ts +0 -14
- package/src/state/__tests__/exchange-credentials.test.ts +0 -188
- package/src/state/__tests__/files.test.ts +0 -113
- package/src/state/__tests__/fixtures/identity-transition.ts +0 -37
- package/src/state/__tests__/identities.test.ts +0 -142
- package/src/state/__tests__/paths.test.ts +0 -27
- package/src/state/exchange-credentials.ts +0 -219
- package/src/state/files.ts +0 -129
- package/src/state/identities.ts +0 -229
- package/src/state/index.ts +0 -29
- package/src/state/paths.ts +0 -61
- package/src/state/tsconfig.json +0 -6
- package/src/telemetry/__tests__/gate.test.ts +0 -63
- package/src/telemetry/__tests__/recorder.test.ts +0 -110
- package/src/telemetry/__tests__/redact.test.ts +0 -79
- package/src/telemetry/__tests__/session.test.ts +0 -166
- package/src/telemetry/__tests__/trigger.test.ts +0 -49
- package/src/telemetry/adapters/__tests__/claude-code.test.ts +0 -89
- package/src/telemetry/adapters/__tests__/codex.test.ts +0 -138
- package/src/telemetry/adapters/__tests__/index.test.ts +0 -88
- package/src/telemetry/adapters/claude-code.ts +0 -90
- package/src/telemetry/adapters/codex.ts +0 -160
- package/src/telemetry/adapters/index.ts +0 -45
- package/src/telemetry/adapters/types.ts +0 -21
- package/src/telemetry/analyze.ts +0 -227
- package/src/telemetry/gate.ts +0 -79
- package/src/telemetry/recorder.ts +0 -57
- package/src/telemetry/redact.ts +0 -53
- package/src/telemetry/session.ts +0 -88
- package/src/telemetry/settings.ts +0 -26
- package/src/telemetry/store.ts +0 -91
- package/src/telemetry/trigger.ts +0 -119
- package/src/telemetry/types.ts +0 -64
- package/src/test-utils.ts +0 -18
- package/studio/client/dist/assets/elk-api-ByzoDZWH.js +0 -1
- package/studio/client/dist/assets/elk-worker.min-C9JGDOE-.js +0 -6312
- package/studio/client/dist/assets/index-B0RCgUOT.js +0 -8
- package/studio/client/dist/assets/index-BiGR8Oo9.css +0 -1
- package/studio/client/dist/assets/index-ChOr3yP0.css +0 -1
- package/studio/client/dist/assets/index-N8J8EKlB.js +0 -81
- package/studio/client/dist/index.html +0 -13
- package/studio/package.json +0 -65
- package/studio/server/agent/ask.test.ts +0 -74
- package/studio/server/agent/ask.ts +0 -71
- package/studio/server/agent/bridge/client.test.ts +0 -49
- package/studio/server/agent/bridge/client.ts +0 -37
- package/studio/server/agent/bridge/grant.test.ts +0 -62
- package/studio/server/agent/bridge/grant.ts +0 -84
- package/studio/server/agent/bridge/routes.test.ts +0 -151
- package/studio/server/agent/bridge/routes.ts +0 -148
- package/studio/server/agent/bridge/stdio.ts +0 -195
- package/studio/server/agent/conversation.test.ts +0 -89
- package/studio/server/agent/conversation.ts +0 -158
- package/studio/server/agent/harness/adapter.ts +0 -171
- package/studio/server/agent/harness/claude/adapter.test.ts +0 -348
- package/studio/server/agent/harness/claude/adapter.ts +0 -71
- package/studio/server/agent/harness/claude/ask.ts +0 -114
- package/studio/server/agent/harness/claude/capabilities.ts +0 -27
- package/studio/server/agent/harness/claude/command.ts +0 -63
- package/studio/server/agent/harness/claude/events.ts +0 -215
- package/studio/server/agent/harness/claude/loadout.ts +0 -132
- package/studio/server/agent/harness/claude/mcp.test.ts +0 -36
- package/studio/server/agent/harness/claude/mcp.ts +0 -41
- package/studio/server/agent/harness/claude/skills.ts +0 -43
- package/studio/server/agent/harness/codex/adapter.test.ts +0 -269
- package/studio/server/agent/harness/codex/adapter.ts +0 -116
- package/studio/server/agent/harness/codex/ask.test.ts +0 -176
- package/studio/server/agent/harness/codex/ask.ts +0 -181
- package/studio/server/agent/harness/codex/command.test.ts +0 -69
- package/studio/server/agent/harness/codex/command.ts +0 -43
- package/studio/server/agent/harness/codex/events.test.ts +0 -94
- package/studio/server/agent/harness/codex/events.ts +0 -132
- package/studio/server/agent/harness/codex/exec.ts +0 -113
- package/studio/server/agent/harness/codex/loadout.ts +0 -60
- package/studio/server/agent/harness/codex/mcp.test.ts +0 -32
- package/studio/server/agent/harness/codex/mcp.ts +0 -27
- package/studio/server/agent/harness/codex/models.test.ts +0 -167
- package/studio/server/agent/harness/codex/models.ts +0 -211
- package/studio/server/agent/harness/codex/skills.ts +0 -33
- package/studio/server/agent/harness/gateway/config.test.ts +0 -98
- package/studio/server/agent/harness/gateway/config.ts +0 -214
- package/studio/server/agent/harness/gateway/token.test.ts +0 -133
- package/studio/server/agent/harness/gateway/token.ts +0 -166
- package/studio/server/agent/harness/mock/adapter.ts +0 -190
- package/studio/server/agent/harness/mock/domain-edit.ts +0 -41
- package/studio/server/agent/harness/process.test.ts +0 -46
- package/studio/server/agent/harness/process.ts +0 -104
- package/studio/server/agent/harness/registry.ts +0 -37
- package/studio/server/agent/harness/selection.test.ts +0 -75
- package/studio/server/agent/harness/selection.ts +0 -85
- package/studio/server/agent/harness/skills.test.ts +0 -95
- package/studio/server/agent/harness/skills.ts +0 -100
- package/studio/server/agent/layout.test.ts +0 -95
- package/studio/server/agent/notify.ts +0 -12
- package/studio/server/agent/prompts/anchors.test.ts +0 -70
- package/studio/server/agent/prompts/anchors.ts +0 -153
- package/studio/server/agent/prompts/ask.ts +0 -34
- package/studio/server/agent/prompts/system.test.ts +0 -13
- package/studio/server/agent/prompts/system.ts +0 -99
- package/studio/server/agent/prompts/turn.ts +0 -66
- package/studio/server/agent/routes.test.ts +0 -176
- package/studio/server/agent/routes.ts +0 -214
- package/studio/server/agent/run/completion.ts +0 -193
- package/studio/server/agent/run/coordinator.test.ts +0 -337
- package/studio/server/agent/run/coordinator.ts +0 -104
- package/studio/server/agent/run/live-state.ts +0 -73
- package/studio/server/agent/run/preparation.ts +0 -163
- package/studio/server/agent/run/transcript.test.ts +0 -81
- package/studio/server/agent/run/transcript.ts +0 -196
- package/studio/server/agent/run/usage.test.ts +0 -70
- package/studio/server/agent/run/usage.ts +0 -62
- package/studio/server/agent/stream.ts +0 -37
- package/studio/server/agent/telemetry.ts +0 -13
- package/studio/server/api/canvas.ts +0 -43
- package/studio/server/api/comments.ts +0 -85
- package/studio/server/api/context.ts +0 -61
- package/studio/server/api/deployment.ts +0 -39
- package/studio/server/api/documents.ts +0 -55
- package/studio/server/api/domain.ts +0 -59
- package/studio/server/api/http.ts +0 -45
- package/studio/server/api/project.ts +0 -57
- package/studio/server/api/schema.ts +0 -12
- package/studio/server/api/views.ts +0 -57
- package/studio/server/api/workspace.ts +0 -60
- package/studio/server/api-agent-loadout.test.ts +0 -69
- package/studio/server/api.test.ts +0 -147
- package/studio/server/api.ts +0 -34
- package/studio/server/cache.test.ts +0 -122
- package/studio/server/cache.ts +0 -303
- package/studio/server/cli-consumers.test.ts +0 -494
- package/studio/server/cli.test.ts +0 -88
- package/studio/server/cli.ts +0 -240
- package/studio/server/client-package.test.ts +0 -147
- package/studio/server/client-package.ts +0 -266
- package/studio/server/detect.ts +0 -81
- package/studio/server/domain.test.ts +0 -77
- package/studio/server/domain.ts +0 -124
- package/studio/server/environment/dotenv-preview.test.ts +0 -39
- package/studio/server/environment/dotenv-preview.ts +0 -27
- package/studio/server/environment/files.test.ts +0 -53
- package/studio/server/environment/files.ts +0 -120
- package/studio/server/handoff/copy.ts +0 -171
- package/studio/server/handoff/service.test.ts +0 -22
- package/studio/server/handoff/service.ts +0 -62
- package/studio/server/index.ts +0 -148
- package/studio/server/instances/active.ts +0 -72
- package/studio/server/instances/deploy-record.test.ts +0 -31
- package/studio/server/instances/deploy-record.ts +0 -37
- package/studio/server/instances/deploy.ts +0 -56
- package/studio/server/instances/probe.test.ts +0 -67
- package/studio/server/instances/probe.ts +0 -67
- package/studio/server/instances/status.test.ts +0 -12
- package/studio/server/instances/status.ts +0 -49
- package/studio/server/introspect/anatomy/client-tree.ts +0 -57
- package/studio/server/introspect/anatomy/env-fields.ts +0 -66
- package/studio/server/introspect/anatomy/schema-definition.ts +0 -53
- package/studio/server/introspect/anatomy/source.ts +0 -181
- package/studio/server/introspect/anatomy/views/routes.ts +0 -114
- package/studio/server/introspect/anatomy/views.ts +0 -53
- package/studio/server/introspect/anatomy-extras.test.ts +0 -265
- package/studio/server/introspect/anatomy-extras.ts +0 -10
- package/studio/server/introspect/anatomy.test.ts +0 -41
- package/studio/server/introspect/anatomy.ts +0 -147
- package/studio/server/introspect/bundle.ts +0 -69
- package/studio/server/introspect/canonical-schema.test.ts +0 -179
- package/studio/server/introspect/canonical-schema.ts +0 -583
- package/studio/server/introspect/config-preview.test.ts +0 -32
- package/studio/server/introspect/config-preview.ts +0 -119
- package/studio/server/introspect/core-extractor.ts +0 -30
- package/studio/server/introspect/core.ts +0 -45
- package/studio/server/introspect/diff.test.ts +0 -124
- package/studio/server/introspect/diff.ts +0 -316
- package/studio/server/introspect/extractor.ts +0 -41
- package/studio/server/introspect/hash.ts +0 -24
- package/studio/server/introspect/overlay-tsmorph.test.ts +0 -146
- package/studio/server/introspect/overlay-tsmorph.ts +0 -9
- package/studio/server/introspect/overlay.test.ts +0 -44
- package/studio/server/introspect/overlay.ts +0 -40
- package/studio/server/introspect/revision.test.ts +0 -54
- package/studio/server/introspect/revision.ts +0 -49
- package/studio/server/introspect/runtime.test.ts +0 -157
- package/studio/server/introspect/runtime.ts +0 -140
- package/studio/server/introspect/schema-ir-json.test.ts +0 -70
- package/studio/server/introspect/schema-ir-json.ts +0 -151
- package/studio/server/introspect/schema-refs.test.ts +0 -55
- package/studio/server/introspect/schema-refs.ts +0 -32
- package/studio/server/introspect/source-overlay/annotations.ts +0 -14
- package/studio/server/introspect/source-overlay/handlers.ts +0 -161
- package/studio/server/introspect/source-overlay/kernel-calls.ts +0 -46
- package/studio/server/introspect/source-overlay/project.ts +0 -248
- package/studio/server/introspect/source-overlay/spans.ts +0 -330
- package/studio/server/json.ts +0 -46
- package/studio/server/lifecycle.ts +0 -42
- package/studio/server/sse.test.ts +0 -26
- package/studio/server/sse.ts +0 -60
- package/studio/server/state/baseline.test.ts +0 -267
- package/studio/server/state/baseline.ts +0 -354
- package/studio/server/state/comments.test.ts +0 -94
- package/studio/server/state/comments.ts +0 -484
- package/studio/server/state/context.ts +0 -199
- package/studio/server/state/documents.ts +0 -111
- package/studio/server/state/integrations.ts +0 -81
- package/studio/server/state/layout.test.ts +0 -34
- package/studio/server/state/layout.ts +0 -82
- package/studio/server/state/settings.test.ts +0 -78
- package/studio/server/state/settings.ts +0 -73
- package/studio/server/state/store.test.ts +0 -122
- package/studio/server/state/store.ts +0 -146
- package/studio/server/state/visibility.ts +0 -48
- package/studio/server/views/model.test.ts +0 -57
- package/studio/server/views/model.ts +0 -66
- package/studio/server/views/runtime.ts +0 -40
- package/studio/server/views/selection-repository.test.ts +0 -31
- package/studio/server/views/selection-repository.ts +0 -60
- package/studio/server/views/session.test.ts +0 -73
- package/studio/server/views/session.ts +0 -166
- package/studio/server/views/target.test.ts +0 -78
- package/studio/server/views/target.ts +0 -222
- package/studio/server/watch.test.ts +0 -36
- package/studio/server/watch.ts +0 -93
- package/studio/server/workspace/catalog.test.ts +0 -17
- package/studio/server/workspace/catalog.ts +0 -43
- package/studio/server/workspace/create.test.ts +0 -37
- package/studio/server/workspace/create.ts +0 -162
- package/studio/server/workspace/git.ts +0 -75
- package/studio/server/workspace/updates.ts +0 -83
- package/studio/server/workspace-state.ts +0 -26
- package/studio/server/workspace-watch.ts +0 -106
- package/studio/shared/agent-effort.test.ts +0 -12
- package/studio/shared/agent-effort.ts +0 -15
- package/studio/shared/agent-models.test.ts +0 -9
- package/studio/shared/agent-models.ts +0 -14
- package/studio/shared/contracts/README.md +0 -16
- package/studio/shared/contracts/agent.ts +0 -270
- package/studio/shared/contracts/runtime.ts +0 -50
- package/studio/shared/contracts/schema.ts +0 -393
- package/studio/shared/contracts/surface.test.ts +0 -317
- package/studio/shared/contracts/workspace.ts +0 -265
- package/studio/shared/layout.test.ts +0 -116
- package/studio/shared/schema/identity.test.ts +0 -34
- package/studio/shared/schema/identity.ts +0 -68
- package/studio/shared/settings-values.test.ts +0 -18
- package/studio/shared/settings-values.ts +0 -20
- package/studio/shared/types.ts +0 -14
- package/studio/tsconfig.json +0 -23
- package/tsconfig.json +0 -14
- package/viewer/dist/index.html +0 -93
- package/viewer/dist/main.js +0 -76
- package/viewer/tsconfig.json +0 -13
|
@@ -1,71 +0,0 @@
|
|
|
1
|
-
import { z } from 'zod';
|
|
2
|
-
export declare const AstraleConfigSchema: z.ZodObject<{
|
|
3
|
-
issuer: z.ZodDefault<z.ZodString>;
|
|
4
|
-
admin: z.ZodDefault<z.ZodEffects<z.ZodObject<{
|
|
5
|
-
name: z.ZodOptional<z.ZodString>;
|
|
6
|
-
url: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
|
|
7
|
-
kernelIssuer: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
|
|
8
|
-
domainIssuer: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
|
|
9
|
-
instance: z.ZodOptional<z.ZodString>;
|
|
10
|
-
}, "strip", z.ZodTypeAny, {
|
|
11
|
-
name?: string | undefined;
|
|
12
|
-
url?: string | undefined;
|
|
13
|
-
kernelIssuer?: string | undefined;
|
|
14
|
-
domainIssuer?: string | undefined;
|
|
15
|
-
instance?: string | undefined;
|
|
16
|
-
}, {
|
|
17
|
-
name?: string | undefined;
|
|
18
|
-
url?: string | undefined;
|
|
19
|
-
kernelIssuer?: string | undefined;
|
|
20
|
-
domainIssuer?: string | undefined;
|
|
21
|
-
instance?: string | undefined;
|
|
22
|
-
}>, {
|
|
23
|
-
name?: string | undefined;
|
|
24
|
-
url?: string | undefined;
|
|
25
|
-
kernelIssuer?: string | undefined;
|
|
26
|
-
domainIssuer?: string | undefined;
|
|
27
|
-
instance?: string | undefined;
|
|
28
|
-
}, {
|
|
29
|
-
name?: string | undefined;
|
|
30
|
-
url?: string | undefined;
|
|
31
|
-
kernelIssuer?: string | undefined;
|
|
32
|
-
domainIssuer?: string | undefined;
|
|
33
|
-
instance?: string | undefined;
|
|
34
|
-
}>>;
|
|
35
|
-
telemetry: z.ZodDefault<z.ZodObject<{
|
|
36
|
-
enabled: z.ZodDefault<z.ZodBoolean>;
|
|
37
|
-
}, "strip", z.ZodTypeAny, {
|
|
38
|
-
enabled: boolean;
|
|
39
|
-
}, {
|
|
40
|
-
enabled?: boolean | undefined;
|
|
41
|
-
}>>;
|
|
42
|
-
}, "strip", z.ZodTypeAny, {
|
|
43
|
-
issuer: string;
|
|
44
|
-
admin: {
|
|
45
|
-
name?: string | undefined;
|
|
46
|
-
url?: string | undefined;
|
|
47
|
-
kernelIssuer?: string | undefined;
|
|
48
|
-
domainIssuer?: string | undefined;
|
|
49
|
-
instance?: string | undefined;
|
|
50
|
-
};
|
|
51
|
-
telemetry: {
|
|
52
|
-
enabled: boolean;
|
|
53
|
-
};
|
|
54
|
-
}, {
|
|
55
|
-
issuer?: string | undefined;
|
|
56
|
-
admin?: {
|
|
57
|
-
name?: string | undefined;
|
|
58
|
-
url?: string | undefined;
|
|
59
|
-
kernelIssuer?: string | undefined;
|
|
60
|
-
domainIssuer?: string | undefined;
|
|
61
|
-
instance?: string | undefined;
|
|
62
|
-
} | undefined;
|
|
63
|
-
telemetry?: {
|
|
64
|
-
enabled?: boolean | undefined;
|
|
65
|
-
} | undefined;
|
|
66
|
-
}>;
|
|
67
|
-
export type AstraleConfig = z.infer<typeof AstraleConfigSchema>;
|
|
68
|
-
export declare const DEFAULT_CONFIG: AstraleConfig;
|
|
69
|
-
export declare function readConfig(): Promise<AstraleConfig>;
|
|
70
|
-
export declare function writeConfig(config: AstraleConfig): Promise<void>;
|
|
71
|
-
export declare function configExists(): Promise<boolean>;
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export declare function printFailureDebug(error: unknown, url: string): void;
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
export declare function formatElapsed(ms: number): string;
|
|
@@ -1,33 +0,0 @@
|
|
|
1
|
-
import { type IdpSession } from './idp';
|
|
2
|
-
/** No cached session file exists for the identity — only a login creates one. */
|
|
3
|
-
export declare class IdpSessionMissingError extends Error {
|
|
4
|
-
readonly identityName: string;
|
|
5
|
-
constructor(identityName: string);
|
|
6
|
-
}
|
|
7
|
-
/** The session needs a refresh but never received a refresh token. */
|
|
8
|
-
export declare class IdpSessionNoRefreshTokenError extends Error {
|
|
9
|
-
readonly identityName: string;
|
|
10
|
-
constructor(identityName: string);
|
|
11
|
-
}
|
|
12
|
-
export type EnsureFreshSessionOptions = {
|
|
13
|
-
audience?: string;
|
|
14
|
-
organizationId?: string;
|
|
15
|
-
/**
|
|
16
|
-
* Org-hint resolver, consulted only when a refresh actually happens.
|
|
17
|
-
* Defaults to `fetchOrgHint`; injectable for tests.
|
|
18
|
-
*/
|
|
19
|
-
resolveOrganizationId?: (audience: string) => Promise<string | undefined>;
|
|
20
|
-
};
|
|
21
|
-
export declare function idpSessionLockPath(identityName: string): string;
|
|
22
|
-
/**
|
|
23
|
-
* Return a session holding a fresh access token for `audience`, refreshing it
|
|
24
|
-
* if needed. This is the ONLY correct way to refresh: WorkOS refresh tokens
|
|
25
|
-
* are single-use, so two processes refreshing concurrently burn the same
|
|
26
|
-
* token — the loser's `invalid_grant` can revoke the whole upstream session.
|
|
27
|
-
* All refreshes therefore serialize on a per-identity file lock, and waiters
|
|
28
|
-
* re-read the rotated session instead of re-exchanging.
|
|
29
|
-
*
|
|
30
|
-
* `IdpAudienceMismatchError` propagates verbatim (the session is healthy; the
|
|
31
|
-
* IdP just won't mint that audience).
|
|
32
|
-
*/
|
|
33
|
-
export declare function ensureFreshSession(identityName: string, opts?: EnsureFreshSessionOptions): Promise<IdpSession>;
|
package/dist/types/lib/idp.d.ts
DELETED
|
@@ -1,404 +0,0 @@
|
|
|
1
|
-
import { type JWTPayload } from 'jose';
|
|
2
|
-
import { z } from 'zod';
|
|
3
|
-
/**
|
|
4
|
-
* Thrown when a refresh succeeds but the IdP mints an access token whose `aud`
|
|
5
|
-
* does not match the one the caller requested. Distinct from a transport/grant
|
|
6
|
-
* failure: the session is *healthy*, the IdP simply will not issue that
|
|
7
|
-
* audience (e.g. WorkOS AuthKit ignores the `audience` param and stamps a fixed
|
|
8
|
-
* API audience per environment). Re-login does not help — callers must target
|
|
9
|
-
* an instance whose audience equals `actual`, or reconfigure the IdP/bookmark.
|
|
10
|
-
*/
|
|
11
|
-
export declare class IdpAudienceMismatchError extends Error {
|
|
12
|
-
readonly requested: string;
|
|
13
|
-
readonly actual: string | undefined;
|
|
14
|
-
constructor(requested: string, actual: string | undefined);
|
|
15
|
-
}
|
|
16
|
-
/**
|
|
17
|
-
* A token-endpoint request that the IdP answered with an OAuth error (or that
|
|
18
|
-
* failed at the HTTP layer). Carries the structured OAuth `error` code so
|
|
19
|
-
* callers can tell a definitively dead grant (`invalid_grant`) from a
|
|
20
|
-
* transient outage — the message string alone cannot.
|
|
21
|
-
*/
|
|
22
|
-
export declare class OAuthTokenError extends Error {
|
|
23
|
-
/** OAuth `error` code, e.g. `invalid_grant`. */
|
|
24
|
-
readonly code?: string;
|
|
25
|
-
/** OAuth `error_description`. */
|
|
26
|
-
readonly description?: string;
|
|
27
|
-
/** HTTP status of the token response. */
|
|
28
|
-
readonly status?: number;
|
|
29
|
-
constructor(args: {
|
|
30
|
-
code?: string;
|
|
31
|
-
description?: string;
|
|
32
|
-
status?: number;
|
|
33
|
-
});
|
|
34
|
-
}
|
|
35
|
-
export type RefreshFailureKind = 'session-ended' | 'org-rejected' | 'transient' | 'unknown';
|
|
36
|
-
/**
|
|
37
|
-
* Classify a `refreshSession` failure so callers only demand a re-login when
|
|
38
|
-
* the grant is actually dead. `org-rejected` = healthy session, wrong/stale
|
|
39
|
-
* org scope (re-login can't fix it); 5xx/429 and fetch-layer failures are
|
|
40
|
-
* transient — the cached session is likely still valid.
|
|
41
|
-
*/
|
|
42
|
-
export declare function classifyRefreshFailure(e: unknown): RefreshFailureKind;
|
|
43
|
-
export declare const OidcMetadataSchema: z.ZodObject<{
|
|
44
|
-
issuer: z.ZodString;
|
|
45
|
-
authorization_endpoint: z.ZodOptional<z.ZodString>;
|
|
46
|
-
token_endpoint: z.ZodString;
|
|
47
|
-
jwks_uri: z.ZodString;
|
|
48
|
-
device_authorization_endpoint: z.ZodOptional<z.ZodString>;
|
|
49
|
-
revocation_endpoint: z.ZodOptional<z.ZodString>;
|
|
50
|
-
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
51
|
-
grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
52
|
-
response_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
53
|
-
code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
54
|
-
}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
|
|
55
|
-
issuer: z.ZodString;
|
|
56
|
-
authorization_endpoint: z.ZodOptional<z.ZodString>;
|
|
57
|
-
token_endpoint: z.ZodString;
|
|
58
|
-
jwks_uri: z.ZodString;
|
|
59
|
-
device_authorization_endpoint: z.ZodOptional<z.ZodString>;
|
|
60
|
-
revocation_endpoint: z.ZodOptional<z.ZodString>;
|
|
61
|
-
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
62
|
-
grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
63
|
-
response_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
64
|
-
code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
65
|
-
}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
|
|
66
|
-
issuer: z.ZodString;
|
|
67
|
-
authorization_endpoint: z.ZodOptional<z.ZodString>;
|
|
68
|
-
token_endpoint: z.ZodString;
|
|
69
|
-
jwks_uri: z.ZodString;
|
|
70
|
-
device_authorization_endpoint: z.ZodOptional<z.ZodString>;
|
|
71
|
-
revocation_endpoint: z.ZodOptional<z.ZodString>;
|
|
72
|
-
scopes_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
73
|
-
grant_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
74
|
-
response_types_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
75
|
-
code_challenge_methods_supported: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
76
|
-
}, z.ZodTypeAny, "passthrough">>;
|
|
77
|
-
export type OidcMetadata = z.infer<typeof OidcMetadataSchema>;
|
|
78
|
-
export declare const IdpClientConfigSchema: z.ZodObject<{
|
|
79
|
-
client_id: z.ZodOptional<z.ZodString>;
|
|
80
|
-
client_secret_env: z.ZodOptional<z.ZodString>;
|
|
81
|
-
redirect_uris: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
82
|
-
scope: z.ZodOptional<z.ZodString>;
|
|
83
|
-
public: z.ZodOptional<z.ZodBoolean>;
|
|
84
|
-
token_response: z.ZodOptional<z.ZodEnum<["oauth", "workos-authkit"]>>;
|
|
85
|
-
token_request_format: z.ZodOptional<z.ZodEnum<["form", "json"]>>;
|
|
86
|
-
workos_application_id: z.ZodOptional<z.ZodString>;
|
|
87
|
-
workos_application_type: z.ZodOptional<z.ZodEnum<["oauth", "m2m"]>>;
|
|
88
|
-
}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
|
|
89
|
-
client_id: z.ZodOptional<z.ZodString>;
|
|
90
|
-
client_secret_env: z.ZodOptional<z.ZodString>;
|
|
91
|
-
redirect_uris: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
92
|
-
scope: z.ZodOptional<z.ZodString>;
|
|
93
|
-
public: z.ZodOptional<z.ZodBoolean>;
|
|
94
|
-
token_response: z.ZodOptional<z.ZodEnum<["oauth", "workos-authkit"]>>;
|
|
95
|
-
token_request_format: z.ZodOptional<z.ZodEnum<["form", "json"]>>;
|
|
96
|
-
workos_application_id: z.ZodOptional<z.ZodString>;
|
|
97
|
-
workos_application_type: z.ZodOptional<z.ZodEnum<["oauth", "m2m"]>>;
|
|
98
|
-
}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
|
|
99
|
-
client_id: z.ZodOptional<z.ZodString>;
|
|
100
|
-
client_secret_env: z.ZodOptional<z.ZodString>;
|
|
101
|
-
redirect_uris: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
102
|
-
scope: z.ZodOptional<z.ZodString>;
|
|
103
|
-
public: z.ZodOptional<z.ZodBoolean>;
|
|
104
|
-
token_response: z.ZodOptional<z.ZodEnum<["oauth", "workos-authkit"]>>;
|
|
105
|
-
token_request_format: z.ZodOptional<z.ZodEnum<["form", "json"]>>;
|
|
106
|
-
workos_application_id: z.ZodOptional<z.ZodString>;
|
|
107
|
-
workos_application_type: z.ZodOptional<z.ZodEnum<["oauth", "m2m"]>>;
|
|
108
|
-
}, z.ZodTypeAny, "passthrough">>;
|
|
109
|
-
export type IdpClientConfig = z.infer<typeof IdpClientConfigSchema>;
|
|
110
|
-
export declare const IdpIndexEntrySchema: z.ZodObject<{
|
|
111
|
-
issuer: z.ZodString;
|
|
112
|
-
builtIn: z.ZodOptional<z.ZodBoolean>;
|
|
113
|
-
createdAt: z.ZodString;
|
|
114
|
-
updatedAt: z.ZodString;
|
|
115
|
-
}, "strip", z.ZodTypeAny, {
|
|
116
|
-
issuer: string;
|
|
117
|
-
builtIn?: boolean | undefined;
|
|
118
|
-
createdAt: string;
|
|
119
|
-
updatedAt: string;
|
|
120
|
-
}, {
|
|
121
|
-
issuer: string;
|
|
122
|
-
builtIn?: boolean | undefined;
|
|
123
|
-
createdAt: string;
|
|
124
|
-
updatedAt: string;
|
|
125
|
-
}>;
|
|
126
|
-
export declare const IdpStoreSchema: z.ZodObject<{
|
|
127
|
-
idps: z.ZodRecord<z.ZodString, z.ZodObject<{
|
|
128
|
-
issuer: z.ZodString;
|
|
129
|
-
builtIn: z.ZodOptional<z.ZodBoolean>;
|
|
130
|
-
createdAt: z.ZodString;
|
|
131
|
-
updatedAt: z.ZodString;
|
|
132
|
-
}, "strip", z.ZodTypeAny, {
|
|
133
|
-
issuer: string;
|
|
134
|
-
builtIn?: boolean | undefined;
|
|
135
|
-
createdAt: string;
|
|
136
|
-
updatedAt: string;
|
|
137
|
-
}, {
|
|
138
|
-
issuer: string;
|
|
139
|
-
builtIn?: boolean | undefined;
|
|
140
|
-
createdAt: string;
|
|
141
|
-
updatedAt: string;
|
|
142
|
-
}>>;
|
|
143
|
-
}, "strip", z.ZodTypeAny, {
|
|
144
|
-
idps: Record<string, {
|
|
145
|
-
issuer: string;
|
|
146
|
-
builtIn?: boolean | undefined;
|
|
147
|
-
createdAt: string;
|
|
148
|
-
updatedAt: string;
|
|
149
|
-
}>;
|
|
150
|
-
}, {
|
|
151
|
-
idps: Record<string, {
|
|
152
|
-
issuer: string;
|
|
153
|
-
builtIn?: boolean | undefined;
|
|
154
|
-
createdAt: string;
|
|
155
|
-
updatedAt: string;
|
|
156
|
-
}>;
|
|
157
|
-
}>;
|
|
158
|
-
export type IdpStore = z.infer<typeof IdpStoreSchema>;
|
|
159
|
-
export type IdpIndexEntry = z.infer<typeof IdpIndexEntrySchema>;
|
|
160
|
-
export declare const IdpSessionSchema: z.ZodObject<{
|
|
161
|
-
identity: z.ZodString;
|
|
162
|
-
idp: z.ZodString;
|
|
163
|
-
issuer: z.ZodString;
|
|
164
|
-
subject: z.ZodString;
|
|
165
|
-
/** OAuth client that issued this session's refresh token. */
|
|
166
|
-
clientId: z.ZodOptional<z.ZodString>;
|
|
167
|
-
audience: z.ZodOptional<z.ZodString>;
|
|
168
|
-
organizationId: z.ZodOptional<z.ZodString>;
|
|
169
|
-
access_token: z.ZodString;
|
|
170
|
-
id_token: z.ZodOptional<z.ZodString>;
|
|
171
|
-
refresh_token: z.ZodOptional<z.ZodString>;
|
|
172
|
-
token_type: z.ZodOptional<z.ZodString>;
|
|
173
|
-
scope: z.ZodOptional<z.ZodString>;
|
|
174
|
-
expires_at: z.ZodOptional<z.ZodString>;
|
|
175
|
-
claims: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
|
|
176
|
-
/**
|
|
177
|
-
* Access tokens by audience. WorkOS mints one `aud` per token, so a
|
|
178
|
-
* session juggling several instances would otherwise burn a (single-use)
|
|
179
|
-
* refresh-token rotation on every instance flip. The top-level
|
|
180
|
-
* `access_token`/`expires_at` stay the most recently minted token for
|
|
181
|
-
* back-compat with older CLI builds.
|
|
182
|
-
*/
|
|
183
|
-
tokens: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
|
|
184
|
-
access_token: z.ZodString;
|
|
185
|
-
expires_at: z.ZodOptional<z.ZodString>;
|
|
186
|
-
}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
|
|
187
|
-
access_token: z.ZodString;
|
|
188
|
-
expires_at: z.ZodOptional<z.ZodString>;
|
|
189
|
-
}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
|
|
190
|
-
access_token: z.ZodString;
|
|
191
|
-
expires_at: z.ZodOptional<z.ZodString>;
|
|
192
|
-
}, z.ZodTypeAny, "passthrough">>>>;
|
|
193
|
-
updatedAt: z.ZodString;
|
|
194
|
-
}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
|
|
195
|
-
identity: z.ZodString;
|
|
196
|
-
idp: z.ZodString;
|
|
197
|
-
issuer: z.ZodString;
|
|
198
|
-
subject: z.ZodString;
|
|
199
|
-
/** OAuth client that issued this session's refresh token. */
|
|
200
|
-
clientId: z.ZodOptional<z.ZodString>;
|
|
201
|
-
audience: z.ZodOptional<z.ZodString>;
|
|
202
|
-
organizationId: z.ZodOptional<z.ZodString>;
|
|
203
|
-
access_token: z.ZodString;
|
|
204
|
-
id_token: z.ZodOptional<z.ZodString>;
|
|
205
|
-
refresh_token: z.ZodOptional<z.ZodString>;
|
|
206
|
-
token_type: z.ZodOptional<z.ZodString>;
|
|
207
|
-
scope: z.ZodOptional<z.ZodString>;
|
|
208
|
-
expires_at: z.ZodOptional<z.ZodString>;
|
|
209
|
-
claims: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
|
|
210
|
-
/**
|
|
211
|
-
* Access tokens by audience. WorkOS mints one `aud` per token, so a
|
|
212
|
-
* session juggling several instances would otherwise burn a (single-use)
|
|
213
|
-
* refresh-token rotation on every instance flip. The top-level
|
|
214
|
-
* `access_token`/`expires_at` stay the most recently minted token for
|
|
215
|
-
* back-compat with older CLI builds.
|
|
216
|
-
*/
|
|
217
|
-
tokens: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
|
|
218
|
-
access_token: z.ZodString;
|
|
219
|
-
expires_at: z.ZodOptional<z.ZodString>;
|
|
220
|
-
}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
|
|
221
|
-
access_token: z.ZodString;
|
|
222
|
-
expires_at: z.ZodOptional<z.ZodString>;
|
|
223
|
-
}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
|
|
224
|
-
access_token: z.ZodString;
|
|
225
|
-
expires_at: z.ZodOptional<z.ZodString>;
|
|
226
|
-
}, z.ZodTypeAny, "passthrough">>>>;
|
|
227
|
-
updatedAt: z.ZodString;
|
|
228
|
-
}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
|
|
229
|
-
identity: z.ZodString;
|
|
230
|
-
idp: z.ZodString;
|
|
231
|
-
issuer: z.ZodString;
|
|
232
|
-
subject: z.ZodString;
|
|
233
|
-
/** OAuth client that issued this session's refresh token. */
|
|
234
|
-
clientId: z.ZodOptional<z.ZodString>;
|
|
235
|
-
audience: z.ZodOptional<z.ZodString>;
|
|
236
|
-
organizationId: z.ZodOptional<z.ZodString>;
|
|
237
|
-
access_token: z.ZodString;
|
|
238
|
-
id_token: z.ZodOptional<z.ZodString>;
|
|
239
|
-
refresh_token: z.ZodOptional<z.ZodString>;
|
|
240
|
-
token_type: z.ZodOptional<z.ZodString>;
|
|
241
|
-
scope: z.ZodOptional<z.ZodString>;
|
|
242
|
-
expires_at: z.ZodOptional<z.ZodString>;
|
|
243
|
-
claims: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
|
|
244
|
-
/**
|
|
245
|
-
* Access tokens by audience. WorkOS mints one `aud` per token, so a
|
|
246
|
-
* session juggling several instances would otherwise burn a (single-use)
|
|
247
|
-
* refresh-token rotation on every instance flip. The top-level
|
|
248
|
-
* `access_token`/`expires_at` stay the most recently minted token for
|
|
249
|
-
* back-compat with older CLI builds.
|
|
250
|
-
*/
|
|
251
|
-
tokens: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
|
|
252
|
-
access_token: z.ZodString;
|
|
253
|
-
expires_at: z.ZodOptional<z.ZodString>;
|
|
254
|
-
}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
|
|
255
|
-
access_token: z.ZodString;
|
|
256
|
-
expires_at: z.ZodOptional<z.ZodString>;
|
|
257
|
-
}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
|
|
258
|
-
access_token: z.ZodString;
|
|
259
|
-
expires_at: z.ZodOptional<z.ZodString>;
|
|
260
|
-
}, z.ZodTypeAny, "passthrough">>>>;
|
|
261
|
-
updatedAt: z.ZodString;
|
|
262
|
-
}, z.ZodTypeAny, "passthrough">>;
|
|
263
|
-
export type IdpSession = z.infer<typeof IdpSessionSchema>;
|
|
264
|
-
export type TokenResponse = {
|
|
265
|
-
access_token?: string;
|
|
266
|
-
accessToken?: string;
|
|
267
|
-
id_token?: string;
|
|
268
|
-
idToken?: string;
|
|
269
|
-
refresh_token?: string;
|
|
270
|
-
refreshToken?: string;
|
|
271
|
-
token_type?: string;
|
|
272
|
-
scope?: string;
|
|
273
|
-
expires_in?: number;
|
|
274
|
-
expiresIn?: number;
|
|
275
|
-
user?: {
|
|
276
|
-
id?: string;
|
|
277
|
-
[key: string]: unknown;
|
|
278
|
-
};
|
|
279
|
-
organization_id?: string;
|
|
280
|
-
authentication_method?: string;
|
|
281
|
-
error?: string;
|
|
282
|
-
error_description?: string;
|
|
283
|
-
[key: string]: unknown;
|
|
284
|
-
};
|
|
285
|
-
export type DeviceAuthorizationResponse = {
|
|
286
|
-
device_code: string;
|
|
287
|
-
user_code?: string;
|
|
288
|
-
verification_uri?: string;
|
|
289
|
-
verification_uri_complete?: string;
|
|
290
|
-
expires_in: number;
|
|
291
|
-
interval?: number;
|
|
292
|
-
message?: string;
|
|
293
|
-
[key: string]: unknown;
|
|
294
|
-
};
|
|
295
|
-
export type IdpConfig = {
|
|
296
|
-
name: string;
|
|
297
|
-
entry: IdpIndexEntry;
|
|
298
|
-
metadata: OidcMetadata;
|
|
299
|
-
client: IdpClientConfig;
|
|
300
|
-
};
|
|
301
|
-
export declare const BUILTIN_WORKOS_IDP_NAME = "workos";
|
|
302
|
-
export declare function idpDir(name: string): string;
|
|
303
|
-
export declare function idpMetadataPath(name: string): string;
|
|
304
|
-
export declare function idpClientPath(name: string): string;
|
|
305
|
-
export declare function idpSessionPath(identityName: string): string;
|
|
306
|
-
export declare function readIdpStore(): Promise<IdpStore>;
|
|
307
|
-
export declare function writeIdpStore(store: IdpStore): Promise<void>;
|
|
308
|
-
export declare function readIdpConfig(name: string): Promise<IdpConfig>;
|
|
309
|
-
export declare function readIdpConfigOrBuiltin(name: string, opts?: {
|
|
310
|
-
clientId?: string;
|
|
311
|
-
persist?: boolean;
|
|
312
|
-
}): Promise<IdpConfig>;
|
|
313
|
-
export declare function listIdpConfigs(): Promise<IdpConfig[]>;
|
|
314
|
-
export declare function upsertIdpConfig(args: {
|
|
315
|
-
name: string;
|
|
316
|
-
metadata: OidcMetadata;
|
|
317
|
-
client?: IdpClientConfig;
|
|
318
|
-
builtIn?: boolean;
|
|
319
|
-
}): Promise<IdpConfig>;
|
|
320
|
-
export declare function removeIdpConfig(name: string): Promise<void>;
|
|
321
|
-
export declare function fetchOidcMetadata(issuer: string): Promise<OidcMetadata>;
|
|
322
|
-
export declare function workosAuthKitMetadata(apiHost?: string, clientId?: string): OidcMetadata;
|
|
323
|
-
export declare function builtinIdpConfig(name: string, clientIdOverride?: string, env?: NodeJS.ProcessEnv): IdpConfig | null;
|
|
324
|
-
export declare function workosClientIdFromEnv(env?: NodeJS.ProcessEnv): string | undefined;
|
|
325
|
-
export declare function legacyBuiltinWorkosReplacement(existing: IdpConfig, clientIdOverride?: string, env?: NodeJS.ProcessEnv): IdpConfig | undefined;
|
|
326
|
-
export declare function postForm(url: string, params: URLSearchParams): Promise<TokenResponse>;
|
|
327
|
-
export declare function postJson(url: string, bodyInput: Record<string, string>): Promise<TokenResponse>;
|
|
328
|
-
export declare function tokenExpiresAt(token: TokenResponse): string | undefined;
|
|
329
|
-
export declare function decodeTokenClaims(token: string | undefined): JWTPayload | undefined;
|
|
330
|
-
export declare function tokenAudienceMatches(token: string | undefined, audience: string): boolean;
|
|
331
|
-
export declare function subjectFromToken(token: TokenResponse, fallback: string): string;
|
|
332
|
-
export declare function issuerFromToken(token: TokenResponse, fallback: string): string;
|
|
333
|
-
export declare function normalizeTokenResponse(token: TokenResponse): TokenResponse;
|
|
334
|
-
export declare function identityNameFromClaims(claims: JWTPayload | undefined, fallback: string): string;
|
|
335
|
-
export declare function saveIdpSession(session: IdpSession): Promise<void>;
|
|
336
|
-
export declare function readIdpSession(identityName: string): Promise<IdpSession | null>;
|
|
337
|
-
export declare function deleteIdpSession(identityName: string): Promise<void>;
|
|
338
|
-
export declare function listIdpSessions(): Promise<IdpSession[]>;
|
|
339
|
-
export declare function isSessionExpired(session: Pick<IdpSession, 'expires_at'> & {
|
|
340
|
-
access_token?: string;
|
|
341
|
-
}, skewMs?: number): boolean;
|
|
342
|
-
/**
|
|
343
|
-
* A still-fresh access token usable for `audience`, or undefined when a
|
|
344
|
-
* refresh is needed. Checks the per-audience `tokens` map first, then the
|
|
345
|
-
* top-level token's own `aud` claim. Without an `audience`, freshness of the
|
|
346
|
-
* top-level token is the only requirement.
|
|
347
|
-
*/
|
|
348
|
-
export declare function accessTokenForAudience(session: IdpSession, audience?: string): string | undefined;
|
|
349
|
-
/**
|
|
350
|
-
* Fold a freshly minted access token into the per-audience map under every
|
|
351
|
-
* `aud` it carries, dropping entries that have already expired.
|
|
352
|
-
*/
|
|
353
|
-
export declare function withCachedToken(tokens: IdpSession['tokens'], accessToken: string, expiresAt: string | undefined): IdpSession['tokens'];
|
|
354
|
-
export declare function requireClientId(idp: IdpConfig, override?: string): string;
|
|
355
|
-
export declare function resolveClientSecret(idp: IdpConfig, overrideEnv?: string): string | undefined;
|
|
356
|
-
export declare function refreshSession(identityName: string, session: IdpSession, opts?: {
|
|
357
|
-
readonly audience?: string;
|
|
358
|
-
readonly organizationId?: string;
|
|
359
|
-
}): Promise<IdpSession>;
|
|
360
|
-
export declare function requestClientCredentials(args: {
|
|
361
|
-
idp: IdpConfig;
|
|
362
|
-
clientId?: string;
|
|
363
|
-
clientSecretEnv?: string;
|
|
364
|
-
scope?: string;
|
|
365
|
-
audience?: string;
|
|
366
|
-
}): Promise<TokenResponse>;
|
|
367
|
-
export declare function requestDeviceAuthorization(args: {
|
|
368
|
-
idp: IdpConfig;
|
|
369
|
-
clientId?: string;
|
|
370
|
-
scope?: string;
|
|
371
|
-
audience?: string;
|
|
372
|
-
}): Promise<DeviceAuthorizationResponse>;
|
|
373
|
-
export declare function pollDeviceToken(args: {
|
|
374
|
-
idp: IdpConfig;
|
|
375
|
-
deviceCode: string;
|
|
376
|
-
clientId?: string;
|
|
377
|
-
clientSecretEnv?: string;
|
|
378
|
-
intervalSec?: number;
|
|
379
|
-
expiresInSec: number;
|
|
380
|
-
}): Promise<TokenResponse>;
|
|
381
|
-
export declare function exchangeAuthorizationCode(args: {
|
|
382
|
-
idp: IdpConfig;
|
|
383
|
-
code: string;
|
|
384
|
-
redirectUri: string;
|
|
385
|
-
codeVerifier?: string;
|
|
386
|
-
clientId?: string;
|
|
387
|
-
clientSecretEnv?: string;
|
|
388
|
-
}): Promise<TokenResponse>;
|
|
389
|
-
export type WorkosApplication = {
|
|
390
|
-
id: string;
|
|
391
|
-
client_id?: string;
|
|
392
|
-
name?: string;
|
|
393
|
-
application_type?: 'oauth' | 'm2m';
|
|
394
|
-
scopes?: string[];
|
|
395
|
-
redirect_uris?: Array<{
|
|
396
|
-
uri?: string;
|
|
397
|
-
default?: boolean;
|
|
398
|
-
}>;
|
|
399
|
-
uses_pkce?: boolean;
|
|
400
|
-
};
|
|
401
|
-
export declare function fetchWorkosApplication(args: {
|
|
402
|
-
apiKeyEnv: string;
|
|
403
|
-
app: string;
|
|
404
|
-
}): Promise<WorkosApplication>;
|
|
@@ -1,38 +0,0 @@
|
|
|
1
|
-
import type { AstraleConfig } from './config';
|
|
2
|
-
import { type InstanceInfo } from '../admin/instance/model';
|
|
3
|
-
import { type AdminTargetCommandOpts, type ResolvedAdminTarget } from './admin-target';
|
|
4
|
-
import { type InstanceStore } from './instance';
|
|
5
|
-
export type InstanceTargetRequest = {
|
|
6
|
-
source: 'active';
|
|
7
|
-
} | {
|
|
8
|
-
source: 'name';
|
|
9
|
-
name: string;
|
|
10
|
-
} | {
|
|
11
|
-
source: 'admin';
|
|
12
|
-
} | {
|
|
13
|
-
source: 'url';
|
|
14
|
-
url: string;
|
|
15
|
-
name?: string;
|
|
16
|
-
kernelIssuer?: string;
|
|
17
|
-
};
|
|
18
|
-
export type ResolvedInstanceTarget = {
|
|
19
|
-
name?: string;
|
|
20
|
-
source: 'bookmark' | 'managed' | 'admin' | 'url';
|
|
21
|
-
url: string;
|
|
22
|
-
kernelIssuer: string;
|
|
23
|
-
domainIssuer?: string;
|
|
24
|
-
defaultIdentity?: string;
|
|
25
|
-
caFile?: string;
|
|
26
|
-
};
|
|
27
|
-
export type ResolveInstanceTargetOpts = {
|
|
28
|
-
config: AstraleConfig;
|
|
29
|
-
instances?: InstanceStore;
|
|
30
|
-
admin?: AdminTargetCommandOpts;
|
|
31
|
-
managed?: (slug: string) => Promise<InstanceInfo>;
|
|
32
|
-
};
|
|
33
|
-
export declare function resolveInstanceTarget(request: InstanceTargetRequest, opts: ResolveInstanceTargetOpts): Promise<ResolvedInstanceTarget>;
|
|
34
|
-
export declare function couldBeConfiguredAdminInstance(identifier: string, config: AstraleConfig): boolean;
|
|
35
|
-
export declare function adminTargetToInstance(target: ResolvedAdminTarget): ResolvedInstanceTarget;
|
|
36
|
-
/** Admin lookup failed before it could say whether the slug exists. */
|
|
37
|
-
export declare function isAdminDiscoveryFailure(error: unknown): boolean;
|
|
38
|
-
export declare function isManagedInstanceNotFound(error: unknown): boolean;
|